Unidentified Network Problem

RouterOS General
1

Please I Need Help In This
My Diagram is like this
Main Router 1100 Which Receive the bandwidth from the provider inside it bridge that will be connect Radius - dns- Log- PPPOE
PPPOE 1016 the problem is whither the client connected pppoe or static ip it always give alarm that unidentified network but the internet is working
is there any idea why and how to solve it i already upgraded RB to the last update
Please Help
Thanks


Untitled.jpg

2

DNS - needs to be valid and capable of resolving correctly.
Proxy ARP - remove any usage of it.
MTU - make sure your MTU is consistent through your environment. Being a PPPoE service it’s possible your external MTU is not 1500 and your internal is. If you haven’t accounted for that it could break TLS sessions and sites.

3

Thanks For The Reply
My DNS is Public 8.8.8.8
i stopped the proxy in case of its affecting
my MTU IF 1492
the only thing i did and it helped but affect other thing is i stopped all the dest nat and source nat i left only the main nat that is redirect the clients to the main router
but up to now i could not find the main reason for this prolem

4

Are you able to provide a list of those NAT rules?

5

ok now i reached a point to know what is the cause but no idea why

 ;;; Real
      chain=srcnat action=src-nat to-addresses=182.1.1.15 src-address-list=pool log=no log-prefix="" 

 ;;; Cache Redirect
      chain=dstnat action=dst-nat to-addresses=182.1.1.80 to-ports=8080 protocol=tcp dst-port=80 log=no log-prefix=""

the first one is to direct all request to the main router and the second nat is to direct all http traffic to my cache proxy
when i put the proxy nat before src nat it will give me the unidentified network error when i disable it it will disappear
now im trying to put the dst under im not getting the error but when a client connect to the network he get just like hotspot (additional option required ) and its pointing to open browser yet the browser
these 2 rules are all what i have in my nat

6

Just I said once i Enable the dst nat for the proxy the unidentified network error appear
help!!!

7

I’m thinking: when a client (e.g. 192.168.88.42 … the real IP doesn’t matter, just let’s assume it’s from “pool” address list) tries to open a http page (e.g. www.goipv6.com at 50.63.202.70), it will hit your NAT rules:

  1. srcnat rule will change SRC address of a packet to 182.1.1.15, while DST address will remain 50.63.202.70
  2. dstnat rule will change DST address to 182.1.1.80, while SRC address will remain 182.1.1.15 (as changed by previous NAT rule

After that packet will hopefully leave your router through interface that can connect 182.1.1.80.

Now you have to ask yourself what does the cache proxy do with packet (seemingly) originating from 182.1.1.15.

8

i changed my configuration to this

;;; Cache Redirect
      chain=dstnat action=netmap to-addresses=182.1.1.80 to-ports=8080 
      protocol=tcp src-address=12.12.10.0/24 in-interface=!ether1-Real 
      dst-port=80 log=no log-prefix="" 

50    chain=dstnat action=netmap to-addresses=182.1.1.80 to-ports=8080 
      protocol=tcp src-address=172.16.16.0/24 in-interface=!ether1-Real 
      dst-port=80 log=no log-prefix="" 

51    chain=dstnat action=netmap to-addresses=182.1.1.80 to-ports=8080 
      protocol=tcp src-address=10.0.0.0/20 in-interface=!ether1-Real 
      dst-port=80 log=no log-prefix="" 

52    chain=dstnat action=netmap to-addresses=182.1.1.80 to-ports=8080 
      protocol=tcp src-address=172.10.0.0/20 in-interface=!ether1-Real 
      dst-port=80 log=no log-prefix="" 

53    chain=dstnat action=netmap to-addresses=182.1.1.80 to-ports=8080 
      protocol=tcp src-address=20.20.20.0/24 in-interface=!ether1-Real 
      dst-port=80 log=no log-prefix="" 

54    chain=dstnat action=netmap to-addresses=182.1.1.80 to-ports=8080 
      protocol=tcp src-address=192.0.0.0/24 in-interface=!ether1-Real 
      dst-port=80 log=no log-prefix="" 

55    ;;; Real
      chain=srcnat action=src-nat to-addresses=182.1.1.15 
      src-address=12.12.10.0/24 out-interface=ether1-Real log=no log-prefix="" 

56    chain=srcnat action=src-nat to-addresses=182.1.1.15 
      src-address=172.16.16.0/24 out-interface=ether1-Real log=no log-prefix="" 

57    chain=srcnat action=src-nat to-addresses=182.1.1.15 src-address=10.0.0.0/2>
      out-interface=ether1-Real log=no log-prefix="" 

58    chain=srcnat action=src-nat to-addresses=182.1.1.15 
      src-address=172.10.0.0/20 out-interface=ether1-Real log=no log-prefix="" 

59    chain=srcnat action=src-nat to-addresses=182.1.1.15 
      src-address=20.20.20.0/24 out-interface=ether1-Real log=no log-prefix="" 

60    chain=srcnat action=src-nat to-addresses=182.1.1.15 
      src-address=192.0.0.0/24 out-interface=ether1-Real log=no log-prefix=""

up to know ok im still testing it