Hi,
I have a CCR1036 running v6.42.4 and configured with BGP routing. It works perfectly, except I can’t reach the outside directly.
For example, I can’t simply ping 8.8.8.8 :
[admin@router] > ping 8.8.8.8
SEQ HOST SIZE TTL TIME STATUS
0 no route to host
1 no route to host
sent=2 received=0 packet-loss=100%
Instead if I set a source address it works:
[admin@router] > ping 8.8.8.8 src-address=my.public.ip.address
SEQ HOST SIZE TTL TIME STATUS
0 8.8.8.8 56 120 25ms
1 8.8.8.8 56 120 25ms
sent=2 received=2 packet-loss=0% min-rtt=25ms avg-rtt=25ms max-rtt=25ms
The router is reachable from the outside and routes everything as it should. The public IP is assigned to the main bridge and all the hosts with public address use it as a gateway. It’s a /24 subnet.
Also, I’m currently NATting some private network and they can surf with absolutely no problem and are visible as “my.public.ip.address” from external hosts.
[admin@router] > /ip firewall nat export terse
# (hidden info)
/ip firewall nat add action=same chain=srcnat same-not-by-dst=no src-address=10.10.48.0/20 to-addresses=my.public.ip.address
/ip firewall nat add action=same chain=srcnat same-not-by-dst=no src-address=10.10.16.0/20 to-addresses=my.public.ip.address
What am I missing?
Thank you in advance!
Anumrak
September 28, 2018, 11:11am
2
Print you route list and firewall nat please.
I have the exact same issue. Have you managed to solve this situation?
I don’t have any NAT’s in my BGP box, just the BGP session trough a VLAN, and a bypass of another (legacy) VLAN.
my config:
/interface bridge
/ipv6 address
/routing bgp network