Community discussions

MikroTik App
 
Jmullen
just joined
Topic Author
Posts: 1
Joined: Tue Feb 13, 2018 7:33 pm

Total Noob DHCP Relay question

Tue Feb 13, 2018 11:14 pm

Yes I searched, bit didn't come up with any answers for my issue. I can't get dhcp relay working between two mikrotik routers.

I have
1 x ccr1009 192.168.88.1 local IP dhcp server serving 10.10.10.2-10.10.10.254 on the 10.10.10.0 network. bridge2 on eth4,eth5,eth6. Works just fine, I get a dhcp address and internet on those ports.

!x rb3011 192.168.88.2 local ip eth1 connected to the ccr1009 eth4 via dhcp. it's getting an address of 10.10.10.253

I am trying to get anything not on eth1 on the rb3011 to also get a dhcp address from the the ccr1009.

The DHCP relay setting I am trying to use is Name: relay1 interface: bridge1, DHCP server 10.10.10.1 local address 192.168.88.1

What am I doing wrong??

MikroTik RouterOS 6.41.2 (c) 1999-2018 http://www.mikrotik.com/
# feb/13/2018 16:13:44 by RouterOS 6.41.2
# software id = MNWX-K77X
#
# model = RouterBOARD 3011UiAS
# serial number = 783E08FDD7EA
/interface bridge
add admin-mac=CC:2D:E0:31:7D:85 auto-mac=no comment=defconf name=bridge1
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge1 name=defconf
/interface bridge port
add bridge=bridge1 comment=defconf interface=ether2
add bridge=bridge1 comment=defconf interface=ether3
add bridge=bridge1 comment=defconf interface=ether4
add bridge=bridge1 comment=defconf interface=ether5
add bridge=bridge1 comment=defconf interface=ether6
add bridge=bridge1 comment=defconf interface=ether7
add bridge=bridge1 comment=defconf interface=ether8
add bridge=bridge1 comment=defconf interface=ether9
add bridge=bridge1 comment=defconf interface=sfp1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge1 list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.88.2/24 comment=defconf interface=ether2 network=\
192.168.88.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-relay
add dhcp-server=10.10.10.1 interface=bridge1 local-address=192.168.88.1 name=\
relay1
/ip dhcp-server network
add address=10.10.10.0/24 gateway=10.10.10.1
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.2 netmask=24
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.2 name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
invalid
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" disabled=yes \
ipsec-policy=out,none out-interface-list=WAN
add action=masquerade chain=srcnat out-interface=ether1
/system clock
set time-zone-name=America/Toronto
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
[admin@MikroTik] >

Who is online

Users browsing this forum: 0xAA55, haedertowfeq, Shambler and 57 guests