Community discussions

MikroTik App
 
Plurnay
newbie
Topic Author
Posts: 40
Joined: Mon May 03, 2010 9:00 pm

RB450 switch

Wed Jun 09, 2010 5:53 pm

So I am still very new at this stuff
But I got and RB450 and i want to use it to act like a switch

so i got my pppoe modem into ether1... looks like this is working
then I need to make the four other ports to act like a switch...

i dont know how to do this..
can someone help me?

thanks in avanced
Paul Hebert
Last edited by Plurnay on Wed Jun 09, 2010 8:17 pm, edited 1 time in total.
 
yinxiangyn
Frequent Visitor
Frequent Visitor
Posts: 53
Joined: Mon May 31, 2010 3:14 pm

Re: RB450 switch

Wed Jun 09, 2010 6:08 pm

So I am still very new at this stuff
But I got and RB450 and i want to use it to act like a switch

so i got my pppoe modem into ether1... looks like this is working
then I need to make the for other ports to act like a switch...

i dont know how to do this..
can someone help me?

thanks in avanced
Paul Hebert
Like this?
You do not have the required permissions to view the files attached to this post.
 
Plurnay
newbie
Topic Author
Posts: 40
Joined: Mon May 03, 2010 9:00 pm

Re: RB450 switch

Wed Jun 09, 2010 7:23 pm

that can't be it... do i need do do anything else?
 
Feklar
Forum Guru
Forum Guru
Posts: 1724
Joined: Tue Dec 01, 2009 11:46 pm

Re: RB450 switch

Wed Jun 09, 2010 9:06 pm

Either use the built in switch chip or make a bridge and add ether2 through ether5 to the bridge. Then assign an IP/DHCP Server/etc to the bridge.

We don't use the switch chip, so I can't give you much information on it. Using the switch chip has the benefit of not using the CPU to process packets between the LAN ports. Bridge has the benefit of giving you much more control because you can pass the traffic through the firewall.

Chose whatever one better fits your needs.
 
Plurnay
newbie
Topic Author
Posts: 40
Joined: Mon May 03, 2010 9:00 pm

Re: RB450 switch

Wed Jun 09, 2010 10:17 pm

I thinks that what I have?

but the internet is not working on any pc is there something missing

/interface bridge
add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes \
comment="" disabled=no forward-delay=15s l2mtu=1522 max-message-age=20s \
mtu=1500 name=bridge1 priority=0x8000 protocol-mode=none \
transmit-hold-count=6
/interface ethernet
set 0 arp=enabled auto-negotiation=yes comment="" disabled=no full-duplex=yes \
l2mtu=1526 mac-address=00:0C:42:54:8C:0C mtu=1500 name=ether1 speed=\
100Mbps
set 1 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited comment=\
"" disabled=no full-duplex=yes l2mtu=1522 mac-address=00:0C:42:54:8C:0D \
master-port=none mtu=1500 name=ether2 speed=100Mbps
set 2 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited comment=\
"" disabled=no full-duplex=yes l2mtu=1522 mac-address=00:0C:42:54:8C:0E \
master-port=none mtu=1500 name=ether3 speed=100Mbps
set 3 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited comment=\
"" disabled=no full-duplex=yes l2mtu=1522 mac-address=00:0C:42:54:8C:0F \
master-port=none mtu=1500 name=ether4 speed=100Mbps
set 4 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited comment=\
"" disabled=no full-duplex=yes l2mtu=1522 mac-address=00:0C:42:54:8C:10 \
master-port=none mtu=1500 name=ether5 speed=100Mbps
/interface pppoe-client
add ac-name="" add-default-route=yes allow=pap,chap,mschap1,mschap2 comment=\
"" dial-on-demand=no disabled=no interface=ether1 max-mru=1480 max-mtu=\
1480 mrru=disabled name=pppoe-out1 password=MMFVDUQB service-name="" \
use-peer-dns=no user=prhebert
/interface ethernet switch
set switch1 mirror-source=none mirror-target=none name=switch1
/interface wireless security-profiles
set default authentication-types="" eap-methods=passthrough group-ciphers="" \
group-key-update=5m interim-update=0s management-protection=disabled \
mode=none name=default radius-eap-accounting=no radius-mac-accounting=no \
radius-mac-authentication=no radius-mac-caching=disabled \
radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username \
static-algo-0=none static-algo-1=none static-algo-2=none static-algo-3=\
none static-sta-private-algo=none static-transmit-key=key-0 \
supplicant-identity=MikroTik tls-certificate=none tls-mode=\
no-certificates unicast-ciphers=""
/ip hotspot profile
set default dns-name="" hotspot-address=0.0.0.0 html-directory=hotspot \
http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=cookie,http-chap \
name=default rate-limit="" smtp-server=0.0.0.0 split-user-domain=no \
use-radius=no
/ip hotspot user profile
set default idle-timeout=none keepalive-timeout=2m name=default shared-users=\
1 status-autorefresh=1m transparent-proxy=no
/ip ipsec proposal
set default auth-algorithms=sha1 comment="" disabled=no enc-algorithms=3des \
lifetime=30m name=default pfs-group=modp1024
/ip pool
add name=pool1 ranges=192.168.2.200-192.168.2.254
/ip dhcp-server
add address-pool=pool1 authoritative=after-2sec-delay bootp-support=static \
disabled=no interface=bridge1 lease-time=3d name=server1
/port
set 0 baud-rate=auto data-bits=8 flow-control=none name=serial0 parity=none \
stop-bits=1
/ppp profile
set default change-tcp-mss=yes comment="" name=default only-one=default \
use-compression=default use-encryption=default use-vj-compression=default
set default-encryption change-tcp-mss=yes comment="" name=default-encryption \
only-one=default use-compression=default use-encryption=yes \
use-vj-compression=default
/queue type
set default kind=pfifo name=default pfifo-limit=50
set ethernet-default kind=pfifo name=ethernet-default pfifo-limit=50
set wireless-default kind=sfq name=wireless-default sfq-allot=1514 \
sfq-perturb=5
set synchronous-default kind=red name=synchronous-default red-avg-packet=1000 \
red-burst=20 red-limit=60 red-max-threshold=50 red-min-threshold=10
set hotspot-default kind=sfq name=hotspot-default sfq-allot=1514 sfq-perturb=\
5
set default-small kind=pfifo name=default-small pfifo-limit=10
/routing bgp instance
set default as=65530 client-to-client-reflection=yes comment="" disabled=no \
ignore-as-path-len=no name=default out-filter="" redistribute-connected=\
no redistribute-ospf=no redistribute-other-bgp=no redistribute-rip=no \
redistribute-static=no router-id=0.0.0.0 routing-table=""
/routing ospf instance
set default comment="" disabled=no distribute-default=never in-filter=ospf-in \
metric-bgp=auto metric-connected=20 metric-default=1 metric-other-ospf=\
auto metric-rip=20 metric-static=20 name=default out-filter=ospf-out \
redistribute-bgp=no redistribute-connected=no redistribute-other-ospf=no \
redistribute-rip=no redistribute-static=no router-id=0.0.0.0
/routing ospf area
set backbone area-id=0.0.0.0 comment="" disabled=no instance=default name=\
backbone type=default
/snmp
set contact="" enabled=no engine-boots=0 engine-id="" location="" \
time-window=15 trap-sink=0.0.0.0 trap-version=1
/snmp community
set public address=0.0.0.0/0 authentication-protocol=MD5 encryption-protocol=\
DES name=public read-access=yes security=none write-access=no
/system logging action
set memory memory-lines=100 memory-stop-on-full=no name=memory target=memory
set disk disk-file-count=2 disk-file-name=log disk-lines-per-file=100 \
disk-stop-on-full=no name=disk target=disk
set echo name=echo remember=yes target=echo
set remote bsd-syslog=no name=remote remote=0.0.0.0:514 src-address=0.0.0.0 \
syslog-facility=daemon syslog-severity=auto target=remote
/system routerboard settings
set baud-rate=115200 boot-delay=2s boot-device=nand-if-fail-then-ethernet \
boot-protocol=bootp cpu-frequency=300MHz enable-jumper-reset=yes \
enter-setup-on=any-key force-backup-booter=no silent-boot=yes
set baud-rate=115200 boot-delay=2s boot-device=nand-if-fail-then-ethernet \
boot-protocol=bootp cpu-frequency=300MHz enable-jumper-reset=yes \
enter-setup-on=any-key force-backup-booter=no silent-boot=yes
/user group
add comment="" name=read policy="local,telnet,ssh,reboot,read,test,winbox,pass\
word,web,sniff,sensitive,!ftp,!write,!policy"
add comment="" name=write policy="local,telnet,ssh,reboot,read,write,test,winb\
ox,password,web,sniff,sensitive,!ftp,!policy"
add comment="" name=full policy="local,telnet,ssh,ftp,reboot,read,write,policy\
,test,winbox,password,web,sniff,sensitive"
/interface bridge port
add bridge=bridge1 comment="" disabled=no edge=auto external-fdb=auto \
horizon=none interface=ether2 path-cost=10 point-to-point=auto priority=\
0x80
add bridge=bridge1 comment="" disabled=no edge=auto external-fdb=auto \
horizon=none interface=ether3 path-cost=10 point-to-point=auto priority=\
0x80
add bridge=bridge1 comment="" disabled=no edge=auto external-fdb=auto \
horizon=none interface=ether4 path-cost=10 point-to-point=auto priority=\
0x80
add bridge=bridge1 comment="" disabled=no edge=auto external-fdb=auto \
horizon=none interface=ether5 path-cost=10 point-to-point=auto priority=\
0x80
/interface bridge settings
set use-ip-firewall=no use-ip-firewall-for-pppoe=no use-ip-firewall-for-vlan=\
no
/interface ethernet switch port
set (unknown)
set (unknown)
set (unknown)
set (unknown)
/interface l2tp-server server
set authentication=pap,chap,mschap1,mschap2 default-profile=\
default-encryption enabled=no max-mru=1460 max-mtu=1460 mrru=disabled
/interface ovpn-server server
set auth=sha1,md5 certificate=none cipher=blowfish128,aes128 default-profile=\
default enabled=no keepalive-timeout=60 mac-address=FE:66:3D:87:50:11 \
max-mtu=1500 mode=ip netmask=24 port=1194 require-client-certificate=no
/interface pptp-server server
set authentication=mschap1,mschap2 default-profile=default-encryption \
enabled=no keepalive-timeout=30 max-mru=1460 max-mtu=1460 mrru=disabled
/interface wireless align
set active-mode=yes audio-max=-20 audio-min=-100 audio-monitor=\
00:00:00:00:00:00 filter-mac=00:00:00:00:00:00 frame-size=300 \
frames-per-second=25 receive-all=no ssid-all=no
/interface wireless sniffer
set channel-time=200ms file-limit=10 file-name="" memory-limit=10 \
multiple-channels=no only-headers=no receive-errors=no streaming-enabled=\
no streaming-max-rate=0 streaming-server=0.0.0.0
/interface wireless snooper
set channel-time=200ms multiple-channels=yes receive-errors=no
/ip accounting
set account-local-traffic=no enabled=no threshold=256
/ip accounting web-access
set accessible-via-web=no address=0.0.0.0/0
/ip address
add address=192.168.2.1/24 broadcast=192.168.2.254 comment="" disabled=no \
interface=bridge1 network=192.168.2.0
/ip dhcp-server config
set store-leases-disk=5m
/ip dhcp-server network
add address=192.168.2.1/32 comment="" dns-server=4.2.2.2 gateway=192.168.2.0 \
netmask=24
/ip dns
set allow-remote-requests=no cache-max-ttl=1w cache-size=2048KiB \
max-udp-packet-size=512
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s \
tcp-close-wait-timeout=10s tcp-established-timeout=1d \
tcp-fin-wait-timeout=10s tcp-last-ack-timeout=10s \
tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no \
tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061
set pptp disabled=no
/ip hotspot service-port
set ftp disabled=no ports=21
/ip neighbor discovery
set ether1 discover=yes
set ether2 discover=yes
set ether3 discover=yes
set ether4 discover=yes
set ether5 discover=yes
set pppoe-out1 discover=no
set bridge1 discover=yes
/ip proxy
set always-from-cache=no cache-administrator=webmaster cache-hit-dscp=4 \
cache-on-disk=no enabled=no max-cache-size=none max-client-connections=\
600 max-fresh-time=3d max-server-connections=600 parent-proxy=0.0.0.0 \
parent-proxy-port=0 port=8080 serialize-connections=no src-address=\
0.0.0.0
/ip service
set telnet address=0.0.0.0/0 disabled=no port=23
set ftp address=0.0.0.0/0 disabled=no port=21
set www address=0.0.0.0/0 disabled=no port=80
set ssh address=0.0.0.0/0 disabled=no port=22
set www-ssl address=0.0.0.0/0 certificate=none disabled=yes port=443
set api address=0.0.0.0/0 disabled=yes port=8728
set winbox address=0.0.0.0/0 disabled=no port=8291
/ip socks
set connection-idle-timeout=2m enabled=no max-connections=200 port=1080
/ip traffic-flow
set active-flow-timeout=30m cache-entries=4k enabled=no \
inactive-flow-timeout=15s interfaces=all
/ip upnp
set allow-disable-external-interface=yes enabled=no show-dummy-rule=yes
/mpls
set dynamic-label-range=16-1048575 propagate-ttl=yes
/mpls interface
add comment="" disabled=no interface=all mpls-mtu=1508
/mpls ldp
set distribute-for-default-route=no enabled=no hop-limit=255 loop-detect=no \
lsr-id=0.0.0.0 path-vector-limit=255 transport-address=0.0.0.0 \
use-explicit-null=no
/ppp aaa
set accounting=yes interim-update=0s use-radius=no
/queue interface
set ether1 queue=ethernet-default
set ether2 queue=ethernet-default
set ether3 queue=ethernet-default
set ether4 queue=ethernet-default
set ether5 queue=ethernet-default
set pppoe-out1 queue=default
set bridge1 queue=default
/radius incoming
set accept=no port=3799
/routing bfd interface
set all comment="" disabled=no interface=all interval=0.2sec min-rx=0.2sec \
multiplier=5
/routing mme
set bidirectional-timeout=2 gateway-class=none gateway-keepalive=1m \
gateway-selection=no-gateway origination-interval=5s preferred-gateway=\
0.0.0.0 timeout=1m ttl=50
/routing rip
set distribute-default=never garbage-timer=2m metric-bgp=1 metric-connected=1 \
metric-default=1 metric-ospf=1 metric-static=1 redistribute-bgp=no \
redistribute-connected=no redistribute-ospf=no redistribute-static=no \
routing-table=main timeout-timer=3m update-timer=30s
/store
add comment="" disabled=no disk=system name=web-proxy1 type=web-proxy
/system clock
set time-zone-name=manual
/system clock manual
set dst-delta=+00:00 dst-end="jan/01/1970 00:00:00" dst-start=\
"jan/01/1970 00:00:00" time-zone=+00:00
/system console
add disabled=no port=serial0 term=vt102
/system health
set
/system identity
set name=MikroTik
/system logging
add action=memory disabled=no prefix="" topics=info
add action=memory disabled=no prefix="" topics=error
add action=memory disabled=no prefix="" topics=warning
add action=echo disabled=no prefix="" topics=critical
/system note
set note="" show-at-login=yes
/system ntp client
set enabled=no mode=broadcast primary-ntp=0.0.0.0 secondary-ntp=0.0.0.0
/system upgrade mirror
set check-interval=1d enabled=no primary-server=0.0.0.0 secondary-server=\
0.0.0.0 user=""
/system watchdog
set auto-send-supout=no automatic-supout=yes no-ping-delay=5m watch-address=\
none watchdog-timer=yes
/tool bandwidth-server
set allocate-udp-ports-from=2000 authenticate=yes enabled=yes max-sessions=\
100
/tool e-mail
set from=<> password="" server=0.0.0.0:25 username=""
/tool graphing
set page-refresh=300 store-every=5min
/tool mac-server
add disabled=no interface=all
/tool mac-server ping
set enabled=yes
/tool sms
set allowed-number="" channel=0 keep-max-sms=0 receive-enabled=no
/tool sniffer
set file-limit=10 file-name="" filter-address1=0.0.0.0/0:0-65535 \
filter-address2=0.0.0.0/0:0-65535 filter-protocol=ip-only filter-stream=\
yes interface=all memory-limit=10 memory-scroll=no only-headers=no \
streaming-enabled=no streaming-server=0.0.0.0
/user aaa
set accounting=yes default-group=read interim-update=0s use-radius=no
 
Feklar
Forum Guru
Forum Guru
Posts: 1724
Joined: Tue Dec 01, 2009 11:46 pm

Re: RB450 switch

Wed Jun 09, 2010 11:14 pm

1.) You don't have an IP set for the WAN interface.
2.) You don't have a NAT rule set up to NAT/Masquerade the traffic out of.
3.) You don't have a default route for the router to send traffic out of.

If your ISP is handing out IPs via DHCP, you can set up a DHCP client on the WAN interface to take care of issues 1 and 3.

I would also recommend setting a horizon=1 on the bridge ports, this prevents traffic entering one port from going out the same port.

Get those things in place and it will start to route traffic out to the internet.
 
Plurnay
newbie
Topic Author
Posts: 40
Joined: Mon May 03, 2010 9:00 pm

Re: RB450 switch

Thu Jun 10, 2010 4:59 pm

1.) You don't have an IP set for the WAN interface.
2.) You don't have a NAT rule set up to NAT/Masquerade the traffic out of.
3.) You don't have a default route for the router to send traffic out of.

If your ISP is handing out IPs via DHCP, you can set up a DHCP client on the WAN interface to take care of issues 1 and 3.

I would also recommend setting a horizon=1 on the bridge ports, this prevents traffic entering one port from going out the same port.

Get those things in place and it will start to route traffic out to the internet.

do i need to setup a dhcp client... i do get an ip when my pppoe is connected
 
Feklar
Forum Guru
Forum Guru
Posts: 1724
Joined: Tue Dec 01, 2009 11:46 pm

Re: RB450 switch

Thu Jun 10, 2010 5:36 pm

I'm not familiar with PPPoE, but you should only need number 2 set up then if passes down an IP and route. If you log in via WinBox and look at your IP addresses and IP route, does it list an IP address on the PPPoE interface and is there a route with a dst-address as 0.0.0.0/0 marked with a D?

Do you know if your PPPoE Client is connecting successfully to the server?
 
Plurnay
newbie
Topic Author
Posts: 40
Joined: Mon May 03, 2010 9:00 pm

Re: RB450 switch

Thu Jun 10, 2010 7:20 pm

hey thanks bud I got it tp work...
 
Plurnay
newbie
Topic Author
Posts: 40
Joined: Mon May 03, 2010 9:00 pm

Re: RB450 switch

Thu Jun 10, 2010 9:52 pm

I guess I replied to fast... its was working but for only the pc in ether 2...
i made some changes now my modem dont connect argh!!!
 
Plurnay
newbie
Topic Author
Posts: 40
Joined: Mon May 03, 2010 9:00 pm

Re: RB450 switch

Fri Jun 11, 2010 9:21 pm

I don't get it...
why does my modem doesn't work in port 1...

like i plug it in port 5 it works... i plug in port 1 it doesn't
also is there anything missing except the nat/masquerade?

here is my setup

[admin@MikroTik] > export
# jan/02/1970 00:11:12 by RouterOS 5.0beta2
# software id = RFMR-UNW4
#
/interface bridge
add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes \
disabled=no forward-delay=15s l2mtu=1522 max-message-age=20s mtu=1500 \
name=bridge1 priority=0x8000 protocol-mode=none transmit-hold-count=6
/interface ethernet
set 0 arp=enabled auto-negotiation=yes disabled=no full-duplex=yes l2mtu=1526 \
mac-address=00:0C:42:54:8C:0C mtu=1500 name=ether1 speed=100Mbps
set 1 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited \
disabled=no full-duplex=yes l2mtu=1522 mac-address=00:0C:42:54:8C:0D \
master-port=none mtu=1500 name=ether2 speed=100Mbps
set 2 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited \
disabled=no full-duplex=yes l2mtu=1522 mac-address=00:0C:42:54:8C:0E \
master-port=none mtu=1500 name=ether3 speed=100Mbps
set 3 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited \
disabled=no full-duplex=yes l2mtu=1522 mac-address=00:0C:42:54:8C:0F \
master-port=none mtu=1500 name=ether4 speed=100Mbps
set 4 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited \
disabled=no full-duplex=yes l2mtu=1522 mac-address=00:0C:42:54:8C:10 \
master-port=none mtu=1500 name=ether5 speed=100Mbps
/interface pppoe-client
add ac-name="" add-default-route=yes allow=pap,chap,mschap1,mschap2 \
dial-on-demand=no disabled=no interface=ether1,ether5 max-mru=1480 \
max-mtu=1480 mrru=disabled name=pppoe-out1 password=MMFVDUQB \
service-name="" use-peer-dns=no user=prhebert
/interface ethernet switch
set switch1 mirror-source=none mirror-target=none name=switch1
/interface wireless security-profiles
set default authentication-types="" eap-methods=passthrough group-ciphers="" \
group-key-update=5m interim-update=0s management-protection=disabled \
management-protection-key="" mode=none name=default \
radius-eap-accounting=no radius-mac-accounting=no \
radius-mac-authentication=no radius-mac-caching=disabled \
radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username \
static-algo-0=none static-algo-1=none static-algo-2=none static-algo-3=\
none static-key-0="" static-key-1="" static-key-2="" static-key-3="" \
static-sta-private-algo=none static-sta-private-key="" \
static-transmit-key=key-0 supplicant-identity=MikroTik tls-certificate=\
none tls-mode=no-certificates unicast-ciphers="" wpa-pre-shared-key="" \
wpa2-pre-shared-key=""
/ip hotspot profile
set default dns-name="" hotspot-address=0.0.0.0 html-directory=hotspot \
http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=cookie,http-chap \
name=default rate-limit="" smtp-server=0.0.0.0 split-user-domain=no \
use-radius=no
/ip hotspot user profile
set default idle-timeout=none keepalive-timeout=2m name=default shared-users=\
1 status-autorefresh=1m transparent-proxy=no
/ip ipsec proposal
set default auth-algorithms=sha1 disabled=no enc-algorithms=3des lifetime=30m \
name=default pfs-group=modp1024
/ip pool
add name=pool1 ranges=192.168.2.201-192.168.2.254
/ip dhcp-server
add address-pool=pool1 authoritative=after-2sec-delay bootp-support=static \
disabled=no interface=bridge1 lease-time=3d name=server1
/port
set 0 baud-rate=auto data-bits=8 flow-control=none name=serial0 parity=none \
stop-bits=1
/ppp profile
set default change-tcp-mss=yes name=default only-one=default use-compression=\
default use-encryption=default use-mpls=default use-vj-compression=\
default
set default-encryption change-tcp-mss=yes name=default-encryption only-one=\
default use-compression=default use-encryption=yes use-mpls=default \
use-vj-compression=default
/queue type
set default kind=pfifo name=default pfifo-limit=50
set ethernet-default kind=pfifo name=ethernet-default pfifo-limit=50
set wireless-default kind=sfq name=wireless-default sfq-allot=1514 \
sfq-perturb=5
set synchronous-default kind=red name=synchronous-default red-avg-packet=1000 \
red-burst=20 red-limit=60 red-max-threshold=50 red-min-threshold=10
set hotspot-default kind=sfq name=hotspot-default sfq-allot=1514 sfq-perturb=\
5
set default-small kind=pfifo name=default-small pfifo-limit=10
/routing bgp instance
set default as=65530 client-to-client-reflection=yes disabled=no \
ignore-as-path-len=no name=default out-filter="" redistribute-connected=\
no redistribute-ospf=no redistribute-other-bgp=no redistribute-rip=no \
redistribute-static=no router-id=0.0.0.0 routing-table=""
/routing ospf instance
set default disabled=no distribute-default=never in-filter=ospf-in \
metric-bgp=auto metric-connected=20 metric-default=1 metric-other-ospf=\
auto metric-rip=20 metric-static=20 name=default out-filter=ospf-out \
redistribute-bgp=no redistribute-connected=no redistribute-other-ospf=no \
redistribute-rip=no redistribute-static=no router-id=0.0.0.0
/routing ospf area
set backbone area-id=0.0.0.0 disabled=no instance=default name=backbone type=\
default
/snmp
set contact="" enabled=no engine-boots=0 engine-id="" location="" \
time-window=15 trap-sink=0.0.0.0 trap-version=1
/snmp community
set public address=0.0.0.0/0 authentication-password="" \
authentication-protocol=MD5 encryption-password="" encryption-protocol=\
DES name=public read-access=yes security=none write-access=no
/system logging action
set memory memory-lines=100 memory-stop-on-full=no name=memory target=memory
set disk disk-file-count=2 disk-file-name=log disk-lines-per-file=100 \
disk-stop-on-full=no name=disk target=disk
set echo name=echo remember=yes target=echo
set remote bsd-syslog=no name=remote remote=0.0.0.0:514 src-address=0.0.0.0 \
syslog-facility=daemon syslog-severity=auto target=remote
/system routerboard settings
set baud-rate=115200 boot-delay=2s boot-device=nand-if-fail-then-ethernet \
boot-protocol=bootp cpu-frequency=300MHz enable-jumper-reset=yes \
enter-setup-on=any-key force-backup-booter=no
set baud-rate=115200 boot-delay=2s boot-device=nand-if-fail-then-ethernet \
boot-protocol=bootp cpu-frequency=300MHz enable-jumper-reset=yes \
enter-setup-on=any-key force-backup-booter=no
/user group
add name=read policy="local,telnet,ssh,reboot,read,test,winbox,password,web,sn\
iff,sensitive,!ftp,!write,!policy"
add name=write policy="local,telnet,ssh,reboot,read,write,test,winbox,password\
,web,sniff,sensitive,!ftp,!policy"
add name=full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbo\
x,password,web,sniff,sensitive"
/interface bridge port
add bridge=bridge1 disabled=no edge=auto external-fdb=auto horizon=1 \
interface=ether2 path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge1 disabled=no edge=auto external-fdb=auto horizon=1 \
interface=ether3 path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge1 disabled=no edge=auto external-fdb=auto horizon=1 \
interface=ether4 path-cost=10 point-to-point=auto priority=0x80
/interface bridge settings
set use-ip-firewall=no use-ip-firewall-for-pppoe=no use-ip-firewall-for-vlan=\
no
/interface ethernet switch port
set (unknown)
set (unknown)
set (unknown)
set (unknown)
/interface l2tp-server server
set authentication=pap,chap,mschap1,mschap2 default-profile=\
default-encryption enabled=no max-mru=1460 max-mtu=1460 mrru=disabled
/interface ovpn-server server
set auth=sha1,md5 certificate=none cipher=blowfish128,aes128 default-profile=\
default enabled=no keepalive-timeout=60 mac-address=FE:7D:BF:8F:7C:F8 \
max-mtu=1500 mode=ip netmask=24 port=1194 require-client-certificate=no
/interface pptp-server server
set authentication=mschap1,mschap2 default-profile=default-encryption \
enabled=no keepalive-timeout=30 max-mru=1460 max-mtu=1460 mrru=disabled
/interface sstp-server server
set authentication=pap,chap,mschap1,mschap2 certificate=none default-profile=\
default enabled=no keepalive-timeout=60 max-mru=1500 max-mtu=1500 mrru=\
disabled port=443 require-client-certificate=no
/interface wireless align
set active-mode=yes audio-max=-20 audio-min=-100 audio-monitor=\
00:00:00:00:00:00 filter-mac=00:00:00:00:00:00 frame-size=300 \
frames-per-second=25 receive-all=no ssid-all=no
/interface wireless sniffer
set channel-time=200ms file-limit=10 file-name="" memory-limit=10 \
multiple-channels=no only-headers=no receive-errors=no streaming-enabled=\
no streaming-max-rate=0 streaming-server=0.0.0.0
/interface wireless snooper
set channel-time=200ms multiple-channels=yes receive-errors=no
/ip accounting
set account-local-traffic=no enabled=no threshold=256
/ip accounting web-access
set accessible-via-web=no address=0.0.0.0/0
/ip address
add address=192.168.2.200/24 broadcast=192.168.2.254 disabled=no interface=\
bridge1 network=192.168.2.0
/ip dhcp-server config
set store-leases-disk=5m
/ip dhcp-server network
add address=192.168.2.1/32 dns-server=4.2.2.2 gateway=192.168.2.0
/ip dns
set allow-remote-requests=no cache-max-ttl=1w cache-size=2048KiB \
max-udp-packet-size=512
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s \
tcp-close-wait-timeout=10s tcp-established-timeout=1d \
tcp-fin-wait-timeout=10s tcp-last-ack-timeout=10s \
tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no \
tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061
set pptp disabled=no
/ip hotspot service-port
set ftp disabled=no ports=21
/ip neighbor discovery
set ether1 discover=yes
set ether2 discover=yes
set ether3 discover=yes
set ether4 discover=yes
set ether5 discover=yes
set bridge1 discover=yes
set pppoe-out1 discover=no
/ip proxy
set always-from-cache=no cache-administrator=webmaster cache-hit-dscp=4 \
cache-on-disk=no enabled=no max-cache-size=none max-client-connections=\
600 max-fresh-time=3d max-server-connections=600 parent-proxy=0.0.0.0 \
parent-proxy-port=0 port=8080 serialize-connections=no src-address=\
0.0.0.0
/ip service
set telnet address=0.0.0.0/0 disabled=no port=23
set ftp address=0.0.0.0/0 disabled=no port=21
set www address=0.0.0.0/0 disabled=no port=80
set ssh address=0.0.0.0/0 disabled=no port=22
set www-ssl address=0.0.0.0/0 certificate=none disabled=yes port=443
set api address=0.0.0.0/0 disabled=yes port=8728
set winbox address=0.0.0.0/0 disabled=no port=8291
/ip socks
set connection-idle-timeout=2m enabled=no max-connections=200 port=1080
/ip ssh
set forwarding-enabled=yes
/ip traffic-flow
set active-flow-timeout=30m cache-entries=4k enabled=no \
inactive-flow-timeout=15s interfaces=all
/ip upnp
set allow-disable-external-interface=yes enabled=no show-dummy-rule=yes
/mpls
set dynamic-label-range=16-1048575 propagate-ttl=yes
/mpls interface
add disabled=no interface=all mpls-mtu=1508
/mpls ldp
set distribute-for-default-route=no enabled=no hop-limit=255 loop-detect=no \
lsr-id=0.0.0.0 path-vector-limit=255 transport-address=0.0.0.0 \
use-explicit-null=no
/ppp aaa
set accounting=yes interim-update=0s use-radius=no
/queue interface
set ether1 queue=ethernet-default
set ether2 queue=ethernet-default
set ether3 queue=ethernet-default
set ether4 queue=ethernet-default
set ether5 queue=ethernet-default
set bridge1 queue=default
set pppoe-out1 queue=default
/radius incoming
set accept=no port=3799
/routing bfd interface
set all disabled=no interface=all interval=0.2sec min-rx=0.2sec multiplier=5
/routing mme
set bidirectional-timeout=2 gateway-class=none gateway-keepalive=1m \
gateway-selection=no-gateway origination-interval=5s preferred-gateway=\
0.0.0.0 timeout=1m ttl=50
/routing rip
set distribute-default=never garbage-timer=2m metric-bgp=1 metric-connected=1 \
metric-default=1 metric-ospf=1 metric-static=1 redistribute-bgp=no \
redistribute-connected=no redistribute-ospf=no redistribute-static=no \
routing-table=main timeout-timer=3m update-timer=30s
/store
add disabled=no disk=system name=web-proxy1 type=web-proxy
/system clock
set time-zone-name=manual
/system clock manual
set dst-delta=+00:00 dst-end="jan/01/1970 00:00:00" dst-start=\
"jan/01/1970 00:00:00" time-zone=+00:00
/system console
add disabled=no port=serial0 term=vt102
/system health
set
/system identity
set name=MikroTik
/system logging
add action=memory disabled=no prefix="" topics=info
add action=memory disabled=no prefix="" topics=error
add action=memory disabled=no prefix="" topics=warning
add action=echo disabled=no prefix="" topics=critical
/system note
set note="" show-at-login=yes
/system ntp client
set enabled=no mode=broadcast primary-ntp=0.0.0.0 secondary-ntp=0.0.0.0
/system upgrade mirror
set check-interval=1d enabled=no primary-server=0.0.0.0 secondary-server=\
0.0.0.0 user=""
/system watchdog
set auto-send-supout=no automatic-supout=yes no-ping-delay=5m watch-address=\
none watchdog-timer=yes
/tool bandwidth-server
set allocate-udp-ports-from=2000 authenticate=yes enabled=yes max-sessions=\
100
/tool e-mail
set from=<> password="" server=0.0.0.0:25 username=""
/tool graphing
set page-refresh=300 store-every=5min
/tool mac-server
add disabled=no interface=all
/tool mac-server ping
set enabled=yes
/tool sms
set allowed-number="" channel=0 keep-max-sms=0 receive-enabled=no secret=""
/tool sniffer
set file-limit=10 file-name="" filter-address1=0.0.0.0/0:0-65535 \
filter-address2=0.0.0.0/0:0-65535 filter-protocol=ip-only filter-stream=\
yes interface=all memory-limit=10 memory-scroll=no only-headers=no \
streaming-enabled=no streaming-server=0.0.0.0
/user aaa
set accounting=yes default-group=read interim-update=0s use-radius=no
[admin@MikroTik] >
 
Plurnay
newbie
Topic Author
Posts: 40
Joined: Mon May 03, 2010 9:00 pm

Re: RB450 switch chip

Tue Jun 15, 2010 3:15 pm

So I got it to work with a bridge... the only thing left.. would be to set it to use the switch chip
i really dont know how to do that

can someone help me with that???
thanks

Paul
 
Feklar
Forum Guru
Forum Guru
Posts: 1724
Joined: Tue Dec 01, 2009 11:46 pm

Re: RB450 switch

Tue Jun 15, 2010 8:13 pm

If you're using the bridge, don't use the switch chip. If you're using the switch chip, don't use the bridge.

Switch chip doesn't use the CPU so it saves CPU time to forward packets between end users, but you have very little control for the traffic.

Bridge uses the CPU, but you have control over the traffic, you can tell it to send bridged traffic to the firewall and use filter rules to block things.
 
Plurnay
newbie
Topic Author
Posts: 40
Joined: Mon May 03, 2010 9:00 pm

Re: RB450 switch

Wed Jun 16, 2010 8:36 pm

So like I said I got it working with a bridge...
But there is something that a really don't get... I got 3 pppoe modem on my desk
I know they are all working... but only one of them is capable of making a connection to the RB450

I got no idea why....
any one got an idea why its doing that

thanks,
PR
 
Feklar
Forum Guru
Forum Guru
Posts: 1724
Joined: Tue Dec 01, 2009 11:46 pm

Re: RB450 switch

Fri Jun 18, 2010 3:35 pm

Try turning on PPP logging in the Mikrotik. If you go to /system logging you can add a source to the log, might want to exclude packets along with adding in PPP so you don't get blasted with too much information.

Once the logging is turned up try and connect the modem to the Mikrotik and see what the log says. This should at least tell you if the modem is trying to connect to the Mikrotik and go from there.
 
Plurnay
newbie
Topic Author
Posts: 40
Joined: Mon May 03, 2010 9:00 pm

Re: RB450 switch

Fri Jun 18, 2010 7:32 pm

So my boss want me to use the switch chip....
I think I setup it up like it suposed to be...
But the internet doesnt work

Need help


# jun/18/2010 13:29:55 by RouterOS 4.10
# software id = RFMR-UNW4
#
/interface ethernet
set 0 arp=enabled auto-negotiation=yes comment="" disabled=no full-duplex=yes \
l2mtu=1526 mac-address=00:0C:42:54:8C:0C mtu=1500 name=ether1 speed=\
100Mbps
set 1 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited comment=\
"" disabled=no full-duplex=yes l2mtu=1522 mac-address=00:0C:42:54:8C:0D \
master-port=none mtu=1500 name=ether2 speed=100Mbps
set 2 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited comment=\
"" disabled=no full-duplex=yes l2mtu=1522 mac-address=00:0C:42:54:8C:0E \
master-port=ether2 mtu=1500 name=ether3 speed=100Mbps
set 3 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited comment=\
"" disabled=no full-duplex=yes l2mtu=1522 mac-address=00:0C:42:54:8C:0F \
master-port=ether2 mtu=1500 name=ether4 speed=100Mbps
set 4 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited comment=\
"" disabled=no full-duplex=yes l2mtu=1522 mac-address=00:0C:42:54:8C:10 \
master-port=ether2 mtu=1500 name=ether5 speed=100Mbps
/interface ethernet switch
set switch1 mirror-source=none mirror-target=none name=switch1
/interface wireless security-profiles
set default authentication-types="" eap-methods=passthrough group-ciphers="" \
group-key-update=5m interim-update=0s management-protection=disabled \
management-protection-key="" mode=none name=default \
radius-eap-accounting=no radius-mac-accounting=no \
radius-mac-authentication=no radius-mac-caching=disabled \
radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username \
static-algo-0=none static-algo-1=none static-algo-2=none static-algo-3=\
none static-key-0="" static-key-1="" static-key-2="" static-key-3="" \
static-sta-private-algo=none static-sta-private-key="" \
static-transmit-key=key-0 supplicant-identity=MikroTik tls-certificate=\
none tls-mode=no-certificates unicast-ciphers="" wpa-pre-shared-key="" \
wpa2-pre-shared-key=""
/ip hotspot profile
set default dns-name="" hotspot-address=0.0.0.0 html-directory=hotspot \
http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=cookie,http-chap \
name=default rate-limit="" smtp-server=0.0.0.0 split-user-domain=no \
use-radius=no
/ip hotspot user profile
set default idle-timeout=none keepalive-timeout=2m name=default shared-users=\
1 status-autorefresh=1m transparent-proxy=no
/ip ipsec proposal
set default auth-algorithms=sha1 comment="" disabled=no enc-algorithms=3des \
lifetime=30m name=default pfs-group=modp1024
/ip pool
add name=pool1 ranges=192.168.88.200-192.168.88.254
/ip dhcp-server
add address-pool=pool1 authoritative=after-2sec-delay bootp-support=static \
disabled=no interface=ether2 lease-time=3d name=server1
/port
set 0 baud-rate=auto data-bits=8 flow-control=none name=serial0 parity=none \
stop-bits=1
/ppp profile
set default change-tcp-mss=yes comment="" name=default only-one=default \
use-compression=default use-encryption=default use-vj-compression=default
set default-encryption change-tcp-mss=yes comment="" name=default-encryption \
only-one=default use-compression=default use-encryption=yes \
use-vj-compression=default
/interface pppoe-client
add ac-name="" add-default-route=yes allow=pap,chap,mschap1,mschap2 comment=\
"" dial-on-demand=no disabled=no interface=ether1 max-mru=1460 max-mtu=\
1460 mrru=disabled name=pppoe-out1 password=MMFVDUQB profile=default \
service-name="" use-peer-dns=no user=prhebert
/queue type
set default kind=pfifo name=default pfifo-limit=50
set ethernet-default kind=pfifo name=ethernet-default pfifo-limit=50
set wireless-default kind=sfq name=wireless-default sfq-allot=1514 \
sfq-perturb=5
set synchronous-default kind=red name=synchronous-default red-avg-packet=1000 \
red-burst=20 red-limit=60 red-max-threshold=50 red-min-threshold=10
set hotspot-default kind=sfq name=hotspot-default sfq-allot=1514 sfq-perturb=\
5
set default-small kind=pfifo name=default-small pfifo-limit=10
/routing bgp instance
set default as=65530 client-to-client-reflection=yes comment="" disabled=no \
ignore-as-path-len=no name=default out-filter="" redistribute-connected=\
no redistribute-ospf=no redistribute-other-bgp=no redistribute-rip=no \
redistribute-static=no router-id=0.0.0.0 routing-table=""
/routing ospf instance
set default comment="" disabled=no distribute-default=never in-filter=ospf-in \
metric-bgp=auto metric-connected=20 metric-default=1 metric-other-ospf=\
auto metric-rip=20 metric-static=20 name=default out-filter=ospf-out \
redistribute-bgp=no redistribute-connected=no redistribute-other-ospf=no \
redistribute-rip=no redistribute-static=no router-id=0.0.0.0
/routing ospf area
set backbone area-id=0.0.0.0 comment="" disabled=no instance=default name=\
backbone type=default
/snmp
set contact="" enabled=no engine-boots=0 engine-id="" location="" \
time-window=15 trap-sink=0.0.0.0 trap-version=1
/snmp community
set public address=0.0.0.0/0 authentication-password="" \
authentication-protocol=MD5 encryption-password="" encryption-protocol=\
DES name=public read-access=yes security=none write-access=no
/system logging action
set memory memory-lines=100 memory-stop-on-full=no name=memory target=memory
set disk disk-file-count=2 disk-file-name=log disk-lines-per-file=100 \
disk-stop-on-full=no name=disk target=disk
set echo name=echo remember=yes target=echo
set remote bsd-syslog=no name=remote remote=0.0.0.0:514 src-address=0.0.0.0 \
syslog-facility=daemon syslog-severity=auto target=remote
/system routerboard settings
set baud-rate=115200 boot-delay=2s boot-device=nand-if-fail-then-ethernet \
boot-protocol=bootp cpu-frequency=300MHz enable-jumper-reset=yes \
enter-setup-on=any-key force-backup-booter=no silent-boot=yes
set baud-rate=115200 boot-delay=2s boot-device=nand-if-fail-then-ethernet \
boot-protocol=bootp cpu-frequency=300MHz enable-jumper-reset=yes \
enter-setup-on=any-key force-backup-booter=no silent-boot=yes
/user group
add comment="" name=read policy="local,telnet,ssh,reboot,read,test,winbox,pass\
word,web,sniff,sensitive,!ftp,!write,!policy"
add comment="" name=write policy="local,telnet,ssh,reboot,read,write,test,winb\
ox,password,web,sniff,sensitive,!ftp,!policy"
add comment="" name=full policy="local,telnet,ssh,ftp,reboot,read,write,policy\
,test,winbox,password,web,sniff,sensitive"
/interface bridge settings
set use-ip-firewall=no use-ip-firewall-for-pppoe=no use-ip-firewall-for-vlan=\
no
/interface ethernet switch port
set (unknown)
set (unknown)
set (unknown)
set (unknown)
/interface l2tp-server server
set authentication=pap,chap,mschap1,mschap2 default-profile=\
default-encryption enabled=no max-mru=1460 max-mtu=1460 mrru=disabled
/interface ovpn-server server
set auth=sha1,md5 certificate=none cipher=blowfish128,aes128 default-profile=\
default enabled=no keepalive-timeout=60 mac-address=FE:66:3D:87:50:11 \
max-mtu=1500 mode=ip netmask=24 port=1194 require-client-certificate=no
/interface pptp-server server
set authentication=mschap1,mschap2 default-profile=default-encryption \
enabled=no keepalive-timeout=30 max-mru=1460 max-mtu=1460 mrru=disabled
/interface wireless align
set active-mode=yes audio-max=-20 audio-min=-100 audio-monitor=\
00:00:00:00:00:00 filter-mac=00:00:00:00:00:00 frame-size=300 \
frames-per-second=25 receive-all=no ssid-all=no
/interface wireless sniffer
set channel-time=200ms file-limit=10 file-name="" memory-limit=10 \
multiple-channels=no only-headers=no receive-errors=no streaming-enabled=\
no streaming-max-rate=0 streaming-server=0.0.0.0
/interface wireless snooper
set channel-time=200ms multiple-channels=yes receive-errors=no
/ip accounting
set account-local-traffic=no enabled=no threshold=256
/ip accounting web-access
set accessible-via-web=no address=0.0.0.0/0
/ip address
add address=192.168.88.1/24 broadcast=192.168.88.255 comment=\
"default configuration" disabled=no interface=ether2 network=192.168.88.0
/ip dhcp-server config
set store-leases-disk=5m
/ip dhcp-server network
add address=192.168.88.200/32 comment="" dns-server=4.2.2.2 gateway=\
192.168.88.0
/ip dns
set allow-remote-requests=no cache-max-ttl=1w cache-size=2048KiB \
max-udp-packet-size=512
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s \
tcp-close-wait-timeout=10s tcp-established-timeout=1d \
tcp-fin-wait-timeout=10s tcp-last-ack-timeout=10s \
tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no \
tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s
/ip firewall nat
add action=masquerade chain=srcnat comment="" disabled=no out-interface=\
pppoe-out1 src-address=192.168.88.0/24
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061
set pptp disabled=no
/ip hotspot service-port
set ftp disabled=no ports=21
/ip neighbor discovery
set ether1 discover=yes
set ether2 discover=yes
set ether3 discover=yes
set ether4 discover=yes
set ether5 discover=yes
set pppoe-out1 discover=no
/ip proxy
set always-from-cache=no cache-administrator=webmaster cache-hit-dscp=4 \
cache-on-disk=no enabled=no max-cache-size=none max-client-connections=\
600 max-fresh-time=3d max-server-connections=600 parent-proxy=0.0.0.0 \
parent-proxy-port=0 port=8080 serialize-connections=no src-address=\
0.0.0.0
/ip service
set telnet address=0.0.0.0/0 disabled=no port=23
set ftp address=0.0.0.0/0 disabled=no port=21
set www address=0.0.0.0/0 disabled=no port=80
set ssh address=0.0.0.0/0 disabled=no port=22
set www-ssl address=0.0.0.0/0 certificate=none disabled=yes port=443
set api address=0.0.0.0/0 disabled=yes port=8728
set winbox address=0.0.0.0/0 disabled=no port=8291
/ip socks
set connection-idle-timeout=2m enabled=no max-connections=200 port=1080
/ip traffic-flow
set active-flow-timeout=30m cache-entries=4k enabled=no \
inactive-flow-timeout=15s interfaces=all
/ip upnp
set allow-disable-external-interface=yes enabled=no show-dummy-rule=yes
/mpls
set dynamic-label-range=16-1048575 propagate-ttl=yes
/mpls interface
add comment="" disabled=no interface=all mpls-mtu=1508
/mpls ldp
set distribute-for-default-route=no enabled=no hop-limit=255 loop-detect=no \
lsr-id=0.0.0.0 path-vector-limit=255 transport-address=0.0.0.0 \
use-explicit-null=no
/ppp aaa
set accounting=yes interim-update=0s use-radius=no
/queue interface
set ether1 queue=ethernet-default
set ether2 queue=ethernet-default
set ether3 queue=ethernet-default
set ether4 queue=ethernet-default
set ether5 queue=ethernet-default
set pppoe-out1 queue=default
/radius incoming
set accept=no port=3799
/routing bfd interface
set all comment="" disabled=no interface=all interval=0.2sec min-rx=0.2sec \
multiplier=5
/routing mme
set bidirectional-timeout=2 gateway-class=none gateway-keepalive=1m \
gateway-selection=no-gateway origination-interval=5s preferred-gateway=\
0.0.0.0 timeout=1m ttl=50
/routing rip
set distribute-default=never garbage-timer=2m metric-bgp=1 metric-connected=1 \
metric-default=1 metric-ospf=1 metric-static=1 redistribute-bgp=no \
redistribute-connected=no redistribute-ospf=no redistribute-static=no \
routing-table=main timeout-timer=3m update-timer=30s
/store
add comment="" disabled=no disk=system name=web-proxy1 type=web-proxy
/system clock
set time-zone-name=America/Moncton
/system clock manual
set dst-delta=+00:00 dst-end="jan/01/1970 00:00:00" dst-start=\
"jan/01/1970 00:00:00" time-zone=+00:00
/system console
add disabled=no port=serial0 term=vt102
/system health
set
/system identity
set name=MikroTik
/system logging
add action=memory disabled=no prefix="" topics=error
add action=memory disabled=no prefix="" topics=warning
add action=echo disabled=no prefix="" topics=critical
add action=memory disabled=no prefix="" topics=!pppoe
/system note
set note="" show-at-login=yes
/system ntp client
set enabled=no mode=broadcast primary-ntp=0.0.0.0 secondary-ntp=0.0.0.0
/system upgrade mirror
set check-interval=1d enabled=no primary-server=0.0.0.0 secondary-server=\
0.0.0.0 user=""
/system watchdog
set auto-send-supout=no automatic-supout=yes no-ping-delay=5m watch-address=\
none watchdog-timer=yes
/tool bandwidth-server
set allocate-udp-ports-from=2000 authenticate=yes enabled=yes max-sessions=\
100
/tool e-mail
set from=<> password="" server=0.0.0.0:25 username=""
/tool graphing
set page-refresh=300 store-every=5min
/tool mac-server
add disabled=no interface=all
/tool mac-server ping
set enabled=yes
/tool sms
set allowed-number="" channel=0 keep-max-sms=0 receive-enabled=no secret=""
/tool sniffer
set file-limit=10 file-name="" filter-address1=0.0.0.0/0:0-65535 \
filter-address2=0.0.0.0/0:0-65535 filter-protocol=ip-only filter-stream=\
yes interface=all memory-limit=10 memory-scroll=no only-headers=no \
streaming-enabled=no streaming-server=0.0.0.0
/user aaa
set accounting=yes default-group=read interim-update=0s use-radius=no
 
Plurnay
newbie
Topic Author
Posts: 40
Joined: Mon May 03, 2010 9:00 pm

Re: RB450 switch

Fri Jun 18, 2010 8:03 pm

for the modem... i am not sure if those logs can help you
but this is what I have


When i plug the modem that doesnt work (but doesnt work when its connected directly to a pc)
I get this..

13:33:58 route,debug,event Interface change
13:33:58 route,debug,event interface=ether1
13:33:58 route,debug,event status=UP,RUNNING
13:33:58 route,debug,event mtu=1500
13:33:58 route,debug,calc Begin calculation
13:33:58 route,debug,event Link up
13:33:58 route,debug,event interface=ether1
13:33:58 route,debug,event Update
13:33:58 route,debug,event interface=ether1
13:33:58 route,debug,calc End calculation

And when I plugin a diffenrent modem... but the exact same model mumber
I get this???

13:37:57 route,debug,event Interface change
13:37:57 route,debug,event interface=ether1
13:37:57 route,debug,event status=UP
13:37:57 route,debug,event mtu=1500
13:37:57 route,debug,calc Begin calculation
13:37:57 route,debug,event Link down
13:37:57 route,debug,event interface=ether1
13:37:57 route,debug,event Update
13:37:57 route,debug,event interface=ether1
13:37:57 route,debug,calc End calculation
13:37:59 route,debug,event Interface change
13:37:59 route,debug,event interface=ether1
13:37:59 route,debug,event status=UP,RUNNING
13:37:59 route,debug,event mtu=1500
13:37:59 route,debug,calc Begin calculation
13:37:59 route,debug,event Link up
13:37:59 route,debug,event interface=ether1
13:37:59 route,debug,event Update
13:37:59 route,debug,event interface=ether1
13:37:59 route,debug,calc End calculation
13:38:08 route,debug,event Interface change
13:38:08 route,debug,event interface=pppoe-out1
13:38:08 route,debug,event status=UP,RUNNING
13:38:08 route,debug,event mtu=1460
13:38:08 route,debug,event Interface change
13:38:08 route,debug,event interface=pppoe-out1
13:38:08 route,debug,event status=UP,RUNNING
13:38:08 route,debug,event mtu=1460
13:38:08 route,debug,calc Begin calculation
13:38:08 route,debug,event Link up
13:38:08 route,debug,event interface=pppoe-out1
13:38:08 route,debug,event Update
13:38:08 route,debug,event interface=pppoe-out1
13:38:08 route,debug,event Added candidate route
13:38:08 route,debug,event dst-prefix=0.0.0.0/0
13:38:08 route,debug,event attributes
13:38:08 route,debug,event protocol=DYNAMIC
13:38:08 route,debug,event distance=1
13:38:08 route,debug,event scope=30
13:38:08 route,debug,event target-scope=10
13:38:08 route,debug,event next-hop= address=10.0.10.254
13:38:08 route,debug,event origin-type=DYNAMIC
13:38:08 route,debug,calc End calculation
13:38:08 route,debug Begin redistribution
13:38:08 route,debug Accept 0.0.0.0/0
13:38:08 route,debug Commit prefix 0.0.0.0/0
13:38:08 route,debug End redistribution
13:38:08 ipsec @(#) racoon / MikroTik
13:38:08 ipsec @(#)This product linked OpenSSL 0.9.8l 5 Nov 2009 (http://www.ope
nssl.org/)
13:38:08 route,debug,calc Begin calculation
13:38:08 route,debug,event Address added or changed
13:38:08 route,debug,event local=142.166.111.177
13:38:08 route,debug,event network=10.0.10.254/32
13:38:08 route,debug,event interface=pppoe-out1
13:38:08 route,debug,event Added candidate route
13:38:08 route,debug,event dst-prefix=10.0.10.254/32
13:38:08 route,debug,event attributes
13:38:08 route,debug,event protocol=CONNECT
13:38:08 route,debug,event scope=10
13:38:08 route,debug,event target-scope=0
13:38:08 route,debug,event connected-net= address=142.166.111.177/32 int
erface=pppoe-out1
13:38:08 route,debug,event routing-mark=main
13:38:08 route,debug,event table=main
13:38:08 route,debug,event origin-type=CONNECTED
13:38:08 route,debug,calc Tag next hop for recalculation
13:38:08 route,debug,calc address=10.0.10.254
13:38:08 route,debug,calc Select route
13:38:08 route,debug,calc dst-address=10.0.10.254/32
13:38:08 route,debug,calc attributes
13:38:08 route,debug,calc protocol=CONNECT
13:38:08 route,debug,calc scope=10
13:38:08 route,debug,calc target-scope=0
13:38:08 route,debug,calc connected-net= address=142.166.111.177/32 inte
rface=pppoe-out1
13:38:08 route,debug,calc routing-mark=main
13:38:08 route,debug,calc table=main
13:38:08 route,debug,calc origin-type=CONNECTED
13:38:08 route,debug,calc Next hop resolved
13:38:08 route,debug,calc address=10.0.10.254
13:38:08 route,debug,calc route=10.0.10.254/32
13:38:08 route,debug,calc immediate-address=10.0.10.254
13:38:08 route,debug,calc interface=pppoe-out1
13:38:08 route,debug,calc Select route
13:38:08 route,debug,calc dst-address=0.0.0.0/0
13:38:08 route,debug,calc attributes
13:38:08 route,debug,calc protocol=DYNAMIC
13:38:08 route,debug,calc distance=1
13:38:08 route,debug,calc scope=30
13:38:08 route,debug,calc target-scope=10
13:38:08 route,debug,calc next-hop= address=10.0.10.254
13:38:08 route,debug,calc origin-type=DYNAMIC
13:38:08 route,debug,calc End calculation
13:38:08 route,debug Begin redistribution
13:38:08 route,debug Accept add 10.0.10.254/32
13:38:08 route,debug Accept add 0.0.0.0/0
13:38:08 route,debug Commit prefix 0.0.0.0/0
13:38:08 route,debug Commit prefix 10.0.10.254/32
13:38:08 route,debug End redistribution

On four modem i got two that connect to the RB450 and two that dont... I need everyone to work...
 
Plurnay
newbie
Topic Author
Posts: 40
Joined: Mon May 03, 2010 9:00 pm

Re: RB450 switch

Mon Jun 21, 2010 7:57 pm

anybody can help me on my last two post

thanks a lot
 
MDev
just joined
Posts: 1
Joined: Thu Jun 10, 2010 7:19 pm

Re: RB450 switch

Mon Jun 21, 2010 10:08 pm

under /ip dns don't you need to change allow-remote-requests=no to =yes
for your client PCs to use your WAN's DNS?

Are you able to ping from a client PC internet IPs but not names?
 
Plurnay
newbie
Topic Author
Posts: 40
Joined: Mon May 03, 2010 9:00 pm

Re: RB450 switch

Tue Jun 22, 2010 6:33 pm

So I want to start from scratch...
So I want to use the switch chip instead of using a bridge...
Let me know if there something that is missing or i shouldn't do.

So let say I do a system reset configuration...
then setup the pppoe connection on the ether1 and a get a connection

then I set ether3 , 4 and 5 to use master port ether 2
I put a dhcp server on ether 2 that use and ip pool

setup nat with masquerade

i am missing something
because I never been able to make it work using the switch chip
I try to change the DNS request to yes but that didn't help

i must be doing something wrong i just don't know what it is...

Thanks for all your help guys...
Paul-Rene
 
vacarosie200
Frequent Visitor
Frequent Visitor
Posts: 62
Joined: Sun Jun 15, 2008 11:49 am
Location: Romania

Re: RB450 switch

Wed Jun 23, 2010 12:52 am

if you reset-configuration ... the rb450 will work like this:

eth1 use dhcp-client as wan port
eth2...3...4...5 work as a switch with eth2 master with dhcp server 192.168.88.0/24 and using 192.168.88.1 , nat is on to eth1...
just remove dhcp client and set pppoe client to eth1

nothing special

don't forget to check add default route and dns on pppoe setup

good luck
Last edited by vacarosie200 on Wed Jun 23, 2010 7:28 pm, edited 1 time in total.
 
Plurnay
newbie
Topic Author
Posts: 40
Joined: Mon May 03, 2010 9:00 pm

Re: RB450 switch

Wed Jun 23, 2010 4:32 pm

So you mean that the only thing I would have to do is to set the pppoe and to remove the dhcp...

I dont get it because when I do a system reset config the only thing its does is this:

The following default configuration has been installed on your router:

IP address 192.168.88.1/24 is on ether1
ether1 is enabled

*****************

I dont have a dhcp-client as wan port on ether1
eth2...3...4...5 dont have eth2 for master port and there is no DHCP server
and there is no nat is on to eth1...
Last edited by Plurnay on Wed Jun 23, 2010 11:04 pm, edited 1 time in total.
 
vacarosie200
Frequent Visitor
Frequent Visitor
Posts: 62
Joined: Sun Jun 15, 2008 11:49 am
Location: Romania

Re: RB450 switch

Wed Jun 23, 2010 7:24 pm

when you get this mesage ... just accept ... do not close that window or remove configuration .... ACCEPT it
 
Plurnay
newbie
Topic Author
Posts: 40
Joined: Mon May 03, 2010 9:00 pm

Re: RB450 switch

Thu Jun 24, 2010 7:39 pm

could somebody help me like remotely or skype with me to get this setup???
I tried everything and its just not working
 
Plurnay
newbie
Topic Author
Posts: 40
Joined: Mon May 03, 2010 9:00 pm

Re: RB450 switch

Fri Jun 25, 2010 5:01 pm

this is my setup from winbox...
I am not sure how my pc's are supposed to be setup
like should gibe them IP? gateway, dns? or ny
DHCP server will do all that

again this setup its not working
i cant ping anything...

let me know if I got something wrong or something missing
need help!!! :? :?
You do not have the required permissions to view the files attached to this post.
Last edited by Plurnay on Fri Jun 25, 2010 5:55 pm, edited 1 time in total.
 
yinxiangyn
Frequent Visitor
Frequent Visitor
Posts: 53
Joined: Mon May 31, 2010 3:14 pm

Re: RB450 switch

Fri Jun 25, 2010 5:13 pm

this is my setup from winbox...
I am not sure how my pc's are supposed to be setup
like should gibe them IP? gateway, dns? or ny
DHCP server will do all that

again this setup its not working
i can ping anything...

let me know if I got something wrong or something missing
need help!!! :? :?
First, are you sure you can PING anything ... from the routing?(winbox tools-ping)
If so, then the problem may be in the DNS, check it.
and.........
You do not have the required permissions to view the files attached to this post.
 
yinxiangyn
Frequent Visitor
Frequent Visitor
Posts: 53
Joined: Mon May 31, 2010 3:14 pm

Re: RB450 switch

Fri Jun 25, 2010 5:34 pm

this is my setup from winbox...
I am not sure how my pc's are supposed to be setup
like should gibe them IP? gateway, dns? or ny
DHCP server will do all that

again this setup its not working
i can ping anything...

let me know if I got something wrong or something missing
need help!!! :? :?
First, are you sure you can PING anything ... from the routing?(winbox tools-ping)
If so, then the problem may be in the DNS, check it.
and.........
You do not have the required permissions to view the files attached to this post.
 
Plurnay
newbie
Topic Author
Posts: 40
Joined: Mon May 03, 2010 9:00 pm

Re: RB450 switch

Fri Jun 25, 2010 6:30 pm

sorry bad typo...
I can now ping locally but not outside my network...

I do have my server in the DNS Setting windows...
and I added the pppoe-out2 interface on the Out-Interface for the masquerade...
what should there be on the source address

but its still doesnt work
?????
 
yinxiangyn
Frequent Visitor
Frequent Visitor
Posts: 53
Joined: Mon May 31, 2010 3:14 pm

Re: RB450 switch

Fri Jun 25, 2010 8:42 pm

sorry bad typo...
I can now ping locally but not outside my network...

I do have my server in the DNS Setting windows...
and I added the pppoe-out2 interface on the Out-Interface for the masquerade...
what should there be on the source address

but its still doesnt work
?????
source address and Out-Interface choose one,If a source address, such as "192.168.88.0/24"
You need other people to give you recommendations
I dont know your environment, I can find only these issues.
I think your problem in the IP ROUTER LIST
Check it focus
You do not have the required permissions to view the files attached to this post.
 
Plurnay
newbie
Topic Author
Posts: 40
Joined: Mon May 03, 2010 9:00 pm

Re: RB450 switch

Mon Jun 28, 2010 8:02 pm

these are the ip's that i receive when i connect with pppoe

I can ping localy across my network... I can just not make the internet to work on the 3 last port
where could i get more help?
 
missinlnk
Member Candidate
Member Candidate
Posts: 113
Joined: Wed Aug 13, 2008 8:10 pm

Re: RB450 switch

Wed Jun 30, 2010 1:49 am

source address and Out-Interface choose one,If a source address, such as "192.168.88.0/24"
You need other people to give you recommendations
I dont know your environment, I can find only these issues.
I think your problem in the IP ROUTER LIST
Check it focus
That funky IP address & network combination is actually ok. Some of the fun you'll see when connecting using a 3G modem. :-)

So you're saying you can make the internet work on ether2 but not when plugged into ether3, ether4, or ether5? And you're saying you can ping between computers plugged into ether2 and ether3/4/5? Something isn't adding up.

What happens when you take the computer that is working when plugged into ether2 and plug it into ether3? Can it still get to the internet? What if you take a device that isn't working on ether3/4/5 and plug it into ether2? Does it start working?

Scott
 
Plurnay
newbie
Topic Author
Posts: 40
Joined: Mon May 03, 2010 9:00 pm

Re: RB450 switch

Wed Jun 30, 2010 3:43 pm

thanks you guys i got it working...
all I was missing was a bridge on ether2 so it could talk to the WAN port...
then after that setup ether 3,4 and 5 to use master port 2
and setup ips...
 
Plurnay
newbie
Topic Author
Posts: 40
Joined: Mon May 03, 2010 9:00 pm

Re: RB450 switch

Wed Jun 30, 2010 3:46 pm

source address and Out-Interface choose one,If a source address, such as "192.168.88.0/24"
You need other people to give you recommendations
I dont know your environment, I can find only these issues.
I think your problem in the IP ROUTER LIST
Check it focus
That funky IP address & network combination is actually ok. Some of the fun you'll see when connecting using a 3G modem. :-)

So you're saying you can make the internet work on ether2 but not when plugged into ether3, ether4, or ether5? And you're saying you can ping between computers plugged into ether2 and ether3/4/5? Something isn't adding up.

What happens when you take the computer that is working when plugged into ether2 and plug it into ether3? Can it still get to the internet? What if you take a device that isn't working on ether3/4/5 and plug it into ether2? Does it start working?

Scott
before i setup the bridge i couldn't get on the internet from any port
Can I use ether2 even if its my master port????
 
yinxiangyn
Frequent Visitor
Frequent Visitor
Posts: 53
Joined: Mon May 31, 2010 3:14 pm

Re: RB450 switch

Wed Jun 30, 2010 4:12 pm

source address and Out-Interface choose one,If a source address, such as "192.168.88.0/24"
You need other people to give you recommendations
I dont know your environment, I can find only these issues.
I think your problem in the IP ROUTER LIST
Check it focus
That funky IP address & network combination is actually ok. Some of the fun you'll see when connecting using a 3G modem. :-)

So you're saying you can make the internet work on ether2 but not when plugged into ether3, ether4, or ether5? And you're saying you can ping between computers plugged into ether2 and ether3/4/5? Something isn't adding up.

What happens when you take the computer that is working when plugged into ether2 and plug it into ether3? Can it still get to the internet? What if you take a device that isn't working on ether3/4/5 and plug it into ether2? Does it start working?

Scott
before i setup the bridge i couldn't get on the internet from any port
Can I use ether2 even if its my master port????
Yes, you can use it, even if it is your master port.
If you use the bridge, such as pictures.
DHCP INTERFACE is the bridge
Other Nothing special.
You do not have the required permissions to view the files attached to this post.

Who is online

Users browsing this forum: Bing [Bot], neko98 and 40 guests