Community discussions

MikroTik App
 
DBob
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 81
Joined: Fri Jun 10, 2011 4:13 pm

PPPoE problems #2

Fri Jun 10, 2011 4:34 pm

Hi all!

I've got some troubles with the PPPoE too.
Today, a new ISP has been connected to the flat, so it was time to make my RB450G take the task of distribute the net to 3 PC-s.

My problem is, when connected directly to a PC, the internet works. When connected to the RB450G, connections is established, I can ping WAN side ip-s (8.8.8.8 for example), but only from within winbox. It seems to be, LAN side can't access the WAN / PPPoE at all, so for me it seems like a route problem. But dynamic routes are active when pppoe active too.

Also, I've found some topic with this issue, but my problem still exits.
Here is some output. I hope, you can help me.

(In a topic, somebody said this firewall rules will help. Didn't worked.)
Flags: X - disabled, I - invalid, D - dynamic 
 0   ;;; Accept established connections
     chain=input action=accept connection-state=established 
 1   ;;; Accept releated connections
     chain=input action=accept connection-state=related 
 2   ;;; Drop invalid connections
     chain=input action=drop connection-state=invalid 
 3   ;;; UDP
     chain=input action=accept protocol=udp 
 4   ;;; TCP
     chain=input action=accept protocol=tcp 
 5   ;;; Allow limited pings
     chain=input action=accept protocol=icmp limit=50/5s,2 
 6   ;;; Drop excess pings
     chain=input action=drop protocol=icmp 
 7   ;;; Accept from LAN
     chain=input action=accept src-address=192.168.1.0/24 in-interface=LAN1 
 8 X ;;; Log everything else
     chain=input action=log log-prefix="DROP INPUT" 
 9 X ;;; Drop everything else
     chain=input action=drop 
[admin@RB450G] /interface> ethernet print detail 
Flags: X - disabled, R - running, S - slave 
 0 R  name="WAN" mtu=1500 l2mtu=1526 mac-address=00:0C:42:52:AE:7D arp=enabled auto-negotiation=yes full-duplex=yes 
      speed=100Mbps 

 1 R  name="LAN1" mtu=1500 l2mtu=1524 mac-address=00:0C:42:52:AE:7E arp=proxy-arp auto-negotiation=yes full-duplex=yes 
      speed=100Mbps master-port=none bandwidth=unlimited/unlimited switch=switch1 

 2  S name="LAN2" mtu=1500 l2mtu=1524 mac-address=00:0C:42:52:AE:7F arp=enabled auto-negotiation=yes full-duplex=yes 
      speed=100Mbps master-port=LAN1 bandwidth=unlimited/unlimited switch=switch1 

 3  S name="LAN3" mtu=1500 l2mtu=1524 mac-address=00:0C:42:52:AE:80 arp=enabled auto-negotiation=yes full-duplex=yes 
      speed=100Mbps master-port=LAN1 bandwidth=unlimited/unlimited switch=switch1 

 4  S name="LAN4" mtu=1500 l2mtu=1524 mac-address=00:0C:42:52:AE:81 arp=enabled auto-negotiation=yes full-duplex=yes 
      speed=100Mbps master-port=LAN1 bandwidth=unlimited/unlimited switch=switch1 
[admin@RB450G] /interface> pppoe-client monitor      
numbers: DIGI           
        status: connected
        uptime: 16s
     idle-time: 16s
  active-links: 1
  service-name: 
       ac-name: ar01.xviii
        ac-mac: 00:18:82:01:15:2D
           mtu: 1492
           mru: 1492
[admin@RB450G] /ip> dhcp-server print detail 
Flags: X - disabled, I - invalid 
 0   name="DHCP-server" interface=LAN1 lease-time=3d address-pool=ip-pool bootp-support=static 
     authoritative=after-2sec-delay always-broadcast=yes
[admin@RB450G] /ip> route print detail 
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, 
B - blackhole, U - unreachable, P - prohibit 
 0 ADS  dst-address=0.0.0.0/0 gateway=188.143.56.1 gateway-status=188.143.56.1 reachable DIGI distance=1 scope=30 
        target-scope=10 

 1 ADC  dst-address=188.143.56.1/32 pref-src=188.143.58.35 gateway=DIGI gateway-status=DIGI reachable distance=0 scope=10 

 2 ADC  dst-address=192.168.1.0/24 pref-src=192.168.1.2 gateway=LAN1 gateway-status=LAN1 reachable distance=0 scope=10
[admin@RB450G] > ip firewall nat print detail 
Flags: X - disabled, I - invalid, D - dynamic 
 0 X chain=dstnat action=accept in-interface=DIGI 

 1 X chain=srcnat action=accept out-interface=LAN1 

 2   chain=srcnat action=masquerade src-address=192.168.1.0/24 out-interface=LAN1
 
fewi
Forum Guru
Forum Guru
Posts: 7717
Joined: Tue Aug 11, 2009 3:19 am

Re: PPPoE problems #2

Mon Jun 13, 2011 6:53 pm

Change the out-interface in NAT rule 2 (the enabled source NAT rule) to DIGI instead of LAN1.
 
DBob
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 81
Joined: Fri Jun 10, 2011 4:13 pm

Re: PPPoE problems #2

Mon Jun 13, 2011 8:33 pm

Change the out-interface in NAT rule 2 (the enabled source NAT rule) to DIGI instead of LAN1.
Thank you for the reply!

In the meanwhile, I've managed to solve the problem.
Yes, what you mentioned was one of the mistakes. Another one, that I've changed the LAN1 address from 192.168.1.3 to 192.168.1.2, but I forgot to change within dhcp server the gateway.

Lame mistake, I know :lol:

Who is online

Users browsing this forum: laku, mansuramir, tarfox, torchify and 59 guests