I've got some troubles with the PPPoE too.
Today, a new ISP has been connected to the flat, so it was time to make my RB450G take the task of distribute the net to 3 PC-s.
My problem is, when connected directly to a PC, the internet works. When connected to the RB450G, connections is established, I can ping WAN side ip-s (8.8.8.8 for example), but only from within winbox. It seems to be, LAN side can't access the WAN / PPPoE at all, so for me it seems like a route problem. But dynamic routes are active when pppoe active too.
Also, I've found some topic with this issue, but my problem still exits.
Here is some output. I hope, you can help me.
(In a topic, somebody said this firewall rules will help. Didn't worked.)
Code: Select all
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; Accept established connections
chain=input action=accept connection-state=established
1 ;;; Accept releated connections
chain=input action=accept connection-state=related
2 ;;; Drop invalid connections
chain=input action=drop connection-state=invalid
3 ;;; UDP
chain=input action=accept protocol=udp
4 ;;; TCP
chain=input action=accept protocol=tcp
5 ;;; Allow limited pings
chain=input action=accept protocol=icmp limit=50/5s,2
6 ;;; Drop excess pings
chain=input action=drop protocol=icmp
7 ;;; Accept from LAN
chain=input action=accept src-address=192.168.1.0/24 in-interface=LAN1
8 X ;;; Log everything else
chain=input action=log log-prefix="DROP INPUT"
9 X ;;; Drop everything else
chain=input action=drop
Code: Select all
[admin@RB450G] /interface> ethernet print detail
Flags: X - disabled, R - running, S - slave
0 R name="WAN" mtu=1500 l2mtu=1526 mac-address=00:0C:42:52:AE:7D arp=enabled auto-negotiation=yes full-duplex=yes
speed=100Mbps
1 R name="LAN1" mtu=1500 l2mtu=1524 mac-address=00:0C:42:52:AE:7E arp=proxy-arp auto-negotiation=yes full-duplex=yes
speed=100Mbps master-port=none bandwidth=unlimited/unlimited switch=switch1
2 S name="LAN2" mtu=1500 l2mtu=1524 mac-address=00:0C:42:52:AE:7F arp=enabled auto-negotiation=yes full-duplex=yes
speed=100Mbps master-port=LAN1 bandwidth=unlimited/unlimited switch=switch1
3 S name="LAN3" mtu=1500 l2mtu=1524 mac-address=00:0C:42:52:AE:80 arp=enabled auto-negotiation=yes full-duplex=yes
speed=100Mbps master-port=LAN1 bandwidth=unlimited/unlimited switch=switch1
4 S name="LAN4" mtu=1500 l2mtu=1524 mac-address=00:0C:42:52:AE:81 arp=enabled auto-negotiation=yes full-duplex=yes
speed=100Mbps master-port=LAN1 bandwidth=unlimited/unlimited switch=switch1
Code: Select all
[admin@RB450G] /interface> pppoe-client monitor
numbers: DIGI
status: connected
uptime: 16s
idle-time: 16s
active-links: 1
service-name:
ac-name: ar01.xviii
ac-mac: 00:18:82:01:15:2D
mtu: 1492
mru: 1492
Code: Select all
[admin@RB450G] /ip> dhcp-server print detail
Flags: X - disabled, I - invalid
0 name="DHCP-server" interface=LAN1 lease-time=3d address-pool=ip-pool bootp-support=static
authoritative=after-2sec-delay always-broadcast=yes
Code: Select all
[admin@RB450G] /ip> route print detail
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
0 ADS dst-address=0.0.0.0/0 gateway=188.143.56.1 gateway-status=188.143.56.1 reachable DIGI distance=1 scope=30
target-scope=10
1 ADC dst-address=188.143.56.1/32 pref-src=188.143.58.35 gateway=DIGI gateway-status=DIGI reachable distance=0 scope=10
2 ADC dst-address=192.168.1.0/24 pref-src=192.168.1.2 gateway=LAN1 gateway-status=LAN1 reachable distance=0 scope=10
Code: Select all
[admin@RB450G] > ip firewall nat print detail
Flags: X - disabled, I - invalid, D - dynamic
0 X chain=dstnat action=accept in-interface=DIGI
1 X chain=srcnat action=accept out-interface=LAN1
2 chain=srcnat action=masquerade src-address=192.168.1.0/24 out-interface=LAN1