Community discussions

MikroTik App
 
alv84
newbie
Topic Author
Posts: 34
Joined: Mon Dec 27, 2021 5:46 am

can't ping mikrotik IP

Mon May 23, 2022 10:45 am

hi everyone. please help on this.
i have set two non-public static IPs one on a cisco router and the other one on a mikrotik router with default configuration. the routers are directly connected to each other. now i can ping cisco from inside mikrotik but the vice versa fails. seems to be something in mikrotik default configuration. here is the mikrotik config:
# jan/02/1970 00:34:44 by RouterOS 6.44.5
# software id = 0G7Y-54W3
#
# model = 951Ui-2HnD
# serial number = B8570BE4F3C7
/interface bridge
add admin-mac=C4:AD:34:82:55:8B auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \
    distance=indoors frequency=auto installation=indoor mode=ap-bridge ssid=\
    MikroTik-82558F wireless-protocol=802.11
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.90.2/30 interface=ether1 network=192.168.90.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=\
    ether1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked disabled=yes
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid disabled=yes
add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \
    protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
    disabled=yes in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
    disabled=yes ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
    disabled=yes ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related disabled=yes
add action=accept chain=forward comment=\
    "defconf: accept established,related, untracked" connection-state=\
    established,related,untracked disabled=yes
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid disabled=yes
add action=drop chain=forward comment=\
    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new disabled=yes in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" disabled=yes \
    ipsec-policy=out,none out-interface-list=WAN
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
by the way, i have disabled all NAT and firewall/masquerade rules.
kind regards.
 
tangent
Forum Guru
Forum Guru
Posts: 1353
Joined: Thu Jul 01, 2021 3:15 pm
Contact:

Re: can't ping mikrotik IP

Mon May 23, 2022 10:55 am

It’s here:

add action=accept chain=input comment="defconf: accept ICMP" disabled=yes protocol=icmp

Re-enable that.
 
alv84
newbie
Topic Author
Posts: 34
Joined: Mon Dec 27, 2021 5:46 am

Re: can't ping mikrotik IP

Mon May 23, 2022 11:12 am

thank you dear tangent, but re-enabling that rule didn't help. still pinging mikrotik from cisco fails.
 
tangent
Forum Guru
Forum Guru
Posts: 1353
Joined: Thu Jul 01, 2021 3:15 pm
Contact:

Re: can't ping mikrotik IP

Mon May 23, 2022 11:53 am

You have a static IP and DHCP on ether1, which isn’t a member of the bridge. Unless the Cisco box is on that port, there’s no IP to ping.

Why are you mixing static and dynamic addressing anyway?
 
alv84
newbie
Topic Author
Posts: 34
Joined: Mon Dec 27, 2021 5:46 am

Re: can't ping mikrotik IP

Mon May 23, 2022 12:01 pm

yes you're right. meanwhile i was correcting exactly the same thing. now dhcp server and the associated default ip pool are omitted. but again same result.
 
alv84
newbie
Topic Author
Posts: 34
Joined: Mon Dec 27, 2021 5:46 am

Re: can't ping mikrotik IP

Tue May 24, 2022 9:54 am

i'm really frustrated on this. can someone help me here?? right now, the mikrotik router is reset with no default configuration and a static non-public /30 IP is set on ether1. on cisco side, another IPs of the same /30 range is set; say, 192.168.90.1/30 for cisco and 192.168.90.2/30 for mikrotik. i can ping cisco from inside mikrotik but pinging mikrotik from cisco fails.
i am really wondering why yhis happens? what am i missing in my routerboard?? please help!
regards.
 
alv84
newbie
Topic Author
Posts: 34
Joined: Mon Dec 27, 2021 5:46 am

Re: can't ping mikrotik IP  [SOLVED]

Tue May 24, 2022 11:33 am

this issue is over. i had mistakenly connected the patch cord to cisco isr management port which cannot forward traffic.
this topic is closed.
thanks.

Who is online

Users browsing this forum: Bing [Bot], GoogleOther [Bot], jaclaz, Seko777, straightslant and 94 guests