Community discussions

MikroTik App
 
stefanpandele
just joined
Topic Author
Posts: 2
Joined: Tue Jan 24, 2023 12:28 am

Router doesn't want to route

Tue Jan 24, 2023 12:56 am

Hi,

I just bought a RB3011UIAS-RM router and full of enthusiasm I started to configure it but after 4 hours I gave up...

I have a pppoe connection with my ISP and their router is connected into LAN1 of the mikrotik router
My computer is connected in LAN2 and my lan will have 192.168.88.0/24

I paste below the configuration and ask you to give me a helping hand.

If I ping 8.8.8.8 within winbox, it is ok but if I ping from my pc, I get timeout.

[admin@MikroTik] > ip route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 WAN-DIGI 5
1 ADC 10.0.0.1/32 82.78.103.72 WAN-DIGI 0
2 ADC 192.168.88.0/24 192.168.88.1 bridge 0


[admin@MikroTik] > export
# jan/24/2023 00:18:33 by RouterOS 6.49.7
# software id = UA0K-2K32
#
# model = RB3011UiAS
# serial number = HDF08JN1xxx
/interface bridge
add admin-mac=48:A9:8A:07:FC:5C auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether1 ] name="ether1 - DIGI"
set [ find default-name=ether2 ] name="ether2 - Mac Mini"
/interface pppoe-client
add add-default-route=yes default-route-distance=5 disabled=no interface="ether1 - DIGI" name=WAN-DIGI password=7YfdeR1Mc3 use-peer-dns=yes user=IF269932330
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface="ether2 - Mac Mini"
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=ether8
add bridge=bridge comment=defconf interface=ether9
add bridge=bridge comment=defconf interface=ether10
add bridge=bridge comment=defconf interface=sfp1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface="ether1 - DIGI" list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface="ether2 - Mac Mini" network=192.168.88.0
/ip dhcp-client
add comment=defconf default-route-distance=7 disabled=no interface="ether1 - DIGI"
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/ip route
add distance=5 gateway=WAN-DIGI
/system clock
set time-zone-name=Europe/Bucharest
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
[admin@MikroTik] >

Thanks in advance!
Last edited by BartoszP on Tue Jan 24, 2023 8:50 am, edited 1 time in total.
Reason: Use proper tags: quote to quote, code for code - keep forum tidy
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Router doesn't want to route  [SOLVED]

Tue Jan 24, 2023 8:48 am

Your NAT masquerade is configured to be going out from one of the WAN interfaces, but in the WAN interfaces you don't have PPPoE. Add it to the WAN interface list members.
 
stefanpandele
just joined
Topic Author
Posts: 2
Joined: Tue Jan 24, 2023 12:28 am

Re: Router doesn't want to route

Tue Jan 24, 2023 9:51 am

thanks a lot. that was the problem!

Who is online

Users browsing this forum: Amazon [Bot], andreacar, Bing [Bot], DMITRYB, GoogleOther [Bot], tarfox and 67 guests