Community discussions

MikroTik App
 
Jrslick22
Member Candidate
Member Candidate
Topic Author
Posts: 167
Joined: Sun Feb 06, 2005 3:25 am

RB333, RC4 - no ssl sites

Thu Sep 13, 2007 12:19 am

Just replaced my gateway MT with a rb333, set it up with a public IP on eth 1 and a r52 in a point to point link into our network, running RIP routing, defult route out, masquerade, firewall port 22, 23, 80 on the wan side, honestly nothing special or unique.

have compared it with the old unit (2.9.46) and everything looks the same.

first noticed it when skype wasn't working, then people started calling saying there online banking wasn't working.

thanks for the help
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6695
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Re: RB333, RC4 - no ssl sites

Thu Sep 13, 2007 12:30 pm

The issue is not related to RB333, I have very similar configuration, when RB333 is main gateway to Internet. It is working great.
3.0rc4 has issues with distributing default route over RIP, it is fixed at 3.0rc5.
You may try to set static routing, then SSL pages, skype should work. Note, that skype is not easy service to block, if it is not working, then most likely problems are with entire Internet connection.
 
Jrslick22
Member Candidate
Member Candidate
Topic Author
Posts: 167
Joined: Sun Feb 06, 2005 3:25 am

Re: RB333, RC4 - no ssl sites

Thu Sep 13, 2007 1:03 pm

it is not the internet connection because when i switch back to the old router it works fine.

where would one download rc5?

thanks
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6695
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Re: RB333, RC4 - no ssl sites

Thu Sep 13, 2007 1:11 pm

Probably, I was not too precise in the previous post.
As you do not mention any details about "Old router", probably it is not 3.0rc4, but 2.9.46 that's why it does not have this problem with RIP (there is issue with distributing default route). As I said you may just change to static routing, then it should work.
3.0rc5 is not released yet, you may subscribe to notification at the downloag page, you will get the mail, when new version will be released. 3.0rc5 will be released very soon.
 
Jrslick22
Member Candidate
Member Candidate
Topic Author
Posts: 167
Joined: Sun Feb 06, 2005 3:25 am

Re: RB333, RC4 - no ssl sites

Thu Sep 13, 2007 1:17 pm

oh i understand, yes you are right 2.9.46 on the old.

Im not that up on adding the static routing to overcome this, where would i begin?
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6695
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Re: RB333, RC4 - no ssl sites

Thu Sep 13, 2007 1:31 pm

You may look at RIP routes and replicate them with static entries.
As route entry contain two parts dst-address and gateway, dst-address is the address of the destination network, gateway address that is used to route packets over this IP.
E.g.
Router1(192.168.0.1) --- (192.168.0.2) Router2 (192.168.1.1);

Router1 should contain the particular entry to reach Router2 local network,
ip route add gateway=192.168.0.2 dst-address=192.168.1.0/24
Default gateway should be set on Router2 to, as 192.168.0.1.
 
Jrslick22
Member Candidate
Member Candidate
Topic Author
Posts: 167
Joined: Sun Feb 06, 2005 3:25 am

Re: RB333, RC4 - no ssl sites

Thu Sep 13, 2007 1:51 pm

ok doesnt seem very difficult

router1 (gateway rb333)
wan IP x.x.x.x--wlan IP 10.10.120.1/30 AS 0.0.0.0/0 GW x.x.x.n
where x.x.x.x is my public address and x.x.x.n is the upstream gateway

router2 (2.9.46 running RIP)
wlan IP 10.10.120.2/30 ip route add gateway=x.x.x.n dst-address=10.10.120.1/30

is this correct?
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6695
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Re: RB333, RC4 - no ssl sites

Thu Sep 13, 2007 2:08 pm

'ip route add gateway=10.10.120.1' will be enough for router2.
router1 should have the route to router2 local network.
 
Jrslick22
Member Candidate
Member Candidate
Topic Author
Posts: 167
Joined: Sun Feb 06, 2005 3:25 am

Re: RB333, RC4 - no ssl sites

Thu Sep 13, 2007 2:58 pm

right i get it, so your essentially telling router 1 how to find the other side of router 2.
i assume if i have mor than one interface on router 2 i will need to add a second route to router 1 telling it how to find this subnet also.

not sure how to test it, has not appeared to have made any difference to skype or banking. all other browsing continues to work fine
 
Jrslick22
Member Candidate
Member Candidate
Topic Author
Posts: 167
Joined: Sun Feb 06, 2005 3:25 am

Re: RB333, RC4 - no ssl sites

Sat Sep 22, 2007 3:06 pm

Seems as though the RIP issue mentioned has not been sorted in RC5 ether
 
Jrslick22
Member Candidate
Member Candidate
Topic Author
Posts: 167
Joined: Sun Feb 06, 2005 3:25 am

Re: RB333, RC4 - no ssl sites

Mon Sep 24, 2007 6:51 am

I cant be the only person who's using a rb333 as there gateway running RIP, can i?

can anyone help

Who is online

Users browsing this forum: Amazon [Bot], bpwl, holvoetn, raiser and 39 guests