Community discussions

MikroTik App
 
lctn
Member Candidate
Member Candidate
Topic Author
Posts: 176
Joined: Tue Apr 04, 2006 3:51 pm

Unable to connect to ip services

Tue Dec 07, 2021 5:21 pm

I am working with a new vrf configuration (posted below) and everything is working as expected, except I am unable to connect to the Mikrotik switch except by its mac-address, via a PC on the same subnet as the bridge. I have tried a number of rules that do show packets hitting it but I am unable to actually connect via IP. I presume I am missing a necessary part of the configuration because of my vrf setup. I tried to include routing marks and partitions but still no success.

Any guidance is appreciated.
# dec/07/2021 09:11:37 by RouterOS 6.49
# software id = SCKR-7M01
#
# model = 750
/interface bridge
add name=lobridge
add name=vbridge vlan-filtering=yes
add name=vbridge72 vlan-filtering=yes
/interface vlan
add interface=ether2 loop-protect=off name=vlan71 vlan-id=71
add interface=ether3 name=vlan72 vlan-id=72
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/routing bgp instance
set default as=65000
/interface bridge port
add bridge=vbridge interface=ether2
add bridge=vbridge72 interface=ether3
add bridge=vbridge72 interface=vlan72
add bridge=vbridge interface=vlan71
/ip address
add address=10.2.2.3/24 interface=ether1 network=10.2.2.0
add address=10.3.3.3/24 interface=ether2 network=10.3.3.0
add address=10.5.5.3 interface=lobridge network=10.5.5.3
add address=10.71.0.1/24 interface=vbridge network=10.71.0.0
add address=10.72.0.1/24 interface=vlan72 network=10.72.0.0
/ip route
add distance=1 dst-address=10.5.5.2/32 gateway=10.2.2.2
/ip route vrf
add export-route-targets=1.1.1.1:111 import-route-targets=1.1.1.1:111 \
    interfaces=vlan71,vbridge route-distinguisher=1.1.1.1:111 routing-mark=\
    cust-one
add export-route-targets=2.2.2.2:222 import-route-targets=2.2.2.2:222 \
    interfaces=vlan72,vbridge72 route-distinguisher=2.2.2.2:222 routing-mark=\
    cust-two
/ip service
set ssh address=10.71.0.0/24
/mpls ldp
set enabled=yes transport-address=10.5.5.3
/mpls ldp interface
add interface=ether1
/routing bgp instance vrf
add redistribute-connected=yes routing-mark=cust-one
add redistribute-connected=yes routing-mark=cust-two
/routing bgp peer
add address-families=vpnv4 name=peer1 remote-address=10.5.5.2 remote-as=65000 \
    update-source=lobridge
/system identity
set name=A3800
/tool sniffer
set filter-ip-address=10.71.0.12/32
Last edited by lctn on Tue Apr 26, 2022 7:50 pm, edited 1 time in total.
 
lctn
Member Candidate
Member Candidate
Topic Author
Posts: 176
Joined: Tue Apr 04, 2006 3:51 pm

[Solved]

Wed Dec 08, 2021 5:08 pm

This got me what I needed:

/ip route rule add src-address=10.0.0.1/32 action=lookup table=Green

Who is online

Users browsing this forum: rogerioqueiroz and 107 guests