Community discussions

MikroTik App
 
BSL5
just joined
Topic Author
Posts: 6
Joined: Mon May 24, 2021 9:10 pm

HAP AC2 + 3G USB Modem for failover = not work

Thu Apr 14, 2022 12:49 am

Hi.
I borrow a HUAWEI E3372 with PLAY simcard (PLAY is cell phone operator in PL) only on Christmas.
I used tutorial from this page: https://blog.ligos.net/2018-03-01/Mikro ... lover.html
Modem is recognized and get IP, mask, gateway from PLAY.
Internet not working - ping to PLAY gateway is OK, behind gateway not. Connected modem to PC, all works.
I try borrow modem on Easter.
What is the problem when connect modem to router?

Address 1.2.3.4 is not real (in real is IP from ISP), port XXXX is not for view, rest is real.

Settings with connected modem
/ip> dhcp-client print
Flags: X - disabled, I - invalid, D - dynamic 
 #   INTERFACE                                                                                   USE-PEER-DNS ADD-DEFAULT-ROUTE STATUS        ADDRESS           
 0   ether1_WAN                                                                                  no           no                bound         1.2.3.4/23  
 1 D lte1                                                                                        yes          yes               bound         192.168.8.100/24  

/ip route print 
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit 
 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0 A S  0.0.0.0/0                          1.2.3.1               1
 1  DS  0.0.0.0/0                          192.168.8.1               2
 2 ADC  1.2.3.0/23     1.2.3.4   ether1_WAN                0
 3 ADC  90.90.90.0/24      90.90.90.1      bridge_LAN                0
 4 ADC  192.168.8.0/24     192.168.8.100   lte1                      0
 
/ip firewall filter print 
Flags: X - disabled, I - invalid, D - dynamic 
 0  D ;;; special dummy rule to show fasttrack counters
      chain=forward action=passthrough 

 1    ;;; FastTrack z forum MT
      chain=forward action=fasttrack-connection connection-state=established,related log=no log-prefix="" 

 2    ;;; dla polaczen juz nawiazanych
      chain=forward action=accept connection-state=established,related log=no log-prefix="" 

 3    ;;; dla OVPN
      chain=input action=accept protocol=tcp dst-port=1194 log=no log-prefix="ovpn_log" 

 4    ;;; dla OVPN z forum MT
      chain=forward action=accept src-address=10.0.0.2-10.0.0.20 log=no log-prefix="" 

 5    ;;; dla OVPN z forum MT
      chain=forward action=accept dst-address=10.0.0.2-10.0.0.20 log=no log-prefix="" 

 6    ;;; dla polaczen z LAN
      chain=forward action=accept src-address=90.90.90.0/24 in-interface=bridge_LAN out-interface=ether1_WAN log=no log-prefix="" 

 7    ;;; dla polaczen z LAN
      chain=forward action=accept src-address=90.90.90.0/24 in-interface=bridge_LAN out-interface=lte1 log=no log-prefix="" 

 8    ;;; dla mozliwych przekierowan portow i DMZ
      chain=forward action=accept connection-nat-state=dstnat log=no log-prefix="" 

 9    ;;; zgoda na ruch wychodzacy
      chain=output action=accept log=no log-prefix="" 

10    ;;; ruch przychodzacy dla polaczen juz nawiazanych
      chain=input action=accept connection-state=established,related log=no log-prefix="" 

11    ;;; dla ping
      chain=input action=accept protocol=icmp icmp-options=8:0 log=no log-prefix="" 

12    ;;; dla ping o zbyt duym rozmiarze
      chain=input action=accept protocol=icmp icmp-options=3:4 log=no log-prefix="" 

13    ;;; do dns na routerze z lan
      chain=input action=accept connection-state=new protocol=udp src-address=90.90.90.0/24 dst-address=90.90.90.1 in-interface=bridge_LAN dst-port=XXXX log=no 
      log-prefix="" 

14    ;;; dostep do uslugi winbox z sieci lan
      chain=input action=accept connection-state=new protocol=tcp src-address=90.90.90.0/24 dst-address=90.90.90.1 in-interface=bridge_LAN dst-port=XXXX 
      log=no log-prefix="" 

15    ;;; odrzucamy reszte ruchu forward
      chain=forward action=drop log=no log-prefix="" 

16    ;;; odrzucamy reszt  ruchu przychodzacego
      chain=input action=drop log=no log-prefix="" 


 /ip firewall mangle print 
Flags: X - disabled, I - invalid, D - dynamic 
 0  D ;;; special dummy rule to show fasttrack counters
      chain=prerouting action=passthrough 

 1  D ;;; special dummy rule to show fasttrack counters
      chain=forward action=passthrough 

 2  D ;;; special dummy rule to show fasttrack counters
      chain=postrouting action=passthrough 

 3    chain=prerouting action=accept in-interface=all-ppp log=no log-prefix=""	  
 
 
/ip firewall nat print      
Flags: X - disabled, I - invalid, D - dynamic 
 0    chain=srcnat action=masquerade out-interface=ether1_WAN log=no log-prefix="" 

 1    chain=srcnat action=masquerade out-interface=lte1 log=no log-prefix="" 

 2    ;;; XRay 
      chain=dstnat action=dst-nat to-addresses=90.90.90.13 to-ports=XXXX protocol=tcp dst-address=1.2.3.4 dst-port=XXXX log=no log-prefix="" 

 3    ;;; XRay 
      chain=dstnat action=dst-nat to-addresses=90.90.90.13 to-ports=XXXX protocol=tcp dst-address=1.2.3.4 dst-port=XXXX log=no log-prefix="" 

 4    ;;; XRay 
      chain=dstnat action=dst-nat to-addresses=90.90.90.13 to-ports=XXXX protocol=tcp dst-address=1.2.3.4 dst-port=XXXX log=no log-prefix="" 

 5    ;;; ovpn
      chain=srcnat action=masquerade src-address=10.0.0.0/24 dst-address=90.90.90.0/24 out-interface=bridge_LAN log=no log-prefix="" 

 6 I  ;;; ovpn
      ;;; xray_s not ready
      chain=srcnat action=masquerade src-address=90.90.90.0/24 dst-address=10.0.0.0/24 out-interface=xray_s log=no log-prefix=""
	  
 
User avatar
w32pamela
Member Candidate
Member Candidate
Posts: 212
Joined: Fri Jul 12, 2013 4:22 pm

Re: HAP AC2 + 3G USB Modem for failover = not work

Thu Apr 14, 2022 2:52 pm

Did you add lte1 to the interface list as a WAN port?
 
erlinden
Forum Guru
Forum Guru
Posts: 1920
Joined: Wed Jun 12, 2013 1:59 pm
Location: Netherlands

Re: HAP AC2 + 3G USB Modem for failover = not work

Thu Apr 14, 2022 3:15 pm

Would be very helpfull if you share your config:

/export hide-sensitive file=anynameyoulike
 
BSL5
just joined
Topic Author
Posts: 6
Joined: Mon May 24, 2021 9:10 pm

Re: HAP AC2 + 3G USB Modem for failover = not work

Tue May 03, 2022 8:35 pm

Sorry, I'm late with answer but still waiting to borrow a modem.
This is my cfg - change my IP to 1.2.3.4 and some specified ports to XXXX.

LTE as WAN - don't remember.
You do not have the required permissions to view the files attached to this post.

Who is online

Users browsing this forum: Bing [Bot] and 29 guests