Community discussions

MikroTik App
 
marekf
just joined
Topic Author
Posts: 4
Joined: Sat Dec 10, 2022 11:01 am

can't reach internet (even from the router)

Sat Dec 10, 2022 11:13 am

Hello.
If I put WAN port of my Mikrotik router directly to my ISP then it gets IP/Gateway/DNS via DHCP. I can ping gateway, DNS works but for some reason I can't reach to internet. No matter if I try from a computer connected to LAN side of the Mikrotik router or from the router directly.
[admin@MikroTik] > ping www.google.com
SEQ HOST SIZE TTL TIME STATUS
0 142.251.36.68 timeout
1 142.251.36.68 timeout
2 142.251.36.68 timeout
sent=3 received=0 packet-loss=100%

traceroute shows hop to the gateway and then timeout.

Router configuration is attached.

What's funny is that if I put my other TP-Link router to my ISP and connect Mikrotik to its LAN side then everything works fine - Mikrotik gets IP from DHCP of TP-Link and internet works. I have no idea why being connected to ISP directly breaks things.

Any idea? I'd really appreciate a help. Thank you in advance.
You do not have the required permissions to view the files attached to this post.
 
sindy
Forum Guru
Forum Guru
Posts: 10205
Joined: Mon Dec 04, 2017 9:19 pm

Re: can't reach internet (even from the router)  [SOLVED]

Sat Dec 10, 2022 1:29 pm

To me it sounds like an issue at the ISP side. What I would try in this case would be to change the MAC address of ether1 of Mikrotik to the one of the TP-Link's WAN; if the latter is not on the type shield of the TP-link, connect the TP-Link to Mikrotik's LAN and see the DHCP lease it gets.
 
marekf
just joined
Topic Author
Posts: 4
Joined: Sat Dec 10, 2022 11:01 am

Re: can't reach internet (even from the router)

Wed Dec 21, 2022 1:52 pm

Thanks Sindy. That was it. ISP was restricting internet access based on MAC of my router. Fixed by
 /interface ethernet set WAN-ISP mac-address=<MAC of my second router>
 
sindy
Forum Guru
Forum Guru
Posts: 10205
Joined: Mon Dec 04, 2017 9:19 pm

Re: can't reach internet (even from the router)

Wed Dec 21, 2022 2:01 pm

If your ISP happens to be UPC (now Vodafone): it used to be necessary to reboot the cable modem to make it accept a different MAC address on its LAN side.
 
marekf
just joined
Topic Author
Posts: 4
Joined: Sat Dec 10, 2022 11:01 am

Re: can't reach internet (even from the router)

Wed Dec 21, 2022 3:43 pm

No, it's a local provider here in Czechia. I've asked them about this and they said this is on purpose. If you switch router you need to call them and they'll update the MAC on their side. Supposedly a security improvement. Fortunately Mikrotik can edit its MACs :-)
Last edited by marekf on Wed Dec 21, 2022 9:00 pm, edited 1 time in total.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19099
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: can't reach internet (even from the router)

Wed Dec 21, 2022 4:53 pm

No, it's a local provider here in Czechia (C2NET). I've asked them about this and they said this is on purpose. If you switch router you need to call them and they'll update the MAC on their side. Supposedly a security improvement. Fortunately Mikrotik can edit its MACs :-)
Well you just proved the point that their security sucks, and they dont have two clues ............ a 10 year old can spoof a mac address.

What they need is to get educated, somebody in Czechia needs to have a stern talking to the CEO of this company because that is BS. ;-)
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11433
Joined: Thu Mar 03, 2016 10:23 pm

Re: can't reach internet (even from the router)

Wed Dec 21, 2022 5:05 pm

What they need is to get educated, somebody in Czechia needs to have a stern talking to the CEO of this company because that is BS. ;-)
I'm not sure that educating CEO about access security would make any difference. CEOs nowdays only care to please investors and that's probably true in Czechia as well.

Now, if you meant somebody should have a word with ISP's PANA (principal access network architect) ... then good luck finding that PAiNintheArse :lol:
 
marekf
just joined
Topic Author
Posts: 4
Joined: Sat Dec 10, 2022 11:01 am

Re: can't reach internet (even from the router)

Wed Dec 21, 2022 9:03 pm

I wouldn't be so hard on them. They're reliable ISP. And they said it's _one of_ the security measures, not the only one :) Anyway thanks for the help.

Who is online

Users browsing this forum: No registered users and 36 guests