MikroTik

SEJohnsen

This is an old thread but from the posts appears to be an ongoing issue. I appear to be having the exact same problem that Kraken described. I set up OpenVPN Server on my RouterBoard 750G r2 running RouterOS v6.47.3 (current version as of 10 Sept 2020), and I am connecting to it with a Windows 7 Pro...

SEJohnsen

Can you let me know how do I delete that IP from ether2 and assign it to the bridge?

IP --> Addresses

SEJohnsen

Sorry for the hijack OP.... I just tried this connection: Comcast gateway in "pass through mode" Port 1 --> Mikrotik port 1; M port 2 goes to main switch; M port 5 I hook up my laptop With my laptop I login directly into the Mikrotik wifi, I get internet connection. Office workstations co...

SEJohnsen

I have dynamic IP. What would happen if Comcast is in "pass through" mode, and I turned IPV4 LAN DHCP off. Currently my Comcast has firewall off w/Mikrotik in router mode, but no internet. I suspect that will not work. My understanding is that "pass through" mode is not the same...

SEJohnsen

I'm still not 100% sure that you got me right: both approaches are possible. If you want them to be in one subnet - then you need to bridge two ethernet interfaces together and add vlan filtering configuration (either on the bridge itself or on the switch chip). If you are ok on different subnets -...

SEJohnsen

viewtopic.php?f=13&t=143620
Is your best reference, there should be no issues with
what you desire using the above information

Thanks. That's a very useful explanation of VLANs. That doc also confirms what XVO said. The interfaces must be on separate subnets.

SEJohnsen

That makes sense. Thanks so much for your help! большое спасибо!

SEJohnsen

Assigning an address to a slave interface (and ethernet interface will be a slave to a bridge in your config) is not something you would want to have - can lead to unexpected behaviour. But you can assign as much addresses as you need to a VLAN interface, that will be on top of the bridge. Per your...

SEJohnsen

Traffic between subnets will be handled by CPU. Traffic inside one subnet won't, in most of the cases (and if configured right). And yes, some workaround will most likely end up using CPU too. However, all this can be negligible, if the amount of traffic is relatively low. Thank you so much! Do you...

SEJohnsen

Good news is I've already opened a bug report support ticket with MikroTik on this very issue. About two days ago I was able to catch the bug (logs and everything right) right after a clean reboot, which I then immediately generated a supout file and that should give MikroTik sufficient information...

SEJohnsen

If default Comcast gateway is 10.1.10.1 and we have dynamic IP, what should WAN IP address be set at? If your RB is behind the Comcast router (not in bridge mode), then both devices get a WAN IP and LAN IP. The Comcast router gets your public IP from Comcast; it presents 10.1.10.1 as the LAN IP. Yo...

SEJohnsen

If you need them in one subnet - do it properly. If not really: ok, separate subnets are also fine. It's an easier approach, but not performance-wise. Thank you. By "do it properly" you mean bridge vlan filtering, correct? And are you saying that to have them on separate subnets will be a...

SEJohnsen

That is not the correct way. Bridging VLAN interfaces with physical ports is a misconfiguration. You should add both ethernet ports to the same bridge and then setup a proper vlan filtering. Depending on the RB model, it can be either using bridge vlan filtering or switch chip vlan filtering. Thank...

SEJohnsen

Should it be changed to match that of Comcast gateway?

No. Only if you have a static IP and bridge mode.

SEJohnsen

Paul, someone told me that I should NOT use Quick Set to make changes unless this is a first boot situation. So you should use WebFig to edit.

I found this here. This may be your solution.
https://help.mikrotik.com/docs/display/ ... figuration

SEJohnsen

Currently Quick Set shows the WAN IP address as 0.0.0.0. How/where do I get rid of that or change it in webfig? I'd like to to be an automatic IP address.

NM, I found this here: https://help.mikrotik.com/docs/display/ ... figuration

SEJohnsen

Quick Set should only be used once on a device which has been reset to default. If you make any other changes to the configuration with Winbox, Webfig or CLI the results of running Quick Set again are completely unpredictable. Thanks. That's really helpful. Currently Quick Set shows the WAN IP addr...

SEJohnsen

Due to physical constraints I can have only one cable going from my Mikrotik RB to where most of the office equipment is. I have this plugged into ether2 configured with several VLANs. One of the VLANs (VLAN11) is on 192.168.1.x. I'd like to have either3 on the same subnet, with devices on VLAN11 ta...

SEJohnsen

Paul, for what it's worth, it's not your imagination. I'm having nearly the exact same issue. The Comcast cable modem failed to provide an IP address to the Mikrotik RB, so the automatic WAN IP address got changed to a static IP 0.0.0.0 in Quick Set. If I change it back to automatic, or set it to a ...

SEJohnsen

Can you clarify? So this line is by default?: /interface detect-internet detect-interface-list=none

In the WebFig, go to Interfaces, then click on the button "Detect Internet." Only the WAN port should detect Internet, or none of them.

SEJohnsen

Copied and paste from a Comcast forum, posted by a Comcast tech: "On the Comcast Network Static IP address cannot be assigned to a bridged device. Placing the device in <true bridge mode> disables all router functions of the gateway. In <true bridge mode> the public IP is passed directly to on...

SEJohnsen

UPDATE: There's something on the Quick Set page that kept breaking my RB. Whether or not I'm connected to Comcast, once I apply the settings in Quick Set, the box becomes unusable. The config that I restored has WAN IP 192.168.10.2 (static) and LAN IP 192.168.88.1 or 192.168.1.1 on the Quick Set pag...

SEJohnsen

One tech claims that if comcast modem is in bridge mode, it would require static IP. True or false? I don't know if it's true or not, but given the level of knowledge of several of the Comcast reps I talked to today, I'd take it with a grain of salt and verify independently. That doesn't sound righ...

SEJohnsen

Thanks for the tips. In your case, is your Mikrotik showing an IP address? I assume if all is working correctly, the Mikrotik should show the Comcast gateway's IP. If all is working correctly, the Mikrotik should have at least two IPs, one for WAN (coming from Comcast), and one for LAN (which it di...

SEJohnsen

Put comcast into pure bridge mode and try with a computer attached directly if you can set it in the way that everything starts to work. Yes, it didn't work like that, which is what finally got Comcast to replace the router. But unfortunately they replaced it with another non-functioning one. I've ...

SEJohnsen

The only real reason to ever use these devices is if you need static addresses. If you don't just get a regular modem and things will "just work". In my case, I don't need the static IP address, but what I DO need is to set up VLANs with advanced firewall rules. Internet service is in the...

SEJohnsen

How does one check to see if the Mikrotik is receiving a DHCP address? 1) If Mikrotik is set to obtain an address automatically, and your Internet is working downstream from the Mikrotik, it got a DHCP address. 2) Log into web admin and go to Quick set. It will show you the IP address it obtained b...

SEJohnsen

Newb question: how does one look and post the router 's config? Sorry for hijack.

Go to Terminal window, type

export file my-current-config

Then go to Webfig --> Files and download the rsc file it generated. Open in any text editor.

SEJohnsen

https://forum.mikrotik.com/viewtopic.php?f=2&t=165733 OP, I posted my thread in "General" section. Near identical issue. Every other Comcast tech gave me a different answer. One I spoke this morning says bridge mode requires static IP. I have dynamic IP. So he recommends "pass th...

SEJohnsen

So the saga continues... I set the Comcast modem to have LAN IP 192.168.10.1 with DHCP starting at 192.168.10.90. (Note: this is not bridge mode.) The RB is set to WAN IP 192.168.10.2. I plugged it in and everything worked great on the RB! Firewall, routing, Internet access, all good so far. Then tw...

SEJohnsen

Thanks so much!

SEJohnsen

Connecting on that port and on that subnet. But I think it's simply marking them as invalid because I have everything disconnected. When I reconnect the cables and reboot, they come back. So tomorrow I plan to go back over and install this again in the church office.

SEJohnsen

Update: I replaced the Comcast router with a brand new router, but the RB still was not working. Then I noticed that since the eth ports were mixed up, it affected IP addresses, DHCPP servers, etc. I think I've cleaned up the remaining eth port errors. However, I cannot access the RB admin from eth3...

SEJohnsen

That looks like a likely source for the problem. I'll change the interfaces, pools, servers and addresses and see what happens.

SEJohnsen

Thanks. Shouldn't the RB at least be able to get an IP address from the Comcast router via DHCP when Comcast is in router mode? Or be able to get online if I put a static IP on the RB? I'm concerned that I can go out and buy a new modem and my RB setup still isn't working.

SEJohnsen

Yes, it's a combo device. It should work either in router mode or bridge mode. I did call Comcast and put in in bridge mode, but the Mikrotik did not work either way.

SEJohnsen

Yes, I rebooted the Comcast router and made sure the RB was the only device connected. Here is the config: # sep/09/2019 00:59:42 by RouterOS 6.42.11 # software id = H2AJ-QXHP # # model = RB750Gr3 /interface ethernet set [ find default-name=ether2 ] l2mtu=1598 name=ether1-gateway set [ find default-...

SEJohnsen

I was so happy with the Mikrotik Routerboard I'm using at home that I talked my church into buying one for their building. Now I cannot for the life of me get it to work. The only difference that I can see between home setup and work setup is that I have a static IP from Comcast (business class Inte...

SEJohnsen

Hi, I have a Mikrotik routerboard in my home with several segregated VLANs (work/family/guest). Now I would like to run OpenVPN on the routerboard so I the kids can connect to our NAS while away at school and so that I can work remotely if needed. I followed the OpenVPN documentation on the wiki to ...

Search found 39 matches

Re: OpenVPN server and duplicate packets

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Bridging VLAN and ethernet

Re: Bridging VLAN and ethernet

Re: Bridging VLAN and ethernet

Re: Bridging VLAN and ethernet

Re: Bridging VLAN and ethernet

Re: No IP Address Acquired

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Bridging VLAN and ethernet

Re: Bridging VLAN and ethernet

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: No IP Address Acquired

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Bridging VLAN and ethernet

Re: No IP Address Acquired

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Re: Mikrotik router behind Comcast business modem with dynamic IPv6

Mikrotik router behind Comcast business modem with dynamic IPv6

OpenVPN connection failing