Community discussions

MikroTik App
  4. RouterOS
  5. Beginner Basics

Unable to connect to Microsoft Teams when using RB4011IGS+5HACQ2HND-IN  [SOLVED]

Post Reply
 
javornik
just joined
Topic Author
Posts: 11
Joined: Mon May 11, 2020 3:42 pm

Unable to connect to Microsoft Teams when using RB4011IGS+5HACQ2HND-IN

Mon May 11, 2020 4:33 pm

Hi,

I've just started using a router (MikroTik RB4011IGS+5HACQ2HND-IN) to connect to Internet. I'm unable to connect to Microsoft Teams when using this router.
At same time connecting through two other old routers of mine (one driven by OpenWrt, the other by its own firmware - without special tweaking) work fine with Microsoft Teams.

The issue is reproducible from different clients (Windows 10, Ubuntu Linux, Android smartphone) so I suspected it could be an issue related to my router.
I guess there is some caveat with firewall settings. I'm using NAT, firewall settings are left default. I tried disabling *drop* filter rules but that didn't help.

Here are my ip filter settings:
Code: Select all
/ip firewall filter> export
# may/11/2020 16:23:19 by RouterOS 6.46.6
## model = RB4011iGS+5HacQ2HnD
/ip firewall filter
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new \
    in-interface-list=WAN
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established
add action=accept chain=input connection-state=related
add action=drop chain=input in-interface-list=!LAN
Any assistance is welcome - either about configuring the router or getting logs and diagnostics to better understand it.
Top
 
User avatar
jvanhambelgium
Forum Guru
Forum Guru
Posts: 1120
Joined: Thu Jul 14, 2016 9:29 pm
Location: Belgium

Re: Unable to connect to Microsoft Teams when using RB4011IGS+5HACQ2HND-IN

Mon May 11, 2020 5:51 pm

What are your DNS settings ? Your clients use some direct ISP DNS servers or is the Mikrotik intermediate ?
All other web-access works fine I guess ?
Top
 
User avatar
gazingbazooka
Frequent Visitor
Frequent Visitor
Posts: 93
Joined: Mon Feb 10, 2020 7:10 pm
Location: Toronto, Canada

Re: Unable to connect to Microsoft Teams when using RB4011IGS+5HACQ2HND-IN

Mon May 11, 2020 5:55 pm

You said you started using it recently? Are all settings out of the box or did you customize anything. There should be 0 issues with Teams running out of the box.
Top
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 22223
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:
Contact anav

Re: Unable to connect to Microsoft Teams when using RB4011IGS+5HACQ2HND-IN

Mon May 11, 2020 6:49 pm

Concur, i use MS teams and had nothing to do on the router.
Tells me something is screwy withe your MS Teams load on your pC, or something is configured incorrectly on the router.
Top
 
javornik
just joined
Topic Author
Posts: 11
Joined: Mon May 11, 2020 3:42 pm

Re: Unable to connect to Microsoft Teams when using RB4011IGS+5HACQ2HND-IN

Mon May 11, 2020 9:35 pm

Thanks for sharing your feedback! Good to know that MS Teams works elsewhere - could you confirm if RouterOS version is the same like mine?

I haven't customized the firewall, I just did some minor WiFi adjustmenets. The issue is reproducible on several devices so I guess it's not something specific to my PC/phone. All other network works fine so far. Including communication software like Skype, Skype for Business, Zoom.

I am using DHCP and automatic DNS (MikroTik intermediary - DHCP and DNS are enabled in MikroTik).

I consider resetting my router settings to default just in case...
Top
 
User avatar
gazingbazooka
Frequent Visitor
Frequent Visitor
Posts: 93
Joined: Mon Feb 10, 2020 7:10 pm
Location: Toronto, Canada

Re: Unable to connect to Microsoft Teams when using RB4011IGS+5HACQ2HND-IN

Mon May 11, 2020 10:20 pm

Thanks for sharing your feedback! Good to know that MS Teams works elsewhere - could you confirm if RouterOS version is the same like mine?

I haven't customized the firewall, I just did some minor WiFi adjustmenets. The issue is reproducible on several devices so I guess it's not something specific to my PC/phone. All other network works fine so far. Including communication software like Skype, Skype for Business, Zoom.

I am using DHCP and automatic DNS (MikroTik intermediary - DHCP and DNS are enabled in MikroTik).

I consider resetting my router settings to default just in case...
Code: Select all
# may/11/2020 15:09:48 by RouterOS 6.46.6
# software id = T6YZ-SZKV
#
# model = 2011UiAS
Top
 
javornik
just joined
Topic Author
Posts: 11
Joined: Mon May 11, 2020 3:42 pm

Re: Unable to connect to Microsoft Teams when using RB4011IGS+5HACQ2HND-IN

Tue May 12, 2020 1:05 am

Trying the long-term/testing router versions didn't help.

I traced teams process from old and new (MikroTik) routers and I have a feeling that there might be something with IPV6 or/and UDP and ICMP. Disabling IPV6 on the old router leads to similar issue (it works fine with IPV6 enabled).

An excerpt from strace of teams when running through the old (working fine) router:
Code: Select all
[pid 40310] socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC, IPPROTO_IP) = 100
[pid 40310] connect(100, {sa_family=AF_INET, sin_port=htons(0), sin_addr=inet_addr("52.113.194.132")}, 16) = 0
Code: Select all
[pid 40266] connect(97, {sa_family=AF_INET6, sin6_port=htons(53), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "2001:4860:4860::8888", &sin6_addr), sin6_scope_id=0}, 28) = 0
And from the MikroTik one:
- It tries to connect via TCP instead of UDP (as was the case with my old router)
Code: Select all
[pid 40063] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 98
[pid 40063] setsockopt(98, SOL_TCP, TCP_NODELAY, [1], 4) = 0
[pid 40063] setsockopt(98, SOL_SOCKET, SO_KEEPALIVE, [1], 4) = 0
[pid 40063] setsockopt(98, SOL_TCP, TCP_KEEPIDLE, [45], 4) = 0
[pid 40063] setsockopt(98, SOL_TCP, TCP_KEEPINTVL, [45], 4) = 0
[pid 40063] connect(98, {sa_family=AF_INET, sin_port=htons(443), sin_addr=inet_addr("52.113.194.132")}, 16) = -1 EINPROGRESS (Operation now in progress)
[pid 40063] getsockopt(98, SOL_SOCKET, SO_ERROR, [0], [4]) = 0
[pid 40060] recvmsg(27, {msg_namelen=0}, 0) = -1 EAGAIN (Resource temporarily unavailable)
...
- A connection to an address failed which worked OK with the old router
Code: Select all
[pid 40063] socket(AF_INET6, SOCK_DGRAM, IPPROTO_IP) = 98
[pid 40063] connect(98, {sa_family=AF_INET6, sin6_port=htons(53), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "2001:4860:4860::8888", &sin6_addr), sin6_scope_id=0}, 28) = -1 ENETUNREACH (Network is unreachable)
[pid 40138] sendto(27, "\310\0\0\0\20\0\1\0\0\0\0\0\0\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 200, MSG_NOSIGNAL, NULL, 0) = 200

And then I tried much simpler test which works fine on my old routers and fails on the MikroTik one:
Code: Select all
$ ping6 2001:4860:4860::8888
ping6: connect: Network is unreachable
Top
 
javornik
just joined
Topic Author
Posts: 11
Joined: Mon May 11, 2020 3:42 pm

Re: Unable to connect to Microsoft Teams when using RB4011IGS+5HACQ2HND-IN  [SOLVED]

Thu May 14, 2020 12:21 am

I managed to resolve my IPv6 issue (see viewtopic.php?f=13&t=161089) and after Microsft Teams is working fine for me :-)
Top
Post Reply
  4. RouterOS
  5. Beginner Basics