here is the deal.


NSM5---NSM5__Omnitik__SXT---SXT__RB1100ahx2(pppoe server)__SXT---SXT__Omnitik__NSM5---SXT

everything is in singe bridge with IP 172.16.16.1/22
from first NSM5 I can access every mikrotik in this configuration but can not access any NS after that RB1100ahx2. I can ping them tho but can not open with browser. What am I missing? I've read there is something with NAT? Can you please tell me what to do?

Describe the situation better or make a drawing,
what will you do

Have you logged in with https on the ubiquiti's

http://picpaste.com/pics/Untitled-0LKQd ... 794923.png

I can access everything that is green.
I can not access everything that is red.
I can ping everything on that picture from my NS5.
Anything else you need?

Green? Red? where... I don't see a picture.

You say you can ping... what size packets? Try a 1500 byte packet and see what happens... my guess is that you have an MTU issue somewhere along the way, most likely with one of the UBNT devices, which is limited to 1500 bytes out of the box. Raise the MTU to 1600, and you should be good to go.

Good luck!

Green? Red? where... I don't see a picture.

You say you can ping... what size packets? Try a 1500 byte packet and see what happens... my guess is that you have an MTU issue somewhere along the way, most likely with one of the UBNT devices, which is limited to 1500 bytes out of the box. Raise the MTU to 1600, and you should be good to go.

Good luck!

now? can you see it?
I can access first nanostation but not last. both nanostations same config. and yes MTU is set to 1500. it is default.

heh.. yeah, I see it now. It does indeed smack of an MTU problem. Ping with full sized packets and figure out which devices will need some extra room.

news on this.
I just saw that in the picture that I've already posted I can access all those mikrotiks because I was opening them via MAC. Now if I try to open them via IP I got the following:



I can ping everything with full sized packets.

bump

if you connect to the rb1100 can you ping from it the sxt connected in port 3?

We use WDS mode for ubiquity, if you do client and ap mode , the device wil do some sort of Natting ...

deejayq: yes I can ping any IP on the network.

Petzl: we are using WDS too.

Have you try with https ?

tried with enabled https and with disabled https on ubiquiti devices. no luck

Are you sure about your subnet?

First say you:everything is in singe bridge with IP 172.16.16.1/22
Later speak you from everything is in single bridge with IP 172.16.16.1/24

Maby a mistake in subnets in the devices

sorry about that. it is /22 but even if it was /24 it should not be a problem. and even I made somewhere mistake and put 24 instead of 22 it should work. I guess... :S