Community discussions

MikroTik App
 
User avatar
Jeepguy1823
just joined
Topic Author
Posts: 3
Joined: Tue Dec 12, 2017 12:58 am
Location: Quantico, VA

CCR1009-7G-1C-1S+PC basic setup

Tue Dec 12, 2017 1:13 am

Ok, new to Mikrotik and routerOS. I am attempting to setup as a router behind verizon router.
I have a static ip set on Ether1 with that connection directly to my verizon router (confirmed I can Ping outside IP's via mikrotik ping tool)
I have Ether3 set up to my switch which has 2 PC's connected to it, Both have static IP's set so no DHCP server needed
I have a Route setup with Dst address of 0.0.0.0/0 and a gateway of 192.168.1.1 (shows as reachable ether1)

Addresses I have the following
192.168.1.3/24 Network 192.168.1.0 ether1
192.168.2.187/24 Network 192.168.2.0 ether3

Firewall NAT srcnat with everything blank and set to masquerade

I have DNS set to 8.8.8.8 and a secondary of 8.8.4.4

I have followed multiple guides and videos but no matter what I do I cannot reach the internet from either PC. I can ping each PC and manage the router, but for some reason the link is not being made to ether1. Any thoughts?
 
User avatar
evince
Member
Member
Posts: 355
Joined: Thu Jul 05, 2012 12:11 pm
Location: Harzé - Belgique
Contact:

Re: CCR1009-7G-1C-1S+PC basic setup

Tue Dec 12, 2017 12:21 pm

Hello, post your config please : export compact hide-sensitive
 
User avatar
blajah
Member Candidate
Member Candidate
Posts: 222
Joined: Fri Jun 12, 2015 8:58 pm
Location: Belgrade, Serbia
Contact:

Re: CCR1009-7G-1C-1S+PC basic setup

Tue Dec 12, 2017 2:45 pm

Do you have default route on your MT router?
 
User avatar
Jeepguy1823
just joined
Topic Author
Posts: 3
Joined: Tue Dec 12, 2017 12:58 am
Location: Quantico, VA

Re: CCR1009-7G-1C-1S+PC basic setup

Wed Dec 13, 2017 12:27 am

Hello, post your config please : export compact hide-sensitive
[admin@MikroTik] > export
# dec/12/2017 17:22:28 by RouterOS 6.40.5
# software id = FFBU-XNHT
#
# model = CCR1009-7G-1C-1S+
# serial number =
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=192.168.2.20-192.168.2.254
add name=dhcp_pool1 ranges=192.168.2.20-192.168.2.254
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=ether2 name=dhcp1
add address-pool=dhcp_pool1 disabled=no interface=ether3 name=dhcp2
/ip address
add address=192.168.88.1/24 comment=defconf disabled=yes interface=combo1 network=192.168.88.0
add address=192.168.2.187/24 comment="xxxx" interface=ether3 network=192.168.2.0
add address=192.168.1.3/24 interface=ether1 network=192.168.1.0
add address=192.168.2.1/24 comment="xxxx" interface=ether2 network=192.168.2.0
/ip dhcp-server network
add address=192.168.2.0/24 gateway=192.168.2.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/ip route
add comment="Connection to Verizon Router" distance=1 gateway=192.168.1.1
/system clock
set time-zone-name=America/New_York
[admin@MikroTik] >
 
User avatar
evince
Member
Member
Posts: 355
Joined: Thu Jul 05, 2012 12:11 pm
Location: Harzé - Belgique
Contact:

Re: CCR1009-7G-1C-1S+PC basic setup

Wed Dec 13, 2017 11:10 am

Hello,

You have a problem with your configuration,

/ip address
add address=192.168.88.1/24 comment=defconf disabled=yes interface=combo1 network=192.168.88.0
add address=192.168.2.187/24 comment="xxxx" interface=ether3 network=192.168.2.0
add address=192.168.1.3/24 interface=ether1 network=192.168.1.0
add address=192.168.2.1/24 comment="xxxx" interface=ether2 network=192.168.2.0

I do not understand why you set an ip on ether2 and 3 in the same subnet.
 
User avatar
Jeepguy1823
just joined
Topic Author
Posts: 3
Joined: Tue Dec 12, 2017 12:58 am
Location: Quantico, VA

Re: CCR1009-7G-1C-1S+PC basic setup

Sun Dec 17, 2017 8:20 pm

Hello,

You have a problem with your configuration,

/ip address
add address=192.168.88.1/24 comment=defconf disabled=yes interface=combo1 network=192.168.88.0
add address=192.168.2.187/24 comment="xxxx" interface=ether3 network=192.168.2.0
add address=192.168.1.3/24 interface=ether1 network=192.168.1.0
add address=192.168.2.1/24 comment="xxxx" interface=ether2 network=192.168.2.0

I do not understand why you set an ip on ether2 and 3 in the same subnet.

Hello, I've started over with an even more basic config, still the same problem, I can ping the outside network from the router, it pulls time from the SNTP server, but I still cannot communicate through the router from the inside network. Here again is my config

[admin@MikroTik] > export hide-sensitive
# dec/17/2017 13:18:19 by RouterOS 6.40.5
# software id = FFBU-XNHT
#
# model = CCR1009-7G-1C-1S+
# serial number = 6F5006DA1353
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=192.168.2.2
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=ether2 lease-time=1d5h name=dhcp1
/ip address
add address=192.168.2.1/30 interface=ether2 network=192.168.2.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1 use-peer-dns=no use-peer-ntp=no
/ip dhcp-server network
add address=192.168.2.0/30 gateway=192.168.2.1
/ip dns
set servers=8.8.8.8,8.8.4.4
/ip firewall nat
add action=masquerade chain=srcnat src-address-list=""
/ip route
add distance=1 gateway=ether1
/system clock
set time-zone-autodetect=no time-zone-name=America/New_York
/system ntp client
set primary-ntp=129.6.15.28 secondary-ntp=132.163.97.1
[admin@MikroTik] >
 
User avatar
evince
Member
Member
Posts: 355
Joined: Thu Jul 05, 2012 12:11 pm
Location: Harzé - Belgique
Contact:

Re: CCR1009-7G-1C-1S+PC basic setup

Mon Dec 18, 2017 10:07 am

Hello, your config is not complete, there is no nat, firewall and route rule
 
User avatar
docmarius
Forum Guru
Forum Guru
Posts: 1224
Joined: Sat Nov 06, 2010 12:04 pm
Location: Timisoara, Romania
Contact:

Re: CCR1009-7G-1C-1S+PC basic setup

Mon Dec 18, 2017 2:13 pm

In addition to the IP address problem, you have 2 supplemental issues.

1. NAT is wrong, you need only do nat for the WAN interface:
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1

2. You need a default route for your uplink using an ip address not an interface name (IF names work only on PtP links, like PPPoE).
/ip route
add gateway=192.168.1.1

To have 2 ethernet IFs on the same network, you need to put them on a bridge (since there is no switch chip on this model), and assign the IP to the bridge.

Who is online

Users browsing this forum: blackt1ger, Kharv3st and 48 guests