Wed Nov 20, 2019 4:59 am
W0lt,
Here is most of the info from my office router that needs to do multicast to the site ROSE and MT CB (or SLRMTCB). I have posted most of the firewall, interface, route, and address info. hope this is enough to help.
OFFICE MIKROTIK INFO:
IP Addresses:
# ADDRESS NETWORK INTERFACE
0 ;;; defconf
172.22.16.1/20 172.22.16.0 ether2-master
5 10.10.1.17/30 10.10.1.16 TCI2ROSE
7 10.10.1.25/30 10.10.1.24 TCI2SLRMTCB
15 XXX.XXX.41.194/27 XXX.XXX.41.192 ether1
IP routes:
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTAN
0 A S 0.0.0.0/0 XXX.XXX.41.193
5 ADC 10.10.1.16/30 10.10.1.17 TCI2ROSE
7 ADC 10.10.1.24/30 10.10.1.25 TCI2SLRMTCB
IP Firewall Filter rules:
Flags: X - disabled, I - invalid, D - dynamic
0 D ;;; special dummy rule to show fasttrack counters
chain=forward action=passthrough
1 ;;; Allow Trusted IPs List
chain=input action=accept protocol=gre src-address-list=Trusted IPs log=no log-prefix=""
6 chain=input action=accept dst-address=10.10.1.16/30 log=no log-prefix=""
8 chain=input action=accept dst-address=10.10.1.24/30 log=no log-prefix=""
38 ;;; ROSE forward
chain=forward action=accept src-address=172.19.0.0/16 dst-address=172.22.16.0/20 log=no
log-prefix=""
39 ;;; ROSE Input
chain=input action=accept src-address=172.19.0.0/16 dst-address=172.22.16.0/20 log=no
log-prefix=""
42 ;;; NEW MT CB FORWARD
chain=forward action=accept src-address=192.168.208.0/24 dst-address=172.22.16.0/20
log=no log-prefix=""
43 ;;; NEW MT CB INPUT
chain=input action=accept src-address=192.168.208.0/24 dst-address=172.22.16.0/20 log=no
log-prefix=""
73 ;;; defconf: accept established,related
chain=forward action=accept connection-state=established,related log=no log-prefix=""
74 chain=input action=accept protocol=icmp
75 chain=input action=accept connection-state=established
76 chain=input action=accept connection-state=related
77 ;;; defconf: fasttrack
chain=forward action=fasttrack-connection connection-state=established,related log=no
log-prefix=""
78 ;;; defconf: drop invalid
chain=forward action=drop connection-state=invalid log=no log-prefix=""
79 ;;; defconf: drop all from WAN not DSTNATed
chain=forward action=drop connection-state=new connection-nat-state=!dstnat
in-interface=ether1 log=no log-prefix=""
IP Firewall NAT:
Flags: X - disabled, I - invalid, D - dynamic
9 ;;; ROSE
chain=srcnat action=accept src-address=172.22.16.0/20 dst-address=172.19.0.0/16 log=no
log-prefix=""
11 ;;; NEW MT CB
chain=srcnat action=accept src-address=172.22.16.0/20 dst-address=192.168.208.0/24
log=no log-prefix=""
27 ;;; defconf: masquerade
chain=srcnat action=masquerade out-interface=ether1 out-interface-list=WAN log=no
log-prefix=""
28 chain=srcnat action=masquerade out-interface-list=WAN log=no log-prefix=""
-- [Q quit|D dump|up|down]
IP Firewall Address List:
Flags: X - disabled, D - dynamic
# LIST ADDRESS CREATION-TIME TIMEOUT
6 ;;; ROSE
Trusted IPs XXX.XXX.77.15 oct/15/2019 13:04:37
8 ;;; MTCB
Trusted IPs XXX.XXX.186.98 oct/15/2019 13:04:37
Interface GRE:
Flags: X - disabled, R - running
13 R name="TCI2ROSE" mtu=1400 actual-mtu=1400 local-address=0.0.0.0 remote-address=XXX.XXX.77.15
keepalive=10s,10 dscp=inherit clamp-tcp-mss=yes dont-fragment=no allow-fast-path=no
14 R name="TCI2SLRMTCB" mtu=1400 actual-mtu=1400 local-address=0.0.0.0 remote-address=XXX.XXX.186.98
keepalive=10s,10 dscp=inherit clamp-tcp-mss=yes dont-fragment=no allow-fast-path=yes