It only works if the respective client uses the gateway IP of its VLAN.
Example:
Client: 10.0.20.10
Code: Select all
ntpdate 10.0.1.1
Code: Select all
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on enp6s0, link-type EN10MB (Ethernet), snapshot length 262144 bytes
18:27:49.298384 IP 10.0.20.10.40184 > 10.0.1.1.ntp: NTPv4, Client, length 48
18:27:49.299215 IP 10.0.20.1.ntp > 10.0.20.10.40184: NTPv4, Server, length 48
18:27:51.301905 IP 10.0.20.10.53176 > 10.0.1.1.ntp: NTPv4, Client, length 48
18:27:51.302574 IP 10.0.20.1.ntp > 10.0.20.10.53176: NTPv4, Server, length 48
18:27:53.305887 IP 10.0.20.10.48852 > 10.0.1.1.ntp: NTPv4, Client, length 48
18:27:53.306560 IP 10.0.20.1.ntp > 10.0.20.10.48852: NTPv4, Server, length 48
18:27:55.341304 IP 10.0.20.10.35699 > 10.0.1.1.ntp: NTPv4, Client, length 48
18:27:55.342032 IP 10.0.20.1.ntp > 10.0.20.10.35699: NTPv4, Server, length 48
18:27:57.352659 IP 10.0.20.10.48296 > 10.0.1.1.ntp: NTPv4, Client, length 48
18:27:57.353381 IP 10.0.20.1.ntp > 10.0.20.10.48296: NTPv4, Server, length 48
18:27:59.387333 IP 10.0.20.10.60959 > 10.0.1.1.ntp: NTPv4, Client, length 48
18:27:59.388031 IP 10.0.20.1.ntp > 10.0.20.10.60959: NTPv4, Server, length 48
Code: Select all
/system/package> print
Columns: NAME, VERSION
# NAME VERSION
0 routeros 7.1.3
I know this is the gateway address of the VLAN, but the IP that was requested should answer.
I have not configured any NAT.
Did I not understand something there, or is that a bug?
Edit:
Netcat from Client 10.0.20.10 to Mikrotik (10.0.1.1):
Code: Select all
~ # nc -zuvw3 10.0.1.1 123
10.0.20.1: inverse host lookup failed: Unknown host
[10.0.20.1] 123 (ntp) open
