HELP !! Install Probems

Magician · Tue Oct 12, 2004 6:21 pm

I have install 2.8 on a new system. I set up ip / gateway for lan / wan. I can ping test from router to internet ok. I can winbox from work station to router ok. I can ping the routers lan/wan ip's put not to the internet? Please help

Michaelg · Tue Oct 12, 2004 6:31 pm

NAT problem ?

Magician · Tue Oct 12, 2004 6:45 pm

I havent used mikrotik for about 1 1.2 years.I need to solve as i am deploying them to all my towers(14) and i can't figure out what i am doing wrong.

cmit · Tue Oct 12, 2004 6:59 pm

You should have really told us some more details about your configuration (ip addresses, ...) - how can you expect help with a problem without giving some more details about it?

Without knowing anything about the config in more detail I'd also think that you probably use private ip address space for your "workstations" and don't have a src-nat rule in place. You should read up in the manual about this, but a quick shot would be something like

/ip firewall src-nat add src-address=<your internal network address like 192.168.0.0/24> out-interface=<your interface to the internet, like ether1> action=masquerade

.

If this doesn't help, please come back with some more details...

Magician · Tue Oct 12, 2004 7:38 pm

I have ether1 configured for wan a 206.xxx.xxx.xxx/28
I have ether2 configured for a lan of 192.168.25.1/24
I have ether3 configured for a lan of 192.168.2.1/24

i ran setup

set ether 1 to 206.xxx
set gateway to my 206 gateway
set ether 2 to 192
set ether 3 to 192

Please let me know what i need to do to get on air.I plan on tweaking it it in the next few days. i normalywould not be in such a hurry but i have a sick isa cluster that has lost 2 members and i want to remove microsoft from the mix.

Magician · Tue Oct 12, 2004 8:12 pm

I have ether1 configured for wan a 206.xxx.xxx.xxx/28
I have ether2 configured for a lan of 192.168.25.1/24
I have ether3 configured for a lan of 192.168.2.1/24

i ran setup

set ether 1 to 206.xxx
set gateway to my 206 gateway
set ether 2 to 192
set ether 3 to 192

Please let me know what i need to do to get on air.I plan on tweaking it it in the next few days. i normalywould not be in such a hurry but i have a sick isa cluster that has lost 2 members and i want to remove microsoft from the mix.

cmit · Tue Oct 12, 2004 9:28 pm

Assuming you have workstations/client connected to ether2 and ether3 the src-nat rules you should add are:

/ip firewall src-nat add src-address=192.168.25.0/24 out-interface=ether1 action=masquerade

and

/ip firewall src-nat add src-address=192.168.2.0/24 out-interface=ether1 action=masquerade

respectively.

Furthermore take care that your workstations have set their default gateway to the MikroTik (192.168.25.1 or 192.168.2.1), have a proper DNS configuration etc.

Michaelg · Tue Oct 12, 2004 9:30 pm

Paste this code in your terminal window;

/ip firewall src-nat add src-address=192.168.25.0/24 out-interface=ether1 action=masquerade
add src-address=192.168.2.0/24 out-interface=ether1 action=masquerade

Magician · Tue Oct 12, 2004 11:48 pm

It is online.... However I am having a few problems

1 - Several clients will browse very slow for a few minutes than i seems to work fine. When clients cannot surf the can ping and do dns resolution. Could there be spyware or virus on my lan be causing this? The isa servers did not have any problems? Perhaps something in the q? When clients are slow they can login to winbox via my wireless network the winbox.exe downloads at 300-500kps. So I dont believe it to be wireless side. any suggestions?

Magician · Wed Oct 13, 2004 12:37 am

I believe the problem to be request persecond related? I looking and connections and had 100+ several customers had spyware / key loggers ( i looked up port numbers they were using ) If I created access rule to block all known spyware / key logger would this solve it ?

HELP !! Install Probems

HELP !! Install Probems

don't know

cmit here is some more info

cmit here is some more info

cmit - thanks for the help...

Addational information--

Who is online