Community discussions

MikroTik App
 
albgen
just joined
Topic Author
Posts: 9
Joined: Thu Sep 22, 2016 8:32 pm

Cannot ping frm comand line but from lan yes

Thu Nov 16, 2017 9:29 pm

Hello

I have a gre over ipsec up & running between 2 mikrotik routers A and B.

The topology is the following:
LanA-> router A <-> router B <-LanB

Ping from a host from Lan A to a host on the network B is ok.
Ping from cmd of router A to the same host on B not working.
Ping from cmd of router A to address of gre on router B is ok.

How can this happen?

Thank you
 
User avatar
blajah
Member Candidate
Member Candidate
Posts: 222
Joined: Fri Jun 12, 2015 8:58 pm
Location: Belgrade, Serbia
Contact:

Re: Cannot ping frm comand line but from lan yes

Thu Nov 16, 2017 10:23 pm

What happends if you specify source IP ? It works, i suppose.

Just little hint, torch traffic from router A when you are trying to ping host B, and look in source IP field.
 
sid5632
Long time Member
Long time Member
Posts: 558
Joined: Fri Feb 17, 2017 6:05 pm

Re: Cannot ping frm comand line but from lan yes

Thu Nov 16, 2017 10:59 pm

I had this problem and found the packet was trying to leave the router over the GRE tunnel with the wrong source address - it was using the address of my main WAN link rather than the tunnel address. I solved this by using a src-nat on the traffic from the router to the tunnel e.g.
/ip firewall nat add action=src-nat chain=srcnat dst-address=a.b.c.d/e src-address-type=local to-addresses=p.q.r.s
a.b.c.d/e is your remote network and p.q.r.s is the correct local address to match the IPSec 'interesting' traffic criteria.

Who is online

Users browsing this forum: No registered users and 43 guests