Community discussions

MikroTik App
 
genie
just joined
Topic Author
Posts: 17
Joined: Sat Mar 19, 2011 1:08 pm

problems with remote access

Sat Mar 19, 2011 1:41 pm

I have configured a mikrotik RB450 OS v4.11 as a gateway router.My ISP has given me two public IP series one for the WAN with /30 netmask and another series with /28 netmask for the LAN of the router.On the LAN side of the router I have installed authentication and management server. on the WAN of the server I have assigned one public IP with /28 netmask which is on the same subnet with the router LAN.everythings working fine,but I have problems doing remote administration of server as I cannot do remote login.I'am able to ping and winbox WAN of the router, but unable to ping LAN of the router on public IP and WAN of the management server or log into it.pls help.
 
fewi
Forum Guru
Forum Guru
Posts: 7717
Joined: Tue Aug 11, 2009 3:19 am

Re: problems with remote access

Sat Mar 19, 2011 7:15 pm

The /30 IP address should be on the WAN interface, with a default route out via the ISP router on that network. An IP address on the /28 should be on the LAN interface (not the WAN interface), then the server gets an IP on the same network and a default gateway equal to the router address on the /28. Also ensure you're not blocking traffic in the IP firewall filters.

If you need more specific help post the output of "/ip address print detail", "/ip route print detail", "/interface print", "/ip firewall export", and an accurate network diagram.
 
edon
just joined
Posts: 23
Joined: Sun Mar 20, 2011 10:51 pm

Re: problems with remote access

Sun Mar 20, 2011 11:41 pm

seems like a have the same problem
 
genie
just joined
Topic Author
Posts: 17
Joined: Sat Mar 19, 2011 1:08 pm

Re: problems with remote access

Thu Mar 24, 2011 8:43 am

I'am attaching screen shot details of IP address,IP route,IP firewall and interface config on the router.

internet (isp)
|
122.181.13.72/30 (router WAN)
|
122.181.171.192/28 (router LAN)
|
122.181.171.194/28 (management server WAN)
You do not have the required permissions to view the files attached to this post.
 
User avatar
jorj
Member
Member
Posts: 397
Joined: Mon Mar 12, 2007 4:34 pm
Location: /dev/null

Re: problems with remote access

Thu Mar 24, 2011 12:56 pm

You don't need any dst-nat rule in there.

Again: /30 address on WAN, /28 on your LAN side.
Any address on the LAN side should be on teh /28 subnet.

Who is online

Users browsing this forum: No registered users and 25 guests