Community discussions

MikroTik App
 
blackt1ger
just joined
Topic Author
Posts: 8
Joined: Sat May 04, 2013 7:26 am

Differences between bridge proxy-arp and ip firewall srcnat?

Sat May 04, 2013 7:30 pm

I'm having on tough time setting up my home network. You'd think it is easy. I have 6.0rc14 on a FB2011UAS-2HnD.

1. I want it to run my home network on 192.168.3.x.
2. use my provider ISP via DHCP client.
3. Serve up local IP's to a DHCP server
4. Run a WLAN Access Point.

I set ether1 to a dhcp client to get IP from ISP
I set IP address on ether1 to 192.168.3.1/24
I bridge ether1-ether10 and set to use IP firewall
IP Firewall srcnat with masquerade on source address list 192.168.3.0/24
DHCP server seems to work fine, no problems there.
WLAN seems to work fine.


But things still don't work.

I set srcnat to masquerade my local LAN on ether1 (or should it be the bridge?)
Do I also need to set proxy-arp on my bridge? Isn't it doing the same thing as srcnat?

-----
You would think that what I'm doing is pretty basic.....

--Ken
 
marcus65
newbie
Posts: 26
Joined: Fri Feb 08, 2013 4:15 am
Location: Brooklyn, New York

Re: Differences between bridge proxy-arp and ip firewall src

Sat May 04, 2013 8:35 pm

I'm a real beginner, but one thing I see is that ether1 can't be the DHCP client of the ISP and hold your LAN address (192.168.3.1) at the same time.

It seems that you should put the LAN address on ether2 & bridge 2-10
Last edited by marcus65 on Sun May 05, 2013 8:35 pm, edited 5 times in total.
 
blackt1ger
just joined
Topic Author
Posts: 8
Joined: Sat May 04, 2013 7:26 am

Re: Differences between bridge proxy-arp and ip firewall src

Sat May 04, 2013 9:40 pm

Thanks!

I've downgraded to 5.24 (I think, anyway the last 5.xx) because of confirmed issues with DHCP Client.

Then, I made a stupid mistake, lost access, tried to reboot with a reset configuration, and now I'm stuck at "Kernel Loading"......

I think I killed it.

--Ken
 
blackt1ger
just joined
Topic Author
Posts: 8
Joined: Sat May 04, 2013 7:26 am

Re: Differences between bridge proxy-arp and ip firewall src

Sun May 05, 2013 12:04 am

Yea for NetInstall. Brought my board back to life.

Gave up, yet again.

It is clear that Mikrotik will never be a consumer product. We use them at work to srcnat/dstnat systems we are building, as each system has the same set of IP's, and we can put them on the network so I don't have to walk down to the manufacturing bays with memory sticks to do software on them.

I bought mine so I could EVENTUALLY blackhole my daily internet attacks. But it seems that what I'm doing is too simple to merit any attention. Now, if I wanted to setup a MLPS with triple redundant EoIP with NetExtreme Point-to-Point mode, I'm sure that there will be a good FAQ and example..... lol

--Ken
 
CelticComms
Forum Guru
Forum Guru
Posts: 1765
Joined: Wed May 02, 2012 5:48 am

Re: Differences between bridge proxy-arp and ip firewall src

Sun May 05, 2013 4:35 pm

In your original post you seemed to have a mix of bridge mode and router mode features. How did you configure the unit so far?
 
blackt1ger
just joined
Topic Author
Posts: 8
Joined: Sat May 04, 2013 7:26 am

Re: Differences between bridge proxy-arp and ip firewall src

Wed May 08, 2013 7:11 am

RESOLVED --- well, sort of...

After several days of searching with google, I've got this article:
http://wiki.mikrotik.com/wiki/How_to_co ... ome_router which got me up and going.

Even though I followed the article, (and if you do, too), I'm going to change my ports around so that my ISP facing port (wan port) is on the 100 Mbps switch, instead of the 1 Gbps switch.

Although I'm still trying with the Bridge concept, I totally ignored the fact that I had two hardware switches built-in and didn't use them. It seems I can just "replace" the switch with the bridge later, making sure my "root-port" on the bridge is the same as my "master port" on the bridge.... right?

Still need to figure out how to join the two slave and one master (that I have left, after the wan and dmz ports) on one switch to the five ports on the other? Do I just run a cable between them?

Seems a waste. Probably would have to set up a second address pool and dhcp server for the second switch, too....

Most articles about bridges talk about Wireless - which is something I really don't need at the moment - not until everything else works.

Who is online

Users browsing this forum: No registered users and 28 guests