Get it figured out?

I might be able to give you a hand. Hit me up off list.



From: Brett A Mansfield 
Sent: Wednesday, June 10, 2015 12:17 AM
To: af@afmug.com 
Subject: Re: [AFMUG] Mikrotik routing

I have. I even tried it not bridged. I can always get it working just fine with 
NAT on a private subnet on a VLAN, it just doesn't want to route my public IP 
addresses that are not on a VLAN. 

Thank you, 
Brett A Mansfield

On Jun 9, 2015, at 11:12 PM, That One Guy /sarcasm <thatoneguyst...@gmail.com> 
wrote:


  Wasn't there something posted the other day about these ccrs and cores to 
ports? Have you tested this in all 7 bridged ports with the same result?

  On Jun 9, 2015 11:42 PM, "Brett A Mansfield" <li...@silverlakeinternet.com> 
wrote:

    They can ping the WAN public, but not the next hop.

    Thank you, 
    Brett A Mansfield

    On Jun 9, 2015, at 9:40 PM, Josh Luthman <j...@imaginenetworksllc.com> 
wrote:


      Can the devices on publics ping the WAN public?  Next hop up?

      Josh Luthman
      Office: 937-552-2340
      Direct: 937-552-2343
      1100 Wayne St
      Suite 1337
      Troy, OH 45373

      On Jun 9, 2015 11:39 PM, "Brett A Mansfield" 
<li...@silverlakeinternet.com> wrote:

        All UBNT. Almost every model XM and XW and a few dozen of their AC 
line. 

        Thank you, 
        Brett A Mansfield

        On Jun 9, 2015, at 9:31 PM, George Skorup <geo...@cbcast.com> wrote:


          What radios?


          On 6/9/2015 9:44 PM, Brett A Mansfield wrote:

            The public is on bridge1. VLAN 100 is a layer on top of bridge1. So 
public is not tagged and VLAN 100 is, both on bridge1. I have each CPE getting 
an IP address on VLAN 100 and bridging the public to the customers router.

            Thank you, 
            Brett A Mansfield

            On Jun 9, 2015, at 8:39 PM, Josh Luthman 
<j...@imaginenetworksllc.com> wrote:


              Is 192.168.100.1 and 108.165.x.x both on the vlan interface?  Or 
one bridge1 and one vlan100?


              Josh Luthman
              Office: 937-552-2340
              Direct: 937-552-2343
              1100 Wayne St
              Suite 1337
              Troy, OH 45373

              On Tue, Jun 9, 2015 at 10:36 PM, Brett A Mansfield 
<li...@silverlakeinternet.com> wrote:

                The public IPs are not on a VLAN. The subnet is 108.165.x.0/24. 

                I currently have eth1-eth7 bridged. Bridge1 is where I have the 
public IPs. Bridge1 VLAN 100 is the private IPs of 192.168.100.0/24. I don't 
use the SFP+ ports yet. Eth8 is the internet port. It has an IP address of 
108.165.x.246/30. I currently have this confit on an UBNT edgerouter and it 
works flawlessly other than the random panics of the OS. The local public 
subnet is routed.

                Thank you, 
                Brett A Mansfield

                On Jun 9, 2015, at 8:29 PM, Josh Luthman 
<j...@imaginenetworksllc.com> wrote:


                  Are the public IPs on the VLAN 100 interface? 

                  Need some configuration here.  What are the device's 
IPs/subnets?  What is the Mikrotik's LAN/vlan100 IP/subnet?  What about WAN?  
Is the local "LAN" public subnet routed to the rest of the world?



                  Josh Luthman
                  Office: 937-552-2340
                  Direct: 937-552-2343
                  1100 Wayne St
                  Suite 1337
                  Troy, OH 45373


                  On Tue, Jun 9, 2015 at 10:27 PM, Brett A Mansfield 
<li...@silverlakeinternet.com> wrote:

                    I am fairly new to Mikrotik and I cannot get it to do what 
I want.  I have the CCR1036-8G-2S+.  I have one VLAN using private IPs.  It’s 
VLAN 100.  I also have a /24 subnet of public IPs.  I have NAT setup for the 
VLAN because it does need internet access.  I have no NAT on the untagged VLAN 
of public IPs.  I can access the net using VLAN 100, but not the public IPs.  
Anyone else run into this or have any ideas or thoughts?

                    I’ve tried both Static and Dynamic IPs.  I have NOT tried 
to removing the VLAN 100 yet.  I will give that a shot later today.  I do not 
have any kind of firewall on here just yet.

                    Thank you,
                    Brett A Mansfield
                    Silver Lake Internet, LLC




Reply via email to