I did figure it out, thanks. Now I need to figure out the firewall. Thank you, Brett A Mansfield
> On Jun 10, 2015, at 4:41 PM, Glen Waldrop <gwl...@cngwireless.net> wrote: > > Get it figured out? > > I might be able to give you a hand. Hit me up off list. > > > > From: Brett A Mansfield > Sent: Wednesday, June 10, 2015 12:17 AM > To: af@afmug.com > Subject: Re: [AFMUG] Mikrotik routing > > I have. I even tried it not bridged. I can always get it working just fine > with NAT on a private subnet on a VLAN, it just doesn't want to route my > public IP addresses that are not on a VLAN. > > Thank you, > Brett A Mansfield > >> On Jun 9, 2015, at 11:12 PM, That One Guy /sarcasm >> <thatoneguyst...@gmail.com> wrote: >> >> Wasn't there something posted the other day about these ccrs and cores to >> ports? Have you tested this in all 7 bridged ports with the same result? >> >>> On Jun 9, 2015 11:42 PM, "Brett A Mansfield" <li...@silverlakeinternet.com> >>> wrote: >>> They can ping the WAN public, but not the next hop. >>> >>> Thank you, >>> Brett A Mansfield >>> >>>> On Jun 9, 2015, at 9:40 PM, Josh Luthman <j...@imaginenetworksllc.com> >>>> wrote: >>>> >>>> Can the devices on publics ping the WAN public? Next hop up? >>>> >>>> Josh Luthman >>>> Office: 937-552-2340 >>>> Direct: 937-552-2343 >>>> 1100 Wayne St >>>> Suite 1337 >>>> Troy, OH 45373 >>>> >>>>> On Jun 9, 2015 11:39 PM, "Brett A Mansfield" >>>>> <li...@silverlakeinternet.com> wrote: >>>>> All UBNT. Almost every model XM and XW and a few dozen of their AC line. >>>>> >>>>> Thank you, >>>>> Brett A Mansfield >>>>> >>>>>> On Jun 9, 2015, at 9:31 PM, George Skorup <geo...@cbcast.com> wrote: >>>>>> >>>>>> What radios? >>>>>> >>>>>>> On 6/9/2015 9:44 PM, Brett A Mansfield wrote: >>>>>>> The public is on bridge1. VLAN 100 is a layer on top of bridge1. So >>>>>>> public is not tagged and VLAN 100 is, both on bridge1. I have each CPE >>>>>>> getting an IP address on VLAN 100 and bridging the public to the >>>>>>> customers router. >>>>>>> >>>>>>> Thank you, >>>>>>> Brett A Mansfield >>>>>>> >>>>>>>> On Jun 9, 2015, at 8:39 PM, Josh Luthman <j...@imaginenetworksllc.com> >>>>>>>> wrote: >>>>>>>> >>>>>>>> Is 192.168.100.1 and 108.165.x.x both on the vlan interface? Or one >>>>>>>> bridge1 and one vlan100? >>>>>>>> >>>>>>>> >>>>>>>> Josh Luthman >>>>>>>> Office: 937-552-2340 >>>>>>>> Direct: 937-552-2343 >>>>>>>> 1100 Wayne St >>>>>>>> Suite 1337 >>>>>>>> Troy, OH 45373 >>>>>>>> >>>>>>>> On Tue, Jun 9, 2015 at 10:36 PM, Brett A Mansfield >>>>>>>> <li...@silverlakeinternet.com> wrote: >>>>>>>>> The public IPs are not on a VLAN. The subnet is 108.165.x.0/24. >>>>>>>>> >>>>>>>>> I currently have eth1-eth7 bridged. Bridge1 is where I have the >>>>>>>>> public IPs. Bridge1 VLAN 100 is the private IPs of 192.168.100.0/24. >>>>>>>>> I don't use the SFP+ ports yet. Eth8 is the internet port. It has an >>>>>>>>> IP address of 108.165.x.246/30. I currently have this confit on an >>>>>>>>> UBNT edgerouter and it works flawlessly other than the random panics >>>>>>>>> of the OS. The local public subnet is routed. >>>>>>>>> >>>>>>>>> Thank you, >>>>>>>>> Brett A Mansfield >>>>>>>>> >>>>>>>>>> On Jun 9, 2015, at 8:29 PM, Josh Luthman >>>>>>>>>> <j...@imaginenetworksllc.com> wrote: >>>>>>>>>> >>>>>>>>>> Are the public IPs on the VLAN 100 interface? >>>>>>>>>> >>>>>>>>>> Need some configuration here. What are the device's IPs/subnets? >>>>>>>>>> What is the Mikrotik's LAN/vlan100 IP/subnet? What about WAN? Is >>>>>>>>>> the local "LAN" public subnet routed to the rest of the world? >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> Josh Luthman >>>>>>>>>> Office: 937-552-2340 >>>>>>>>>> Direct: 937-552-2343 >>>>>>>>>> 1100 Wayne St >>>>>>>>>> Suite 1337 >>>>>>>>>> Troy, OH 45373 >>>>>>>>>> >>>>>>>>>> On Tue, Jun 9, 2015 at 10:27 PM, Brett A Mansfield >>>>>>>>>> <li...@silverlakeinternet.com> wrote: >>>>>>>>>>> I am fairly new to Mikrotik and I cannot get it to do what I want. >>>>>>>>>>> I have the CCR1036-8G-2S+. I have one VLAN using private IPs. >>>>>>>>>>> It’s VLAN 100. I also have a /24 subnet of public IPs. I have NAT >>>>>>>>>>> setup for the VLAN because it does need internet access. I have no >>>>>>>>>>> NAT on the untagged VLAN of public IPs. I can access the net using >>>>>>>>>>> VLAN 100, but not the public IPs. Anyone else run into this or >>>>>>>>>>> have any ideas or thoughts? >>>>>>>>>>> >>>>>>>>>>> I’ve tried both Static and Dynamic IPs. I have NOT tried to >>>>>>>>>>> removing the VLAN 100 yet. I will give that a shot later today. I >>>>>>>>>>> do not have any kind of firewall on here just yet. >>>>>>>>>>> >>>>>>>>>>> Thank you, >>>>>>>>>>> Brett A Mansfield >>>>>>>>>>> Silver Lake Internet, LLC
