There is a ton of good information on the MT forums. Offer still stands.
----- Original Message ----- From: Brett A Mansfield To: af@afmug.com Sent: Wednesday, June 10, 2015 5:51 PM Subject: Re: [AFMUG] Mikrotik routing I did figure it out, thanks. Now I need to figure out the firewall. Thank you, Brett A Mansfield On Jun 10, 2015, at 4:41 PM, Glen Waldrop <gwl...@cngwireless.net> wrote: Get it figured out? I might be able to give you a hand. Hit me up off list. From: Brett A Mansfield Sent: Wednesday, June 10, 2015 12:17 AM To: af@afmug.com Subject: Re: [AFMUG] Mikrotik routing I have. I even tried it not bridged. I can always get it working just fine with NAT on a private subnet on a VLAN, it just doesn't want to route my public IP addresses that are not on a VLAN. Thank you, Brett A Mansfield On Jun 9, 2015, at 11:12 PM, That One Guy /sarcasm <thatoneguyst...@gmail.com> wrote: Wasn't there something posted the other day about these ccrs and cores to ports? Have you tested this in all 7 bridged ports with the same result? On Jun 9, 2015 11:42 PM, "Brett A Mansfield" <li...@silverlakeinternet.com> wrote: They can ping the WAN public, but not the next hop. Thank you, Brett A Mansfield On Jun 9, 2015, at 9:40 PM, Josh Luthman <j...@imaginenetworksllc.com> wrote: Can the devices on publics ping the WAN public? Next hop up? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Jun 9, 2015 11:39 PM, "Brett A Mansfield" <li...@silverlakeinternet.com> wrote: All UBNT. Almost every model XM and XW and a few dozen of their AC line. Thank you, Brett A Mansfield On Jun 9, 2015, at 9:31 PM, George Skorup <geo...@cbcast.com> wrote: What radios? On 6/9/2015 9:44 PM, Brett A Mansfield wrote: The public is on bridge1. VLAN 100 is a layer on top of bridge1. So public is not tagged and VLAN 100 is, both on bridge1. I have each CPE getting an IP address on VLAN 100 and bridging the public to the customers router. Thank you, Brett A Mansfield On Jun 9, 2015, at 8:39 PM, Josh Luthman <j...@imaginenetworksllc.com> wrote: Is 192.168.100.1 and 108.165.x.x both on the vlan interface? Or one bridge1 and one vlan100? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Tue, Jun 9, 2015 at 10:36 PM, Brett A Mansfield <li...@silverlakeinternet.com> wrote: The public IPs are not on a VLAN. The subnet is 108.165.x.0/24. I currently have eth1-eth7 bridged. Bridge1 is where I have the public IPs. Bridge1 VLAN 100 is the private IPs of 192.168.100.0/24. I don't use the SFP+ ports yet. Eth8 is the internet port. It has an IP address of 108.165.x.246/30. I currently have this confit on an UBNT edgerouter and it works flawlessly other than the random panics of the OS. The local public subnet is routed. Thank you, Brett A Mansfield On Jun 9, 2015, at 8:29 PM, Josh Luthman <j...@imaginenetworksllc.com> wrote: Are the public IPs on the VLAN 100 interface? Need some configuration here. What are the device's IPs/subnets? What is the Mikrotik's LAN/vlan100 IP/subnet? What about WAN? Is the local "LAN" public subnet routed to the rest of the world? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Tue, Jun 9, 2015 at 10:27 PM, Brett A Mansfield <li...@silverlakeinternet.com> wrote: I am fairly new to Mikrotik and I cannot get it to do what I want. I have the CCR1036-8G-2S+. I have one VLAN using private IPs. It’s VLAN 100. I also have a /24 subnet of public IPs. I have NAT setup for the VLAN because it does need internet access. I have no NAT on the untagged VLAN of public IPs. I can access the net using VLAN 100, but not the public IPs. Anyone else run into this or have any ideas or thoughts? I’ve tried both Static and Dynamic IPs. I have NOT tried to removing the VLAN 100 yet. I will give that a shot later today. I do not have any kind of firewall on here just yet. Thank you, Brett A Mansfield Silver Lake Internet, LLC