[Mikrotik] Cisco to Mikrotik IPIP Tunnel Routing (Bump)

[Chris Gotstein]

(bump)

I need to setup a tunnel between a Mikrotik box and a Cisco router.  I
already have the tunnel setup, and can ping each side.  But i need to be
able to access the private ip ranges (APs, clients, etc) that are
connected to the MT box from the network that the Cisco is on.  I know
it's as simple as setting up the correct routes, but for the life of me,
i'm just not getting the right combination.  Here's a layout:

Cisco(192.168.255.253) - (tunnel1) - Mikrotik(192.168.255.254)

Need to access these subnets on the MT box:
172.16.50.0/24
172.16.9.0/24

I setup a route on the cisco as follows:

ip route 172.16.50.0 255.255.255.0 tunnel1
ip route 172.16.9.0 255.255.255.0 tunnel1

I can then ping the 172.16.50.1 address from the Cisco, which is one of
the addresses assigned to the MT box.  But if i try to ping 172.16.50.5,
which is a server beyond the MT box, it times out.

I'm pretty sure i'm missing some routes on the MT box to make this
happen.  Any suggestions?

--
Chris Gotstein
Sr Network Engineer
UP Logon/Computer Connection UP
500 N Stephenson Ave
Iron Mountain, MI 49801
Phone: 906-774-4847
Fax: 906-774-0335
ch...@uplogon.com

___
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS

Re: [Mikrotik] Cisco to Mikrotik IPIP Tunnel Routing

[Chris Gotstein]

That's the thing, there is no private network on the cisco i want to 
route on the MT.  I'm using public IPs for the source and destination of 
the tunnel


Chris Gotstein
Sr Network Engineer
UP Logon/Computer Connection UP
500 N Stephenson Ave
Iron Mountain, MI 49801
Phone: 906-774-4847
Fax: 906-774-0335
ch...@uplogon.com

Butch Evans wrote:

On Thu, 2009-04-09 at 10:26 -0500, Butch Evans wrote:

On Thu, 2009-04-09 at 08:58 -0500, Chris Gotstein wrote:

Cisco(192.168.255.254) - (tunnel1) - Mikrotik(192.168.255.254)

What kind of tunnel is this?


Oops!  I just noticed the subject line.  


You need to add a route in the MT that routes the cisco's private
network via the tunnel.  If the private network on the cisco side is
172.16.10.0/24, the route would be something like:

/ip route
add gateway=CiscoTunnel dst-address=172.16.10.0/24


___
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS

Re: [Mikrotik] Cisco to Mikrotik IPIP Tunnel Routing

[Chris Gotstein]

IPIP

Chris Gotstein
Sr Network Engineer
UP Logon/Computer Connection UP
500 N Stephenson Ave
Iron Mountain, MI 49801
Phone: 906-774-4847
Fax: 906-774-0335
ch...@uplogon.com

Butch Evans wrote:

On Thu, 2009-04-09 at 08:58 -0500, Chris Gotstein wrote:

Cisco(192.168.255.254) - (tunnel1) - Mikrotik(192.168.255.254)


What kind of tunnel is this?



___
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS

Re: [Mikrotik] Cisco to Mikrotik IPIP Tunnel Routing

[Butch Evans]

On Thu, 2009-04-09 at 10:26 -0500, Butch Evans wrote:
> On Thu, 2009-04-09 at 08:58 -0500, Chris Gotstein wrote:
> > Cisco(192.168.255.254) - (tunnel1) - Mikrotik(192.168.255.254)
> 
> What kind of tunnel is this?

Oops!  I just noticed the subject line.  

You need to add a route in the MT that routes the cisco's private
network via the tunnel.  If the private network on the cisco side is
172.16.10.0/24, the route would be something like:

/ip route
add gateway=CiscoTunnel dst-address=172.16.10.0/24

-- 

* Butch Evans   * Professional Network Consultation*
* http://www.butchevans.com/* Network Engineering  *
* http://www.wispa.org/ * WISPA Board Member   *
* http://blog.butchevans.com/   * Wired or Wireless Networks   *



___
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS

Re: [Mikrotik] Cisco to Mikrotik IPIP Tunnel Routing

[Josh Luthman]

Cisco really likes IPSEC.  Can it do others like PPTP?

Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373

Those who don't understand UNIX are condemned to reinvent it, poorly.
--- Henry Spencer


On Thu, Apr 9, 2009 at 11:26 AM, Butch Evans  wrote:

> On Thu, 2009-04-09 at 08:58 -0500, Chris Gotstein wrote:
> > Cisco(192.168.255.254) - (tunnel1) - Mikrotik(192.168.255.254)
>
> What kind of tunnel is this?
>
>
> --
> 
> * Butch Evans   * Professional Network Consultation*
> * http://www.butchevans.com/* Network Engineering  *
> * http://www.wispa.org/ * WISPA Board Member   *
> * http://blog.butchevans.com/   * Wired or Wireless Networks   *
> 
>
>
> ___
> Mikrotik mailing list
> Mikrotik@mail.butchevans.com
> http://www.butchevans.com/mailman/listinfo/mikrotik
>
> Visit http://blog.butchevans.com/ for tutorials related to Mikrotik
> RouterOS
>
-- next part --
An HTML attachment was scrubbed...
URL: 

___
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS

Re: [Mikrotik] Cisco to Mikrotik IPIP Tunnel Routing

[Butch Evans]

On Thu, 2009-04-09 at 08:58 -0500, Chris Gotstein wrote:
> Cisco(192.168.255.254) - (tunnel1) - Mikrotik(192.168.255.254)

What kind of tunnel is this?


-- 

* Butch Evans   * Professional Network Consultation*
* http://www.butchevans.com/* Network Engineering  *
* http://www.wispa.org/ * WISPA Board Member   *
* http://blog.butchevans.com/   * Wired or Wireless Networks   *



___
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS

Re: [Mikrotik] Cisco to Mikrotik IPIP Tunnel Routing

[Chris Gotstein]

Opps, typo.  Cisco is 192.168.255.253

Micah Miller wrote:

The cisco is 192.168.255.254 and so is the Mikrotik?
Chris Gotstein wrote:
I need to setup a tunnel between a Mikrotik box and a Cisco router.  I 
already have the tunnel setup, and can ping each side.  But i need to 
be able to access the private ip ranges (APs, clients, etc) that are 
connected to the MT box from the network that the Cisco is on.  I know 
it's as simple as setting up the correct routes, but for the life of 
me, i'm just not getting the right combination.  Here's a layout:


Cisco(192.168.255.254) - (tunnel1) - Mikrotik(192.168.255.254)

Need to access these subnets on the MT box:
172.16.50.0/24
172.16.9.0/24

I setup a route on the cisco as follows:

ip route 172.16.50.0 255.255.255.0 tunnel1
ip route 172.16.9.0 255.255.255.0 tunnel1

I can then ping the 172.16.50.1 address from the Cisco, which is one 
of the addresses assigned to the MT box.  But if i try to ping 
172.16.50.5, which is a server beyond the MT box, it times out.


I'm pretty sure i'm missing some routes on the MT box to make this 
happen.  Any suggestions?






___
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS

Re: [Mikrotik] Cisco to Mikrotik IPIP Tunnel Routing

[Micah Miller]

The cisco is 192.168.255.254 and so is the Mikrotik?
Chris Gotstein wrote:
I need to setup a tunnel between a Mikrotik box and a Cisco router.  I 
already have the tunnel setup, and can ping each side.  But i need to 
be able to access the private ip ranges (APs, clients, etc) that are 
connected to the MT box from the network that the Cisco is on.  I know 
it's as simple as setting up the correct routes, but for the life of 
me, i'm just not getting the right combination.  Here's a layout:


Cisco(192.168.255.254) - (tunnel1) - Mikrotik(192.168.255.254)

Need to access these subnets on the MT box:
172.16.50.0/24
172.16.9.0/24

I setup a route on the cisco as follows:

ip route 172.16.50.0 255.255.255.0 tunnel1
ip route 172.16.9.0 255.255.255.0 tunnel1

I can then ping the 172.16.50.1 address from the Cisco, which is one 
of the addresses assigned to the MT box.  But if i try to ping 
172.16.50.5, which is a server beyond the MT box, it times out.


I'm pretty sure i'm missing some routes on the MT box to make this 
happen.  Any suggestions?





--
Micah Miller
Network/Server Administrator
Network Business Systems, Inc.
http://www.nbson.com
http://www.kewanee.com
http://www.revealed.net

___
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS

[Mikrotik] Cisco to Mikrotik IPIP Tunnel Routing

[Chris Gotstein]

I need to setup a tunnel between a Mikrotik box and a Cisco router.  I 
already have the tunnel setup, and can ping each side.  But i need to be 
able to access the private ip ranges (APs, clients, etc) that are 
connected to the MT box from the network that the Cisco is on.  I know 
it's as simple as setting up the correct routes, but for the life of me, 
i'm just not getting the right combination.  Here's a layout:


Cisco(192.168.255.254) - (tunnel1) - Mikrotik(192.168.255.254)

Need to access these subnets on the MT box:
172.16.50.0/24
172.16.9.0/24

I setup a route on the cisco as follows:

ip route 172.16.50.0 255.255.255.0 tunnel1
ip route 172.16.9.0 255.255.255.0 tunnel1

I can then ping the 172.16.50.1 address from the Cisco, which is one of 
the addresses assigned to the MT box.  But if i try to ping 172.16.50.5, 
which is a server beyond the MT box, it times out.


I'm pretty sure i'm missing some routes on the MT box to make this 
happen.  Any suggestions?


--
Chris Gotstein
Sr Network Engineer
UP Logon/Computer Connection UP
500 N Stephenson Ave
Iron Mountain, MI 49801
Phone: 906-774-4847
Fax: 906-774-0335
ch...@uplogon.com
___
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS