Ik wil mijn Fritzbox 9590 vervangen door een MikroTik hEX, waarbij de Fritzbox gewoon een IP client wordt die WiFi en DECT afhandelt. Ik ben al een week bezig maar het lukt me niet om mijn netwerk goed aan de praat te krijgen.
Test configuratie: geen Fritzbox, geen IPTV en 3 Netgear managed switches.
Wat werkt er wel:
- ik kan van ieder device in het netwerk en van de router naar het internet pingen
- ik kan vanaf de router naar ieder IP in het netwerk pingen
Wat werkte er niet:
- ik kan vanaf de router of van andere devices naar geen enkel device op naam pingen. Hierdoor draaien veel van mijn applicaties niet.
Voorbeeld hiervan:
[admin@MikroTik] > ping dev
invalid value for argument address:
invalid value of mac-address, mac address required
invalid value for argument ipv6-address
failure: dns name exists, but no appropriate recordHierbij mijn config:
# MikroTik hEX Configuration for KPN network with single DHCP server
# Create a new bridge 'local'
/interface bridge
add name=local arp=proxy-arp igmp-snooping=yes multicast-querier=yes protocol-mode=none
# Add VLAN configuration for internet, IP-TV and VOIP
/interface vlan
add comment=IP-TV interface=ether1 name=vlan1.4 vlan-id=4
add comment=INTERNET interface=ether1 name=vlan1.6 vlan-id=6
# Configure PPPoE client for ISP connection
/interface pppoe-client
add add-default-route=yes allow=pap disabled=no interface=vlan1.6 \
keepalive-timeout=20 max-mru=1500 max-mtu=1500 name=pppoe-kpn \
use-peer-dns=yes password=kpn profile=default user=kpn
# Assign IP pool for the local DHCP server
/ip pool
add name=local-pool ranges=192.168.178.20-192.168.178.254
# Configure DHCP server on the local bridge
/ip dhcp-server
add address-pool=local-pool interface=local lease-time=1h name=dhcp-local
# Add all remaining ports to the local bridge
/interface bridge port
add bridge=local interface=ether2
add bridge=local interface=ether3
add bridge=local interface=ether4
add bridge=local interface=ether5
# Assign IP address to the local bridge
/ip address add address=192.168.178.1/24 interface=local network=192.168.178.0
# Static DNS Entries
/ip dns static
add name=Switch-01 address=192.168.178.3
add name=Switch-02 address=192.168.178.4
add name=Switch-03 address=192.168.178.5
add name=mckie address=192.168.178.11
# Add sticky DHCP reservations
/ip dhcp-server lease
add address=192.168.178.220 mac-address=8E:53:05:0B:01:48 comment="dev"
# Configure DHCP server network settings
/ip dhcp-server network
add address=192.168.178.0/24 dns-server=192.168.178.1 gateway=192.168.178.1
# DNS configuration to allow remote requests
/ip dns # use KPN DNS servers
# set allow-remote-requests=yes servers=195.121.97.202,195.121.97.203
set allow-remote-requests=yes
# default firewall [from EIGENROUTER.NL]
/ip firewall filter
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept established,related" connection-state=established,related
add action=drop chain=input comment="defconf: drop all from WAN" in-interface=ether1
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related" connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface=ether1
# enable fasttrack [from EIGENROUTER.NL]
/ip firewall filter
add chain=forward action=fasttrack-connection connection-state=established,related
add chain=forward action=accept connection-state=established,related
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=ether1
#add action=fasttrack-connection chain=forward comment="fast-track for established,related" connection-state=established,related hw-offload=yes
#add action=accept chain=input comment="accept established,related" connection-state=established,related
#add action=accept chain=input comment="allow ICMP" in-interface=pppoe-kpn protocol=icmp
#add action=drop chain=input in-interface=pppoe-kpn
# NAT configuration for internet access
/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-kpn
# Basic security settings to prevent unauthorized access
/ip service set ssh address=192.168.178.0/24 disabled=no
/ip service set winbox address=192.168.178.0/24
/ip service set telnet disabled=yes
/ip service set ftp disabled=yes
/ip service set www disabled=yes
/ip service set api disabled=yes
# Set the system clock timezone
/system clock
set time-zone-name=Europe/Amsterdam
/interface detect-internet
set detect-interface-list=all internet-interface-list=all lan-interface-list=\
all wan-interface-list=all
Kan iemand mij verder helpen?