Unable to Ping Gateway

Post Reply

Print view


waleedsahmed just joined: Posts: 3; Joined: Mon Nov 06, 2023 1:31 am

Quote
#1

Mon Nov 06, 2023 1:39 am

So the scenario is i have a LAN network on RB1100ah (192.168.100.1/24) and i configured DHCP (192.168.100.101-250/24). My few clients getting IP from DHCP server but they cannot browse internet or ping their gateway 192.168.100.1/24.
What i have noticed if my system got ip from dhcp or i assign static from 192.168.100.100-192.168.100.110 internet stopped working and they cannot even ping the gateway ip. Rest of the ip's from dhcp or static working fine.
I am using a basic Cisco SG300 48 port switch under mikrotik router, i have verified all firewall rules nothing was there to block.

Last edited by waleedsahmed on Tue Nov 07, 2023 2:20 am, edited 1 time in total.

Re: Unable to Ping Gateway

Quote
#2

Mon Nov 06, 2023 5:58 am

Post your config. Otherwise we are just guessing.
To export and paste your configuration (and I'm assuming you are using WebFig or Winbox), open a terminal window,
and type (without the quotes) "/export hide-sensitive file=any-filename-you-wish". Then open the files section
and right click on the filename you created and select download in order to download the file to your computer.
It will be a text file with whatever name you saved to with an extension of .rsc. Open that file in your favorite
text editor and redact any sensitive information if desired / needed. Then in your message here, click the code
display icon in the toolbar above the text entry (the code display icon is the 7th one from the left and looks
like a square with a blob in the middle). Then paste the text from the file in between the two code words in brackets.

Top

Re: Unable to Ping Gateway

Quote
#3

Tue Nov 07, 2023 2:19 am

Code: Select all

# nov/07/2023 05:09:19 by RouterOS 6.44.5# software id = IEFB-EBP5## model = RB1100Dx4# serial number = 9BD90B7E04BA/interface ethernetset [ find default-name=ether5 ] name=Gi0/5set [ find default-name=ether6 ] name=Gi0/6set [ find default-name=ether7 ] name=Gi0/7set [ find default-name=ether8 ] name=Gi0/8set [ find default-name=ether9 ] name=Gi0/9set [ find default-name=ether11 ] name=Gi0/11set [ find default-name=ether12 ] name=Gi0/12set [ find default-name=ether13 ] name=Gi0/13set [ find default-name=ether10 ] advertise=10M-full,100M-full,1000M-full \ comment=LAN-GW name=LAN-Gi0/10set [ find default-name=ether1 ] advertise=10M-full,100M-full,1000M-full \ comment=NTL-40Mbps name=NTL1-Gi0/1set [ find default-name=ether2 ] advertise=10M-full,100M-full,1000M-full \ comment=NTL-40Mbps disabled=yes name=NTL2-Gi0/2set [ find default-name=ether3 ] advertise=10M-full,100M-full,1000M-full \ comment=PTCL-100Mbps disabled=yes name=PTCL1-Gi0/3set [ find default-name=ether4 ] advertise=10M-full,100M-full,1000M-full \ disabled=yes name=PTCL2-Gi0/4/interface ethernet switch portset 0 default-vlan-id=0set 1 default-vlan-id=0set 2 default-vlan-id=0set 3 default-vlan-id=0set 4 default-vlan-id=0set 5 default-vlan-id=0set 6 default-vlan-id=0set 7 default-vlan-id=0set 8 default-vlan-id=0set 9 default-vlan-id=0set 10 default-vlan-id=0set 11 default-vlan-id=0set 12 default-vlan-id=0set 13 default-vlan-id=0set 14 default-vlan-id=0set 15 default-vlan-id=0/interface listadd name=NTL2add name=PTCL1add name=LANadd name=NTL1add name=PTCL2/interface wireless security-profilesset [ find default=yes ] supplicant-identity=MikroTik/ip firewall layer7-protocoladd name=youtube regexp=\ "^..+\\.(youtube.com|googlevideo.com|akamaihd.net).*\$"add name=Ringcentral regexp="^..+\\.(ringcentral.com).*\$"add name=facebook regexp="^..+\\.(facebook\\.com).*\$"add name=Skype regexp="^..+\\.(Skype.com).*\$"add name=Experian regexp="^..+\\.(onesource.passporthealth.com|chip.experianhe\ alth.com|experianhealth.diamondview.nett).*\$"/ip pooladd name=dhcp_pool0 ranges=192.168.100.101-192.168.100.249/ip dhcp-serveradd address-pool=dhcp_pool0 disabled=no interface=LAN-Gi0/10 name=dhcp1/queue treeadd name=RChits packet-mark=RC_packet parent=global priority=4add max-limit=5M name=skpehits packet-mark=skype parent=global queue=default/dudeset enabled=yes/ip firewall connection trackingset enabled=yes/interface list memberadd interface=NTL1-Gi0/1 list=NTL1add interface=LAN-Gi0/10 list=LAN/ip addressadd address=192.168.100.1/24 comment=LAN interface=LAN-Gi0/10 network=\ 192.168.100.0add address=192.168.17.3/24 comment=NTL1 interface=NTL1-Gi0/1 network=\ 192.168.17.0/ip arpadd address=192.168.100.5 interface=LAN-Gi0/10 mac-address=44:47:CC:B6:88:2Cadd address=192.168.100.30 interface=LAN-Gi0/10 mac-address=00:0C:29:FA:2F:AEadd address=192.168.100.31 interface=LAN-Gi0/10 mac-address=1C:1B:0D:54:93:43add address=192.168.100.32 interface=LAN-Gi0/10 mac-address=98:DF:82:D8:1B:A8add address=192.168.100.100 interface=LAN-Gi0/10 mac-address=\ 00:0C:29:60:60:A1add address=192.168.100.104 interface=LAN-Gi0/10 mac-address=\ 88:D7:F6:3D:6D:88add address=192.168.100.132 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:DB:2Badd address=192.168.100.143 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:E9:8Dadd address=192.168.100.146 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:DB:8Badd address=192.168.100.133 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:DB:40add address=192.168.100.120 interface=LAN-Gi0/10 mac-address=\ 10:7B:44:A2:15:D9add address=192.168.100.115 interface=LAN-Gi0/10 mac-address=\ 88:D7:F6:3D:6D:9Eadd address=192.168.100.181 interface=LAN-Gi0/10 mac-address=\ 18:C0:4D:4F:4D:DFadd address=192.168.100.123 interface=LAN-Gi0/10 mac-address=\ 88:D7:F6:3D:6D:20add address=192.168.100.253 interface=LAN-Gi0/10 mac-address=\ 54:86:BC:4F:8D:EAadd address=192.168.100.251 interface=LAN-Gi0/10 mac-address=\ A4:B2:39:CA:3F:25add address=192.168.100.252 interface=LAN-Gi0/10 mac-address=\ 00:72:78:8E:52:6Badd address=192.168.100.163 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:D9:8Eadd address=192.168.100.160 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:BA:C3add address=192.168.100.165 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:85:F8:9Eadd address=192.168.100.180 interface=LAN-Gi0/10 mac-address=\ 18:C0:4D:4F:4D:BDadd address=192.168.100.145 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:DA:DCadd address=192.168.19.1 interface=PTCL1-Gi0/3 mac-address=C8:3A:35:99:96:A8add address=192.168.18.1 interface=NTL2-Gi0/2 mac-address=C8:A7:76:3A:0F:84add address=192.168.17.1 interface=NTL1-Gi0/1 mac-address=48:FD:8E:D0:B6:90add address=192.168.100.112 interface=LAN-Gi0/10 mac-address=\ D0:17:C2:D0:1F:EFadd address=192.168.100.144 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:85:F8:5Fadd address=192.168.100.162 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:DB:5Cadd address=192.168.100.166 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:E8:7Dadd address=192.168.100.101 interface=LAN-Gi0/10 mac-address=\ D0:17:C2:D0:28:5Fadd address=192.168.100.102 interface=LAN-Gi0/10 mac-address=\ D0:17:C2:D0:27:34add address=192.168.100.103 interface=LAN-Gi0/10 mac-address=\ 1C:1B:0D:54:9C:01add address=192.168.100.111 interface=LAN-Gi0/10 mac-address=\ D0:17:C2:D0:1F:FFadd address=192.168.100.108 interface=LAN-Gi0/10 mac-address=\ 88:D7:F6:3D:6D:75add address=192.168.100.109 interface=LAN-Gi0/10 mac-address=\ 10:7B:44:A2:15:E0add address=192.168.100.106 interface=LAN-Gi0/10 mac-address=\ 88:D7:F6:3D:6C:D9add address=192.168.100.193 interface=LAN-Gi0/10 mac-address=\ 18:C0:4D:46:71:F3add address=192.168.100.118 interface=LAN-Gi0/10 mac-address=\ 88:D7:F6:3D:6D:76add address=192.168.100.199 interface=LAN-Gi0/10 mac-address=\ 18:C0:4D:4C:28:93add address=192.168.100.174 interface=LAN-Gi0/10 mac-address=\ 18:C0:4D:4F:4D:CFadd address=192.168.100.124 interface=LAN-Gi0/10 mac-address=\ 1C:1B:0D:54:9B:FDadd address=192.168.100.186 interface=LAN-Gi0/10 mac-address=\ 24:4B:FE:7F:8A:13add address=192.168.100.192 interface=LAN-Gi0/10 mac-address=\ 24:4B:FE:7F:8A:2Dadd address=192.168.100.142 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:BA:9Dadd address=192.168.100.117 interface=LAN-Gi0/10 mac-address=\ 60:45:CB:60:30:D8add address=192.168.100.154 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:DA:7Fadd address=192.168.100.185 interface=LAN-Gi0/10 mac-address=\ 18:C0:4D:4F:4C:11add address=192.168.100.135 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:DA:30add address=192.168.100.191 interface=LAN-Gi0/10 mac-address=\ 18:C0:4D:4F:4B:09add address=192.168.100.141 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:85:FB:AFadd address=192.168.100.116 interface=LAN-Gi0/10 mac-address=\ D0:17:C2:D0:22:42add address=192.168.100.147 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:B2:08add address=192.168.100.153 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:DB:6Dadd address=192.168.100.159 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:85:FB:D8add address=192.168.100.134 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:E8:74add address=192.168.100.183 interface=LAN-Gi0/10 mac-address=\ 24:4B:FE:7F:88:D0add address=192.168.100.158 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:85:FB:CDadd address=192.168.100.189 interface=LAN-Gi0/10 mac-address=\ 24:4B:FE:7F:88:CEadd address=192.168.100.164 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:D5:6Aadd address=192.168.100.139 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:E9:13add address=192.168.100.195 interface=LAN-Gi0/10 mac-address=\ 24:4B:FE:7F:88:7Fadd address=192.168.100.201 interface=LAN-Gi0/10 mac-address=\ 18:C0:4D:4F:4D:D3add address=192.168.100.182 interface=LAN-Gi0/10 mac-address=\ 18:C0:4D:4F:4B:0Aadd address=192.168.100.157 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:85:F8:21add address=192.168.100.188 interface=LAN-Gi0/10 mac-address=\ 24:4B:FE:7F:88:B6add address=192.168.100.169 interface=LAN-Gi0/10 mac-address=\ 24:4B:FE:7F:8A:26add address=192.168.100.119 interface=LAN-Gi0/10 mac-address=\ 1C:1B:0D:54:97:43add address=192.168.100.175 interface=LAN-Gi0/10 mac-address=\ 18:C0:4D:4F:4D:D4add address=192.168.100.187 interface=LAN-Gi0/10 mac-address=\ 18:C0:4D:4F:4C:AAadd address=192.168.100.138 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:D9:2Eadd address=192.168.100.131 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:EA:1Fadd address=192.168.100.170 interface=LAN-Gi0/10 mac-address=\ 24:4B:FE:7F:8A:DAadd address=192.168.100.151 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:85:F8:53add address=192.168.100.202 interface=LAN-Gi0/10 mac-address=\ 18:C0:4D:4F:49:B8add address=192.168.100.140 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:DB:4Dadd address=192.168.100.167 interface=LAN-Gi0/10 mac-address=\ 24:4B:FE:7F:88:D9add address=192.168.100.113 interface=LAN-Gi0/10 mac-address=\ C8:1F:66:30:E1:87add address=192.168.100.171 interface=LAN-Gi0/10 mac-address=\ 24:4B:FE:7F:81:F2add address=192.168.100.200 interface=LAN-Gi0/10 mac-address=\ 18:C0:4D:4F:4B:05add address=192.168.100.178 interface=LAN-Gi0/10 mac-address=\ 18:C0:4D:4F:4B:F3add address=192.168.100.190 interface=LAN-Gi0/10 mac-address=\ 18:C0:4D:4F:4B:12add address=192.168.100.168 interface=LAN-Gi0/10 mac-address=\ 24:4B:FE:7F:88:C8add address=192.168.100.173 interface=LAN-Gi0/10 mac-address=\ 24:4B:FE:7F:88:19add address=192.168.100.196 interface=LAN-Gi0/10 mac-address=\ 24:4B:FE:7F:89:B0add address=192.168.100.179 interface=LAN-Gi0/10 mac-address=\ 18:C0:4D:4F:4D:C9add address=192.168.100.161 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:85:FC:8Aadd address=192.168.100.121 interface=LAN-Gi0/10 mac-address=\ 10:7B:44:A2:15:D6add address=192.168.100.19 interface=LAN-Gi0/10 mac-address=1C:C1:DE:FA:7E:55add address=192.168.100.15 interface=LAN-Gi0/10 mac-address=00:0C:29:59:63:66add address=192.168.100.105 interface=LAN-Gi0/10 mac-address=\ 88:D7:F6:3D:6D:72add address=192.168.100.107 interface=LAN-Gi0/10 mac-address=\ 60:45:CB:60:32:82add address=192.168.100.114 interface=LAN-Gi0/10 mac-address=\ E0:D5:5E:EA:CF:7Dadd address=192.168.100.122 interface=LAN-Gi0/10 mac-address=\ 88:D7:F6:3D:6D:A9add address=192.168.100.176 interface=LAN-Gi0/10 mac-address=\ 24:4B:FE:7F:8B:02add address=192.168.100.172 interface=LAN-Gi0/10 mac-address=\ 18:C0:4D:4F:4C:74add address=192.168.100.177 interface=LAN-Gi0/10 mac-address=\ 18:C0:4D:4F:4D:C7add address=192.168.100.184 interface=LAN-Gi0/10 mac-address=\ 24:4B:FE:7F:88:93add address=192.168.100.136 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:E4:41add address=192.168.100.137 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:EA:B7add address=192.168.100.152 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:85:F9:00add address=192.168.100.155 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:BB:4Badd address=192.168.100.156 interface=LAN-Gi0/10 mac-address=\ 84:A9:3E:7C:AE:B4add address=192.168.100.194 interface=LAN-Gi0/10 mac-address=\ 18:C0:4D:4F:4D:D1add address=192.168.100.197 interface=LAN-Gi0/10 mac-address=\ 24:4B:FE:7F:88:8Dadd address=192.168.100.198 interface=LAN-Gi0/10 mac-address=\ 24:4B:FE:7F:6D:4B/ip dhcp-server networkadd address=192.168.100.0/24 dns-server=\ 192.168.100.100,8.8.8.8,203.82.48.4,115.186.188.3 gateway=192.168.100.1 \ netmask=24/ip dnsset allow-remote-requests=yes servers="8.8.8.8,8.8.4.4,203.82.48.3,203.82.48.4\ ,115.186.188.3,115.186.188.4,192.168.100.100,39.39.39.39,192.168.19.1"/ip firewall address-listadd address=192.168.100.0/24 list=LANadd address=192.168.17.2-192.168.17.254 list=NTL1add address=104.245.57.0/24 list=RC-IPadd address=192.168.100.1 list=Routeradd address=80.81.131.109 list=RC-IPadd address=199.255.120.128/25 list=RC-IPadd address=23.102.255.237 list=RC-IPadd address=104.40.50.126 list=RC-IPadd address=40.121.80.200 list=RC-IPadd address=40.115.34.155 list=RC-IPadd address=198.16.0.0/16 list=Browsecadd address=199.96.233.193 list=Experianadd address=199.96.235.193 list=Experianadd address=199.96.235.145 list=Experianadd address=64.244.238.123 list=Experian/ip firewall filteradd action=drop chain=forward comment="Drop Browsec" dst-address-list=Browsecadd action=accept chain=forward comment="WINBOX WAN Admin" dst-port=9999 \ protocol=tcpadd action=accept chain=forward comment="HTTP WAN Admin" dst-port=8081 \ protocol=tcpadd action=accept chain=forward comment="Allow LAN Web,Winbox and SSH" port=\ 9999,2200,8081 protocol=tcp src-address-list=LANadd action=accept chain=input dst-address=192.168.100.1 port=2200,8081,9999 \ protocol=tcp src-address-list=LANadd action=accept chain=input src-address-list=NTL1add action=accept chain=input comment="defconf: accept ICMP after RAW" \ in-interface=LAN-Gi0/10 protocol=icmp src-address-list=LANadd action=accept chain=input connection-state=established,related \ in-interface=LAN-Gi0/10 src-address-list=LANadd action=accept chain=input connection-state=established,related \ in-interface=LAN-Gi0/10 src-address-list=LANadd action=drop chain=input dst-address-type=!localadd action=drop chain=input src-address-type=!unicastadd action=accept chain=forward comment="Established, Related" \ connection-state=established,related/ip firewall mangleadd action=add-dst-to-address-list address-list=Experian \ address-list-timeout=none-dynamic chain=forward comment="Experian Add IP" \ in-interface=LAN-Gi0/10 layer7-protocol=Experian src-address=\ 192.168.100.0/24 src-address-list=LANadd action=accept chain=forward protocol=tcp src-address-list=Experianadd action=accept chain=forward protocol=udp src-address-list=Experianadd action=add-dst-to-address-list address-list=Experian \ address-list-timeout=1h chain=forward comment="Experian Traffic" \ in-interface=LAN-Gi0/10 layer7-protocol=Experian protocol=tcp \ src-address=192.168.100.0/24 src-address-list=LANadd action=mark-connection chain=forward new-connection-mark=Exp_Conn \ passthrough=yes protocol=tcp src-address-list=Experianadd action=mark-connection chain=forward dst-address-list=Experian \ new-connection-mark=Exp_Conn passthrough=yes protocol=tcpadd action=mark-packet chain=forward connection-mark=Exp_Conn \ new-packet-mark=Experian out-interface=NTL1-Gi0/1 passthrough=yesadd action=add-dst-to-address-list address-list=youtube address-list-timeout=\ 1h chain=forward comment="Youtube ADD IP" in-interface=LAN-Gi0/10 \ layer7-protocol=youtube src-address=192.168.100.0/24 src-address-list=LANadd action=accept chain=forward protocol=tcp src-address-list=youtubeadd action=accept chain=forward protocol=udp src-address-list=youtubeadd action=add-dst-to-address-list address-list=youtube address-list-timeout=\ 1h chain=forward comment="Youtube Traffic" in-interface=LAN-Gi0/10 \ layer7-protocol=youtube protocol=tcp src-address=192.168.100.0/24 \ src-address-list=LANadd action=mark-connection chain=forward new-connection-mark=youtube_Conn \ passthrough=yes protocol=tcp src-address-list=youtubeadd action=mark-connection chain=forward dst-address-list=youtube \ new-connection-mark=youtube_Conn passthrough=yes protocol=tcpadd action=add-src-to-address-list address-list=facebook \ address-list-timeout=1h chain=forward comment="FACEBOOK TRAFFIC" \ in-interface=LAN-Gi0/10 layer7-protocol=facebook packet-size=39 protocol=\ tcp src-address=192.168.100.0/24 src-address-list=LANadd action=add-src-to-address-list address-list=facebook \ address-list-timeout=1h chain=forward in-interface=LAN-Gi0/10 \ layer7-protocol=facebook packet-size=39 protocol=udp src-address=\ 192.168.100.0/24 src-address-list=LANadd action=accept chain=forward protocol=tcp src-address-list=facebookadd action=accept chain=forward protocol=udp src-address-list=facebookadd action=add-dst-to-address-list address-list=facebook \ address-list-timeout=1h chain=forward in-interface=LAN-Gi0/10 \ layer7-protocol=facebook protocol=tcp src-address=192.168.100.0/24 \ src-address-list=LANadd action=add-dst-to-address-list address-list=facebook \ address-list-timeout=1h chain=forward in-interface=LAN-Gi0/10 \ layer7-protocol=facebook protocol=udp src-address=192.168.100.0/24 \ src-address-list=LANadd action=mark-connection chain=prerouting connection-mark=no-mark \ dst-address-list=facebook new-connection-mark=conn_facebook passthrough=\ yes protocol=tcpadd action=mark-connection chain=prerouting connection-mark=no-mark \ dst-address-list=facebook new-connection-mark=conn_facebook passthrough=\ yes protocol=udpadd action=add-src-to-address-list address-list=skype address-list-timeout=1h \ chain=forward comment="SKYPE TRAFFIC" in-interface=LAN-Gi0/10 \ layer7-protocol=Skype packet-size=39 protocol=tcp src-address=\ 192.168.100.0/24 src-address-list=LANadd action=add-src-to-address-list address-list=skype address-list-timeout=1h \ chain=forward in-interface=LAN-Gi0/10 layer7-protocol=Skype packet-size=\ 39 protocol=udp src-address=192.168.100.0/24 src-address-list=LANadd action=accept chain=forward protocol=tcp src-address-list=skypeadd action=accept chain=forward protocol=udp src-address-list=skypeadd action=add-dst-to-address-list address-list=skype address-list-timeout=1h \ chain=forward in-interface=LAN-Gi0/10 layer7-protocol=Skype protocol=tcp \ src-address=192.168.100.0/24 src-address-list=LANadd action=add-dst-to-address-list address-list=skype address-list-timeout=1h \ chain=forward in-interface=LAN-Gi0/10 layer7-protocol=Skype protocol=udp \ src-address=192.168.100.0/24 src-address-list=LANadd action=mark-connection chain=prerouting connection-mark=no-mark \ dst-address-list=skype new-connection-mark=conn_skype passthrough=yes \ protocol=tcpadd action=mark-connection chain=prerouting connection-mark=no-mark \ dst-address-list=skype new-connection-mark=conn_skype passthrough=yes \ protocol=udpadd action=mark-packet chain=forward connection-mark=conn_skype \ new-packet-mark=skype out-interface=NTL1-Gi0/1 passthrough=noadd action=add-dst-to-address-list address-list=RC-IP address-list-timeout=1h \ chain=forward comment="RINGCENTRAL ADD IP" in-interface=LAN-Gi0/10 \ layer7-protocol=Ringcentral src-address=192.168.100.0/24 \ src-address-list=LANadd action=accept chain=forward port=443,5091,8083 protocol=tcp \ src-address-list=RC-IPadd action=accept chain=forward protocol=udp src-address-list=RC-IPadd action=mark-connection chain=prerouting comment="RINGCENTRAL TRAFFIC" \ connection-mark=no-mark dst-address-list=RC-IP new-connection-mark=\ RC_Conn passthrough=yes protocol=tcpadd action=mark-connection chain=prerouting connection-mark=no-mark \ dst-address-list=RC-IP new-connection-mark=RC_Conn passthrough=yes \ protocol=udpadd action=mark-packet chain=prerouting connection-mark=RC_Conn \ dst-address-list=RC-IP new-packet-mark=RC_packet passthrough=yes \ protocol=tcpadd action=mark-packet chain=prerouting connection-mark=RC_Conn \ dst-address-list=RC-IP new-packet-mark=RC_packet passthrough=yes \ protocol=udpadd action=accept chain=forward dst-address-list=RC-IP out-interface=\ NTL1-Gi0/1 packet-mark=RC_packet protocol=tcpadd action=accept chain=forward dst-address-list=RC-IP out-interface=\ NTL1-Gi0/1 packet-mark=RC_packet protocol=udpadd action=mark-connection chain=prerouting comment="Servers' Traffic" \ connection-mark=no-mark in-interface=LAN-Gi0/10 new-connection-mark=\ NTL1_Conn passthrough=yes src-address-list="LAN Servers"add action=accept chain=prerouting dst-address=192.168.17.0/24 in-interface=\ NTL1-Gi0/1add action=mark-connection chain=prerouting connection-mark=no-mark \ dst-address-type=!local in-interface=LAN-Gi0/10 new-connection-mark=\ PTCL1_Conn passthrough=yes per-connection-classifier=both-addresses:9/0add action=mark-connection chain=prerouting connection-mark=no-mark \ dst-address-type=!local in-interface=LAN-Gi0/10 new-connection-mark=\ PTCL1_Conn passthrough=yes per-connection-classifier=both-addresses:9/1add action=mark-connection chain=prerouting connection-mark=no-mark \ dst-address-type=!local in-interface=LAN-Gi0/10 new-connection-mark=\ NTL2_Conn passthrough=yes per-connection-classifier=both-addresses:9/2add action=mark-connection chain=prerouting connection-mark=no-mark \ dst-address-type=!local in-interface=LAN-Gi0/10 new-connection-mark=\ NTL1_Conn passthrough=yes per-connection-classifier=both-addresses:9/3add action=mark-connection chain=prerouting connection-mark=no-mark \ dst-address-type=!local in-interface=LAN-Gi0/10 new-connection-mark=\ PTCL1_Conn passthrough=yes per-connection-classifier=both-addresses:9/4add action=mark-connection chain=prerouting connection-mark=no-mark \ dst-address-type=!local in-interface=LAN-Gi0/10 new-connection-mark=\ PTCL1_Conn passthrough=yes per-connection-classifier=both-addresses:9/5add action=mark-connection chain=prerouting connection-mark=no-mark \ dst-address-type=!local in-interface=LAN-Gi0/10 new-connection-mark=\ NTL2_Conn passthrough=yes per-connection-classifier=both-addresses:9/6add action=mark-connection chain=prerouting connection-mark=no-mark \ dst-address-type=!local in-interface=LAN-Gi0/10 new-connection-mark=\ NTL1_Conn passthrough=yes per-connection-classifier=both-addresses:9/7add action=mark-connection chain=prerouting connection-mark=no-mark \ dst-address-type=!local in-interface=LAN-Gi0/10 new-connection-mark=\ PTCL1_Conn passthrough=yes per-connection-classifier=both-addresses:9/8add action=mark-routing chain=prerouting connection-mark=NTL1_Conn \ in-interface=LAN-Gi0/10 new-routing-mark=to_NTL1 passthrough=yesadd action=mark-routing chain=output new-routing-mark=to_NTL1 passthrough=yes \ routing-mark=to_NTL1 src-address-list=LAN/ip firewall natadd action=masquerade chain=srcnat out-interface=NTL1-Gi0/1add action=dst-nat chain=dstnat dst-address=192.168.17.3 dst-port=8081 \ protocol=tcp to-addresses=192.168.100.1 to-ports=8081add action=dst-nat chain=dstnat dst-address=192.168.17.3 dst-port=9999 \ protocol=tcp to-addresses=192.168.100.1 to-ports=9999/ip firewall rawadd action=accept chain=prerouting comment=\ "defconf: enable for transparent firewall"add action=jump chain=prerouting comment="defconf: jump to ICMP chain" \ jump-target=icmp4 protocol=icmpadd action=accept chain=icmp4 comment="defconf: echo reply" icmp-options=0:0 \ limit=5,10:packet protocol=icmpadd action=accept chain=icmp4 comment="defconf: net unreachable" \ icmp-options=3:0 protocol=icmpadd action=accept chain=icmp4 comment="defconf: host unreachable" \ icmp-options=3:1 protocol=icmpadd action=accept chain=icmp4 comment="defconf: protocol unreachable" \ icmp-options=3:2 protocol=icmpadd action=accept chain=icmp4 comment="defconf: port unreachable" \ icmp-options=3:3 protocol=icmpadd action=accept chain=icmp4 comment="defconf: fragmentation needed" \ icmp-options=3:4 protocol=icmpadd action=accept chain=icmp4 comment="defconf: echo" icmp-options=8:0 limit=\ 5,10:packet protocol=icmpadd action=accept chain=icmp4 comment="defconf: time exceeded " icmp-options=\ 11:0-255 protocol=icmp/ip routeadd check-gateway=ping distance=1 gateway=192.168.17.1 routing-mark=to_NTL1add check-gateway=ping distance=1 gateway=192.168.18.1 routing-mark=to_NTL2add check-gateway=ping distance=1 gateway=192.168.19.1 routing-mark=to_PTCL1add check-gateway=ping distance=1 gateway=192.168.18.1add check-gateway=ping distance=2 gateway=192.168.19.1add check-gateway=ping distance=3 gateway=192.168.17.1add distance=1 dst-address=8.8.8.8/32 gateway=NTL2-Gi0/2 pref-src=\ 192.168.18.3add distance=1 dst-address=8.8.8.8/32 gateway=NTL1-Gi0/1 pref-src=\ 192.168.17.3add distance=1 dst-address=8.8.8.8/32 gateway=PTCL1-Gi0/3 pref-src=\ 192.168.19.2add distance=1 dst-address=39.39.39.39/32 gateway=PTCL1-Gi0/3 pref-src=\ 192.168.19.2add distance=1 dst-address=115.186.188.3/32 gateway=NTL1-Gi0/1 pref-src=\ 192.168.17.3add distance=1 dst-address=192.168.17.1/32 gateway=NTL1-Gi0/1add distance=1 dst-address=192.168.18.1/32 gateway=NTL2-Gi0/2add distance=1 dst-address=192.168.19.1/32 gateway=PTCL1-Gi0/3add distance=1 dst-address=192.168.100.0/24 gateway=LAN-Gi0/10 pref-src=\ 192.168.100.1add distance=1 dst-address=203.82.48.4/32 gateway=NTL2-Gi0/2 pref-src=\ 192.168.18.3/ip serviceset telnet port=2300set ftp disabled=yesset www address=192.168.17.0/24,192.168.18.0/24,192.168.100.0/24set ssh port=2200set www-ssl address=192.168.100.0/24 disabled=noset api disabled=yesset winbox address=192.168.17.0/24,192.168.18.0/24,192.168.100.0/24 port=9999set api-ssl disabled=yes/ip smbset allow-guests=no enabled=yes/ip smb sharesadd directory=/Backup max-sessions=5 name=Mikrotik/ip smb usersadd name=Exec read-only=no/system clockset time-zone-autodetect=no time-zone-name=Asia/Karachi/system clock manualset time-zone=+05:00/system identityset name=Vertechs-MikroTik/system ntp clientset enabled=yes primary-ntp=119.28.183.184 secondary-ntp=119.159.246.253/tool graphing interfaceadd interface=NTL1-Gi0/1add interface=NTL2-Gi0/2add interface=PTCL1-Gi0/3add interface=PTCL2-Gi0/4add interface=LAN-Gi0/10/tool graphing resourceaddadd/tool snifferset filter-interface=all

Top


waleedsahmed just joined: Posts: 3; Joined: Mon Nov 06, 2023 1:31 am

Re: Unable to Ping Gateway

Quote
#4

Tue Nov 07, 2023 2:57 am

Hi @k6ccc,
Thank you so much for your post and for helping me to download and share the configuration. As you can see in the configuration my DHCP pool starts from 192.168.100.101-250 but most of the DHCP users got the DHCP ip but they cannot ping their gateway ip 192.168.100.1 either they cannot access the internet. A few of the static IP's from this range like 192.168.100.101-110 also not working. I tried to configure on different devices but same issue. When I configure some other static ip like 192.168.100.252 on the same system everything works fine, or the system got DHCP ip from 100.151-220 everything works.

That's really strange for me, as i cannot see anything wrong in the config, I have verified my client OS, settings and switch configuration everything.
Like 192.168.100.101 not working at all but 192.168.100.110 works fine from DHCP and statically.

I have found in firewall connection this weird thing 90% of the ips where the internet is not working fine in the Firewall section connection option all showing Dst. Address with :53 port. I am not sure what is this.
Note: I already tried to enable Add ARP for Leases option in DHCP Server, and local-proxy-arp on my LAN interface, and ARP enabled on my WAN interface. Nothing worked.

Unable to Ping Gateway - MikroTik (2024)