MikroTik hEX S
Question about MikroTik hEX S
Does anyone have this router in operation with Wingo? I just can't get any internet access. LAN is working and the connection via WAN is also working. I just can't get access to the outside. Thanks for the help!
I have this model in operation with Wingo. Internet and IP-TV works.
Steps that are necessary:
1. add VLAN interface (with VLAN ID 10 and MTU 1480)
2. set VLAN interface as WAN port
3. add VLAN interface to DHCP client
3. firewall fix because of the special MTU (otherwise certain pages don't work, e.g. orell for ebook reader). Here are the terminal commands:
/ip firewall mangle add action=change-mss chain=forward comment="mtu fix rule" new-mss=clamp-to-pmtu passthrough=yes protocol=tcp tcp-flags=syn
4. firewall entries for IGMP/UDP, here the terminal commands:
/ip firewall filter print
/ip firewall filter
add place-before=4 action=accept chain=input comment="swisscom iptv" log=yes log-prefix=iptv protocol=igmp
add place-before=5 action=accept chain=input comment="swisscom iptv" protocol=udp
add place-before=6 action=accept chain=forward comment="swisscom iptv" protocol=udp
5. IGMP proxy settings (multicast packet must be installed):
1. add port on which TV-Box is connected e.g ether5 as interface (all default settings otherwise)
2. add VLAN (mark as upstream and add following subnet "0.0.0.0/0")
3. activate settings in general, quick leave
Steps that are necessary:
1. add VLAN interface (with VLAN ID 10 and MTU 1480)
2. set VLAN interface as WAN port
3. add VLAN interface to DHCP client
3. firewall fix because of the special MTU (otherwise certain pages don't work, e.g. orell for ebook reader). Here are the terminal commands:
/ip firewall mangle add action=change-mss chain=forward comment="mtu fix rule" new-mss=clamp-to-pmtu passthrough=yes protocol=tcp tcp-flags=syn
4. firewall entries for IGMP/UDP, here the terminal commands:
/ip firewall filter print
/ip firewall filter
add place-before=4 action=accept chain=input comment="swisscom iptv" log=yes log-prefix=iptv protocol=igmp
add place-before=5 action=accept chain=input comment="swisscom iptv" protocol=udp
add place-before=6 action=accept chain=forward comment="swisscom iptv" protocol=udp
5. IGMP proxy settings (multicast packet must be installed):
1. add port on which TV-Box is connected e.g ether5 as interface (all default settings otherwise)
2. add VLAN (mark as upstream and add following subnet "0.0.0.0/0")
3. activate settings in general, quick leave
Is the device suitable for connecting two locations with init7 via IPSec? If possible, without static IP addresses. Does anyone have experience here?
You have to activate VLAN on the SFP port. You can do this with Interfaces -> VLAN -> add new and then enter the ID 10 and select the SFP port, the rest you can leave alone.
I have several of these routers in operation. They work perfectly. However, the configuration is very complex.
I suspect a NAT, firewall or IPV6 problem.
I suspect a NAT, firewall or IPV6 problem.