 delmarvawifi
join:2008-07-15 | reply to dwilson805 Re: mikrotik and Verizon FIOS
And in theory that works. Unfortunately real life these days indicates otherwise. |
|
 dwilson805 Premium join:2005-07-22 Hanceville, AL
·RoadRunner Cable
| reply to delmarvawifi said by delmarvawifi :"Legality = against ToS to resell FiOS" According to my buddy's Verizon business representative, they have no problem with him reselling business-class FIOS service. Which is what he has just switched to. He stayed on residential, without reselling it, while he got his first radios up and working. |
|
 dwilson805 Premium join:2005-07-22 Hanceville, AL
·RoadRunner Cable
| reply to kewlkeed said by kewlkeed :This may come across as being downright stupid... But have you put in the default gateway on the MT? Can program all you like for addresses and subnets etc... but if you don't have a default route (0.0.0.0/0) then you ain't going anywhere. Also have you programmed in DNS? These two things program themselves automatically by default when you do a DHCP client, but not when you're doing static. By default the MT also accepts everything, so there's no need for accept all in the firewall. I would clear everything you have set up in the firewalls for now just to get yourself live without tripping over something you've done already. By default with nothing in the firewalls (Except a src nat masquerade rule, if you need it) it will pass everything just fine. It isn't stupid at all. We did put in the default (0.0.0.0/0) route, and in fact we see the ARP requests going out that interface, which they wouldn't if we didn't have a default route, no? We just don't see ARP responses.
We will try turning off auto-negotiation tomorrow, since we don't know for certain that the ONT is seeing link up (and certainly if it isn't, that would explain the symptoms we see!)
If that doesn't work, we'll reset the router back to factory defaults, reprogram the interface IP addresses, and try again from scratch. |
|
  mtroup Marty Premium join:2007-06-28 Hermitage, AR
| said by dwilson805 :If that doesn't work, we'll reset the router back to factory defaults, reprogram the interface IP addresses, and try again from scratch. It's amazing how on some of the most unexplained problems I have had.. this was the solution. I know I have configured a radio and overlooked the setting 100 times and couldn't find anything wrong.. so I reset it and started over.. and it worked! Sometimes its one small detail that you miss.. and never find I guess? |
|
 nevtxjustin
join:2006-04-18 Dallas, TX
1 edit | reply to dwilson805 said by dwilson805 :According to my buddy's Verizon business representative, they have no problem with him reselling business-class FIOS service. Which is what he has just switched to. After a Verizon presentation (she was a cooperate rep, not some off-shore sales drone), I asked a rep about commercial service plans for reselling FIOS. She told me its not allowed, but they don't care - though I think she didn't understand I was asking about a commercial account specifically wanting to resell. The only tip off they get is when people order lots of static IP addresses.
Edited to add.. Hell, I wouldn't mind paying $1,000 a month for a 50 MBps line. |
|
 dwilson805 Premium join:2005-07-22 Hanceville, AL
·RoadRunner Cable
| reply to dwilson805 We just reset the mikrotik back to factory defaults and programmed in IP address for the ethernet port we are using with FIOS, the default route (0.0.0.0/0), and the DNS servers. Nothing else. Using Tools/Ping, we can ping our own IP address, but get timeouts pinging the gateway.
So we unplugged the mikrotik from FIOS, plugged the Linksys back in, booted it, and are successfully pinging the gateway. We can also ping out onto the internet (yahoo). We compared the Linksys configuration with the mikrotik - IP address, netmask, gateway, and DNS servers are all the same.
We tried forcing the mikrotik to 100mb (no autonegotiation), that didn't change anything. We also tried changing to a different ethernet port on the mikrotik. Still doesn't work.
This is bizarre! |
|
 gunther_01 Premium join:2004-03-29 Saybrook, IL
| reply to dwilson805 This may be a bit off but with mediacom they used to "lock" you in to one MAC address and that was the first one plugged in to your modem. Was your Linksys the first router hooked up?
The workaround for Mediacom was to unplug their modem and let it sit for a bit, then hook up the "new" device and plug the modem back in. Causing a reset of the modem and allowing new devices. I know it's a simple MAC lock-in but have you tried to clone the Linksys MAC to the MT by chance?
I'm sure it's a big bridge, Verizon already had your Fios modem MAC, it could be they locked you in with the Linksys MAC afterwards also. |
|
 dwilson805 Premium join:2005-07-22 Hanceville, AL | reply to dwilson805 Yes, we tried cloning the FIOS router's MAC Address on the mikrotik. It didn't change anything. As far as we can tell, the ONT doesn't filter on MAC address. |
|
  viperm Carpe Diem Premium join:2002-07-09 Winchester, CA
| reply to dwilson805 I still say you are missing something in the route.
on my mikrotik I put in dst-address 0.0.0.0/0 and default gateway as the next hop up from my router (Mirktik) whould be the IP address of our router at the tower.
In your case it would be the default gateway that is assigned to your "Static IP" Se below. Just puting in the route 0.0.0.0/0 will not work alone you still need a gateway IP to route properly
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE 0 A S ;;; Airenetworks 0.0.0.0/0 208.79.105.193 ... 1
-- ComTrain Certified Tower Climber. American Tower Certified approved contractor. Wireless consultants. |
|
 mogooder
join:2002-11-26 Washougal, WA
| I agree with viperm, I think it is in the config. You might try setting the router up between two different subnets (that you control) and see if it will pass data. just a thought.
Frank -- "The Secret is in the RITHMATIC" Henry Hudson |
|
 dwilson805 Premium join:2005-07-22 Hanceville, AL
·RoadRunner Cable
| reply to viperm said by viperm :I still say you are missing something in the route. on my mikrotik I put in dst-address 0.0.0.0/0 and default gateway as the next hop up from my router (Mirktik) whould be the IP address of our router at the tower. In your case it would be the default gateway that is assigned to your "Static IP" Se below. Just puting in the route 0.0.0.0/0 will not work alone you still need a gateway IP to route properly # DST-ADDRESS PREF-SRC GATEWAY DISTANCE 0 A S ;;; Airenetworks 0.0.0.0/0 208.79.105.193 ... 1 Indeed. dst-address is 0.0.0.0/0, gateway is x.x.x.1, where the mikrotik's static ip address is x.x.x.74/24, although for the linksys and FIOS routers we set netmask to 255.255.255.0 rather than using the /24 nomenclature that mikrotik accepts.
I have 4 other mikrotik routers, all configured and functioning as internet gateways, one of them is even double-homed, i.e., it has 2 WAN ports to internet providers. I've had my share of learning curve problems with Mikrotik, but basic network routing is pretty straight forward - I haven't had this fundamental of a problem with any of the other units (although none of them are connected to FIOS).
My day job is writing software to configure ethernet switch and router chips, so I do have some level of experience in IP networking. That's why I find this problem so troublesome - it shouldn't be that hard. Configure IP address, netmask, gateway address, and default route, and you're on your way! Even DNS isn't needed to get pings working if you only use the raw IP addresses.
I'm flying back to southern California on Saturday, and I'll take a spare router over and we'll try that, just to prove it isn't hardware. The spare I have available is a mini-itx box with mikrotik on a flash card, so if push comes to shove, I can load something else on a flash just to isolate that it isn't some strange fios/router-OS interaction.
We also just for grins swapped ethernet cables, even though the cable we were using worked for the FIOS router and the stupid little linksys. No difference. |
|
 dwilson805 Premium join:2005-07-22 Hanceville, AL
·RoadRunner Cable
| reply to mogooder said by mogooder :I agree with viperm, I think it is in the config. You might try setting the router up between two different subnets (that you control) and see if it will pass data. just a thought. Frank Yes, that is a thought, and we did that. If we plug the mikrotik onto the LAN so that it connects to either the FIOS router or the linksys as the LAN gateway, it passes traffic, pings, everything works fine. Of course, that is DHCP-configured, not static-configured, but even then we pulled up the entire DHCP configuration (i.e., IP address, netmask, gateway address, default route, etc.) and looked at it, and didn't see anything that what we'd been missing when we use the static IP. One thing we didn't try was to set up static IP (with a private IP address) while we were connected to the LAN to prove it would still route properly, although we have done that successfully in the past (a few weeks ago).
I am positive that in the end this is going to turn out to be a "bang head against wall" moment, but at this point I'll welcome the bloody forehead....
(I'd add SD's patented head-banging graphic here, but then I'd have to deal with him, and I'd rather not go there.....) |
|
 mogooder
join:2002-11-26 Washougal, WA | I'm shur it will be something simple everyone over looked, but won't be found tell the blood flows on the floor. LOL
Frank -- "The Secret is in the RITHMATIC" Henry Hudson |
|
 gunther_01 Premium join:2004-03-29 Saybrook, IL | reply to dwilson805 I thought about that a bit,and yea, if you bypassed the FIOS router it wouldn't matter. Are you even getting a MAC address table in the MT once connected to the FIOS? That would rule out the first 2 layers I would think. |
|
 dwilson805 Premium join:2005-07-22 Hanceville, AL
·RoadRunner Cable
| said by gunther_01 :I thought about that a bit,and yea, if you bypassed the FIOS router it wouldn't matter. Are you even getting a MAC address table in the MT once connected to the FIOS? That would rule out the first 2 layers I would think. MT mac address, yes. ONT mac address, no. We see ARP requests leave the mikrotik heading towards the ONT, but no ARP responses come back. The ONT has a nice green light glowing next to the ethernet port that turns red when we unplug the cable, so it appears the ONT sees a good physical link. Mikrotik reports link up, 100mbit, full-duplex, autonegotiation complete. |
|
 gunther_01 Premium join:2004-03-29 Saybrook, IL 1 edit | reply to dwilson805 Try a crossover cable? Or normal if already using one? EDIT: just for kicks, I've seen wierd things with that before |
|
 Mike_27 Premium join:2004-05-15 Gardiner, MT | reply to dwilson805 sounds like your provider has static arp on his side.
can you clone the mac address of the linksys?
Mike |
|
  kewlkeed Grouch Premium join:2005-02-05 Knowlton, QC | reply to dwilson805 Ohh good suggestion!

I wouldn't of thought of that right away, and it's quite a simple one. |
|
 dwilson805 Premium join:2005-07-22 Hanceville, AL
·RoadRunner Cable
| reply to gunther_01 said by gunther_01 :Try a crossover cable? Or normal if already using one? EDIT: just for kicks, I've seen wierd things with that before We'll try that, but I'm starting to think that the ethernet hardware in the FIOS ONT has a problem talking with gigabit adapters. The two units that connect successfully (the FIOS router and the linksys) both have 10/100 ports, whereas the mikrotik and the laptop both have 10/100/1000 ports, and have problems. And locking the mikrotik ethernet port at 100mb/full duplex didn't help either. One of my mikrotik's is 10/100 only, and I'm hopeful that will prove or disprove this theory. |
|
  viperm Carpe Diem Premium join:2002-07-09 Winchester, CA
| reply to dwilson805 If thats the case then just put a 10/100 meg switch in between the ONT and your mikrotik see what that does? then reconfiguring another MK but its your call  -- ComTrain Certified Tower Climber. American Tower Certified approved contractor. Wireless consultants. |
|