Mikrotik with Bridged Spark VDSL - traceroute missing first two hops

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Mikrotik with Bridged Spark VDSL - traceroute missing first two hops

1 | 2 | 3

cyril7

9075 posts

Uber Geek
+1 received by user: 2499

ID Verified

Trusted

Subscriber

#2060417 22-Jul-2018 14:41

Hi, fantastic, so you could try raising the MTU of interface1 to 1520 (technically it should be 1508 but set it a bit higher for now) and then set the pppoe to 1500, it will probably drop the connection, and hopefully bring it back up and run at 1500, note what you change so you can revert if needed.

Cyril

sfrasernz

234 posts

Master Geek
+1 received by user: 13

#2062540 25-Jul-2018 19:42

Sorry the delay in coming back. I increased the max MTU on Eth1 to 1520 and PPPoE connection to 1500 but PPPoE Actual MTU still shows 1480 but not to worry. It won't matter in after this weekend.

One last question...I'm going to set up a VPN connection for client remote access (Windows and iPhone). There's good documentation on the Mikrotik Wiki and I plan on following the IKEv2 with RSA Authentication. Is there anything I should be aware of before setting up a VPN for remote access?

https://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Road_Warrior_setup_using_IKEv2_with_RSA_authentication

MadEngineer

4591 posts

Uber Geek
+1 received by user: 2570

Trusted

#2062711 25-Jul-2018 23:32

If you're going to bridge vpn clients to your LAN interface be sure to set the bridge to proxy arp.

You're going to need to allow open ports to the world - set up fail2ban firewall rules (if you hit this final input rule, add to spammer list and drop. If you're on spammer list and you're being dropped again, add to ban list for x hours. Block all input from ban list before reaching VPN accept rules)

Also, add these to your bogons/permabans else you'll get annoying vpn log entries:

74.82.47.0/24
184.105.139.0/24
184.105.247.0/24
216.218.206.0/24

You're not on Atlantis anymore, Duncan Idaho.

1 | 2 | 3