Mikrotik Router (Cyberoam) Experience - Needs to run as a Passthru/Bridge

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Mikrotik Router (Cyberoam) Experience - Needs to run as a Passthru/Bridge

deltaflyer

4 posts

Wannabe Geek

#214064 26-Apr-2017 14:44

Hi All

I think im using the right terms here, I will give you an Outline of what the issue is and what we are trying to do.

The "PROBLEM"

For our Business clients they have fibre connections with Cyberoam Routers out of preference. We also use a particular ISP out of preference for most, but some clients use there own.

Our preferred ISP has an issue with the Cyberoams, particularly when night time maintenance occurs. The Internet connection will drop out and not re-establish itself until the modem is rebooted or power off/on.

We have about a dozen sites in this predicament. The connection drops off and wont reestablish. I have contacted the re-seller and the only solution they provided was to set the modems gateway address to Static instead of DHCP.

Bear in mind these are business clients and run Static IP's out of preference. I did a trial and set a couple to static address as issued by the ISP. It made the situation worse. With the gateway on DHCP it allows us or the site to reboot the router and the connection reestablishes. With it set to static it does not. I have had to call the client and direct them over the phone to change the gateway setting back.

So you can see the issue, one network maintenance outage can cause up to a dozen clients to come in the morning with no Internet connection and sometimes no VOIP phones either. This is not ideal, some are local and I can drive to, some users are not able to reboot the device and some sites are hours drive away and can then only be contacted by mobile.

The "PLAN"

Place a basic Mikrotik Routerboard RB750Gr3 in front of a Cyberoam Router. You can run a script on Mikrotik to allow the router to auto reboot after say 5 minutes of Internet loss, Mikrotik Auto Reboot Script https://forum.mikrotik.com/viewtopic.php?t=56138 I could use something like the Google DNS server 8.8.8.8 If the Mikrotik can't talk to that after 5 minutes it restarts, this should establish the connection back to the cyberoam.

Otherwise is there a script or setting I should change in the Cyberoam you think, is the idea itself mad????

My issue is the configuration of the Mikrotik, I have tried setting to Pass-thru or Bridge etc but end up getting locked out and it does not work, I know the script itself works cause I can get it to reboot after 5 mins.

Any configuration sites or help would be much appreciated.

Regards

Brendan

Dynamic

3867 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#1770717 26-Apr-2017 15:05

Have you asked Cyberoam whether 'automatically reboot after X minutes of internet loss' is possible to configure, likely from the command line?

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

Referral links to services I use, really like, and may be rewarded if you sign up:
PocketSmith for budgeting and personal finance management. A great Kiwi company.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1770734 26-Apr-2017 15:47

I'm confused - how would setting a Mikrotik to reboot fix the issue with a 3rd party piece of hardware?

deltaflyer

4 posts

Wannabe Geek

#1771114 27-Apr-2017 10:18

Setting up the Mikrotek in front of the Cyberoam would allow it to monitor Internet Connectivity and reboot the unit using the script included in the original post. This would flow internet thru to the Cyberoam.

deltaflyer

4 posts

Wannabe Geek

#1771116 27-Apr-2017 10:18

Talked to Cyberoam support today:

Mohin:
So basically, there is some issue with ISP end during maintenance hour and connection got terminated and it does not get re-established auto matically.
Mohin:
There is no such feature for auto reboot the device.

So next it happens I am going to get them the a specific log from the CLI, and copy and paste it to forward to them for inspection

Enter CLI, hit option 4

Enter: cyberoam diagnostics show sysmsg

Then: cyberoam diagnostics show syslog line 10000

Have to wait till next it happens then run these commands before rebooting the Cyberoam and reconnecting to the Internet.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1771120 27-Apr-2017 10:23

deltaflyer:

Setting up the Mikrotek in front of the Cyberoam would allow it to monitor Internet Connectivity and reboot the unit using the script included in the original post. This would flow internet thru to the Cyberoam.

How? Unless you configure it for double NAT the Mikrotik will not have internet access.

I also don't understand why when you say rebooting the Cyberroam fixes the issue that rebooting a Mikrotik would fix things.

RunningMan

8955 posts

Uber Geek

#1771125 27-Apr-2017 10:30

How is your IP address(es) supplied to you - PPP or DHCP?

Rebooting a router every time a connection drops is a pretty drastic approach - but if that's the way you want to do it, dare I suggest an automatic reboot at the same time every day?

darylblake

1162 posts

Uber Geek

Trusted

#1771135 27-Apr-2017 10:46

So you are saying the cyberoam routers you are using are not attempting to re-establish PPPoE connection if you have a drop? unless they are rebooted?

If replacing the cyberoam router is not an acceptable solution then adding another router into the mix is going to introduce problems in my opinion. Is there any particular reason why you have to use this piece of hardware? is there no firmware update or setting you can modify to make it attempt to re-establish a PPP connection after a certain time?

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

deltaflyer

4 posts

Wannabe Geek

#1771154 27-Apr-2017 11:17

Using Cyberoams was not my decision as I dont handle purchasing, just technical, they are a good unit, but they have this flaw with MyRepublic

@sbiddle, that answers my question of needing double NAT on the Mikrotik. The Cyberoam is not capable of coming back online after a MyRepublic / Vocus Maintenance, so the idea was to Place a Mikrotik in front to handle connecting to the Internet itself, run this script https://forum.mikrotik.com/viewtopic.php?t=56138 on it so it would auto reboot after 5 minutes of disconnection to 8.8.8.8. Thus saving a manual or client reboot of the cyberoam, as the cyberoam should manage to stay connected to the mikrotik. Just having issues with configuration on the Mikrotik itself.

@runningman Checked with MyRepublic they only supply DHCP IP address's not PPP, no authenticaton settings like usernames and passwords required they told me

@darylblake Yes the Cyberoam is not re-establishing connection if there is a drop, unless I log into the device and resave the gateway or perform a reboot. I realise adding a Mikrotik will possibly add issues, I would need it to kind pass thru all trafffic and still use the Cyberoams firewall. We have done a couple of firmware updates in the last year which have not made a difference, Cyberoam have not mentioned ability for the device to connect at a certain time.

RunningMan

8955 posts

Uber Geek

#1771214 27-Apr-2017 12:39

If your IP is supplied by DHCP, what is the lease time? Surely the cyberoam will pick up the interface again when the lease expires, even if it is incapable of monitoring it for a drop.

If that's the case, can the lease time be shortened?