3
« Dernier message par redblood le Aujourd'hui à 12:42:45 »
J'avais fais ça, j'obtiens une adress IP locale du CGNAT orange, mais les ping 1.1.1.1 dns et autres sont en timeout.
J'ai essayé de ping le serveur DNS d'orange qui m'a donné l'adresse IP à savoir 80.10.5.213 et ça timeout aussi.
Des idées?
Voici ma config mikrotik pour référence:
# 2025-09-11 12:05:00 by RouterOS 7.19.6
# software id = 994A-GLIP
#
# model = RB5009UPr+S+
# serial number = REDACTED
/interface bridge
add name=bridge-lan
add admin-mac=REDACTED auto-mac=no name=bridge-wan port-cost-mode=short protocol-mode=none
/interface ethernet
set [ find default-name=sfp-sfpplus1 ] mac-address=REDACTED name=sfp-WAN
/interface vlan
add interface=sfp-WAN name=vlan832-orange vlan-id=832
/interface list
add name=WAN
add name=LAN
/ip dhcp-client option
add code=60 name=vendorclass value="'sagem'"
add code=77 name=userclass value="'+FSVDSL_livebox.Internet.softathome.Livebox6'"
add code=90 name=authsend value=0xREDACTED
/ip ipsec proposal
set [ find default=yes ] disabled=yes
/ip pool
add name=default-dhcp ranges=192.168.88.11-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp interface=bridge-lan name=defconf
/ip smb users
set [ find default=yes ] disabled=yes
/ipv6 dhcp-client option
add code=6 name=request value=0x000b001100170018
add code=11 name=auth value=0xREDACTED
add code=15 name=userclass value="'+FSVDSL_livebox.Internet.softathome.Livebox6'"
add code=16 name=classidentifier value=0x0000040e0005736167656d
/ip smb
set enabled=no
/interface bridge filter
add action=set-priority chain=output dst-port=547 ip-protocol=udp mac-protocol=ipv6 new-priority=6 out-interface=vlan832-orange
add action=set-priority chain=output dst-port=67 ip-protocol=udp mac-protocol=ip new-priority=6 out-interface=vlan832-orange
/interface bridge port
add bridge=bridge-lan interface=ether1
add bridge=bridge-lan interface=ether3
add bridge=bridge-lan interface=ether4
add bridge=bridge-lan interface=ether5
add bridge=bridge-lan interface=ether6
add bridge=bridge-lan interface=ether7
add bridge=bridge-lan interface=ether8
add bridge=bridge-lan interface=ether2
add bridge=bridge-wan interface=vlan832-orange
/ip firewall connection tracking
set udp-timeout=10s
/ip neighbor discovery-settings
set discover-interface-list=LAN
/ipv6 settings
set accept-router-advertisements=yes
/interface list member
add interface=bridge-wan list=WAN
add interface=bridge-lan list=LAN
/ip address
add address=192.168.88.1/24 interface=bridge-lan network=192.168.88.0
add address=192.168.11.2/24 interface=sfp-WAN network=192.168.11.0
/ip dhcp-client
add dhcp-options=vendorclass,userclass,authsend,clientid interface=bridge-wan
/ip dhcp-server network
add address=192.168.88.0/24 dns-server=192.168.88.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router.lan type=A
/ip firewall filter
add action=drop chain=input comment="drop invalid input" connection-state=invalid
add action=drop chain=forward comment="drop invalid forward" connection-state=invalid
add action=drop chain=forward comment="block external DNS" dst-address=!192.168.88.1 dst-port=53 in-interface-list=LAN protocol=udp
add action=drop chain=forward comment="drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=!LAN
add action=accept chain=input comment="accept established,related input" connection-state=established,related
add action=accept chain=forward comment="accept established,related forward" connection-state=established,related
add action=accept chain=input comment="accept LAN input" in-interface-list=LAN
add action=accept chain=forward comment="accept LAN forward" in-interface-list=LAN
add action=accept chain=input comment="accept icmp mgmt" dst-address=192.168.11.2 protocol=icmp
add action=accept chain=input comment="accept icmp" in-interface-list=LAN protocol=icmp
add action=accept chain=input comment="accept dhcp" dst-port=67 in-interface=bridge-wan protocol=udp
add action=accept chain=input comment="accept ntp" dst-port=123 in-interface=bridge-wan protocol=udp
add action=drop chain=input comment="drop everything else input"
add action=drop chain=forward comment="drop everything else forward"
/ip firewall nat
add action=masquerade chain=srcnat out-interface=bridge-wan src-address=192.168.88.0/24
/ip service
set www-ssl disabled=no
/ipv6 dhcp-client
add dhcp-options=auth,classidentifier,userclass interface=bridge-wan pool-name=pool_FT_6 request=prefix
/ipv6 firewall address-list
add address=::/128 list=bad_ipv6
add address=::1/128 list=bad_ipv6
add address=fec0::/10 list=bad_ipv6
add address=::ffff:0.0.0.0/96 list=bad_ipv6
add address=::/96 list=bad_ipv6
add address=100::/64 list=bad_ipv6
add address=2001:db8::/32 list=bad_ipv6
add address=2001:10::/28 list=bad_ipv6
add address=3ffe::/16 list=bad_ipv6
/ipv6 firewall filter
add action=drop chain=input connection-state=invalid
add action=drop chain=forward connection-state=invalid
add action=drop chain=forward src-address-list=bad_ipv6
add action=drop chain=forward dst-address-list=bad_ipv6
add action=drop chain=forward hop-limit=equal:1 protocol=icmpv6
add action=accept chain=input connection-state=established,related,untracked
add action=accept chain=forward connection-state=established,related,untracked
add action=accept chain=input in-interface-list=LAN
add action=accept chain=forward in-interface-list=LAN
add action=accept chain=input protocol=icmpv6
add action=accept chain=input port=33434-33534 protocol=udp
add action=accept chain=input dst-port=546 in-interface=bridge-wan protocol=udp src-address=fe80::/10
add action=drop chain=input
add action=drop chain=forward
/system clock
set time-zone-name=Europe/Paris
/system identity
set name=mikrotik