hi
yes definitely my config
# model = RBD53G-5HacD2HnD
# serial number = D7B00C01D3A8
/ip firewall filter
add action=accept chain=output protocol=icmp
add action=accept chain=input connection-state=established,related protocol=\
icmp
add action=accept chain=input connection-state=new dst-port=67 \
in-interface-list=LAN protocol=udp src-port=68
add action=accept chain=input connection-state=established,related,new
add action=accept chain=output connection-nat-state=srcnat,dstnat \
connection-state=invalid,established,related,new,untracked
add action=drop chain=input connection-state=invalid,untracked
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN
add action=masquerade chain=srcnat out-interface=CH-UK#1
add action=accept chain=input dst-port=67 protocol=udp src-port=68
add action=masquerade chain=srcnat src-address=192.168.100.0/24
/ip firewall raw
add action=accept chain=prerouting comment="defconf: accept DHCP discover" dst-address=255.255.255.255 dst-port=67 in-interface-list=LAN protocol=udp src-address=0.0.0.0 src-port=68
/ip firewall service-port
set irc disabled=no
set rtsp disabled=no
Is there something else that i can do?
thank you for your help
yes definitely my config
# model = RBD53G-5HacD2HnD
# serial number = D7B00C01D3A8
/ip firewall filter
add action=accept chain=output protocol=icmp
add action=accept chain=input connection-state=established,related protocol=\
icmp
add action=accept chain=input connection-state=new dst-port=67 \
in-interface-list=LAN protocol=udp src-port=68
add action=accept chain=input connection-state=established,related,new
add action=accept chain=output connection-nat-state=srcnat,dstnat \
connection-state=invalid,established,related,new,untracked
add action=drop chain=input connection-state=invalid,untracked
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN
add action=masquerade chain=srcnat out-interface=CH-UK#1
add action=accept chain=input dst-port=67 protocol=udp src-port=68
add action=masquerade chain=srcnat src-address=192.168.100.0/24
/ip firewall raw
add action=accept chain=prerouting comment="defconf: accept DHCP discover" dst-address=255.255.255.255 dst-port=67 in-interface-list=LAN protocol=udp src-address=0.0.0.0 src-port=68
/ip firewall service-port
set irc disabled=no
set rtsp disabled=no
Is there something else that i can do?
thank you for your help
Statistics: Posted by cokiere — Sun Feb 25, 2024 11:08 pm