weird behaviour on siro with Vfe

rk2017

Hi all

Thanks to the great info on other threads here like (can't post it because I'm a new user) I have successfully managed to get my mikrotik hex router directly connected to the ONT and successfully receiving an IP address etc.

All seemed good...

But then I can see a weird issue, basically I can surf to google/facebook/wikipedia/gmail but not to other sites, for example speedtestdotnet

It's like there is a whitelist being applied somewhere in the network, has anyone else encountered this?

With my previous non-siro connection I was bridging the modem to my router which allowed me to use the far more capable firewall and other services there, given that I also run a separate mesh wifi network. With siro my hope was to ditch the bridging entirely but this has me stumped.

It's not DNS, i can verify that the names resolve just fine
It's not routing as far as I can tell, I can traceroute to the destinations, I can ping them, etc.
It's not the firewall, I've stripped out all rules for testing

Is there some L7 stuff in the network or some other filtering if you're not using the right credentials or something? Any clues would be great please!!

And oh, yes, it works fine when I reconnect the gigabox, all sites available

thanks in advance
- R

ED E

Can you ping them over v4 and v6? Sounds like classic V6 only access.


A poster (Praetarion?) has detailed before how your router needs to form the correct DHCP packet to get the dual lease. Not sure where to find that post.

rk2017

ahhh, nice catch! never had a v6 address outside of work before so it never occurred
I'll look at that right now!

appreciate the speedy response, thanks!

rk2017

doesn't look like it ED_E, I'm not getting an IPv6 address, just an IPv4
I'll search for Praetorian's posts to see if there's something i'm missing though, thanks again for the possible clues!