Hi guys, I tried to setup pihole on my Mikrotik, everything done according to this link.

https://www.bgocloud.com/knowledgebase/76/h...kroTik%20router.

However, I'm not able to access to PiHole admin page.

As I have two bridges, could it be due to the 2 bridges I created?

My bridge:
Bridge1
-> consists all ethernets interface (eth2, 3, 4, 5, 6 ,7 ,8 ,9)
-> gateway 192.168.0.1

dockers
-> setup for pihole (veth)
-> ip 10.0.0.2
->gateway 10.0.0.1

I did configure dstnat 192.168.0.1 port 4443 to 10.0.0.2 port 80.


Could anyone advise how to set it up correctly please? I tried to search around google but no luck to find anything.

This post has been edited by hanny562: May 3 2023, 08:08 PM

You need srcnat masquerade rule for the container subnet.

See here. https://help.mikrotik.com/docs/display/ROS/...r-Createnetwork

Can you Ping the container bridge? Can you Ping the veth?

Alternatively, which is what I do, just put your container veths on your existing subnet, no need for another bridge or subnet.


This post has been edited by soonwai: May 3 2023, 09:01 PM

Thank you for the link. I'm able to ping the bridge but not the veth using console in WinBox.

Now I have configured my container veth on my existing subnet, but still no luck to access admin panel.
I checked the link that you provided, I did the same as the link except I configured container veth on existing subnet.
Besides that, at first I thought my firewall rules blocked it but I tried disabled all the rules and try again, no luck as well.

For your ori setup, did you add the veth to the container bridge?

Easier if you just post /export.

Yes, I did add veth to the container bridge.

Sure thing,

Here you go - sorry I cannot upload the whole command here, lyn keep stopping me to post
https://drive.google.com/file/d/1LO2Q5IZ_Kk...iew?usp=sharing

This post has been edited by hanny562: May 3 2023, 10:42 PM

Can you remove this and try again. I had a quick look and the container config looks ok.
/ip firewall nat add action=masquerade chain=srcnat src-address=192.168.0.0/24

You only need the 2nd masq rule if you have a separate subnet for the containers.

At first I removed that masquerade NAT rules, but its still not able to work. I redo everything and restart it and it works for now. Thank you for the help.

No problem. Glad you got it working.

Dammit, I think my RB5009UG ether1 port dieded. Still troubleshooting.

how possible easy died port 1

i know Mikrotik router look like Enterprise router not Consumer router

i shock easy died Port

i don't know how quality other brand ubiquiti

First time for all the Mikrotik I've used.



The POE-in light on all the time now. Other ports ok, router still working. I used ether1 to my PC cos both are 2.5Gbps. PC's port is ok.

This post has been edited by soonwai: May 5 2023, 10:07 AM

so 2.5G Port died ??? can't fixed ?? yah i know other port fine

I think it quite normal happens on mikrotik router,as sometimes i can see people talks about their ethernet port died on mikrotik forum. (Amost every model will have the possibility of ethernet died)

how about ubiquiti router possible ethernet died

I dont have UBNT eqipment,so not sure about that.
I using Xiaomi Wifi router as my AP setup, UBNT device not cheap if want full setup for whole house.

yah i know UBNT Device not cheap and mikrotik also not cheap i am correct ???

look Enterprise router

Update: RB5009 ether1 port 60% dead. Working at 1Gbps but not at 2.5Gbps.

The yellow LED which is on all the time now is to indicate poe-in. Looks like something inside got shorted.



First time need to do RMA. Anyone gone through warranty claim with Subtel before? Easy or not?

This post has been edited by soonwai: May 6 2023, 02:44 AM

Posted this in mikrotik forum. May as well post here for ref also.




RB5009, hAP ax3, hAP ax and RB2011.
Also got hAP ac2 but this has no temp sensor.

This post has been edited by soonwai: May 6 2023, 02:20 AM

I think Mikrotik price is more reasonable and cheaper, which can think we actually is buying routeros software with free mikrotik hardware.
I bought RB750Gr3 few years ago because of Soonwai.
Thanks to Soonwai for bringing me to the Mikrotik RouterOS world,
I using alot of wireguard service with worldwide vps as VPN usage.

My future plan will be 1-2 years(2024/2025) later that i will just buy CCR model to replace my RB5009. (Current usage for Wireguard is "performance hungry")
My estimated model will need atleast 2 SFP+ port with at least 1 10G Ethernet and maybe multiple 2.5G ethernet port.
1G can have or not,as i not really care about it,and I just bought a 2.5G switch(8x 2.5G and 1x SFP+ port) on taobao with 10G DAC cable to link with RB5009.

And i hope at the that time,Mikrotik have change their router to use the newer generation CPU(like recent 1-2 years released) for their router.
Current CCR cpu grade seems like not so powerful.

My RB5009 always below 40c. Big heat sink below it and 3small fans rotating shift 24/7

This post has been edited by OlgaC4: May 6 2023, 10:05 AM