A subneto oriented question

RouterOS Beginner Basics
1

Hello all, I am a new forum user and a new Router OS user. Recently I have bought an used RB493GAH (SW v6.7) with three WLAN cards (two of those are CM9 and the third is CM9-GP). The most important reason for this purchase was the need for a second WAN. I have eight more months on my ADSL contract and want to take cable right now.

I have read many tutorials and forum posts in last few weeks adn managed to set some basic things. At the moment one CM9 module is connected onboard. I managed to set PPPoE and create routes for WLAN, ETH4 and ETH9. Somewhere have I read that two ports cannot be a part of the same subnet, so I have put ETH9 on 192.168.0.0/24, ETH4 on 192.168.1.0/24 and WLAN on 192.168.1.0/24. All of them have internet access, DHCP works on WLAN, but I have no communication between subnets. I need to make communication between ETH9 and WLAN. How do I do that?
Other thing that I have tried to set is Pinhole NAT. I need to enable to access my local content by use of my external DDNS address from inside (that’s pinhole nat, right?). How do I do that?

Any help would be very appreciated.

Regards,
SaleB

2

Well the first problem is that Ether4 and WALN1 share the same address space, and are two separated routed interfaces. That is going to be an issue for the router to be able to route properly. Multiple ports can share the same address space provided they are on the same layer2 segment of the network. This can be accomplished with the switch chip, or a bridge. Since you have a 493 with wireless cards, it will need to be at least partly a bridge if you wanted to go that way.

The Mikrotik will route between each interface by default, so if you do not have communication, that means it is either the Mikrotiks firewall that is blocking communication, a misconfiguration of the router, the device you are communicating to is not configured properly, or the device has a firewall that is blocking it from communicating.

For your NAT question, add in a rule like this.

/ip firewall nat
action=srcnat action=masquerade out-interface=<LAN Interface> src-address=<LAN Subnet>