Access isp modem http

RouterOS Beginner Basics
1

Hello everyone,
I know that this question has been repated many times, but every thread I’ve read and solution i tried, I couldn’t get right solution

my problem is that I can’t access isp modem web gui (http) or ping.

topology:
ADSL modem(ISP)–>ethernet–>mikrotik router–> pc/phones (LAN + WiFi)

ISP modem has address 192.168.1.1.
on mikrotik i have added static ip on wan interface (ether1-WAN) 192.168.1.10
i have tried different src-nat, masquerade.
but somehow i cant ping or access webgui on ISP modem .
I CAN ping ISP modem using mikrotik inbuilt ping tool.
mikrotik route.PNG
mikrotik nat.PNG

2

please post IP->Addresses and IP->Routes
also please post your filter rules.

3

IP addresses

/ip address
add address=192.168.10.250/16 comment=defconf interface=ether2-master \
    network=192.168.0.0
add address=192.68.0.154/16 interface=ether23 network=192.68.0.0
add address=192.168.1.10/24 interface=ether1-WAN network=192.168.1.0

Routes

/ip route
add distance=1 gateway=192.168.1.1
add distance=1 dst-address=192.168.1.1/32 gateway=192.168.1.1
add comment="access to isp modem" disabled=yes distance=1 dst-address=\
    192.168.1.1/32 type=prohibit

Rules

/ip firewall filter
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept established,related" \
    connection-state=established,related
add action=accept chain=input comment=vpen dst-port=500 in-interface=\
    ether1-WAN protocol=udp
add action=accept chain=input comment=vpen dst-port=1701 in-interface=\
    ether1-WAN protocol=udp
add action=accept chain=input dst-port=4500 in-interface=ether1-WAN protocol=\
    udp
add action=accept chain=input in-interface=ether1-WAN protocol=ipsec-esp
add action=drop chain=input comment="defconf: drop all from WAN" \
    in-interface=ether1-WAN
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related" \
    connection-state=established,related
add action=drop chain=forward comment=\
    "defconf:  drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface=ether1-WAN
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
4

Just by looking your IP addresses and without reviewing anything else I see that you have an IP address conflict between the two interfaces.
The /16 ether2 network has a complete inclusion of your /24 wan network.
Please review and separate the 2 networks.