Access local servers on same subnet.

RouterOS General
1

Hi, im having problems whit a new CRS125-24G-1S-RM. I removed the default configuration and placed a firewall like this one: http://wiki.mikrotik.com/wiki/Securing_New_RouterOs_Router. I have WAN on ether1 and ether2-6 in bridge1. With a subnet of 192.168.0.0/24 every thing works as it use to do.

But i have two web servers on the subnet for local use and somehow i cant access them. I cant ping both servers and a nmap scan shows the ports 80 and 443 as filtered. One web server have a firewall and the other dont. but its the same for both servers. Im not intressed in nat hairpin or accessing the web servers from public. Only local access.

bridge1: 192.168.0.1
webservers: 192.168.0.253-254

Im grate full for any help in this mather. I can post any configs if needed later tonight.

2

Perhaps not Mikrotik problem. Connect to servers directly without router and check if it works.

3

Yea i have done that and it works. So thats why i posted here. I cant find any reason the router whold block internal traffic.

With torch i dont even get traffic on port 80 or 443 to the servers.

4

Do they respond to pin? check your network settings on your servers to make sure you have the right subnet and gateway. Try disable firewall and see if you can browse the servers.

5

like i said one have no firewall and i have tested to tern off the firewall on the other server and they respond to pings.

Again i have tried to turn off the firewall on both servers and they respond to pings.

6

Have you tried to turn off the firewall on your mikrotik router?

7

So both servers and your PC/notebook/whatever you use for testing are connected to ether2-6, and all these ports are part of same bridge? Then it really should work, unless you have some bridge filters (/interface bridge filter) or use-ip-firewall=yes set for bridge and some blocking rules. I’d use Tools->Torch on individual ports to see what exactly happens.