I love the possibilities RouterOS offers me. Its flexibility is unparalleled, but unfortunately that also makes some things for new users complicated. I have the following setup:
Internet → Mikrotik → Fritz → Office
0.0.0.0 → 192.168.88.0/24 → 192.168.88.216 → 192.168.188.0/24
When I am connected through WiFi, and have an IP address from the 192.168.88.0/24 block assigned to me by DHCP, I want to access my computers on the 192.168.188.0/24 network. However, packages do not seem to make it past the Mikrotik router. I have tried many things, but can’t find the right combination of networks, addresses, gateways and routes to make this work. Can someone assist? What is the minimum I need to make this work?
I see there’s a Frittzbox in the game, most likely handling the .192.168.188.0/24 network.
I assume you connected the Fritz via its WAN port to the MikroTik router.
This is normal behaviour of a “home” router like a Fritzbox - they drop traffic coming into the WAN port destined to their LAN.
Thanks, I’ll have to look into that. My Fritzbox is a 7490, but I seem unable to find such a setting. The Fritz does note the following on the internet connection setting:
Internet service provider: [Existing connection over LAN]
You can use the FRITZ!Box at an already existing Internet access. For this the FRITZ!Box is not connected to the DSL line, but to the router or network.
Attention:
[] Connect the “LAN 1” port on the FRITZ!Box with the router or network using the network cable.
[] The FRITZ!Box now functions as a router itself and provides a network with its own network address range.
This seems ok to me.
Furthermore, Fritz is aware of its situation:
Note:
The IPv4 address assigned by the Internet service provider is not a publicly accessible IP address. This means that settings to permit access to the IPv4 services of the FRITZ!Box and to your IPv4 home network will probably not work. See the Help for more information.
This is about all I can find on it. Would my situation be easier with a 2nd RouterOS box instead of the Fritz? I use the Fritz for its internet telephony options.
As alternative, would it work to stop the DHCP server on the Fritz, and instead have the Mikrotik router assign IP’s in the same 192.168.88.0 range? If yes, is any change in settings on the Mikrotik router needed?
If your fritz is NATing traffic, you should disable nat. Then you should create routes between networks, so IP of fritz would be your gateway for 192.168.188.0 network. Default route on fritz should point to IP of Mikrotik’s IP and you should be good to go( assuming you configured access on fritz for hosts from 192.168.88.0 network).
Additional note:
Like Chris said, if your fritz is connected via WAN port, its expected behavior. All traffic from MT’s net is treated as WAN/public traffic, and firewall does not allow that straight to your private network ( LAN ports on fritz). You can do it like i said above( if you need separate network), or you can configure fritz in bridge mode, so all your devices will be in same network, MT will handle all, and fritz will be pretty much hub.