Accessing devices on 2nd IP range

RouterOS General
1

Hi all

I have a hotspot on one IP range and some devices which are not on a vlan on another range.
Now I have added an IP alias to the hotspot interface, so I can access the devices on the other range, but soon realised it didn’t work because those devices need to be authenticated to the hotspot. So I did a bypass for the whole range (not the ideal solution) and I could ping that range from the mikrotik router. Now I could also ping those devices from my machine, BUT I need to ping all those devices from mikrotik first, before I can access them from my machine.

Is there a firewall rule perhaps that would allow me to access that range, without bypassing it and without having mikrotik ping each device first?

2

Ok, I got a bit further with the firewall, but still not 100%. I have the following rules:

1  chain=input action=accept src-address=192.168.20.0/24 in-interface=ether3 

2   chain=forward action=accept src-address=10.0.8.0/24 dst-address=192.168.20.0/24 

3   chain=forward action=accept src-address=192.168.20.0/24 dst-address=10.0.8.0/24

Now without the bypass I can access those devices, but I still need to ping them first from the mikrotik.

What I have noticed though… if I do a continues ping it starts getting replies after 8 or so failures and then I seem to be able to access the device. If I stop access to the device for a minute or so it “forgets” that I had access and starts all over again.