[Ask] 2 Mikrotik with 2 Network

RouterOS Beginner Basics
1

Hi all,

I want to ask how to make devices on different networks communicate with each other. Each network has its own mikrotik router.

https://i.imgur.com/Au5uY7U.png

What configuration is needed so that all PCs can communicate with each other via ether 3 on each mikrotik router?

2

You did not mention, witch network is on the connection between the routers.
There a a couple of ways to to this, her is one example (eventually not the best):

  • Crate a intermediate network like 172.16.0.0/30 (the network is freely chosen from a private network range, others can be used)
  • Assign 172.16.0.1 to ehter3 on your hEX
  • Assign 172.16.0.2 to ehter3 on your hAP AC3
  • Add a route (ip route) to you hEX for the network 192.168.76.64/26 with the gateway ip 172.16.0.2
  • Add a route (ip route) to you hAP AC3 for the network 192.168.76.32/27 with the gateway ip 172.16.0.1
  • Set your firewall rules, to allow the traffic between the two networks

If this didn’t work for you, please give more information over your requirements.

3

I did almost exactly what you want to do for years. My DSL internet came into one router with several LANs and my cable internet came into another router with several LANs. Very easy. Just takes a couple route statements. Yours will be a little simplier than mine since there is only one LAN segment on each router. In my case, I do not use a bridge in either router since every port was a different LAN.

On the link between the two router, use a separate LAN segment. For example 192.168.76.0/30 with the hEX using 192.168.76.1 and the hAP using192.168.76.2. On the hEX manually define an IP Route statement to add 192.168.76.64/26 with a gateway of 192.168.76.2, and in the hAP add an IP Route statement to add 192.168.76.32/27 with a gateway of 192.168.76.1.

On the hEX

/ip route
add comment="LAN segment on hAP" distance=1 dst-address=192.168.76.64/26 gateway=\
    192.168.76.2

And on the hAP

    
   /ip route
add comment="LAN segment on hEX" distance=1 dst-address=192.168.76.32/27 gateway=\
    192.168.76.1

Obviously you have the option of adding firewall rules so that only certain devices on one can access the other LAN (if there is a need for that).