I have 2 WAN Networks. WAN 1 works fine but will be disabled in a few day. WAN 2 is what I am trying to setup. The network for WAN 2 is: 192.168.1.0/24. I have a Ubiquiti Bullet 2 at the address 192.168.1.252. I can ping this bullet from the Mirkrotik router, but not from any of the clients on subnets 10.0.0.0/24 or 192.168.3.0/24. Any ideas? Thank you in advance for any help.
# aug/29/2013 18:44:54 by RouterOS 5.22
# software id = 8H1T-5QZC
#
/ip hotspot profile
add dns-name=10.0.0.138 hotspot-address=10.0.0.138 login-by=\
mac,http-chap,http-pap name=hsprof1 radius-interim-update=1m use-radius=\
yes
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none shared-users=100
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=dhcp_pool1 ranges=10.0.0.1-10.0.0.137,10.0.0.139-10.0.0.254
add name=dhcp_pool2 ranges=10.0.0.1-10.0.0.137,10.0.0.139-10.0.0.254
add name=dhcp_pool3 ranges=10.0.0.1-10.0.0.137,10.0.0.139-10.0.0.254
add name=dhcp_pool4 ranges=192.168.3.2-192.168.3.254
add name=hs-pool-2 ranges=192.168.14.1,192.168.14.3-192.168.14.254
/ip dhcp-server
add address-pool=dhcp_pool3 disabled=no interface=SKY name=dhcp1
add address-pool=dhcp_pool4 disabled=no interface=Home name=dhcp2
add address-pool=hs-pool-2 disabled=no interface=WAN2 lease-time=1h name=\
dhcp3
/ip hotspot
add address-pool=dhcp_pool1 addresses-per-mac=1 disabled=no interface=SKY \
keepalive-timeout=30s name=hotspot3 profile=hsprof1
/ppp profile
add local-address=192.168.3.1 name=profile1-ppp remote-address=default-dhcp
/queue type
add kind=pcq name=pcq-upload-default pcq-classifier=src-address
add kind=pcq name=pcq-download-default pcq-classifier=dst-address
/interface pptp-server server
set default-profile=profile1-ppp enabled=yes
/ip address
add address=188.225.181.14/32 comment="Wan Coolnet" interface=WAN1 network=\
188.225.181.13
add address=10.0.0.138/24 comment="hotspot gateway" interface=SKY
add address=192.168.3.1/24 comment="My Network" interface=Home
add address=192.168.1.250/24 comment="A Link" interface=WAN2
/ip dhcp-server lease
add address=192.168.3.9 client-id=1:0:11:32:6:89:6 mac-address=\
00:11:32:06:89:06 server=dhcp2
add address=192.168.3.24 mac-address=08:00:27:AE:81:A2 server=dhcp2
/ip dhcp-server network
add address=10.0.0.0/24 comment=hotspot dns-server=10.0.0.138 gateway=\
10.0.0.138 netmask=24
add address=192.168.3.0/24 dns-server=\
192.168.3.1,188.225.225.25,188.225.180.2,8.8.8.8 gateway=192.168.3.1
add address=192.168.14.0/24 comment="hotspot network" gateway=192.168.14.2
add address=192.168.88.0/24 comment="default configuration" dns-server=\
192.168.88.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=10.0.0.138,8.8.8.8
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add chain=input comment="Remote Disconnect" dst-port=1700 protocol=tcp
add chain=input comment="default configuration" protocol=icmp
add chain=input comment="default configuration" connection-state=established
add chain=input comment="default configuration" connection-state=related
add chain=input comment="WinBox Wan Administration" dst-port=8291 protocol=\
tcp
add action=drop chain=input comment="default configuration" in-interface=WAN1
add chain=input comment="Authentication Port" dst-port=1812 protocol=tcp
add chain=input comment="Accounting Port" dst-port=1813 protocol=tcp
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes to-addresses=0.0.0.0
add action=masquerade chain=srcnat comment="default configuration" \
out-interface=WAN1 to-addresses=0.0.0.0
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
src-address=10.0.0.0/24
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
src-address=10.0.0.0/24 to-addresses=0.0.0.0
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
src-address=10.0.0.0/24
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
src-address=10.0.0.0/24 to-addresses=0.0.0.0
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
src-address=10.0.0.0/24 to-addresses=0.0.0.0
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
disabled=yes src-address=192.168.1.0/24 to-addresses=0.0.0.0
add action=dst-nat chain=dstnat dst-port=1604 in-interface=WAN1 protocol=tcp \
to-addresses=192.168.3.16 to-ports=1604
add action=dst-nat chain=dstnat dst-port=1604 in-interface=WAN1 protocol=udp \
to-addresses=192.168.3.16 to-ports=1604
/ip hotspot ip-binding
add address=10.0.0.252 type=bypassed
add address=10.0.0.253 type=bypassed
add mac-address=00:18:25:16:B3:E0 type=bypassed
add disabled=yes mac-address=5C:9A:D8:63:1E:00 type=bypassed
add disabled=yes mac-address=00:0D:60:ED:44:08 type=bypassed
add disabled=yes mac-address=00:0D:60:40:E5:2C type=bypassed
add address=10.0.0.251 disabled=yes type=bypassed
add disabled=yes mac-address=D8:5D:4C:CD:A2:97 type=bypassed
add address=10.0.0.254 mac-address=00:15:6D:B0:5E:1D server=hotspot3 \
to-address=10.0.0.254 type=bypassed
add disabled=yes mac-address=00:12:05:23:00:BB type=bypassed
add address=10.0.0.17 disabled=yes mac-address=64:70:02:ED:6E:75 server=\
hotspot3 to-address=10.0.0.17 type=bypassed
/ip hotspot walled-garden
add dst-host=192.168.3.2 dst-port=80 server=hotspot3
/ip route
add distance=1 gateway=188.225.181.13
add disabled=yes distance=1 gateway=192.168.1.1
add check-gateway=ping distance=1 dst-address=192.168.1.0/24 gateway=\
192.168.1.252
add disabled=yes distance=1 dst-address=192.168.3.0/24 gateway=10.0.0.55
/ip traffic-flow
set enabled=yes interfaces=SKY
/ip traffic-flow target
add address=192.168.3.2:12345 version=5
/ppp aaa
set interim-update=1m use-radius=yes
/radius
add address=192.168.3.2 secret=abe27189 service=ppp,hotspot timeout=3s
/radius incoming
set accept=yes port=1700
/snmp
set enabled=yes trap-community=public trap-version=2
/system clock
set time-zone-name=Asia/Jerusalem
/system lcd
set contrast=0 enabled=no port=parallel type=24x4
/system lcd page
set time disabled=yes display-time=5s
set resources disabled=yes display-time=5s
set uptime disabled=yes display-time=5s
set packets disabled=yes display-time=5s
set bits disabled=yes display-time=5s
set version disabled=yes display-time=5s
set identity disabled=yes display-time=5s
set Home disabled=yes display-time=5s
set ether4-slave-local disabled=yes display-time=5s
set SKY disabled=yes display-time=5s
set WAN2 disabled=yes display-time=5s
set WAN1 disabled=yes display-time=5s
/system ntp client
set enabled=yes primary-ntp=59.124.196.85 secondary-ntp=103.12.12.11
/system ntp server
set enabled=yes manycast=no
/system scheduler
add comment=script1 interval=10m name=schedule1 on-event=script1 policy=\
reboot,read,write,policy,test,password,sniff,sensitive start-time=startup
/system script
add name=script1 policy=\
reboot,read,write,policy,test,password,sniff,sensitive source=\
"/ip hotspot host remove [find !authorized ]"
/tool mac-server
add disabled=no interface=WAN2
add disabled=no interface=SKY
add disabled=no interface=ether4-slave-local
add disabled=no interface=Home
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=WAN2
add interface=SKY
add interface=ether4-slave-local
add interface=Home