Cannot get Route to work

RouterOS Beginner Basics
1

I cannot even get a simple route to work. I have an ADSL modem on 192.168.0.1 giving out addresses in the 192.168.0.x subnet.

I want to set up a subnet on 192.168.1.x with a RouterBoard 433 running RouterOS 3.22 between the two subnets. (192.168.1.x on Local1 and 192.168.0.x on Public3)

I want all the computers on 192.168.1.x to be able to access the DSL modem on 192.168.0.1 and also the other computers on the 192.168.0.x subnet.

My end goal is to manage the bandwidth of the devices on the 192.168.1.x subnet - but first I must get the route to work.

Here is my setup so far (that doesn’t work - can’t ping anything on 192.168.0.x from 192.168.1.x):

/ip address> print
Flags: X - disabled, I - invalid, D - dynamic 
 #   ADDRESS            NETWORK         BROADCAST       INTERFACE                                                                               
 0   192.168.0.254/24   192.168.0.0     192.168.0.255   Public1                                                                                 
 1   192.168.1.254/24   192.168.1.0     192.168.1.255   Local3                                                                               

/ip route> print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, 
B - blackhole, U - unreachable, P - prohibit 
 #      DST-ADDRESS        PREF-SRC        GATEWAY-STATE GATEWAY                                    DISTANCE INTERFACE                          
 0   S  192.168.0.0/24                     reachable     192.168.0.1                                1        Public1                            
 1 ADC  192.168.0.0/24     192.168.0.0                                                              0        Public1                            
 2 ADC  192.168.1.0/24     192.168.1.254                                                            0        Local3

I have only added the addresses, named the interfaces and set up the static route from a factory reset.

Any help please?

Thanks!

2

The default routes looks ok. You shouldn’t need another static route there.
Maybe a NAT challenge. Post “/ip firewall nat”.

edit: Or maybe not. Are you using 192.168.1.254 as the gateway on the localnet devices? I use 192.168.1.1/24 as the router interface ip/subnet on the localnet.

3

Hi, thanks for the reply. If I remove the static route, I still don’t get connection through to the other subnet.

A client on the Local3 subnet has the following setup:

IP : 192.168.1.123
Subnet Mask : 255.255.0.0
Default Gateway : 192.168.1.254

Just a note:
When the Subnet Mask is : 255.255.255.0, the ping failure message is Reply from 192.168.1.123 : Destination host unreachable
When the Subnet Mask is : 255.255.0.0, the ping failure is Ping timed out.

Not sure that the 255.255.0.0 is the correct one…

4

I’m a bit in the dark on how I should set up the network on the PCs on the 192.168.1.x subnet. What should be their default gateways? The Mikrotik, or the DSL model on 192.168.0.1? Also, what should their subnet mask be?

Here is what I’m trying to achieve.

I just want everything on the 192.168.1 subnet to see everything (including the internet) on 192.168.0 subnet and the other way around too.

The setup has slightly changed from the above, and here it is:

[admin@MikroTik] > /ip address print
Flags: X - disabled, I - invalid, D - dynamic 
 #   ADDRESS            NETWORK         BROADCAST       INTERFACE                                                                               
 0   192.168.0.254/24   192.168.0.0     192.168.0.255   Ether3                                                                                  
 1   192.168.1.254/32   192.168.1.0     192.168.1.255   Ether2                                                                                  

[admin@MikroTik] > /ip route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, 
B - blackhole, U - unreachable, P - prohibit 
 #      DST-ADDRESS        PREF-SRC        GATEWAY-STATE GATEWAY                                    DISTANCE INTERFACE                          
 0 ADC  192.168.0.0/24     192.168.0.254                                                            0        Ether3                             
 1 ADC  192.168.1.0/32     192.168.1.254                                                            0        Ether2                             

[admin@MikroTik] /ip firewall nat> /ip firewall nat print
Flags: X - disabled, I - invalid, D - dynamic 
[admin@MikroTik] /ip firewall nat>
5

Are you sure you want to use 192.168.1.254/32 and not 192.168.1.254/24 ???

If it is /24…

  1. For your rb433
    a. You must have as gateway your modem, so put it as your main gateway
/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.0.1 scope=30 target-scope=10

b. You must put nat rules for 192.168.1.0/24 network

/ip firewall nat
add action=masquerade chain=srcnat disabled=no src-address=192.168.1.0/24
  1. Your PC 192.168.1.x must have subnet 255.255.255.0 and gateway 192.168.1.254
  2. Your PC 192.168.0.x must have subnet 255.255.255.0 and gateway 192.168.0.254
6

Thank you so much nick3dos! The NAT and route settings did the trick.

The 192.168.1.254/32 was a misconfiguration when I re-did everything. I changed it to /24 which was my intention.

I can now ping the 192.168.0 subnet from the 192.168.1 subnet.

7

You not necessarily need the NAT rule.
You also can create a static route on the modem to forward all the traffic destined for the 192.168.1.x/24 network towards the mikrotik (192.168.0.254).
It does not really matter, it is just another way to Rome.