As I already wrote sometime ago, I still have major problems with sharing Internet connection, and I couldn't find any solution:
I have 2 Ethernet interfaces:
NAME
0 R adsl-ethernet 1500 00:50:BA:C6:A6:EF enabled
1 R ethernet 1500 00:02:44:12:19:03 enabled
- Mikrotik connects to internet as pppoe clinet, through adsl-ethernet interface, in which there is adsl-modem plugged in:
[admin@MikroTik] ppp> /interface pppoe-client print
0 X name="pppoe-out1" max-mtu=1500 max-mru=1500 interface=adsl-ethernet user="username" password="password" profile=default service-name="" ac-name="" add-default-route=yes dial-on-demand=no use-peer-dns=yes allow=pap,chap,mschap1,mschap2
So, this works fine. Mikrotik connects without problems, pppoe-out1 is up&running , and I can ping any internet address from mikrotik.
Ethernet interface is 192.168.1.1
Behind "ethernet" interface I have 192.168.1.0/24 network. to be exact, there is ordinary switch plugged into ethernet interfaces, and hosts 192.168.1.10-192.168.1.15. They all can ping Mtik, but they CAN'T ping any internet address! They have 192.168.1.1 as default gateway, and DNS servers from my ISP.
Here are NAT and MANGLE setings:
/ip firewall nat
add chain=srcnat out-interface=pppoe-out1 action=masquerade comment="" disabled=no
Someone wrote to add mangle rule:
/ ip firewall mangle
add chain=forward protocol=tcp tcp-flags=syn connection-state=established action=change-mss new-mss=clamp-to-pmtu comment="" disabled=no
I tried this, but also doesn't work. Any more ideas?