CCR1009-7G-1C-1S+PC basic setup

Ok, new to Mikrotik and routerOS. I am attempting to setup as a router behind verizon router.
I have a static ip set on Ether1 with that connection directly to my verizon router (confirmed I can Ping outside IP’s via mikrotik ping tool)
I have Ether3 set up to my switch which has 2 PC’s connected to it, Both have static IP’s set so no DHCP server needed
I have a Route setup with Dst address of 0.0.0.0/0 and a gateway of 192.168.1.1 (shows as reachable ether1)

Addresses I have the following
192.168.1.3/24 Network 192.168.1.0 ether1
192.168.2.187/24 Network 192.168.2.0 ether3

Firewall NAT srcnat with everything blank and set to masquerade

I have DNS set to 8.8.8.8 and a secondary of 8.8.4.4

I have followed multiple guides and videos but no matter what I do I cannot reach the internet from either PC. I can ping each PC and manage the router, but for some reason the link is not being made to ether1. Any thoughts?

Hello, post your config please : export compact hide-sensitive

Do you have default route on your MT router?

[admin@MikroTik] > export

dec/12/2017 17:22:28 by RouterOS 6.40.5

software id = FFBU-XNHT

model = CCR1009-7G-1C-1S+

serial number =

/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=192.168.2.20-192.168.2.254
add name=dhcp_pool1 ranges=192.168.2.20-192.168.2.254
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=ether2 name=dhcp1
add address-pool=dhcp_pool1 disabled=no interface=ether3 name=dhcp2
/ip address
add address=192.168.88.1/24 comment=defconf disabled=yes interface=combo1 network=192.168.88.0
add address=192.168.2.187/24 comment=“xxxx” interface=ether3 network=192.168.2.0
add address=192.168.1.3/24 interface=ether1 network=192.168.1.0
add address=192.168.2.1/24 comment=“xxxx” interface=ether2 network=192.168.2.0
/ip dhcp-server network
add address=192.168.2.0/24 gateway=192.168.2.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/ip route
add comment=“Connection to Verizon Router” distance=1 gateway=192.168.1.1
/system clock
set time-zone-name=America/New_York
[admin@MikroTik] >

Hello,

You have a problem with your configuration,

/ip address
add address=192.168.88.1/24 comment=defconf disabled=yes interface=combo1 network=192.168.88.0
add address=192.168.2.187/24 comment=“xxxx” interface=ether3 network=192.168.2.0
add address=192.168.1.3/24 interface=ether1 network=192.168.1.0
add address=192.168.2.1/24 comment=“xxxx” interface=ether2 network=192.168.2.0

I do not understand why you set an ip on ether2 and 3 in the same subnet.

Hello, I’ve started over with an even more basic config, still the same problem, I can ping the outside network from the router, it pulls time from the SNTP server, but I still cannot communicate through the router from the inside network. Here again is my config

[admin@MikroTik] > export hide-sensitive

dec/17/2017 13:18:19 by RouterOS 6.40.5

software id = FFBU-XNHT

model = CCR1009-7G-1C-1S+

serial number = 6F5006DA1353

/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=192.168.2.2
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=ether2 lease-time=1d5h name=dhcp1
/ip address
add address=192.168.2.1/30 interface=ether2 network=192.168.2.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1 use-peer-dns=no use-peer-ntp=no
/ip dhcp-server network
add address=192.168.2.0/30 gateway=192.168.2.1
/ip dns
set servers=8.8.8.8,8.8.4.4
/ip firewall nat
add action=masquerade chain=srcnat src-address-list=“”
/ip route
add distance=1 gateway=ether1
/system clock
set time-zone-autodetect=no time-zone-name=America/New_York
/system ntp client
set primary-ntp=129.6.15.28 secondary-ntp=132.163.97.1
[admin@MikroTik] >

Hello, your config is not complete, there is no nat, firewall and route rule

In addition to the IP address problem, you have 2 supplemental issues.

  1. NAT is wrong, you need only do nat for the WAN interface:
    /ip firewall nat
    add action=masquerade chain=srcnat out-interface=ether1

  2. You need a default route for your uplink using an ip address not an interface name (IF names work only on PtP links, like PPPoE).
    /ip route
    add gateway=192.168.1.1

To have 2 ethernet IFs on the same network, you need to put them on a bridge (since there is no switch chip on this model), and assign the IP to the bridge.