Communication with Ethernet device

Hello all,

most probably there will be no solution (from what I found so far on the forum and the net), but still.. lets try:
Topology:
PC Server
PC Client
Managed Switch
Mikrotik to be configured ( if possible)
ethernet device with no gateway (only static IP address on subnet 192.168.33.0 255.255.255.0)
Topology.PNG
Problem: No communication with Ethernet device from PC Server, only from PC Client
Mikrotik will need same subnet on both ethernet interfaces ETN1 and ETN2, which does not work.

Any ideas?

Where is your internet???
Is the device on the right directly connected to the MT?

Finally how do you expect comments without providing the config, we do not live in your head!!

/export file=anynameyouwish ( minus router serial number and any public WANIP info, long lists of dhcp leases etc. )

No need of Internet, this is connection to industrial device.
I will tell you what I have tried so far:

  1. Bridging Ethernet 1 and 2 interfaces (MAP 2nd).
  2. NAT from PC Server to Ethernet device.
    I have reset both configurations with no export files, since nothing worked.
    My question is principal, what is the approach here, if any?

Well, I would say, admin error, but without evidence, hard to say.

So, no solution?

And what exactly is the role of MT device?

It is supposed that MT, properly configured (as I said, if it is possible at all), will help to provide connection between PC server and Ethernet device.

I’m still at loss. PC client and ethernet device, being in the same IP subnet, can communicate directly if only switches and wires are in between. It’s the PC server which needs help. Is there any particular reason for this topology (i.e. PC client and PC server in different subnets but on same ethernet broadcast domain and ethernet device on another broadcast domain)?

There are ways to even make your current layout work, but IMO this combination of physical layout and IP layout is flawed and I think it would be better if you could make things more “by the book”.

And then it’s important to know the limitations of ethernet device (e.g. it may only work within single IP subnet or some such).

Thanks for your reply, mkx. To throw some light, what is shown on the topology, is one branch from company’s network. The PC Server does not need help, because it communicate perfectly with other 40 devices without issues. But, they have gateway properly configured. The ethernet device does not have any. If the static IP address of the ethernet device was on another subnet, I would place MT with NAT, and it will work just fine, I have at least 15 other devices working this way. But since the ethernet device has static address 192.168.33.142, i.e. on the same subnet between the managed switch and the device, neither NAT, nor bridge work. There is simple solution, to change the IP address of the device, but I am not owner of the its program, and next appointment with the manufacturer is after two months. So, shall I forget for any workaround until then? Nothing to lose, at the end of the day…

I think you could use MT device … but not the way you tried. You would connect it to the managed switch with single connection (e.g. ether2). Then assign two IP addresses to same interface, one in 192.168.0.0/24 and one in 192.168.33.0/24. Then configure hairpin NAT - this means both DST NAT and SRC NAT - for protocols and ports needed. Devices outside 192.168.33.0/24 will use router’s address from 192.168.0.0/24 subnet, ethernet device will see router’s address (from 192.168.33.0/24 subnet) as source address.

Thank you for this lead, mkx, I will try and revert.

mkx, is this what you meant?

model = RBmAP2nD

serial number = HCH089M37CH

/interface wireless
set [ find default-name=wlan1 ] ssid=MikroTik
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip address
add address=192.168.0.223/24 interface=ether2 network=192.168.0.0
add address=192.168.33.201/24 interface=ether2 network=192.168.33.0
/ip firewall nat
add action=masquerade chain=srcnat dst-address=192.168.0.0/24 src-address=
192.168.0.0/24
add action=masquerade chain=srcnat dst-address=192.168.33.0/24 src-address=
192.168.33.0/24
add action=src-nat chain=srcnat protocol=tcp src-address=192.168.0.213
to-addresses=192.168.33.142 to-ports=102
add action=dst-nat chain=dstnat dst-address=192.168.0.213 protocol=tcp
to-addresses=192.168.33.142 to-ports=102
/system identity
set name=RouterOS