Hi i have a rb750gl and im new to mikrotik
the end goal is to connect 2 subnets for pcs to ping and connect to each other
current settings
ether 2 = 192.168.10.0/24 network the firewall on ip 192.168.10.1 is also the dhcp server
ether 3 = 192.168.0.0/24 this network has some ip fixed machinery on them
so my end goal is to be able to join those two subnets for a pc on 192.168.10.0 to connect on a
machine on 192.168.0.0 and for a machine to send reports to a sql database on the 192.168.10.0 network
I did add firewall rules
/ip firewall filter
add action=accept chain=forward comment=“allow traffic between LAN and LAN2” src-address=192.168.10.0/24 dst-address=192.168.0.0/24
add action=accept chain=forward comment=“allow traffic between LAN and LAN2 (reverse direction)” src-address=192.168.0.0/24 dst-address=192.168.10.0/24
I guess my question is why have two subnets?
If one subnet can fully access the other subnet and vice versa, there is no need for two subnets!!
If there is a security reason for the two subnets, lets say the printers are on subnet B but you want all users in subnet A to be able to use it, one only needs a one way rule.
add action=accept chain=forward source-address=subnetA dst-address=IPaddressofprinter(on subnet b) add port protocol if necessary!
You will note that enabling a firewall rule like this means that traffic originating in LANA can reach the printer in LANB and any return traffic from that connection is permitted.
THe rule does not allow the printer to talk anyone on LANA, and by that I mean initiate a connection.
In you case,
add action=accept chain=foward src-address=IPofPC_on _.01 network dst-address=IPofPC_on.10 network (add port and protocols if applicable).
If this network isn’t Internet connected, I’d suggest disabling any firewall, NAT or mangle rules in the first instance. Just assigning those two subnets via the two interfaces will allow them to talk to each other. If that doesn’t work there’s probably something wrong with the hosts, for example incorrect subnet mask or default gateway.
Remember to check in both directions, I couldn’t count the number of times someone’s said “I can’t ping X” when the actual problem is that “X” can’t reply.
ok so i just ditched the mikrotik and increased my network’s subnet from 24 to 20 was trying to avoid this but it works now as one large network
thanks for all the feedback