Hi,
Eth 2 - 192.168.1.1
Eth 3 - 192.168.0.1
PC connected to eth3 cannot connect to eth2 and vice versa.
Can PCs connect to each other on ether2 and ether3?
Post “/ip route print” and “/ip firewall filter print”.
No I get request timed out and sometimes destination host unreachable error when i issue ping command from PC-1(192.168.0.101) to PC-2(192.168.1.10) and vice versa..
Here are the settings:
/ip route
add comment=“VPN Route” distance=1 gateway=172.16.36.1 routing-mark=
voip-traffic
add comment=“” distance=1 gateway=172.16.75.129/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=“place hotspot rules here”
disabled=yes
add chain=input comment=“default configuration” disabled=yes protocol=icmp
add chain=input comment=“default configuration” connection-state=established
disabled=yes
add chain=input comment=“default configuration” connection-state=related
disabled=yes
add action=drop chain=input comment=“default configuration” disabled=yes
in-interface=ether1-gateway
add chain=forward comment=“default configuration” connection-state=established
disabled=yes
add chain=forward comment=“default configuration” connection-state=related
disabled=yes
add action=drop chain=forward comment=“default configuration” connection-state=
invalid disabled=yes
According to your export (which is not what I asked for), you have no routes in the router to either network. That is why the the message “Destination host unreachable”.
Next time, read my request carefully. I am rather particular about what I want you to post. Try again.
Post “/ip address print” and “/ip route print”.
Do not post another export. That does not include dynamically added routes from the addition of addresses in “/ip address”.
edit: Do you have a hotspot running on either of those interfaces? This is why I ask:
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=“place hotspot rules here” disabled=yes
Sorry for the misunderstanding..
Here is what u wanted:
[admin@srijit92_2] > /ip address print
Flags: X - disabled, I - invalid, D - dynamic
ADDRESS NETWORK INTERFACE
0 ;;; Home Network LAN
192.168.0.1/24 192.168.0.0 ether2
1 ;;; Alliance Broadband WAN
172.16.3.187/25 172.16.3.128 ether1-gateway
2 ;;; Proxy Servers
192.168.1.1/24 192.168.1.0 Proxy
3 ;;; Mikrotik Hotspot Network
10.10.10.1/24 10.10.10.0 wlan2
4 D 172.16.36.202/32 172.16.36.1 vpn[admin@srijit92_2] > /ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 X S ;;; Squid Route
0.0.0.0/0 192.168.1.30 1
1 A S ;;; VPN Route
0.0.0.0/0 172.16.36.1 1
2 A S ;;; Alliance Broadband Route
0.0.0.0/0 172.16.3.129 1
3 DS 0.0.0.0/0 172.16.36.1 2
4 ADC 10.10.10.0/24 10.10.10.1 wlan2 0
5 ADC 172.16.3.128/25 172.16.35.187 ether1-gateway 0
6 ADC 172.16.36.1/32 172.16.36.202 vpn 0
7 ADC 192.168.0.0/24 192.168.0.1 bridge-local 0
8 ADC 192.168.1.0/24 192.168.1.1 Proxy 0
9 A S 198.50.247.220/32 vpn 1[admin@srijit92_2] > /ip firewall filter print
Flags: X - disabled, I - invalid, D - dynamic
0 X ;;; place hotspot rules here
chain=unused-hs-chain action=passthrough
1 X ;;; default configuration
chain=input action=accept protocol=icmp
2 X ;;; default configuration
chain=input action=accept connection-state=established
3 X ;;; default configuration
chain=input action=accept connection-state=related
4 X ;;; default configuration
chain=input action=drop in-interface=ether1-gateway
5 X ;;; default configuration
chain=forward action=accept connection-state=established
6 X ;;; default configuration
chain=forward action=accept connection-state=related
7 X ;;; default configuration
chain=forward action=drop connection-state=invalid[admin@srijit92_2] > /interface print
Flags: D - dynamic, X - disabled, R - running, S - slave
NAME TYPE MTU L2MTU MAX-L2MTU
0 R Proxy ether 1500 1598 2028
1 R ether1-gateway ether 1500 1598 4074
2 RS ether2 ether 1500 1598 4074
3 S ether3 ether 1500 1598 4074
4 RS ether4 ether 1500 1598 4074
5 RS ether5 ether 1500 1598 4074
6 RS ether6-master-local ether 1500 1598 2028
7 S ether7-slave-local ether 1500 1598 2028
8 S ether8-slave-local ether 1500 1598 2028
9 RS ether9-slave-local ether 1500 1598 2028
10 XS sfp1 ether 1500 1598 4074
11 RS wlan1 wlan 1500 2290
12 R wlan2 wlan 1500 2290
13 R bridge-local bridge 1500 1598
14 pptp-in1 pptp-in
15 R vpn pptp-out 145For network diagram reference : https://dl.dropboxusercontent.com/u/53681371/q.jpg
I see the 192.168.0.1/24 route is on bridge-local and the ip is assigned to ether2. How did that happen?
What interface is Proxy?
Consider Proxy as eth2 interface
and the second PC(eth3) connected to ether5.
All the ports except ether1(gateway) and proxy are bridged.
If all ports are bridged, config should be put on the bridge, not on the individual interface.
like for destination ip 192.168.1.0/24 gateway bridge-local ?
Like the 192.168.0.1 ip address.