I’m having a problem with dhcp assigned address in the way that i’m able to ping out from devices with assigned addresses but i’m unable to ping the ip from the local network.
i.e i have a device assigned 192.168.111.240 form that i can ping local and to the internet i.e 8.8.8.8
from device assigned 192.168.111.240 i cannot ping another device on the same subnet i.e 192.168.111.241
From my local network I can ping the gateway ip (on the mikrotik) 192.168.111.254 but not an dhcp assigned ip i.e 192.168.111.240
I suspect i’m missing a firewall rule?
model = CRS354-48G-4S+2Q+
/interface bridge
add admin-mac= auto-mac=no comment=defconf ingress-filtering=no name=bridge vlan-filtering=yes
/interface vlan
add interface=bridge name=vlan111 vlan-id=111
/ip pool
add name=vlan111_pool ranges=192.168.111.1-192.168.111.253
/ip dhcp-server
add address-pool=vlan111_pool bootp-support=none interface=vlan111 lease-time=1d name=vlan111_dhcp
/interface bridge port
add bridge=bridge comment=defconf ingress-filtering=no interface=ether45 pvid=111
add bridge=bridge comment=defconf ingress-filtering=no interface=ether46 pvid=111
/interface bridge vlan
add bridge=bridge tagged=bridge,ether46 vlan-ids=111
/ip address
add address=192.168.111.254/24 interface=vlan111 network=192.168.111.0
/ip dhcp-server network
add address=192.168.111.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=192.168.111.254 netmask=24
/ip firewall filter
add action=fasttrack-connection chain=forward connection-state=established,related hw-offload=yes protocol=tcp
add action=fasttrack-connection chain=forward connection-state=established,related hw-offload=no
add action=accept chain=forward connection-state=established,related
/ip firewall nat
add action=masquerade chain=srcnat out-interface=bridge src-address=192.168.111.0/24