Help With Defining Route

RouterOS Beginner Basics
1

Here is what I have:
Eth1: Internet Gateway
Eth2: LAN1 - 192.168.1.2 - Connects to network that has Fortinet firewall
Eth3: GUEST - 192.168.90.1 - Guest Network

I started with Eth1 and 2. The idea was to connect the ATT internet on Eth1 only to hosts on our network that had the gateway defined as 192.168.1.2. All the other hosts use 192.168.1.1 which is our Fortinet UTM firewall.

I not want to plug in a access point to Eth3 for guest use. I want that traffic to be routed to 192.168.1.1 NOT Eth1 on the MT.

I was following this article on how to setup mutliple networks:
http://networkingforintegrators.com/2013/01/how-to-run-multiple-networks-from-a-mikrotik/

It seems like the piece I am missing is defining the route from 192.168.90.x to go to 192.168.1.1 and NOT Eth1.

2

Its just to add a route. And it should work. If you dont wat traffic to og out trough Your ether1, make a firewall rule blocking traffic from ether3 to ether1 and or, make a rule not nat’ing from ether3 to ether1.

3

Can you show me what that static route should look like?

I’m using winbox. When I look at my routes now, there is a AS route to 0.0.0.0/0 with a gateway of the ISP router connected to Eth 1. So, it looks like there is already a default route to send everything destined to the internet to my ISP gateway. That is fine for Eth2 traffic. However, I need my Eth3 network traffic to be routed to 192.168.1.1 and then from there out that internet connection.

So, how do I add that route for Eth3 network but not have it apply to Eth2 network?

4

You need to do some policy based routing…
/ip firewall mangle
add chain=prerouting src-address=192.168.90.0/24 action=mark-routing new-routing-mark=To_Fortinet
/ip route
add dst-address=0.0.0.0/0 gateway=192.168.1.1 routing-mark=To-FortinetYou can also use a firewall filter to ensure that no traffic from the 192.168.1.0/24 network can use ether1 directly to access the internet.