how to allow traffic between 3 subnets after applying policy

RouterOS Forwarding Protocols
1

hi there,
i am new on mikrotik forums i have a problem with accessing my static (live) ip pool within the internal network subnets.
i have applied policy routing because i have 2 internet connections gateways one with static ip pool for corporate clients and one for normal clients using NAT.

the problem is, after applying this policy routing everything works fine but i cant access the static ips within the internal network. the static ips are accessible from outside my network but they are not reachable from my internal network.
the policy routing that i have applied is written below.

/ip firewall mangle
add action=mark-routing chain=prerouting disabled=no new-routing-mark=static passthrough=no src-address-list=live_users
/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=live routing-mark=static scope=30 target-scope=10

2

Seems you are looking for hairpin nat. Try it.

3

thanks, the hair pin nat is actually not working in my case, i am looking for more simple way to do this please share any knowledge or script if you have, it will be very helpful for me.

4

With this setup you have effectively created a VRF. This means routes from your main table can’t see your static table. VRFs are to routing what VLANs are to switching. So effectively you have created a little logical router just to handle the static IP addresses. If you want the two to mingle your going to need to use route leaking or not use VRFs to accomplish the task at hand.

See this link for details on using static routes for route leaking http://wiki.mikrotik.com/wiki/Manual:Virtual_Routing_and_Forwarding#Static_inter-VRF_routes

5

thanks for reply, i am not very good at making routes, i just want to accomplish the task that i had done with VRF what you have said, please write any script example to use in my case i just want to use 2 gateways for 2 different ip pools one static and one with NAT so i can access the static ip from my internal network.

6

Unsure if this will work with the information given but I believe it will.

/ip route
add  dst-address=<staticnetworkhere>/?? gateway=<interfaceofprivatenetwork> 
add dst-address=<privatenetworkhere>/?? gateway=<interfaceofstaticnetwork> routing-mark=static
7

thanks for reply, i have connected static clients through pppoe so there are many interfaces where a client can connect so what specific interface i will add in this rule? please explain i will be very thank full to you.

8

this method is not working in my case please tel any other way to achieve this.