I can`t reach my Web Server from others VLANS

RouterOS General
1

Hi, i have the problem, i can´t connect my Web Server from other VLANS in my network, i gonna explain my network topology.

  • 2 (WAN) Internet Providers (“WAN1” Fiber Optic Service and another “WAN2” Cable Internet Service)
  • Main LAN Subnet Connection it´s 10.10.10.0/24 (Where the WEB Server is located) with ip 10.10.10.222 port 80 and it´s using WAN1
  • 16 VLAN with subnets from 10.10.1.0/24 to 10.10.16.0/24 using Mangle Prerouting Chains to redirect the connection to the cable internet service (WAN2)

In the past with just one internet connection (WAN1) works well, i can reach my WEB server on the ip 10.10.10.222 from 10.10.1.58 computer for example or any other IP in any VLAN.
But now with a MANGLE RULE (Mark routing with NEW Routing Mark) for all those 16 VLAN it,s not posible to connect to that server on ip 10.10.10.222.

I have a HAIRPIN NAT Rule for use my Public IP adress as internal IP with my WEB SERVER 10.10.10.222 port 8o and works well but only for the 10.10.10.0/24 subnet, another VLANS can´t connect to this server using public or even private adresses.

What to do in these case? a try a lot things, but nothing works.

Thanks a lot.

2

You can try and add not 10.10.10.0/24 in dst-address of your mangle rules, e.g. dst-address=!10.10.10.0/24

3

Or use routing rules:

/ip route rule
add action=lookup-only-in-table dst-address=<subnet> table=main