I wonder if this can be done in mikrotik.

RouterOS Beginner Basics
1

Hello , I’m new in the world of mikrotik and I wonder if this can be done?
Reach communication of any VLAN to a different network in the same mikrotik . Should i use ip route o ip firewall nat ?
Thanks in advance.

2

Hello, if you want to reach vlan’s on mikrotik 2 from vlan’s on mikrotik 1, then you’ll need to configure ip route.

Regards,

3

It is not clear what exactly you are trying to achieve. Give an example please.
You want PCs from VLAN2 to communicate with PCs in VLAN3?

Or the intention is to make PCs from same VLAN to communicate between each other (L2 transit)?
You want to make PC in VLAN2 on Mikrotik1 to be able to communicate with PC in VLAN2 on Mikrotik2?

It would be good if you could provide snippets (exports) from your existing configuration.

Regards,
Artem

4

Sorry, i don’t have problems to reach vlans or intervlans, but i can’t reach from any vlan to the server 192.168.16.2

5

In my opinion, properly configuring routes to reach a destination is always better than configuring NAT. You can still control access with filter rules. NAT exists primarily to conserve public IP address consumption, to facilitate IP migrations/changes/network mergers, and to allow reachability when you do not control the routers that would need additional routing information to reach your network.

End-to-end reachability (at the IP layer) is always better.

6

Thank you for the advice. this is my route table can now reach the 192.168.16.0 network .



/ip route print detail
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
 0 ADC  dst-address=10.1.2.0/24 pref-src=10.1.2.1 gateway=bridge-vlan2,bridge-vlan2
        gateway-status=bridge-vlan2 reachable,bridge-vlan2 reachable distance=0 scope=10

 1 ADC  dst-address=10.1.3.0/24 pref-src=10.1.3.1 gateway=bridge-vlan3 gateway-status=bridge-vlan3 reachable
        distance=0 scope=10

 2 ADC  dst-address=10.1.4.0/24 pref-src=10.1.4.1 gateway=bridge-vlan4 gateway-status=bridge-vlan4 reachable
        distance=0 scope=10

 3 ADC  dst-address=192.168.16.0/24 pref-src=192.168.16.1 gateway=ether4 gateway-status=ether4 reachable
        distance=0 scope=10