206/5000
in my mikrotik I have created 3 networks 192.168.90.0/24, 192.168.91.0/24 and 172.16.50.0/24 of which I want the first two to see some resources that I have in network 172 … could you tell me what should I do ?. …
By default if you don’t have any rules on firewall they will communicate to each other without problems
As @ingdaka wrote, by default Mikrotik will not block communication. However, some OSes (most notably Windows) include default firewall configuration which blocks some communication with hosts from other networks, so if you have issues, make sure you check those settings as one of initial steps in troubleshooting.
What I read is that the OP wants “SOME” resources accessed, not all.
So a wide open free for all is probably not what is required but just guessing of course.
This calls for Vlans… JUST KIDDING.
Seriously though, it may be better to block by default all forward chain traffic and then only allow the actual traffic desired.
LANS to internet for example, and LAN1 or LAN2 to specific LAN3 devices etc…
I do not have any firewall policy but they are separated by vlan, that is, each network has its vln and I would like them to see each other because I have some folders on a server that is on another network
As far as the MikroTik router is concerned, that should work OK.
Any problems you encounter are in the firewall of the client PCs (as written above) and in your expectations of what will work.
E.g. you might think you can browse the network neighborhood and find servers and their shares, or you can use \server\share.
But of course that will not work because the client and server are not in the same broadcast domain so they won’t see the broadcasts of names and shares.
You would need to run a domain controller or at least a netbios name server to be able to do that.
On the other hand \176.16.50.1\share should work when that is the IP of the server.
When your client PCs use the MikroTik router as their DNS server, you can also put static entries in the DNS to map servernames to their IP address.
If there are no firewall rules, then even being separated by vlans, they are still accessible to each other by… let’s say, routes.
I find it very strange that it does not let me, I know that once I read that I had to configure something that I do not remember if it was on the routes that was like giving access to that network
As @pe1chl already wrote: check firewalls on the end devices.
Mikrotik will attempt to route between vlans at layer 3 so you have two options in the forward chain.
a. Make rules blocking such traffic (messy because you have to make the exceptions rules you need ahead of blocking rules in the order) OR
b. Add to the end of the forward chain
add action=drop comment=“drop all else”
This will stop all undesired traffic and in this case, you only add traffic desired ahead of this rule in the order
vlans to internet (for example)
vlana to single IP in vlanb (for example - a shared printer perhaps).