Have you already tried such configuration ? Just asking.
If you have both subnets “terminated” in one router then it knows where both subnets are so it should pass packets from one subnet to the other.
The problem is that devices form subnet 10.2.1.0/24 do not see packets from 10.2.3.0/24 as they are separated by subnets mask /24
You should change mask to cover both nets … /22 should be fine … or make proper masquarading for packets traveling from one subnet to the other.
Using masquarading makes packets from different subnet looks like coming form router so your devices will not see each other directly and e.g. NetBios will not be passed or Bonjur protocol either.
If you have 2 subnets which are directly attached at the router, then yes, you will get layer 3 communication between the 2 because the router sees these as connected routes.
Static routes are not needed because layer 3 connectivity is there.
The above posts jumps to the conclusion that you need layer 2 protocols to work across subnets, possibly with no layer 2 connectivity between them.
You need to tell us what isn’t working before this can be answered.
Just add 2 rules in firewall filter on the top of the forwards rules:
/ip fi fi
add chain=forward src-address=10.2.3.0/24 dst-address=10.2.1.0/24
add chain=forward src-address=10.2.1.0/24 dst-address=10.2.3.0/24