NAT forwarding issue

RouterOS Beginner Basics
1

Hello,
im sure that someone else has asked already but i cannot find the right question… Sorry for that,

i just got a MikroTik RB941-2ND-TC - hAP Lite.

and a quite simple task. i have a PLC which currently got Address: 172.30.10.1 / 255.255.0.0 (/16)
This PLC needs to communicate with 10.59.80.199.

i asked the manual and chat gpt which leads into those commands:

setup ip adresses (no DHCP enabled)
/ip address add address=172.30.10.225/16 interface=ether1
/ip address add address=10.59.80.127/24 interface=ether2
and the forwarding:
/ip firewall filter add chain=forward src-address=172.30.10.0/16 dst-address=10.59.80.0/24 action=accept
/ip firewall filter add chain=forward src-address=10.59.80.0/24 dst-address=172.30.10.0/16 action=accept

but finally it wont work, cannot figure out whats wrong. basically i cannot ping the interfaces. mabye thats the issue.

can somebody help me? maybe i miss a setting? rest of the system is on default parameters.

Thank you very much

2

It may depend on other rules in the firewall or even in their actual position, the firewall (filter, mangle and nat) rules need to be checked in their entirety.

It should not be needed, but usually an in-interface and out-interface is added to the forwarding rules, like:

/ip firewall filter
add action=accept chain=forward comment=“usersA to usersB” in-interface=ether2 src-address=subnetA out-interface=ether3 dst-address=subnetB
add action=accept chain=forward comment=“usersB to usersA” in-interface=ether3 src-address=subnetB out-interface=ether2 dst-address=subnetA

In any case, follow this and post your complete config:
http://forum.mikrotik.com/t/forum-rules/173010/1