I have a CRS125-24G-1S-2HnD currently operating as a Router, also running a Hotspot + Radius (& DHCP) server.
I’ve connected it to another CRS125, that’s being utilzed a a managed switch, through fiber SFP port.
On the Router, I have the SFP port as part of the br-hotspot bridge - which puts all of the cAPs connected to on the Hotspot. But I also have a single DVR back there that the ‘Office’ network needs access too. I have tried all sorts of implementations, but nothing seems to allow me to connect from br-lan (Office network) to resources behind br-hotspot.
I’ve tried various combinations of the following:
ip firewall filter add chain=forward src-address=192.168.0.0/24 in-interface=br-hotspot out-interface=br-lan action=accept
ip firewall filter add chain=forward dst-address=192.168.0.0/24 in-interface=br-lan out-interface=br-hotspot action=accept
This seems like it should work - but I suspect the Hotspot server on the mikrotik might be doing some cheatery magic, so the rules are not quite straightforward. In addition to those firewall rules I’ve also experimented with the Walled Garden and adding the dvr to the lists - but that also didn’t work.
Pertinent Network Stats:
Office Network - 192.168.0.0/24 (Router is 192.168.0.1) - on br-lan (which are ports 2 - 19 and the built-in wireless).
Hotspot Network - 10.50.5.0/24 (Hotspot server is 10.50.5.1) - on br-hotspot (which is SPF and ports 20 - 24)
DVR (on mikrotik SWITCH connected with fiber through SFP port) - 192.168.0.252
SWITCH - (mikrotik CRS125) - 192.168.0.2
I appreciate your guidance -
Thank you.
~Lenn