Need help routing between subnets

-I would like to learn routing between subnets, and pratice VPN on it
Here is the diagram for my little network. Both Mikrotik link by 192.168.3.X
-PC1 which connect to MTK1 eth2, I wish to ping MTK2 eth2 & eth3
I added a static route 192.168.0.0/21 GW 192.168.3.1
but still could not ping 192.168.4.1 and 192.168.6.1. Eventually I would like to ping the 2 VMs
in ESXi Server.
-MTK2, I added static route 192.168.2.0/24 GW 192.168.3.1
Terminal, I can ping 192.168.2.1 but can not ping 192.168.2.50 (PC1)

-Can someone help me with the routings?
-In my log, someone try to SSH with various usernames..In IP > Services, I disable ssh port 22
would that help? How can I allow SSH to the router with specific IPs

Thanks!
Home_Network_PS_small2.jpg

If you would like to ping pc1 and pc2 from the vm or mt 2. You will need to give ether1 on mt2 the ip of 192.168.3.2/24. Then, you add the static route 192.168.2.0/24 with gateway 192.168.3.1. This will allow you to add the settings to mt 1 correctly. Your first question saying you want to ping ether 2 and 3 of the mt 2 from pc1. You will need to add a static route in mt 1. 192.168.4.0/24 gateway 192.168.3.2 and 192.168.6.0/24 gateway 192.168.3.2. This should allow you to ping the mt2 and the 2 vms from pc1 and pc2.

Also to only allow certain ips to ssh into your mikrotik there is multiple ways of doing it, but the easiest is going to IP > Services. Add your ips into the available from box.

If you need anything else don’t hesitate to email me.

Thanks!! I did ask u suggest
MTK1
IP > Routes
AS 192.168.4.0/24 Gateway: 192.168.3.2
AS 192.168.6.0/24 Gateway: 192.168.3.2

MTK2
IP > Addresses
IP: 192.168.3.2/24, Network: 192.168.3.0, Interface: eth1 - WAN
IP > Routes
AS 0.0.0.0/0 Gateway: 192.168.3.1
AS 192.168.2.0/24 Gateway: 192.168.3.1

From MTK1 Terminal, I can ping 192.168.4.1, 192.168.4.100 (ESXi NIC1), 192.168.6.1

From MTK2 Terminal, I can ping 192.168.2.1, but I can’t ping PC1, which now IP 192.168.2.253 (DHCP).. There are no Firewall NAT rule..I also try disable 0.0.0.0/0 but nothing..Any idea?

On my ESXi 4.01 Server..the management port is on NIC1. After I added NIC2, I would like to set an IP to it. I add vSwitch1, in Vmkernel I added IP 192.168.6.100, SM: 255.255.255.0 but I can’t set Gateway 192.168.6.1. I would like NIC1 connect to 1 router, then NIC2 connect to another router..Each NIC have different subnet..Is that possible since ESXi only allow 1 gateway. I read may need an VLan switch such as RB250GS? How would I configure it?

-For ESXi I figure out how to assign different subnet to each NIC
-For PC1 after I allow ICMP traffic in Win7 firewall, I am able to ping it from MTK2

Question: I have 3 sites using PPoE. They will be using Mikrotik routers. They would like connect and see each other’s share+network..Which VPN method u guys suggest??

Ex: just PPtP ?
EoIP ?
IPIP w/ IPSec?

Thanks!

Hey, I would suggest not setting up a vlan. Could you output your rules here or email them to me. You should have have a route set up so you can ping 192.168.2.253 from mk2 would be reachable from gateway 192.168.3.1 ether3 on mk1. Am I misunderstanding you?

Thanks Devin..it was Win7 firewall that stop the ICMP..It’s ok now.

Hehe. Cool good deal glad that worked for ya.