I have a routing problem I believe between 3 MikroTiks. We have recently deployed an RB2011 that handles two /24 subnets:
10.45.4.0/24
10.44.5.0/24
This RB2011 Tik is the gateway for both of those. OSPF is turned on to share the routes to the other two CCR1036 and vice versa.
My problem is I am unable to gain access to a device that is behind an RB2011 subnet where the NAT OUT rules do not live on the CCR1036.
For example…
If I am behind the (A) CCR1036 and have an IP of 10.6.0.20 (where 10.6.0.0/24 gatewayt is the A CCR1036), I am unable to gain access to 10.44.5.0/24 subnet, BUT pings work fine. I am able to gain access to 10.45.4.0/24 just fine.
If I am behind the (B) CCR1036 and have an IP of 10.64.10.20 (where 10.64.10.0/24 gateway is the B CCR1036), I am able to access 10.44.5.0/24 subnet no issues, BUT the 10.45.4.0/24 is not accessible.
No matter what CCR1036 I am behind I am able to gain access to both RB2011 gateway addresses no problem. It’s just the devices beyond I am having issues with.
NAT OUT for the RB2011 subnets are handled in the CCR1036. I have packet marking turned on and default routes setup depending on the subnet.
I’ve been researching and found that I need to put another router in front on each CCR1036 that will handle the OSPF only. Any ideas or input on this?
