ping host on a different vlan

[dreams3577]

Hi All

I have a Microtik router with two vlans and two layer 2 switches (One switch for each VLAN)

VLAN100 is assigned to port ether24
VLAN200 is assigned to port ether10
WAN is port ether1

Microtik CRS326-24G-2S+RM
VLAN100 - 192.168.1.0/24
VLAN200 - 192.168.200.0/24

I can RDP to a host on different VLAN, However I cannot ping hosts on different VLAN, please can you tell me how to set this up.

many thanks
Steve

[sindy]

Although you may theoretically have selective firewall rules in place on the Mikrotik which permit RDP but not ICMP, it is more likely that it is the default setting of Windows firewall which ignores pings from anywhere but own subnet.

To check that, open a command line window at the Mikrotik (in Winbox and WebFix, use the [Terminal] button), make it as wide as your screen permits, and run /tool sniffer quick ip-protocol=icmp in it. Then start pinging. You should see the ping request at the ingress physical Ethernet interface, the first VLAN interface, the second VLAN interface, and the egress physical Ethernet interface. If this is the case, the firewall on the Mikrotik doesn’t drop it.

[dreams3577]

Perfect.. thank you

Although you may theoretically have selective firewall rules in place on the Mikrotik which permit RDP but not ICMP, it is more likely that it is the default setting of Windows firewall which ignores pings from anywhere but own subnet.

To check that, open a command line window at the Mikrotik (in Winbox and WebFix, use the [Terminal] button), make it as wide as your screen permits, and run /tool sniffer quick ip-protocol=icmp in it. Then start pinging. You should see the ping request at the ingress physical Ethernet interface, the first VLAN interface, the second VLAN interface, and the egress physical Ethernet interface. If this is the case, the firewall on the Mikrotik doesn’t drop it.