Hey,
I’ve recently started working with a MikroTik device that was previously configured by someone else in the company. While internet access is functioning correctly for all connected devices, I’ve encountered an issue where devices on the local network are unable to communicate with each other—for example, a PC is unable to connect to a network printer.
I’ve attempted to troubleshoot this issue but haven’t been successful so far. I would appreciate any guidance or suggestions on how to resolve this.
I’ve used Quick Set to get into Router Mode and was able to set Address list + DHCP
1- Quickset is ONLY to be used on a pristine new device (or after reset) and normally never again after that. It can cause troubles when used on an already configured device.
2- most likely some firewall rules are blocking you.
Export your config and then post here for review.
Also add a small diagram indicating how the device is connected in your network as well as requirements whoch should be able to do what (or what not).
Terminal
/export file=anynameyouwish
move file to PC
Edit file and remove serial, public IP, any sensitive info
Post contents back here between [__code] [/__code] quotes for easier readability.
I have received a request regarding an issue where the internet connection was not functioning at the location where the MikroTik device is installed. As the ISP settings had not been configured upon connection, I utilized the Quick Set tool to input the necessary parameters. All other settings had already been configured prior to this intervention.
Remove connection from internet immediately router is setup UNSAFE. add action=drop chain=input disabled=yes in-interface-list=!LAN
add action=accept chain=input dst-port=8291 protocol=tcp
Then netinstall router to ensure a clean restart.
There was nothing inherently wrong with the forward rules as they followed the default rules quite closely.
The only problem was you added an unnecesssary rule allow Subnet users access to each other.
They already do at layer2 being in the same subnet. Attempting to put a layer3 firewall rule on them was incorrect.
Just move invalid rule up to where i have put it here:
/ip firewall filter
add action=accept chain=forward comment=“defconf: accept in ipsec policy”
ipsec-policy=in,ipsec
add action=accept chain=forward comment=“defconf: accept out ipsec policy”
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment=“defconf: fasttrack”
connection-state=established,related hw-offload=yes
add action=accept chain=forward comment=
“defconf: accept established,related, untracked” connection-state=
established,related,untrackedadd action=drop chain=forward comment=“defconf: drop invalid”
connection-state=invalid
add action=accept chain=forward comment=“ruch w sieci LAN” dst-address=
192.168.88.0/24 src-address=192.168.88.0/24
add action=drop chain=forward comment=
“defconf: drop all from WAN not DSTNATed” connection-nat-state=!dstnat
connection-state=new in-interface-list=WAN[/size]
The real problem is the input chain or lack thereof fixed HERE: /ip firewall add action=accept chain=input connection-state=established,related,untracked
add action=drop chain=input connection-state=invalid
add action=accept chain=input protocol=icmp
add action=accept chain=input in-interface-list=LAN
add action=drop chain=input comment=“Drop all else” { ensure you put this rule in this location, but implemented last of all rules }