Where is a catch?
I have four mikrotik in network with two DHCP in two OFFICE and point to point connection.
If I try ping from OFFICE_2 to OFFICE_1
from 10.130.1.1 > 10.110.1.1
> ping 10.110.1.1
SEQ HOST SIZE TTL TIME STATUS
0 10.110.1.1 56 64 3ms
1 10.110.1.1 56 64 3ms
2 10.110.1.1 56 64 9ms
3 10.110.1.1 56 64 4ms
4 10.110.1.1 56 64 3ms
sent=5 received=5 packet-loss=0% min-rtt=3ms avg-rtt=4ms max-rtt=9ms
everything works as expected.
But when I try opposite direction from OFFICE_1 to OFFICE_2 I got timeout.
from 10.110.1.1 > 10.130.1.1
ping 10.130.1.1
SEQ HOST SIZE TTL TIME STATUS
0 10.130.1.1 timeout
1 10.130.1.1 timeout
2 10.130.1.1 timeout
3 10.130.1.1 timeout
4 10.130.1.1 timeout
sent=5 received=0 packet-loss=100%
ISP NAT network 192.168.18.0/24
OFFICE_1
> ip address print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK INTERFACE
0 10.110.1.1/26 10.110.1.0 OFFICE_1_BRIDGE
1 D 192.168.18.2/24 192.168.18.0 ether1_WAN
/ip dhcp-client
add disabled=no interface=ether1_WAN
/interface bridge
add name=OFFICE_1_BRIDGE
/interface bridge port
add bridge=OFFICE_1_BRIDGE interface=ether2
add bridge=OFFICE_1_BRIDGE interface=ether3
add bridge=OFFICE_1_BRIDGE interface=ether4
add bridge=OFFICE_1_BRIDGE interface=ether5
/ip dhcp-server
add add-arp=yes address-pool=MyPool authoritative=after-2sec-delay disabled=no interface=OFFICE_1_BRIDGE lease-time=1d10m name=MojDHCP
/ip dhcp-server network
add address=10.110.1.0/26 dns-server=8.8.8.8,8.8.4.4 gateway=10.110.1.1 netmask=26 ntp-server=10.110.1.1
/ip pool
add name=MyPool ranges=10.110.1.21-10.110.1.62
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
> ip route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADS 0.0.0.0/0 192.168.18.1 1
1 ADC 10.110.1.0/26 10.110.1.1 OFFICE_1_BRIDGE 0
2 ADC 192.168.18.0/24 192.168.18.2 ether1_WAN 0
LINK_1
/ip address print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK INTERFACE
0 10.120.1.1/30 10.120.1.0 wlan1
1 D 10.110.1.57/26 10.110.1.0 LINK_1_BRIDGE
/ip dhcp-client
add disabled=no interface=LINK_1_BRIDGE
/interface bridge
add name=LINK_1_BRIDGE
/interface bridge port
add bridge=LINK_1_BRIDGE interface=eoip-tunnel1
add bridge=LINK_1_BRIDGE interface=ether1
> interface wireless print
Flags: X - disabled, R - running
0 R name="wlan1" mtu=1500 l2mtu=1600 mac-address=xxxxxxxxxxx arp=enabled interface-type=IPQ4019 mode=bridge
ssid="spoj" frequency=auto band=5ghz-a/n/ac channel-width=20mhz secondary-channel="" scan-list=default
wireless-protocol=nv2-nstreme-802.11 vlan-mode=no-tag vlan-id=1 wds-mode=disabled wds-default-bridge=none
wds-ignore-ssid=no bridge-mode=enabled default-authentication=yes default-forwarding=yes default-ap-tx-limit=0
default-client-tx-limit=0 hide-ssid=no security-profile=WPA2 compression=no
/interface eoip
add clamp-tcp-mss=no mac-address=xxxxxxxxxx mtu=1500 name=eoip-tunnel1 remote-address=10.120.1.2 tunnel-id=0
/ip firewall mangle
add action=set-priority chain=input new-priority=from-dscp passthrough=yes
/ip route print
Flags: X - disabled, A - active, D - dynamic, C - LINK_1_BRIDGE, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADS 0.0.0.0/0 10.110.1.1 1
1 ADC 10.120.1.0/30 10.120.1.1 wlan1 0
2 ADC 10.110.1.0/26 10.110.1.57 LINK_1_BRIDGE 0
LINK 2
>ip address print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK INTERFACE
0 10.120.1.2/30 10.120.1.0 wlan1
1 D 10.110.1.51/26 10.110.1.0 LINK_2_BRIDGE
/ip dhcp-client
add disabled=no interface=LINK_2_BRIDGE
/interface bridge
add name=LINK_2_BRIDGE
/interface bridge port
add bridge=LINK_2_BRIDGE interface=ether1
add bridge=LINK_2_BRIDGE interface=eoip-tunnel1
> interface wireless print
Flags: X - disabled, R - running
0 R name="wlan1" mtu=1500 l2mtu=1600 mac-address=xxxxxxxxx arp=enabled interface-type=IPQ4019 mode=station
ssid="CONNECT" frequency=auto band=5ghz-a/n/ac channel-width=20mhz secondary-channel="" scan-list=default
wireless-protocol=nv2-nstreme-802.11 vlan-mode=no-tag vlan-id=1 wds-mode=disabled wds-default-bridge=none
wds-ignore-ssid=no bridge-mode=enabled default-authentication=yes default-forwarding=yes
default-ap-tx-limit=0 default-client-tx-limit=0 hide-ssid=no security-profile=WPA2 compression=no
/interface eoip
add clamp-tcp-mss=no mac-address=xxxxxxxx mtu=1500 name=eoip-tunnel1 remote-address=10.120.1.1 tunnel-id=0
/interface wireless connect-list
add interface=wlan1 security-profile=WPA2
/ip firewall mangle
add action=set-priority chain=input new-priority=from-dscp passthrough=yes
/ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADS 0.0.0.0/0 10.110.1.1 1
1 ADC 10.120.1.0/30 10.120.1.2 wlan1 0
2 ADC 10.110.1.0/26 10.110.1.51 LINK_2_BRIDGE 0
OFFICE 2
>ip address print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK INTERFACE
0 10.130.1.1/26 10.130.1.0 OFFICE_2_Bridge
1 D 10.110.1.55/26 10.110.1.0 ether1_WAN
/ip dhcp-client
add disabled=no interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1_WAN
/interface bridge
add name=OFFICE_2_Bridge
/interface bridge port
add bridge=OFFICE_2_Bridge interface=ether2
add bridge=OFFICE_2_Bridge interface=ether3
add bridge=OFFICE_2_Bridge interface=ether4
add bridge=OFFICE_2_Bridge interface=ether5
/ip dhcp-server
add add-arp=yes address-pool=MyPool authoritative=after-2sec-delay disabled=no interface=OFFICE_2_Bridge
/ip dhcp-server network
add address=10.130.1.0/26 dns-server=10.130.1.1,1.1.1.1,8.8.8.8,8.8.4.4 gateway=10.130.1.1 netmask=26 ntp-server=10.130.1.1
/ip pool
add name=MyPool ranges=10.130.1.21-10.130.1.60
/ip route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
5 ADC 10.130.1.0/26 10.130.1.1 OFFICE_2_Bridge 0
6 ADC 10.110.1.0/26 10.110.1.55 ether1 0
Can somebody give me advice/hint to resolve situation?