Putting Mikrotik Routeboard behind a Juniper Firewall

RouterOS General
1

Dear House,

I have been battling with this the last few days; my org (a new university with almost 2000 users)has been using the Mikrotik Routerboard 1200 as its primary router and we just got this juniper srx240 for firewall and router purposes. we have 10 vlans that are configure across 12 juniper switches. the situation is we have our dhcp clients configured to have the mikrotik as their gateway(x.x.x.2) while the Juniper SRX240 is suppose to in turn be the gateway(x.x.x.1) for the mikrotik on a per vlan basis, the users from their seperate vlans can ping their respective vlan GW ip on the mikrotik and the intended vlan GW IP but the users on all vlans using the mikrtok(x.x.x.2) as their gateway cant access internet which terminates on the Juniper SRX240 nor do intervlan routing which has been defined on the Juniper SRX240.
From the terminal on the mikrotik, i can ping the all the x.x.x.1 for each vlan and can ping resources existing on some vlans via IP. but i cant reach the internet. however on defining a static route using one of the vlans (x.x.x.1) on the mikrotik, all users on all vlans were able to reach the internet but the intervlan routing failed. I want to achieve hotspot solution on the network and still have the Juniper router in between the internet and the mikrotik. Please advice on how to configure the mikrotik to have a gateway per vlan. Thank you

2

It would probably be easier if you upload the Mikrotik config and explain what isn’t working in terms of the interfaces therein.

3

Thanks for your response
Initial i have been using the Mikrotik as the primary router with it acting as the Firewall, DNS server, VLan and Intervlan routing and hostspot.
But now i want it to just control hostpot on the network, hence i made each vlan interface ip address on the mikrotik as the gateway for dchp lease. what am having challenge with is the users with the mikrotik browsing through the vlan ip interface on the firewall. so its more like a route thing on the mikrotik, how to tell the mikrotik to move traffic per vlan to another ip on the same vlan.

4

Try posting the output from /export compact. You can save the output to a file and pull it off the device.