Reaching different subnet within local network

Hello there,

I need a little advice on how to configure my RB3011, so I can reach from my data Network to a different Subnet.

Data is 192.168.1.0/24 where as the destination Subnet is 192.168.10.0/24

I need this to configure my Avaya Telephone System. It is in a different VLAN, but a bridge is configured to the data VLan for configuration purpose

On my old Router it was just checking a box called “allow multiple subnets” that was it.

I´m I right, in thinking i need to configure a masquerading Firewall rule.

Any advice is helpful, as I´m new to RouterOS

Make a route rule under ip route add new dst address is your vlan network let’s say 192.168.10.0/24 and gateway is your router LAN gateway 192.168.1.1 .
Best regard


Gesendet von iPhone mit Tapatalk

I`ll try this out, thank you for your quick response.

it sadly does not work, as the network 192.168.10.0/24 appears to be unreachable :frowning:
Bildschirmfoto 2017-04-10 um 10.25.48.png

You need a corresponding route at the other end to get traffic back to you.
Or you need a srcnat masquerade as you first suggested.

In the other Subnet there is no Router which I could configure to enable a corresponding route.

I have multiple virtual Servers configured with static ip`s,

so should I configure routes to each Server?

Could you give me a little advice on how to setup a masquerading Nat rule for my purpose?

Any held is very much appreciated.

Hello,

Something is unclear here.
Are both subnets on the same or different routers?

If on the same, no static routing should be done. The subnets are locally connected.

I’m reading “VLAN s” and “bridges”. I see a lot of people bridging stuff together thinking “hey, now they talk”. If you’ve done so, split them apart. Subnet must be routed, not bridged. If not, maybe you could clarify by a quick network diagram. Those go a long way in helping :wink:

Regards

Sent from Tapatalk

I second the drawing! Show us what you want to do with a picture and we can help you get there. Also don’t be afraid to use GNS3 to lab up an environment with MikroTik CHRs. It is a great tool to mock up a configuration safely.

I try in words, picture follows tonight.

I have an Avaya Ip Telephone System wich is in a Voice VLan (192.168.10.0) and my client computers are in a Data Vlan (192.168.1.0)
The Vlans are not managed by a router, but on my Switches.

Both Vlan´s have their on ROuter and are connected to the Main Switch bia Access Ports.

To configure the Telephone System, the Guys from Avaya installed a little bintec Router to access the System via the Data VLAN.

So on our old Cisco Router we were able to access 192.168.10.0 from the Data Vlan. The Option allowing this was (allow multiple Subnets)

Bildschirmfoto 2017-04-12 um 20.29.40.png
Everything but the gateway was installed by Avaya. Until now a Cisco Router was the gateway, but it needs to be replaced by the RB3011

Anybody with the same Problem?

I mean the network is set up with to subnets on the switch site, as far as I understand, the mikrotik router prevents me, from reaching the 192.168.10.0/24 network.
The option on my old Cisco router to allow multiple subnets, doesn´t route anything, it just allows connection to other subnets within the physical network apart from the network the gateway is hosting.

Or is the old Cisco Router (2006) able to perform any kind of magic which the mikrotik is not capable of (I certainly would´t think so).

p.s. would it be a solution, to have the two subnets on different interfaces, I could try to rip the old setup apart und build up something like this.

Sounds kind of like you’re describing Proxy-ARP but I’m not sure why it is needed. What is the device that looks like a switch in your drawing? Is it an actual L2 switch? What is the purpose of the RouterBoard to the left and the red box (WatchGuard) at the bottom?

In most cases if you “need” Proxy-ARP to get your network to work you’re probably doing something wrong. There are edge cases where it is useful and justified but largely it should be avoided.

At the end of the day, what is your goal? You want phones on 192.168.10.0/24 and other devices like PCs on 192.168.1.0/24 and phones need to talk to PCs and vice versa? Are the default gateways on the devices set to 192.168.1.20 and 192.168.10.1 accordingly?

Here is a mock up I did for another post. This demo’s how to do simple inter-VLAN routing with a single router. It doesn’t cover utilizing the switch chip features. This picture may help clarify what you want to do and how that may match up to your environment.

http://forum.mikrotik.com/t/accessing-devices-on-separate-subnets/107860/7
MikroTik-Forums_InterVLANRouting_1.png