Routing between 2 routers and separate sub-nets

I am a newbie… Have tried to read other posts, but for some reason the setup I want does not work…
I have 2 houses with a cable connection in between (simple RJ-45 due to close distance).

Configuration House 1:
Router has separate Internet connection on Ether 1
Internal LAN connected on Ether 2 with IP-range 192.168.88.0/24. Gateway is 192.168.88.1
Connection to House 2 on Ether 3. Defined IP-address range as 192.168.89.0/24.

Configuration House 2:
Router has separate Internet connection on Ether 1
Internal LAN connected on Ether 2 with IP-range 192.168.89.0/24. Gateway is 192.168.89.1
Cable to House 1 connected on Ether 3. Defined IP-address range as 192.168.88.0/24

Still, I am unable to connect to equipment in between the houses. What am I missing? Do I need to create a firewall rule or something?

/Uffe

The description is unfortunately a bit unclear. To make things unambiguous, please post output of /export hide-sensitive from both devices after replacing every occurrence of each public IP address you don’t want to disclose by a distinctive pattern like my.public.ip.1.

Leaving aside configuration, using Ethernet for outdoor connections is in general not the best idea as the overvoltage protection of Ethernet ports may not be sufficient.

OK, let´s see now:

House 1:

/ip address
add address=192.168.88.1/24 interface=ether2 network=192.168.88.0 (Internal LAN)
add address=192.168.89.0/24 interface=ether3 network=192.168.89.0 (Connection to House 2)

Routes are created automatically…

House 2:

/ip address
add address=192.168.89.1/24 interface=bridge network=192.168.89.0 (Internal LAN)
add address=192.168.88.0/24 interface=ether3 network=192.168.88.0 (Connection to House 1)

Routes are created automatically…

Your addresses on the crosslink are invalid.
When you want to do a routing configuration (it seems you want that) you should put a third subnet
on the crosslink, e.g. 192.168.90.1/24 at house 1 and 192.168.90.2/24 at house 2, and then in house
1 you manually add a route to 192.168.89.0/24 gateway 192.168.90.2 and in house 2 you add a route
to 192.168.88.0/24 gateway 192.168.90.1

BIG THANKS!

Works as a charm, now!

BR

Well, maybe too fast. I can each the routers, but I can´t reach the computers on the LAN behind the routers…

House 1:

/ip address
add address=192.168.88.1/24 interface=bridge1 network=192.168.88.0
add address=192.168.91.1/24 interface=ether3 network=192.168.91.0

/ip route
add distance=1 dst-address=192.168.89.0/24 gateway=192.168.91.2

House 2:

add address=192.168.89.1/24 interface=bridge network=192.168.89.0
add address=192.168.91.2/24 interface=ether3 network=192.168.91.0

/ip route
add distance=1 dst-address=192.168.88.0/24 gateway=192.168.91.1

This may have many reasons, from firewalls on the computers to wrong default routes on them provided by DHCP. I didn’t ask for complete configurations just for fun :slight_smile:

Indeed, when you have default configured firewalls on Windows computers it will normally not work because they do not allow traffic from other networks.
You will have to change them all to really fix that. NAT could be used as an ugly workaround.

Well,

I have a MACBOOK and try to access web-i/f of machines on the other network… Can this be computer FW i.e. OSX-FW?

This is strange, I think:

I can access the LAN in house 1 from a computer in house 2. BUT I am not able to access the LAN in House 2 from a computer in House 1. Something is blocking… I can access the router, though, from House 1 LAN to 192.168.89.1 and from House 2 LAN to 192.168.88.1…

Seems some rule or something blocks one direction…

You will have to find that yourself because here on the forum there is not enough info.
You would need to post your configs. However, the problem is likely not in the routers (when they are are on default settings plus this address and route)
but in the systems you have connected to them. These days, not allowing incoming traffic from another network is pretty standard.