Here is my setup (output trimmed for readability):
[admin@mt1] > /interface ethernet export
# may/16/2013 07:58:01 by RouterOS 5.24
# software id = YX0P-T2FU
#
/interface ethernet
set 0 l2mtu=1598 mac-address=D4:CA:6D:aa:aa:aa master-port=none mtu=1500 name=ether1-gateway
set 1 l2mtu=1598 mac-address=D4:CA:6D:bb:bb:bb master-port=none mtu=1500 name=ether2-master-local
set 2 l2mtu=1598 mac-address=D4:CA:6D:cc:cc:cc master-port=ether2-master-local mtu=1500 name=ether3-slave-local
set 3 l2mtu=1598 mac-address=D4:CA:6D:dd:dd:dd master-port=ether2-master-local mtu=1500 name=ether4-slave-local
set 4 l2mtu=1598 mac-address=D4:CA:6D:ee:ee:ee master-port=ether2-master-local mtu=1500 name=ether5-slave-local
/interface ethernet switch
set 0 mirror-source=none mirror-target=none name=switch1
/interface ethernet switch port
set 0 vlan-header=leave-as-is vlan-mode=disabled
set 1 vlan-header=leave-as-is vlan-mode=disabled
set 2 vlan-header=leave-as-is vlan-mode=disabled
set 3 vlan-header=leave-as-is vlan-mode=disabled
set 4 vlan-header=leave-as-is vlan-mode=disabled
set 5 vlan-header=leave-as-is vlan-mode=disabled
/interface bridge port
add bridge=br-z0 interface=ether2-master-local
add bridge=br-z0 interface=wlan1
add bridge=br-z1 interface=vlan-z1
add bridge=br-z1 interface=wlan2
add bridge=br-z2 interface=vlan-z2
add bridge=br-z2 interface=wlan3
/ip firewall nat
add action=masquerade chain=srcnat disabled=no out-interface=ether1-gateway to-addresses=0.0.0.0
/ip address
add address=10.0.0.1/24 disabled=no interface=br-z0 network=10.0.0.0
add address=10.0.1.1/24 disabled=no interface=br-z1 network=10.0.1.0
add address=10.0.2.1/24 disabled=no interface=br-z2 network=10.0.2.0
[admin@mt1] > /ip route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADS 0.0.0.0/0 84.x.x.1 1
1 ADC 10.0.0.0/24 10.0.0.1 br-z0 0
2 ADC 10.0.1.0/24 10.0.1.1 br-z1 0
3 ADC 10.0.2.0/24 10.0.2.1 br-z2 0
4 ADC 84.x.x.0/24 84.x.x.2 ether1-gateway 0
I have 3 wlans, and they are all using wds with another mikrotik router.
I am also using a firewall, but I have put global access rules on input, forward and output on top to test that that’s not the problem.
From z2 (eg 10.0.1.10) I can ping 10.0.0.1 but not any other devices on 10.0.0.x.
The router can ping all addresses on all networks.
All ips can get on the Internet and reach the routers.
But I cant from 10.0.1.10 ping eg 10.0.0.10 for some reason.
I have tried setting some static routes to help the packages, but that doesn’t work.
If I use torch, it looks like the packages arrives at 10.0.0.10 and it tries to send it back, but then disappears.
Anyone sees any obvious errors here what I am doing wrong, or do I haveto setup something other manual rules?