Routing between lans on PowerBox

I have a 192.168.1.0/24 network and i'm trying to seperate my wireless links some on their own 10.10.10.0/24 network but I can't ping across it. Played around with NAT, etc. Can't ping from the 192.168.1.0 network over :confused: Trying to learn but stuck.

/interface ethernet
set [ find default-name=ether1 ] comment="To LAN"
set [ find default-name=ether2 ] comment="900 AP"
set [ find default-name=ether3 ] comment="2.4 Yard AP" master-port=ether2
set [ find default-name=ether4 ] comment="South AP" master-port=ether2
set [ find default-name=ether5 ] comment="5.8 AP" master-port=ether2
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name="Radio Pool" ranges=10.10.10.150-10.10.10.200
add name=dhcp ranges=10.10.10.150-10.10.10.200
/ip dhcp-server
add address-pool=dhcp disabled=no interface=ether2 name=dhcp1
/interface l2tp-server server
set caller-id-type=ip-address
/ip address
add address=10.10.10.1/24 interface=ether2 network=10.10.10.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-relay
add dhcp-server=192.168.1.0 disabled=no interface=ether1 name=relay1
/ip dhcp-server network
add address=10.10.10.0/24 gateway=10.10.10.1
add address=10.10.10.100/32 dns-server=192.168.1.14 gateway=192.168.1.116 netmask=24
ntp-server=192.168.1.14
/ip firewall address-list
add address=10.10.10.0/24 list="Radio Network"
add address=192.168.1.0/24 list=LAN
/ip route
add distance=1 dst-address=10.10.0.0/24 gateway=ether2
/routing rip interface
add send=v1-2
/routing rip neighbor
add address=192.168.1.14
/routing rip network
add
/system clock
set time-zone-name=America/Chicago
/system identity
set name="PowerBox - Mast Router"
/system ntp client
set enabled=yes primary-ntp=192.168.1.14
[admin@PowerBox - Mast Router] >

You need to add an ip address from 192.168.1.0/24 on ether1.

As soon as you do that, ROS will have a directly connected route towards 192.168.1.0/24 and it will start to route.

I added that, and still can’t ping over from my pc on the 192.168 side. Is it NAT or something like that?

Ive added routes on my tiks on the 192.168 side to route all 10.10 traffic towards the powerbox also

No. You have no NAT configured.
Of course your PC needs to have a route to that 10 network via this router.

I’ve tried natting and still can’t get it to ping. just adding a srcnat and dstnat. am i missing anything?

After Changes. undid the 192.168.1.0 address because it over-rode my dhcp client and lost my address of 192.168.1.17 to it. Applied NAT
[admin@PowerBox - Mast Router] > export

aug/15/2017 12:57:03 by RouterOS 6.39

software id = 0XYE-X9HZ

/interface ethernet
set [ find default-name=ether1 ] comment="To LAN"
set [ find default-name=ether2 ] comment="900 AP"
set [ find default-name=ether3 ] comment="2.4 Yard AP" master-port=ether2
set [ find default-name=ether4 ] comment="South AP" master-port=ether2
set [ find default-name=ether5 ] comment="5.8 AP" master-port=ether2
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name="Radio Pool" ranges=10.10.10.150-10.10.10.200
add name=dhcp ranges=10.10.10.150-10.10.10.200
/ip dhcp-server
add address-pool=dhcp disabled=no interface=ether2 name=dhcp1
/interface l2tp-server server
set caller-id-type=ip-address
/ip address
add address=10.10.10.1/24 interface=ether2 network=10.10.10.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-relay
add dhcp-server=192.168.1.0 disabled=no interface=ether1 name=relay1
/ip dhcp-server network
add address=10.10.10.0/24 gateway=10.10.10.1
add address=10.10.10.100/32 dns-server=192.168.1.14 gateway=192.168.1.116
netmask=24 ntp-server=192.168.1.14
/ip firewall address-list
add address=10.10.10.0/24 list="Radio Network"
add address=192.168.1.0/24 list=LAN
/ip firewall nat
add action=accept chain=srcnat
add action=accept chain=dstnat
/ip route
add distance=1 dst-address=10.10.0.0/24 gateway=ether2
/ip upnp
set enabled=yes
/routing rip interface
add send=v1-2
/routing rip neighbor
add address=192.168.1.14
/routing rip network
add
/system clock
set time-zone-name=America/Chicago
/system identity
set name="PowerBox - Mast Router"
/system ntp client
set enabled=yes primary-ntp=192.168.1.14

After Changes. undid the 192.168.1.0 address because it over-rode my dhcp client and lost my address of 192.168.1.17 to it. Applied NAT

Missed that. If it’s getting a 192.168.1.x address then nothing else should be required, neither dst or src-nat; for routing to work, both parties (routers) have to know what the proper routes are.

How comes the router is getting its LAN IP address via DHCP? Is it a static lease?

Please post

/ip address print
/ip route print

And a network diagram with the rest of routers involved along with their interconnections and IPs. Hand-drawn is perfectly fine.

[admin@PowerBox - Mast Router] > ip address print
Flags: X - disabled, I - invalid, D - dynamic

ADDRESS NETWORK INTERFACE

0 10.10.10.1/24 10.10.10.0 ether2
1 D 192.168.1.17/24 192.168.1.0 ether1

[admin@PowerBox - Mast Router] > ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit

DST-ADDRESS PREF-SRC GATEWAY DISTANCE

0 ADS 0.0.0.0/0 192.168.1.116 1
1 A S 10.10.0.0/24 ether2 1
2 ADC 10.10.10.0/24 10.10.10.1 ether2 0
3 ADC 192.168.1.0/24 192.168.1.17 ether1 0

I’ll get you a diagram after work. :slight_smile:

Basically Tethered phone —> PC dedicated for internet @ 192.168.1.116 <— Internet Backbone RB750G @ 192.168.1.14 —> <----Lan Backbone (also 750G) @ 192.168.1.28 -----> <— Switch @ 192.168.1.13 —> <------ Powerbox @ 192.168.1.17 -----> WLAN Radio Network @ 10.10.10.0/24

My 192.168.1.14 internet bacbone has DHCP with statically set leases (to answer your ?) for my whole 192.168.1.0 network with firewall only there. Just trying to see if I can partition the Radio’s seperately on its own 10.10.10.0/24 and have them talk to eachother.

Are PC dedicated for internet, and internet/ lan backbone 750 routers connected to a switch? or are they interconnected by point to point connections (directly between them)?

Do all network equipment (but radios on 10.10.10.0/24) use 192.168.1.116 as default gateway? It should, then you need to add a static route on 192.168.1.116: destination 10.10.10.0/24 gateway 192.168.1.17, so that:

192.168.1.x → 10.10.10.x:
1.- When any device wants to reach a 10.10.10.x IP, they’ll send the packets to their default gw, 192.168.1.116.
2.- 192.168.1.116 will route them through 192.168.1.17 thanks to the previous static route

10.10.10.x → 192.168.1.x or non local IP:
1.- 10.10.10.x devices should have 10.10.10.1 as default gw, so that they send all traffic not addressed to 10.10.10.x towards it
2.- 10.10.10.1 will send traffic through ether2 towards 192.168.1.x, or towards 192.168.1.116 if it’s not a 192.168.1.x IP (internet or whatever)

Do all network equipment (but radios on 10.10.10.0/24) use 192.168.1.116 as default gateway?
Yes. This is just a PC on port 1 of the RB750G with a cellphone tethered to it via USB. All traffic is routed to the .116 as the gateway. Thats the only way I can get internet out in the sticks here in MN.

Question.
Instead of the whole dedicated PC thing, could I use a hAP ac lite tower since it says it has "USB port for 3G/4G modem "?? I’m just wondering before I buy one if I plugged my cell phone with tethering into the usb port that it would then work. I already own 7 tiks so i dont want another unless I know that USB port can replace my dedicated pc. haha

Thanks,
Tom

Question.
Instead of the whole dedicated PC thing, could I use a hAP ac lite tower since it says it has "USB port for 3G/4G modem "?? I’m just wondering before I buy one if I plugged my cell phone with tethering into the usb port that it would then work. I already own 7 tiks so i dont want another unless I know that USB port can replace my dedicated pc. haha

Provided the cell phone exposes a suitable modem-like interface, yes, it will work.

Using a USB modem would be better and easier, you can check for supported USB modems.

AFAIK new RB750Gr3 (Hex) already has an USB port (if wireless is not needed this would be a better option). Any RB having USB will be able to use the modem as long as it’s supported.

Its a samsung phone on verizons netowork. Thanks for your help!