/ip firewall nat add disabled=no src-address=your_public_ip_pool action=accept place-before=0
i tried above putting the pool name and also ip address eg: 1.2.3.4/24 it asks for chain name !
oh, really, I forgot that =)
chain=srcnat
“tracert” can help you
p.s. why do you need the bridge?
p.p.s. if your subnet is x.y.8.240/24, then your users should obtain x.y.8., not x.y.12.
p.p.p.s. if it’s x.y.12.*, then you need routing, not bridging
then, probably, public ip of access router should be x.y.8.240/21, not x.y.8.240/24?..
also, 0.0.0.0 is not good IP of nexthop
arrrr, wait… just enable proxy-arp on eth2 (or, probably, bridge) interface - you need that because you don’t use routing
you need to remove x.y.8.1/21 from Cisco, add some /29 between your routers and add route to x.y.8.1/21 via your pppoe router
cisco should have routes to all networks you will use on mt with gateway=x.y.8.2/29. it can be either static entries or dynamis ones (ospf, etc)