Two networks on different interfaces won't communicate.

I have seen others with this problem but I can’t find any help for my situation by reading.

I have 3 interfaces – 1 is cable modem (gateway) – 2 is PC/Servers with static IP (static DHCP) – 3 is for an access point, DHCP, queue to limit traffic.

ip add p
 #   ADDRESS            NETWORK         INTERFACE                                
 0 D 173.XX.XX.XX/22    173.XX.XX.XX    ether1 (gateway)                         
 1   192.168.1.1/24     192.168.1.0     ether3 (lan1)                            
 2   192.168.0.1/24     192.168.0.0     ether2 (lan0)

Everything is working great except the networks can’t communicate/route to each other. I would like to access my access point(192.168.1.2) web config from my PC (192.168.0.5).

 ip dhcp network p
 # ADDRESS            GATEWAY         DNS-SERVER      WINS-SERVER     DOMAIN     
   192.168.0.0/24     192.168.0.1    
 1 192.168.1.0/24     192.168.1.1



ip firewall nat p
Flags: X - disabled, I - invalid, D - dynamic 
 0    chain=srcnat action=masquerade src-address=192.168.1.0/24 
      out-interface=ether1 (gateway) log=no log-prefix="" 
 1    chain=srcnat action=masquerade src-address=192.168.0.0/24 
      out-interface=ether1 (gateway) log=no log-prefix="" 

[code]ip route p
Flags: X - disabled, A - active, D - dynamic, 
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, 
B - blackhole, U - unreachable, P - prohibit 
 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0 ADS  0.0.0.0/0                          173.XX.XXX.X              1
 1 ADC  173.XX.XX.0/22    173.XX.XXX.XXX  ether1 (gateway)          0
 2 ADC  192.168.0.0/24     192.168.0.1     ether2 (lan0)             0
 3 ADC  192.168.1.0/24     192.168.1.1     ether3 (lan1)             0

If I can provide any more information / configuration please let me know. Thank you :slight_smile:

I added these two rules at the top:

/ip firewall nat

0 chain=srcnat action=masquerade src-address=192.168.0.0/24
dst-address=192.168.1.0/24 log=no log-prefix=“”

1 chain=srcnat action=masquerade src-address=192.168.1.0/24
dst-address=192.168.0.0/24 log=no log-prefix=“”

Edit also added:

/ip firewall filter

7 chain=input action=accept src-address=192.168.1.0/24
dst-address=192.168.0.0/24

8 chain=input action=accept src-address=192.168.0.0/24
dst-address=192.168.1.0/24


Works now :slight_smile: Cheers!