I need communication between 192.168.20.0 subnet and 192.168.0.0 subnet both ways. With the configuration i have now 192.168.20.0 can talk to 192.168.0.0 but not the other way around. Please let me know what need to be done. thanks.
I have an RB750Gr3.
I have default config loaded on this router and i just change 192.168.88.0 to 192.168.20.0 and as below.
ether1 internet coming in via PPPoE
ether2 master for 3,4 192.168.20.0/24 DHCP enabled on here.
ether5 192.168.0.223 (no dhcp, this port is connected to sonicwall router which has 192.168.0.1/24
Code: Select all
# may/01/2018 14:43:23 by RouterOS 6.36.1
# software id = 6BQ5-QAQG
#
/interface ethernet
set [ find default-name=ether2 ] name=ether2-master
set [ find default-name=ether3 ] master-port=ether2-master
set [ find default-name=ether4 ] master-port=ether2-master
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether1 name=InternetPPPoE \
password=********** user=*********
/ip neighbor discovery
set ether1 discover=no
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=default-dhcp ranges=192.168.20.100-192.168.20.200
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=ether2-master name=\
defconf
/ip address
add address=192.168.20.1/24 comment=defconf interface=ether2-master network=\
192.168.20.0
add address=192.168.0.223/24 comment="ament" interface=ether5 network=\
192.168.0.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=\
ether1
/ip dhcp-server network
add address=192.168.20.0/24 comment=defconf gateway=192.168.20.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.20.1 name=router
/ip firewall filter
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept established,related" \
connection-state=established,related
add action=drop chain=input comment="defconf: drop all from WAN" \
in-interface=InternetPPPoE
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related" \
connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" \
connection-state=invalid
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface=InternetPPPoE
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
out-interface=InternetPPPoE
add action=masquerade chain=srcnat disabled=yes out-interface=ether2-master
add action=masquerade chain=srcnat disabled=yes out-interface=ether5
add action=src-nat chain=srcnat disabled=yes dst-address=!192.168.0.0/24 \
out-interface=ether5 protocol=tcp src-address=192.168.20.0/24 \
to-addresses=192.168.0.0/24
add action=masquerade chain=srcnat
/system clock
set time-zone-name=America/Toronto
/system routerboard settings
set memory-frequency=1200DDR protected-routerboot=disabled
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2-master
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2-master