Hello,

I have two houses where I have FTTH (the same provider). Behind the AP I have Mikrotik RouterBoard RB750Gr3 hEX. On both houses I have also public static IP and all incomming connections is forwarded to Mikrotik.

How can I securely join those two LANs?

house1: 192.168.130.0
house2: 192.168.131.0

and to have two DHCP servers, two DNS, but I can see devices between networks?
Of course, connection to internet (outside LAN) will be through particular AP.

for example I need to access NAS in House1 locally from House2
And connection between those two houses should be permanent.

Or it is better to join them into one network 192.168.130.0 and to have two DHCP servers, where first will have rande 0-128 and the second 129-255? and they will share local DNS addresses?
I want it functional also in case, that one of mikrotik is off, then it doesn´t affect second mikrotik with it's LAN

for better explanation here is the image (IP address are fictional ) I am beginner and would like to know, where to start
thank you

Setup is unclear
what do you mean "all incomming connections is forwarded to Mikrotik" ???
Do you have public IPs on the mikrotiks themselves, if yes setup is easy


1) change local DHCPs to the same network, make sure that pools on one house uses different range than other house.
for example:
house one: Routers IP 192.168.130.1/24
DHCP pool 192.168.130.2- 192.168.130.100
House two Routers IP 192.168.130.254/24
DHCP pool 192.168.130.101- 192.168.130.200

2) create EOIP tunnel between both mikrotiks and add it to local bridge on both sides:
https://wiki.mikrotik.com/wiki/Manual:I ... p_examples
If you are paranoid, you can check "use ipsec" and specify secret on both sides.

3) there will be some DHCP war going on afterwards
there you can ether
a) choose one and add delay to other one so it acts like backup
b) have two complete sets of static leases, and check "block access" to set that shouldn't be using this server
c) have some rules in bridge filter that forbids DHCP traffic over EOIP

Concur, thought about doing this with my brother who lives in Europe. (EOIP tunnel)
Use dedicated ports if necessary at either end for the network (for example if its for access to an NAS for example) or to physically control what is accessible.
The idea being that he has a EOIP port live at his house. He can plug his computer into that port and then be on a LAN that is running from my house.

Setup is unclear
what do you mean "all incomming connections is forwarded to Mikrotik" ???
Do you have public IPs on the mikrotiks themselves, if yes setup is easy

Thank you! I will try this solution, it seems to be clear. My mikrotiks has no public IPs but from AP's is forwarded alll communications to them, so it is quite the same.