Hi experts..,

I have a Mikrotik project for my customer... CCR1036-8G-2S+, currenlty using ROS 6.15.
I use this device as DHCP server and router. I configure vlan, vlan ip address, route/default gateway, dhcp server. After finish the configuration, the device cannot forward my traffic from LAN to WAN/Internet.
- from mikrotik I can ping internet
- from mikrotik I can ping endpoint in LAN site
- my traffic from LAN can NOT goes to internet..

anything that I missed in the configuration ??

The connections below:

LAN1 --- <swtich access> --- <swtich core> --- <mikrotik> ------ [internet]
| |
LAN2 --- <swtich access> --- -- |
|
LAN3 --- <switch access> --------

- there are VLAN in each switch access (management vlan and traffic vlan)
- swtich core iface and mikrotik iface already tagged
- IP address for each vlan is in mikrotik (as gateway)


Thank you

Daniel Hadi

Are you using RFC1918 addresses on the LAN? If so, did you configure NAT?

Sounds like maybe you forgot srcnat masquerading for your wan connection. Put your config up here and ppl will be able to assist

Are you using RFC1918 addresses on the LAN? If so, did you configure NAT?

I'm sorry.... additional information...., the internet connection (NAT) handle by other devices in HQ. SO this CCR only do routing.

Sounds like maybe you forgot srcnat masquerading for your wan connection. Put your config up here and ppl will be able to assist

additional information.., the internet connection handle by other devices in HQ. The CCR just do routing.

ccr config attached.

Please

Do you have any filters set on the forward chain in /IP Firewall?

Do you have any filters set on the forward chain in /IP Firewall?

NO.. I don't have any IP Firewall activated..

Do you have any filters set on the forward chain in /IP Firewall?

NO.. I don't have any IP Firewall activated..

I have tried to do that, but no result

I still cannot solve my CCR problem..., anyone can give me solution?
I attached the supout file and the configuration...

do a export file=backup and paste it...