i have tried this, but problem is, the clients on ETH3 randomly pull-request from DHCP-A the connecting to WAN-A, and its supposedly uses the DHCP-B & WAN-B instead.Put both on the same bridge (by the way only need one masquerade rule if you only have one WAN interface).
By both being on the same bridge they will be routable by the router.
To explicitly connect them, ensure firewall rules allow it especially if you have drop else rule at the end of the forward rules.
lan1 to lan2 and lan2 to lan1 etc.
So meaning, i just do the firewall rules instead of bridge+firewall then?"bridge" is L2 feature. You can imagine it as switch with some enhanced abilities to filter/translate data. That means everything will pass through including DHCP requests and responses. You don't want that as you described want two separate LAN, each with own DHCP server.
As long as there are routes for each LAN (which will be there because you have the IP on each interface), router will automatically forward data from one to other. Although, it is better allow only few forward rules (LAN1->WAN1, LAN2->WAN2, LAN1->LAN2, LAN2->LAN1 and finally established+related) and drop everything else.
/ip firewall nat add chain=srcnat action=src-nat to-addresses=10.30.11.0/24 protocol=tcp src-address=10.30.13.0/24 dst-address=!10.30.11.0/24 out-interface=ether3 log=no log-prefix=""Exactly. Router by default route all networks together (routing = L3 forwarding).
If you bridge it together, it is same as if you plug both ports straight into same switch and then put all clients on the switch as well - it will be mess, right?
Its okay. Anyway, how do I apply this? I have no idea doing these in IP>firewallIf you have explicit drop all else forward rules, they will not talk and you would have to make explicit rules to allow this routing (my preference).
allow lan 1 to lan 2
allow lan2 to lan 1
theres no filter rules/NAT for now.. everything is empty and reset.Can you post your firewall rules as is............
thnx for reminding. updated the post with attachment included.It is better to post the picture in the site.
Then the picture would stay in the forum.
For some reason adblock in google removes the site you are using.
also possible, but i dont know what commands should i apply to allow them communicating to each other. can u post some of example commands/scripts here?With your setup, I would have setup the link between the router as an own net (lan C)
So Lan A have a route to Lan C on the Left router and Lan C has a route to Lan B on the right side.
Wanting to do that, but theres limitation due the bandwidth between Router A to B is using PtP wireless connection (max upto 50Mbps). In other word, both routers are installed at different sites.. Anyway, WAN A and B has bandwidth upto 1GBps (with different accounts as well). Since the wireless has limitation to 50Mbps, if I configure 2 WANs at 1 router (ie at Router A), the clients at the other site (which located at Router B) will only get 50Mbps out of 1Gbps.It may also be possible to set this up using all on the same router.
Link to two different ISP
Two VLAN on for A side and one for B side.