RB_SMALL_MTK_CONFIG.txt (attached) is the configuration of the mikrotik that faces the internet.
RB_BIG_MTK_CONFIG_1.txt (attached) is the configuration of the mikrotik that faces the internal network.

Thank for your feedback in advance.

Dear All:

The original scenario is two nat and all are mikrotik. Then, I have created a lab scenario with an internet modem and one mikrotik and I mentioned that this is a lab and created in order not to interrupt the service.

I will send you the configuration of the original scenario soon.

BR

Actually, the modem is not in bridge mode. it is pppoe client.
Anyway, I will do what you want in order to clarify everything.

Thanks both of you. Actually, what you are proposing is something I have tried a lot but never succeeded. I guess there is something which I don't understand in your scenario. For this, and in order not to intrupt the service here, I have created a similar scenario but with one mikrotik and an inter...

Thanks but I want both subnets (4.x and 1.x) see each other and at the same time the users of 1.x use the gateway 4.1.
Please, advise.
BR

Please, find attached the diagram. Please, let me know if you need any thing more.

Thanks a lot in advance.

Dear Colleagues: I have two mikrotik router end to end (NAT-NAT) and in between there is a DMZ. Actually, I don't want NAT on the inner one. I want to use the gateway concept in routes so DMZ and the inner network can communicate without the need for port forwarding (dst-nat). Please, advise how to ...

Try to hide the option "fragment=no" in extra tab of dst-address rule. You can try disabling the mangle rule of ether3 too, for test: add action=mark-routing chain=prerouting in-interface=ether3 new-routing-mark=G_NET I tried hiding fragment=no but it doesn't help. I will now try to do it...

Are you connected to two active ISP connections at the same time? I see that ether1 is dhcp client, and pppoe-out1 is on ether2. My guess (and I could be wrong) is that the dstnat works on your public IP address on ether1, but fail on the pppoe connection..... If this is your scenario, then the pro...

Paste your router config here, please. /export hide-sensitive /interface lte set [ find ] mac-address=00:A0:C6:00:00:00 name=lte1 /interface pppoe-client add add-default-route=yes disabled=no interface=ether2 max-mru=1480 max-mtu=1480 mrru=1600 name=pppoe-out1 service-name=TT use-peer-dns=yes user=...

Dear Forum experts: I was using a modem (ADSL router) including the pppoe dialup connection. The mikrotik is connected to the ADSL router with a subnet in between. Port forwarding rules on both the ADSL router and the mikrotik to an internal HTTPS server with self-issued certificate was working perf...

Thanks alot for your detailed explanation. Actually, I understood more about routing. I did the necessary amendments (although we did before) and tested the scenario in the respect of Routing Mark rules. However, there is still something wrong. In order to understand our routing table better, I atta...

With the route rules in place, make sure that your firewall filter rules in the forward chain allow such communications. Thanks for your help. Actually, after testing and troubleshooting, it seems that I am doing routes in a wrong way. Every route I have added is set to 0.0.0.0/0 in the destination...

The easiest fix is using a route rule:

/ip route rule add dst=192.168.0.0/0 action=lookup-only-in-table table=main

Thanks for your reply. Actually, I did that also but it did not work.
Please, let me know you have other idea to try.
BR

You have multiple WANs on  192.168.1.1. If you are using firewall marking (like PCC), have you checked to NOT mark packets going to 192.168.21.x ? If they are marked by load balancer, they will be routed via one of your WANs, and that is exactly what you are describing. Thanks for your reply. Actua...

 I have two networks 192.168.1.x (Gateway: 192.168.1.1 - RouterOS) and 192.168.21.x (Gateway: 192.168.21.1 - Cyberroam). I need to make them availavle to each other. They are physically apart. I setup WIFI link and put a Router OS in between. I setup the RouterOS (in between) to route traffic.I assi...