Thanks for the post, I too had two default routes.
I enabled on PPPoE, and disabled on DHCPv6 Client as per the above and all is resolved!

Code: Select all

/ip firewall nat add action=src-nat chain=srcnat src-address=<dmz_ip> to-addresses=<wan_ip>

Do this but also specify the out-interface.

It helps to do a 'source address' when pinging, so the Mikrotik knows which route to use.
I would help with a command but I'm not near a computer. Sorry!

For example, if pinging from Company to Branch then set the source address as the local Mikrotik: 192.168.100.1

OK, so I see you don't have routes, so traffic doesn't know how to reach the other network. Add these, see how you get on. Company: /ip route add comment=VPN distance=1 dst-address=192.168.0.0/24 gateway=192.168.0.1 Branch: /ip route add comment=VPN distance=1 dst-address=192.168.100.0/24 gateway=19...

At a different school where the IP ranges don't overlap I simply added the IP address to the WAN interface (10.4.#.150), srcnat (to 10.4.#.150), and route (DST:10.0.241.226 > GW:10.4.#.129), and lastly I configured transparent proxy on the Mikrotik (Specifying the squid proxy as the Parent Proxy), ...

Can you post an export of your routes...?

You don't need to Mangle anything.
You should have at least three routes on each router; LAN, WAN and VPN. Post your config and I'll take a look.

Have you got your routes set up in IP > Routes?

I have experienced the same, ping is possible but file shares are not. It was definitely a firewall filter rule that fixed it however my configured has changed so much since then that the rule no longer exists and I don't remember it! Try adding an Accept rule for the other site's internal subnet an...

So ur saying i should have set to ppoe Potentially, yes. I agree that this is normal operation for me too. I found this when dst-nat rules were not working when I set them to ether1 but did work when set to the pppoe interface. Or i can try to set for both? You can, but this shouldn't be necessary ...

Hi.
My simplest solution:

Code: Select all

/ip firewall filter add action=drop chain=forward in-interface=all-vlan out-interface=all-vlan

Best regards: CsXen

[emoji106]


Sent from my iPhone using Tapatalk Pro

Thanks guys, I'll give it a go.

I have a Supermicro server that I am trying to install RouterOS to. I can install to USB and successfully boot, but it cannot see the NICs, I can also get to the PXE based installer but get stuck with the message "no network card found". What options do I have to get this working? Using a ...