This week i'm setting up a mikrotik router solution for a customer of ours, so i'm testing their topology on our Mikrotik in our office. I've got WAN on eth2 and LAN number 1 out on eth1, i've put a laptop on eth3 just to test if i can ping from LAN 1 to LAN 2, LAN 2 wont need internet access just be available for LAN 1 to access the machines on LAN 2. I've setup a DHCP Server on eth3 which is working great, the laptop is receiving an IP of 192.168.33.10 as planned and LAN 1 is on 192.168.0.1-255 range, what firewall rules (if any) do i need to setup to allow LAN 1 to talk to LAN 2 via ping or browsing the network through Windows Explorer, etc...I can ping from LAN 2 to 192.168.33.1 (MT's eth3 address) but not to 192.168.0.1 (MT's eth1 address). Also LAN 2 would have to be available via VPN if someone came in on LAN 1 they would need to access LAN 2. Is this all possible...???

Your laptop on 192.168.33.10 is receiving which ip as default gateway from DHCP server? It must be 192.168.33.1 (mk eth3 ip address as you said). I suppose you trying to ping 192.168.0.x from it, right?

Think the problem is yours networks don't know the path to reach each other. Try to do some traceroutes from your machine
and look if the path is going thru mikrotik.

Jorge

Ok, i've got a bit further, at the moment there is a draytek sat on 192.168.1.1 and the MT sat on 192.168.1.66, lan side 192.168.33.1. I can ping through to laptops etc on the 192.168.1.x side but they cannot ping anything downstream of the MT on the 192.168.33.x range, can anyone help with rules and routes please? i've tried reading around the forums etc, just need that last bit of guidance!