Community discussions

MikroTik App
 
JordanZA
just joined
Topic Author
Posts: 2
Joined: Thu Jan 12, 2012 3:40 pm

VLAN, Inter-VLAN Routing and SRC-NAT

Thu Jan 12, 2012 6:04 pm

Hi All,
I'm new here, but not new to Mikrotik! Hope i can be of value to community :)

I'm hoping someone can steer me in the right direction here,

I have 3x L2 Switches, and a RB1200 Mikrotik.
I have configured the switches' VLANs to tag on the uplinks (VLAN1) and I have configured the VLANS on the mikrotik.

Ethernet 1 is WAN
Ethernet 2 is 10.0.0.0/24 (Management)

All Vlans are on Ethernet 2
The VLAN's IP's are as follows;
10.0.x.0/24 where "x" is the VLAN Number (10-19)

From VLAN13 (10.0.13.x) i can connect to the Web Management of the switches (10.0.0.5) but NOT a Linksys Router at 10.0.0.100
I saw a post where someone mentioned bad SRC-NAT rules could cause this. but all i have on the SRC-NAT Rule (One per VLAN) is as follows;

Chain= SRC-NAT
AddressList = "Name" (its IPs are as follows) 10.0.x.0/24
out interface = ether1
action = srcnat-to ip (ether1's IP Address)

Does anything obvious stand out?
Thanks so much!
 
JordanZA
just joined
Topic Author
Posts: 2
Joined: Thu Jan 12, 2012 3:40 pm

Re: VLAN, Inter-VLAN Routing and SRC-NAT

Mon Jan 30, 2012 2:57 pm

Hi All,

Anyone able to point me in the right direction?
I have full VLAN Segregation taking place, Mangle/PCQ, SRC-NAT Rules work for WAN, etc.

But i cannot get the VLANs to inter-communicate. ALL the documentation says "this should just work".
You do not have the required permissions to view the files attached to this post.
 
huntah
Member Candidate
Member Candidate
Posts: 289
Joined: Tue Sep 09, 2008 3:24 pm

Re: VLAN, Inter-VLAN Routing and SRC-NAT

Mon Jan 30, 2012 9:22 pm

do you use NAT for VLAN subnets?
If you masquerade your VLANs then I think this can be your problem..
Disable masquerade rule and try...

Or try somthing like that (place it as the first rule):
/ip firewall add action=accept chain=forward comment="Accept Everything from VLAN10 - VLAN11"  disabled=no dst-address=10.0.11.0/24 src-address=10.0.10.0/24
or maybe for test:
/ip firewall add action=accept chain=forward comment="Accept Everything from 10.0.0.0/16 - 10.0.0.0/16"  disabled=no dst-address=10.0.0.0/16 src-address=10.0.0.0/16
 
ricotrevisan
just joined
Posts: 7
Joined: Wed Mar 30, 2016 3:09 pm

Re: VLAN, Inter-VLAN Routing and SRC-NAT

Wed Jul 06, 2016 10:38 pm

Did you ever find a solution? I'm curious.