Community discussions

MikroTik App
 
TroyQ
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 63
Joined: Thu Oct 20, 2016 10:02 pm

Please Help! :-( two mikrotik networks not working

Thu Jan 19, 2017 10:56 am

Hi Every one, I have two mikrotiks with two different networks. 192.168.0.0/24 and 192.168.50.0/24
The mikrotiks can communicate and ping each other fine but the pc's will not see each other at all :-( see my export below.
(just to add, please ignore references to internet as this is not supplied by the mikrotik. also this is the 2nd mikrotik. the first one is almost the same) (and sfp1 is master port to main mikrotik and for all interfaces excpect interface 3 and 5, where I need to plug in my other network that has its own dhcp server)

# jan/18/2017 09:11:17 by RouterOS 6.38
# software id = ZYPM-RMMD
#
/interface ethernet
set [ find default-name=ether3 ] comment=Klas35
set [ find default-name=ether5 ] comment=Klas26
set [ find default-name=sfp1 ] comment="MasterPort To Admin Network"
/interface pppoe-client
add add-default-route=yes interface=ether3 name=pppoe-out1 password=comcen123 \
use-peer-dns=yes user=ohs@comcen.co.za
/interface ethernet
set [ find default-name=ether1 ] master-port=sfp1
set [ find default-name=ether2 ] comment="Replica Server" master-port=sfp1
set [ find default-name=ether4 ] master-port=sfp1
set [ find default-name=ether6 ] master-port=sfp1
set [ find default-name=ether7 ] master-port=sfp1
set [ find default-name=ether8 ] master-port=sfp1
set [ find default-name=ether9 ] master-port=sfp1
set [ find default-name=ether10 ] master-port=sfp1
set [ find default-name=ether11 ] master-port=sfp1
set [ find default-name=ether12 ] master-port=sfp1
set [ find default-name=ether13 ] master-port=sfp1
set [ find default-name=ether14 ] master-port=sfp1
set [ find default-name=ether15 ] master-port=sfp1
set [ find default-name=ether16 ] master-port=sfp1
set [ find default-name=ether17 ] master-port=sfp1
set [ find default-name=ether18 ] master-port=sfp1
set [ find default-name=ether19 ] master-port=sfp1
set [ find default-name=ether20 ] master-port=sfp1
set [ find default-name=ether21 ] master-port=sfp1
set [ find default-name=ether22 ] master-port=sfp1
set [ find default-name=ether23 ] master-port=sfp1
set [ find default-name=ether24 ] master-port=sfp1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/tool user-manager customer
set admin access=\
own-routers,own-users,own-profiles,own-limits,config-payment-gw
/ip settings
set accept-redirects=yes accept-source-route=yes
/ip address
add address=10.80.8.8/24 comment="Mikrotik Routers Address" interface=sfp1 \
network=10.80.8.0
add address=192.168.50.235/24 comment="LAN Address" interface=ether3 network=\
192.168.50.0
add address=192.168.50.226/24 interface=ether5 network=192.168.50.0
/ip cloud
set ddns-enabled=yes
/ip dns
set allow-remote-requests=yes servers=169.1.1.4,10.60.3.4
/ip firewall filter
add action=accept chain=input connection-state=established,related
add action=accept chain=forward connection-state=established,related
add action=accept chain=input protocol=icmp
add action=accept chain=input protocol=igmp
add action=accept chain=forward dst-address=192.168.0.0/24 src-address=\
192.168.50.35
add action=accept chain=forward dst-address=192.168.0.0/24 src-address=\
192.168.50.26
add action=accept chain=forward dst-address=192.168.0.0/24 src-address=\
192.168.50.46
add action=accept chain=forward dst-address=192.168.0.0/24 src-address=\
192.168.50.1
add action=accept chain=forward dst-address=192.168.50.0/24 src-address=\
192.168.0.0/24
add action=reject chain=forward dst-address=192.168.0.0/24 reject-with=\
icmp-net-prohibited src-address=192.168.50.0/24
add action=reject chain=forward dst-address=192.168.1.0/24 reject-with=\
icmp-net-prohibited src-address=192.168.50.0/24
/ip firewall mangle
add action=accept chain=prerouting dst-address=192.168.0.0/24 src-address=\
192.168.50.1-192.168.50.49
add action=accept chain=prerouting dst-address=192.168.50.0/24 src-address=\
192.168.0.0/24
add action=accept chain=forward in-interface=ether3 out-interface=sfp1
/ip firewall nat
add action=masquerade chain=srcnat
/ip firewall service-port
set sip disabled=yes
/ip route
add distance=1 gateway=10.80.8.1
add distance=1 dst-address=192.168.0.0/24 gateway=10.80.8.1
add distance=1 dst-address=192.168.50.0/24 gateway=10.80.8.1
/lcd interface pages
set 1 interfaces=ether13,ether14,ether15,ether16
/routing pim interface
add interface=ether3
add interface=ether5
add interface=register
/routing pim rp
add address=192.168.135.254
/system clock
set time-zone-name=Africa/Johannesburg
/system identity
set name="OHS K18 C Brink"
/system lcd
set contrast=0 enabled=no port=parallel type=24x4
/system lcd page
set time disabled=yes display-time=5s
set resources disabled=yes display-time=5s
set uptime disabled=yes display-time=5s
set packets disabled=yes display-time=5s
set bits disabled=yes display-time=5s
set version disabled=yes display-time=5s
set identity disabled=yes display-time=5s
set pppoe-out1 disabled=yes display-time=5s
set ether1 disabled=yes display-time=5s
set ether2 disabled=yes display-time=5s
set ether3 disabled=yes display-time=5s
set ether4 disabled=yes display-time=5s
set ether5 disabled=yes display-time=5s
set ether6 disabled=yes display-time=5s
set ether7 disabled=yes display-time=5s
set ether8 disabled=yes display-time=5s
set ether9 disabled=yes display-time=5s
set ether10 disabled=yes display-time=5s
set ether11 disabled=yes display-time=5s
set ether12 disabled=yes display-time=5s
set ether13 disabled=yes display-time=5s
set ether14 disabled=yes display-time=5s
set ether15 disabled=yes display-time=5s
set ether16 disabled=yes display-time=5s
set ether17 disabled=yes display-time=5s
set ether18 disabled=yes display-time=5s
set ether19 disabled=yes display-time=5s
set ether20 disabled=yes display-time=5s
set ether21 disabled=yes display-time=5s
set ether22 disabled=yes display-time=5s
set ether23 disabled=yes display-time=5s
set ether24 disabled=yes display-time=5s
set sfp1 disabled=yes display-time=5s
/system ntp client
set enabled=yes mode=broadcast primary-ntp=10.80.8.1 secondary-ntp=10.60.3.4
/system ntp server
set broadcast=yes broadcast-addresses=192.168.50.254 enabled=yes multicast=\
yes
/tool romon
set enabled=yes
/tool user-manager database
set db-path=user-manager
You do not have the required permissions to view the files attached to this post.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10529
Joined: Mon Jun 08, 2015 12:09 pm

Re: Please Help! :-( two mikrotik networks not working

Thu Jan 19, 2017 11:09 am

Do you have a working knowledge of IP networking?
 
TroyQ
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 63
Joined: Thu Oct 20, 2016 10:02 pm

Re: Please Help! :-( two mikrotik networks not working

Thu Jan 19, 2017 12:04 pm

Do you have a working knowledge of IP networking?
Yes but im still a beginner with mikrotiks, i have done the 1st course. Will do the rest this year. In the mean time I need help connecting these two networks
 
p3rad0x
Long time Member
Long time Member
Posts: 640
Joined: Fri Sep 18, 2015 5:42 pm
Location: South Africa
Contact:

Re: Please Help! :-( two mikrotik networks not working

Thu Jan 19, 2017 12:15 pm

First, disable all nat rules and firewall rules.

I see that you assigned 192.168.50.0/24 on two separate interfaces that isn't bridged?

Is 192.168.0.0/24 behind 10.80.8.1?

If so you will need to add a route on 10.80.8.1 pointing back to the 192.168.50 network
 
TroyQ
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 63
Joined: Thu Oct 20, 2016 10:02 pm

Re: Please Help! :-( two mikrotik networks not working

Thu Jan 19, 2017 12:50 pm

First, disable all nat rules and firewall rules.

I see that you assigned 192.168.50.0/24 on two separate interfaces that isn't bridged?

Is 192.168.0.0/24 behind 10.80.8.1?

If so you will need to add a route on 10.80.8.1 pointing back to the 192.168.50 network
On 10.80.8.1 route 192.168.50.0/24 is added with gateway as 10.80.8.8
route_01.JPG
I dissabled the masquerade on 10.80.8.8...will post new config now.
You do not have the required permissions to view the files attached to this post.
 
TroyQ
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 63
Joined: Thu Oct 20, 2016 10:02 pm

Re: Please Help! :-( two mikrotik networks not working

Thu Jan 19, 2017 12:55 pm

I made some changes but still nothing.... :cry: :cry: :cry: :cry: :cry:

# jan/18/2017 11:11:11 by RouterOS 6.38
# software id = ZYPM-RMMD
#
/interface ethernet
set [ find default-name=ether3 ] comment=Klas35
set [ find default-name=ether5 ] comment=Klas26
set [ find default-name=sfp1 ] comment="MasterPort To Admin Network"
/interface ethernet
set [ find default-name=ether1 ] master-port=sfp1
set [ find default-name=ether2 ] comment="Replica Server" master-port=sfp1
set [ find default-name=ether4 ] master-port=sfp1
set [ find default-name=ether6 ] master-port=sfp1
set [ find default-name=ether7 ] master-port=sfp1
set [ find default-name=ether8 ] master-port=sfp1
set [ find default-name=ether9 ] master-port=sfp1
set [ find default-name=ether10 ] master-port=sfp1
set [ find default-name=ether11 ] master-port=sfp1
set [ find default-name=ether12 ] master-port=sfp1
set [ find default-name=ether13 ] master-port=sfp1
set [ find default-name=ether14 ] master-port=sfp1
set [ find default-name=ether15 ] master-port=sfp1
set [ find default-name=ether16 ] master-port=sfp1
set [ find default-name=ether17 ] master-port=sfp1
set [ find default-name=ether18 ] master-port=sfp1
set [ find default-name=ether19 ] master-port=sfp1
set [ find default-name=ether20 ] master-port=sfp1
set [ find default-name=ether21 ] master-port=sfp1
set [ find default-name=ether22 ] master-port=sfp1
set [ find default-name=ether23 ] master-port=sfp1
set [ find default-name=ether24 ] master-port=sfp1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/tool user-manager customer
set admin access=\
own-routers,own-users,own-profiles,own-limits,config-payment-gw
/ip settings
set accept-redirects=yes accept-source-route=yes
/ip address
add address=10.80.8.8/24 comment="Mikrotik Routers Address" interface=sfp1 \
network=10.80.8.0
add address=192.168.50.235/24 comment="LAN Address" interface=ether3 network=\
192.168.50.0
add address=192.168.50.226/24 interface=ether5 network=192.168.50.0
/ip cloud
set ddns-enabled=yes
/ip dns
set allow-remote-requests=yes servers=169.1.1.4,10.60.3.4
/ip firewall address-list
add address=192.168.0.0/24 list=Local
add address=192.168.50.0/24 list=Local
/ip firewall filter
add action=accept chain=input connection-state=established,related
add action=accept chain=forward connection-state=established,related
add action=accept chain=input protocol=icmp
add action=accept chain=input protocol=igmp
add action=accept chain=forward dst-address=192.168.0.0/24 src-address=\
192.168.50.35
add action=accept chain=forward dst-address=192.168.0.0/24 src-address=\
192.168.50.26
add action=accept chain=forward dst-address=192.168.0.0/24 src-address=\
192.168.50.46
add action=accept chain=forward dst-address=192.168.0.0/24 src-address=\
192.168.50.1
add action=accept chain=forward dst-address=192.168.50.0/24 src-address=\
192.168.0.0/24
add action=reject chain=forward disabled=yes dst-address=192.168.0.0/24 \
reject-with=icmp-net-prohibited src-address=192.168.50.0/24
add action=reject chain=forward disabled=yes dst-address=192.168.1.0/24 \
reject-with=icmp-net-prohibited src-address=192.168.50.0/24
/ip firewall mangle
add action=accept chain=prerouting comment="Local Lists" dst-address-list=\
Local src-address-list=Local
add action=accept chain=prerouting dst-address=192.168.0.0/24 src-address=\
192.168.50.0/24
add action=accept chain=prerouting dst-address=192.168.50.0/24 src-address=\
192.168.0.0/24
add action=accept chain=forward in-interface=ether3 out-interface=sfp1
/ip firewall service-port
set sip disabled=yes
/ip route
add distance=1 gateway=10.80.8.1
add distance=1 dst-address=192.168.0.0/24 gateway=10.80.8.1
/lcd interface pages
set 1 interfaces=ether13,ether14,ether15,ether16
/system clock
set time-zone-name=Africa/Johannesburg
/system identity
set name="OHS K18 C Brink"
/system lcd
set contrast=0 enabled=no port=parallel type=24x4
/system lcd page
set time disabled=yes display-time=5s
set resources disabled=yes display-time=5s
set uptime disabled=yes display-time=5s
set packets disabled=yes display-time=5s
set bits disabled=yes display-time=5s
set version disabled=yes display-time=5s
set identity disabled=yes display-time=5s
set pppoe-out1 disabled=yes display-time=5s
set ether1 disabled=yes display-time=5s
set ether2 disabled=yes display-time=5s
set ether3 disabled=yes display-time=5s
set ether4 disabled=yes display-time=5s
set ether5 disabled=yes display-time=5s
set ether6 disabled=yes display-time=5s
set ether7 disabled=yes display-time=5s
set ether8 disabled=yes display-time=5s
set ether9 disabled=yes display-time=5s
set ether10 disabled=yes display-time=5s
set ether11 disabled=yes display-time=5s
set ether12 disabled=yes display-time=5s
set ether13 disabled=yes display-time=5s
set ether14 disabled=yes display-time=5s
set ether15 disabled=yes display-time=5s
set ether16 disabled=yes display-time=5s
set ether17 disabled=yes display-time=5s
set ether18 disabled=yes display-time=5s
set ether19 disabled=yes display-time=5s
set ether20 disabled=yes display-time=5s
set ether21 disabled=yes display-time=5s
set ether22 disabled=yes display-time=5s
set ether23 disabled=yes display-time=5s
set ether24 disabled=yes display-time=5s
set sfp1 disabled=yes display-time=5s
/system ntp client
set enabled=yes mode=broadcast primary-ntp=10.80.8.1 secondary-ntp=10.60.3.4
/tool romon
set enabled=yes
/tool user-manager database
set db-path=user-manager
 
TroyQ
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 63
Joined: Thu Oct 20, 2016 10:02 pm

Re: Please Help! :-( two mikrotik networks not working

Thu Jan 19, 2017 12:57 pm

First, disable all nat rules and firewall rules.

I see that you assigned 192.168.50.0/24 on two separate interfaces that isn't bridged?

Is 192.168.0.0/24 behind 10.80.8.1?

If so you will need to add a route on 10.80.8.1 pointing back to the 192.168.50 network
On 10.80.8.1 route 192.168.50.0/24 is added with gateway as 10.80.8.8
route_01.JPG
I dissabled the masquerade on 10.80.8.8...will post new config now.
PS. no bride on interface 3 and 5, interface 5 is not plugged in yet and not in use yet
 
TroyQ
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 63
Joined: Thu Oct 20, 2016 10:02 pm

Re: Please Help! :-( two mikrotik networks not working

Thu Jan 19, 2017 1:16 pm

From a PC on 192.168.50.0/24 I can ping the interface eth3 which has the address 192.168.50.235.
From the same PC I cannot ping the routers main address 10.80.8.8 (sfp1)
Also cannot ping anything on 192.168.0.0 range

From mikrotik 2 (this secondary one) 10.80.8.8, I can ping Both networks 192.168.50.0/24 (any pc plugged into interface3) and also any pc on 192.168.0.0/24
From mikrotik 1 (the main one) 10.80.8.1, I can only ping 192.168.0.0/24 and I can ping the interface in mikrotik 2 192.168.50.235 but no pc on 192.168.50.0/24....

From network PC on 192.168.0.0/24 I can not ping 192.168.50.0/24 or interface3 of mikrotik 2, 192.168.50.235...
But I can ping 10.80.8.8
 
TroyQ
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 63
Joined: Thu Oct 20, 2016 10:02 pm

Re: Please Help! :-( two mikrotik networks not working

Wed Jan 25, 2017 3:36 pm

Another unsolved problem with mikrotik :-? I might as well not use them if it cannot solve my problems
 
chippers
newbie
Posts: 28
Joined: Tue Apr 02, 2013 7:45 am

Re: Please Help! :-( two mikrotik networks not working

Wed Jan 25, 2017 8:31 pm

A ping wants to go through the network to the target device and then back out through the network to the device who asked for the ping. Looks like your ping cant get back to 10.80.8.1

might need a route on the mikrotik 2 - 192.168.50.235 network so the ping traffic has a path back to the destination on 10.80.8.1

Its not the fault of the Mikrotik that this doesnt work, you are going to have this issue with any router if your learning something new, keep trying, its worth it :)

Who is online

Users browsing this forum: divB, Xman1 and 79 guests