Hi Every one, I have two mikrotiks with two different networks. 192.168.0.0/24 and 192.168.50.0/24
The mikrotiks can communicate and ping each other fine but the pc's will not see each other at all see my export below.
(just to add, please ignore references to internet as this is not supplied by the mikrotik. also this is the 2nd mikrotik. the first one is almost the same) (and sfp1 is master port to main mikrotik and for all interfaces excpect interface 3 and 5, where I need to plug in my other network that has its own dhcp server)
# jan/18/2017 09:11:17 by RouterOS 6.38
# software id = ZYPM-RMMD
#
/interface ethernet
set [ find default-name=ether3 ] comment=Klas35
set [ find default-name=ether5 ] comment=Klas26
set [ find default-name=sfp1 ] comment="MasterPort To Admin Network"
/interface pppoe-client
add add-default-route=yes interface=ether3 name=pppoe-out1 password=comcen123 \
use-peer-dns=yes user=ohs@comcen.co.za
/interface ethernet
set [ find default-name=ether1 ] master-port=sfp1
set [ find default-name=ether2 ] comment="Replica Server" master-port=sfp1
set [ find default-name=ether4 ] master-port=sfp1
set [ find default-name=ether6 ] master-port=sfp1
set [ find default-name=ether7 ] master-port=sfp1
set [ find default-name=ether8 ] master-port=sfp1
set [ find default-name=ether9 ] master-port=sfp1
set [ find default-name=ether10 ] master-port=sfp1
set [ find default-name=ether11 ] master-port=sfp1
set [ find default-name=ether12 ] master-port=sfp1
set [ find default-name=ether13 ] master-port=sfp1
set [ find default-name=ether14 ] master-port=sfp1
set [ find default-name=ether15 ] master-port=sfp1
set [ find default-name=ether16 ] master-port=sfp1
set [ find default-name=ether17 ] master-port=sfp1
set [ find default-name=ether18 ] master-port=sfp1
set [ find default-name=ether19 ] master-port=sfp1
set [ find default-name=ether20 ] master-port=sfp1
set [ find default-name=ether21 ] master-port=sfp1
set [ find default-name=ether22 ] master-port=sfp1
set [ find default-name=ether23 ] master-port=sfp1
set [ find default-name=ether24 ] master-port=sfp1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/tool user-manager customer
set admin access=\
own-routers,own-users,own-profiles,own-limits,config-payment-gw
/ip settings
set accept-redirects=yes accept-source-route=yes
/ip address
add address=10.80.8.8/24 comment="Mikrotik Routers Address" interface=sfp1 \
network=10.80.8.0
add address=192.168.50.235/24 comment="LAN Address" interface=ether3 network=\
192.168.50.0
add address=192.168.50.226/24 interface=ether5 network=192.168.50.0
/ip cloud
set ddns-enabled=yes
/ip dns
set allow-remote-requests=yes servers=169.1.1.4,10.60.3.4
/ip firewall filter
add action=accept chain=input connection-state=established,related
add action=accept chain=forward connection-state=established,related
add action=accept chain=input protocol=icmp
add action=accept chain=input protocol=igmp
add action=accept chain=forward dst-address=192.168.0.0/24 src-address=\
192.168.50.35
add action=accept chain=forward dst-address=192.168.0.0/24 src-address=\
192.168.50.26
add action=accept chain=forward dst-address=192.168.0.0/24 src-address=\
192.168.50.46
add action=accept chain=forward dst-address=192.168.0.0/24 src-address=\
192.168.50.1
add action=accept chain=forward dst-address=192.168.50.0/24 src-address=\
192.168.0.0/24
add action=reject chain=forward dst-address=192.168.0.0/24 reject-with=\
icmp-net-prohibited src-address=192.168.50.0/24
add action=reject chain=forward dst-address=192.168.1.0/24 reject-with=\
icmp-net-prohibited src-address=192.168.50.0/24
/ip firewall mangle
add action=accept chain=prerouting dst-address=192.168.0.0/24 src-address=\
192.168.50.1-192.168.50.49
add action=accept chain=prerouting dst-address=192.168.50.0/24 src-address=\
192.168.0.0/24
add action=accept chain=forward in-interface=ether3 out-interface=sfp1
/ip firewall nat
add action=masquerade chain=srcnat
/ip firewall service-port
set sip disabled=yes
/ip route
add distance=1 gateway=10.80.8.1
add distance=1 dst-address=192.168.0.0/24 gateway=10.80.8.1
add distance=1 dst-address=192.168.50.0/24 gateway=10.80.8.1
/lcd interface pages
set 1 interfaces=ether13,ether14,ether15,ether16
/routing pim interface
add interface=ether3
add interface=ether5
add interface=register
/routing pim rp
add address=192.168.135.254
/system clock
set time-zone-name=Africa/Johannesburg
/system identity
set name="OHS K18 C Brink"
/system lcd
set contrast=0 enabled=no port=parallel type=24x4
/system lcd page
set time disabled=yes display-time=5s
set resources disabled=yes display-time=5s
set uptime disabled=yes display-time=5s
set packets disabled=yes display-time=5s
set bits disabled=yes display-time=5s
set version disabled=yes display-time=5s
set identity disabled=yes display-time=5s
set pppoe-out1 disabled=yes display-time=5s
set ether1 disabled=yes display-time=5s
set ether2 disabled=yes display-time=5s
set ether3 disabled=yes display-time=5s
set ether4 disabled=yes display-time=5s
set ether5 disabled=yes display-time=5s
set ether6 disabled=yes display-time=5s
set ether7 disabled=yes display-time=5s
set ether8 disabled=yes display-time=5s
set ether9 disabled=yes display-time=5s
set ether10 disabled=yes display-time=5s
set ether11 disabled=yes display-time=5s
set ether12 disabled=yes display-time=5s
set ether13 disabled=yes display-time=5s
set ether14 disabled=yes display-time=5s
set ether15 disabled=yes display-time=5s
set ether16 disabled=yes display-time=5s
set ether17 disabled=yes display-time=5s
set ether18 disabled=yes display-time=5s
set ether19 disabled=yes display-time=5s
set ether20 disabled=yes display-time=5s
set ether21 disabled=yes display-time=5s
set ether22 disabled=yes display-time=5s
set ether23 disabled=yes display-time=5s
set ether24 disabled=yes display-time=5s
set sfp1 disabled=yes display-time=5s
/system ntp client
set enabled=yes mode=broadcast primary-ntp=10.80.8.1 secondary-ntp=10.60.3.4
/system ntp server
set broadcast=yes broadcast-addresses=192.168.50.254 enabled=yes multicast=\
yes
/tool romon
set enabled=yes
/tool user-manager database
set db-path=user-manager