So port 1 is set up to recieve DHCP from my 192.168.1.XXX/24 network. The router is assigned 192.168.1.12 from DHCP on that network. Ports 2 - 5 are hardware slaved, with port 2 set as the master. Port 2 has an address of 10.10.10.1/24, and there is a DHCP server going from 10.10.10.10-10.10.10.20. I have a test radio sitting with a dhcp address of 10.10.10.20.

Using tools > ping, I can ping any address on the 10. network from ether 2, I can ping any 192.168 address from ether 1, but even after setting static routes I still can't route traffic from my 192.168 network over to the 10.10 network. (or vice versa)

What obvious "Networking glue" am I missing here?? I want to understand how to do it any why, not just a command. I've watched Greg Sowell video's and what not, I'm just hung up on this one aspect of the routing.
Thanks!!
Tom

Please post your config or paste an export to help you.

Regards.

[admin@Hex POE] > export
# sep/26/2017 21:34:22 by RouterOS 6.30.4
# software id = GDDY-RMN2
#
/interface ethernet
set [ find default-name=ether1 ] comment=WAN
set [ find default-name=ether2 ] comment=master
set [ find default-name=ether3 ] master-port=ether2
set [ find default-name=ether4 ] master-port=ether2
set [ find default-name=ether5 ] comment="test device" master-port=ether2 \
poe-out=forced-on
/ip neighbor discovery
set ether1 comment=WAN
set ether2 comment=master
set ether5 comment="test device"
/ip pool
add name=dhcp ranges=10.10.10.10-10.10.10.20
/ip dhcp-server
add address-pool=dhcp disabled=no interface=ether2 name=default
/ip address
add address=10.10.10.1/24 interface=ether2 network=10.10.10.0
/ip dhcp-client
add comment="default configuration" dhcp-options=hostname,clientid disabled=no \
interface=ether1
/ip dhcp-server network
add address=10.10.10.0/24 gateway=10.10.10.1 netmask=24
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=10.10.10.1 name=router
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/system clock
set time-zone-name=America/New_York
/system identity
set name="Hex POE"
/system routerboard settings
set cpu-frequency=650MHz protected-routerboot=disabled
/tool romon port
add
[admin@Hex POE] >

I understand the masquarade rule is probably wrong and I should be NAT'ing differently somehow. (almost bricked it, defaulted router and tried to revert back to my config as close as I could.)

I just wanna know how to resolve both CLI and using Winbox GUI. I have a good grasp on most of it besides this routing and the CLI.

There are various other Tik's on my lan, all with static routes all in 192.168.1.XXX pointing the 10.10.10.X traffic here. I just cant ping across interfaces inside this router. :/

I think as you, the masquerade rule may be wrong. Try this rule instead:
If you have default route created, you dont need specify output interface in your masquerade rule.

Please post here your "/ip routes".

Regards

After applying that nat rule and deleting the incorrect one, I still cannot ping across.

[admin@Hex POE] > ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADS 0.0.0.0/0 192.168.1.116 1
1 ADC 10.10.10.0/24 10.10.10.1 ether2 0
2 ADC 192.168.1.0/24 192.168.1.12 ether1 0

Do you have any rule under /ip firewall filter?

This situation its very strange because you have 3 correct routes, one static with distance 1 and two connected with distance 0. With this routes you dont should need nothing more to have connectivity between subnets.

Please check that all interfaces have set "arp=enabled" or "arp=proxy-arp" and also check that hosts in subnets have correct gateway setted.

Regards.

There are no firewall rules. Just the NAT rule.
Arp is enabled.

Correction: I can ping from any terminal in any mikrotik on my network of 192.168.1.XXX to my test radio of 10.10.10.20, but any normal PC cannot.
What am I doing wrong? I have disabled my entire firewall on my headend router just incase it was blocking it to no avail.

Anyone?

I think that you have a simple routing problem in this scenario..

Please, create a static route on main router (DHCP Server) with destination 10.10.10.0/24 and gateway 192.168.1.12 (wan interface of second router) and try now to ping between different subnets.

Regards.

I have created that static route everywhere. I can ping from the terminal of any mikrotik and ping 10.10.10.20, but unable to pull up the devices webpage or anything like that. I have disabled all firewalls during debugging.

Still isn't working, so I have found other means for now. Thanks @djfrancis. Glad to see the rest of the community is just as helpful... *cough cough*