Page 1 of 1

VLAN, Inter-VLAN Routing and SRC-NAT

Posted: Thu Jan 12, 2012 6:04 pm
by JordanZA
Hi All,
I'm new here, but not new to Mikrotik! Hope i can be of value to community :)

I'm hoping someone can steer me in the right direction here,

I have 3x L2 Switches, and a RB1200 Mikrotik.
I have configured the switches' VLANs to tag on the uplinks (VLAN1) and I have configured the VLANS on the mikrotik.

Ethernet 1 is WAN
Ethernet 2 is 10.0.0.0/24 (Management)

All Vlans are on Ethernet 2
The VLAN's IP's are as follows;
10.0.x.0/24 where "x" is the VLAN Number (10-19)

From VLAN13 (10.0.13.x) i can connect to the Web Management of the switches (10.0.0.5) but NOT a Linksys Router at 10.0.0.100
I saw a post where someone mentioned bad SRC-NAT rules could cause this. but all i have on the SRC-NAT Rule (One per VLAN) is as follows;

Chain= SRC-NAT
AddressList = "Name" (its IPs are as follows) 10.0.x.0/24
out interface = ether1
action = srcnat-to ip (ether1's IP Address)

Does anything obvious stand out?
Thanks so much!

Re: VLAN, Inter-VLAN Routing and SRC-NAT

Posted: Mon Jan 30, 2012 2:57 pm
by JordanZA
Hi All,

Anyone able to point me in the right direction?
I have full VLAN Segregation taking place, Mangle/PCQ, SRC-NAT Rules work for WAN, etc.

But i cannot get the VLANs to inter-communicate. ALL the documentation says "this should just work".

Re: VLAN, Inter-VLAN Routing and SRC-NAT

Posted: Mon Jan 30, 2012 9:22 pm
by huntah
do you use NAT for VLAN subnets?
If you masquerade your VLANs then I think this can be your problem..
Disable masquerade rule and try...

Or try somthing like that (place it as the first rule):
/ip firewall add action=accept chain=forward comment="Accept Everything from VLAN10 - VLAN11"  disabled=no dst-address=10.0.11.0/24 src-address=10.0.10.0/24
or maybe for test:
/ip firewall add action=accept chain=forward comment="Accept Everything from 10.0.0.0/16 - 10.0.0.0/16"  disabled=no dst-address=10.0.0.0/16 src-address=10.0.0.0/16

Re: VLAN, Inter-VLAN Routing and SRC-NAT

Posted: Wed Jul 06, 2016 10:38 pm
by ricotrevisan
Did you ever find a solution? I'm curious.