1

Site 1: Locally connected to port 1 with interface IP 192.168.1.1/24

Site 2: Locally connected to port 2 with interface IP 192.168.2.1/24

Port 3 is the internet.

Master Ports none on all interfaces.

No firewall is configured.

Dynamic routes are listed for both subnets and the router can ping IPs on the inside of both LANs.

NAT is configured srcnat, Out-interface Port 3, masquerade, Dst. Address NOT 192.168.0.0/16

These subnets need to see each other, but cannot.

What am I missing?

closed as off-topic by Ron Maupin Aug 9 '17 at 2:48

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "NE is a site for to ask and provide answers about professionally managed networks in a business environment. Your question falls outside the areas our community decided are on topic. Please visit the help center for more details. If you disagree with this closure, please ask on Network Engineering Meta." – Ron Maupin
If this question can be reworded to fit the rules in the help center, please edit the question.

  • Can the subnets reach the internet ? – Ron Trunk Sep 25 '14 at 1:46
  • Yes both subnets see the Internet. – Shawn Gradwell Sep 25 '14 at 5:21
1

The fault was with the DHCP server setup on the Mikrotik, see before print:

[xxxx@MikroTik] /ip dhcp-server> network print

# ADDRESS GATEWAY DNS-SERVER WINS-SERVER DOMAIN
0 192.168.100.0/32 192.168.100.1 8.8.8.8
1 192.168.102.0/32 192.168.102.1 8.8.8.8
2 192.168.105.0/32 192.168.105.1 8.8.8.8
3 192.168.200.0/32 192.168.200.1 8.8.8.8

..and after print:

[xxxx@MikroTik] /ip dhcp-server> network print

# ADDRESS GATEWAY DNS-SERVER WINS-SERVER DOMAIN
0 192.168.100.0/24 192.168.100.1 8.8.8.8
1 192.168.102.0/24 192.168.102.1 8.8.8.8
2 192.168.105.0/24 192.168.105.1 8.8.8.8
3 192.168.200.0/24 192.168.200.1 8.8.8.8

Even though the Mikrotik has an option to add the Netmask as 24 on the DHCP Network screen in Winbox, it does not automatically pull that mask value through to the address value and thus needs to be explicitly added to the address value as well.

(I know this export example is not exactly like my question, but I did not want to over-complicate the question)

0

Site 1 and Site 2, whatever devices you have there, must have routes to point to each other, or just create a default route. The problem is that they do not know where the other is. Assuming all configs are correct.

  • Port 1's IP is the gateway for that LAN, and the same with the Port 2 LAN. – Shawn Gradwell Sep 24 '14 at 16:01

Not the answer you're looking for? Browse other questions tagged or ask your own question.