J
J
JeremiSharkboy2021-11-09 09:18:57
Computer networks
JeremiSharkboy, 2021-11-09 09:18:57

How to allow traffic between two local networks on Mikrotik?

There is such a config ->
ISP1(ppoe) -> LAN1
ISP2(ppoe2) -> LAN2

Works as intended
, clients of the first locale go through 1 provider, clients of the second through the second
But I also need a connection between the clients of these two locales.
Tell me what and how to prescribe so that there would be a connection between the clients of the two locales?

618a131f16937215716151.png

Answer the question

In order to leave comments, you need to log in

3 answer(s)
A
AlexanderSuz, 2021-11-09
@JeremiSharkboy

I have it like this
In the firewall in filter Rules
chain=forward action=accept src-address=192.168.3.0/24 dst-address=192.168.1.0/24 log=no log-prefix=""
chain=forward action=accept src- address=192.168.1.0/24 dst-address=192.168.3.0/24 log=no log-prefix="" 3.0
sees 1.0
1.0 sees 3.0

M
MagicGTS, 2021-11-10
@MagicGTS

The firewall configuration and expectations from its work are not quite clear.
Since you have two providers, not the most trivial routing configuration should be configured. I will assume that your config was reset and then somehow made differently.
By itself, AlexanderSuz's answer is quite correct, however, what you have next with the network is completely unclear.
What I can recommend: try to return the filter at least to the factory state, this will provide adequate protection from the Internet, then add the provider interfaces to the WAN list, and the clients to the LAN.
In this case, local communication will work, conntrack and fast forward will work in the firewall (which is useful for proper DNAT and performance), and from the Internet you will not be used in DNS amplification attacks.
How do you have DualWan configured at the same time and how returning to the "sources" will affect it - I can answer after I see the entire config.

N
Nikadim Tsatskin, 2021-11-18
@BigDrive

You can use the interface list, you create one forward rule allowing in FireWall and specify it not by addresses, but by interface list

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question