http://www.dslreports.com/forum/r16386181 en Sun, 29 Nov 2009 08:14:40 EDT Sun, 29 Nov 2009 08:14:40 EDT http://www.dslreports.com/forum/remark,16388264 ponline : If you want to route you have to split your subnet on smaller subnets.
You can always do NAT 1:1 so you dont have to split your adress space.
The clients that want public IP adress, you asign that public adress to your ether1 and than do a 1:1 NAT to his nated adress.]]> http://www.dslreports.com/forum/remark,16388264 Tue, 27 Jun 2006 14:56:49 EDT http://www.dslreports.com/forum/remark,16388192 IntraLink : You either need to subnet like suggested or proxy-arp.

Do this:

Remove the 16.133 from the ether1 interface.
Put the 16.133 on the ether3 interface.
Change the ARP setting on the ether1 interface to proxy-arp.

That should work.

Be aware that any subnet on your MT router will be responded to on the public interface because of the proxy-arp.]]> http://www.dslreports.com/forum/remark,16388192 Tue, 27 Jun 2006 14:46:40 EDT http://www.dslreports.com/forum/remark,16388154 goldenspacek : Thanks, that was a help...
So ether1 should have what IP address? A public one right?
ehter3 should have a private address right?

So why can't I route the public ips to ether3?]]> http://www.dslreports.com/forum/remark,16388154 Tue, 27 Jun 2006 14:41:17 EDT http://www.dslreports.com/forum/remark,16386899 Believer : You can't have the same public range on both ether1 and ether3. They need to be subnetted.
--
Comtrain Certified Tower Climber]]> http://www.dslreports.com/forum/remark,16386899 Tue, 27 Jun 2006 11:46:30 EDT http://www.dslreports.com/forum/remark,16386864 goldenspacek : Behind the MT box they will have public and nated addresses.

The gateway is our cisco router at 6.15.16.129.
The public subnet is 255.255.255.224

The NAT stuff and IPs work great.
Just need to get the public IPs to go through.]]> http://www.dslreports.com/forum/remark,16386864 Tue, 27 Jun 2006 11:42:25 EDT http://www.dslreports.com/forum/remark,16386387 ponline : If you are given a public address space for your use, you should have been given also a /30 ip address for your public interface facing your provider.
If this is not the border router, then you should give some more info on your network how it is subneted and what subnet you want to give to clients behind this router.]]> http://www.dslreports.com/forum/remark,16386387 Tue, 27 Jun 2006 10:27:01 EDT http://www.dslreports.com/forum/remark,16386238 IntraLink : Huh?

Are you giving your clients behind the MT box the NATed IP's or the Public IP range or both?

For the NAT you need a masquerade rule in your firewall that points the internal subnet to your outgoing interface.

For the public IP's it looks like your provider is using one of your own addresses for your gateway so you will need to remove the public facing IP, set proxy-arp on that interface and then set one of the public IPs on your INTERNAL interface as your clients gateway (or they can pass through and use your providers gateway too).]]> http://www.dslreports.com/forum/remark,16386238 Tue, 27 Jun 2006 09:56:44 EDT http://www.dslreports.com/forum/remark,16386189 Believer : Did you setup NAT?]]> http://www.dslreports.com/forum/remark,16386189 Tue, 27 Jun 2006 09:48:34 EDT http://www.dslreports.com/forum/remark,16386181 goldenspacek : Since MikroTik email support takes 4-5 days and your guys rock, I'm asking this here. I have my MikroTik box working fine (without bridges, using 1 nic card right now). It does not pass any public IPs, and I've tried everything I can think of in the routes. So can someone tell me what is supposed to be set in the route if I have this situation.

MT public IP 6.15.16.133 (on ether1)
MT gateway 6.15.16.129
MT local ip 10.44.0.1 (on ether3)

Public IPs connected to ether 3 would be 6.15.16.134-6.15.16.158. Actually there are more, but this should be simple.

Thanks again!]]> http://www.dslreports.com/forum/remark,16386181 Tue, 27 Jun 2006 09:47:10 EDT