goldenspacek
join:2005-04-22
Pinckney, MI
| Mikrotik route setup
Since MikroTik email support takes 4-5 days and your guys rock, I'm asking this here. I have my MikroTik box working fine (without bridges, using 1 nic card right now). It does not pass any public IPs, and I've tried everything I can think of in the routes. So can someone tell me what is supposed to be set in the route if I have this situation.
MT public IP 6.15.16.133 (on ether1)
MT gateway 6.15.16.129
MT local ip 10.44.0.1 (on ether3)
Public IPs connected to ether 3 would be 6.15.16.134-6.15.16.158. Actually there are more, but this should be simple.
Thanks again! |
|
Believer
join:2002-07-04
Baltimore, MD | Did you setup NAT? |
|
IntraLink
Premium,MVM
join:2002-08-14
Utah Valley
| reply to goldenspacek
Huh?
Are you giving your clients behind the MT box the NATed IP's or the Public IP range or both?
For the NAT you need a masquerade rule in your firewall that points the internal subnet to your outgoing interface.
For the public IP's it looks like your provider is using one of your own addresses for your gateway so you will need to remove the public facing IP, set proxy-arp on that interface and then set one of the public IPs on your INTERNAL interface as your clients gateway (or they can pass through and use your providers gateway too). |
|
ponline
join:2004-03-04
presheva
| reply to goldenspacek
If you are given a public address space for your use, you should have been given also a /30 ip address for your public interface facing your provider.
If this is not the border router, then you should give some more info on your network how it is subneted and what subnet you want to give to clients behind this router. |
|
goldenspacek
join:2005-04-22
Pinckney, MI | reply to goldenspacek
Behind the MT box they will have public and nated addresses.
The gateway is our cisco router at 6.15.16.129.
The public subnet is 255.255.255.224
The NAT stuff and IPs work great.
Just need to get the public IPs to go through. |
|
Believer
join:2002-07-04
Baltimore, MD | reply to goldenspacek
You can't have the same public range on both ether1 and ether3. They need to be subnetted.
--
Comtrain Certified Tower Climber |
|
goldenspacek
join:2005-04-22
Pinckney, MI | reply to goldenspacek
Thanks, that was a help...
So ether1 should have what IP address? A public one right?
ehter3 should have a private address right?
So why can't I route the public ips to ether3? |
|
IntraLink
Premium,MVM
join:2002-08-14
Utah Valley
| reply to Believer
You either need to subnet like suggested or proxy-arp.
Do this:
Remove the 16.133 from the ether1 interface.
Put the 16.133 on the ether3 interface.
Change the ARP setting on the ether1 interface to proxy-arp.
That should work.
Be aware that any subnet on your MT router will be responded to on the public interface because of the proxy-arp. |
|
ponline
join:2004-03-04
presheva
| reply to goldenspacek
If you want to route you have to split your subnet on smaller subnets.
You can always do NAT 1:1 so you dont have to split your adress space.
The clients that want public IP adress, you asign that public adress to your ether1 and than do a 1:1 NAT to his nated adress. |
|
