Fri Sep 24, 2010 2:40 am
Firewall Router A:
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat comment="" disabled=no src-address=\
192.168.3.0/24
add action=masquerade chain=srcnat comment="" disabled=no src-address=\
192.168.2.0/24
add action=dst-nat chain=dstnat comment="" disabled=no dst-address=\
38.102.xx.1 to-addresses=192.168.2.246
add action=accept chain=srcnat comment="" disabled=no src-address=\
38.102.xx.0/25
B - blackhole, U - unreachable, P - prohibit
0 A S dst-address=0.0.0.0/0 gateway=38.104.xxx.xxx
gateway-status=38.104.xxx.xxx reachable ether1 distance=1 scope=30
target-scope=10
1 A S dst-address=38.102.xxx.0/25 gateway=192.168.2.246
gateway-status=192.168.2.246 reachable ether2 distance=2 scope=30
target-scope=10
2 ADC dst-address=38.104.xxx.xx/30 pref-src=38.104.xxx.xx gateway=ether1
gateway-status=ether1 reachable distance=0 scope=10
3 ADC dst-address=192.168.2.0/24 pref-src=192.168.2.1 gateway=ether2
gateway-status=ether2 reachable distance=0 scope=10
4 ADC dst-address=192.168.3.0/24 pref-src=192.168.3.1 gateway=ether3
gateway-status=ether3 reachable distance=0 scope=10
Router B:
0 ADS dst-address=0.0.0.0/0 gateway=192.168.2.1
gateway-status=192.168.2.1 reachable ether1 distance=0 scope=30
target-scope=10
1 S dst-address=0.0.0.0/0 gateway=ether1 gateway-status=ether1 reachable
distance=1 scope=30 target-scope=10
2 ADC dst-address=38.102.xxx.1/32 pref-src=38.102.xxx.2 gateway=ether2
gateway-status=ether2 reachable distance=0 scope=10
3 ADC dst-address=192.168.1.0/24 pref-src=192.168.1.1 gateway=ether9
gateway-status=ether9 unreachable distance=0 scope=200
4 ADC dst-address=192.168.2.0/24 pref-src=192.168.2.246 gateway=ether1
gateway-status=ether1 reachable distance=0 scope=10
5 ADC dst-address=192.168.103.0/24 pref-src=192.168.103.1 gateway=ether3
gateway-status=ether3 reachable distance=0 scope=10
6 ADC dst-address=192.168.104.0/24 pref-src=192.168.104.1 gateway=ether4
Too many rules on the router B that are not associated to the 38.102.xxx.xxx addresses
LIke I said before, I want router A to talk to the public i.p. that are managed on router B.