Community discussions

MikroTik App
 
maxfava
Member Candidate
Member Candidate
Topic Author
Posts: 225
Joined: Mon Oct 17, 2005 12:30 am

Mapping 1:1 address

Mon Feb 20, 2006 4:50 pm

Hi,
I have read the manual on this page http://www.mikrotik.com/docs/ros/2.9/ip ... t#6.36.3.4

Now I have this scenario.
I want to map 256 external address assigned by the isp to 256 internal local address.
In this way each internal device is connetectd directly to external internet.

My question is
if I have 256 address asigned by the isp do I need to add these address to the NIC-WAN used?

bye
Max
 
User avatar
andrewluck
Forum Veteran
Forum Veteran
Posts: 700
Joined: Fri May 28, 2004 9:05 pm
Location: Norfolk, UK

Mon Feb 20, 2006 6:05 pm

Yes

Regards

Andrew
 
User avatar
jager
Trainer
Trainer
Posts: 295
Joined: Mon Oct 31, 2005 2:44 am
Location: Germany
Contact:

Mon Feb 20, 2006 7:41 pm

maxfava, why are you complicating your own life? :)
If you have /24 that you want to be used by your customers, GIVE THEM public IP`s :)
 
dot-bot
Member Candidate
Member Candidate
Posts: 164
Joined: Tue Oct 11, 2005 7:05 pm

Mon Feb 20, 2006 9:50 pm

Yes, your router should have the 256 IP addresses on the Internet interface of the router.

But with MikroTik RouterOS being so poerful, you could do it the ordinary way and directly route the Internet and your LAN. This is if your LAN has the internet real IP addresses set. If you don't want to reconfig all puters in the LAN and set them IP addresses than what you're trying to do seems right. Good luck :roll:

BUT Couldn't MT reply to arp requests without having to set all those IP addresses ? And together with both-ways NAT to be able to do the task ?

Set up a Bridge, in Bridge->NAT - set up an arp-reply with routers MAC for all IP addresses (or the range if possible). Not sure if this will work... don't know much about ARP and how the hell MT handles it.

AArgh why why why why why why must it be so hard and so inhumane this GUI or whatever it can be called - winbox and console... There is not enough info wich does what., not even with the manual, MT is way too powerful but maybe only the military are entitled to know how to use it.
 
cibernet
Long time Member
Long time Member
Posts: 610
Joined: Fri Jan 28, 2005 7:22 pm
Location: Marcos Juárez, Córdoba, Argentina
Contact:

Mon Feb 20, 2006 11:02 pm

Just use bridge....
 
User avatar
jager
Trainer
Trainer
Posts: 295
Joined: Mon Oct 31, 2005 2:44 am
Location: Germany
Contact:

Tue Feb 21, 2006 2:13 am

... MT is way too powerful but maybe only the military are entitled to know how to use it.
Hey, after all, it`s not rocket science :)
 
cibernet
Long time Member
Long time Member
Posts: 610
Joined: Fri Jan 28, 2005 7:22 pm
Location: Marcos Juárez, Córdoba, Argentina
Contact:

Tue Feb 21, 2006 2:22 am

... MT is way too powerful but maybe only the military are entitled to know how to use it.
Hey, after all, it`s not rocket science :)
:lol:
 
maxfava
Member Candidate
Member Candidate
Topic Author
Posts: 225
Joined: Mon Oct 17, 2005 12:30 am

Fri Feb 24, 2006 12:42 pm

But with MikroTik RouterOS being so poerful, you could do it the ordinary way and directly route the Internet and your LAN. This is if your LAN has the internet real IP addresses set. If you don't want to reconfig all puters in the LAN and set them IP addresses than what you're trying to do seems right. Good luck
Here the description of my network setup that I want to design. (the new hardware will arrive next week)

INTERNET 256 Public IP ----> HDSL ROUTER ---> MK Router ---> PPTP clients.

I found other examples of traffic shape on the manual, but I need to try it in real condition.
I need to provide external IP to client because I 'm an WISP amd I do not want limit with NAT or hear my customers "I have low ID" plus I cannot use some software. On the other hand I know that the customers will be not protect by my infrastrucuture.
 
cibernet
Long time Member
Long time Member
Posts: 610
Joined: Fri Jan 28, 2005 7:22 pm
Location: Marcos Juárez, Córdoba, Argentina
Contact:

Fri Feb 24, 2006 4:22 pm

But with MikroTik RouterOS being so poerful, you could do it the ordinary way and directly route the Internet and your LAN. This is if your LAN has the internet real IP addresses set. If you don't want to reconfig all puters in the LAN and set them IP addresses than what you're trying to do seems right. Good luck
Here the description of my network setup that I want to design. (the new hardware will arrive next week)

INTERNET 256 Public IP ----> HDSL ROUTER ---> MK Router ---> PPTP clients.

I found other examples of traffic shape on the manual, but I need to try it in real condition.
I need to provide external IP to client because I 'm an WISP amd I do not want limit with NAT or hear my customers "I have low ID" plus I cannot use some software. On the other hand I know that the customers will be not protect by my infrastrucuture.
You can use bridge, and simple queues for that


Regrads
 
maxfava
Member Candidate
Member Candidate
Topic Author
Posts: 225
Joined: Mon Oct 17, 2005 12:30 am

Sun Feb 26, 2006 3:41 am

thank you for the answer,
but I not found nothing about bridge between pptp interfaces and the real ehternet network.
Another think is If I use traffic shape can I redirect some protocol to a specific getaway?

Max
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1768
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Mon Feb 27, 2006 9:07 am

To hide 256 local IPs behind 256 Public IPs simple use 2 firewall NAT rules

1) chain src-nat, action=netmap
2) chain dst-nat, action=netmap
 
maxfava
Member Candidate
Member Candidate
Topic Author
Posts: 225
Joined: Mon Oct 17, 2005 12:30 am

Sat Mar 04, 2006 2:08 am

Ok I tried and it is perfect.
Only one issue I need to add 256 IP and I have not found a procedure to add multiple IP address to an interface. Is there a way?
 
dot-bot
Member Candidate
Member Candidate
Posts: 164
Joined: Tue Oct 11, 2005 7:05 pm

Sun Mar 05, 2006 6:09 pm

Scripting in MT,... scripting on anoter puter that talks to MT via telnet...
 
maxfava
Member Candidate
Member Candidate
Topic Author
Posts: 225
Joined: Mon Oct 17, 2005 12:30 am

Mon Mar 06, 2006 12:46 am

I have discovered another issue.
:cry:

OK let me explain the configuration:

WAN 192.168.0.1/24
WIFI 192.167.1.1/24
PPTP LOCAL 192.168.0.21-192.168.0.240
PPTP REMOTE 192.166.2.21-192.166.2.240

on firewall NAT I set 1:1 between 192.168.0.X to 192.166.2.X

this works for 2 connections but after there is no connection between the PPTP user and WAN.
this is valid workaround because I do not need to insert manually ip on the WAN port. but why this not works for all IP?
I'm crazy
 
maxfava
Member Candidate
Member Candidate
Topic Author
Posts: 225
Joined: Mon Oct 17, 2005 12:30 am

Mon Mar 06, 2006 11:59 pm

OK I found the solution.
I set the WAN interface as proxy ARP and all works fine.

Only one think is that I cannot route the PPTP client to the internal NET

Who is online

Users browsing this forum: Bing [Bot], hoba, RaresC95, sk0003, smirgo, snagles and 52 guests