Dear friends,

I have changed my ISP and have a problem with configuring my RouterOS installation.

The previous ISP provided only one external (1) IP address - thus I used SRC NAT with MASQUERADE all was fine.

However my new ISP gave me one internal (1) IP address and a range of IP addresses that are public (e.g. one (1) 87.199.20.70/30 and then a range of IP addresses which are pingable from the Internet - e.g. 217.122.1.50/29).

I am baffled how to setup this type of connection where I have 2 different subnets and would be grateful for any and all tips

Thank you very much in advance for all help

john

/ip address
add address=87.199.20.70/30 disabled=no interface=ether1
add address=217.122.1.49/29 disabled=no interface=ether2 
/ip route
add  dst-address=0.0.0.0/0 gateway=87.199.20.69

Thanks a lot And then for my local addresses to have internet access (e.g. clients in the 192.168.1.1/24 subnet) I should assign 192.168.1.1 to ether3 and create a SRCNAT/MASQUERADE rule in firewall?

The suggestion to put the /29 on LAN2 would mean that the IPs would be available directly on LAN2

ie a machine connected to LAN2 could be assigned an address in that range and not need any NAT.

If you want to use NAT instead then you would assign all IPs to the WAN interface, and then add specific srcnat rules to use them eg:

Code: Select all

/ip address add address=217.122.1.49/29 disabled=no interface=ether1 
/ip address add address=217.122.1.50/29 disabled=no interface=ether1 
/ip address add address=217.122.1.51/29 disabled=no interface=ether1 

/ip firewall nat add action=src-nat chain=srcnat comment="192.168.1.10 goes out on .50" out-interface=ether1 src-address=192.168.1.10 to-addresses=217.122.1.50

/ip firewall nat add action=masquerade chain=srcnat comment="Masquerade everything else" out-interface=ether1

Hope that helps

Nick.