Hello,

This is the first time I am setting up a MikroTik router like this:

I ordered a block of 16 public IP addresses from our ISP. This is the information they gave me. NOTE the IP addresses have been altered for example.

How can I set up the MikroTik router with these addresses properly? I have only done work with NAT. Never with routing between two IPv4 networks. The ISP said I would need a 'business router' like a Cisco systems (not a Linksys type router). I would like to use MikroTik router. I do not need NAT on a port, but it would be nice if I could. But I just need this to work as soon as possible.

Info:

(WAN info)

Static IP:
71.165.180.199

Gateway: 71.165.180.193
Netmask: 255.255.255.240
Primary Name server: 4.2.2.1
Secondary Name server: 4.2.2.2

(CIDR info)

Subnet 180.185.160.208/28
NetMask 255.255.255.240
Number of hosts 13
Suggested Default Gateway 180.185.160.209
First Useable 180.185.160.210
Last Useable 180.185.160.222
Broadcast 180.185.160.223

It appears that the ISP will be routing the 180.185.160.208/28 block to you over the wan static ip 71.165.180.199

If this is the case, just setup PPPoE server on your client interface and handout the IP block 180.185.160.208/28 directly to your clients statically or dynamically using IP Pool 180.185.160.208-180.185.160.223. Then have your clients dial-in with a PPPoE Client.

This way, you can make us of the entire 16 IP addresses without any wastage.

For further reading, see http://wiki.mikrotik.com/wiki/Manual:Interface/PPPoE

I don't need to use PPPoE. I will assign the IP addresses static-ly. Also how do I properly eliminate NAT and make sure that traffic from the internet is allowed to come into all the CIDR block IP addresses? (In case we want to run web servers or other services on those IP addresses).

It appears that the ISP will be routing the 180.185.160.208/28 block to you over the wan static ip 71.165.180.199

If this is the case, just setup PPPoE server on your client interface and handout the IP block 180.185.160.208/28 directly to your clients statically or dynamically using IP Pool 180.185.160.208-180.185.160.223. Then have your clients dial-in with a PPPoE Client.

This way, you can make us of the entire 16 IP addresses without any wastage.

For further reading, see http://wiki.mikrotik.com/wiki/Manual:Interface/PPPoE

You can assign the IP statically without using PPPoE.

Setup the interface facing your client to use IP address 180.185.160.209/28
Modify your NAT rule to exclude source ip 180.185.160.208/28
Then assign statically to your clients:
IP Addresses 180.185.160.210 - 180.185.160.222
NetMask 255.255.255.240
Default Gateway 180.185.160.209

What is the purpose of excluding source IP 180.185.160.208/28?

Modify your NAT rule to exclude source ip 180.185.160.208/28

Code: Select all

add action=masquerade chain=srcnat src-address=!180.185.160.208/28 out-interface=wan

What is the purpose of excluding source IP 180.185.160.208/28?

Modify your NAT rule to exclude source ip 180.185.160.208/28

Code: Select all

add action=masquerade chain=srcnat src-address=!180.185.160.208/28 out-interface=wan

You cannot use first or last Ip address of a subnet. You cannot use .208 or .223 So out of your 16 addresses you only can use 14. Gateway Ip address included.

The reason to exclude the 180.185.160.208/28 block from your masquerade rule is to prevent the router from rewriting those addresses (as well as any private IP addresses you currently have and plan to keep using) to your WAN IP.

If you have the rule without the exclusion: Then ANY traffic that goes through your router and out the WAN interface will get rewritten by NAT to look like it's coming from 71.165.180.199 (your WAN IP). With the exclusion, you make sure that any new traffic coming out from one of those IPs maintains its original source address (e.g. 180.185.160.210).

If you don't have any private IP addresses on the "internal" side of your router, then you don't need a src-nat rule at all. Otherwise, since you do need the src-nat rule in order to maintain Internet access for the private IP LAN, you would need to make sure you exclude the new Public Static IPs from the src-nat rule, so they don't get rewritten.

Please share your mikrotik setting for lan subnet of 16 ips because i also got 16 public ips with wan ip from isp, i do not know how to setup on mikrotik. how do you setup lan setup on mikrotik, please help me

ip address add address=180.185.160.210/28 interface=lan (whichever interface you want to distribute from)

ip route add dst=180.185.160.208/28 gateway=71.165.180.193

your isp also has to route the ip address block.

that should do the trick.

thanks for helping me but i still in trouble to configure this
How can I set up the mikrotik hotspot with theses addresses properly, information as mention below:
WAN IP: 186.165.180.198
Gatway: 186.165.180.199
Subnet mask: : 255.255.255.252
-----------------------------------
16 public ips: 180.185.160.208 – 180.185.160.223
Gateway: 180.185.160.209
NetMask 255.255.255.240
--------------------------------
And I want to use 192.168.88.1/24 for hotspot, please help me to setup this setting on mikrotik router
Is this right:
ip address add address=186.165.180.198/24 interface=wan
ip address add address=180.185.160.208/28 interface=lan
what should be gateway?
now how do i setup Hotspot with private ips?
please i need help with this