How to configure LAN IP Pool

dhanghy · Tue Jun 29, 2021 5:44 pm

Hi,
I take a 100mbps 1:1 lease line connection for our organization, The ISP give us one WAN ip and five static LAN IP Pool, So please help me how to configure LAN IP pool in my mikrotik router ccr1009-7g-1c-1s+.
I want to use all five lan ip with five different computer.
Thanks in advance.

anav · Wed Jun 30, 2021 2:52 pm

I have no idea what you mean.]
Do you mean they gave you 6 WANIPs, 5 WANIPs, One main WANIP and 5 more WANIPs....
There is no such thing as LAN IPs from the ISP!

biomesh · Wed Jun 30, 2021 4:05 pm

My guess is that there is a block of static IPs. I would guess that you would need to use dst-nat after adding the IP address to your router.

https://help.mikrotik.com/docs/display/ ... inationNAT

rextended · Wed Jun 30, 2021 4:20 pm

>>>100mbps 1:1 lease line connection<<<
100Mbp/s full duplex?

>>>The ISP give us one WAN IP<<<
for example 100.64.1.2/30 ?
or like 100.64.1.1/31 ?
or like 100.64.1.6/32 ?

>>>and five static LAN IP Pool<<<
5? why 5 and not "8" or "6"?
for example 166.6.6.0/29 (.0 .... .7)?
or 166.6.6.0/29 when 166.6.6.1 must be used on Routerboard and from .2 to .6 on PCs?
but for 5...???

>>>So please help me how to configure LAN IP pool<<<
>>>I want to use all five lan ip with five different computer<<<
I have a better idea for you, leave all with standard DHCP 192.168.88.0/24
and add some static DHCP server leases with Public IP on PC where is needed a Public IP

dhanghy · Thu Jul 01, 2021 6:51 am

my ip addresses are as follows ....

WAN IP POOL- 115.242.20x.10x/30
I am using now....
IP :- 115.242.20x.10x
Subnet mask :- 255.255.255.252
Default gateway:- 115.242.20x.10x
Preferred DNS :- 8.8.8.8

LAN IP POOL- 115.243.14x.15x/29
Lan ip are
115.243.14x.15x
115.243.14x.15x
115.243.14x.15x
115.243.14x.15x
115.243.14x.15x
115.243.14x.15x
subnet : 255.255.255.248
gateway : 115.243.14x.15x

I can use the wan ip in any router and also directly in my computer and i can browse the internet with the wan ip but lan ip are cannot use directly. ISP said that to use the lan ip pool i need either cisco or mikrotik router. i purchased mikrotik but how to configure the lan ip pool. now i am using the wan ip only for the internet.

rextended · Thu Jul 01, 2021 9:50 am

you have "anonimized" the end... but the end count, not the start, better anonymize the start or we go on confusion.

put on local LAN bridge
115.243.14x.151/29

on PC where must go the public IP:
IP 115.243.14x.152 (/29)
subnet 255.255.255.248
gateway
115.243.14x.151
DNS
1.1.1.1

done.

At this point must be checked the firewall rules and well protected the PC or on 2/3 hours your PC are useless zombie machines.....

qadir52786 · Sat Mar 23, 2024 7:15 pm

Any solution to this? pease share configuration

my ip addresses are as follows ....

WAN IP POOL- 115.242.20x.10x/30
I am using now....
IP :- 115.242.20x.10x
Subnet mask :- 255.255.255.252
Default gateway:- 115.242.20x.10x
Preferred DNS :- 8.8.8.8

LAN IP POOL- 115.243.14x.15x/29
Lan ip are
115.243.14x.15x
115.243.14x.15x
115.243.14x.15x
115.243.14x.15x
115.243.14x.15x
115.243.14x.15x
subnet : 255.255.255.248
gateway : 115.243.14x.15x

I can use the wan ip in any router and also directly in my computer and i can browse the internet with the wan ip but lan ip are cannot use directly. ISP said that to use the lan ip pool i need either cisco or mikrotik router. i purchased mikrotik but how to configure the lan ip pool. now i am using the wan ip only for the internet.

Amm0 · Sat Mar 23, 2024 8:53 pm

So do you also have two /30 and /29 [public?] subnets from your ISP?
Likely better if you wrote up your problem in a new post.

This "LAN IP Pool" is confusing term. When a customer does not have BGP, I've seen /30 used as route point at a customer site for any additional /29+ subnets assigned, that then are routed via the "main" /30 gateway. But equally possible multiple subnet are on same bridge (multihomed) from ISP & with each subnet having there own gateway. So specifics matter.

qadir52786 · Tue Mar 26, 2024 11:47 am

they had given us VLAN 1530
Wan ip CE E 117.x.x.223/29

Lan Pool 117.x.x.232/29

i want to assign Lan pool ips directly to my servers

Please suggest

loloski · Tue Mar 26, 2024 12:22 pm

Substitute to your real subnet

1.png

[admin@R1] > export 
# 2024-03-26 10:18:18 by RouterOS 7.14.1
# software id = 
#
/interface vlan
add interface=ether1 name=VLAN1530 vlan-id=1530
/port
set 0 name=serial0
/ip address
add address=117.1.1.218/29 interface=VLAN1530 network=117.1.1.216
add address=117.2.2.233/29 interface=ether2 network=117.2.2.232
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=117.1.1.217 routing-table=main \
    suppress-hw-offload=no
/system identity
set name=R1
/system note
set show-at-login=no
/tool romon
set enabled=yes
[admin@R1] >

2.png

qadir52786 · Sat Mar 30, 2024 11:49 am

So now i had connect Lease line cable in port 1 and configure 117.223.181.233/29 as wan

now i have pool of 117.223.181.233 - 117.223.181.238
how can i configure other IPs

i want to directly assign ip address, eg 117.223.181.234, to specific system

how could i able to achieve that task?

qadir52786 · Mon Apr 01, 2024 4:37 pm

Please help

Amm0 · Mon Apr 01, 2024 5:27 pm

Few options:
1. put the /29 WAN on bridge, either a new one or as a tagged VLAN on existing one, then connect assign bridge ports to use the ISP bridge/VLAN - e.g. switching
2. assign all the IP to the router, and then use a NAT rule for action=netmap between a LAN IP and desired public IP - e.g. one-to-one NAT
3. longest prefix matches, so can use /32 routes to the host's interface, but the other routes need to specified on client devices and/or ARP static needed. - e.g. routing

qadir52786 · Tue Apr 02, 2024 9:21 am

if you can help me with the configuration,commands that will be really helpfull

Amm0 · Tue Apr 02, 2024 8:06 pm

Perhaps the better question is do the public IPs need to go through the firewall (option 2 or 3)?

Or, do you want the computer with public IPs to be directly on the internet without the Mikrotik firewall (option 1).

@qadir52786, I recommend you open a new topic with a diagram, description, and/or any existing config. The "commands" really do depend on what you want to do.

emunt6 · Tue Apr 02, 2024 8:22 pm

Hi!
I think he has an "transit" subnet , where the other subnet/subnets is routed through to his main ip.

incoming-traffic:
ISP-ROUTER ----> CORP.-ROUTER ----> CORP.SUBNET

outgoing-traffic:
ISP-ROUTER <---- CORP.-ROUTER <---- CORP.SUBNET

In this setup, the "CORP.SUBNET" doesn't need to see the L2 between the ISP-ROUTER, just the CORP.ROUTER main's ip,
so the CORP.SUBNET can be in different interface/VLAN.

( EXMAPLE ) 
Transit subnet ( /29  - because of the VRRP )
ISP-ROUTER :  x.x.x.1 /29
ISP-ROUTER : route-add x.x.x.x /24 via x.x.x.2 /29
CORP.-ROUTER: x.x.x.2 /29
CORP.-ROUTER: route-add default via x.x.x.1 /29

This setup is a "standard" solution, ISP can provide as many public subnet as the customer wants.

So the answer to the question, you don't need to add any NAT rule, just add forward rule and route, where your public subnet is located ( in this case the first ip is used from the public subnet as the default gw for the others)

CORP.-ROUTER - config
-A forward -S x.x.x.x /24 -j ACCEPT
-A forward -D x.x.x.x /24 -j ACCEPT
...
eth1 ip address ( TRANSIT subnet:  x.x.x.2 /29 )
eth2 ip address ( PUBLIC IPV4 pool subnet: x.x.x.1 /24 )
...
MACHINE-1 ip address x.x.x.10/24 gw x.x.x.1/24
MACHINE-2 ip address x.x.x.11/24 gw x.x.x.1/24
...

How to configure LAN IP Pool

How to configure LAN IP Pool

Re: How to configure LAN IP Pool

Re: How to configure LAN IP Pool

Re: How to configure LAN IP Pool

Re: How to configure LAN IP Pool

Re: How to configure LAN IP Pool

Re: How to configure LAN IP Pool

Re: How to configure LAN IP Pool

Re: How to configure LAN IP Pool

Re: How to configure LAN IP Pool

Re: How to configure LAN IP Pool

Re: How to configure LAN IP Pool

Re: How to configure LAN IP Pool

Re: How to configure LAN IP Pool

Re: How to configure LAN IP Pool

Re: How to configure LAN IP Pool

Who is online