Page 1 of 1

Bridge or Router Mode - does it work like this? One ISP with 5 fixed IP addresses and two independent LANs.

Posted: Fri Feb 18, 2022 10:05 am
by HPLearner
Dear experts,
can you please help me and see if it is correct?

One (TEST) ISP with 5 fixed IP addresses and two independent LANs. How do I set up the Mikrotik?

here is the test setup IP-Range=192.168.68.48/29
192.168.68.48: Network IP
192.168.68.49: Network transfer point (ISP)
192.168.68.50-54: 5 IPs for the clients
192.168.68.55: Broadcast

0. Mikrotik reset and no configuration
1. ISP on ether1_WAN

2. Mikrotik in bridge mode ---> or router mode??

3. create bridge1

4. IP, addresses:
4.1 192.168.68.50/29 to ether1_WAN
4.2 192.168.68.51/29 to ether2_LAN1
4.3 192.168.68.52/29 to ether3_LAN2

5. Bridge, Ports:
5.1 Interface: ether1_WAN to Bridge:bridge1
5.2 Interface: ether2_LAN1 to Bridge:bridge1
5.1 Interface: ether3_LAN2 to Bridge:bridge1

6. IP, Firewall, NAT
chain=srcnat out-interface=bridge1 action=masquerade

Overview Microtik Ports:
Ether1: ISP
Ether2 -> independet Firewall1 with 192.168.68.53 -> LAN1
Ether3 -> independet Firewall2 with 192.168.68.54 -> LAN2

I would like to use two separate firewalls (2 * hardware).

Would that work like this?
Thanks and regards

Re: Bridge or Router Mode - does it work like this? One ISP with 5 fixed IP addresses and two independent LANs.

Posted: Fri Feb 18, 2022 8:02 pm
by Sob
That doesn't look right. If you get /29 from ISP, where one address is assigned to ISP's router as your gateway, and you want to give the rest of addresses to different devices, then simplest way is to not use any router at all, switch would be enough. If you connect bridged router, that's by default as switch, fully transparent, so those addresses assigned to different bridged ports don't make sense. You may want one or more address for router itself, those would be all assigned to bridge interface. Other devices that should get addresses directly don't need any other config on router.