Page 1 of 1
How to remove one or more NAT layers from my internal network?
Posted: Mon May 29, 2023 7:52 pm
by Aymen1986
I have RB2011 connected through wan port to ONT , and users can access the internet using NAT , so can i allow users accessing internet without using NAT
Re: Accessing internet without NAT?
Posted: Mon May 29, 2023 8:06 pm
by mkx
If you have only one public IP address available, then only one device can communicate directly with internet (others can do it through the first one and NAT is the name of the game). If you have multiple public IP addresses available, then yes, as many devices can communicate with internet without NAT.
It's probably a good idea to have a firewall between internet and your devices. But if you do introduce stateful firewall, then performing NAT by that box is almost free of charge as most tasks (connection tracking) are done already.
Re: Accessing internet without NAT?
Posted: Mon May 29, 2023 9:02 pm
by anav
You can also touch your tongue on both battery terminals.................
Re: Accessing internet without NAT?
Posted: Mon May 29, 2023 10:20 pm
by Buckeye
@Aymen1986 It seems you don't understand the purpose of NAT or the difference between private and public ip addresses.
Watch this layman's guide to NAT.
How Network Address Translation Works by PieterExplainsTech (a 2012 video, but still one of the best layman's explanation I am aware of).
Re: Accessing internet without NAT?
Posted: Wed May 31, 2023 7:23 pm
by Aymen1986
@Aymen1986 It seems you don't understand the purpose of NAT or the difference between private and public ip addresses.
Watch this layman's guide to NAT.
How Network Address Translation Works by PieterExplainsTech (a 2012 video, but still one of the best layman's explanation I am aware of).
i mean , i don't want to use double NAT , I know the principle of NAT , but in my case there're two NAT, the first one is the ONT (Router) and the second one is Mikrotik router
Re: Accessing internet without NAT?
Posted: Wed May 31, 2023 7:32 pm
by Amm0
Three choices:
1. Reconfigured ONT/router - e.g. directly connect Mikrotik to the ONT, or if ONT+router is integrated look for some "passthrough" mode
2. Setup the Mikrotik as a bridge & just use the ISP's router for NAT
3. Use a NAT "netmap" to map your Miktrotik IP /24 range to the /24 subnet assigned by ISP's ONT/router
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 12:07 pm
by Aymen1986
Three choices:
1. Reconfigured ONT/router - e.g. directly connect Mikrotik to the ONT, or if ONT+router is integrated look for some "passthrough" mode
2. Setup the Mikrotik as a bridge & just use the ISP's router for NAT
3. Use a NAT "netmap" to map your Miktrotik IP /24 range to the /24 subnet assigned by ISP's ONT/router
could you help me doing the second and third choices , or give me som resources ?
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 12:21 pm
by Aymen1986
Three choices:
1. Reconfigured ONT/router - e.g. directly connect Mikrotik to the ONT, or if ONT+router is integrated look for some "passthrough" mode
2. Setup the Mikrotik as a bridge & just use the ISP's router for NAT
3. Use a NAT "netmap" to map your Miktrotik IP /24 range to the /24 subnet assigned by ISP's ONT/router
NOTE : ONT WAN port has a dynamic public IP address not a Static.
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 1:03 pm
by Znevna
Easy fix, remove the ancient rb2011 from the picture and allow your users to use the internet.
Or configure it as a switch if you need a fancy switch.
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 1:50 pm
by Aymen1986
Easy fix, remove the ancient rb2011 from the picture and allow your users to use the internet.
Or configure it as a switch if you need a fancy switch.
RB2011 is necessary to control the bandwidth,login, .....
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 2:23 pm
by rextended
Easy fix, remove the ancient rb2011 from the picture and allow your users to use the internet.
Or configure it as a switch if you need a fancy switch.
RB2011 is necessary to control the bandwidth,login, .....
Already from the description, the initial question, and the image you have always had confused ideas.
Or maybe you have it clear and you confuse ours because you can't explain yourself.
Give a detailed description of what the RB2011 does and also the characteristics of what the ONT can do instead of ellipsisā¦
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 4:08 pm
by pe1chl
Configure and use IPv6, then you get many addresses that you can use without NAT.
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 4:38 pm
by rextended
Configure and use IPv6, then you get many addresses that you can use without NAT.
sorry, not all ISPs have someone who at least knows what IPv6 is...
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 5:23 pm
by Amm0
I guess I'm lost. Is the ONT is giving a dynamic public IP? e.g. not 192.168.x.y, 10.x.y.z, etc
I was under the impression there was a "double NAT" and that's what I'm not hearing... So...
Give a detailed description of what the RB2011 does and also the characteristics of what the ONT can do instead of ellipsisā¦
Yup that's needed here.
Otherwise, QuickSet would seem to handle this case (e.g. ether1 to ONT, ether2-5 LAN, with a dhcp client on ether1, dhcp server on bridge, masquerade NAT rule).
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 5:26 pm
by rextended
Yes, but do not eliminate the
Double NAT 
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 5:44 pm
by Amm0
Yes, but do not eliminate the
Double NAT
Well, It's the ONT that's the mystery here. If the ONT is giving out a real public IP (even dynamically via DHCP), there would be no double NAT
.
My thought is if ONT was handing out a private subnet, that you can use a netmap, instead of masquerade. Still be double NAT in a sense, but at least the Mikrotik LAN IP align with the ISP router's LAN.
But if the ISP is really giving out a private, non-public IP address, or is some "CGNAT". No config is going to remove the double NAT.
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 5:48 pm
by rextended
Ahhhh on the last case are
Triple NAT!!!
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 5:59 pm
by wiseroute
probably the OP just wanted to know whether he/she can do bridge mode on the isp supplied ont box to the MT router, so that OP can have many MT features for his/her network - that is why the OP asked how to not doing double NAT.
happened occasionally because the subscribers think isp supplied modem/router/combo boxes aren't feature rich, nor aren't flexible for their needs.
now, the question to the OP - what/which ont did your isp lend you? how should forum members help you without knowing your ont box?
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 6:11 pm
by rextended
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 6:44 pm
by Znevna
And.. what bandwidth control can you possibly make using the weak, old and slow CPU inside the RB2011? Putting each user on one of the 100Mbps interfaces? sure.. that's one way to do bandwidth control...
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 7:05 pm
by Aymen1986
My Network is configured as shown:
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 7:15 pm
by Aymen1986
probably the OP just wanted to know whether he/she can do bridge mode on the isp supplied ont box to the MT router, so that OP can have many MT features for his/her network - that is why the OP asked how to not doing double NAT.
happened occasionally because the subscribers think isp supplied modem/router/combo boxes aren't feature rich, nor aren't flexible for their needs.
now, the question to the OP - what/which ont did your isp lend you? how should forum members help you without knowing your ont box?
Yes i can do a Bridge mode on ONT
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 7:36 pm
by wiseroute
hello aymen1986,
[*]
Yes i can do a Bridge mode on ONT
[*]
are you sure?
what/which type is your ont box? we don't have any ideas.
before you change any config in it - make sure you write down all the config ie. user name, password, isp account id, channel id, protocols for your internet link (pppoe, ipoe or anything) etc. it is important - so that you won't bothering your isp call center. so write those config.
it seems that your ont connected to MT lan port? 192.168.88.0/24 is MT default DHCP subnet.
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 7:43 pm
by Aymen1986
hello aymen1986,
[*]
Yes i can do a Bridge mode on ONT
[*]
are you sure?
what/which type is your ont box? we don't have any ideas.
before you change any config in it - make sure you write down all the config ie. user name, password, isp account id, channel id, protocols for your internet link (pppoe, ipoe or anything) etc. it is important - so that you won't bothering your isp call center. so write those config.
ZTE F660
it seems that your ont connected to MT lan port? 192.168.88.0/24 is MT default DHCP subnet.
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 7:45 pm
by Aymen1986
it seems that your ont connected to MT lan port? 192.168.88.0/24 is MT default DHCP subnet.
No Just range , i changed ONT Default ip to that range .
MT DHCP is 10.0.1.11-10.0.1.20
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 7:54 pm
by wiseroute
this one?
https://www.zte.com.cn/global/products/ ... -F660.html
[*]
No Just range , i changed ONT Default ip to that range .
MT DHCP is 10.0.1.11-10.0.1.20
[*]
ok. do you know your zte ont default ip? (just in case you need to hard reset to factory settings)
disclaimer : you will do this setting at your own risk.
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 8:06 pm
by Aymen1986
this one?
https://www.zte.com.cn/global/products/ ... -F660.html
[*]
No Just range , i changed ONT Default ip to that range .
MT DHCP is 10.0.1.11-10.0.1.20
[*]
ok. do you know your zte ont default ip? (just in case you need to hard reset to factory settings)
disclaimer : you will do this setting at your own risk.
Ok bro . Default ZTE IP is 192.168.1.1
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 8:20 pm
by rextended
Can, please, the original author of this topic @Aymen1986 change the title of the topic (editing first post) from Accessing internet without NAT?
to more adequate
How to remove one or more NAT layers from my internal network?
Thanks...
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 8:41 pm
by Aymen1986
Can, please, the original author of this topic @Aymen1986 change the title of the topic (editing first post) from Accessing internet without NAT?
to more adequate
How to remove one or more NAT layers from my internal network?
Thanks...
done
Re: Accessing internet without NAT?
Posted: Thu Jun 01, 2023 8:51 pm
by rextended
Can, please, the original author of this topic @Aymen1986 change the title of the topic (editing first post) from Accessing internet without NAT?
to more adequate
How to remove one or more NAT layers from my internal network?
Thanks...
done
re-thanks
Re: Accessing internet without NAT?
Posted: Fri Jun 02, 2023 2:39 pm
by Aymen1986
this one?
https://www.zte.com.cn/global/products/ ... -F660.html
[*]
No Just range , i changed ONT Default ip to that range .
MT DHCP is 10.0.1.11-10.0.1.20
[*]
ok. do you know your zte ont default ip? (just in case you need to hard reset to factory settings)
disclaimer : you will do this setting at your own risk.
Ok bro ,I'm waiting for those settings .
Re: How to remove one or more NAT layers from my internal network?
Posted: Fri Jun 02, 2023 3:28 pm
by anav
Ive never seen so many experts let a thread go off the rails..... this is fun watching........
That cat looks like he had a TRIPLE expresso
sorry, not all ISPs have someone who at least knows what IPv6 is...