Hi,

I just have a simple networking question... Probably a lot of people out there can tell me how to do this correctly... I want to make a mikrotik box my Border router, forcing all other traffic in my network to go through it (but not as a transparent bridge). I think i'm doing it correctly but i am getting Redirect Hops, which make feel uneasy...

My isp assigns me the following segment:

200.100.100.64/29
Network 200.100.100.64
Bcast: 200.100.100.71
GW: 200.100.100.70

I currently have the utp with the public ips i get from my isp, connected to a vlan in a switch.

In the same vlan i have a Mikrotik box, which will be my Border router.
It has ip 200.100.100.65/29 and gw 200.100.100.70.

In that same vlan i also have a linux box with ip 200.100.100.69/29 and 200.100.100.70 as well.

Thus, in the linux box i changed my gw to 200.100.100.65 (the mikrotik border router). I get routed fine and i still can get out to the inet, but pinging anywhere always gets these ICMP redirect hops:

From 200.100.100.65: icmp_seq=8 Redirect Host(New nexthop: 200.68.75.70)

Is what i'm doing correct?
I know i could also do dnat, but I want my linux box to have public ip addresses.

What is the correct way to set up ip addresses and gw for boxes behind a border router?

Thanks,
Santiago

you need 2 subnets, one for WAN and one for LAN. You should ask your provider if they can _route_ you the /29 thru a newly assigned /30.

Sam