Page 1 of 1
Interface IP conflict
Posted: Fri Oct 01, 2010 12:41 pm
by macosoft
I have this IP configuration
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
0 ;;; Internet
86.127.70.132/26 86.127.70.128 86.127.70.191 13Internet
1 ;;; Local
80.97.140.1/24 80.97.140.0 80.97.140.255 bridge1
Local connection is made by public IP's on bridge1 (ethernet1 to ethernet11) and Internet gateway of the router is made by ether13
On ether12 I intend to test a hotspot configuration but when I set 80.97.140.202/24 to ether12 the whole network drop internet connection.
The route table is this:
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 86.127.70.129 1
1 ADC 80.97.140.0/24 80.97.140.1 bridge1 0
2 ADC 86.127.70.128/26 86.127.70.132 13Internet
What I'm doing wrong?
Re: Interface IP conflict
Posted: Fri Oct 01, 2010 12:48 pm
by SurferTim
You have duplicate subnets assigned to two interfaces, bridge1 and ether12. Not a good idea, as you just discovered.
If you are setting up a hotspot on ether12, may I suggest 192.168.0.1/24 for the ip/subnet on ether12.
Re: Interface IP conflict
Posted: Fri Oct 01, 2010 3:18 pm
by macosoft
I need to set the hotspot with public IP's for the clients.
So, users who connects to the hotspot should have 80.97.140.x IP's.
What subnet should I set in this case?
Re: Interface IP conflict
Posted: Fri Oct 01, 2010 4:32 pm
by SurferTim
That is easy! Disable the hotspot. Issue static ips or static dhcp leases. Then use netmap.
Re: Interface IP conflict
Posted: Fri Oct 01, 2010 11:04 pm
by macosoft
How to disable a hotspot who is not even made?
What is netmap?
Re: Interface IP conflict
Posted: Sat Oct 02, 2010 12:01 am
by SurferTim
What is the goal? Why do your clients need a public ip? Maybe that will help us help you. Can't you issue private ips, and NAT to a public ip?
Re: Interface IP conflict
Posted: Sat Oct 02, 2010 1:15 pm
by macosoft
Tim, my goal is to setup the router as hotspot, and some client to authentificate automaticaly by mac address and others by hotspot interface. All clients need to have public IPs.
First I need to setup a hotspot on a single interface for testing before I put it on the whole bridge.
How should I set ether12 IP to get a hotspot for testing on it without interfer with my actual settings of the network?
Re: Interface IP conflict
Posted: Sat Oct 02, 2010 1:23 pm
by SurferTim
I was ok until here:
All clients need to have public IPs.
If they are behind a hotspot, why do they need public ips? If they are servers, they will not be accessible from the internet if they are not logged in. If it is necessary, I would issue private ips (192.168.0.1/24) and use netmap. That maps public ips to your private set. Does a range of public ips to a range of private ips. Take a look at this
http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT
The part you will need is the 1:1 mapping.
Re: Interface IP conflict
Posted: Sat Oct 02, 2010 1:39 pm
by macosoft
I have about 50 stable clients who I dont want to authentificate to the hotspot and they need public IP's because some of them have video surveilance system on theys home and need to get access to it from internet (just an example).
On my network will also be some AP's who will be open for laptop users authentificate by user/password for a period of time.
My guess was to set a hotspot and stable clients gets authentificate by mac address and they dont even know they are on a hotspot router.
So... the hotspot cannot be setted up without NAT, masquerade? I cannot use public IP's on hotspot configuration?
Re: Interface IP conflict
Posted: Sat Oct 02, 2010 1:46 pm
by SurferTim
That is ok. For each mac address behind the hotspot you want bypassed (no login required)
/ip hotspot ip-binding
add mac-address=xx:xx:xx:xx:xx:xx type=bypassed
The 1:1 mapping will NAT (translate) your public ips to the 192.168.0.0/24 subnet. To devices on the internet, those private ips will appear, and respond, as your public ip range. If you want 50 clients online, you need 51 public ips.
ADD: The reason I selected this method is it allows you to use 50 public ips as static clients, and NAT the rest of your clients (the ones that don't need public access) to the remaining public ip. 51 public ips. Does that make sense?
EDIT: I am not familiar with public ips behind a hotspot. Someone else will have to take it from here.
Re: Interface IP conflict
Posted: Sat Oct 02, 2010 3:37 pm
by macosoft
Tnx for the replyes Tim. I still not understand why I cannot use directly public IP's for the hotspot users?
Re: Interface IP conflict
Posted: Sun Oct 03, 2010 5:16 pm
by SurferTim
Re: Interface IP conflict
Posted: Sun Oct 03, 2010 5:19 pm
by macosoft
Yes, I have readed today. It's just my config there.
