I'm trying to configure the Mikrotik rb3011 as neutral router to manage the internal LAN and the internet access provided by the ISP fiber router-modem (Movistar HGU). I've got some doubts about the basic configuration. My planned steps are:
On ISP's router:
- Configure the ISP router in “bridge” mode (IP: 192.168.1.1/24) an disable Wi-Fi, dhcp-server and UpnP.
On Mikrotik's one:
- Connect the ether1 port on Mikrotik's router with the ISP router and the ether6 port to the internal LAN.
- Assign static IPs on ether1 (192.168.1.2/24) and ether6 (192.168.0.1/24)
- Configure ether1 port with pppoe-client (new interface's name: pppoe-out1). It'll act as WAN interface.
- Configure dhcp-server on interface ether6 (internal LAN)
- Configure DNS cache
- Configure NAT
- Configure firewall basic rules
- Enable UpnP
Are this steps ok? Do I miss anything? However, my great doubt is the following: once I've configured the pppoe-client on interface1, with name=pppoe-out1, from now on all references to “ether1” or WAN interface must be replaced by “pppoe-out1”??
For example, when I create this Nat rule:
/ip firewall nat add action=masquerade chain=srcnat out-interface=pppoe-out1
Or when I insert this firewall rule:
/ip firewall filter add action=drop chain=forward connection-nat-state=!dstnat connection-state=new in-interface=pppoe-out1
Or in the following command to enable UPnP:
/ip upnp set enable=yes
/ip upnp interfaces add interface=ether6 type=internal add interface=pppoe-out1 type=external
Any advice will be greatly grateful! Thanks in advance!