i have set up the RouterOS successfully.
i got lots of static ip from my ISP .. its like 203.115.112.128-203.115.112.254
i used masquerade srcnat to connect to internet.. but it hide all my static ips. i can only see my routeros's ip at http://www.cmyip.com/
how can i use all my static ip address??
i am waiting online for help......

i have set up the RouterOS successfully.
i got lots of static ip from my ISP .. its like 203.115.112.128-203.115.112.254
i used masquerade srcnat to connect to internet.. but it hide all my static ips. i can only see my routeros's ip at http://www.cmyip.com/
how can i use all my static ip address??
i am waiting online for help......

You can use a 1:1 static NAT solution.
so that:
203.115.112.128 <-> 192.168.0.10
203.115.112.129 <-> 192.168.0.129
203.115.112.130 <-> 192.168.0.200

sorry i dont want to use 1 to 1 nat.
i want to use right static ip for all the stations. i need people can visit them from internet.
anyone can help me with that plz..

You can use 1:1 NAT as previously stated.

Otherwise if you want to use static IPs without NAT, ask your ISP for an additional /30 public network and route your current /25 network (203.115.112/25) through the /30.

i.e. Use the /30 on your WAN and the /25 on your LAN.

You could break up the /25 block to accomplish this but it would be wasteful and only give you a /26 as the largest contiguous block of addresses (64 total instead of 128).

Tom

thanks upstairs.. but not fully understanding .. so i have to ask u again.... plz help
my current setting is
WAN ip address: 203.118.136.130/25 NETwork 203.118.136.128 Broadcast 203.118.136.255
LAN IP address: 203.118.136.254/25 NETwork 203.118.136.128 Broadcast 203.118.136.255

ip Routes
AS 0.0.0.0/0 Getway 203.118.136.129
DAS 203.118.136.129/25 pref Sourse 203.118.136.130



So upstairs brother.. u are saying i should change to the following?
WAN ip address: 203.118.136.130/30 NETwork 203.118.136.128 Broadcast 203.118.136.255
LAN IP address: 203.118.136.254/25 NETwork 203.118.136.128 Broadcast 203.118.136.255

ip Routes
AS 203.118.136.130/30 Getway 203.118.136.129
DAS 203.118.136.130 pref Sourse 203.118.136.254
DAS 203.118.136.128/25 pref Sourse 203.118.136.254



thats the right WAN setting and right IP Routes?????
sorry i am noob..... i need help

plz anyone help me ..my msn is dezily2007@hotmail.com
waiting online.. need to be fixed immediatly

is that possible to use bridge?

Well you could place the (box) in the middle as a firewall only and just let trafic through (firewall only, no router).
So that the /25 gets into the network where you take 1 for your self...
It's not the best solution, but should be possible.

if i wanna do this ..how i config?
i mean in the box ,there is 2 nic card...
i should put ip address on which nic card?

how to config it?
WAN address 203.56.234.254/25 network 203.56.234.128 broadcast 203.56.234.255
LAN address 203.56.234.254/25 network 203.56.234.128 broadcast 203.56.234.255

setup like this?
do i need to put anything in Route?

and why this kind of setting is not good? whats the down side?

and anyone can explan transparet bridge to me ?plz

Bridge the two nic's and set it to use firewall...
Then set a IP (from the /25 range) and set also a route for it.

203.56.234.129/25 gw.
203.56.234.130/25 firewall ip (ip for the bridge).
203.56.234.131-253/25 for the users.

thanks upstairs.. but not fully understanding .. so i have to ask u again.... plz help
my current setting is
WAN ip address: 203.118.136.130/25 NETwork 203.118.136.128 Broadcast 203.118.136.255
LAN IP address: 203.118.136.254/25 NETwork 203.118.136.128 Broadcast 203.118.136.255

ip Routes
AS 0.0.0.0/0 Getway 203.118.136.129
DAS 203.118.136.129/25 pref Sourse 203.118.136.130



So upstairs brother.. u are saying i should change to the following?
WAN ip address: 203.118.136.130/30 NETwork 203.118.136.128 Broadcast 203.118.136.255
LAN IP address: 203.118.136.254/25 NETwork 203.118.136.128 Broadcast 203.118.136.255

ip Routes
AS 203.118.136.130/30 Getway 203.118.136.129
DAS 203.118.136.130 pref Sourse 203.118.136.254
DAS 203.118.136.128/25 pref Sourse 203.118.136.254



thats the right WAN setting and right IP Routes?????
sorry i am noob..... i need help

Yes, you need some basic networking education. You also need to work with your
ISP on this since they control the public routes to you.

What you have above won't work if you are routing. I would ask my ISP for another network with a /30 subnet andf ask them to route 203.118.136.128/25 through this. Lets say they give you 192.168.10.0/30 for this network. (fictional example because this is private space and you need public space)

Then you use 192.168.10.2/30 on the WAN ethernet port (let's say ether1). And 192.168.10.1 as the default gateway address. That means 0.0.0.0/0 uses gateway 192.168.10.1 (Your ISP has 192.168.10.1 on their router and sends all traffic to 203.118.136.128/25 to 192.168.10.2.)

And use 203.118.136.129/25 on LAN ethernet port (let's say ether2).

Then the computers on your LAN that need public IPs have 203.118.136.xxx/25 with a gateway of 203.118.136.129. xxx is a unique octet in the range of 130 through 254.

This is fairly simple networking and you should really find someone local that knows networking to help you set up your network and be your advisor on this.

Good luck,

Tom

bridge seems to work...
but why u guys said bridge is not good for routing????
any down side for bridge??

thanks Tom.. u really help me alot..
now i start to understand the routing part
so after i get what u just said done... do i need to put anything in nat before all my station can log on internet?
and just want to ask...
the bridge seems work with me... why bridge not good enough here? any down side?
the routing seems to take lots of steps..... does that slow the internet down?

bridge seems to work...
but why u guys said bridge is not good for routing????
any down side for bridge??

Bridging is not Routing. Bridging is layer 2, routing is layer 3.

Bridging is like plugging everything one into a single switch which your ISP controls. This might be the best for you now since you don't seem to know anything about networking. Routing gives you a lot more control but only if you know how to use it.

My suggestion is to get some local help and get educated in networking. For example, what will you do when one of your public computers is hacked and quickly serving up porn or warez on the Internet? How will you identify it? How will you stop it? Are you aware that it will take your other computers off the Internet? Why are you putting servers on the Internet with public IPs? In doing so you are taking on the responsibility of being an ISP but without the required knowledge.

Tom

thanks Tom.. u really help me alot..
now i start to understand the routing part
so after i get what u just said done... do i need to put anything in nat before all my station can log on internet?
and just want to ask...
the bridge seems work with me... why bridge not good enough here? any down side?
the routing seems to take lots of steps..... does that slow the internet down?

Routing is how the Internet works. It is faster as your network grows. Many wireless ISPs start out bridging but eventually graduate to routing.

You don't need to use NAT if all your computers have public IP addresses. NAT is only needed to hide computers from the public and/or to save public IP addresses. By hiding computers it helps to keep them secure.

Using a public IP address on a computer or server means that it will be attacked 24/7 so you must have good security in the way of firewalls and keep up with security updates.

Tom

people talk about bridge firewall...
can that pretact the local network?
if i use bridge, can i use Qos, set up firewall to limited the port and protocals? can i also ban public ip thought the bridge?
people talk about transparent bridge.. whats that? plz teach me thanks