Ok. Thanks.Do not care about the modem. It is a supplier's device out of your network. Just let it have different network address than your network range and it will be accessible from the internal network by the outbound masquerade nat rule.
That's a good idea. I hadn't thought of trying that. But wouldn't that place the modem in the DMZ?Let the modem operate in transparent bridge mode and do the rest in your own router as you wish. If there are any obstacles from the isp, change the provider...
Its my understanding that IPv6 by design doesn't NAT.Mikrotik does not support IPv6 NAT
you have just one single IP (/128)
Ask ur ISP for IPv6 PD (/48-/60)
Was o correct in my assumptions that I would need to create two bridges?You can do it by IP address or by src-mac-address.
Code: Select all/ip firewall filter mangle add src-mac-address= ...