just want to ask you guys if how will I make it possible to declare for example 5 ip’s of my isp in mikrotik. lets say 203.127.1.21 - 203.127.1.25 (gateway is 203.127.1.20) so that i can map to my local 5 static ip’s lets say 192.168.1.1 - 192.168.1.5. I just want to use all my 5 ip’s provided by my isp and also to monitor the usages using the built in hotspot. Is this possible? pls help. thanks… MORE POWER!!!
Yes it is possible. Just add the additional addresses to the outside interface.
Regards
Andrew
outside interface , you mean the internet or the lan interface ?
after we assigned the public IP to the interface , we must put the IP in the client side as static IP ? what about firewall ? can we control this public IP as any IP from the DHCP server ? can this IP connect to the web-proxy ? please this is so important i need help about that ..
Outside interface is interchangable with the term Internet interface as it refers to the untrusted network.
after we assigned the public IP to the interface , we must put the IP in the client side as static IP ?
No. You can’t expect the router to actually route anything if you do that. Usually, you will use a private IP range on the inside and use src-nat to translate inside addresses to outside.
what about firewall ?
You can do this at the interface level or per individual IP address in both the input and forward chains.
can we control this public IP as any IP from the DHCP server ?
Don’t know what you mean.
can this IP connect to the web-proxy ?
Again, you need to clarify this question.
Regards
Andrew
Thanks for all the reply. Actually I was able to do the mapping of my 5 isp ip’s to my 5 local ip’s assigned as static. When i check on my ip on the web it shows my 5 different isp ip’s as i assign each local ip to my computer. The mapping of the ip’s work. What I wanted to do is that I want to assign the 5 local ip’s mapped to 5 public ip’s of my isp to 5 routers in my network. This kind of setup is working for me. But when I enabled hotspot to monitor the usages it seems that all of the routers is connecting to only 1 public ip (that is the ip that can be seen in the routes list in pref. source). Just wondering if anybody of you guys know the solution of this.
If you have real IP addresses for the clients, why youre using nat? Cant you just assign them a real IP?
ok but how can i do that if all my clients are behind the MT
thanks jose
You use this amazing new technology called ROUTING!
Use one of the IP addresses for the LAN side of the Mirkotik, and setup DHCP or assign it statically..
I would recommend using private IPs on the local clients and using 1:1 NAT to assign them public IPs. The only real exception to this is if you’re running services that don’t like NAT e.g. IPSEC. If a local client has a public IP then it should be separated from the rest of your network in a DMZ.
This is purely for security. Running NAT in conjunction with the firewall gives a lot more control over the packets crossing the firewall.
Regards
Andrew