I have fibre internet at location A with mikrotik router with 1 public ip address
Location B is connected to location A with ubiquiti equipment and location B also has mikrotik router.
Location B is VPN server and has site to site vpn with several other locations outside of these 2 locations.
Location B also have voip phone system (Incase that matters)
We have full control of all the equipment.
Whats the best way to set this up so that we can keep the VPN’s working and not make voip more difficult because of double nat ect… and be able to forward ports at location B?
Network diagrams please. Your description is confusing.
As far as Router B, if you only have one public IP address from the ISP how are you proposing to avoid double nat at Router B?
If you turn Router B into a switch, then that would work.
I guess since RouterB is a server you port forward the VPN ports from MTA to MTB?
I think I know what you are trying to do, and anav hit upon the key (or at least one).
At location A, set the router to do NOTHING with your public IP except encapsulate it into a VLAN. Set up the link over the UBNT as a VLAN trunk. At location B, the MT takes the VLAN carrying the public IP and uses that as the Internet WAN. Whatever traffic is needed at location A goes back over the UBNT MW to location A where the MT breaks out the VLANs into whatever LANs are needed there. The MT at location B performs ALL router functions. And yes, location A only needs a switch.
The only downside is that internet traffic for location A has to go to location B and back. Depending on your bandwidth, that may or may not be a problem.
Understood kccc but without a network diagram and clearer explanation, we are not certain the full extent of functions currently carried out by Router A…
Sorry not good at making diagrams.
I wanted MTB to be a router because incase PTP (Nanobeams) would go down that they would still have a fully functioning internal network.
The PTP is not very stable.
MTA its only function is Receiving internet, sending it to MTB and being able to access PTP Units to adjust settings.