I had a question for all of your MT guru’s. Is it possible to have two external IP addresses go to two different gateways for instance one gateways is on a t1 and the other is on a 4MB DSL line. If you could do that how can you make it so that soem internal IPs go to one gateway while others point to the other gateway? See wht I would like to do is have the ability for us to place a user on a dedicated faster t-1 that is less populated but if they are heavy downloaders then place them on the DSL. Any suggestions would be much appreciated.
-Sincerely,
..::eric::..
I believe this is done with policy routing, I’m not too familar with it and haven’t had to implement it yet, but im sure someone will chime in here with a helpful solution…
Is it possible to have two IP addresses on the external IP and have one external IP be dedicated to DHCP NAT’d internal hosts. While the the seond external IP is dedicated to one internal NAT’d IP address. How can you make it work with the firewall settings?
Any advice woudl be much appreciated.
Thank you,
..::eric::..
What you’re talking about is 1:1 NAT..
/ip firewall
src-address=10.0.0.0/16 out-interface=WAN action=masquerade to-src-address=66.60.xx.yy comment="NAT all 10.0.0.0/16 behind 66.60.xx.yy"
src-address=10.0.0.34/32 action=nat to-src-address=66.60.aa.bb comment="1:1 NAT for <username>"
dst-address=66.60.aa.bb/32 action=nat to-dst-address=10.0.0.34 comment="1:1 NAT for <username>"
and under /ip address
/ip address add address=66.60.xx.yy interface=WAN
/ip address add address=66.60.aa.bb interface=WAN
[/code]
You can do that using polocy routing.I am using it here.For Example you can sent 10.0.0.0/24 request to T1 and 10.1.0.0/24 request to DSL.For that u need to have 3 NICs.
http://www.mikrotik.com/docs/ros/2.8/ip/route
see application Examples.its working good.
I don’t see how policy routing would help in this case because he’s going from a private non-routable network to a public routeable network. Can’t route to a 10.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12 from a public.
What you need to do is use the example I posted above, setup 1:1 NAT with the users that needs the public address and masquerade everything else behind the 2nd public IP address.
I think your both right there is just different ways of doing it. I do as srikanth418 does but I see no reason why wildbill442 way is not as good. I guess each method could have it’s merrits? I tend to use policy routing and route some types of what I call junk traffic (p2p, newsgroups etc) down the cheaper line and preserve the expensive T1 for the vpn’s browsing and email traffic which earns the money from business cutomers.