ccr1036 pure routing

RouterOS General
1

Hello,
we are receive a public /24 from our upstream routed on the ccr public ip and we have subnetted it into different /29 assigned to vlan:

router public ip: X.X.X.2/28 (eth1)
default gw: X.X.X.1

upstream send y.y.y.y/24 to X.X.X.2

we created a bridge (eth3 and eth4) and a lot of vlan, for example the first: y.y.y.1/29 vlan100

connecting a pc on vlan100 and assigning it y.y.y.2 it is reacheable from internet but internet sees it as X.X.X.2 (router public ip). we put a generic nat rule as is the only way we can ping internet from client pc.

there is a way to let use the pc public ip directly without nat ?

2

When you want to do pure routing you should NOT put in a NAT rule!
There probably is some config error in the router or in the PC (bad subnet mask, bad default gateway, etc). When you find it, it should just work.

3

you are right, this was the fault:

action=drop chain=forward comment=“Drop invalid” connection-state=invalid

by that all vlans traffic vs internet got dropped… disabled it and all works like a sharm!