Combining 5 natted networks on one CCR router

RouterOS Beginner Basics
1

Hi,

I am working at a solution to replace 5 routers served by 5 public static IP on a /29 network. I joined two drafts: the first being the current setup and the second the goal to achieve.

Currently, I have 3 switches connected to one CCR1036-12G-4S via 3 SFP Ports. They are all VLAN Trunks. Each VLANs is hooked to a specific bridge to link them together between the 3 SFP ports. The 3 ports are configured as "Core Switch", having a static IP configured at each bridge (192.168.x.254) to link the VLANs between the switches. Each 192.168.x.0/24 are separate and SHOULD NOT be routed together. They should pass thru a NAT layer to reach their Public IP on the 1.1.1.0/29 network.

1.1.1.0/29 is Public and is being routed behind static IP supplied by the PPPoE service provider.

I would like to code the logic inside a CCR1036-12G-4S, only using the SFP ports to link the switches and one or more port to connect the ADSL Modem(s) (bridge mode). Eventually, it can also be used as an MLPPP Client to bond several ADSL Modems.

Should I use rules, VRF or any other way to route the information between the “logical routers”.

Also, I would like something secure and isolated.

Any ideas, tricks or links to help?

I attached 2 PDF files, if a layout can help.

Thanks.
Mikrotik CCR series Network Layout.pdf (117 KB)
Current Network Layout.pdf (232 KB)

2

I think you need to address the 192.168.x.0/24 subnet gateways on the SFP interfaces and add firewall rules to NAT each 192.168.x.0/24 to a single 1.1.1.(x+1)/29 address, that is:

/ip fire nat add chain=srcnat src-address=192.168.x.0/24 action=src-nat to-addresses=1.1.1.(x+1)
3

Where I do attach the 1.1.1.0/29 IP`s. On a bridge?!?

How to route it with the PPPoE client?

How I do make the routing isolation?

There is not METAROUTER feature in CCR series.

VRF? Routing rules? Can they help?

I also want to make the network separated.

This is an easy (or fairly task) to do with external device, but I would like to use the power of my CCR box, if possible.