Differences between bridge proxy-arp and ip firewall srcnat?

RouterOS Beginner Basics
1

I’m having on tough time setting up my home network. You’d think it is easy. I have 6.0rc14 on a FB2011UAS-2HnD.

  1. I want it to run my home network on 192.168.3.x.
  2. use my provider ISP via DHCP client.
  3. Serve up local IP’s to a DHCP server
  4. Run a WLAN Access Point.

I set ether1 to a dhcp client to get IP from ISP
I set IP address on ether1 to 192.168.3.1/24
I bridge ether1-ether10 and set to use IP firewall
IP Firewall srcnat with masquerade on source address list 192.168.3.0/24
DHCP server seems to work fine, no problems there.
WLAN seems to work fine.


But things still don’t work.

I set srcnat to masquerade my local LAN on ether1 (or should it be the bridge?)
Do I also need to set proxy-arp on my bridge? Isn’t it doing the same thing as srcnat?

You would think that what I’m doing is pretty basic…

–Ken

2

I’m a real beginner, but one thing I see is that ether1 can’t be the DHCP client of the ISP and hold your LAN address (192.168.3.1) at the same time.

It seems that you should put the LAN address on ether2 & bridge 2-10

3

Thanks!

I’ve downgraded to 5.24 (I think, anyway the last 5.xx) because of confirmed issues with DHCP Client.

Then, I made a stupid mistake, lost access, tried to reboot with a reset configuration, and now I’m stuck at “Kernel Loading”…

I think I killed it.

–Ken

4

Yea for NetInstall. Brought my board back to life.

Gave up, yet again.

It is clear that Mikrotik will never be a consumer product. We use them at work to srcnat/dstnat systems we are building, as each system has the same set of IP’s, and we can put them on the network so I don’t have to walk down to the manufacturing bays with memory sticks to do software on them.

I bought mine so I could EVENTUALLY blackhole my daily internet attacks. But it seems that what I’m doing is too simple to merit any attention. Now, if I wanted to setup a MLPS with triple redundant EoIP with NetExtreme Point-to-Point mode, I’m sure that there will be a good FAQ and example… lol

–Ken

5

In your original post you seemed to have a mix of bridge mode and router mode features. How did you configure the unit so far?

6

RESOLVED — well, sort of…

After several days of searching with google, I’ve got this article:
http://wiki.mikrotik.com/wiki/How_to_configure_a_home_router which got me up and going.

Even though I followed the article, (and if you do, too), I’m going to change my ports around so that my ISP facing port (wan port) is on the 100 Mbps switch, instead of the 1 Gbps switch.

Although I’m still trying with the Bridge concept, I totally ignored the fact that I had two hardware switches built-in and didn’t use them. It seems I can just “replace” the switch with the bridge later, making sure my “root-port” on the bridge is the same as my “master port” on the bridge… right?

Still need to figure out how to join the two slave and one master (that I have left, after the wan and dmz ports) on one switch to the five ports on the other? Do I just run a cable between them?

Seems a waste. Probably would have to set up a second address pool and dhcp server for the second switch, too…

Most articles about bridges talk about Wireless - which is something I really don’t need at the moment - not until everything else works.