Hi
I’ve an RB 2011. I have 3 Public IP and I want to use indifferently in each network card except the first one because I’ll connect my WAN link.
For example, in Eth1 I want to connect my internet link and in Eth2 connected to a server with one IP public.
If I use NAT, I need to use a LAN IP in my servers and I preffer to use the public IP.
I have difficulty to make a bridge interface.
If I understand what your trying to do then you want to:
Add each IP to your external interface… this way each IP has the ability to make outgoing connections.
Then make one srcnat rule for each public IP. Each rule should match part of the traffic and have the action set to SRC-NAT rather then Masquerade which will allow you to choose the outbound IP. Masquerade will auto select the the IP that it uses for NAT.
Thank you for your help.
But I dont want to use Nat
The same question is about this http://forum.mikrotik.com/t/different-public-ip-in-each-ethernet/57996/1
Eth1: Connect my WAN connection
Eth2: Connect a server with a public IP
Eth3: Configure a DHCP server in this interface and make NAT to connect internet.
at first excuse me for my bad English writing
is your first public ip address in your ISP router?? or it is in your router??
for example if u have 8 ip addresses x.x.x.64/29
your first ip can be in your ISP router and other should be on your interface that directly connected to your ISP router.
ISP: x.x.x.65/29
your router: x.x.x.67/29 with gateway x.x.x.65
otherwise it should be routed on private ip addresses then your ISP give u a private IP address and route your public IP to your private IP, in this case u can select your interface to use your public IP or u can break them to smaller subnet and use in different interfaces.
example:
ISP: 172.16.34.1/30 route dst-address=x.x.x.64/29 gateway=172.16.34.2
your router: ether1 172.16.34.2/30
gateway: 172.16.34.1
ether2: x.x.x.65/29 your server connected to this interface= x.x.x.66/29 gatewaye= x.x.x.65
You can bridge two interfaces by creating a bridge and then adding the interfaces under the ports tab. You then need to assign everything to the bridge that you had assigned to the interface… To be specific, any DHCP servers, DHCP clients, IP Addresses, firewall rules etc probably need to be assigned to the bridge not the interface.
You can also just assign the services and IP’s to Ether1 and set the “Master Port” of Ether2 to Ether1. (Under the interfaces General Tab.) When you use the Master Port your using hardware switching and both ports have to be members of the same switch port. Your routerboard may not support switching between all interfaces which is when you have to use bridging. Both bridging and switching will accomplish the same task.
Hi,
Joshaven i make the config master port was ok, but i can not view trafic in this port!
I make Ether2 master-port on ether1-wan, but i cant view trafic in ether 2!!
I have make config on Bridge the same as you say:
bridge
[admin@MikroTik] > interface bridge print
Flags: X - disabled, R - running
0 R name="bridge-local" mtu=1500 l2mtu=65535 arp=enabled
mac-address=D4:CA:6D:60:E3:FB protocol-mode=rstp priority=0x8000
auto-mac=no admin-mac=D4:CA:6D:60:E3:FB max-message-age=20s
forward-delay=15s transmit-hold-count=6 ageing-time=5m
Port bridge
[admin@MikroTik] > interface bridge port print
Flags: X - disabled, I - inactive, D - dynamic
# INTERFACE BRIDGE PRIORITY PATH-COST HORIZON
0 ether2 bridge-local 0x80 10 none
1 X ether3 bridge-local 0x80 10 none
2 X ether4 bridge-local 0x80 10 none
3 X ether5 bridge-local 0x80 10 none
4 X ether6-master-local bridge-local 0x80 10 none
5 ether1-gateway bridge-local 0x80 10 none
6 X ether7-slave-local bridge-local 0x80 10 none
The problem is when i active ‘brigde-local’ and ‘ether2’, ‘ether1-gateway’, mikrotik go down.
Mikrotik go down and from the interface ether10 with ‘Nat’ from i access the mikrotik i cant have interent. And must do disable ether1-gateway in ‘Port brigde’ and restart mikrotik to have access in internet.
I have make same config but i cant config the bridge mode.
And the switch mode i dont have an idea!
Hi Mohsenhayati
i dont understand, but can you give a print screan
thanks
When you use switching all traffic is reported on the one interface… The master interface is the only piece that the OS interfaces with. The ports are joined together at the hardware layer. It’s very like using a layer2 swtich.
If you want to control the individual ports then you want a software switch (bridge) rather then a hardware switch. You need to add a bridge then make the ports members of that bridge in the /bridge ports tab. Then you need to move the IP address that you had on the ethernet interfaces to the bridge interface.
As far as the router going down I would guess that your trying to access the router on an IP that is no longer accessible via the interface your using once you begin setting up the bridging. Changing the interfaces that your connecting often runs the risk of loosing your access. I’d recommend trying this in a test environment first so you get your mind around the whole process and the sticky points.
if u want to separate your server interface(ether2) with your LAN interface(ether3) it is possible and only nat your private network with public IP on ether2, nat is possible if your public ip is in a different interface
don’t connect SW to Web server via cross cable like me in this screen shot