I have a doubt to pass public IPs to the clients, do not use any authentication on the server for now.
I received two blocks of ips that are
:
189.51.xx.240/29
189.127.xx.0/24
Mikrotik in this way:
189.51.xx.243/29 the public interface
189.127.xx.1/24 the interface that goes to customers.
In ip route:
Dst-address 0.0.0.0 / 0 Gateway 189.51.xx.241 (gateway provided by the carrier)
On a PC for testing:
IP 189.127.xx.2
subnet mask 255.255.255.0
Gateway 189.127.xx.1
Dns bla bla bla
Only this form consigoi not access the internet only works if I use nat (What I do not want to do).
I need the ip of the client in a transparent skirt on the Internet.
In this block operator / 24 is correctly pointing to the ip 189.51.xx.243.
Could someone give a help saying it lacks some additional configuration on the mikrotik?
Now appreciate everyone’s help.
Sorry for the typos, because I do not know the English, I’m Brazilian.
Please be more specific, what you mean by " not access the internet "?
Is the client unable to resolve DNS? Or it is not possible to ping any public address?
If clients can route to your main gateway (you can ping your gateway) then the problem is on ISPs router.
Run traceroute from the client and you will see where the problem is.
Using the traceroute command I get only the ip of my mikrotik and nothing else.
Please if you can tell if the configurations up there are right.
I checked with the operator if there could be a possible error in their routes, with the response that it was all right and revised it.
I think that I may be wrong on something in mikrotik, it is the first time I do this kind of configuration.
Would have happened any tips on how I configure the routes on the mikrotik?
Ja researched more not encounter a situation similar to mine, or if they have some stuff that I can read that will give me a direction I really appreciate it.
Might be nothing, but in your first post you are referring to 189.12.x.1, obscuring the third octet. In your most recent post you are showing 189.127.175.1. The second octet is different (12 vs 127).
Ok, sorry, forgot to put the right ip in the post above my friend, the more that this is configured in mikrotik full image.
I’ll fix the first post
Thanks for the observation.
Then it’s your ISP. If you can ping your router from the client, and can ping their router from your router then there is an issue with them sending return traffic for those IPs back to you.
I can ping my mikrotik to the client, I can ping the client for mikrotik, mikrotik I can ping to the router operator.
I can ping the router operator (189.51.xx.241) until the wan mikrotik (183.51.xx.243)
I can not ping the router operator (189.51.xx.241) interface that is connected to customers (189.127.xx.1).
the router operator added to this route:
SW4948-GRJ-01 # sh ip route S 189.127.175.0/24 [1 / 0] via 189.51.33.243
Can you ping from any remote location 189.127.xx.1?
If not check firewall filter rules, if there is nothing that can block traffic, then contact your ISP it is definitely their fault.
I cannot ping the Internet for ip 189.127.xx.1.
I do not have any rules on the firewall, this new mk is an installation and still do not have No additional rule.
Already discussed with my ISP, plus they claim that it is all right.
So a question, the way you put this up there routes and ips should work?
