Getting internet out of routerboard !

Hello everyone

I know its very basic but this is my first time working with this system or configuring router
I have got a routerboard 1100 , I want to use one of the ports as inut port for my main internet connection which comes from my router, and get internet out of the other ports,
routerOS 4.10
and Im using WinBox

Thanks for ur help

Hi Farshad2011, welcome to the forums :slight_smile:

To get a basic router setup you’ll need to do the following

  1. Setup an IP address and default route that go via your upstream router.

This can be done by adding DHCP client on your WAN interface (if DHCP is what your upstream router provides) or alternatively by authenticating with PPPoE (if that’s what the upstream wants)

  1. Setup IP address and DHCP server for your LAN interfaces

Add an IP then head to the DHCP server page and run the setup (this will help you with a lot of the default values).

  1. Add a NAT rule to Masquerade traffic heading out your WAN interface.

Head to IP → Firewall → NAT and add a new chain=srcnat rule where out-interface= and action=masquerade. This will allow traffic from the LAN to be correctly NAT’d when passing out to the internet.

Thanks a lot man

Basically, we are setting up our own datacenter, Im using RB1100 as my core switch from the main router whihc is getting the internet from a fiber optic convertor , so all of the IPs are static (I have to get a block of 2000 static IPv4 addresses out of this RB1100 ) and assigned to our connection by RIPE , I need to get the IPs from the RB1100, I mean what I want to do it to use a port for the main connection and I want to be able to configure each port to have a specific range of IPs (which each port goes to one rack) and a specific bandwidth limitation for each port, but the problem is lack of experience so I need to try to sort it out from a very simple step,
I dont know considering I have my static IPs do I still need DHCP client and server ?

Nah, no need for them in that case.

To start I’d recommend using ether13 as your wan and ether1-12 (if that’s how many you need) as your downstream client connections.

Add your ISP’s assigned IP and a default route for the upstream GW.

Break your address block up into the ranges you want and assign the relevant IP’s to the ethernet interfaces on your RB1100 then clients can use addresses in those ranges to connect back through you.

Simple queues can be used to assign a per interface or per IP speed limit.

Check out the user manual (linked up top) for more details on how to setup the queues.

Thanks again
but as I said this is myt first time working with RB1100, where should I add my ISP IPS and how can I setup a route for them ?

I just connected the internet to port 12 adn one of my clients to port 1, I have give my whole range of IPs to port 12 and the system created a route for it in the list and then I gave a limited range of IPs to port 1, then I tried to browse the net usign my client but , it doesnt get anything
nothing so far

I would recommend you do some reading over the manual to understand better how the router works and the functionality of adding routes and IP addresses.

http://wiki.mikrotik.com/wiki/Category:Manual

Hello

Thanks for the reply
I tried to read the manual, but unfortunetely its not very friendy and complete, If I can get the internet from this board, Id be able to find out the other things, so could u help me to fix it

Thanks

Are you able to provide a basic diagram of the IP addressing (just remove the first octet) that you’re using and how you’re currently trying to divide it up?

Eg: (using a private addressing example)

your upstream gw might be 192.168.1.1, your router wan port might have 192.168.1.2 and 192.168.2.1,192.168.3.1,192.168.4.1 on lan1/2/3 respectively.

You’d need to have a default route (0.0.0.0/0) going via your upstream gw (192.168.1.1) and provided all the addresses you’re using are correctly routed back to you then there’s no need for any form of NAT.

Thanks again my friend
Im a bit confused
Here is our current IP setting from the main router
*.250.207.97 to *.250.207.125
GW *.250.207.126
BC *.250.207.127

This is what we have been given by our ISP

suppose the routerboard has no configuration at the moment, I need to configure it in a way to act like a switch for me to get the net from all of the ports and be able to say what port what range of IPs is allowed to use.
On the other hand I’m recieving my larger block of IPs which is 2400 IPs I need to be able to get them from this routerboard as well,
A Question , is it compulsory to have different subnet on each routerboard’s lan port ?

So to start off lets get you access on one port on a private range of IP addresses (just so we can confirm you have a working internet connection).

  1. Reset the device config to default (optional) via /system reset-configuration .. this will do a backup of your current config if you want to go back later.
  2. Assign the ip address X.250.207.97/27 to ether13 (this will be your wan port)
  3. make sure you’ve set a password for the device before going any further
  4. Add a default route to destination 0.0.0.0/0 via gw X.250.207.126
  5. Assign the ip address 192.168.1.1/24 to ether 12 (we will use this as your admin port for now)
  6. head into ip → dhcp-server → setup and run through the dhcp server setup for ether12 (using whatever DNS servers are provided by your ISP)
  7. head into ip → firewall → nat and add a new rule in chain=srcnat out-interface=ether13 action=masquerade (this will allow internet access from a private address space)

Now confirm you have access (plugged into ether12 using dhcp) through this device to the internet, if not there’s something wrong with the details you’ve been provided or how you’re connecting.

Once this is done, take a pool of addresses from the public range you have and try assigning them to ether11, using the same dhcp-server → setup you did above but this time you shouldn’t need NAT if you connect behind ether11.

You can also check to see if the ISP is routing that range to you by doing a trace to one of the addresses from another internet connection, it should get as far as one of the addresses they allocated to you (X.250.207.) because it can’t be routed to all of them.. once you know which address this is then you can assign it as the router address and all traffic for those ranges will come through via the router correctly.

Answer: no you don’t have to have a different subnet on each port. You don’t even have to have an address on all ports and in some cases you might put 2 addresses on the same port! :slight_smile:

Wow
Thanks a lot man
I could get the NAT working on port 12 and also public IPs on port 11 I mean after I connected the PC to the port 11 It got the IP from DHCP whihc was one of my public IPs and was working fine, but what shpould I do to not to use the DHCP and just be able to assign IPs to the ports manually, and also to the servers which are connected to the ports ? coz in this case which we did the computer got the IP from the RB1100 automatically !

and btw I didnt get what u mean here , could u explain it

Thanks a lot

A Question,
Basically we are setting up a small datacenter we are using CISCO 3800 as our main router which is cinfigured and given to us by our ISP now my colleague is asking me to use this RB1100 as our core switch then give each rack one connection from this device , he want we be able to limit the IPs and bandwidth usign this device but I dont know if this is a ptroper device for this level of usage or not, is it relaible for datacenter use or not
what would u suggest, the datacenter is quite small with maximum 20 racks and a connection of 200 mbps

Thanks again

Do exactly that, (don’t use) turn off the DHCP and assign IP’s to servers manually.

Don’t worry about it now, if you’re getting access it means it’s fine.

I would recommend against using the device until you understand how to operate it more confidently. Installing it now will only end up causing you problems because you’ll either need to call in a consultant to help you set it up or you’ll end up having to pull it out and replace with something you are familiar with.

More testing and understanding is required on your behalf :slight_smile:

Hey man

Thanks
I tried to set the IPs manually but it doesnt work
I did these
First I deleted all of the DHCP settings
Then as we did befoe I left the port 13 as my wan port and then IPs which I had assigned to it,
then I tried to assign a range of IPs to one of the ports, and connected a server to that port then I set one of those IPs for the server manually , but no connection

I dont know why it doesnt work