HotSpot and public ip (NAT)

Hi there,
I have a hotspot server on local interface 10.10.0.2 and 5 clients who do connecting via hotspot (10.10.1.1-10.10.1.5). I want to every of them have his own public IP. I try with below way, but it’s not working. Does anyone know why? What’s wrong with this?

/ip address add address=87.250.108.135/32 interface=Public


/ip firewall nat add chain=dstnat dst-address=87.250.108.135 action=dst-nat
to-addresses=10.10.1.1



/ip firewall nat add chain=srcnat src-address=10.10.1.1 action=src-nat
to-addresses=87.250.108.135


After I do that, then I go from computer 10.10.1.1 on http://www.whatismyip.com, it’s shows me a IP of mikrotik (87.250.126.210) instead 87.250.108.135

up

up

on what orden you have this rule ??

M.

I don’t understund you. Those are the only rules wich i have in nat.

The way we got public IPs to work with hotspot is to have radius set a public IP (Framed-IP-Address) after they authenticate. You dont want to set those public IPs to the Mikrotik interface. Just make sure the route is in place to route packets destined for those ips to the appropriate place.

action=netmap doesn’t do the job!!!

I still have a problem. There’s block of IP addresses and I want that every client who is connecting via hotspot have his own public IP. With rule which I add in this topic that dont works. Does anyone know what is the problem? To all my clients which are connected via hotspot, when they go on http://www.whatismyip.com it show 87.250.126.210 (main ip of mikrotik)


Hai, Rope....

Oooooooooo... :open_mouth:
You will do marrige and replace IP 'DHCP' with 'Static', that's simple question but complicated rules. I think better to make authentication with 'PPPoE' than 'Hotspot', you can make many 'PPPoE Interfaces' is not confuse....

That's problem is, when your one of clients or other restart, The Host send New Free IP to Client. and your rule is not valid [this's my logica], i think DHCP[hotspot] same mean 'Dynamic Host Configuration Protocol', isn't it?

That is very very responsible from host [router].

Tips..!, you can visit our website, you can get screen your 'Real IP' at http://www.balimore.com :wink:

regards
Hasbullah.com

I understand. I dont want that my clients have static IP, I want them to have dinamic. What I want to do is maping of local IP addresses 10.10.1.1-10.10.1.128 to public 87.250.108.128-87.250.108.255. About DHCP server, I dont even use mikrotik DHCP server. I use some other that is running on other machine, since I have two gateways in my network (prepaid and postpaid) and mikrotik DHCP dont have
that option with who I could reserv some IP and add him using of some other gateway and dns.
what I want to do is 128 rules and they will do a maping of local ip to public ip


I am so sorry sir....!, maybe someone else can help you....

I didn't understand about your problem, cause first post you want to supply Public IP to every client via hotspot authentication.... and last your post you want to supply them...with dynamical IP.. :question:

as far as i know 'Dynamic' divide two one is 'Dynamic by manually' and other one 'Dynamic by Host' [DHCP],...again, so sorry i cann't help you. and maybe i am wrong.

peace all :wink:

regards
Hasbullah.com

is the ip dynamic or static? that’s irelevant. I want to maping
local 10.10.1.1 on public 87.250.108.130
local 10.10.1.2 on public 87.250.108.131
local 10.10.1.3 on public 87.250.108.132 etc…

Rule below should do that, but in my case that dont work:

/ip address add address=87.250.108.130/32 interface=Public


/ip firewall nat add chain=dstnat dst-address=87.250.108.130 action=dst-nat
to-addresses=10.10.1.1



/ip firewall nat add chain=srcnat src-address=10.10.1.1 action=src-nat
to-addresses=87.250.108.130

Try to disable the transparent proxy in the hotspot user profile and check how it is working.

I did it, but I still have same problem…


Hai, Rope..

I hope you have point, and i thing your config is correct. just confirm to you about that, I has like your config and it's run as you need to 'MAP' my config running since tree months ago...

see this link: http://www.hasbullah.com/cgi-bin/r/db?product=publictolocal#cat

you can see 'Red Block Color' is map like yours and 'Green Color' is my Router assign with Public IP.

regards
Balimore.com

so, what do you think that is cousing me so much problems. is it possible that the reason is that I don’t use mikrotik DHCP server?


Hello Rope...

No, when are you use DHCP[Hotspot] first you must 'ip-binding' that address, that's way to make access 'bypassed' from DHCP-Server to Dynamic bypassesed address, and when are you using 'Manually-Dynamic-IP' is not many procedure, and put dst-nat like before. i think should be ok.

other methode:
When you want supply client with Public IP without authentication first, just make 'BRIDGE' from Public interface to Local interface.

here i am using: static, dynamic, dhcp[hotspot], pppoe, userman as radius server, and mapping public to local address ..etc.

ok, send me your mail address. maybe i can help you.. :wink:
you can find my address at: http://www.balimore.com


regards
Hasbullah.com

You can try to make sure that your NAT rules are ABOVE All your other rules, By that i mean at the top of the list, and the wait about 10 SEC and repair your "Customer SIDE Internet Connection so they get the DHCP address again and then try it, all should be good!

I did it, but I still have same problem…

A quick ?

What does your WAN Interface Plug into, a MODEM or something of that sort? and if so can u try and physical plug from the MODEM, I am guess from your ISP. PLug from the moden in to a PC and set the IP of the PC to one of your statics and set up the Gateway and so on. then try and get online like that. If that works then your have something in your router Blocking the NAT rules or something else. Let me know, thanks

Joe H