Hi experts.
My question. I have a public IP pool adresses. How can i assign public IP to private clients without using NAT?
Regards.
Yes, if you be able to bridge your internal clients to your wan side.
I assume that you have a current static ip and have been issued with a pool of ip addresses (in a different subnet to your current static ip). if so all you need to do is assign one of the addresses in the pool to your interface and then the rest of the addresses to the clients.
Maybe something like this will help you, just for idea
First you should exclude your public IP from Default masquerading rule.
Just for example. To complete your task, you may ahve 3 Interfaces.
1 LAN interface,
1 WAN interface for Local IP nating (Default Masq Rule),
1 WAN for PUBLIC IP routing.
Further you have to add one mangle rule to mark public IP packets like this
/ip firewall mangle add action=mark-routing chain=prerouting comment="" disabled=no new-routing-mark=public_ip passthrough=no protocol=tcp src-address= 1.1.1.1
and in route section , add gateway for these marked public ip like this
ip route add check-gateway=ping comment="Public IP Route" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=[ISP Gateway] routing-mark=public_ip
For public routing you should request to your ISP to route your IP pool on your 2nd public IP Address also.
HTH,
It depends on your setup, and how you get that pool of IP addresses.
Is your subnet routed to you, or does it only exist on the WAN of your router? If it’s routed, it’s just a matter of assigning the subnet and the pool of public IP addresses to the LAN of your router.
If it’s only on the WAN, thing get sticky and ugly. You’ll need to contact your ISP and see if you turning on proxy-arp on your WAN will mess things up for them. If not, there is a proxy-arp hack that you can do to accomplish this.
I think this is the thread that describes how to do it:
http://forum.mikrotik.com/t/public-ips-for-client-not-bridging/34246/1
First of all thanks for your answers.
Let me explain how is my configuration.
Eth 1= Wan IP xxx.xxx.xxx.xxx (first pool)
Eth 2= lan Ip (some clients of this pool has NAT rule 1:1 to use one Ip from xxx.xxx pool.
Eth 3= lan Ip too.
Internet provider has been assigned me another pool of public IP for ex. ccc.ccc.ccc.ccc
I wonder to create a DHCP server wit this public pool to serve clients from Eth 3
Thanks a lot for your help.
Regards.
If your ISP is routing that new block of IP addresses to you via your current subnet, then yes. Assign one of the IPs to the MikroTik on your LAN interface to become the default gateway for the clients, and set up the DHCP server. The MikroTik is a router, it will route between subnets and interfaces out of the box. Adjust firewall rules accordingly.
Gentlemens, your coments were very useful to me.
Thanks a lot.
my isp gave the ip address as follow:
Ip: 14.102.69.2
mask: 255.0.0.0
gateway:14.102.69.1
Extra Public IP pool :
Ip series :14.102.69.33 - 64
subnet: :255.255.255.224
Gateway: 14.102.69.32
my expected config is given below:
i didnt configure my mikrotik in router mode, till now i used as ap in bridge mode only.
now i want to use it as a isp router.
my isp wont support for mikrotik routers.
experts help to get out my config. issue…
Thanks in advance.
If you have configured the Linux then it is the same with the MT - the same functionality is there and you just have to map them over. You must break your question up into little pieces as anyone is hardly willing to post you a working configuration out of air.
I want to input the wan link into eth0 and get the main and extra public ip in same eth 1 port via connecting switch.
I dont have idea how to configure. Particularly get two different subnets in same eth1 port.