Hi,
I take a 100mbps 1:1 lease line connection for our organization, The ISP give us one WAN ip and five static LAN IP Pool, So please help me how to configure LAN IP pool in my mikrotik router ccr1009-7g-1c-1s+.
I want to use all five lan ip with five different computer.
Thanks in advance.
I have no idea what you mean.]
Do you mean they gave you 6 WANIPs, 5 WANIPs, One main WANIP and 5 more WANIPs…
There is no such thing as LAN IPs from the ISP!
My guess is that there is a block of static IPs. I would guess that you would need to use dst-nat after adding the IP address to your router.
https://help.mikrotik.com/docs/display/ROS/NAT#NAT-DestinationNAT
100mbps 1:1 lease line connection<<<
100Mbp/s full duplex?
The ISP give us one WAN IP<<<
for example 100.64.1.2/30 ?
or like 100.64.1.1/31 ?
or like 100.64.1.6/32 ?
and five static LAN IP Pool<<<
5? why 5 and not “8” or “6”?
for example 166.6.6.0/29 (.0 … .7)?
or 166.6.6.0/29 when 166.6.6.1 must be used on Routerboard and from .2 to .6 on PCs?
but for 5…???
So please help me how to configure LAN IP pool<<<
I want to use all five lan ip with five different computer<<<
I have a better idea for you, leave all with standard DHCP 192.168.88.0/24
and add some static DHCP server leases with Public IP on PC where is needed a Public IP
my ip addresses are as follows …
WAN IP POOL- 115.242.20x.10x/30
I am using now…
IP :- 115.242.20x.10x
Subnet mask :- 255.255.255.252
Default gateway:- 115.242.20x.10x
Preferred DNS :- 8.8.8.8
LAN IP POOL- 115.243.14x.15x/29
Lan ip are
115.243.14x.15x
115.243.14x.15x
115.243.14x.15x
115.243.14x.15x
115.243.14x.15x
115.243.14x.15x
subnet : 255.255.255.248
gateway : 115.243.14x.15x
I can use the wan ip in any router and also directly in my computer and i can browse the internet with the wan ip but lan ip are cannot use directly. ISP said that to use the lan ip pool i need either cisco or mikrotik router. i purchased mikrotik but how to configure the lan ip pool. now i am using the wan ip only for the internet.
you have “anonimized” the end… but the end count, not the start, better anonymize the start or we go on confusion.
put on local LAN bridge
115.243.14x.151/29
on PC where must go the public IP:
IP 115.243.14x.152 (/29)
subnet 255.255.255.248
gateway
115.243.14x.151
DNS
1.1.1.1
done.
At this point must be checked the firewall rules and well protected the PC or on 2/3 hours your PC are useless zombie machines…
Any solution to this? pease share configuration
So do you also have two /30 and /29 [public?] subnets from your ISP?
Likely better if you wrote up your problem in a new post.
This “LAN IP Pool” is confusing term. When a customer does not have BGP, I’ve seen /30 used as route point at a customer site for any additional /29+ subnets assigned, that then are routed via the “main” /30 gateway. But equally possible multiple subnet are on same bridge (multihomed) from ISP & with each subnet having there own gateway. So specifics matter.
they had given us VLAN 1530
Wan ip CE E 117.x.x.223/29
Lan Pool 117.x.x.232/29
i want to assign Lan pool ips directly to my servers
Please suggest
Substitute to your real subnet
[admin@R1] > export
# 2024-03-26 10:18:18 by RouterOS 7.14.1
# software id =
#
/interface vlan
add interface=ether1 name=VLAN1530 vlan-id=1530
/port
set 0 name=serial0
/ip address
add address=117.1.1.218/29 interface=VLAN1530 network=117.1.1.216
add address=117.2.2.233/29 interface=ether2 network=117.2.2.232
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=117.1.1.217 routing-table=main \
suppress-hw-offload=no
/system identity
set name=R1
/system note
set show-at-login=no
/tool romon
set enabled=yes
[admin@R1] >
So now i had connect Lease line cable in port 1 and configure 117.223.181.233/29 as wan
now i have pool of 117.223.181.233 - 117.223.181.238
how can i configure other IPs
i want to directly assign ip address, eg 117.223.181.234, to specific system
how could i able to achieve that task?
Please help
Few options:
- put the /29 WAN on bridge, either a new one or as a tagged VLAN on existing one, then connect assign bridge ports to use the ISP bridge/VLAN - e.g. switching
- assign all the IP to the router, and then use a NAT rule for action=netmap between a LAN IP and desired public IP - e.g. one-to-one NAT
- longest prefix matches, so can use /32 routes to the host’s interface, but the other routes need to specified on client devices and/or ARP static needed. - e.g. routing
if you can help me with the configuration,commands that will be really helpfull
Perhaps the better question is do the public IPs need to go through the firewall (option 2 or 3)?
Or, do you want the computer with public IPs to be directly on the internet without the Mikrotik firewall (option 1).
@qadir52786, I recommend you open a new topic with a diagram, description, and/or any existing config. The “commands” really do depend on what you want to do.
Hi!
I think he has an “transit” subnet , where the other subnet/subnets is routed through to his main ip.
incoming-traffic:
ISP-ROUTER ----> CORP.-ROUTER ----> CORP.SUBNET
outgoing-traffic:
ISP-ROUTER <---- CORP.-ROUTER <---- CORP.SUBNET
In this setup, the “CORP.SUBNET” doesn’t need to see the L2 between the ISP-ROUTER, just the CORP.ROUTER main’s ip,
so the CORP.SUBNET can be in different interface/VLAN.
( EXMAPLE )
Transit subnet ( /29 - because of the VRRP )
ISP-ROUTER : x.x.x.1 /29
ISP-ROUTER : route-add x.x.x.x /24 via x.x.x.2 /29
CORP.-ROUTER: x.x.x.2 /29
CORP.-ROUTER: route-add default via x.x.x.1 /29
This setup is a “standard” solution, ISP can provide as many public subnet as the customer wants.
So the answer to the question, you don’t need to add any NAT rule, just add forward rule and route, where your public subnet is located ( in this case the first ip is used from the public subnet as the default gw for the others)
CORP.-ROUTER - config
-A forward -S x.x.x.x /24 -j ACCEPT
-A forward -D x.x.x.x /24 -j ACCEPT
...
eth1 ip address ( TRANSIT subnet: x.x.x.2 /29 )
eth2 ip address ( PUBLIC IPV4 pool subnet: x.x.x.1 /24 )
...
MACHINE-1 ip address x.x.x.10/24 gw x.x.x.1/24
MACHINE-2 ip address x.x.x.11/24 gw x.x.x.1/24
...