We are trying to setup a new ISP connection, but the requirements have us stumped. We need static public IP’s for internal services, the new ISP wants us to set their public IP on our WAN port, and put the static public IP’s they assigned us on the LAN side. This would be simple with 2 routers, one in front of the other. But they say it can be done with 1 router, we are trying to figure out how with the MT 1100ANx2 that we have.
Currently it is setup with port eth1 as the private 162.168.1.x network, master, with eth2-5 on the switch. The WAN port is on eth11 and eth12, 12 is old ISP, 11 will be new ISP. All firewall rules and port mappings needed are in and working. All internal services are on private IP’s and connected to eth1-5. The static public IP is assigned to eth6.
So what I need to do is get all of the filter/NAT stuff to happen between eth1 and eth6. Then have all outbound traffic go out port 11/12 without NATing. Inbound will hit port 11/12 first, everything passed on to eth6, then filtered/NATed while passing to eth1.
Does this make sense? I have to create a third IP “group” and put it in the middle, getting my internal IP’s NATed to this middle group and not the WAN port. There will only be physical connections to the LAN and WAN. Nothing is plugged in to eth6, the middle “group”. It is only there for routing, but the route list says it’s unreachable because nothing is plugged in. Don’t know if that is a deal breaker or not. If it is required, we could put another interface in the servers and give them static public IP’s, but we don’t want to do that. Would rather find a way to make the routing work.
Any ideas, any help or thoughts would be appreciated. We know what we want it to do, just can’t figure out how to program the MT to do it. Or is it even possible?
it is possible.
get a certified consultant on the case.