Hi everyone, I recently received a public IPv4 subnet (/27) from my ISP alongside a PPPoE dynamic WAN connection. My setup: MikroTik RB5009 running RouterOS v7.25 WAN interface establishes PPPoE connection to ISP The ISP routes the public IPv4 subnet to my dynamic PPPoE IP / gateway Local hyperv…

[image] mateszalay: I want the Proxmox VMs to use their assigned public IP addresses directly—meaning they should communicate outbound towards the internet using their own public IPs (not via NAT through the dynamic WAN IP). What is the recommended best practice in RouterOS v7 to set up this ro…

Hi, I used to have standard consumer ASUS routers, but they kept crashing constantly because both their hardware and software were simply too weak for my workload. That’s exactly why I decided to switch to MikroTik. I specifically chose the RB5009UPr+S+IN because it is the absolute best fit for my…

More precise instructions can be given if you post your current configuration. Otherwise, we can give you some generic directions based on the following assumptions: Let's say the subnet the ISP gives you is 12.34.56.64/27. The interface the VMs / Promox is connected to is named vlan50 (adjust acc…

Thank you for the instructions! I followed them step-by-step, but I ran into an issue: as soon as I apply the accept NAT rule (src-address=84.1.253.0/27, out-interface=pppoe-out1), the internet connection on my Windows Server VPS drops completely. If I disable this NAT rule, the internet comes back…

Default firewall filter setup has utimate rule which drops everything from the internet which is not DST-NATed. And none of traffic from your VPSes is DST-NATed. So it is essential to implement the firewall filter rule mentioned by @CGGXANNX ... Or are you saying that you have the mentioned rule in…

Interesting - just to clear it for me, I was reading CGGXANNX explanation. Follwing his details, it is a routing cascade to me? The VM route to the Tik, the Tik route to the ISP. Would it also be possible to put a switch before the Tik and plug the Tik in one port and plug the Proxmox in the a sec…

Probably not. It seems to me that ISP routes the /27 subnet via "default" PPPoE IP address ... and PPPoE can only be terminated on one device. ISP side will have configuration similar to tge following: /ip/route add dst-address=12.34.56.78/27 gateway=34.56.78.90 # where gateway IP address is what …

Also before you copy paste your whole export here, make sure you format it right; after clicking the code formatting add "RouterOS" after the three of " ` ".

That is specified in the given instructions. Of course instructions should be followed integrally.

How to route public IPv4 subnet over PPPoE WAN to Proxmox VMs with direct source IPs on RouterOS v7?

RouterOS General

jaclaz October 30, 2026, 4:57pm 9

... which represent only a small part of your configuration, what is needed is the FULL configuration, instructions here: