how to set up 2 public interface

RouterOS General
1

HI, recently i have another upstream provider so i need help from you guys.

My old configuration is like this :

1 local interface : 10.xx.xx.xx
1 public interface : 202.xx.xx.xx

i use masq for some of my clients (although i am not quite understand what is masq, but it works) and NAT for some special client (for pointing them to some other ip).

Now i have 2 public interface so my configuration is like this :

1 local interface : 10.xx.xx.xx
1 public interface : 202.xx.xx.xx
1 public interface : 222.xx.xx.xx

For this new public interface i use NAT for my clients, but they couldn’t go through this new interface. I think i have messed up with the routing. Could someone show me step by step configuration using 2 public interface?

Please help me… thank you very much.

2

http://www.mikrotik.com/docs/ros/2.9/ip/route.content#8.48.3.1
documentation example.
try to setup action=same in NAT instead of masquarade.

3

Hi, thanks to sergejs and jason for helping me to solve my problem. I have managed to route my clients to another upstream provider using the policy-routing rules.

But when i tried to examine the route carefully, my route has gone to another provider but my dns is still using the previous provider. So is there anyway to transparently route my client to another provider using their dns to resolve http request?

Thank you,
Regards,
Budiarto

4

Hi, i still haven’t figured out how to route the dns request. I tried to enable my dns server and my client pointed to mikrotik server as their primary dns, but i could not work. Have i done something wrong?

For the route of upstream i configure like this :

0 src-address=10.10.0.0/19 action=nat to-src-address=202.xx.xx.xx

1 dst-address=222.xx.xx.xx/32 action=nat to-src-address=222.xx.xx.xx

2 X src-address=10.0.0.10/32 action=nat to-src-address=222.xx.xx.xx

3 src-address=10.10.1.31/32 out-interface=Asti action=nat
to-src-address=222.xx.xx.xx

4 src-address=10.0.0.12/32 out-interface=Asti action=nat
to-src-address=222.xx.xx.xx

5 src-address=10.10.1.25/32 action=nat to-src-address=222.xx.xx.xx

6 src-address=10.10.1.3/32 out-interface=Asti action=nat
to-src-address=222.xx.xx.xx

7 src-address=10.0.0.2/32 action=nat to-src-address=202.xx.xx.xx

8 src-address=10.0.0.3/32 action=nat to-src-address=202.xx.xx.xx

9 src-address=10.0.0.4/32 action=nat to-src-address=202.xx.xx.xx

10 X src-address=10.0.0.5/32 action=nat to-src-address=202.xx.xx.xx

11 src-address=10.0.0.6/32 action=nat to-src-address=202.xx.xx.xx

12 X src-address=10.0.0.7/32 action=nat to-src-address=202.xx.xx.xx

13 src-address=10.0.0.8/32 action=nat to-src-address=202.xx.xx.xx

14 src-address=10.0.0.10/32 action=nat to-src-address=202.xx.xx.xx

15 src-address=10.0.0.0/19 action=masquerade

0 X 10.0.0.10/32 0.0.0.0/0 all
1 0.0.0.0/0 222.xx.xx.xx/32 all
2 10.10.1.31/32 0.0.0.0/0 all
3 10.10.1.25/32 0.0.0.0/0 all
4 10.10.1.3/32 0.0.0.0/0 all
5 10.0.0.12/32 0.0.0.0/0 all
6 0.0.0.0/0 0.0.0.0/0 all
7 10.10.0.0/19 0.0.0.0/0 all

Did i do something wrong? Please correct me if i am wrong.

And my last question, could i route specific port (like port 80) from specific client to any upstream that i am pointing? If i could, please tell me how. Thank you very much all..