I can not see real ip at a local network

Hi folks, i will make an server who can show by user ip forgotted payments :slight_smile: It works fine but i have little problem when users goes through another mikrotik. For example it shows that my ip is 192.168.26.11 and that is correct but when i tried from ip 192.168.6.11 it shows result: 192.168.26.2 and this is wrong. What i must to do to see correct ip? I think that is a NAT problem. I use masquerade on each mikrotik. Here is my network pic:
WIFI-LEGENDA.jpg

By design, NAT will mask your IP address. If you want the clients IP prior to NAT then you’ll probably need to collect that with JavaScript or java in the browser if your doing form submission, or a client side script if your running an app on the client.

Can i use other setting on mikrotik without nat? Is here at mikrotik forum some examples? I use NAT for users who will not pay to server static page where is shown: Sorry, you are disconnected. I think better solution is shaping just on main mikrotik, but because of nat i can not do this. I am a beginner with mikrotik. I understand you, but is not possible to make to every one client posting procedure where is shown original ip. I can make it, but i need it just for clients who will no pay. I will not increase CPU load at mikrotik

We give public ip addresses to all clients. However if we did not then I would do NAT at our network edge. We currently use private ip addresses inside of our network for device management anyway.

I would think that simply routing all public and private traffic inside of your network then masquerading the traffic at the edge router or routers.

Sorry, I just reread your original post. In the case of non payment you can give the user a private ip without NAT or only use NAT when going to the payment portal. I also drop any public bound private traffic at my network edge. If you want to leave the user on a public ip then you can use NAT to redirect all web traffic to a web payment portal.

My english language is not so good, i try to explain it somehow else :slight_smile: Yes, i have already NAT to redirect all web traffic to a web payment portal for users who will not to pay but server can not see real ip because of nat. I will all my network setup rearrange by example of somebody who can me it explain what to do or how i can make network setup without nat. With ubnt hardware i know how to do, but i like more mikrotik. I have already done a php and mysql server who can show you for exampe: Dear John Peterson, our system blocked you because we miss your payments from jan, mar, and july. Your billing information how and where to pay… blah blah blah…

I can do it by login and password but i have many not so intelligent users so i will make it fully automatical by ip. All working perfect when user goes from 192.168.26.XXX. Now i got idea, i can make script when users not goes from 192.168.26.XXX then system will login by user and password to see billing informations and for others is system fully automatical. But this is also not good. When some user ask me for example: Why I must login and my friend not?.. So… Can you wrote me how to do it without nat? For example when i have ip 192.168.6.22 i can see client at 192.168.26.122 and also that client can see me. Only with nat i have a problem to see real ip for my billing server

Take a look at this:
http://wiki.mikrotik.com/wiki/Multi_squid_redirections
You can route the traffic to a transparent proxy that can do an http redirect.