This is what i’m trying to do ..
I have a 64...*/30 ( Internet ) ether1
192.168.0.1.24 ( Nat) (Lan) ether2
64...*/28 ( Public ips ) (Static ips) ether3
Nat is working fine . Lan is working Great . But Can’t get static ips to work could someone Shed some light on this for me . I have tried everthing I can think of .
Is that 3rd subnet routed to you via your first one? If not you can’t use it like that short of using a proxy-arp setup that is an ugly hack and you’ll want to contact your ISP before turning it on to make sure it won’t cause them problems.
his is what i’m trying to do ..
I have a ..240.102/30 ( Internet ) ether1
192.168.0.1.24 ( Nat) (Lan) ether2
..241.16/28 ( Public ips ) (Static ips) ether3
Nat is working fine . Lan is working Great . But Can’t get static ips to work could someone Shed some light on this for me . I have tried everthing I can think of .
Its routed via the first one
This is the setup I’m trying to complete .
Public ips need to get from Wan to Ether3 with out Any block or Nat
Post your nat rules and routing table, that is, the output of
/ip firewall nat export
/ip route export
/ip firewall nat
add action=src-nat chain=srcnat disabled=no src-address=192.168.0.0/24 to-addresses=..241.21
[admin@MikroTik] > /ip route export
/ip route
add check-gateway=arp disabled=no distance=1 dst-address=0.0.0.0/0 gateway=..240.101 scope=30 target-scope=10
IP addresses 192.168.0.0/24 and ..241.21 are not in your network diagram. Please post the output of
/ip address print
With a /28 network, .16 is the network address and not a valid IP. The valid range of IP’s is .17-.30.
[admin@MikroTik] > /ip address print
Flags: X - disabled, I - invalid, D - dynamic
0 ..240.102/30 ..240.100 Wan
1 192.168.0.1/24 192.168.0.0 Lan
2 ..241.16/28 ..241.16 Static
The ip address ..241.16/28 is network address for the /28 subnet, so, you cannot assign it to an interface. Change that address to ..241.21/28 since you are already scr-natting your private IPs to it.
Assign public IPs from ..241.17 - ..241.20 and ..241.22 - ..241.30 to clients connected to ether3. Set their subnet mask to /28 and gateway to ..241.21
This should resolve your issue.