Is MikrotikOS good enough to support two networks independent of each other? (one needs PPPoE)

Hi Everyone,

Please see attached hand drawn diagram. Right now there is no Mikrotik installed but I would like to add it like I drew on the diagram. I would like Mikrotik to dedicated 5 Mbps UP/DOWN for phones at all times and to also act as a bottleneck switch OR router and allows PPPoE to pass through to ISP modem to allow the “3rd party router” to do PPPoE authentication. The “3rd party router” is now connected directly to ISP modem and both ISP modem and “3rd party router” do PPPoE authentication and each get a separate public IP. This ISP allows for two public IPs to be obtained: one by ISP modem and one by a 3rd party router connected to ISP modem.

Problem: “The 3rd party router” is not in my control and uses all the bandwidth and the admin is not willing to help.
Solution trying to implement: Do traffice shaping by MikroTik HeX router and allow ISP modem/router to give IPs and make Ethernet-5 on HeX in switch mode (or router mode) but dedicate it 5 Mbps up / down and allow Ethernet-1 (also in switch mode) for “3rd party router” to obtain it’s public IP.

Is this possible by adding Mikrotik? The goal is to allow “3rd party router” have a public IP so no NAT management is required and to give phones switch dedicated 5Mbps up/down.

Thanks,

Anyone?

The question is if you are able to make PPPoE connection from “internal” router to receive public address if there is no Mikrotik “in the middle”?
What do Mikrotik should do in your opinion?

Yes, internal router CAN PPPoE authenticate and get a public IP from ISP while it’s connected downstream to ISP modem (in absentee of Mikrotik).

I would like Mikrotik to be present for the following reasons:
1- To reach it and ping it when I need to test the connection.
2- To segregate VoIP network from Data network (run by Internal Router)
3- Most importantly, to shape bandwidth so that I can allocate 2Mbps to VoIP switch network (at all times) and 8Mbps to Internal Router consumption.

Is this possible?

Yes, it is possible. RouterOS is not going to be a limitation and CPU power in a Hex is plenty for distributing those 8 mbps.

Just use queues and separate the interfaces from the switch chip.

Thanks for confirmation.

First step, how should I configure a Mikrotik interface to allow the Internal Router to still PPPoE authenticate to ISP?

Anyone?

Create a PPPoE client…

Create PPPoE client on what device? and how? Not sure what you mean. Internal Route has only one way of connecting PPPoE. Do you mean I should do PPPoE authentication on Mikotik and pass the public IP to Internal Router?

You can do that too.. PPPoE works in layer2.. so as long as you stay there the PPPoE client will discover the PPPoE server…

1- What do you mean by that? What is the alternative?
2- Can bandwidth shaping happen for Layer 2 as well?

  1. You said you want your internal router to PPPoE authenticate with your ISP right? For this to happen you should have a layer2 tunnel between your internal router and the ISPs router…

  2. How does an ISP limit your Up / Down? Yes you can…

What should be the port configuration for Layer 2 for:
ISP Modem >(Layer 2)>Mikrotik>(Layer 2)>Internal Router

I will use WAN port on a HeX for ISP Modem to Mikrotik and Eth-2 for Mikrotik to Internal Router.

Should port 1 and 2 be set to Switch mode? Would firewall be enabled for this?

Layer 2 means no routing.. Data link layer.. Mac addresses…

I understand but new to Mikrotik so what is the command that should run to make eth1 and eth2 prepared for this?

If you Bridge two interfaces then they are on the same Layer 2 network.
For example, i could have my ISPs router connected with a mikrotik router that works with a dhcp client.. Lets say i have a bridge named Bridge witch has ports ether1 and ether2. I can use dhcp client on that Bridge so i can have internet to my first router. Then I use either ether1 or ether2 (the one that is free) to connect it to my second mikrotik router that has a PPPoE client on his ether1…

Can I limit speed on that bridge which is layer-2 and used for PPPoE?

Assign a rate limit in the profile of the PPPoE server…
https://wiki.mikrotik.com/wiki/Manual:PPP_AAA#User_Profiles
Check the rate limit in the above link..

Is rate limit same as queues?
On IRC channel people said that Queues limits will break PPPoE authentication. Is that true?

Why dont you test it?