Hello all,
I have isa server behind mikrotik, the network diagram is client->isa server->mikrotik->isp. My isa server has 2 NIC and set as secure nat and also for web filtering. I want to set mikrotik only act as router only not using nat (like cisco router). Anyone knows how to do this?.Could you guys give an example?. Thx
It’s a router out of the box, and will route traffic between its interfaces. Set up the interfaces facing the WAN and the server, set a default route out to the WAN, on the server configure a default route to the Mikrotik router. Don’t configure NAT.
thx, but could you give me some example?
http://wiki.mikrotik.com/wiki/Manual:IP/Address
http://wiki.mikrotik.com/wiki/Manual:IP/Route
The manual covers all of that. Do you have any specific questions that are not covered by those wiki articles?
ok i’ll check those wiki. btw what do you mean with “Don’t configure NAT.” What is the ip gateway should I put in client PC?
The server, which will do NAT for your clients according to your initial post. Don’t configure NAT on the Mikrotik router if you don’t want it to do NAT.
ok, and what ip gateway and ip dns should i put in client pc, mikrotik internal ip address and ISP DNS?. What actually is the best network diagram for my case?should i reverse the network diagram to mikrotik behind isa?because i search the internet and found most of them using router behind firewall.
Depends on what you want out of it. Mikrotik routers also have built in firewall capabilities. I may be biased but I would trust RouterOS more than IAS, so I would put the Mikrotik router facing the WAN and the IAS server behind it. At that point of course the clients are configured with the IAS server as the gateway and DNS IP address.