Hello, I have a MikroTik router running Hotspot and User Manager with 500 connected clients. I also have a DrayTek router operating on 6 internet sources with load balancing enabled, connected via the MikroTik Ethernet port. How can I make the DrayTek router display the IP addresses of the clients connected to the MikroTik so that they can be distributed across the internet sources?
You would have to disable SRCNAT/masquerade (on the CCR2116) for connections going out of the link from the CCR2116 to the DrayTek. Then on the DrayTek device, you'll need to add routes for all subnets assigned to the hotspot clients, with the gateway of those routes being the IP address of the CCR2116 facing the DrayTek router (the "WAN" address of the CCR2116).
NAT will only be done by the DrayTek router.
Could you please explain how I do that?
For exact instructions on the CCR2116 you would need to provide the configuration export of the CCR2116, with sensitive/private information redacted. see this post. Normally a single modification in the IP -> Firewall -> NAT table is needed.
On the DrayTek, you'll add the static routes here:
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat comment="masquerade hotspot network"
src-address=172.168.10.0/24
add action=masquerade chain=srcnat comment="masquerade hotspot network"
src-address=10.0.0.0/24
/ip firewall service-port
set irc disabled=no
Yes, you should disable the two masquerade rules in the NAT table:
and on the DrayTek, also add a static route entry for destination 10.0.0.0 mask 255.255.255.0 gateway 192.10.95.10.
I tested the method on an RB1100Dx4 router, version 6.48.6, and it worked perfectly.
However, it didn't work with the CCR2116-12G-4S+ router, version 7.20.6. DrayTek still isn't displaying the IP addresses of connected devices.
I tested the method on an RB1100Dx4 router, version 6.48.6, and it worked perfectly.
However, it didn't work with the CCR2116-12G-4S+ router, version 7.20.6. DrayTek still isn't displaying the IP addresses of connected devices.
Sorry for the delay. According to the screenshot, there are more rules in your NAT table because the scrollbar is only at 50%. Could you please post the output of
/ip firewall nat print detail
on your CCR2116?