Mapping 1:1 address

Hi,
I have read the manual on this page http://www.mikrotik.com/docs/ros/2.9/ip/nat.content#6.36.3.4

Now I have this scenario.
I want to map 256 external address assigned by the isp to 256 internal local address.
In this way each internal device is connetectd directly to external internet.

My question is
if I have 256 address asigned by the isp do I need to add these address to the NIC-WAN used?

bye
Max

Yes

Regards

Andrew

maxfava, why are you complicating your own life? :slight_smile:
If you have /24 that you want to be used by your customers, GIVE THEM public IP`s :slight_smile:

Yes, your router should have the 256 IP addresses on the Internet interface of the router.

But with MikroTik RouterOS being so poerful, you could do it the ordinary way and directly route the Internet and your LAN. This is if your LAN has the internet real IP addresses set. If you don’t want to reconfig all puters in the LAN and set them IP addresses than what you’re trying to do seems right. Good luck :unamused:

BUT Couldn’t MT reply to arp requests without having to set all those IP addresses ? And together with both-ways NAT to be able to do the task ?

Set up a Bridge, in Bridge->NAT - set up an arp-reply with routers MAC for all IP addresses (or the range if possible). Not sure if this will work… don’t know much about ARP and how the hell MT handles it.

AArgh why why why why why why must it be so hard and so inhumane this GUI or whatever it can be called - winbox and console… There is not enough info wich does what., not even with the manual, MT is way too powerful but maybe only the military are entitled to know how to use it.

Just use bridge…

Hey, after all, it`s not rocket science :slight_smile:

:laughing:

But with MikroTik RouterOS being so poerful, you could do it the ordinary way and directly route the Internet and your LAN. This is if your LAN has the internet real IP addresses set. If you don’t want to reconfig all puters in the LAN and set them IP addresses than what you’re trying to do seems right. Good luck

Here the description of my network setup that I want to design. (the new hardware will arrive next week)

INTERNET 256 Public IP ----> HDSL ROUTER —> MK Router —> PPTP clients.

I found other examples of traffic shape on the manual, but I need to try it in real condition.
I need to provide external IP to client because I 'm an WISP amd I do not want limit with NAT or hear my customers “I have low ID” plus I cannot use some software. On the other hand I know that the customers will be not protect by my infrastrucuture.

You can use bridge, and simple queues for that


Regrads

thank you for the answer,
but I not found nothing about bridge between pptp interfaces and the real ehternet network.
Another think is If I use traffic shape can I redirect some protocol to a specific getaway?

Max

To hide 256 local IPs behind 256 Public IPs simple use 2 firewall NAT rules

  1. chain src-nat, action=netmap
  2. chain dst-nat, action=netmap

Ok I tried and it is perfect.
Only one issue I need to add 256 IP and I have not found a procedure to add multiple IP address to an interface. Is there a way?

Scripting in MT,… scripting on anoter puter that talks to MT via telnet…

I have discovered another issue.
:cry:

OK let me explain the configuration:

WAN 192.168.0.1/24
WIFI 192.167.1.1/24
PPTP LOCAL 192.168.0.21-192.168.0.240
PPTP REMOTE 192.166.2.21-192.166.2.240

on firewall NAT I set 1:1 between 192.168.0.X to 192.166.2.X

this works for 2 connections but after there is no connection between the PPTP user and WAN.
this is valid workaround because I do not need to insert manually ip on the WAN port. but why this not works for all IP?
I’m crazy

OK I found the solution.
I set the WAN interface as proxy ARP and all works fine.

Only one think is that I cannot route the PPTP client to the internal NET