Multiple ISP, LAN and Public IP inside LAN

RouterOS General
1

Hi, there. Mikrotik is great product, and only knowledge is limiting :slight_smile:

Look to attachment to see my current working system. One LAN uses LINK1, other LAN uses other - LINK2.
Now im in need to allow clients inside lans to put public IP (listed) on their own pc/router’s wharever.
I have done such things with single LINK and single LAN combinations with enabling proxy-arp - it works, everyone happy.

Where I write AAA and BBB it is the same - actually it is the same ISP just two different links.

My current setup commands:

#1 /ip route add gateway=AAA.BBB.86.1 routing-mark=LINK1
#2 /ip route add gateway=AAA.BBB.141.1 routing-mark=LINK2
#3 /ip route add gateway=AAA.BBB.86.1 #default gw

#4 /ip route rule add dst-address=172.16.100.0/24 action=lookup table=main
#5 /ip route rule add dst-address=172.16.40.0/24 action=lookup table=main
#6 /ip route rule add dst-address=AAA.BBB.86.0/24 action=lookup table=main
#7 /ip route rule add dst-address=AAA.BBB.141.0/24 action=lookup table=main
#8 /ip route rule add src-address=AAA.BBB.86.0/24 action=lookup table=LINK1
#9 /ip route rule add src-address=AAA.BBB.141.0/24 action=lookup table=LINK2
#10 /ip route rule add routing-mark=LINK1 action=lookup table=LINK1
#11 /ip route rule add routing-mark=LINK2 action lookup table=LINK2

#12 /ip firewall mangle add chain=prerouting src-address=172.16.100.0/24 action mark-routing new-routing-mark=LINK1 passthrough=no
#13 /ip firewall mangle add chain=prerouting src-address=172.16.40.0/24 action mark-routing new-routing-mark=LINK2 passthrough=no
#14 /ip firewall mangle add chain=prerouting action=mark-routing new-routing-mark=LINK1 passthrough=no

With this setup, just seting IP on client equip doesnt work. And I was sure it should not, I believe it has smth to do about changing/adding some rules above.
If someone knows what, where, how, PLEASE respond :slight_smile:
Untitled 1.png

2

If you want to have IPs from the public /24 appear on the LAN you would have to add /32 routes to those IPs pointing at the relevant LAN interface as well as have proxy-arp running and even then it is an ugly solution which depends on some specifics regarding the behaviour of the router and routing setup on the LAN device.

Far better to have your ISP hand the public /24s to you via link (/30) networks and then route them any way you please.

3

I see that comming. Little problems is that ISP is charging per IP. Couple /30 will make half the link cost :slight_smile:

4

For now, I got it solved with additional RB750.

I keep experiment with merging both links&lans onto one RB1100.