multiple public ip configuration problem

RouterOS Beginner Basics
1

From the main router connection goes through fibre to two buildings/routers 192.168.254.10 and 192.168.254.30. I linked public IP addresses to local. Everything works fine from public side (pptp vpn, port forwarding, etc to 1xx.xxx.xxx.181 or 1xx.xxx.xxx.183) but from private side still shows that I’m on 1xx.xxx.xxx.180, so local two networks are not using given public ip when talk to “outside world”. Source address translation doesn’t work for me. Where did i make the mistake?

Her is the part from compact export from the main router v5.21:

/ip address
add address=192.168.254.1/24 interface=bridgeL
add address=1xx.xxx.xxx.180/28 interface=Eth1-gateway
add address=1xx.xxx.xxx.181/28 interface=Eth1-gateway
add address=1xx.xxx.xxx.183/28 interface=Eth1-gateway

/ip firewall filter
add chain=input comment="default configuration" protocol=icmp
add chain=input connection-state=established
add chain=input connection-state=related
add chain=input dst-port=10080 protocol=tcp
add chain=input dst-port=8291 protocol=tcp
add chain=input dst-port=1723 protocol=tcp
add chain=input dst-port=8728 protocol=tcp
add chain=input protocol=gre
add chain=input dst-port=161 protocol=udp
add action=drop chain=input disabled=yes in-interface=Eth1-gateway

/ip firewall nat
add action=masquerade chain=srcnat src-address=192.168.254.0/24 to-addresses=\
add action=dst-nat chain=dstnat dst-address=1xx.xxx.xxx.181 dst-address-type=\
    local to-addresses=192.168.254.10
add action=src-nat chain=srcnat dst-address-type=local src-address=\
    192.168.254.10 to-addresses=1xx.xxx.xxx.181
add action=dst-nat chain=dstnat dst-address-type=local dst-port=8290 \
    in-interface=Eth1-gateway protocol=tcp to-addresses=192.168.254.10 \
    to-ports=8291
add action=dst-nat chain=dstnat dst-address=1xx.xxx.xxx.183 to-addresses=\
    192.168.254.30
add action=src-nat chain=srcnat src-address=192.168.254.30 to-addresses=\
    1xx.xxx.xxx.183
add action=dst-nat chain=dstnat dst-address-type=local dst-port=8293 \
    in-interface=Eth1-gateway protocol=tcp to-addresses=192.168.254.30 \
    to-ports=8291

Please help,
Y

2

Try moving your masquerade rule to the bottom.

3

Thank you, that works…

Quick question, on rb2100 can I do 8 DHCP servers, 8 VLANs trunked to one port, 8 bridges with two or three ports attached (vlan, eth, wlan), about 500-600. I’ve done 3 trunked vlans, 300 devices on rb751 with no problem. Just wondering if rb2100 will be good to use.

Y

4

Bump.

For some unknown reason only 4 vlans are working out of 8 assigned to port 3 on RB2100.

!

5

RB1200 should be fine. Post /export compact so we can see your config.

6

Hi, I re-did nonworking bridges and all is fine. Something funny happened to the bridges when I was assigning admin. mac addresses. Redoing bridges without touching MAC addresses made rb. to assign new MACs and all works now.

Is it better just to let OS to assign new MAC address for each new bridge?

Y