I have a unmanaged switch from the provider and must have a L3 router or firewall for the connection I hope the RB1100ahx2 can do the job.
on the wan site I must put ip address 212.x.x.114
with gateway 212.x.x.113
and subnet 255.255.255.252
for the connection with the backbone.
I have 5 public ip’s
public ip 212.x.x.11-16
subnet 255.255.255.248
lan network 10.10.10.1
subnet 255.255.255.0
ip pool 10.10.10.10-10.10.10.200
server1 op 10.10.10.99 DC exchange server
server2 op 10.10.10.87 emailserver and webserver
server3 op 10.10.10.2 no connection required to internet on this moment
port forwarding, harpin nat and firewall rules (from dmitry i use) i think i understand this from my homerouter RB2011UiAS-2HnD. but not the p2p connecting and linking the public ip addresses to it because there are tree diffrent subnets 252, 248 and 0.
/interface ethernet
set [ find default-name=ether2 ] master-port=ether1
set [ find default-name=ether3 ] master-port=ether1
set [ find default-name=ether4 ] master-port=ether1
set [ find default-name=ether5 ] master-port=ether1
/ip pool
add name=dhcp ranges=10.10.10.100-10.10.10.200
/ip dhcp-server
add address-pool=dhcp disabled=no interface=ether1 name=dhcp1
/ip address
add address=212.x.x.114/30 interface=ether13 network=212.x.x.112
add address=10.10.10.1/24 interface=ether1 network=10.10.10.0
/ip dhcp-server network
add address=10.10.10.0/24 gateway=10.x.x.1 netmask=24
/ip dns
set servers=8.8.8.8,8.8.4.4
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether13
add action=dst-nat chain=dstnat in-interface=ether13 protocol=tcp
src-address=212.x.x.16 to-addresses=10.10.10.99 to-ports=0-65535
add action=dst-nat chain=dstnat in-interface=ether13 protocol=tcp
src-address=212.x.x.13 to-addresses=10.10.10.87 to-ports=0-65535
/ip route
add distance=1 gateway=212.x.x.113
/ip upnp
set allow-disable-external-interface=no
/system identity
set name=Firewall