Passing traffice based on IP range

RouterOS Beginner Basics
1

Hello Guys

My ISP has installed 2 routers at our premises.One for data and the other is a dedicated voice line(12 sip channels).
On each of our laptops we have sip clients that need to connect to a SIP server that is connected to voice line.
The SIP server had 2 NICs, one connects to the Mikrotik and the other to the voice router of the ISP.

My data IP range is : 10.xx.xx.xx
voice IP range is :192.xx.xx.xx

How do I register with my sip server from the sip client on each laptop and then also pass the voice traffic through to the voice router
of my ISP ?

Thanks
Kimmy

2

Your computers are connecting to the mikrotik already, so the easiest way would be to just create a connection between the mikrotik and your SIP server. Is there a particular reason you have two networks assigned to each computer?

3

So my SIP server has 2 NICs, one to the ISP and the other to the MIkrotik.My sip clients need to register to the sip server which is on a different interface to the data interface.
I am just strugging to get my head around how to make this work.

Thankso the
Kimmy

4

Typical setups like this are:

Computer (10.0.0.5) → (10.0.0.1) Mikrotik (192.168.0.1) → (192.168.0.2) SIP Server → Phone Provider

Computer (10.0.0.5) → (10.0.0.1) Mikrotik (x.x.x.x WAN IP) → interwebs

Basically, your computer would send all traffic to the mikrotik. You would just set up your SIP client on your computer to connect to the 192.168.0.2 in the above example.

5

Hey guys.

Am I just confusing the issue and is it just a case of static routes ?
Thanks.

6

Assuming the mikrotik is the gatekeeper for both private networks, no static routes are required.

7

Thank you.I was thinking along the same lines.seems we posted the same time.
Will there be any NATing issues on the sip side ?

8

For the LAN side of the SIP server? Shouldn’t be. For your masquerade rule that allows you to get to the internet, you can also a rule to it that says ! SIP SERVER IP. The ! before an IP in a rule, basically means “not equal to”

9

Wow ,I am learning so much here,thank you so much !.
So the ! part is on the same masquerade rule ?

10

Yep, so a masquerade rule would look like:
chain=srcnat action=masquerade to-addresses=PUBLIC IP HERE src-address=10.2.2.0/24 dst-address-list=!private

You set the address list under /ip firewall address-list. It might look something like:
1 private 172.16.0.0/12
2 private 192.168.0.0/16
3 private 10.0.0.0/8

The combination of the two would mean that you masquerade anything from your private network (10.2.2.0/24 in the above example) UNLESS it has a destination of a private IP.