Thank you in advance to all who HELP!
IN A MIKROTIK CCR1036 I have
WAN1 (spfplus1) address of x.x.x.66/27 with a network of x.x.142.64
Default Route: Dst Address of 0.0.0.0/0 Gateway of x.x.x.65 reachable on WAN1 (spfplus1)
Firewall / NAT: Action - masquerade, Chain - srcnat, Out. Interface WAN1 (spfplus1)
All of my ethernet ports (ether1 - ether8) are bridged to each other and to the local dhcp pool but NOT to WAN1 (spfplus1)
I have added my public IP addresses all to WAN1 and can ping them from the outside world. (x.x.x.67 - x.x.x.94)
All computers that I connect to any ethernet port gets a local IP address and have internet access fine.
PROBLEM
Every server that I connect to any ethernet port with static public ip address information does NOT get internet.
A current non working server config connected to ether3 is a static address of x.x.x.68, subnet of 255.255.255.224, gateway of x.x.x.65, DNS of 4.2.2.1 & 8.8.8.8
Is my problem because my masquerade nat rule is applied to the entire WAN1 (spfplus1)? Should I assign it only to the current bridge?
Do I set up a NAT rule of pass through for ever public address? If so how?
SOMEONE PLEASE HEALP ME! I need the servers to have public addresses and for all ports to get to the external internet. I have been trying different configs for days. PLEASE point me in the right direction.
I SUPER APPRECIATE ANY AND ALL HELP!!!
Ian
If you have only one pool from x.x.142.64/27 (from .64 network to .95 broadcast)
the first .65 are on other side of "wan",
the .66 are on your "wan" interface,
you can not assign .67-.94 address to ANOTHER network.
You must put all ethernet/spf on the same bridge, THE WAN NOT EXIST,
and assign for each device**
IP one from .67 to .94
Subnet /27 (255.255.255.224)
Gateway .65
and remove all firewall nat rule
If you need more than 28 devices, remove one ethernet port from the bridge***, and on that port you must setup one dhcp server, and on firewall masquerade from dhcp clients to bridge
*** or put directly dhcp server on bridge, but add firewall rule to block DHCP "traffic" between CCR and the rest of the world...
** IN alternative to assign to each device one IP, you can set up one dhcp server with pool .67 to .94 to assign automatically the IP to the devices connected, but add firewall rule to block DHCP "traffic" between CCR and the rest of the world...
\
It's also posssible to assign all IP to wan interface (one-by-one) and set one netmask from .67 to .94 to internal bridge and assign locally 10.0.0.67/27 to 10.0.0.94/27 to the device on internal lan, but between the internal devices 10.0.0.x/27 must be used.
This can cause some problems because not all the devices support netmask.
Thank You for your help!
I still can’t get my Public IP addresses to work no matter what I try.
I have now reset everything in the router.
Maybe you can point out what is set up wrong.
I have a bridge (bridge1) with all of the router interfaces connected to the bridge.
spfplus1 is connected to my carrier with an address of x.x.x.66/27 the network is set as x.x.x.64/27
(this is the ONLY ip address I have set up in the IP addresses table)
My Default Route is: Dst Address of 0.0.0.0/0 Gateway of x.x.x.65 (reachable on spfplus1)
My Dns Servers are 4.2.2.1, 4.2.2.2, 8.8.8.8
I now have NO nat set up at all
All I am trying to do is connect a computer to one of the bridged ethernet (ether3) ports with address settings of:
IP of x.x.x.73, subnet of 255.255.255.224, gateway of x.x.x.65, DNS of 4.2.2.1, 4.2.2.2, 8.8.8.8
Shouldn’t I be able to use any of my other IP addresses in my /27 like this (x.x.x.67 - x.x.x.94)
Shouldn’t my default route connect all of the static addresses to the gateway?
What am I missing???
They don’t get out to the internet. It’s driving me crazy. PLEASE HELP!
THANKS AGAIN FOR ALL THE HELP!!!
Ian
on exact setup you describe here, you can ping INSIDE the routerboard 8.8.8.8?