private IP with nat and offer pure publick IP in one vlan

RouterOS General
1

Hello guys !!! I need some help here

I have 22 different Vlan where I offer internet service, whit dhcp and is nat for some user I offer virtual public IP using NAT 1 - 1 and for most of them is ok but some user is asking for pure public IP no nat 1 to 1.
I have two whole class C public IP from my provider in two different vlan VLAN 48 190.xxx.xxx.xxx /24 and VLAN 49 190.yyy.yyy.yyy /24 those VLAN are in one physical interface and mi customers depending of the node are in different VLANs from 100 to 122 whit dhcp other with fixed IP but all in the range of 10.xx.xx.xx.

I want to be able to offer a pure public IP in the vlan 100 how can I achieve that goal.
I guess using PPPoE or any other way.

Thank you.
:confused:

2

Sure you can do that…

  1. Just reconfigure the DHCP server and pool for that vlan (Bind these as static or use another method)
  2. Add routing mark for that public ip range MANGLE
  3. Exempt the routing mark from the masquerade rule using the is NOT checkbox NAT
  4. Add a route for the routing mark ROUTES

That should do it

Edit
You don’t have to use a routing mark, but you still would need to reconfigure NAT Masquerade rule to do it another way.

3

Thank you
but still no clue

I want to keep in my vlan 100 the dchp and pool with the private ip range and still doing nat masquerade for my regular customer and also do nat 1 - 1 for some of them.
I want to configure a router or PC inside the vlan 100 with a fix public ip let say 190.xxx.xxx.250 but in the vlan 100
I have my provider in the VLAN 49 which provide me the network 190.xxx.xxx.0/24, how I can make that work

Thank You.

4

This still does not change the method. Only removed the dhcp steps.

  1. Add the address range to VLAN 100 (192.XXX.XXX.0/24)
  2. Mangle the packets with a routing mark (by ip range 192.XXX.XXX.0/24)
  3. Exempt the mark from NAT
  4. Establish a route for the mark

This will allow both public and private IP in VLAN 100. It will allow the public to NOT use NAT, and it will allow you to use a separate route for the public.

5

Thank You, works fine, now I’m doing some fine tunnig
:smiley: