Providing re-sellers real IP

mirzasakib · August 24, 2019, 4:53pm

Thanks in advance for your time and forgive me for my poor English.

Lets get to the point.
I have a small ISP company. I am providing connection directly to the home user as well as other small ISP Company.The company I got my connection from they gave me a different IP block to give to my re-sellers. But I don’t know how can I provide them with those real IP.

My present connection info:
Connected in via SFP - 000.000.36.174/30
Re-seller 1 - 192.168.60.1/30
Re-seller 2 - 192.168.130.1/30

IP block information that I got from my company for my re-seller is: ( Routable IP - 000.000.37.176/29, Gateway - 000.000.37.177, Subnet - 000.000.000.000, usable IP: 000.000.37.178 to 182).

I have tried several ways to assign those IP, connection established but every time my re-seller search for their IP info in google it shows my real IP (000.000.36.174) instead of (000.000.37.178).

Now how can I assign those real IP to my re-seller instead of current local IP and if they search for their IP in google it will show the IP I am providing to them.

mkx · August 24, 2019, 5:13pm

First guess: you currently have one generic SRC-NAT rule (possibly with action=masquerade). You’ll have to add specific SRC-NAT rule for each reseller, i.e.

/ip firewall nat
add action=src-nat chain=srcnat comment="reseller1" out-interface=<ISP interface> src-address=192.168.60.1/30 to-addresses=000.000.37.178

And don’t forget to position this rule above the more general one.

mirzasakib · August 24, 2019, 5:47pm

First guess: you currently have one generic SRC-NAT rule (possibly with action=masquerade). You’ll have to add specific SRC-NAT rule for each reseller, i.e.
/ip firewall nat
add action=src-nat chain=srcnat comment="reseller1" out-interface=<ISP interface> src-address=192.168.60.1/30 to-addresses=000.000.37.178
And don’t forget to position this rule above the more general one.

What do youn mean by “ISP Interface”? Is that mean the interface that my re-seller connected on? Do I have to configure that IP block to my address list of Main routerboard? And Can I send bandwidth directly via real IP instead of using local IP?

mkx · August 24, 2019, 7:21pm

First guess: you currently have one generic SRC-NAT rule (possibly with action=masquerade). You’ll have to add specific SRC-NAT rule for each reseller, i.e.
/ip firewall nat
add action=src-nat chain=srcnat comment="reseller1" out-interface=<ISP interface> src-address=192.168.60.1/30 to-addresses=000.000.37.178
And don’t forget to position this rule above the more general one.
What do youn mean by “ISP Interface”? Is that mean the interface that my re-seller connected on? Do I have to configure that IP block to my address list of Main routerboard? And Can I send bandwidth directly via real IP instead of using local IP?

With that I mean upstream interface on your router which performs NAT …

You can do many different things, including forwarding real IP … you have to decide what you want to do and only then we can help you with configuration problems …

mirzasakib · August 25, 2019, 3:34pm

Please see the attached image first.

Here “IN-INTERNET” is my wan interface and “FMC” is one of my re-seller. Here I wanna use real IP (000.000.37.178) instead of local IP (172.168.160.1).