Public IP assignment to clients behind Mikrotik

RouterOS Beginner Basics
1

Hi all, I was hoping someone could help or point me in the right direction.

I have a x.x.x.0/28 IP from my upstream provider.

My WAN gateway is x.x.x.1 /28
my WAN subnet as 255.255.255.240
my WAN IP on ether 1 x.x.x.2
(other browsing IPs are x.x.x.3 to x.x.x.14 (Already set on ether 1)

x.x.x.0/28 is network and x.x.x.15 broadcast.


I have a bridge radio from clients CPE to my Access point at Base. Most clients have private
IPs Natted (Masquerade).

I have hotspot running on the MT bridge interface (I have bridged ether 2 to ether 4 together as my LAN). Authtication is by two methods:

  1. Hotspot clients (authenticate via username and password) and

  2. MAC clients via static private IP (mac auto-authentication)
    Now the problem is, two of the permanent clients are requesting for public IP.

  3. Client A wants a /29 client Public IP (I am thinking of giving a 197.149.91.8/29)

  4. Client B wants a /30. (I am thinking of giving a 197.149.91.4/30)

I am totally lost. Please how do I do this in Mikrotik?

Thank you in all advance.

2

Hi,

Does the client want the public IP’s for their internal network?

You say all the clients are bridged, they then have direct layer 2 communication with your main gateway.

It should be as simple to just bridge the wan and LAN interface on the CPE and then enter the public IP’s on the client machines.

If all devices on the inside have public IP’s then NAT is not needed any more.

A word of advice,

Bridging your entire network isn’t good.

If your network is still small I suggest you to switch over to a routed network.

It will save you from a headache in the future.

3

Thank p3rad0x

The client are not directly bridge to my base access point. Each CPE is set as bridge/router. I understand the importance of moving to a routed network and it’s already in the plan but especially the bigger issue for me right now is how to give a block of IP /29 and /30 to two seperate client. In-fact really to the client that needs the /29. I know how to do a 1:1 NAT but my biggest issue right now is how to give a /29 using mikrotik device.

4

Two acronyms: MPLS VPLS.

Look it up.

Sent from my SM-G920I using Tapatalk

5

Or eoip tunnel.