Public IP setup

[Defsoul]

Static IP 5 setup for DSL-G2562DG (006).pdf (539.7 KB)

Hi, is there a way i can setup this on RouterOS?

[TheCat12]

Just to confirm, you want your devices to have public IPs only and said IPs get routed through an L2TP tunnel inside a PPPoE one? If that's the case, it can be configured on a MT router

[Defsoul]

Yes, currently the ISP ONT/Router assigns a private IP and they only gave me that manual but I would prefer to use MT

[lurker888]

According to this you can use MT. Depending on the connection speed, you may need a beefier than usual device - the L2TP over PPPoE burns CPU cycles.

[Defsoul]

Will this tutorial work? I will be using a RB2011 iL-RM for the test.

L2TP Server over PPPoE WAN connnection, L2TP [Solved] road warrior client

SOLVED The next day I posted this I looked again on all tutorials. Ok, I am newbie on Mikrotik and this was the first time when I bought a router like this. At the beginning, Mikrotik's CLI looked so very different than Cisco or Debian based routers. Therefore I started with GUI, using a little bit CLI too. The solution is for newbies as me, so don't throw with rocks. This scenario involves: one GPON ONT device (FTTH, e.g. Huawei, set in "Bridge Mode"); one Mikrotik Router RB3011UiAS-RM…

[TheCat12]

Not quite because your setup would be L2TP client over PPPoE. And in production you would need a more powerful device than RB2011, something like RB5009 would be more suitable.

As for the setup, following things should be done:

1. Add PPPoE client on WAN-facing port (I'll assume ether1):

/interface pppoe-client
add interface=ether1 password="password" name=pppoe-out disabled=no user="username"

2. If absent, add a NAT masquerading rule:

/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-out

3. Add L2TP client with disabled default route:

/interface l2tp-client
add add-default-route=no connect-to="server_IP" disabled=no name=l2tp-out password="password" user="username"

4. Add one of the public IPs to the bridge or the machine-facing interface/s

/ip address
add address="public_IP" interface="bridge_or_eth"

5. Create new routing table for policy routing purposes:

/routing table
add fib name=thr_L2TP

6. Add default route to the L2TP in the newly created table:

/ip route
add dst-address=0.0.0.0/0 gateway=l2tp-out routing-table=thr_L2TP

7. Add routing rules to direct traffic from the devices to the L2TP tunnel:

/routing rule
add action=lookup interface="bridge_or_eth" table=thr_L2TP

8. Assign the public IPs to the devices per the instructions from the ISP

Any critique to the suggested config is welcome

[wiste]

@Defsoul

RB2011

Good evening,

I wrote this little HowTo for RB3011UiAS-RM router.

It seems that the hardware is a little bit older. You may try, and if it will work, I guess that the performances should be lower (traffic encryption - because the router's CPU).

Anyway, because I wanted to use OpenVPN instead L2TP and new authentication methods and ciphers, last year I've upgraded the router's firmware to 7.19.4, but I was disappointed by the GUI, so I downgraded to 7.16.2 (stable) - the last with that graphics.

Regarding L2TP Server, in my RB3011UiAS-RM's WebFig menu (7.16.2 firmware), PPP -> L2TP Server section, a new group appears now: L2TPv3.