Public IP's in "private" networks.

RouterOS General
1

Connected like ISP–GW–ROUTER1–ROUTER2–ROUTER3–Client

Hello.

I am working on routing our public addresses all the way trough the “private” net usually running NAT.
I know the way by adding public IP on all the equipment and route like usually. Like we extend the public network all the way to the costumers.

I would like to avoid adding public ips to the equipment just running rutes and link, where there are no users directly connected.

Would something like this work?

Best regards
Henrik

ISP GW
WAN 82.150.84.1/23

GW LAN:
WAN 82.150.84.6/23
LAN 10.111.0.1/24
Routes:
0.0.0.0/0 GW 82.150.84.0/23
10.112.0.0/24 GW 10.111.0.2/24
10.115.0.0/24 GW 10.111.0.2/24
82.150.85.0/24 GW 10.111.0.2/24

Router 2
LAN 1: 10.111.0.2/24
LAN 2: 10.112.0.1/24
Routes:
0.0.0.0/0 GW 10.111.0.1/24
10.115.0.0/24 GW 10.112.0.2/24
82.150.85.0/24 GW 10.112.0.2/24

Router 3
LAN 1: 10.112.0.2/24
LAN 2: 10.115.0.1/24 and 82.150.85.1/24
Routes:
0.0.0.0/0 GW 10.111.0.1/24

Client:
LAN 82.150.84.2/24
Routes:
0.0.0.0/0 GW 82.150.85.1/24

2

It will work, I have done this already, but make sure that you do not NAT the public subnet.

Regards.

Faton

3

Just add the static Routes for Client IP Addresses on each of the router. And that will works.

  • Rio.Martin -
4

Thx.

I thougth it would work like this.

But its not working, and I think it’s because of the adresses being routed in the private LAN belongs to the scope /23 between my GW and MY ISP GW.
Then the same adresses i routed by a /23 going to ISP gateway and /24 pointing towards my LAN.

Am I on the rigth track here?

Best regards
Henrik

5

Henrik,
There are nothing wrong in your setup.

  1. You must check the availability of your network 82.150.85.0/24
    Have your ISP succesfully activate it for you.
    Give the unlimited ping counts to 82.150.85.1 from other network outside your own network (internet).
    Watch the packet sniffer for network 82.150.85.0/24
    Any packets ?

  2. Check every router on your network. Watch and be careful for every rules you made on Forward, Filtering Rules.

    \

  • Rio.Martin -