Question about 2 IP's on one interface

Hello All,

We run a WISP in Northwest Missouri.

I have an RB1100AH that runs BGP with an upstream provider and all of my customers go though this router. This router is upstairs in my office. We have our own RB433 for our internal network. I have the RB433 set up as a PPPoE client and it gets its public IP and all works well, except for that I cannot access the customer radios or tower radios when I am behind my firewall. I know that this is normal, but I am trying to figure out a way to get around this.

I added an address on the RB1100AH as 10.255.255.254/24 and on my RB433 of 10.255.255.253/24 and added a default route to 10.255.255.254. This works for managing the customer and towers, but I am just being NATed at this point out of the BGP interface of the RB1100AH. I set up a NAT rule that says 10.10.0.0/24 to go out of “PPPoE” client, as well as setting up a NAT rule 10.10.0.0/24 to go out of ether1 (WAN where PPPoE client is setup as well as the 10.255.255.253/24)

I know I am overlooking or doing something wrong here.

My goal is to have my own router for my internal network, being a PPPoE client to the RB1100AH that is doing BGP, and still managing customer radios behind my internal firewall.

If I confused you, please tell me where I lost you. I think I confused myself…

You don’t need to add a default route to 10.255.255.254 to achieve what you want, you can just add a route to your equipment subnet to that IP then anything headed to your equipment subnet will go to 10.255.255.254, and anything headed for another IP will use your default route.

/ip route add gateway=10.255.255.254 dst-address=<equipment subnet>

You also don’t need to NAT yourself out your LAN interface assuming your towers know how to get back to your main router with a default route, and your main router knows how to get back to your 433 with a more specific route.