Routed public IP’s over transit from upstream provider

RouterOS Beginner Basics
1

Hello all,

Let me start off by saying thank you for everyone on here, there is so much Information on here. When you think you have read it all, there is always more. it wouldn’t be possible with out everyone on here chipping and chiming in. Iv been reading this forum for over a year now, from basic to advance. I am building a small WISP and I’m starting to get rolling. I have a fiber from my upstream ISP to my CCR1009-7G-1C-1S+
They have provided me with the following public IP’s with these labels
WAN IP BLOCK xx.xx.152.228/30
WAN Gateway xx.xx.152.229
WAN IP xx.xx.152.230

Customer block xx.xx.232.128/28
Gateway xx.xx.232.129
Usable IP’s xx.xx.232.130 - xx.xx.232.142

I asked them to route that /28 through the /30 for I will have internal public IP’s for servers, ect..

My current config is eth1 is WAN with the WAN IP block on that interface all other eth’s are routed none are bridged with firewall and NAT and private IP’s and it works great with no issues.
I have read and tried multiple ways to route the customer block they have provided me onto my internal interface along with the private addresses with no luck.

2

How this needs to be done depends on how many routers you have. Is it just the one, or do you have routers at towers as well?

3

I plan on having RB960PGS’s at each tower site. Each tower will have its own public and all the AP’s and CPE’s will be privately addressed
My head end (CCR1009) also has a tower with AP’s and connected CPE’s that will require private addresses

There is also a managed netonix switch at each site including head end,
Something like this

Upstream fiber - CCR1009 - Netonix SW - AP’s ~ CPE’s

  • BH ~ BH -
    RB960 - Netonix SW - AP’s ~ CPE’s
  • BH ~ BH -

RB960 - Netonix SW - AP‘s ~ CPE’s

  • BH ~ BH
    So on and so forth,
4

If that’s the case, you’ll probably want to use each IP individually as a loopback to NAT the traffic to and advertise them in iBGP or just in OSPF.

Here is a blog I did that has some of the config you need. You can skip the VPLS/MPLS sections and just use the OSPF/Loopback portion to do this.

https://stubarea51.net/2018/04/23/wisp-design-building-highly-available-vpls-for-public-subnets/