Routing Issue/PPPOE issue

Hi,
We use MT 450G at all of our repeater sites. Our Gateway is MT X86. All other network equipment is UBNT, AP, CPE, ToughSwitches and mostly air-routers.

We have a /24 set of public numbers which we deal out to certain clients as single NATs. Our internal network uses 10.0.0.0/8 (dreamed of owning a massive network back in last century). Our testbed repeater is also a single-natted public number.

We want to start up a PPPOE server (WHMCS and Freeradius) using the 450g as pppoe servers.

Our PPPoe client do connect to the internet. We have assigned it a public number, but when we check, it shows that it is behind the natted repeater. This is the problem we have, we need all traffic from the pppoe client to go to and fro using/presenting it’s own public number.

When we do the following:
nat using the address-list (10.0.y.0/24) for masquerading
mangling the ether port of pppoe client with a routing mark, we loose the public IP Number connection but the natted Private IP number network still functions.

All repeaters are natted:
wan - 10.0.0.x/8
lan - 10.0.y.1/24
and the firewall has the masquerade rule under the NAT tab.

We have set up the testbed as follows:

Freeradius & Whmcs
eth0 - public number
|
Gateway
wan - public number
|
lan - 10.0.0.x/8
|
Backhaul System
bridged - 10.0.0.8/8
|
450G
wan - 10.0.0.x/8
|
lan - 10.0.y.1/24
|
UBNT AP
bridge - 10.0.y.2/24
|
UBNT CPE
bridged - 10.0.y.x/24
|
UBNT Air-Router
wan - PPPOE Client
|
lan - 192.168.1.1/24

You are making NAT with a private ip address? so in the end you have 2 to 3 NAT’s from the publip ip?

Why dont you just route all the reapeater segments and make one nat in the main gateway?.