Routing public IPs

Hi all!

I need some help on routing. I have four public IPs to use, all with one gateway.
The thing I’d like to do is sounds quite simple: I’d like to give an IP, from the four public IPs, to one of my clients behind the router.

For example:
WAN:
Address: 10.0.0.2/28 Gateway:10.0.0.1/28

LAN:
Address: 192.168.0.1/24

Clients:
Address: 192.168.0.x/24 Gateway: 192.168.0.1

How to route the 10.0.0.3 IP to one of my clients behind the MT? So, the goal, to have a client with the 10.0.0.3 address.

Thanks for you help!

This is called 1:1 NAT and has been discussed countless times on this forum try searching for, “1:1 NAT”, “1 to 1 NAT”..

http://www.mikrotik.com/docs/ros/2.8/howto/howto.content#12.2.6
http://www.mikrotik.com/docs/ros/2.8/ip/nat

I’m sorry for that, but you’re missunderstood me I think. I’d like to do it without NAT.
I want the client, not to have any local IP. So, the client shuld have the 10.0.0.3 address set in his ip settings.
And it’s not a kind of NAT thing I think. It should be routed somehow. And this is the question.

But thanks for the fast answer. :wink:

try proxy-arp function, but you will loose some adreses from your subnet:
http://www.mikrotik.com/docs/ros/2.9/ip/address.content#7.42.4

I thought it can be solved by routing. Or by use of a routing protocol. So there is no way to do it in that way?

umm if I remember the basic routing class I took way back when I seem to recall that you can not route from a public network to a private (reserved address space) network. You have to do NAT/PAT or Proxy-ARP.

What you’re proposing is also extremely insecure. The publicly accessible machine should be on it’s own DMZ interface. Then you have two options: 1 to 1 NAT, recommended, or, bridge the internet interface to the DMZ interface. The second is less secure.

Regards

Andrew

A router doesn’t care about a public IP being routed across private space, do it all the time. Now, obviously the end client needs to have a valid gateway on the same subnet so you need to keep that in mind.

Alternatively, you could deliver an IP via a point-to-point connection of some sort, PPPoE or PPTP.

As for your particular situation kkboy, I may be able to help you with your routing issues. If you drop me an e-mail with some more of the specifics of your sitution I would be happy to walk you through some alternatives to bridging or NATting.

mikrotik@rikerconsulting.com

~ Jason

Well, Thank you very much for the answers! I think it’ll be solved by the PPPoE protocol.
Riker: Thanks for you help! On this weekend I’ll try to solve this, and if I’ll fail, I’ll drop you a mail with all the information.
And thanks again for everybody!