First off, I’d like to say I am new to RouterOS, and so far am very happy with it. I’ll start off with the problem I am trying to solve.
I am working out how to replace our Cisco infrastructure with RouterBoard hardware. I currently have 3 different VLANs:
192.168.10.0/24
192.168.20.0/24
192.168.30.0/24
They go through a transparent proxy/security appliance (Smoothwall), and then out the router. Currently the Cisco switches themselves act as the gateways for all of the VLAN subnets.
I am testing out a RB2011UiAS-IN right now to see if I can configure it to be a replacement (for production we’ll probably get something beefier). So far I’ve managed to configure 3 different subnets on 3 ports, with NATing working great with the WAN.
What would be the best way of routing the traffic to the transparent box? Since it isn’t only a proxy, it doesn’t make sense to send just the web traffic to it. It also does traffic shaping, bandwidth management, etc, so we want to send all of the outbound/inbound traffic to it.
It is possible to route out via one network port on the RB device, go through the transparent proxy (which has 2 nics), and come back in a different port?