Separate WAN and LAN IP Provided by ISP

Hi,

My ISP has provided WAN ip pool of /30 and LAN ip pool of /25.

I have assigned WAN IP to my 10G port on MK CCR 1036 and able to ping gateway.

On LAN side, I have 2 DHCP pools under different VLANs assigned on a 10G port for different type of access.

Now where should I assign LAN IP virtually to start accessing internet?

Pls help its urgent as I am working on a venue.

If /25 is routed subnet, which it most likely is, then it’s up to you. You can assign it to inner network(s) and give public addresses to internal hosts. Or you can put it anywhere on router and use it with srcnat. Or don’t assign it anywhere and still use it for srcnat.

Basic srcnat example:

/ip firewall nat
add action=src-nat chain=srcnat src-address=192.168.88.0/24 to-addresses=1.2.3.4

Where 192.168.88.0/24 is LAN and 1.2.3.4 is public address from /25.