setting up new network newbie q's

RouterOS General
1

I’m trying to figure out how I could set up my new RB450G and two 250GS in a pretty specific way for my apartment. I’ve attached a file to give some idea of what I’m planning.

I have a 100/10mbit fiber connection which comes to the apartment via ethernet. My hosting provider provides up to 5 public ip-addresses. I would like to have a separate vlan for all my computers, a management vlan and a third vlan for my ip-tv.

The real problem is that I have an ip-tv set up which came with a “service router” and the provider refuses to give out any documentation. They claim it will only work with the provided router though I find it unbelievable. Anyway, before debugging what really needs to be open I was thinking (if possible) I could get two wan ip’s, use the first one for most of the network and do a 1:1 static nat to the service router. Does this sound feasable? If I get it to work I would like to assign one of the routerboards interfaces to duplicate that traffic and use snort to find out what traffic is involved.

Please see the attached image for graph of hardware and network topology I had in mind.
home_network2.png

2

Actually for vlan 3 a full bridge from the ISP could be even better then a 1:1 NAT.

edit:

If I understood this correctly, I should be:

  • creating the vlans
  • configuring dhcp pools for each vlan and assigining them to the vlan interfaces (not the bridge like it is now)
  • create a bridge and assign the vlans to it
  • assign the bridge to ethernet ports (for example 2,3,4)

Should I be creating two virtual interfaces and assigning them to another bridge, and assigning that to ether1-gateway for the wan addresses?