I’d like to share a 10Gbit Internet Connection with 6 neighbours over 1Gbit fibre. We own a ccr2004-1G-12S+2XS . I’d like to isolate every connection from each other. Every neighbour has its own port with a 1 Gbit SFP. Every neighbour has its own subnet, with it’s own dhcp range,
What is the easiest, fastest way?
Exactly like you mentioned ;
1/ Configure 6 ports, put 192.168.x.254/24 on each of the interfaces.(eg 192.168.1.x , 192.168.2.x , 192.168.3.x and so on)
2/ Configure DHCP for each of theses ranges, make sure you hand out DNS (eg. 1.1.1.1 or 8.8.8.
and gateway
3/ Configure Firewall-policies where you DROP src=192.168.x.x dst=192.168.x.x so they cannot communicate to each other.
4/ Configure NAT-policy to allowed all of them through the shared WAN pipe.
5/ No need to configured QoS/Shaping, users are limited by their 1G port anyway.
Thank you. In your explanation, there is no Bridge. Is no Bridge used?
Bridge is only necessary if one wants to switch between bridge member ports. If device is used as pure router (strictly routing between ports), then bridge is not needed (and if it’s used then one has to take extra steps to block L2 communication between different ports).
One thing to be cautious of is your ISP may not be very happy with you sharing your internet with other potential customers of theirs. May very well flat out violate your terms of service. I know it would for me.
What no bridge, I feel nakid!!
I would still use vlans LOL.
Each vlan assigned to each port ;-PPPP
With my provider sharing isn’t a problem
thank you it works