I’ve got a client who’s got a block of IP’s that he wants to share with the tenant offices in his building. He has one static address per client and he wants them to have full access to the static IP with no firewall. They can firewall their own connection.
I was going to do this with a switch (plug each client into a switch along with the isp, bridge the ports, and give them all their own ip), but he also wants a to manage the traffic so the SIP traffic has priority. I don’t usually set up multiple networks, but I know that since routerOS is used often in WISPS I thought there must be a way to shape traffic and allow each user to have a static IP address.
Sounds like a good application for PPPoE.
Yup. I wondered about that, but I haven’t used it before. Are there are any how-to’s out there to help me muddle through this. I think the broad steps are:
- assign first available ip after the gateway to ether1.
- enable OSPF for my subnet
- bridge the physical ports that I want to use with the ppoe server
- create a pool of my available addresses
- create ppp, and secrets.
- start the server on my bridge interface
Does that sound right? With OSPF enabled I shouldn’t have to add any routes.
I’m not so sure you’d even need to implement OSPF.
I’m only using PPPoE on a single router for one of my installations (as a means to distribute a public IP to a router farther inside the network) and when the session connects, it’s automatically added to the routing table on the core router.
You can specify client routes in the PPP secret if there is some additional routing you want to have happen (ie: if you want client subnets to be able to reach each other). I’ve done this with my lab network and it allows me to communicate directly from my corporate network to devices on the lab LAN.
Otherwise you pretty much have the idea down. I’d recommend setting it up in on the bench and playing with it a little bit to make sure it behaves as you expect. If something isn’t quite right or you need some further help, post back and I’m sure someone will be able to answer.
Thanks very much for your help. I will set it up in a lab and see is I can get it to play nice. Cheers!
The one thing that I can’t figure our right now is how to assign the same IP address to same person.
You can assign a specific IP via the “Remote Address” value in the PPP Secret.