Subnetting

Dear All,

I am using Mikrotik router since a while. But i stuck in subnetting, i am sure someone can help me to sort this issue out.

I have public IP 41.41.25.0/24 issued by my provider. I want to break this big network into smaller network in order to give /29 blocks to my customers. Some customer need only single IP.

41.41.25.1 is the gateway for us provided by the ISP.

What is did i assigned 41.41.25.2/24 ip to the WAN interface of the Mirkotik and assigned 41.41.25.8/29, 41.41.25.16/29 and so on on LAN Interface.

And i assigned IPs 41.41.25.12 to the customer according to the subnet and his gateway is 41.41.25.9 everything is working well. But some of them are not able to ping their firewall IPs from outside. When we do check whatismyipaddress it shows the IP address as 41.41.25.2 instead of 41.41.25.12 which is my WAN interface IP.

What should i do so that when customer check their IP on the website it shows them their IP. Please help me to solve this issue and i thank you guys in advance.

What is happening to you, is because you are NAT-ing your network, so even if you assign to the customer a public IP, it is in fact just another “private” ip since it sits behind a router, and as a result not accessible from internet.
Since your customers are going to use their own routers you don’t need to NAT them, therefore you just create a bridge with proxy-arp and add to this bridge the interface you connect to your ISP and the interface you connect to your customers.

Other solution would be net-mapping, but that would involve a lot of repetitive configuration rules for the whole /24 subnet.

Hi Tony:

thanks buddy for your help. I had sorted the issue last night. what i did is use another 1200 RB and create the two interface and bridge them and this way everything is working well and i also able to control their bandwidth.

Thanks again :smiley: :slight_smile:

Regards

Vasi

If you have some customers on public IPs and some on private you can make the outbound masquerade selective so that valid public IPs are untouched.

If the method of delivery for the /24 makes routing it difficult it would be worth changing the delivery method!