WAN IP

Hello

We have been given a /30 (connection to ISP) and /29 (secondary local usable WAN block) public WAN IP’s from our ISP.

We have the /30 setup on the interface connected to the ISP.
We then have a bridge setup with the first usable WAN IP of the /29 block. Which is the gateway for connected devices using /29 block IP’s.

ISP ↔ Mikrotik Router1 (/30 connects to ISP, and has interface with first usable /29 block assigned to bridge) ↔ Mikrotik Router2 (next avail /29 IP with router1 bridge IP as gate)<-> PC (with a local LAN IP)

Everything works fine, and we can connect/hit all IP’s on the /29 block from outside/internet. The /29 devices can get to the internet fine as well. The PC has internet access through the chain.

Our problem/issue is the PC shows that its WAN IP as the /30’s. We want the PC to show that its WAN IP is the WAN IP of Router2’s /29 IP. This way we only have to NAT from router2. right now for certain apps we have to NAT from the /30 to /29 to LAN.

Any help is greatly appreciated.

Regards
Joe

Check your srcnat rules, you have some that matches all traffic, including your /29. Adding this before all others should do the trick:

/ip firewall nat
add action=accept chain=srcnat src-address=<your subnet>/29

Hi Sob

Thank you! Much appreciated. Worked like a charm. I knew it was something simple. :wink:

***** for Sob

Regards
Joe