Hello, everyone. I'm new to this board and admit I'm trying to find an answer without spending all night searching for it. I've spent some time already, and it seems very likely that RouterOS is the culprit.

First I want to say that although I just discovered Microtik and RouterBOARD today, I can tell that it is a very good company. This forum's code looks well maintained. The RouterOS looks phenomenal. RouterBOARD.com's landing page is refreshingly sparse. Finally, the registration email for the forum DOESN'T include my password in plain text, like some websites do, and actually says my password is securely stored and cannot be retrieved, but only changed.

The following is my configuration:
Linksys WRT54G:
Ethernet: 192.168.0.13/255.255.255.0, gateway and dns 192.168.0.1
Wireless[router interface, accessible to LAN and wireless clients]: 192.168.16.1/255.255.255.248, dhcp server

IBM Thinkpad T41
Built-in Intel LAN: 192.168.0.1/255.255.255.0, dhcp server
Built-in Intel wireless: 192.168.16.3/255.255.255.248, gateway and dns 192.168.16.1
Xircom PCMCIA lan/modem: 10.5.25.53/255.255.252.0, gateway 10.5.24.1, dns 10.5.24.1, 87.238.112.38, 94.236.48.108

linksys eth<->ibm intel lan
linksys wireless<->ibm intel wireless
ibm xircom<->my isp

The following is my problem:
I am in Iraq and I would like to share my internet with my roommate. The internet's pretty slow for $50/month anyway. However, I cannot make any of my devices share this internet connection. I have tried the configuration above, with my PC. I have tried using my Linksys router as the sharing device, and I have tried using my Vonage voice gateway as the sharing device. I have simplified the problem to not being able to ping any device past the gateway, from the attached devices. Look at the tracert to http://www.google.com below, taken from my pc:

---------------------------------------------------------------
C:\Documents and Settings\Performance>tracert 74.125.39.104

Tracing route to fx-in-f104.1e100.net [74.125.39.104]
over a maximum of 30 hops:

1 469 ms 637 ms 2 ms 10.5.24.1
2 3 ms 2 ms 3 ms host-91.151.155.193.customer.ce-tel.net [91.151.
155.193]
3 522 ms 517 ms 543 ms 172.20.0.1
4 817 ms 521 ms 518 ms access6.ce-tel.net [91.151.144.8]
5 525 ms 520 ms 1017 ms backbone1-gige-0-2-92.ce-tel.net [91.151.144.49]

6 526 ms 630 ms 521 ms kln-145-253-9-73.arcor-ip.net [145.253.9.73]
7 540 ms 522 ms 522 ms 92.79.213.122
8 538 ms 536 ms 541 ms 72.14.219.5
9 582 ms 537 ms 535 ms 209.85.241.112
10 561 ms 1044 ms 534 ms 209.85.254.112
11 563 ms 549 ms 540 ms 209.85.254.134
12 972 ms 539 ms 541 ms fx-in-f104.1e100.net [74.125.39.104]
---------------------------------------------------------------

I can ping 10.5.24.1 from the linksys, but I cannot ping 91.151.
155.193 from the linksys. This issue is a new one to me, but I'm not the networking expert. Can anyone help me figure out, at least, what about the RouterOS makes this happen?

EDIT:
10.5.24.1 I believe is a Routerboard device, according to its MAC address. My prepaid ISP's web page comes up OK before I log in, but after I log in to their service, I can no longer access their web page. I can only access the status page provided by 10.5.24.1. Thanks for the reply.

maybe I am just missing it, but I don't see where you have the routeros box in this picture.

Just configure the sharing device as a NAT router and it will most likely work. Or talk to the ISP to see what they recommend. They would be familiar with what you have (and what they have) and be in a better position to assist.

From what I can tell from your post, you don't have any Mikrotik products involved at your end at all.

It appears that your T41 has an ISP provided PCMCIA card that establishes your internet connection.

I would use ICS on the T41 and treat the WRT54G as a standard access point with switch instead of using it as a router/dhcp server.

Alternatively have the WRT54G as router as it IS a router, keep it simple . . . .

<wireless>
/
<isp> ----> <wrt54g> ------> <
\
<wired>

Again I'll echo that this isn't really a Mikrotik issue.

Set the WAN on the WRT54G to the IP of the ISP or if possible to receive from a DHCP server . . . .

Set the LAN on the WRT54G to a SINGLE IP pool, secure wireless as you deem appropriate (I happen to use WRT54G at several family homes with mac address allow lists and WPA2 security), I happen to have wired connections without any security, but then if a hacker is IN the house them accessing the internet is the least of my worries!!!!!!!

Josh

First of all, a genuine thank-you to everyone who has posted. Thank-you to the 87 people who have viewed this post, too. I apologize for taking so long to post again. It's hard to find enough time to post, let alone enough time to try new things.

For everyone:
The reason I am blaming RouterOS is because of the MAC address of my gateway, 10.5.24.1. It is 00-0c-42-20-60-a8. You can go to http://www.coffer.com/mac_find/, like I did, and discover that it is a RouterBoard.com product. Again, NAT does NOT work.

butche:
I emailed my ISP. They said:

"You can share your account to any other [sic] people as long you have permission for them to use your account however an account can only be use [sic] one at a time."
and
"Sniperhill account [sic] can be shared as long as the owner gave permission to to who ever he wanted to. And you can use only one account at a time."

When I responded with details, I got no reply. I think they expect the gateway to perform the way it is.

ScottReed:
The PCMCIA card is one I bought a long time ago for another laptop, long story. But it is not the problem because I get the same behavior on (1) my ICS laptop, (2) my NAT gateway/AP, and (3) my Vonage VoIP gateway, when I use each as the gateway, respectively.

JJOliver998:
If I use the WRT54G as a router, each user will get an IP from the ISP, thus each user will still have to have his or her own login ID and password, meaning that each user still has to purchase time individually.

Further, and this is for everyone, the ISP has a point about not allowing people to share their internet but they're blocking my Vonage VoIP gateway, a legitimate use. I didn't think it was technologically possible to block ICS, until now.