Community discussions

MikroTik App
 
shrek777
Member Candidate
Member Candidate
Topic Author
Posts: 264
Joined: Wed Jan 21, 2009 9:44 am

PPP Configuration

Fri Sep 25, 2009 10:09 am

Hello
Please see my current configuration atached,
I have about 100 cients and 5 antennas on whic they are connected, 5 of them are bridge, There are two server one for radius and one for ppp, dhcp, hotspot an routing. all clients are authenticating on sever. Also masqureiding is dneon server Now ISP hase gave me Range of ip address andi want to change configuration.

I want to use server as bridge, i want to use server only for authenticating and for traffic limit, but not for routng, I want to give client direct access to ISP, Is it posible?

Than you
You do not have the required permissions to view the files attached to this post.
 
shrek777
Member Candidate
Member Candidate
Topic Author
Posts: 264
Joined: Wed Jan 21, 2009 9:44 am

Re: PPP Configuration

Sat Sep 26, 2009 8:24 pm

Can anyone help me?
 
shrek777
Member Candidate
Member Candidate
Topic Author
Posts: 264
Joined: Wed Jan 21, 2009 9:44 am

Re: PPP Configuration

Mon Sep 28, 2009 10:45 am

Please i ned it urgently, maybesomeone can help me?
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: PPP Configuration

Mon Sep 28, 2009 6:39 pm

well, ppp and hotspot are not for bridge, I believe... you need to authenticate users on hotspot and then pass them to ISP's network, or what?..
 
shrek777
Member Candidate
Member Candidate
Topic Author
Posts: 264
Joined: Wed Jan 21, 2009 9:44 am

Re: PPP Configuration

Mon Sep 28, 2009 6:50 pm

Thank you for repla.
I have 100 clients. all of them have routers wich connects to genereal server, this routers are pppoe clients and server i have pppoe server, i want to do next.
i want to give clients public ip-s, i want to use pppoe server only for authenticateing not for masqureiding.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: PPP Configuration

Mon Sep 28, 2009 8:16 pm

hm... if you need public ips - then disable masquerading... =)
 
shrek777
Member Candidate
Member Candidate
Topic Author
Posts: 264
Joined: Wed Jan 21, 2009 9:44 am

Re: PPP Configuration

Mon Sep 28, 2009 10:15 pm

I think you didnot understand my question.
I have ether1 and ether2.
on ether1 I have pppoe server.
in ip>firewall i have masqureiding
ether1-192.168.0.1
ether2-192.168.1.2 (192.168.1.1 is gateway. other router Cisco)
now i want to turn off cisco, because i have got many public ips,
example,
if (pppoe client 1)=(pppoe client 1) then redirect to ether2, in other case drop.
(pppoe client 1)=(pppoe client 1) is authentication with radius
but if i will disable masqureiding, how packets from ether1 will go to ether2.
can yu tell me the configuration wich i can use in this scenario, i want to use public ip-s, and i dont want to masqureid network, i want to bridge all packets from authenticated users.

Thank you
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: PPP Configuration

Mon Sep 28, 2009 11:32 pm

what is after Cisco? you cannot just drop it - you need replace its functionality by RouterOS =)
 
shrek777
Member Candidate
Member Candidate
Topic Author
Posts: 264
Joined: Wed Jan 21, 2009 9:44 am

Re: PPP Configuration

Tue Sep 29, 2009 9:44 am

I have to more pictures look at picture 1 tat i atached earlier, there is my scheme, no look at picture 2,

user with ip address 94.43.127.100 wants to communicate to the intenet,
step 1. it cnnects to access point,
step 2. access point bridgs it to server (I have p2p link bitvin clints and server)
step 3. server asks radius, information about client.
step 4. authentication succesed,
step 5. client connects to the internet with its default ip, all packets are passing pppoe server, no routing.

now look at pitur 3.
step 1. it cnnects to access point,
step 2. access point bridgs it to server (I have p2p link bitvin clints and server)
step 3. server asks radius, information about client.
step 4. Authentication Failed.
step 5. all pckets from 94.43.127.100 are rejected.

I want to do this thing,
because now i have masqureiding on pppoe server.
all steps are the same except 5, because, if authenticaton successed, pppoe server douing routing on one pubic ip, so all cients have same public ip. (before routing they have private IPs)
I want to give all of them public ips,
You do not have the required permissions to view the files attached to this post.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: PPP Configuration

Tue Sep 29, 2009 11:17 am

so all you need to do now is giving out public ips to pppoe clients, either from dynamic pool or from RADIUS. and then disable masquerading for your public subnet (by adding 'accept' rule on top of NAT)

Who is online

Users browsing this forum: No registered users and 75 guests