Community discussions

 
Marlon89
newbie
Topic Author
Posts: 26
Joined: Fri Jul 30, 2010 7:58 pm
Location: Charlotte, North Carolina, USA

Use external IPs on internal servers

Fri Jan 03, 2014 5:47 am

I have a block of IP addresses that my data center provides to me. I am currently using one of them as the WAN IP on my Mikrotik router. I need to use the others on a single web server, as Apache requires that you use a separate external IP address for each SSL certificate. I want to keep the server behind my Mikrotik firewall, but I need to somehow map the external IP addresses to the internal server.

I understand that I can use this tutorial to route the external IPs to internal IPs, but I need Apache to use the external IPs rather than internal ones at the server level.

What is the best way to give my web server external IP addresses while remaining behind my Mikrotik firewall?
 
CelticComms
Forum Guru
Forum Guru
Posts: 1766
Joined: Wed May 02, 2012 5:48 am

Re: Use external IPs on internal servers

Fri Jan 03, 2014 9:14 am

How are these IPs provided to you? e.g. Does the ISP expect the IPs all to be available on your WAN interface or is the ISP routing a block of public IPs via an independent link network (using a different IP range).
Interlynx | Networking and Information Security Consultants & Trainers | Email: routerlynx@gmail.com
BGP | EIGRP | OSPF | MPLS | Firewall | VPN | IPsec | Multicast | QOS | IPv4/6 | STP | VLAN | PON | AE | M2M | and more!

 
Marlon89
newbie
Topic Author
Posts: 26
Joined: Fri Jul 30, 2010 7:58 pm
Location: Charlotte, North Carolina, USA

Re: Use external IPs on internal servers

Sat Jan 04, 2014 4:08 am

How are these IPs provided to you? e.g. Does the ISP expect the IPs all to be available on your WAN interface or is the ISP routing a block of public IPs via an independent link network (using a different IP range).
It's a small /30 block routed via my primary WAN IP.
 
nerdtron
Member Candidate
Member Candidate
Posts: 123
Joined: Sat Nov 30, 2013 7:49 am

Re: Use external IPs on internal servers

Sat Jan 04, 2014 5:58 am

If it is /30, then it is just a point-to-point connection, one is your ISP and one is your WAN IP.
Or do you have more IP blocks?
 
rodolfo
Long time Member
Long time Member
Posts: 543
Joined: Sat Jul 05, 2008 11:50 am

Re: Use external IPs on internal servers

Sat Jan 04, 2014 11:38 am

It seems you must use the ip assigned to your wan.
You can NAT ports of this IP to you private server ip.
rodolfo
IZ0UQV
 
CelticComms
Forum Guru
Forum Guru
Posts: 1766
Joined: Wed May 02, 2012 5:48 am

Re: Use external IPs on internal servers

Thu Jan 09, 2014 6:22 pm


It's a small /30 block routed via my primary WAN IP.
If you use the link network WAN IP as your RouterBoard's WAN IP then that will free up the /30. You could then assign the /30 to an internal interface which would allow you to use 2 of the addresses on servers. Alternatively you could use private IPs internally but assign each of the 4 public IPs to a server as a /32 allocation. You would then have to have the RouterBoard route to each of the /32 public IPs via a private IP but you could then use all 4 of the /30 addresses on different networks with the slight downside that you are routing public IPs via private IPs.
Interlynx | Networking and Information Security Consultants & Trainers | Email: routerlynx@gmail.com
BGP | EIGRP | OSPF | MPLS | Firewall | VPN | IPsec | Multicast | QOS | IPv4/6 | STP | VLAN | PON | AE | M2M | and more!

Who is online

Users browsing this forum: MSN [Bot] and 187 guests