Community discussions

MikroTik App
 
cutedrummerboy
Member Candidate
Member Candidate
Topic Author
Posts: 137
Joined: Thu Nov 14, 2013 6:32 pm

need help

Sun Nov 30, 2014 5:05 pm

net dia.png
here is the diagram of my current setup
all ports are master of its own
both router's ether2 have a static route to opposite side router
both router have a masquerad rule with out interface ether1



now the question is, is this setup is okay and rock solid?
is there any chance of leaking my internet to my friend or vice versa?
is there any chance of leaking my isp subnet to my friend or vice versa.

by the way,
the goal is accessing each others subnet

thanks and regards
You do not have the required permissions to view the files attached to this post.
Device: RB2011UIAS-RM, RB750GL, CISCO SG300-28, UNIFI UAP-LR
 
cutedrummerboy
Member Candidate
Member Candidate
Topic Author
Posts: 137
Joined: Thu Nov 14, 2013 6:32 pm

Re: need help

Mon Dec 01, 2014 10:35 am

anyone? please help me.
Device: RB2011UIAS-RM, RB750GL, CISCO SG300-28, UNIFI UAP-LR
 
User avatar
gabrielpike
Frequent Visitor
Frequent Visitor
Posts: 84
Joined: Thu Apr 17, 2014 4:17 pm

Re: need help

Mon Dec 01, 2014 10:21 pm

It seems that what you are doing should work just fine. If you and your friend want to set up failover through each others ISPs it is possible if a gateway is added. Without a default gateway pointing at each others routers you will not be sharing internet connections.
Gabriel Pike
MTCNA
 
User avatar
hgonzale
Member Candidate
Member Candidate
Posts: 268
Joined: Thu Nov 06, 2014 1:12 pm
Location: Fuengirola, Spain
Contact:

Re: need help

Mon Dec 01, 2014 11:36 pm

It looks very good. I love this design. I dont know if you have bandwidth control, priorities and something else. But this is a normal setup for that.
 
cutedrummerboy
Member Candidate
Member Candidate
Topic Author
Posts: 137
Joined: Thu Nov 14, 2013 6:32 pm

Re: need help

Tue Dec 02, 2014 6:40 am

hmm.
thanks for the replys. but you already told me the main problem. now can you help me in that case.

how can i block that internet leaking to my friend if he set his gateway as my ether2 ip address.
Device: RB2011UIAS-RM, RB750GL, CISCO SG300-28, UNIFI UAP-LR
 
technicarl
just joined
Posts: 13
Joined: Wed Nov 26, 2014 7:07 am

Re: need help

Tue Dec 02, 2014 7:51 am

This should do the trick:
/ip firewall filter add chain=forward action=drop in-interface=ether2 out-interface=ether1

That will add a filter rule dropping packets from your friends subnet to your isp.

Who is online

Users browsing this forum: Baidu [Spider], joshfinlay, txfz and 66 guests