Community discussions

MikroTik App
 
Aymen1986
newbie
Topic Author
Posts: 29
Joined: Thu Jul 12, 2018 5:15 pm

How to remove one or more NAT layers from my internal network?

Mon May 29, 2023 7:52 pm

I have RB2011 connected through wan port to ONT , and users can access the internet using NAT , so can i allow users accessing internet without using NAT
You do not have the required permissions to view the files attached to this post.
Last edited by Aymen1986 on Thu Jun 01, 2023 8:38 pm, edited 1 time in total.
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11381
Joined: Thu Mar 03, 2016 10:23 pm

Re: Accessing internet without NAT?

Mon May 29, 2023 8:06 pm

If you have only one public IP address available, then only one device can communicate directly with internet (others can do it through the first one and NAT is the name of the game). If you have multiple public IP addresses available, then yes, as many devices can communicate with internet without NAT.

It's probably a good idea to have a firewall between internet and your devices. But if you do introduce stateful firewall, then performing NAT by that box is almost free of charge as most tasks (connection tracking) are done already.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 18958
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Accessing internet without NAT?

Mon May 29, 2023 9:02 pm

You can also touch your tongue on both battery terminals.................
 
User avatar
Buckeye
Forum Veteran
Forum Veteran
Posts: 883
Joined: Tue Sep 11, 2018 2:03 am
Location: Ohio, USA

Re: Accessing internet without NAT?

Mon May 29, 2023 10:20 pm

@Aymen1986 It seems you don't understand the purpose of NAT or the difference between private and public ip addresses.

Watch this layman's guide to NAT. How Network Address Translation Works by PieterExplainsTech (a 2012 video, but still one of the best layman's explanation I am aware of).
 
Aymen1986
newbie
Topic Author
Posts: 29
Joined: Thu Jul 12, 2018 5:15 pm

Re: Accessing internet without NAT?

Wed May 31, 2023 7:23 pm

@Aymen1986 It seems you don't understand the purpose of NAT or the difference between private and public ip addresses.

Watch this layman's guide to NAT. How Network Address Translation Works by PieterExplainsTech (a 2012 video, but still one of the best layman's explanation I am aware of).
i mean , i don't want to use double NAT , I know the principle of NAT , but in my case there're two NAT, the first one is the ONT (Router) and the second one is Mikrotik router
 
User avatar
Amm0
Forum Guru
Forum Guru
Posts: 3169
Joined: Sun May 01, 2016 7:12 pm
Location: California

Re: Accessing internet without NAT?

Wed May 31, 2023 7:32 pm

Three choices:
1. Reconfigured ONT/router - e.g. directly connect Mikrotik to the ONT, or if ONT+router is integrated look for some "passthrough" mode
2. Setup the Mikrotik as a bridge & just use the ISP's router for NAT
3. Use a NAT "netmap" to map your Miktrotik IP /24 range to the /24 subnet assigned by ISP's ONT/router
 
Aymen1986
newbie
Topic Author
Posts: 29
Joined: Thu Jul 12, 2018 5:15 pm

Re: Accessing internet without NAT?

Thu Jun 01, 2023 12:07 pm

Three choices:
1. Reconfigured ONT/router - e.g. directly connect Mikrotik to the ONT, or if ONT+router is integrated look for some "passthrough" mode
2. Setup the Mikrotik as a bridge & just use the ISP's router for NAT
3. Use a NAT "netmap" to map your Miktrotik IP /24 range to the /24 subnet assigned by ISP's ONT/router
could you help me doing the second and third choices , or give me som resources ?
 
Aymen1986
newbie
Topic Author
Posts: 29
Joined: Thu Jul 12, 2018 5:15 pm

Re: Accessing internet without NAT?

Thu Jun 01, 2023 12:21 pm

Three choices:
1. Reconfigured ONT/router - e.g. directly connect Mikrotik to the ONT, or if ONT+router is integrated look for some "passthrough" mode
2. Setup the Mikrotik as a bridge & just use the ISP's router for NAT
3. Use a NAT "netmap" to map your Miktrotik IP /24 range to the /24 subnet assigned by ISP's ONT/router
NOTE : ONT WAN port has a dynamic public IP address not a Static.
 
User avatar
Znevna
Forum Guru
Forum Guru
Posts: 1347
Joined: Mon Sep 23, 2019 1:04 pm

Re: Accessing internet without NAT?

Thu Jun 01, 2023 1:03 pm

Easy fix, remove the ancient rb2011 from the picture and allow your users to use the internet.
Or configure it as a switch if you need a fancy switch.
 
Aymen1986
newbie
Topic Author
Posts: 29
Joined: Thu Jul 12, 2018 5:15 pm

Re: Accessing internet without NAT?

Thu Jun 01, 2023 1:50 pm

Easy fix, remove the ancient rb2011 from the picture and allow your users to use the internet.
Or configure it as a switch if you need a fancy switch.
RB2011 is necessary to control the bandwidth,login, .....
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11967
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: Accessing internet without NAT?

Thu Jun 01, 2023 2:23 pm

Easy fix, remove the ancient rb2011 from the picture and allow your users to use the internet.
Or configure it as a switch if you need a fancy switch.
RB2011 is necessary to control the bandwidth,login, .....
Already from the description, the initial question, and the image you have always had confused ideas.
Or maybe you have it clear and you confuse ours because you can't explain yourself.

Give a detailed description of what the RB2011 does and also the characteristics of what the ONT can do instead of ellipsis…
 
pe1chl
Forum Guru
Forum Guru
Posts: 10185
Joined: Mon Jun 08, 2015 12:09 pm

Re: Accessing internet without NAT?

Thu Jun 01, 2023 4:08 pm

Configure and use IPv6, then you get many addresses that you can use without NAT.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11967
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: Accessing internet without NAT?

Thu Jun 01, 2023 4:38 pm

Configure and use IPv6, then you get many addresses that you can use without NAT.
😥 sorry, not all ISPs have someone who at least knows what IPv6 is...
 
User avatar
Amm0
Forum Guru
Forum Guru
Posts: 3169
Joined: Sun May 01, 2016 7:12 pm
Location: California

Re: Accessing internet without NAT?

Thu Jun 01, 2023 5:23 pm

I guess I'm lost. Is the ONT is giving a dynamic public IP? e.g. not 192.168.x.y, 10.x.y.z, etc

I was under the impression there was a "double NAT" and that's what I'm not hearing... So...

Give a detailed description of what the RB2011 does and also the characteristics of what the ONT can do instead of ellipsis…
Yup that's needed here.

Otherwise, QuickSet would seem to handle this case (e.g. ether1 to ONT, ether2-5 LAN, with a dhcp client on ether1, dhcp server on bridge, masquerade NAT rule).
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11967
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: Accessing internet without NAT?

Thu Jun 01, 2023 5:26 pm

Yes, but do not eliminate the Double NAT :(
 
User avatar
Amm0
Forum Guru
Forum Guru
Posts: 3169
Joined: Sun May 01, 2016 7:12 pm
Location: California

Re: Accessing internet without NAT?

Thu Jun 01, 2023 5:44 pm

Yes, but do not eliminate the Double NAT :(
Well, It's the ONT that's the mystery here. If the ONT is giving out a real public IP (even dynamically via DHCP), there would be no double NAT ;).

My thought is if ONT was handing out a private subnet, that you can use a netmap, instead of masquerade. Still be double NAT in a sense, but at least the Mikrotik LAN IP align with the ISP router's LAN.

But if the ISP is really giving out a private, non-public IP address, or is some "CGNAT". No config is going to remove the double NAT.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11967
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: Accessing internet without NAT?

Thu Jun 01, 2023 5:48 pm

Ahhhh on the last case are Triple NAT!!!


Image
 
wiseroute
Member
Member
Posts: 352
Joined: Sun Feb 05, 2023 11:06 am

Re: Accessing internet without NAT?

Thu Jun 01, 2023 5:59 pm

probably the OP just wanted to know whether he/she can do bridge mode on the isp supplied ont box to the MT router, so that OP can have many MT features for his/her network - that is why the OP asked how to not doing double NAT.

happened occasionally because the subscribers think isp supplied modem/router/combo boxes aren't feature rich, nor aren't flexible for their needs.

now, the question to the OP - what/which ont did your isp lend you? how should forum members help you without knowing your ont box?
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11967
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: Accessing internet without NAT?

Thu Jun 01, 2023 6:11 pm

And that leads again here:
viewtopic.php?t=196573#p1005694
 
User avatar
Znevna
Forum Guru
Forum Guru
Posts: 1347
Joined: Mon Sep 23, 2019 1:04 pm

Re: Accessing internet without NAT?

Thu Jun 01, 2023 6:44 pm

And.. what bandwidth control can you possibly make using the weak, old and slow CPU inside the RB2011? Putting each user on one of the 100Mbps interfaces? sure.. that's one way to do bandwidth control...
 
Aymen1986
newbie
Topic Author
Posts: 29
Joined: Thu Jul 12, 2018 5:15 pm

Re: Accessing internet without NAT?

Thu Jun 01, 2023 7:05 pm

My Network is configured as shown:
You do not have the required permissions to view the files attached to this post.
 
Aymen1986
newbie
Topic Author
Posts: 29
Joined: Thu Jul 12, 2018 5:15 pm

Re: Accessing internet without NAT?

Thu Jun 01, 2023 7:15 pm

probably the OP just wanted to know whether he/she can do bridge mode on the isp supplied ont box to the MT router, so that OP can have many MT features for his/her network - that is why the OP asked how to not doing double NAT.

happened occasionally because the subscribers think isp supplied modem/router/combo boxes aren't feature rich, nor aren't flexible for their needs.

now, the question to the OP - what/which ont did your isp lend you? how should forum members help you without knowing your ont box?
Yes i can do a Bridge mode on ONT
 
wiseroute
Member
Member
Posts: 352
Joined: Sun Feb 05, 2023 11:06 am

Re: Accessing internet without NAT?

Thu Jun 01, 2023 7:36 pm

hello aymen1986,

[*]
Yes i can do a Bridge mode on ONT
[*]
are you sure?

what/which type is your ont box? we don't have any ideas.

before you change any config in it - make sure you write down all the config ie. user name, password, isp account id, channel id, protocols for your internet link (pppoe, ipoe or anything) etc. it is important - so that you won't bothering your isp call center. so write those config.

it seems that your ont connected to MT lan port? 192.168.88.0/24 is MT default DHCP subnet.
 
Aymen1986
newbie
Topic Author
Posts: 29
Joined: Thu Jul 12, 2018 5:15 pm

Re: Accessing internet without NAT?

Thu Jun 01, 2023 7:43 pm

hello aymen1986,

[*]
Yes i can do a Bridge mode on ONT
[*]
are you sure?

what/which type is your ont box? we don't have any ideas.

before you change any config in it - make sure you write down all the config ie. user name, password, isp account id, channel id, protocols for your internet link (pppoe, ipoe or anything) etc. it is important - so that you won't bothering your isp call center. so write those config.

ZTE F660

it seems that your ont connected to MT lan port? 192.168.88.0/24 is MT default DHCP subnet.
 
Aymen1986
newbie
Topic Author
Posts: 29
Joined: Thu Jul 12, 2018 5:15 pm

Re: Accessing internet without NAT?

Thu Jun 01, 2023 7:45 pm


it seems that your ont connected to MT lan port? 192.168.88.0/24 is MT default DHCP subnet.
No Just range , i changed ONT Default ip to that range .
MT DHCP is 10.0.1.11-10.0.1.20
 
wiseroute
Member
Member
Posts: 352
Joined: Sun Feb 05, 2023 11:06 am

Re: Accessing internet without NAT?

Thu Jun 01, 2023 7:54 pm

this one?

https://www.zte.com.cn/global/products/ ... -F660.html

[*]
No Just range , i changed ONT Default ip to that range .
MT DHCP is 10.0.1.11-10.0.1.20
[*]

ok. do you know your zte ont default ip? (just in case you need to hard reset to factory settings)

disclaimer : you will do this setting at your own risk.
 
Aymen1986
newbie
Topic Author
Posts: 29
Joined: Thu Jul 12, 2018 5:15 pm

Re: Accessing internet without NAT?

Thu Jun 01, 2023 8:06 pm

this one?

https://www.zte.com.cn/global/products/ ... -F660.html

[*]
No Just range , i changed ONT Default ip to that range .
MT DHCP is 10.0.1.11-10.0.1.20
[*]

ok. do you know your zte ont default ip? (just in case you need to hard reset to factory settings)

disclaimer : you will do this setting at your own risk.

Ok bro . Default ZTE IP is 192.168.1.1
Last edited by Aymen1986 on Thu Jun 01, 2023 8:26 pm, edited 1 time in total.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11967
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: Accessing internet without NAT?

Thu Jun 01, 2023 8:20 pm

Can, please, the original author of this topic @Aymen1986 change the title of the topic (editing first post) from Accessing internet without NAT?
to more adequate
How to remove one or more NAT layers from my internal network?
Thanks...
 
Aymen1986
newbie
Topic Author
Posts: 29
Joined: Thu Jul 12, 2018 5:15 pm

Re: Accessing internet without NAT?

Thu Jun 01, 2023 8:41 pm

Can, please, the original author of this topic @Aymen1986 change the title of the topic (editing first post) from Accessing internet without NAT?
to more adequate
How to remove one or more NAT layers from my internal network?
Thanks...
done
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11967
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: Accessing internet without NAT?

Thu Jun 01, 2023 8:51 pm

Can, please, the original author of this topic @Aymen1986 change the title of the topic (editing first post) from Accessing internet without NAT?
to more adequate
How to remove one or more NAT layers from my internal network?
Thanks...
done
re-thanks ;)
 
Aymen1986
newbie
Topic Author
Posts: 29
Joined: Thu Jul 12, 2018 5:15 pm

Re: Accessing internet without NAT?

Fri Jun 02, 2023 2:39 pm

this one?

https://www.zte.com.cn/global/products/ ... -F660.html

[*]
No Just range , i changed ONT Default ip to that range .
MT DHCP is 10.0.1.11-10.0.1.20
[*]

ok. do you know your zte ont default ip? (just in case you need to hard reset to factory settings)

disclaimer : you will do this setting at your own risk.
Ok bro ,I'm waiting for those settings .
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 18958
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: How to remove one or more NAT layers from my internal network?

Fri Jun 02, 2023 3:28 pm

Ive never seen so many experts let a thread go off the rails..... this is fun watching........
That cat looks like he had a TRIPLE expresso

Who is online

Users browsing this forum: cloud45, dervomsee, karlisi and 73 guests