Community discussions

MikroTik App
 
Rhy2
just joined
Topic Author
Posts: 5
Joined: Sun Aug 14, 2022 5:36 pm

PPPoE and NAT Separate

Sun Aug 14, 2022 5:55 pm

Hello,

Our number of users on PPPoE Server has exceeded 1000+ and PPPoE server crash problems have started. As I researched in Mikrotik Forum, I saw that I needed to split the structure into 2 devices, NAT and PPPoE. I prepared the diagram below in order to explain the structure I want to set up. Do you think Ospf would be the most suitable solution for this job? What kind of configuration do I need to prepare? I'm waiting for your help. Thank you.

Diagram:
Screenshot.png
You do not have the required permissions to view the files attached to this post.
 
User avatar
ingdaka
Trainer
Trainer
Posts: 452
Joined: Thu Aug 30, 2012 3:06 pm
Location: Albania
Contact:

Re: PPPoE and NAT Separate  [SOLVED]

Mon Aug 15, 2022 10:43 pm

Yes this will be best thing you can do! But in this case looks like you have small network and not so much IP after 1009 so you can use also static IP. CCR1009 will have just one default route to CC1036 and 1036 will have some static routes to CCR1009. Just remind to disable connection tracking on CC1009.
 
User avatar
chechito
Forum Guru
Forum Guru
Posts: 2990
Joined: Sun Aug 24, 2014 3:14 am
Location: Bogota Colombia
Contact:

Re: PPPoE and NAT Separate

Mon Aug 15, 2022 10:50 pm

For only 2 routers I don't see the need for OSPF

A static route covering all subscriber's address range and you are done

Also, include a firewall rule to avoid packets looping between routers

Only removing Nat from the PPPoE router will not solve your problems, the main reason to disable NAT is to be able to disable connection-tracking so you will need to disable that and rework your firewall rules to accommodate that change
 
Rhy2
just joined
Topic Author
Posts: 5
Joined: Sun Aug 14, 2022 5:36 pm

Re: PPPoE and NAT Separate

Sat Aug 20, 2022 2:06 am

For only 2 routers I don't see the need for OSPF

A static route covering all subscriber's address range and you are done

Also, include a firewall rule to avoid packets looping between routers

Only removing Nat from the PPPoE router will not solve your problems, the main reason to disable NAT is to be able to disable connection-tracking so you will need to disable that and rework your firewall rules to accommodate that change
Thank you for your valuable information. I installed the build and it works perfectly. What rules should I enter in the firewall to prevent loops?
 
Reeman
just joined
Posts: 10
Joined: Thu Sep 01, 2022 12:13 pm

Re: PPPoE and NAT Separate

Sat Sep 17, 2022 9:03 am

For only 2 routers I don't see the need for OSPF

A static route covering all subscriber's address range and you are done

Also, include a firewall rule to avoid packets looping between routers

Only removing Nat from the PPPoE router will not solve your problems, the main reason to disable NAT is to be able to disable connection-tracking so you will need to disable that and rework your firewall rules to accommodate that change
can you give more information about packet looping firewall rule?
 
User avatar
chechito
Forum Guru
Forum Guru
Posts: 2990
Joined: Sun Aug 24, 2014 3:14 am
Location: Bogota Colombia
Contact:

Re: PPPoE and NAT Separate

Mon Sep 26, 2022 8:03 am

For only 2 routers I don't see the need for OSPF

A static route covering all subscriber's address range and you are done

Also, include a firewall rule to avoid packets looping between routers

Only removing Nat from the PPPoE router will not solve your problems, the main reason to disable NAT is to be able to disable connection-tracking so you will need to disable that and rework your firewall rules to accommodate that change
can you give more information about packet looping firewall rule?

in this article the Autor touch the loop concept

https://www.daryllswer.com/edge-router- ... -for-isps/
 
yahyamjdc
just joined
Posts: 2
Joined: Wed Jan 18, 2017 10:00 am
Location: Kilis
Contact:

Re: PPPoE and NAT Separate

Mon Jan 30, 2023 4:34 pm

Were you able to implement this project?
Can you help me regarding this issue?
 
atelagain
just joined
Posts: 1
Joined: Sat Jan 28, 2023 6:55 pm

Re: PPPoE and NAT Separate

Sun Mar 19, 2023 3:25 am

Were you able to implement this project?
Can you help me regarding this issue?
still do you need help?

Who is online

Users browsing this forum: Bing [Bot], gigabyte091, onnyloh, RobertsN, TheCat12 and 79 guests