-4

I'm looking to build a 4 public IPs NAT. I've been told that MikroTik routers are capabile of assigning public IPs for each LAN port you configure.

My ISP provides 2 static IPs but I need two more. I would buy any MikroTik router that is able to make that happen through VIP...

Any recommendation for an affordable model?

Dalac
  • 17
  • 6
  • 1
    RB4011iGS+RM or RB5009UG+S+IN – IamK Oct 03 '22 at 21:30
  • These are great but I think I would not take advantage of all their features. I came across hEX PoE and hEX S, both running RouterOS L4. Would any of these accomplish the mission? – Dalac Oct 03 '22 at 22:09
  • 1
    Yes, until they have enough eth interfaces, btw this question does not belong to SO (its not about programming) – IamK Oct 03 '22 at 22:13
  • You're right. That would probably make more sense on MikroTik forums. Sorry for that, but thank you for the advice. – Dalac Oct 03 '22 at 22:18

2 Answers2

-1

If your ISP provides only 2 IPs, you cannot pull 2 more just because of some "magic router". All MikroTik routers have the same functionality, so any model you like will do what you configure on it.

There are no "LAN ports" in them, every port can be LAN, WAN or whatever you call it - functionality depends on configuration.

There can be any number of statically configured IPs on any interface of the router if your ISP provides them.

Chupaka
  • 190
  • 6
-1

Example eth1 IP Address : 10.201.0.2/28, ~ gateway: 10.201.0.1

eth2 IP address : 10.200.0.112/24, ~ gateway: 10.200.0.1

eth3 IP Address : 192.168.51.1/24 //gateway Client ISP 1

eth4 IP Address : 192.168.52.1/24 //gateway Client ISP 2

/ip firewall nat

add chain=srcnat action=masquerade src-address=192.168.51.0/24

add chain=srcnat action=masquerade src-address=192.168.52.0/24

/ip firewall mangle

add chain=prerouting action=mark-routing new-routing-mark=isp1 passthrough=no src-address=192.168.51.0/24 in-interface=eth3

add chain=prerouting action=mark-routing new-routing-mark=isp2 passthrough=no src-address=192.168.52.0/24 in-interface=eth4

/ip route rule

add dst-address=10.200.0.0/28 action=lookup table=main

add dst-address=10.201.0.0/28 action=lookup table=main

add dst-address=192.168.51.0/24 action=lookup table=main

add dst-address=192.168.52.0/24 action=lookup table=main

add src-address=10.201.0.0/28 action=lookup table=isp1

add src-address=10.200.0.0/28 action=lookup table=isp2

add routing-mark=isp1 action=lookup table=isp1

add routing-mark=isp2 action=lookup table=isp2

/ip route

add gateway=10.201.0.1 check-gateway=ping distance=1 scope=30 target-scope=10 routing-mark=isp1

add gateway=10.200.0.1 check-gateway=ping distance=1 scope=30 target-scope=10 routing-mark=isp1

add gateway=10.201.0.1 check-gateway=ping distance=1 scope=30 target-scope=10 routing-mark=isp2

add gateway=10.200.0.1 check-gateway=ping distance=1 scope=30 target-scope=10 routing-mark=isp2

add gateway=10.201.0.1 check-gateway=ping distance=1 scope=30 target-scope=10 add gateway=10.200.0.1 check-gateway=ping distance=1 scope=30 target-scope=10

Rio Aditya Pradana
  • 1
  • As it’s currently written, your answer is unclear. Please [edit] to add additional details that will help others understand how this addresses the question asked. You can find more information on how to write good answers [in the help center](/help/how-to-answer). – Community Jan 28 '23 at 18:08