How to remove one or more NAT layers from my internal network?
I have RB2011 connected through wan port to ONT , and users can access the internet using NAT , so can i allow users accessing internet without using NAT
You do not have the required permissions to view the files attached to this post.
Last edited byAymen1986on Thu Jun 01, 2023 8:38 pm, edited 1 time in total.
Re: Accessing internet without NAT?
If you have only one public IP address available, then only one device can communicate directly with internet (others can do it through the first one and NAT is the name of the game). If you have multiple public IP addresses available, then yes, as many devices can communicate with internet without NAT.
It's probably a good idea to have a firewall between internet and your devices. But if you do introduce stateful firewall, then performing NAT by that box is almost free of charge as most tasks (connection tracking) are done already.
It's probably a good idea to have a firewall between internet and your devices. But if you do introduce stateful firewall, then performing NAT by that box is almost free of charge as most tasks (connection tracking) are done already.
Re: Accessing internet without NAT?
You can also touch your tongue on both battery terminals.................
Re: Accessing internet without NAT?
@Aymen1986 It seems you don't understand the purpose of NAT or the difference between private and public ip addresses.
Watch this layman's guide to NAT.How Network Address Translation Worksby PieterExplainsTech (a 2012 video, but still one of the best layman's explanation I am aware of).
Watch this layman's guide to NAT.How Network Address Translation Worksby PieterExplainsTech (a 2012 video, but still one of the best layman's explanation I am aware of).
Re: Accessing internet without NAT?
i mean , i don't want to use double NAT , I know the principle of NAT , but in my case there're two NAT, the first one is the ONT (Router) and the second one is Mikrotik router@Aymen1986 It seems you don't understand the purpose of NAT or the difference between private and public ip addresses.
Watch this layman's guide to NAT.How Network Address Translation Worksby PieterExplainsTech (a 2012 video, but still one of the best layman's explanation I am aware of).
Re: Accessing internet without NAT?
Three choices:
1. Reconfigured ONT/router - e.g. directly connect Mikrotik to the ONT, or if ONT+router is integrated look for some "passthrough" mode
2. Setup the Mikrotik as a bridge & just use the ISP's router for NAT
3. Use a NAT "netmap" to map your Miktrotik IP /24 range to the /24 subnet assigned by ISP's ONT/router
1. Reconfigured ONT/router - e.g. directly connect Mikrotik to the ONT, or if ONT+router is integrated look for some "passthrough" mode
2. Setup the Mikrotik as a bridge & just use the ISP's router for NAT
3. Use a NAT "netmap" to map your Miktrotik IP /24 range to the /24 subnet assigned by ISP's ONT/router
Re: Accessing internet without NAT?
could you help me doing the second and third choices , or give me som resources ?Three choices:
1. Reconfigured ONT/router - e.g. directly connect Mikrotik to the ONT, or if ONT+router is integrated look for some "passthrough" mode
2. Setup the Mikrotik as a bridge & just use the ISP's router for NAT
3. Use a NAT "netmap" to map your Miktrotik IP /24 range to the /24 subnet assigned by ISP's ONT/router
Re: Accessing internet without NAT?
NOTE : ONT WAN port has a dynamic public IP address not a Static.Three choices:
1. Reconfigured ONT/router - e.g. directly connect Mikrotik to the ONT, or if ONT+router is integrated look for some "passthrough" mode
2. Setup the Mikrotik as a bridge & just use the ISP's router for NAT
3. Use a NAT "netmap" to map your Miktrotik IP /24 range to the /24 subnet assigned by ISP's ONT/router
Re: Accessing internet without NAT?
Easy fix, remove the ancient rb2011 from the picture and allow your users to use the internet.
Or configure it as a switch if you need a fancy switch.
Or configure it as a switch if you need a fancy switch.
Re: Accessing internet without NAT?
RB2011 is necessary to control the bandwidth,login, .....Easy fix, remove the ancient rb2011 from the picture and allow your users to use the internet.
Or configure it as a switch if you need a fancy switch.
Re: Accessing internet without NAT?
Already from the description, the initial question, and the image you have always had confused ideas.RB2011 is necessary to control the bandwidth,login, .....Easy fix, remove the ancient rb2011 from the picture and allow your users to use the internet.
Or configure it as a switch if you need a fancy switch.
或者你已经很清楚,你迷惑我们cause you can't explain yourself.
Give a detailed description of what the RB2011 does and also the characteristics of what the ONT can do instead of ellipsis…
Re: Accessing internet without NAT?
Configure and use IPv6, then you get many addresses that you can use without NAT.
Re: Accessing internet without NAT?
Configure and use IPv6, then you get many addresses that you can use without NAT.
sorry, not all ISPs have someone who at least knows what IPv6 is...Re: Accessing internet without NAT?
I guess I'm lost. Is the ONT is giving a dynamic public IP? e.g. not 192.168.x.y, 10.x.y.z, etc
I was under the impression there was a "double NAT" and that's what I'm not hearing... So...
Otherwise, QuickSet would seem to handle this case (e.g. ether1 to ONT, ether2-5 LAN, with a dhcp client on ether1, dhcp server on bridge, masquerade NAT rule).
I was under the impression there was a "double NAT" and that's what I'm not hearing... So...
Yup that's needed here.Give a detailed description of what the RB2011 does and also the characteristics of what the ONT can do instead of ellipsis…
Otherwise, QuickSet would seem to handle this case (e.g. ether1 to ONT, ether2-5 LAN, with a dhcp client on ether1, dhcp server on bridge, masquerade NAT rule).
Re: Accessing internet without NAT?
Yes, but do not eliminate theDouble NAT
Re: Accessing internet without NAT?
Well, It's the ONT that's the mystery here. If the ONT is giving out a real public IP (even dynamically via DHCP), there would be no double NATYes, but do not eliminate theDouble NAT
.My thought is if ONT was handing out a private subnet, that you can use a netmap, instead of masquerade. Still be double NAT in a sense, but at least the Mikrotik LAN IP align with the ISP router's LAN.
But if the ISP is really giving out a private, non-public IP address, or is some "CGNAT". No config is going to remove the double NAT.
Re: Accessing internet without NAT?
Ahhhh on the last case areTriple NAT！!!
Re: Accessing internet without NAT?
probably the OP just wanted to know whether he/she can do bridge mode on the isp supplied ont box to the MT router, so that OP can have many MT features for his/her network - that is why the OP asked how to not doing double NAT.
happened occasionally because the subscribers think isp supplied modem/router/combo boxes aren't feature rich, nor aren't flexible for their needs.
now, the question to the OP - what/which ont did your isp lend you? how should forum members help you without knowing your ont box?
happened occasionally because the subscribers think isp supplied modem/router/combo boxes aren't feature rich, nor aren't flexible for their needs.
now, the question to the OP - what/which ont did your isp lend you? how should forum members help you without knowing your ont box?
Re: Accessing internet without NAT?
And that leads again here:
viewtopic.php?t=196573#p1005694
viewtopic.php?t=196573#p1005694
Re: Accessing internet without NAT?
And.. what bandwidth control can you possibly make using the weak, old and slow CPU inside the RB2011? Putting each user on one of the 100Mbps interfaces? sure.. that's one way to do bandwidth control...
Re: Accessing internet without NAT?
My Network is configured as shown:
You do not have the required permissions to view the files attached to this post.
Re: Accessing internet without NAT?
Yes i can do a Bridge mode on ONTprobably the OP just wanted to know whether he/she can do bridge mode on the isp supplied ont box to the MT router, so that OP can have many MT features for his/her network - that is why the OP asked how to not doing double NAT.
happened occasionally because the subscribers think isp supplied modem/router/combo boxes aren't feature rich, nor aren't flexible for their needs.
now, the question to the OP - what/which ont did your isp lend you? how should forum members help you without knowing your ont box?
Re: Accessing internet without NAT?
hello aymen1986,
[*]
Yes i can do a Bridge mode on ONT
[*]
are you sure?
what/which type is your ont box? we don't have any ideas.
before you change any config in it - make sure you write down all the config ie. user name, password, isp account id, channel id, protocols for your internet link (pppoe, ipoe or anything) etc. it is important - so that you won't bothering your isp call center. so write those config.
it seems that your ont connected to MT lan port? 192.168.88.0/24 is MT default DHCP subnet.
[*]
Yes i can do a Bridge mode on ONT
[*]
are you sure?
what/which type is your ont box? we don't have any ideas.
before you change any config in it - make sure you write down all the config ie. user name, password, isp account id, channel id, protocols for your internet link (pppoe, ipoe or anything) etc. it is important - so that you won't bothering your isp call center. so write those config.
it seems that your ont connected to MT lan port? 192.168.88.0/24 is MT default DHCP subnet.
Re: Accessing internet without NAT?
hello aymen1986,
[*]
Yes i can do a Bridge mode on ONT
[*]
are you sure?
what/which type is your ont box? we don't have any ideas.
before you change any config in it - make sure you write down all the config ie. user name, password, isp account id, channel id, protocols for your internet link (pppoe, ipoe or anything) etc. it is important - so that you won't bothering your isp call center. so write those config.
ZTE F660
it seems that your ont connected to MT lan port? 192.168.88.0/24 is MT default DHCP subnet.
Re: Accessing internet without NAT?
No Just range , i changed ONT Default ip to that range .
it seems that your ont connected to MT lan port? 192.168.88.0/24 is MT default DHCP subnet.
MT DHCP is 10.0.1.11-10.0.1.20
Re: Accessing internet without NAT?
this one?
https://www.zte.com.cn/global/products/ ... -F660.html
[*]
No Just range , i changed ONT Default ip to that range .
MT DHCP is 10.0.1.11-10.0.1.20
[*]
ok. do you know your zte ont default ip? (just in case you need to hard reset to factory settings)
disclaimer : you will do this setting at your own risk.
https://www.zte.com.cn/global/products/ ... -F660.html
[*]
No Just range , i changed ONT Default ip to that range .
MT DHCP is 10.0.1.11-10.0.1.20
[*]
ok. do you know your zte ont default ip? (just in case you need to hard reset to factory settings)
disclaimer : you will do this setting at your own risk.
Re: Accessing internet without NAT?
Ok bro . Default ZTE IP is 192.168.1.1this one?
https://www.zte.com.cn/global/products/ ... -F660.html
[*]
No Just range , i changed ONT Default ip to that range .
MT DHCP is 10.0.1.11-10.0.1.20
[*]
ok. do you know your zte ont default ip? (just in case you need to hard reset to factory settings)
disclaimer : you will do this setting at your own risk.
Last edited byAymen1986on Thu Jun 01, 2023 8:26 pm, edited 1 time in total.
Re: Accessing internet without NAT?
Can, please, the original author of this topic@Aymen1986change the title of the topic (editing first post) fromAccessing internet without NAT?
to more adequate
How to remove one or more NAT layers from my internal network?
Thanks...
to more adequate
How to remove one or more NAT layers from my internal network?
Thanks...
Re: Accessing internet without NAT?
doneCan, please, the original author of this topic@Aymen1986change the title of the topic (editing first post) fromAccessing internet without NAT?
to more adequate
How to remove one or more NAT layers from my internal network?
Thanks...
Re: Accessing internet without NAT?
re-thanksdoneCan, please, the original author of this topic@Aymen1986change the title of the topic (editing first post) fromAccessing internet without NAT?
to more adequate
How to remove one or more NAT layers from my internal network?
Thanks...
Re: Accessing internet without NAT?
Ok bro ,I'm waiting for those settings .this one?
https://www.zte.com.cn/global/products/ ... -F660.html
[*]
No Just range , i changed ONT Default ip to that range .
MT DHCP is 10.0.1.11-10.0.1.20
[*]
ok. do you know your zte ont default ip? (just in case you need to hard reset to factory settings)
disclaimer : you will do this setting at your own risk.
Re: How to remove one or more NAT layers from my internal network?
Ive never seen so many experts let a thread go off the rails..... this is fun watching........
That cat looks like he had aTRIPLEexpresso
That cat looks like he had aTRIPLEexpresso