Routing sebagai pengganti NAT

Kondisi 2 Router

Code:

Router A
IP Public -- 123.456.789.1
IP Ether 2 -- 192.168.20.1 (to Client Router A)
IP Ether 3 -- 10.20.30.1 (to Router B)

:: for the rest, we can name it for the ether
Public is seksi, Ether 2 is lokal, Ether 3 is genit :genit:

Router B
IP Ether 1 -- 10.20.30.2 (From Router A)
IP Ether 2 -- 192.168.22.1 (to Client Router B)

Tujuan :: Router B bisa akses internet tanpa perlu di NAT kembali atau double NAT, then.. you should do

Quote:

Router A /ip firewall filter add chain=srcnat out-interface=seksi action=masquerade /ip route add dst-address=192.168.22.0/24 gateway=10.20.30.2 Router B /ip route add gateway=10.20.30.1 /ip dns set primary-dns=10.20.30.1

Kondisi 4 Router

Code:

Router A
IP Public -- 123.456.789.1
IP Ether 2 -- 192.168.20.1 (to Client Router A)
IP Ether 3 -- 10.20.10.1 (to Router B)

Router B
IP Ether 1 -- 10.20.10.2 (From Router A)
IP Ether 2 -- 192.168.22.1 (to Client Router B)
IP Ether 3 -- 10.20.20.1 (to Router C)

Router C
IP Ether 1 -- 10.20.20.2 (From Router B)
IP Ether 2 -- 192.168.23.1 (to Client Router C)
IP Ether 3 -- 10.20.30.1 (to Router D)

Router D
IP Ether 1 -- 10.20.30.2 (From Router C)
IP Ether 2 -- 192.168.24.1 (to Client Router D)

Then........... langkah yang selanjutnya

Quote:

Router A /ip firewall filter add chain=srcnat out-interface=seksi action=masquerade /ip route add dst-address=192.168.22.0/24 gateway=10.20.10.2 comment="Route Client RB for Inet Access" /ip route add dst-address=192.168.23.0/24 gateway=10.20.20.2 /ip route add dst-address=192.168.24.0/24 gateway=10.20.30.2 /ip route add dst-address=10.20.20.2 gateway=10.20.10.2 comment="Route RB for Inet Access" /ip route add dst-address=10.20.30.2 gateway=10.20.20.2 /ip route add dst-address=10.20. gateway=10.20.30.2 /ip route add dst-address=192.168.22.0/24 gateway=10.20.30.2 Router B /ip route add gateway=10.20.30.1 /ip dns set primary-dns=10.20.30.1 Router C /ip route add gateway=10.20.30.1 /ip dns set primary-dns=10.20.30.1 Router D /ip route add gateway=10.20.30.1 /ip dns set primary-dns=10.20.30.1

---

source : Akangage