What's new

My ISP has provided 6 usable static IP's how exactly could I go about using them with Merlins build?

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

lukeglazebrook

Occasional Visitor
My ISP has provided 6 usable static IP's how exactly could I go about using them with Merlins build on my AC88U? My old Draytek had something called IP aliasing where a external IP would be recognised and translated to an internal one.

I have tried assigning one of the internal clients with one of the static IP's then putting that static PI in the DMZ but still no joy :( And even if that did work it would only solve the problem for one. If this is something the Merlin firmware can't handle maybe I spin up a pfsense vm and route stuff to that somehow?

Ay advice please guys
 
I'd be curious if that was available on a single router.

The easy solution for my customers was to use a switch right after the modem and then connect multiple routers (one for each static IP).
 
If you want to assign public IP addresses to your clients behind the router then you want to set up one-to-one NAT. On asuswrt you need to do it manually via telnet/ssh using iptables. Preferably you also want to create a firewall-start user script incorporating iptables rules.

An example, if one of your public addresses is 66.66.66.66 and an internal IP address is 192.168.100.1
Code:
iptables -t nat -A POSTROUTING -s 192.168.100.1 -j SNAT --to-source 66.66.66.66
iptables -t nat -A PREROUTING -d 66.66.66.66 -j DNAT --to-destination 192.168.100.1

If you have 6 public IP addresses and you want all of them to be mapped 1:1 then you need to create 6 of these rules and create a mentioned firewall-start script so the rules are always applied after a firewall restart / router reboot.
 
Bit of a follow up question, I have a server that produces a certificate that redirects to "Server_A.MyDomain.com" obviously machines on the outside world do not know how to get to "Server_A" can you think of a solution?
 

Similar threads

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top