Mikrotik PPPoE passthrough?

[molesza]

So I have a little bit of an interesting setup.

I have a Mikrotik (192.168.1.1) dialing up to a PPPoE account over a bridge netgear modem. This works just fine and provide internet to my house perfectly. I have a flat at the end of my garden that I used to share internet directly through a wireless link connected to another Mikrotik which then dished out IP Addresses on a seperate subnet 192.168.2.0. Flat was muching too much of my data so I decided to get a seperate data account for the other mikrotik.

Want I would like the second mikrotik to do is dialup to the new PPPoE account by bridging through the existing mikrotik and dialup through the netgear. Is this at all possible?

I realise that I could have the wireless link go straight to the netgear modem bypassing the mikrotik physically but i still want to have access between PC's on each subnet as we use other LAN services between the buildings.

I have just had an idea whilst writing this out. If i was to connect the HUB in my house directly to the Netgear router would that give me the ability to dialup to the new PPPoE account from the second Mikrotik?

 

[molesza]

Or is it possible to create a virtual link from the second mikrotik using the existing physical connections and then have original mikroik spit that out of one of the ports straight to the modem. So that basically you have a virtual link between the modem and the second mikrotik and the second mikrotik thinks it is connected directly to the modem bypassing everything else?

 

[netcruiser]

Let the one mikrotik dial both connections and then setup routes so that one subnet access one internet connection and other subnet uses other internet connection.

 

[molesza]

Let the one mikrotik dial both connections and then setup routes so that one subnet access one internet connection and other subnet uses other internet connection.

Thanks for your reply.

I did have it setup like that before but I kept getting issues with Data suddenly not flowing on both accounts. Having to manually reset the mikrotik was becoming a pain. I may have set it up incorrectly though.

Do you know how to do this properly? I would be great if the second account was not firewalled in any way so I dont have to worry about port forwarding from the first mikrotik and then again on the second. So that the second mikrotik has a clear path as if directly connected to the internet.

 

[HApyM3al]

Let the one mikrotik dial both connections and then setup routes so that one subnet access one internet connection and other subnet uses other internet connection.

agree with this. mark packets and make mangle rules.

 

[Tinuva]

Another idea is, connect both mikrotiks straight to the DSL router (I hope it has more than 1 port).
- Then each mikrotik can handle it's own PPPoE session. Less points of failure for the 2nd mikrotik.
- Do routing between the 2x mikrotiks over the lan ports thats connected to the DSL router.

Thats how I would do it. Simple and elegant. Your only issue might be that the DSL router only has 100Mbps ports and your mikrotiks can do 1000Mbps.

 

[molesza]

Another idea is, connect both mikrotiks straight to the DSL router (I hope it has more than 1 port).
- Then each mikrotik can handle it's own PPPoE session. Less points of failure for the 2nd mikrotik.
- Do routing between the 2x mikrotiks over the lan ports thats connected to the DSL router.

Thats how I would do it. Simple and elegant. Your only issue might be that the DSL router only has 100Mbps ports and your mikrotiks can do 1000Mbps.

I like the idea of each mikrotik handling it's own pppoe session. How would you go about setting up the routing through the bridged modem?

 

[Tinuva]

I like the idea of each mikrotik handling it's own pppoe session. How would you go about setting up the routing through the bridged modem?

Let's say eth1 on each is connected to dsl modem, on which you do the pppoe, just add ips to them, and static routes for the other mikrotik's subnet on them, without natting

 

[molesza]

Let's say eth1 on each is connected to dsl modem, on which you do the pppoe, just add ips to them, and static routes for the other mikrotik's subnet on them, without natting

OK cool.

The wireless link is actually two links. Link from house mikrotik goes to a hub with a wired security camera then from hub a wireless link to the flat. The security camera currently gets ip from the main house dhcp. Will this still be possible?

I could also set the security camera to static ip just not sure if it will route back to the main mikrotik.

I didn't mention this in the beginning of the thread to avoid confusion. With the current idea I think it may now be relevant.

Thanks

 

[Tinuva]

Yeah that definitely is relevant, makes the setup definitely more complex.

It is still doable, but not without preventing users from dialing up their own pppoe sessions, if you want to keep the pppoe session to each mikrotik.

So either that, or go with one of the previous ideas of mangling rules.

 

[Sinbad]

No, you don't need routing. Just make sure the switch port for the 2nd mikrotik and the port for the ADSL modem are in the same VLAN. pppoe is not an IP protocol. It uses broadcasts to determine pppoe peers, which should traverse the L2 network between the mikrotiks to the adsl modem.

 

[molesza]

Another idea is, connect both mikrotiks straight to the DSL router (I hope it has more than 1 port).
- Then each mikrotik can handle it's own PPPoE session. Less points of failure for the 2nd mikrotik.
- Do routing between the 2x mikrotiks over the lan ports thats connected to the DSL router.

Thats how I would do it. Simple and elegant. Your only issue might be that the DSL router only has 100Mbps ports and your mikrotiks can do 1000Mbps.

Ok I've taken everything into consideration and really appreciate the input of everyone in this thread. I have drawn up a proposed network diagram and would like for you guys to critique it.

My plan is to have a hub sitting at the main house before the mikrotik that connects the flat network to the Mikrotik AND the Bridged modem. So that the flat has direct access to the modem and has access to the mikrotik for routing between the two subnets.

To achieve this I only have to connect one network cable between the hub in the main house and the modem. I fear that it may not be that simple.

 

[Tinuva]

In the picture it looks like you will be bridging the 2x vlans on the 1st mikrotik via the hub. While that could work, it could also cause problems.
Maybe consider connecting the mainhouse mikrotik to the dsl router via eth2-5, or rather make eth1 also a slave of eth2. You will need less cables. You will just have to change the pppoe to dial over eth2 instead of eth1.

 

[molesza]

In the picture it looks like you will be bridging the 2x vlans on the 1st mikrotik via the hub. While that could work, it could also cause problems.
Maybe consider connecting the mainhouse mikrotik to the dsl router via eth2-5, or rather make eth1 also a slave of eth2. You will need less cables. You will just have to change the pppoe to dial over eth2 instead of eth1.

I wasn't planning on setting up a vlan at all . Just figured plugging in the second mikrotik to the first mikrotik for subnet routing and also directly to the DSL modem via hub for pppoe dial up. Will that not work?

 

[Tinuva]

It could, but it could also cause issues. You should always aim for a simpler less complex setup. Especially if it can cause less issues.

 

[molesza]

It could, but it could also cause issues. You should always aim for a simpler less complex setup. Especially if it can cause less issues.

OK. So a more elegant solution is to lose the cable from hub to modem and create a vlan bridging ubiquiti link and the first mikrotik interface to modem.