{"id":2837,"date":"2019-02-07T21:12:24","date_gmt":"2019-02-07T21:12:24","guid":{"rendered":"http:\/\/www.mtin.net\/blog\/?p=2837"},"modified":"2019-02-07T21:12:24","modified_gmt":"2019-02-07T21:12:24","slug":"baicells-public-ips-on-client-routers","status":"publish","type":"post","link":"http:\/\/www.mtin.net\/blog\/baicells-public-ips-on-client-routers\/","title":{"rendered":"Baicells: Public IPs on client routers"},"content":{"rendered":"
\n
\n
\n

Public IPs on Baicells Client Routers.<\/p>\n

I needed to Provide a few customers with Public IPs while most of the UEs and clients got private IP. The following is what I did to allow this to work:<\/p>\n

Requirements:
\nEnodeB in Bridge mode
\nUE in NAT mode
\nMikroTik Router with DHCP handing out Private IP space to Baicells UEs.<\/p>\n

Steps:<\/p>\n

On MikroTik
\nAdd new Public IP subnet to the same Bridge or interface as current DHCP server.
\nEdit current DHCP IP Pool and add a second list of IPs that are your Publics. Not a second pool. In DHCP Server window in the Networks tab add a new Network for the New Subnet
\nThat is the MikroTik setup.<\/p>\n

Connect the UE to the tower and find the device in the MikroTik DHCP Leases.
\nMake the UE leased IP Static. Then edit it.
\nChange the Lease address to one of the unused Public IP address in your pool. Apply.<\/p>\n

In the UE: (only tried so far in Gen2)<\/p>\n

Network > Lan settings > DHCP settings
\nChange Start IP and End IP address to the same (192.168.150.100) Save and Apply<\/p>\n

Network > DMZ<\/p>\n

Turn On DMZ
\nSet DMZ host to IP (192.168.150.100) Save and Apply<\/p>\n

System > Web Settings<\/p>\n

Make sure Redirect HTTPS is off. Save and Apply<\/p>\n

Reboot UE.<\/p>\n

When the UE is rebooted have customer reboot router.
\nFrom WAN side:
\nHTTPS:\/\/StaticIP Should bring up UE login
\nHTTP:\/\/StaticIP should go to the Customer Router Login or Port redirection.<\/p>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Public IPs on Baicells Client Routers. I needed to Provide a few customers with Public IPs while most of the UEs and clients got private IP. The following is what I did to allow this to work: Requirements: EnodeB in Bridge mode UE in NAT mode MikroTik Router with DHCP handing out Private IP space […]<\/p>\n","protected":false},"author":1,"featured_media":1549,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[86,156,2],"tags":[421,731,732],"jetpack_publicize_connections":[],"aioseo_notices":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/www.mtin.net\/blog\/wp-content\/uploads\/2017\/05\/17821343_1510820508928612_1776831623_n.jpg?fit=405%2C720","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p6VLMf-JL","jetpack-related-posts":[{"id":1440,"url":"http:\/\/www.mtin.net\/blog\/dhcp-starvation-attack\/","url_meta":{"origin":2837,"position":0},"title":"DHCP Starvation attack","author":"j2sw","date":"February 12, 2018","format":false,"excerpt":"DHCP starvation attacks are designed to deplete all of the addresses within the DHCP scope on a particular segment. Subsequently, a legitimate user is denied an IP address requested via DHCP and thus is not able to access the network.\u00a0 Yersinia is one such free hacking tool that performs automated\u2026","rel":"","context":"In "Security"","block_context":{"text":"Security","link":"http:\/\/www.mtin.net\/blog\/category\/security\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":2764,"url":"http:\/\/www.mtin.net\/blog\/map-installer-toolbox\/","url_meta":{"origin":2837,"position":1},"title":"mAP installer toolbox","author":"j2sw","date":"January 25, 2019","format":false,"excerpt":"One of the problems installers run into on a few networks we manage is having the right tools to properly test a new install. Sure, an installer can run a test to speedtest.net to verify customers are getting their speed.\u00a0 Anyone who has done this long enough knows speedtest.net can\u2026","rel":"","context":"In "Mikrotik"","block_context":{"text":"Mikrotik","link":"http:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.mtin.net\/blog\/wp-content\/uploads\/2019\/01\/IMG_1039-768x1024.jpeg?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":2554,"url":"http:\/\/www.mtin.net\/blog\/common-questions-masquerade-vs-src-nat-action-mikrotik\/","url_meta":{"origin":2837,"position":2},"title":"Common Questions: masquerade vs src-nat action Mikrotik","author":"j2sw","date":"October 26, 2018","format":false,"excerpt":"One of the common questions I get is what is the difference between Masquerade and SRC-NAt? Which should I use? The quick answer is to use SRC-NAT if your gateway IP is static, and use masquerade if it can change. The Mikrotik Wiki Entry Firewall NAT action=masquerade is unique subversion\u2026","rel":"","context":"In "Mikrotik"","block_context":{"text":"Mikrotik","link":"http:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.mtin.net\/blog\/wp-content\/uploads\/2014\/09\/2014-08-05-19.26.03.png?fit=650%2C650&resize=350%2C200","width":350,"height":200},"classes":[]},{"id":2232,"url":"http:\/\/www.mtin.net\/blog\/mikrotik-releases-6-42\/","url_meta":{"origin":2837,"position":3},"title":"Mikrotik Releases 6.42","author":"j2sw","date":"April 25, 2018","format":false,"excerpt":"From Mikrotik We have released new RouterOS versions in current channel. To upgrade, click \"Check for updates\" at \"System\/Package\" in your RouterOS configuration interface, or head to our download page: http:\/\/www.mikrotik.com\/download What's new in 6.42 (2018-Apr-13 11:03): !) tile - improved system performance and stability (\"\/system routerboard upgrade\" required); !)\u2026","rel":"","context":"In \"mikrotik\"","block_context":{"text":"mikrotik","link":"http:\/\/www.mtin.net\/blog\/tag\/mikrotik-2\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1333,"url":"http:\/\/www.mtin.net\/blog\/mikrotik-routeros-3-36\/","url_meta":{"origin":2837,"position":4},"title":"Mikrotik RouterOS 3.36","author":"j2sw","date":"July 22, 2016","format":false,"excerpt":"Lots of things fixed in this release. What's new in 6.36 (2016-Jul-20 14:09): *) arm - added Dude server support; *) dude - (changes discussed here: http:\/\/forum.mikrotik.com\/viewtopic.php?f=8&t=110428); *) dude - server package is now made smaller. client side content upgrade is now removed from it and is downloaded straight from\u2026","rel":"","context":"In "Mikrotik"","block_context":{"text":"Mikrotik","link":"http:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1379,"url":"http:\/\/www.mtin.net\/blog\/simple-shut-off-scripting\/","url_meta":{"origin":2837,"position":5},"title":"Simple shut-off scripting","author":"j2sw","date":"September 15, 2016","format":false,"excerpt":"I had a client today who is doing some manual things as they are using Quickbooks for billing and such. \u00a0One thing they kind of struggle with is turning off people for non-payment and such. \u00a0Their current method is adding a que and throttling someone to a low-speed to make\u2026","rel":"","context":"In "Mikrotik"","block_context":{"text":"Mikrotik","link":"http:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_likes_enabled":true,"_links":{"self":[{"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/posts\/2837"}],"collection":[{"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/comments?post=2837"}],"version-history":[{"count":1,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/posts\/2837\/revisions"}],"predecessor-version":[{"id":2838,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/posts\/2837\/revisions\/2838"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/media\/1549"}],"wp:attachment":[{"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/media?parent=2837"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/categories?post=2837"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/tags?post=2837"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}