{"id":2837,"date":"2019-02-07T21:12:24","date_gmt":"2019-02-07T21:12:24","guid":{"rendered":"http:\/\/www.mtin.net\/blog\/?p=2837"},"modified":"2019-02-07T21:12:24","modified_gmt":"2019-02-07T21:12:24","slug":"baicells-public-ips-on-client-routers","status":"publish","type":"post","link":"https:\/\/www.mtin.net\/blog\/baicells-public-ips-on-client-routers\/","title":{"rendered":"Baicells: Public IPs on client routers"},"content":{"rendered":"
\n
\n
\n

Public IPs on Baicells Client Routers.<\/p>\n

I needed to Provide a few customers with Public IPs while most of the UEs and clients got private IP. The following is what I did to allow this to work:<\/p>\n

Requirements:
\nEnodeB in Bridge mode
\nUE in NAT mode
\nMikroTik Router with DHCP handing out Private IP space to Baicells UEs.<\/p>\n

Steps:<\/p>\n

On MikroTik
\nAdd new Public IP subnet to the same Bridge or interface as current DHCP server.
\nEdit current DHCP IP Pool and add a second list of IPs that are your Publics. Not a second pool. In DHCP Server window in the Networks tab add a new Network for the New Subnet
\nThat is the MikroTik setup.<\/p>\n

Connect the UE to the tower and find the device in the MikroTik DHCP Leases.
\nMake the UE leased IP Static. Then edit it.
\nChange the Lease address to one of the unused Public IP address in your pool. Apply.<\/p>\n

In the UE: (only tried so far in Gen2)<\/p>\n

Network > Lan settings > DHCP settings
\nChange Start IP and End IP address to the same (192.168.150.100) Save and Apply<\/p>\n

Network > DMZ<\/p>\n

Turn On DMZ
\nSet DMZ host to IP (192.168.150.100) Save and Apply<\/p>\n

System > Web Settings<\/p>\n

Make sure Redirect HTTPS is off. Save and Apply<\/p>\n

Reboot UE.<\/p>\n

When the UE is rebooted have customer reboot router.
\nFrom WAN side:
\nHTTPS:\/\/StaticIP Should bring up UE login
\nHTTP:\/\/StaticIP should go to the Customer Router Login or Port redirection.<\/p>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Public IPs on Baicells Client Routers. I needed to Provide a few customers with Public IPs while most of the UEs and clients got private IP. The following is what I did to allow this to work: Requirements: EnodeB in Bridge mode UE in NAT mode MikroTik Router with DHCP handing out Private IP space […]<\/p>\n","protected":false},"author":1,"featured_media":1549,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[86,156,2],"tags":[421,731,732],"jetpack_publicize_connections":[],"aioseo_notices":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/www.mtin.net\/blog\/wp-content\/uploads\/2017\/05\/17821343_1510820508928612_1776831623_n.jpg?fit=405%2C720&ssl=1","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p6VLMf-JL","jetpack-related-posts":[{"id":1440,"url":"https:\/\/www.mtin.net\/blog\/dhcp-starvation-attack\/","url_meta":{"origin":2837,"position":0},"title":"DHCP Starvation attack","author":"j2sw","date":"February 12, 2018","format":false,"excerpt":"DHCP starvation attacks are designed to deplete all of the addresses within the DHCP scope on a particular segment. Subsequently, a legitimate user is denied an IP address requested via DHCP and thus is not able to access the network.\u00a0 Yersinia is one such free hacking tool that performs automated\u2026","rel":"","context":"In "Security"","block_context":{"text":"Security","link":"https:\/\/www.mtin.net\/blog\/category\/security\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":2764,"url":"https:\/\/www.mtin.net\/blog\/map-installer-toolbox\/","url_meta":{"origin":2837,"position":1},"title":"mAP installer toolbox","author":"j2sw","date":"January 25, 2019","format":false,"excerpt":"One of the problems installers run into on a few networks we manage is having the right tools to properly test a new install. Sure, an installer can run a test to speedtest.net to verify customers are getting their speed.\u00a0 Anyone who has done this long enough knows speedtest.net can\u2026","rel":"","context":"In "Mikrotik"","block_context":{"text":"Mikrotik","link":"https:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.mtin.net\/blog\/wp-content\/uploads\/2019\/01\/IMG_1039-768x1024.jpeg?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":2232,"url":"https:\/\/www.mtin.net\/blog\/mikrotik-releases-6-42\/","url_meta":{"origin":2837,"position":2},"title":"Mikrotik Releases 6.42","author":"j2sw","date":"April 25, 2018","format":false,"excerpt":"From Mikrotik We have released new RouterOS versions in current channel. To upgrade, click \"Check for updates\" at \"System\/Package\" in your RouterOS configuration interface, or head to our download page: http:\/\/www.mikrotik.com\/download What's new in 6.42 (2018-Apr-13 11:03): !) tile - improved system performance and stability (\"\/system routerboard upgrade\" required); !)\u2026","rel":"","context":"In \"mikrotik\"","block_context":{"text":"mikrotik","link":"https:\/\/www.mtin.net\/blog\/tag\/mikrotik-2\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":2554,"url":"https:\/\/www.mtin.net\/blog\/common-questions-masquerade-vs-src-nat-action-mikrotik\/","url_meta":{"origin":2837,"position":3},"title":"Common Questions: masquerade vs src-nat action Mikrotik","author":"j2sw","date":"October 26, 2018","format":false,"excerpt":"One of the common questions I get is what is the difference between Masquerade and SRC-NAt? Which should I use? The quick answer is to use SRC-NAT if your gateway IP is static, and use masquerade if it can change. The Mikrotik Wiki Entry Firewall NAT action=masquerade is unique subversion\u2026","rel":"","context":"In "Mikrotik"","block_context":{"text":"Mikrotik","link":"https:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.mtin.net\/blog\/wp-content\/uploads\/2014\/09\/2014-08-05-19.26.03.png?fit=650%2C650&ssl=1&resize=350%2C200","width":350,"height":200},"classes":[]},{"id":1333,"url":"https:\/\/www.mtin.net\/blog\/mikrotik-routeros-3-36\/","url_meta":{"origin":2837,"position":4},"title":"Mikrotik RouterOS 3.36","author":"j2sw","date":"July 22, 2016","format":false,"excerpt":"Lots of things fixed in this release. What's new in 6.36 (2016-Jul-20 14:09): *) arm - added Dude server support; *) dude - (changes discussed here: http:\/\/forum.mikrotik.com\/viewtopic.php?f=8&t=110428); *) dude - server package is now made smaller. client side content upgrade is now removed from it and is downloaded straight from\u2026","rel":"","context":"In "Mikrotik"","block_context":{"text":"Mikrotik","link":"https:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":2758,"url":"https:\/\/www.mtin.net\/blog\/baicells-nova-436-news-and-trade-in\/","url_meta":{"origin":2837,"position":5},"title":"Baicells Nova 436 News and Trade-In","author":"j2sw","date":"January 24, 2019","format":false,"excerpt":"This was released today. Thanks to ispsupplies.com for forwarding this over. Announcement and updates on Nova 436 Below is an announcement recently posted by Baicells regarding reboot issues with the Nova 436 units: As you are aware, our Nova 436 units have been experiencing reboot issues in the US market,\u2026","rel":"","context":"In \"436\"","block_context":{"text":"436","link":"https:\/\/www.mtin.net\/blog\/tag\/436\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/posts\/2837"}],"collection":[{"href":"https:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/comments?post=2837"}],"version-history":[{"count":1,"href":"https:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/posts\/2837\/revisions"}],"predecessor-version":[{"id":2838,"href":"https:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/posts\/2837\/revisions\/2838"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/media\/1549"}],"wp:attachment":[{"href":"https:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/media?parent=2837"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/categories?post=2837"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/tags?post=2837"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}