Answer the question
In order to leave comments, you need to log in
How to access a local computer with a static IP outside the router's DHCP range?
Good afternoon! I have a video surveillance network with static IP addresses. The cameras and the DVR are connected by a switch. A computer with a static IP from the same range as the video surveillance network is connected to the switch to view cameras and recordings from the registrar. Also, a laptop was recently connected to this switch by wire and a Mikrotik router. Mikrotik distributes addresses to clients (laptop and not only), but there are no cameras, there is static. The range of IP addresses of the DHCP server and static ones does not intersect, the cameras do not go to the Internet. If you register IP from the video surveillance range on the laptop to the network card, there is access to the registrar. If you set IP reception via DHCP, Mikrotik gives IP, the Internet appears on the laptop, but there is no access to video surveillance. If you register 2 IP statically on the laptop network card, there is both Internet and video surveillance.
Question: how to configure Mikrotik so that it gives two IP addresses from different subnets for each client, or how to configure routing so that any client with an IP address received via DHCP sees the registrar? At the same time, it is impossible to reduce everything to one range.
Answer the question
In order to leave comments, you need to log in
Hang the second ip from the range of cameras on the Mikrotik bridge.
The scheme is certainly not comelfo, more like a crutch, but still real.
Let's say the laptop is on the network 10.10.10.0/24, and the cameras are on 192.168.0.0/24.
- you need to bring 2 IPs from different networks (10.10.10.1 and 192.168.0.1) to one Mikrotik interface
- add 2 rules allowing access between networks
/ip firewall filter
add action=accept chain=forward dst-address=10.10.10.0/24 src -address=192.168.0.0/24
add action=accept chain=forward dst-address=192.168.0.0/24 src-address=10.10.10.0/24
- add traffic masquerade rule from laptop network to camera network
/ip firewall nat
add chain =srcnat action=masquerade src-address=10.10.10.0/24 dst-address=192.168.0.0/24
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question