Mikrotik gray and white IP routing?

Question

Mikrotik

There is a mikrotik connected to the provider, the provider issued a subnet of white addresses 109.100.100.*/28, and separately 109.100.101.*/30, there is still a LAN for the office 10.5.5.0/24. It is necessary to issue addresses from the subnet 109.100.100.*/28 via vlan directly to machines, and send the rest via nat c from the address 109.100.100.*/30.
The standard settings were made for nat, the machines had access. Then an address from the white ip 109.100.100.*/28 was hung on the vlan and thrown into the subnet for distribution to individual machines, and here the plug. Machines receive addresses and are accessible from the outside, but if you check the ip from the machine on another resource, it gives the address 109.100.100.*/30. And the question itself is how to release cars with real players bypassing nat masquerade?
Yes, and I think it will be interesting for those who are looking for how to issue white ip directly to mikrotik.

Answer 1

The answer to your question lies in this presentation. Slide 50 and beyond.