New Router Consideration

Forums › Vetta and Quic › New Router Consideration

CNZ

176 posts

Master Geek
+1 received by user: 33

ID Verified

#325018 27-Jun-2026 20:59

Hi all,

Looking to do a router upgrade but unsure what products will work for what we need.

We have a Dynamic IP + /56 Subnet and want to route traffic on a certain VLAN to the /56 subnet and the other VLAN to the Dynamic. (Routed general internet traffic and port forwarded items)

As far as i understand we need a few NAT rules but i know some equipment has limitations and i don't have an easy way to confirm it works and hoping someone else in the community has done something similar.

We are currently using a SFF Desktop running OPENWRT but want to move to something with a bit more advanced routing capability such as MikroTik Ubiquiti or Opnsense/PFSense but this list is not final.

If anyone also had some sample config files that i can glance over to understand how it works that would be much appreciated.

We are on a 1G HF plan and probably will move to a 2G HF plan once we upgrade.

[URL=https://www.speedtest.net/my-result/3558175835][IMG]https://www.speedtest.net/result/3558175835.png[/IMG][/URL]

michaelmurfy

meow
13674 posts

Uber Geek
+1 received by user: 11088

Moderator

ID Verified

Trusted

Lifetime subscriber

#3506676 27-Jun-2026 22:01

You don't NAT IPv6 - instead, you just create firewall rules around it to the /64's assigned to each VLAN.

If you want "advanced routing" then Ubiquiti is not your answer IMHO.

Mikrotik RB5009 is what I use and I have rules both around IPv4 and IPv6 and are on 2Gbit Hyperfibre. There are plenty of people in the Quic Discord with Mikrotik's who can help you through configuring one.

@danfaulknor may also have more Mikrotik's they need to sell off if you're lucky :)

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

CNZ

176 posts

Master Geek
+1 received by user: 33

ID Verified

#3506679 27-Jun-2026 22:22

Tik is a strong option.

Was talking IPv4 public ips for each VLAN.

[URL=https://www.speedtest.net/my-result/3558175835][IMG]https://www.speedtest.net/result/3558175835.png[/IMG][/URL]

michaelmurfy

meow
13674 posts

Uber Geek
+1 received by user: 11088

Moderator

ID Verified

Trusted

Lifetime subscriber

#3506682 28-Jun-2026 00:09

Ah yeah - NAT SRC-NAT / DST-NAT rules will achieve what you're after. You can also do these under OpenWRT but it is a bit more complex.

danfaulknor

981 posts

Ultimate Geek
+1 received by user: 540

Trusted

Prodigi

Subscriber

#3506684 28-Jun-2026 05:30

michaelmurfy:

@danfaulknor may also have more Mikrotik's they need to sell off if you're lucky :)

Hah, yep, the next batch is starting to come available now :)

they/them

Prodigi - Optimised IT Solutions
WebOps/DevOps, Managed IT, Hosting and Internet/WAN.

CNZ

176 posts

Master Geek
+1 received by user: 33

ID Verified

#3506849 28-Jun-2026 14:05

michaelmurfy:

Ah yeah - NAT SRC-NAT / DST-NAT rules will achieve what you're after. You can also do these under OpenWRT but it is a bit more complex.

That's what i thought i am getting partial functionality some websites load normally or extremely slowly and ICMP is failing most of the time.

Firewall rules have been added i feel like its gonna be something simple but i am hoping someone else has a similar setup.

There is two of us in the household of which we both tried setting it up ourselves and got the exact same behavior once on OpenWRT and the other on OPNSense

[URL=https://www.speedtest.net/my-result/3558175835][IMG]https://www.speedtest.net/result/3558175835.png[/IMG][/URL]