Change to fixed IPv4 external address with PPPoE authentification and VLAN10 23 October 2021 This is described using WebFig on a Mikrotik RouterBOARD. Applies similarly to setup by SSH or Winbox. Corrections and improvements welcome at BMCP @ pm.me. This was done for a new connection with the NZ ISP Voyager, which uses a fixed IPv4 address (/32, ie a single address) with PPPoE authentification and VLAN10 on the connection. Do this using ethernet (or wifi) access to a LAN port on the router. First, preferably before connecting the router's WAN to the internet, some things need to be set up in WebFig. Set up the vlan 10 interface. In WebFig>Interfaces>Interface>Add New 'VLAN'. The VLAN ID is '10' and the interface, your WAN port eg ether1. Give it a name; I used 'vlan10'. Voyager suggests a MTU of 1492. Apply. PPP authentification; in PPP>Interface>Add New>PPPoE Client. Give it a name; the default is 'pppoe-out1', and the User name and Password must be supplied by your ISP. The interface should be the vlan you just set. In Interfaces>Interface List, the vlan interface can be added to the 'LAN' listing and the pppoe interface to the 'WAN' list. Optionally set up IPv6 connectivity. If you are receiving an IPv6 subnet from your ISP, enter a Pool Name in IPv6>DHCP Client>Add. Interface is the pppoe interface. This may need to be done after the pppoe connection has been established. For further details see my note 'IPv6 setup on ROS Nov 21.txt'. Review firewall settings at this stage. Once the uplink occurs, the router (and local network... ) will be exposed to the internet. Remember when changing the firewall not to lock yourself out—the use of the "Safe Mode" is advised. Once the cable has been connected between an internet-connected device (such as an Optical Network Termination box) and this router, continue with the following steps (it is also possible to use settings on the 'Quick Set page' of the WebFig console) In PPP>Interface>, check 'enabled' and that 'Interface' is your named VLAN10, then Status should be "connected". Check IP>Addresses, which should show a line with your assigned fixed IPv4 address under 'Address' as a /32, the upstream gateway address at the ISP premises under 'Network' and the Interface name you are using eg ppp-out1. In IP>Routes, two new entries should be present, for Dst. Addresses 0.0.0.0/0 (Gateway is your ppp interface name, , annotated 'reachable', and with no 'Pref. Source') and for the address of the ISP's gateway (a /32, gw: pppoe interface reachable, Pref. Source, the fixed local IP address). If IPv6 is enabled, IPv6>Addresses should be similarly autopopulated, with link-local address lines for the interfaces pppoe, the vlan, and the WAN port, as well as your subnet(s). This is a place to add global addresses for your subnet(s) if you wish. In IPv6>Routes, a default destination should be present as Dst. Address ::/0 with the Gateway your pppoe name and 'reachable'. Your IPv6 subnet is shown here as 'DASU', as well as in IPv6>DHCP Client as "Prefix". IPv6 global prefixes should also be present for your subnet(s) in this Routes listing. Connect to a distant website on a connected machine, and check what's going on in the firewalls. See, from https://help.mikrotik.com/docs/display/ROS/First+Time+Configuration