[Mikrotik] Routing question about Public and Private IP's on gateway router

Christopher Tyler chris at mowisp.com
Sat Sep 25 20:36:30 CDT 2010


Ahh.... That makes sense for the private IP's, and I'll have to set that 
up.  But why would the public's, which should not even be touched by 
NAT, be showing up as our /30 instead of the actual IP address?

Christopher Tyler
Total Wireless Communications, LLC

On 09/25/2010 11:55 AM, Jeromie Reeves wrote:
> You need a to-address on there, or it will assume the IP on the WAN port.
>
> On Sat, Sep 25, 2010 at 9:39 AM, Christopher Tyler<chris at mowisp.com>  wrote:
>> Sorry about that, my mistake.  I typed<private>  in the email and it should
>> have been<public>.  Only the private IPs are being masqueraded not the
>> public, and that was always the case.
>>
>> The rule is "!<public>" not "!<private>" as in not the _public_ IP block.
>>
>> This is what I should have wrote in the email:
>> /ip firewall nat
>> add action=masquerade chain=srcnat\
>> disabled=no out-interface=WAN src-address=!xxx.xxx.0.0/22
>>
>> Where xxx is our _public_ IP block.
>>
>> Christopher Tyler
>> Total Wireless Communications, LLC
>>
>> On 09/25/2010 01:33 AM, Josh Luthman wrote:
>>>
>>> Masquerade the private addresses, not the public.
>>
>> _______________________________________________
>> Mikrotik mailing list
>> Mikrotik at mail.butchevans.com
>> http://www.butchevans.com/mailman/listinfo/mikrotik
>>
>> Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS
>>
> _______________________________________________
> Mikrotik mailing list
> Mikrotik at mail.butchevans.com
> http://www.butchevans.com/mailman/listinfo/mikrotik
>
> Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS
>
>


More information about the Mikrotik mailing list