In "ip firewall nat" table appears dynamic dstnats from LAN1 public IP address to anothers LANs IP address.
This lines remains in table but I can't see its in "print" command. How these lines grows up and why remains there?
Code: Select all
/ip firewall nat
add action=src-nat chain=srcnat comment="NAT1" disabled=no out-interface=ether1-GATEWAY src-address=192.168.1.0/24 to-addresses=x.x.x.51
add action=src-nat chain=srcnat comment="NAT2" disabled=no out-interface=ether1-GATEWAY src-address=192.168.2.0/24 to-addresses=x.x.x.52
add action=src-nat chain=srcnat comment="NAT3" disabled=no out-interface=ether1-GATEWAY src-address=192.168.3.0/24 to-addresses=x.x.x.53
All dynamic dst addresses is public address x.x.x.51 for LAN1, but to addresses from another LANs not to 192.168.1.xdstnat dstaddress=x.x.x.51 dstport=tcp 2020 toaddress=192.168.3.120
dstnat dstaddress=x.x.x.51 dstport=udp 28963 toaddress=192.168.2.7
Where I see x.x.x.51 is record in route list:
DAC dstaddress=x.x.x.48/28 gateway=ether1-GATEWAY reachable pref.source=x.x.x.51
Maybe preffered source is what appears in dynamic nat?
Thank you for explain.