Hi All,

I have an Intranet with some RouterOS hardware with IP Private, and only one IP Public.

RB1 RB2 RB3 SERVER
|====| |====| |====| 10.20.30.2/24
IP Public 118.97.x.x eth1 wlan1 10.20.20.1/24 wlan1 10.20.20.2/24 wlan1 10.20.30.2/24
wlan2 10.20.30.1/24 eth1 10.20.30.1/24

On RB1 i already set masquerading.
RB1, RB2, RB3, i set OSPF and already working properly, Server to RB1 can ping each other perfectly.

My question is how to access the Server from the Internet? (e.g. I would like to map 10.20.30.2:80 to 118.97.x.x:8080, or 10.20.30.2:22 to 118.97.x.x:8081?)

The only working solution for me is to set dst-nat on every RB1, RB2, RB3, which I think not the best solution. Any clue? Thanks.

Either set destination nat or route public /32 address to the server.