thanks oliverfriedmann - sounds like a great idea to template this. when researching ufpp it looked like the version on npm is pretty outdated and also points to a defunct repo. also noticed you have this repo on GH https://github.com/Jsonize/universal-file-preprocessor - just wondering if it would ...

Hi lurker888, thanks again(!) for the review! So, if I understand correctly, two concerns: 1. redundancy / over-complication by using first a connection-mark and then converting to routing-mark 2. not only redundancy but potential problem due to conflict: same traffic (e.g. "chain=prerouting in...

Hello again lurker888,

finally managed to get to the writeup - I don't want to use more of your time, but feel free to have a look viewtopic.php?t=215953 - if you have any feedback for me, I am happy to edit!!

Many thanks again for helping us on this one!! Jürgen

Intro Setting up bidirectional 1:1 NAT in RouterOS allows you to create static mappings between external and internal IP addresses. This configuration is useful when you need multiple internal (LAN) devices to be accessible via specific external (WAN) IPs. There is a special twist though, since in ...

Hello lurker888! Many thanks for the detailed write-up and background on "proxy-arp" - very good! Now its clear to me that there is no need to include it. re: write-up - in fact I was planning on doing this on the weekend (had a summary as "last" post in this thread in mind - but...

duh, good old copy/paste! wrong (last line): /ip firewall mangle add chain=prerouting in-interface=ether1 dst-address=172.29.10.101 action=mark-connection new-connection-mark=plc1-conn comment="Mark PLC1 Connections" add chain=prerouting in-interface=ether1 dst-address=172.29.10.102 action...

today I managed to implement the setup! looking good so far, only got this error: input does not match any value of new-routing-mark right after this command add chain=prerouting in-interface=ether1 connection-mark=plc1-conn action=mark-routing new-routing-mark=to-plc1 comment="Mark route to PL...

Many thanks again!! will change the "virutal IPs" from /32 to /24 and fixed routing-mark=" -> "routing-table" in section "/ip route" Also please update the software on your device to something recent; I would suggest the latest stable version 7.18.2. Bugs are fixed...

Hello lurker888, many, many thanks for giving such thorough and tremendously helpful feedback! Heh, the bridges are way over-engineered (and even wouldn't work) - good thing you explained this; I did away with them, and use the interfaces directly; the only thing I cannot wrap my head around is that...

Hello lurker888, many thanks for your reply! And pointing out the somewhat interesting choice of router model (sadly, I was not involved in the purchasing decision) - we might revisit this decision! I had a look at the posts you linked - good call re: "action=mark-connection" and "act...

Hello, we are using "CCR2004-16G-2S+” and need to configure 1:1 NAT (bi-directional) from 8x internal device to 8x external IP address. +-------------------------------+ | Linux Edge Device (Client) | | IP: 172.29.10.10/24 | +---------------+---------------+ | | +---------------------+---------...