1:1 NAT for outgoing and incoming connections

RouterOS General
1

Probably a simple question but being new to MikroTik I want to make sure I get this right.

I have a customer requiring a Dual WAN setup. The customer has three devices:

  • PIX Firewall (airCloud Public IP1)
  • Exchange Server (airCloud Public IP2)
  • Barracuda AntiSpam (airCloud Public IP3)

We are installing an RB532 configured as follows:
Eth1 - WAN1 airCloud Wireless
Eth2 - WAN2 airCloud DSL service
Eth3 - LAN Customer Network


When WAN1 is up (default route is responding to ping), Eth1 and Eth3 are bridged. If WAN1 goes down, WAN2 goes active. (We know this all works correctly from another similar installation)


In this case I need to do a 1:1 NAT that maps three DSL IP's bound to Eth2 to the three airCloud IP's on the PIX, Exchange, and Barracuda servers.


My question is: How would you do it? I'm pretty confused as to what to assign under

srcnat/dstnat
Masquerade/netmap
SrcAddress/DstAddress
InInterface/OutInterface.

I'm using WinBox primarily.

Any help would be greatly appreciated! I have to install this Thursday and I want to be sure I have it right.


Side Note:
We have already taken care of the mail DNS through multiple MX records with priority.

Thanks in advance

airCloud Communications
Jerry Richardson
VP Operations
jrichardson@aircloud.com
3478 Buskirk Avenue, Ste 1000
Pleasant Hill, CA 94523
tel: 925-260-4119
mobile: 925-300-6093

2

/ip firewall nat add chain=dstnat dst-address= action=netmap
to-addresses=

/ip firewall nat add chain=srcnat src-address=
action=netmap to-addresses=

3

this don’t work if hotspot is enabled. it is so strange
the dynamic rule (dstnat action=jump hotspot from client) disable the nat 1:1

any idea on how to get the NAT 1:1 working with hotspot ?