1 to 1 NAT Help

RouterOS Beginner Basics
1

I have 2 private networks that I need to keep separate 10.67.64.0/20 and 10.13.0.0/24 all addresses are static
I need to create/assign multiple ip addresses from 10.67.64.0/20 network and map to a specific ip on the 10.13.0.0/24 network
10.67.70.1 = 10.13.0.10
10.67.70.7 = 10.13.0.35
etc…

Ether1 ip is 10.13.0.30
Ether5 ip is 10.67.65.33
If i have a pc on 10.67.64.3 that I need to connect to 10.13.0.10:8500, I want to use 10.67.70.1:8500 to connect
only devices on 10.67.64/20 network will request connections to 10.13.0.0/24 no requests will come from 10.13.0.0/24
RB750Gr3 6.47.2

2

Here is the config I have, it is working just not sure if this is the best way to do the job.
Any Thoughts?

/ip address
add address=10.67.69.250/20 interface=ether2 network=10.67.64.0
add address=10.13.0.30/24 interface=ether5 network=10.13.0.0
add address=10.67.70.2/20 interface=ether2 network=10.67.64.0
add address=10.67.70.7/20 interface=ether2 network=10.67.64.0
/ip firewall filter
add action=accept chain=input protocol=icmp
add action=accept chain=input dst-port=80 in-interface=ether1 protocol=tcp
add action=drop chain=input connection-state=new in-interface=ether1
add action=drop chain=forward connection-nat-state=!dstnat connection-state=new in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether2
add action=masquerade chain=srcnat out-interface=ether5
add action=dst-nat chain=dstnat dst-address=10.67.70.2 in-interface=ether2 to-addresses=10.13.0.10
add action=dst-nat chain=dstnat dst-address=10.67.70.7 in-interface=ether2 to-addresses=10.13.0.100
/ip route
add distance=1 gateway=10.68.64.1

3

would be better if you give us your topology

4

I want connections from Network 1 to the servers in Network 2 to appear to be part of Network 1 to the laptops.
I do not want any connections from Network 2 to Network 1.