2 seperate masquerades to 2 different WAN IP - How?

RouterOS General
1

Ok, I’ll re-try one of my questions, this time more specific about masquerading. I would like to try and set up this type of masquerade, with some regular NAT at the same time. I’ve not seen any reference to having two seperate masquerades to two WAN IP over the same NIC.
Diagram:

     WAN ----------------MT---------------- 192.168.50.20 Masquerade to WAN x.x.x.20 NO web-proxy - direct only
x.x.x.18 to x.x.x.21     192.168.50.254 |
GWY x.x.x.17             LAN            |
                                        |-- 192.168.50.21 Masquerade to WAN x.x.x.21 and via web-proxy
                                        |
                                        |
                                        |-- 192.168.50.18 and .19 direct NAT to matching WAN IP .18 and .19

Any ideas if this can be done, and if so how?
Thanks again
Steve

2

Hi,
You can do this

Src NAT for each IP
and Dst NAT for each IP too

this is a code IP Proxy should be activate

ip firewall nat add chain=srcnat action=src-nat to-addresses=x.x.x.20 to-ports=0-65535 out-interface=internet src-address=192.168.50.20
ip firewall nat add chain=dstnat action=dst-nat to-addresses=x.x.x.20 to-ports=0-65535 dst-address=192.168.50.20

ip firewall nat add chain=dst-nat protocol=6(tcp) dstport=80 In-interface=vlan245 action=redirect port=3128
ip firewall nat add chain=srcnat action=src-nat to-addresses=x.x.x.21 to-ports=0-65535 out-interface=internet src-address=192.168.50.21
ip firewall nat add chain=dstnat action=dst-nat to-addresses=x.x.x.21 to-ports=0-65535 dst-address=192.168.50.21

ip firewall nat add chain=srcnat action=src-nat to-addresses=x.x.x.18 to-ports=0-65535 out-interface=internet src-address=192.168.50.18
ip firewall nat add chain=dstnat action=dst-nat to-addresses=x.x.x.18 to-ports=0-65535 dst-address=192.168.50.18

ip firewall nat add chain=srcnat action=src-nat to-addresses=x.x.x.19 to-ports=0-65535 out-interface=internet src-address=192.168.50.19
ip firewall nat add chain=dstnat action=dst-nat to-addresses=x.x.x.19 to-ports=0-65535 dst-address=192.168.50.19

For direct connection add direct connection on ip proxy

3

Thanks for the reply. However, addresses 18, 19, and 20 all seem to be same setup, whereas I was trying to add default masquerade to address 20, not a direct NAT. I have the NAT working ok for other IP addresses.

I assume the VLAN245 has to be created somehow for the proxy redirect? I see how you redirect the ports to the proxy - good advise…

I’ll experiment some more…
Thanks