Hello, I have a CCR1036-8G-2S+ where I wan’t to create src-nat rules with specifik source ports for every hidden CGNAT IP.
I need four src-nat per IP and are there any performance issues with 64000 src-nat rules if I design the system for 16000 IP/customers?
ex.
/ip firewall nat
add action=src-nat chain=srcnat out-interface=Internet protocol=tcp src-address=100.64.100.2 to-addresses=1.1.1.1 to-ports=1024-2047
add action=src-nat chain=srcnat out-interface=Internet protocol=udp src-address=100.64.100.2 to-addresses=1.1.1.1 to-ports=1024-2047
add action=src-nat chain=srcnat out-interface=Internet protocol=sctp src-address=100.64.100.2 to-addresses=1.1.1.1 to-ports=1024-2047
add action=src-nat chain=srcnat log=yes log-prefix=CGNAT out-interface=Internet src-address=100.64.100.2 to-addresses=1.1.1.1