I need to access from a server several controllers with the same APIPA address (169.254.1.1/16), this address fixed, it can’t be changed. After googling and testing, NAT seems to be the best way to achieve this, so this is my current layout, one router per controller.
Right now, I’m only focusing on the first Router (R1), and then I will add the rest of them.
This is my current configuration for R1
[admin@MikroTik] > ip address print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK INTERFACE
0 ;;; defconf
192.168.88.2/24 192.168.88.0 bridge
1 ;;; PF6000 Network
169.254.1.2/16 169.254.0.0 ether1
[admin@MikroTik] > ip firewall nat print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; defconf: masquerade
chain=srcnat action=masquerade src-address=192.168.88.10
out-interface=ether1 log=no log-prefix=""
1 chain=dstnat action=dst-nat to-addresses=169.254.1.1
dst-address=192.168.88.2 log=no log-prefix=""
2 chain=srcnat action=masquerade src-address=169.254.1.1 out-interface=bridge
log=no log-prefix=""
3 chain=dstnat action=dst-nat to-addresses=192.168.88.10
dst-address=169.254.1.2 log=no log-prefix=""
And this is a backup of my existing configuration
https://www.dropbox.com/s/pespjsikafdus1d/MikroTik-19700102-0100.backup?dl=0
After testing this, sometimes works, sometimes not, but I see some timeout errors in the PC server application and sometimes it takes too long to load the controller’s website.
Some remarks,
- I tried to use src-nat instead of masquerade, due to all IP addresses are static but it never work for me
- I tried with and without the SRC Address for the masquerade rule, same result, but I still believe the SRC Address should be there
- Controllers and PC are clients and servers, they listens on different ports for different purposes, please see the layout
- Controllers dont have a gateway, so I didnt assign a gateway to the PC as well
Is there anything I can do to solve this issue?
Is there anything wrong with my rules?
), it’s possible to use just one (if it has enough ports):