Basic Routing Question

RouterOS Beginner Basics
1

I am sorry to ask such a basic question but I just cannot get my head around this problem yet…

Current Configuration:
T1 circuit from AT&T with Ethernet handoff. 3 IP addresses available, but using only one on WAN interface. NATing on LAN interface. Firewall rules are forwarding numerous port traffic to various servers and devices. All working as it should. Simple stuff…

Desired changes to Configuration (where it got tricky):
I need to use a second WAN IP and port traffic from only two ports (80/443) to one server on the LAN side and use the servers existing NAT address. I cannot assign a public IP address on this server as corporate policy forbids this action. I currently have a firewall rule sending port 80/443 to another server currently.

The short version is I would like to have port 80/443 traffic from 12.1.2.100 to point at 10.0.0.101 and port 80/443 traffic from 12.1.2.101 to point at 10.0.0.102. I have attached a small PDF example of layouts.

I am having trouble seeing the forest for the trees on this one. Can anyone assist with some brilliant ideas… Examples are welcomed…

Thanks,
-greg
Visio-Drawing1.pdf (66.4 KB)

2

Just add the second public IP to the WAN interface on the router and then setup a new dst-nat rule to match on the new public IP, TCP, and port 80 with a to-address of your local IP you want that sent to. I would also add a srcnat rule to catch the return traffic from that host and src-nat that to the second public IP insstead of the first.