Bridge Dst-Nat

RouterOS General
1

I’ve got a phone server on our network that uses the subnet broadcast address to send info to the phones on the local subnet.
However, its sending the packet to desitination MAC of the gateway router (MT 2011) and not FF:FF:FF:FF:FF:FF so the phones never see it as the switches forward the frame only to the MT router.
I’m trying to put in a Bridge NAT rule to help correct for this. If possible.
I set up a Mangle rule to mark the packet, but when I set the following Bridge NAT rule, it never matches

/ip firewall mangle
add action=mark-packet chain=prerouting dst-address=10.10.32.255
dst-address-type=broadcast in-interface=vlan232 new-packet-mark=
BcastFromAllworxSrvr passthrough=no src-address=10.10.32.2

/interface bridge nat
add action=dst-nat chain=dstnat log=yes packet-mark=BcastFromAllworxSrvr
to-dst-mac-address=FF:FF:FF:FF:FF:FF

Anyone have an idea?

2

dst-nat is performed as the frame or packet enters the 'Tik, so the mangle rule assigns the packet-mark to the packet too late, after it has already passed the dst-nat chain.

So a single rule like
/interface bridge nat chain=dstnat action=dst-nat to-dst-mac-address=FF:FF:FF:FF:FF:FF mac-protocol=ip dst-address=10.10.32.255/32 should do the trick. But I’m not sure whether it will make the bridge forward the frame out via the other ports, you have to try.

3

Yeah, I started using qualifiers in the bridge NAT rule itself but still did not match.
Got the phone server fixed, so no way to test any more. THanks.