Destination NAT via interface instead of specific IP?

RouterOS General
1

Is it possible to do destination NAT on the public interface rather than its IP address? I use Mikrotik routers in our software demo kits and they get plugged into different networks every time. The “public” interface is on DHCP of course. I’d like to allow computers from that network into our demo network via NAT, but teaching sales people how to find and change the public IP is probably going to lead to frustration for both of us. Right now I go on all demos, but we want to change that.

I’ve tried setting DSTNAT as usual but with an interface selected instead of IP, and that doesn’t work.

2

works like a charm

/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether3
3

Janisk,

Please reread the post from calvarez. The question is about dst-nat, not src-nat.

4

my bad. did no read careful enough. interface + NAT just clicked.

but, yes, you can set up dst-nat rule using interface.

5

I attempted to use the same method as dst-nat with an IP in the web UI, except I selected the inbound interface, but that didn’t work. Can you help me out with the command or the different options I need to choose in the web UI for that?

6

http://wiki.mikrotik.com/wiki/Packet_Flow

all you know is input interface protocol and port source and destination ip addresses. Choose what is required to specifically catch the connections you are interested in. Do not forget - chain=dstnat


Also, for testing you can use action=log, if you can catch those packets at all