Destination NAT

FearlessRabbit · October 22, 2012, 2:37pm

Hi guys,

Id like to permanently map internal address of X.X.X.X to public address of Y.Y.Y.Y:8090, so whoever hits that public address on that port, goes internally to X.X.X.X. Im not sure how to do this, and really have only one chance to get it right, as this is production router and I cant afford to play around and learn by mistake

Please help

cbrown · October 22, 2012, 3:12pm

Not so Fearless after all

/ip firewall nat
add action=dst-nat chain=dstnat dst-address=Y.Y.Y.Y dst-port=8090 protocol=\
    tcp to-addresses=X.X.X.X

FearlessRabbit · October 22, 2012, 3:15pm

Haha, thanks buddy, I`ll continue being fearless in my spare time

patrickmkt · October 22, 2012, 11:03pm

cbrown:

FearlessRabbit:

really have only one chance to get it right, as this is production router and I cant afford to play around and learn by mistake

Not so Fearless after all
/ip firewall nat
add action=dst-nat chain=dstnat dst-address=Y.Y.Y.Y dst-port=8090 protocol=\
    tcp to-addresses=X.X.X.X

Shouldn’t it be action=netmap instead?

cbrown · October 22, 2012, 11:05pm

patrickmkt:

cbrown:
FearlessRabbit:

really have only one chance to get it right, as this is production router and I cant afford to play around and learn by mistake

Not so Fearless after all
/ip firewall nat
add action=dst-nat chain=dstnat dst-address=Y.Y.Y.Y dst-port=8090 protocol=\
    tcp to-addresses=X.X.X.X
Shouldn’t it be action=netmap instead?

No