Summary: Can’t get MT router behind 1-1 NAT to ping outside.
Context: I have a ADSL modem/router configured as a router gateway with IP 192.168.0.1. There’s configured a natted 192.168.0.0/24 network for wifi in the office, they all are masqueraded to a fixed public IP. Days later, a ISP tech guy configured in the ADSL modem/router a 1 to 1 NAT for 192.168.0.254 to another fixed public IP upon my request so I could use it for creating a EoIP tunnel with another Mikrotik router without having to forward ports.
So there are 2 NATs in the ADSL modem/router:
Many to One: IPs from 192.168.0.2 to 192.168.0.253 → Public IP # 1
One to one: IP 192.168.0.254 → Public IP # 2
I assume if I point the tunnel to public IP # 2, it will transparently translate to 192.168.0.254. In the routerboard what I do is is connect the wlan to the wifi and assign IP 192.168.0.254/24 to it. Then add a route to the 192.168.0.1 gateway.
Problem: I tried pinging to one of my PCs over Internet from the mikrotik router and the PC receives the ping request OK and then replies (I confirmed that with a packet sniffer), however in the routerboard it shows “timeout”, like if the reply never reaches back the router. Pinging to 192.168.0.1 also timeouts, I don’t understand why this happens, isn’t the one to one NAT supposed to be transparent? is there a different gateway for the 1-1 NAT?
Now, if I change the wlan IP address to 192.168.0.253 or any other in the 2 to 253 range and it pings back OK, so it does if I configure a DCHP client in wlan, but then packets are masqueraded to public IP # 1 and I need them masqueraded to public IP # 2 so I can configure the tunnel.
Anyway I can’t get the tunnel connected and I need a light on what to do. Does this configuration works for what I want to do? how can I make the routerboard to not timeout pings and connect?
Thanks for your patience for reading this post and thanks for any help.