Help me with this somewhat basic scenereo. Thanks :)

RouterOS General
1

I have a T1 connection with 4 pubilc IPs.

internet
^
mikrotik LAN & WAN interfaces
^
50 port switch
^
desktops/laptops/servers

I have the microtik using 1.1.1.2 (examples) (cause 1.1.1.1 is gateway right? :stuck_out_tongue: )
I want the internal server1 using 192.168.1.4 to use the pubilc IP of 1.1.1.3
I also want the internal server2 using 192.168.1.5 to use the public IP of 1.1.1.4

I imagine this is done in the NAT settings, but I can’t quite figure out how this would work. Can someone help me? :slight_smile: Thanks!

2

You will need something like this.

/ip firewall nat
add action=dst-nat chain=dstnat  disabled=no dst-address=1.1.1.3 to-addresses=192.168.1.4

add action=src-nat chain=srcnat disabled=no src-address=192.168.1.4 to-addresses=1.1.1.3
3

hmmm DUH. Wow I was complicating it way too much in my head thinking I was giving that server a public ip showing outgoing and incoming on that ip…

it’s more secure to do it like you mentioned so thanks! :slight_smile:

I’m working on this and creating all the anti virus firewall rules at the same time haha.

4

That is in the user topics section of the wiki. If I was at my computer I would give you a link.