user36
December 11, 2007, 4:39pm
1
hi all,
Really I don’t know how it can done. One of our client is asking for static public IP for their service. Our network is on private ip with 192.168.xx.xxx/24 network. The client need a VPN tunneling with their office in another country. It can be static but how can we bind a public ip??? Anybody help…please…
Regards,
InoX
December 12, 2007, 2:01am
2
You need to buy IP’s man.
user36
December 12, 2007, 9:22am
3
oops, I forgot to mention that… I have IPs. My prob is how to implement??? Please give some idea…
acim
December 12, 2007, 5:17pm
4
Check Mikrotik manual, you have examples there.
GWISA
December 13, 2007, 8:07am
5
What you are wanting to do is DST-NAT the public IP to the private, and SRC-NAT the private to the public in IP/firewall/NAT settings.
user36
December 13, 2007, 11:30am
6
Do you mean One-to-One NAT??? Can you please explain in detail…
user36
December 13, 2007, 11:33am
7
Thank you for your reply… I will try to do that. if you don’t mind can you please explain deeply…
GWISA
December 13, 2007, 2:45pm
8
Copy & paste to your router after editing the ip’s:
/ip firewall nat add chain=srcnat src-address=<private ip> action=src-nat to-addresses=<public ip> to-ports=0-65535
/ip firewall nat add chain-dst-nat dst-address=<public ip> action=dst-nat to-addresses=<private ip> to-ports=0-65535
user36
December 13, 2007, 4:51pm
9
GWISA:
Copy & paste to your router after editing the ip’s:
/ip firewall nat add chain=srcnat src-address=<private ip> action=src-nat to-addresses=<public ip> to-ports=0-65535
/ip firewall nat add chain-dst-nat dst-address=<public ip> action=dst-nat to-addresses=<private ip> to-ports=0-65535
Thank you verymuch… Really a great job… I will Post my reply after trying…Once again thank you very much
GWISA
December 13, 2007, 10:33pm
10
correction in 2nd line:
/ip firewall nat add chain=srcnat src-address=<private ip> action=src-nat to-addresses=<public ip> to-ports=0-65535
/ip firewall nat add chain=dst-nat dst-address=<public ip> action=dst-nat to-addresses=<private ip> to-ports=0-65535
user36
December 14, 2007, 9:51am
11
Thank you for your correction
acim
December 14, 2007, 11:43pm
12