how to route a real ip to a client pc

I need to route a real ip to a client pc . can anyone know how to do that by mikrotik.

/ ip firewall nat
add action=netmap chain=dstnat comment="incoming" disabled=no dst-address="public ip" in-interface=ether1 \
    to-addresses="private ip"
add action=netmap chain=srcnat comment="outgoing" disabled=no out-interface=ether1 src-address="private ip" \
    to-addresses="public ip"

replace “private ip” and “public ip” with respective ip addresses
replace “in/out-interface=ether1” as necessary

This is OK . thks for that . But my actual question was . my isp has give me a series of real ip. I want to give 5 ips to my client . how to do that.

my real ip series is 202.203.49.0/24
my gateway is 202.203.49.1

I put a real ip in my wan interface 202.203.49.2/24
/ip address add address=202.203.49.1/24 interface=wan

I have no ip in my lan interface.

now how to give 5 or 10 real ips to my client pcs. not Private ip.

I’ve been asking for the last 3 month, no answers.

hi , CanadaBear … my goodness u r looking for this for last three months. Then I have no chance to get the script at least next 3 months.

There is a solution for that, I don’t know is it secure enough or not but it works. make a bridge between your wan eth and local eth and if you want to control the bandwidth then make simple queues for per real IP you want to give to your client.

Thanks

Here the link to what I’m trying to do over wifi.

http://forum.mikrotik.com/t/public-static-ip-setup/26975/1

Are you trying something like this, but wired?

this is very posible

search, search!

http://wiki.mikrotik.com/wiki/How_to_link_Public_addresses_to_Local_ones
http://forum.mikrotik.com/t/public-ip-routing-without-nat/28853/8
http://forum.mikrotik.com/t/assign-a-public-ip-to-a-client-without-natting/16802/6

Hello,

I have same problem.

the same problem - the same solution!

thanks a lot
i did it and it works i need help in another thing i need to connect to winbox via this real ip from any where how can i do it what is rule i do it in firewall to access it



thanks a lot

/ip firewall filter add chain=input dst-port=8291 action=accept