Hi
Please i got this mail from a new client
“Can you please exclude our both peers from then nat rule? Peers: 173.xx.x.xx and 178.xx.xxx.xx (public IP from a remote connection to their new site)
This 2 addresses MUST be reach the cisco router without Nat!”
Please can you help
What is your /ip firewall nat export?
0 ;;; Public Mask to NSL Server (src)
chain=srcnat action=src-nat to-addresses=41.xxx.xx.x src-address=10.0.1.20
1 ;;; Win Server to NAT
chain=dstnat action=dst-nat to-addresses=10.0.0.10 dst-address=41.xxx.xx.x
2 ;;; Public Ip to VoIP (NETMAP)
chain=dstnat action=netmap to-addresses=10.0.1.27 dst-address=41.xxx.xx.x
3 ;;; Public IP to Enterprise (NETMAP)
chain=dstnat action=netmap to-addresses=10.0.1.20 dst-address=41.xxx.xx.x
4 ;;; Tuns Public IP
chain=dstnat action=netmap to-addresses=10.0.2.1 dst-address=41.xxx.xx.x
5 ;;; Public Mask NSS (src)
chain=srcnat action=src-nat to-addresses=41.xxx.xx.x src-address=10.0.4.1
6 ;;; Public Mask NSS (dst)
chain=dstnat action=dst-nat to-addresses=10.0.4.1 dst-address=41.xxx.xx.x
7 ;;; Public IP to NSS (NETMAP)
chain=dstnat action=netmap to-addresses=10.0.4.1 dst-address=41.xxx.xx.x
8 ;;; masqueradeNSL network
chain=srcnat action=masquerade to-addresses=0.0.0.0
Please the client @ NSS is the one asking for this
Kindly find below thier own nat rule
NSS
0 ;;; masquerade hotspot network
chain=srcnat action=masquerade src-address=172.16.254.0/24
1 chain=dstnat action=netmap to-addresses=172.16.254.1 dst-address=10.0.4.1
this is how i forward public IP since i have not gotten how to forward the IP given by my ISP to the client it self without netmap