internale lan netmap

RouterOS General
1

Hello,
i have a very simple configuration.
so quick set ether1 WAN DHCP from isp , ether2-5 LAN with ip 192.168.88.1
DHCP 2-100

some devices in LAN have DHCP ip , other static ip with 192.168.88.0/24.

can i setup a netmap or other function (ex dstnat o srcnat) to call my devices with another class?
example to print i setup printer on my server with ip 192.168.88.5
but i would setup with 192.168.89.5
and for all other devices i would when i call 192.168.89.0/24 respond 192.168.88.0/24 in transparent mode, without config every device.

is it possible setup a rule in mikrotik?

thank you in advance

2

Yes, action=netmap rules in chains src-nat and dst-nat of /ip firewall nat do exactly this. Just bear in mind that if you want “transparent” traffic, i.e. that connections could be established in either direction, you must have the appropriate rule in both chains, as it is still a NAT handling, i.e. it is assigned to a connection when the firewall handles its very first packet.

3

ok thank you fo reply.

so it’s correct use this rules (both direction)

/ip firewall nat add chain=dstnat dst-address=192.168.89.0/24 action=netmap to-addresses=192.168.88.0/24
/ip firewall nat add chain=srcnat dst-address=192.168.88.0/24 action=netmap to-addresses=192.168.89.0/24

or i add other rules?

i will try…
thank you

4

You may want to restrict those rules only to traffic incoming or outgoing via a particular interface or from/to a particular remote address (or address range, or address list), but yes, the baseline rules are these.

5

ok, thank you. i have a “normal” lan with more devices but is a single class, so for now i don’t need to setup particular interface or remote address.

i will try this and then post if works.

thank you again

6

work perfect
thank you