Masquerade not translating correct IP address.

RouterOS General
1

Hi all,

I have a friend using a Mikrotik RB2011 on ROS 6.7. He has a multi-wan configuration, using route distances and ‘check-gateway’ to do the failover. He has noticed that occasionally when a WAN link fails then comes back up, his VoIP phones will then stop working.

On closer inspection I can see UDP traffic is being sent out the primary interface with the IP for the failover interface.

Rules are the basic -

action=masquerade chain=srcnat comment="Outbound : WAN1" out-interface="WAN1 - Plusnet VDSL"

Why is masquerade not masquerading the correct address?

2

because previous nat connection still open, close all open connection by nat on firewall connection-tracking when wan fail.

3

Thanks rextended!

However I would of assumed ‘Masquerade’ would always translate the IP address, regardless of previous. Perhaps a misunderstanding on my part.

You would think that if the WAN link goes down, that would take the NAT connection with it.

4

Is not always clear to all this…