Masquerade on interface with multiple public IPs addresses

RouterOS General
1

Hello,

I stuck on strange problem with mikrotik. I have inet interface with couple of public ipv4 addresses.
I started with one address and then I added more. Everything works great until reboot.
Mikrotik choose somehow a different IP address to make a masquerade.
Can I somehow setup a priority or something ?
When I disable all new IP addresses and then enabled them, all works nice. But I don’t want to do it after every reboot.

add action=masquerade chain=srcnat comment="default configuration" log-prefix="MASQ >>>" out-interface=inet to-addresses=0.0.0.0
2

I understand I do not answer your question, but why do you insist on use of masquerade if you assign the addresses manually anyway? The purpose of masquerade is to handle a single dynamically changing address and remove connections src-nated to that address if it disappears.

3

My mikrotik is FW and router, I don’t understand how I have to setup NAT for internet access from LAN without masquerade all traffic to the internet ?

4

Use action=src-nat to-addresses=the.chosen.ip.address instead of action=masquerade. It will only work if the.chosen.ip.address is static.

5

To further explain, the “general” action is src-nat, masquerade is a special form of source nat that auto-computes the ip address.
See:
http://forum.mikrotik.com/t/masquerade-or-src-nat-to-addresses/9384/1
http://forum.mikrotik.com/t/src-nat-vs-masquerade/89959/1