Masquerading public IP's

RouterOS General
1

I have a main router with a masquerade rule setup on it for all traffic out of my public Ethernet interface.

this router(a) is connected to a second router(b) on a p2p link using RIP, the second router has the customer(c) on it (pppoe) with a public ip assigned to them.

I want to setup a firewall rule so that the customer(c) outgoing traffic is marked with there own IP not the man masqueraded one.

existing rule:
chain-srcnat action=masquerade out-interface=public

Im thinking:
chain-srcnat action=masquerade out-interface=public src-address=x.x.x.x (customer ip)

will this work? will this rule need to be higher than the fist rule in the list also?

cheers.

2

anyone please

3

Anyone from MT? Please

4

My first thought was to tell you to src-nat, but it looks like you are giving the customers public IPs via PPPoe, in that case, why would you want to masq anything, they should go out their public IP, however, since you don’t have a src-address limited to the scope of your private network, all traffic gets masqed. So.. Put in a src-address of your private network only, then any customers with publics will just route out and all will be well..

5

Wonderful, thanks very much.