I have to ask this question rather than experiment too much with my production environment. We are setting up a new data center. One of our firewalls is a Mikrotik CCR-1036. I want to clean up the cabling with ether1 connecting to our ISP and SPF 1 configured for all vlans (1,105-120), allowing me to remove all other cat 6 cables. SPF 1 would connect with my office network and carry all vlans. I ran into problems with dst-nat and src nat, neither worked unless I assigned each subnet to a specific interface, rather than a vlan.
E.G. Vlan 1 is our public IP. If I assign it to Ether1 src natting and dst natting work. However when assigning the public IP (many IPs) to vlan 1 (on interface eth1) and assigning the private subnet (vlan 106) to vlan 106 (on interface eth2), src natting and dst-natting break. Things work again if the IPs are assigned to a physical interface.
Is it possible to do what I want, or does natting require physical interfaces be configured?