Hi,
I upgrade my WAN from a single public IP address to a /29 public pool.
Now I want to NAT my internal private network to the public pool at random (round-robin) and making sure the private IP address mapping follows the same public IP address while the internal IP is active which should prevents problems when the private IP is translate at random to any public IP/port and a web service sees an user connecting from different public IP addresses and denies access.
I am familiar with masquerade and I know this won’t work because it is useful if you had only one IP, a solution might be using src-nat but I’m not sure if the private-to-public translation will be kept or something else is needed, maybe mangle rules?
Any input is appreciated
Use action=same to-addresses=first.pub.lic.ip-last.pub.lic.ip instead of action=masquerade in /ip firewall nat. I’m not sure it will do a proper round robin but it will do its best to translate each internal address to the same external one to which it has translated it last time.