NAT Rule Creation CRS309

I have two bridge VLAN configured in CRS309
Bridge 1 - VLAN2 ( ETHER1) → Connecting my Laptop
Bridge-2 -VLAN1( SFP1&2)
SFP3- Connected to Internet

I would like to NAT my Bridge 2 with SFP3 interface , is this possible with bridge interfaces ? Is there a simple way to NAT my Bridge 1 to access internet connection ? [/u][/u]

Any tips ?

Post your current config as shown by /export hide-sensitive (and redact any remaining sensitive information such as public IP address).

CRS309 is a switch

do not expect good performance doing router tasks like NAT Routing etc etc

export hide-sensitive

jan/02/1970 01:09:32 by RouterOS 6.43.7

software id = I17I-VJ3D

model = CRS309-1G-8S+

serial number = A7FF0ACEF7EE

/interface bridge
add name="Bridge VLAN 1" vlan-filtering=yes
add name="Bridge VLAN 2" pvid=2 vlan-filtering=yes
/interface ethernet
set [ find default-name=sfp-sfpplus4 ] name=WAN
/interface vlan
add interface="Bridge VLAN 1" name="VLAN 1" vlan-id=1
add interface="Bridge VLAN 2" name="VLAN 2" vlan-id=2
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/interface bridge port
add bridge="Bridge VLAN 1" hw=no interface=ether1
add bridge="Bridge VLAN 2" interface=sfp-sfpplus1 pvid=2
add bridge="Bridge VLAN 2" interface=sfp-sfpplus2 pvid=2
/interface bridge vlan
add bridge="Bridge VLAN 2" tagged=sfp-sfpplus1,sfp-sfpplus2 untagged=
"Bridge VLAN 2" vlan-ids=2
/interface detect-internet
set detect-interface-list=all
/ip address
add address=172.16.1.1/24 interface="Bridge VLAN 2" network=172.16.1.0
add address=172.16.2.1/24 interface="Bridge VLAN 1" network=172.16.2.0
add address=xxxxxxxx (ISP STATIC IP)interface=WAN network=xxxxxxx
/ip dns
set allow-remote-requests=yes servers=xxxxxx.1,8.8.8.8
/ip firewall nat
add action=masquerade chain=srcnat out-interface=WAN
/ip route
add distance=1 gateway=xxxxx(ISP GATEWAY)
/system routerboard settings
set boot-os=router-os

SFP1,2 are part of one bridge (VLAN2)
Ether 1 configured on another bridge (VLAN1)
SFP4- is Wan port

  1. As of now , from SFP4 i don't have gateway reachability to ISP Router IP , do i need to configure sfp4 in a separate bridge ? What am i doing wrong ?