PCC and dst-nat

RouterOS Beginner Basics
1

Hi all,

I read the following wiki http://wiki.mikrotik.com/wiki/Manual:PCC but since implementation I’m unable to dst-nat some service inside my Local subnet such as:

chain=dstnat action=dst-nat to-addresses=192.168.0.50 to-ports=80 protocol=tcp in-interface=WAN2 dst-port=80

Should it still work after PCC or I need to add some marking corresponding to my mangle rule?

MB

2

Hi, i have this without problems. Tomorrow i’ll send my config. Here are 00:09 now..

This is something related with mark input traffic to make the replyes return for the same wan..

3

Hi,

this is my NAT rule (there is a rule to open external 2222 port to internal 22 in my local 192.168.1.253):

add action=dst-nat chain=dstnat comment="OPEN SSH SERVER" disabled=no \
    dst-address=192.168.101.2 dst-port=2222 in-interface=\
    ether2-ISP1-TELEFONICA protocol=tcp to-addresses=192.168.1.253 to-ports=\
    22
4

dst-address=192.168.101.2 is your router public ip address or local ip address in contact with your internet router. Is the IP you configure in your router NAT..

5

Humm,

I don’t see any mangle in this NAT rule. I disabled PCC alltogether just want to make thing simple to start. So I’m trying to resend all traffic from a NAT rule (like yours) to the WAN link that has a higher distance to the same interface.

Using the same NAT rule on the WAN with the lower distance (default gw), it works, so I’m sure the incoming traffic is not returning from where it came from.

Also would like to use this interface for my PPTP, feasible?!