i have a network that the ip parameter are
ether1 ip is 192.168.0.2/24
ether2 ip is 192.168.20.1/24
ip gateway is 192.168.0.1
dns is 41.204.224.2
please how do i configure NAT on it
i have a network that the ip parameter are
ether1 ip is 192.168.0.2/24
ether2 ip is 192.168.20.1/24
ip gateway is 192.168.0.1
dns is 41.204.224.2
please how do i configure NAT on it
under firewall NAT,
Add new NAT rule.
action: masquerade
under general put in source ip: (192.168.1.0/24 if your computers are on that range)
but from your specs givin it looks like you have 2 different ip ranges accesing the router?
or is eth1 local and eth2 WAN ?
If you do not know what to do because - well, you don’t know - then you might as well just NAT everything.
in Winbox, click IP->Firewall->NAT (tab)
Click the red cross to add. ‘src-nat’ should be the default under the General tab.
Click Action tab. Select ‘masquerade’.
There are a lot of downsides to doing this as your network gets bigger, but it should work for you while you learn how it is done properly.
my mikrotik router is not resolving ip addresses to there domain names ( i can ping google.com but i cant browse google.com please help
How are you browsing from the router?
Are you talking about DNS on a client behind the router?
it stop resolving ip into doman name each time i enable hotspot page please help
Go to “/ip dns” and set up valid name servers, and enable remote requests.
i have just done that yet each time i enable the hotspot it will stop resolving ip into domain name but once i disable the hotspot it will browse please help
How? I can’t see your router. Post your configuration, at least:
/ip address export
/ip route export
/ip firewall export
/ip dns export
/ip hotspot export
MMM MMM KKK TTTTTTTTTTT KKK
MMMM MMMM KKK TTTTTTTTTTT KKK
MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK
MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK
MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK
MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK
MikroTik RouterOS 4.10 (c) 1999-2010 http://www.mikrotik.com/
[admin@MikroTik] > ip address export
/ip address
add address=172.17.130.2/24 broadcast=172.17.130.255 comment=“” disabled=no interface=ether1 network=172.17.130.0
add address=192.168.1.1/24 broadcast=192.168.1.255 comment=“” disabled=no interface=ether2 network=192.168.1.0
[admin@MikroTik] > ip route export
/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=172.17.130.1 scope=30 target-scope=10
[admin@MikroTik] > ip dns export
/ip dns
set allow-remote-requests=yes cache-max-ttl=1w cache-size=2048KiB max-udp-packet-size=512 servers=208.67.220.220,208.67.222.222
[admin@MikroTik] > ip firewall export
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s tcp-close-wait-timeout=10s tcp-established-timeout=1d tcp-fin-wait-timeout=10s
tcp-last-ack-timeout=10s tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no tcp-time-wait-timeout=10s udp-stream-timeout=3m
udp-timeout=10s
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=“place hotspot rules here” disabled=yes
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=“place hotspot rules here” disabled=yes
add action=masquerade chain=srcnat comment=“” disabled=no out-interface=ether1
add action=masquerade chain=srcnat comment=“masquerade hotspot network” disabled=no src-address=192.168.1.0/24
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061
set pptp disabled=no
[admin@MikroTik] > ip hotspot export
/ip hotspot profile
set default dns-name=“” hotspot-address=0.0.0.0 html-directory=hotspot http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=cookie,http-chap name=default
rate-limit=“” smtp-server=0.0.0.0 split-user-domain=no use-radius=no
add dns-name=“” hotspot-address=192.168.1.1 html-directory=hotspot http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=cookie,http-chap name=hsprof1
rate-limit=“” smtp-server=0.0.0.0 split-user-domain=no use-radius=no
/ip hotspot
add addresses-per-mac=2 disabled=no idle-timeout=5m interface=ether2 keepalive-timeout=none name=hotspot1 profile=hsprof1
/ip hotspot user profile
set default idle-timeout=none keepalive-timeout=2m name=default shared-users=1 status-autorefresh=1m transparent-proxy=no
/ip hotspot service-port
set ftp disabled=no ports=21
/ip hotspot user
add comment=“” disabled=no name=admin password=“” profile=default
[admin@MikroTik] >
I don’t see what is wrong with that.
“/system reset-configuration” to reset to factory defaults, start from scratch.