Hello everyone
I have a CAP deployed at a clients site that's connected to our backbone network on ether1; we've opted to use PPPoE for this CAP device for Internet connectivity etc so that we can track usage / place bandwidth limits etc. Clients connect to WLAN1, obtain a IP address via DHCP#
But immediately we're not able to src-nat over the pppoe-out1 interface using the current rule:
/ip firewall nat add chain=srcnat out-interface=pppoe-out1 action=masqueradeThis rule is similar to our other devices (RB2011) etc.
After changing the nat to:
/ip firewall nat
add action=src-nat chain=srcnat out-interface=pppoe-out1 to-addresses=192.168.16.245It works - but im worried because we're hardcoding the to-addresses in the to-addresses paramter, i must be missing something.
Can anyone help where im going wrong with this? Thanks
Here is the full export - running on 6.39.2
sep/10/2017 13:23:30 by RouterOS 6.35.4
software id = 5VPW-0T9K
/interface wireless
set [ find default-name=wlan1 ] ampdu-priorities=0,7 band=2ghz-b/g/n country="united kingdom" disabled=no mode=ap-bridge radio-name=
cap-ftr ssid=xxxxxx-cr wireless-protocol=802.11
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether1 name=pppoe-out1 password=xxxxxx service-name=xxxx-fws user=xxxxx
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys supplicant-identity=MikroTik wpa2-pre-shared-key=
1xxxxxx
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=dhcp_pool2 ranges=192.168.100.2-192.168.100.254
/ip dhcp-server
add address-pool=dhcp_pool2 disabled=no interface=wlan1 name=dhcp1
/ip address
add address=10.0.16.8/24 interface=ether1 network=10.0.16.0
add address=192.168.100.1/24 interface=wlan1 network=192.168.100.0
/ip dhcp-server network
add address=192.168.100.0/24 dns-server=10.0.1.1 gateway=192.168.100.1
/ip firewall filter
add chain=input connection-state=established
add chain=input connection-state=related
/ip firewall nat
add action=src-nat chain=srcnat out-interface=pppoe-out1 to-addresses=192.168.16.245
/system clock
set time-zone-name=Europe/London
/system identity
set name=cap-ftr
/system leds
set 0 interface=wlan1
/system logging
add disabled=yes topics=debug
add topics=debug,wireless
add topics=debug,dhcp
/system routerboard settings
set cpu-frequency=650MHz protected-routerboot=disabled