Problem with NAT on MT ???

RouterOS General
1

I have many client behind the NAT. All client’s have public IP


Example:

/ip firewall nat add chain=srcnat action=masquerade out-interface=Public

/ip address add address=10.5.8.2/32 interface=Public
…
/ip address add address=10.5.8.250/32 interface=Public


Rule allowing access to the internal server from external networks:

/ip firewall nat add chain=dstnat dst-address=10.5.8.2 action=dst-nat
to-addresses=192.168.0.2
/ip firewall nat add chain=srcnat src-address=192.168.0.2 action=src-nat
to-addresses=10.5.8.2

…

/ip firewall nat add chain=dstnat dst-address=10.5.8.250 action=dst-nat
to-addresses=192.168.0.250
/ip firewall nat add chain=srcnat src-address=192.168.0.250 action=src-nat
to-addresses=10.5.8.250

I have a problem with connect client to each other with Public IP:

Example:

Client 10.5.8.2 can’t connect to 10.5.8.200

telnet 10.5.8.200

but Client from outside the network connect without problem. How to Fix it ?

2

Hi. I am just guessing hear, but try adding a in interface

/ip firewall nat add chain=dstnat in interface=Public dst-address=10.5.8.2 action=dst-nat
to-addresses=192.168.0.2

3

Sorry, my mistake in example, i have already added in interface and out interface in dst and src nat (and still not working)

4

Think the problem is mikrotik knows it has to route back on the same interface but now it is to ip in same range. Dont think is possible.

5

Is possible to resolve this problem ??? Maybe some firewall rules ???