Problem with NAT on Netgear WG102 Access Point?

RouterOS General
1

Hi,

Ok I might be doing something wrong and I hope I am!

I am trying to NAT some WG102 access points to the outside world. They use SSL for their web browser and not regular port 80.

This is what I have:

/ ip firewall nat 
add chain=dstnat in-interface=ADSL protocol=tcp dst-port=10443 action=dst-nat to-addresses=192.168.1.250 to-ports=443 comment="" disabled=no

I have also tried:

/ ip firewall nat 
add chain=dstnat in-interface=ADSL protocol=tcp dst-port=10443 action=same \
    to-addresses=192.168.1.250 to-ports=443 same-not-by-dst=no comment="" \
    disabled=no

Now this works fine with our other access points that use Port 80 (no SSL)

2 Packets (96B) worth of data show up on the rule but nothing happens?

Access Points are on Hotspot but are IP Bound, and have self assigned static IP addresses.

Any ideas?

2

I think SSL traffic cannot be NATted correctly.

3

Of course SSL traffic can be NAT:ed.
You need a dst-nat entry and a src-nat entry for static NAT to towkr properly.