I’ve got a RouterBOARd 951G 2HnD. I’ve configure to connect the Eth1 with an static IP 192.168.X.X, to the Eth5 i will connect a PC with 192.168.1.30 IP and i need to transform this to 192.168.79.121. I’ve tried using NAT by this way (image file). What i’m doing wrong. Thanks in advance!
dst-address no es lo nuevo IP, es la dirección de destino de la conexión
dst-address is not the new IP, it is the destination address of the connection
Hi @dptoinformatica, welcome to the forum!
You have to use the “action”-tab and set action drop-box to “src-nat” and “To Adrresses:” to “192.168.79.121”. Check the log box if you want to enable tracing. You may also use the command “/ip firewall nat add chain=srcnat src-address=192.168.1.30 out-interface=ether5 action=src-nat to-addresses=192.168.79.121”
Source nat (not destination nat) is the path.
think about it, the general rule to masquerade all traffic out of ones router is typically chain=srcnat action=masquerade so that all private IPs appear to come from the identified outgoing inteface usually the WAN interface.
Thats the situation I need to enable connectivity between the two pc’s, I’ve added routes to make it possible and:
-I can ping from PC2 to PC1
-I can’t ping from PC1 to PC2
The schema is near useless, but only if:
-
Really one single lan cable connect PC1 with Router, and a single cable Router and PC2?
Why do not link directly the 2 PC? -
Why not simply change the IP of PC?
-
Why not simply add another IP to PC?
You can not NAT anything if the Router if is not the default Gateway or if the two PC have another LAN connection with it’s own gateway.
export the config with
/export file=config
and after removed the private data, paste on forum.
Also paste both IPv4 configuration of the two PC.
If the two PCs are behind the same router and simply on different subnets, to connect them is a matter of forward chain firewall rules???