public ip address forwared not bridge

i have 2 ubiquiti rocket m5 with rocket sectors, both of them are conected to rb450 by ethernet 1 and ethernet 2.

on ethernet3 i have central p2p link wich is connected to central router.

i have freeradius for client authentication.

so my problem is

i want to give rocket m5 public ip-s, but clients which are connected to sector and are briged to mikrotik, i want to masqureid them.


Can anyone help me?

Thank you

Configure private IP addresses on the customer facing interfaces, configure the public IP address on the uplink interface, then NAT:

/ip firewall nat add chain=src-nat action=masquerade out-interface=ether3

yes but how rocket m5 will communicate to radius if it will have private ip address?