Questions about NAT44/RFC7422

[olivier2831]

Thank you very much for you very informative answer

And what if you have 5000 users ?

Deterministic NAT is a poor man’s workaround for small networks where you cannot log connection initiation events on an external storage.

1. Alternatively, how can you log connection initiation events on an external storage with a Mikrotik router for a 5000 users setup ?

I’ve just found IPFIX section within 6.47’s IP/Traffic Flow config page.
It contains a very long list of parameters, some of them being “NAT Src Port”, “NAT Dst Port” so this looks promising.
Using this, can you restrict collected data to connection initiation events ?

2. From experience, would you then follow the “logging route” (no detailed NAT settings) or the RFC7422 one (per user NAT settings) for large networks ?

[2] The best mode to Log ang track the internet connections