Our online user is apox 350 and 5 ip in our wan side how to configure dynamic nat. And how to show log in below format:-
Date and time - scrose ip : scrose port - destination ip: destination port - nat ip: nat port - nas ip
tick the logging box on the srcnat rules in your router. (the checkbox is in the actions tab for each rule)
The log entries contain the information you want, but the format is defined by the system and the most you can do is put a block of predefined text (log prefix) into each entry.
Then set up logging to make sure that info,fireall is being logged.
(by default, info,* is being logged to memory)
You can set up a special logging action which sends info,firewall to a syslog server.
Thks, but pls help me any log server name, which supports this log format.
And how to dynamic nat rules. I am using dma radius manager
It’s just syslog - any Linux host can do this, and there are many syslog server programs available for Windows.
Setting up syslog is something you should probably do some research on and come up with your own solution.
And the dynamic NAT functions in Mikrotik are src-nat / dst-nat / masquerade
Any rule in the srcnat chain with action=src-nat will dynamically source-nat the packet per the configuration of the rule.
The same is true for masquerade (which simply uses the preferred address of the interface where the packet is going out from the router)
dst-nat is dynamic, but modifies the destination IP address of the packet per the configuration of the rule.
netmap is a stateless NAT rule and probably not what you’re looking to use.
dear ZeroByte
pls, details rules of dynamic SNAT