SNAT

RouterOS General
1

Dear Frds,

i have CCR router i have configured eth1 as WAN and eth2 as LAN

the wan ip of Router is 103.239.XXX.XX.

i have a public ip pool of /25 (103.239.XXX.130 to 103.239.XXX.254) for SNAT

i have added multiple /27 private ip pools on eth(LAN)


1st_32_IP_pool Gateway → 172.17.0.1 Network/Cidr → 172.17.0.0/27
2nd_32_IP_pool Gateway → 172.17.0.65 Network/Cidr → 172.17.0.64/27
3rd_32_IP_pool Gateway → 172.18.10.65 Network/Cidr → 172.18.10.64/27
4th_32_IP_pool Gateway → 172.18.10.129 Network/Cidr → 172.18.10.128/27
5th_32_IP_pool Gateway → 172.18.11.65 Network/Cidr → 172.18.11.64/27
6th_32_IP_pool Gateway → 172.18.11.129 Network/Cidr → 172.18.11.128/27
7th_32_IP_pool Gateway → 172.18.12.65 Network/Cidr → 172.18.12.64/27
8th_32_IP_pool Gateway → 172.18.12.129 Network/Cidr → 172.18.12.128/27
9th_32_IP_pool Gateway → 172.19.10.65 Network/Cidr → 172.19.10.64/27
10th_32_IP_pool Gateway → 172.19.10.129 Network/Cidr → 172.19.10.128/27
11th_32_IP_pool Gateway → 172.19.11.65 Network/Cidr → 172.19.11.64/27
12th_32_IP_pool Gateway → 172.19.11.129 Network/Cidr → 172.19.11.128/27
13th_32_IP_pool Gateway → 172.19.12.65 Network/Cidr → 172.19.12.64/27
14th_32_IP_pool Gateway → 172.19.12.129 Network/Cidr → 172.19.12.128/27

could u people suggest how to set SNAT ip pool to private ip pools. the scenario should be such that any public from SNAT pool could be NAT to any private pool ip by its own.

Regards.

2

Just for clarification…

Are you talking about allowing private IPs to go out of your network or are you talking about having random IPs on the internet come into your network?

Further, if you are talking about Public IPs coming into your network, can you clarify what you mean by “any public from SNAT pool could be NAT to any private pool ip by its own.”

It reads like you want someone connecting to your network to be able to decide which device they connect to behind your router?