Hi,
I want to NAT private network 172.19.128.0/21 to range of public addresses X.X.X.1 - X.X.X.14:
/ip firewall nat add action=src-nat chain=srcnat out-interface=WAN src-address=172.19.128.0/21 to-addresses=X.X.X.1-X.X.X.14
Should I configure only one IP address from public network on my Mikrotik WAN interface, for example X.X.X.1/28
or
Should I configure all of those public IP addresses from X.X.X.1/28 to X.X.X.14/28 on my Mikrotik WAN interface?
It depends on how the service provider routes the /28 subnet to you. I've a recent post in another thread about this.
whole /28 class is routed by provider using separate /30 class, so I can use all 16 addresses.
If it is not explained, its usefulness is lost.
Is also lost why use 172.19.128.0/21 instead, fore example, 192.168.0.0/21
Then in that case you don't need to add the addresses of the /28 subnet to the WAN interface under /ip address. You only need to add the address(es) from the /30 subnet.
. . . deleted, it seems it wasn't needed . . .