Unable to do Remote Desktop Connection after adding NAT Rule

Hi,

I connected two PC’s which are on different network using single MikroTik750GL router. And added IP address and after that default Route List gets generated. So after this configuration I am able to ping between both the PC’s and also able to use Remote Desktop Connection from any one of the PC.
But after adding NAT rules I am able to ping from both the PC’s but able to do Remote Desktop Connection only from PC_01 not from PC_02.
What is the reason for this kind of behavior? Please help.

This is the configuration:
PC_01-> IP: 192.168.3.11/24 Default Gateway: 192.168.3.1
PC_02-> IP: 192.168.33.22/24 Default Gateway: 192.168.33.1

Please see the attached image for router configuration.

Thanks..
NAT_config_02.JPG

Well… The reason you can still ping is that the first NAT rule redirects all traffic destined for 192.168.3.11 to the router’s 192.168.33.1 interface. The router is responding to your pings, not the PC. Obviously the router isn’t running RDP, so that’s why it isn’t responding anymore.

Then, your second NAT rule is… making all traffic from the router’s 192.168.33.1 interface appear to come from 192.168.3.11? For what purpose?

These NAT rules are genuinely baffling to me. Their only combined purpose appears to be to modify packets in such a way that the router responds to all 192.168.3.11 packets, and then modifies its responses to make them LOOK like they’re coming from 192.168.3.11 as well.

Do you intend for the router to impersonate 192.168.3.11? What do you think these NAT rules should do? What is your desired effect? :confused:

Hi lordkappa,

Thanks for your inputs, I am trying to configure NAT between PC_01 and PC_02. And after NAT configuration both PC should do RDP. So what NAT rules should I add for that? Please guide.

Thanks..

Yes, but what is your desired effect? NAT is a tool; it can be used for many things depending on your needs. Saying “I want NAT between these 2 computers” is like saying “I want to saw these wooden boards, where should I cut them?” without telling me what you’re trying to build.

I recommend you learn a little bit about the types of NAT and their possible uses. The Mikrotik wiki has a lot of really helpful examples.
http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Basic_examples

Hi lordkappa,

Thanks for link and quick reply. I tried these examples.

But I have a basic question may be it looks silly but please clear my doubt.

After adding IP addresses, default route list gets generated and with the help of this also I am able to connect/RDP between two PC’s which are on different network.
So what’s the use of NAT? What accurately happens when we add NAT rule along with the route list which get generated default after adding IP Address?
Please help me on this I am relay get confused on this.

Thanks..

From what I’m hearing, it doesn’t sound like you need NAT. If all you want is connectivity between 2 computers you don’t need NAT.

There are lots of in-depth explanations on what NAT does but here’s the short version. NAT is used when you need to change the IP addresses in a packet. src-nat changes the source IP, dst-nat changes the destination IP. The most common reason for it’s use would be to share one external IP address among multiple hosts. This would be src-nat, since it’s the source address of the packets that is being changed.

For an even more in-depth explanation check wikipedia in your language of choice.
https://wikipedia.org/wiki/Network_address_translation

Thanks it really helps, I will try to understand the concept and if required I will ask quires again..