Urgent Help Needed: Can't ping MAP Public IP from Internet

Dear Friends:

I have mapped one public address with private address through following natting command.

/ip firewall nat add chain=dstnat dst-address=11.11.11.1 action=netmap to-addresses=192.168.0.113
/ip firewall nat add chain=srcnat src-address=192.168.0.113 action=netmap to-addresses=11.11.11.1

I can ping both public and private address in my network. But can’t able to ping the IP 11.11.11.1 through Internet which is public mapped with 192.168.0.113 (which is private), However i can ping both IP 11.11.11.1 and 192.168.0.113 from my PC.

Please let me know where is the mistake.

Its very urgent.


Thanks

Vasi

did you assigned 11.11.11.1 to your router’s interface? can you ping public IP from Internet when you disable your rules?

The actuall IP is 217.xxx.xxx.195/27 which is assigned to one of the router interface. My default gateway is 217.xxx.xxx.193 and i am trying to map 217.xxx.xxx.194 to 192.168.0.113.

Tell me please if i am doing anything wrong.

Best Regards

Vasi

can you ping that IP without NAT rules?

Yes, I can ping 217.xxx.xxx.195 which is assigned to the router interface and offcourse my 217.xxx.xxx.193 which is the gateway but not 217.xxx.xxx.194

you need assign .194 to outside interface also.

omg, sorry, did not see 194… add .194 address also to your uplink interface!

Dear Friends

I already assigned IP to the internet interface like this 217.xxx.xxx.192/27. Which covers all the ip between 217.xxx.xxx.193-223 i think. So you guys think i have to separately assign ip 217.xxx.xxx.194.

Thanks

Vasi

yesss, you had to!
your router do not respond to ARP requests to address 217.xxx.xxx.194 if you do not add that address explicitly

Dear Friends,

Thanks all of you to help me to understand the problem.

I assigned that ip 217.xxx.xxx.194 at interface one like 217.xxx.xxx.194/32. Now after i assign on the interface i can ping it. But whenever i am trying to see my ip address from my mapped ip its showing me 217.xxx.xxx.193 as my IP address. So still i believe something is not right.

I don't understand why it is showing me the 217.xxx.xxx.193. If the mapping is working properly it should show me 217.xxx.xxx.194 as my ip address. however i can ping it locally and from internet 217.xxx.xxx.194.

Thanks & best regards

Vasi Akhter