Where do you masquerade you network?

I’m trying to figure out where to masquerade the network… right now i’m running my system in bridges and looking to set up an OSPF… Can you masquerade the network right at the modem from an ISP or does that have to be done after the mikrotik router?

I have around 8 bridged connections right now and I know that is set up funky, but it works. what and where should I start with the network. Yes, I have about 40 clients running off the network with a hotspot already hooked up. My ISP also runs at 100Mbs, but im’ only passing 10Mbs for the wireless? HELP???

Look at this printscreens a made
There stood step for step what you must do

In dutch but folow the printscreens
http://www.wirelessinfo.be/index.php/mikrotik/pages/nat

Well, if you only have 1 public IP address you can only perform masquerading right after the modem.

yes that is kind of what we want, but will I still be able to winbox in to all my AP’s after words? that is the main concern.