Is this achievable and for a newbie could you please direct me to a link/howto on a simple way to do it.
My current Firewall / NAT / Mangle rules are like this:
Code: Select all
[admin@MikroTik] > /ip firewall mangle print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=input action=mark-connection new-connection-mark=ETB_conn passthrough=yes in-interface=ETB
1 chain=input action=mark-connection new-connection-mark=UNE_conn passthrough=yes in-interface=UNE
2 chain=output action=mark-routing new-routing-mark=to_ETB passthrough=yes connection-mark=ETB_conn
3 chain=output action=mark-routing new-routing-mark=to_UNE passthrough=yes connection-mark=UNE_conn
4 chain=prerouting action=accept dst-address=192.168.0.0/24 in-interface=br0
5 chain=prerouting action=accept dst-address=192.168.169.0/24 in-interface=br0
6 chain=prerouting action=mark-connection new-connection-mark=ETB_conn passthrough=yes dst-address-type=!local in-interface=br0
per-connection-classifier=both-addresses-and-ports:2/0
7 chain=prerouting action=mark-connection new-connection-mark=UNE_conn passthrough=yes dst-address-type=!local in-interface=br0
per-connection-classifier=both-addresses-and-ports:2/1
8 chain=prerouting action=mark-routing new-routing-mark=to_ETB passthrough=yes in-interface=br0 connection-mark=ETB_conn
9 chain=prerouting action=mark-routing new-routing-mark=to_UNE passthrough=yes in-interface=br0 connection-mark=UNE_conn
10 chain=prerouting action=mark-routing new-routing-mark=PMDO-VPN passthrough=yes src-address=192.168.5.0/24
Code: Select all
[admin@MikroTik] > /ip firewall nat print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat action=masquerade out-interface=ETB
1 chain=srcnat action=masquerade out-interface=UNE
2 chain=srcnat action=masquerade out-interface=pmdo
3 X chain=dstnat action=redirect to-ports=8080 protocol=tcp src-address=192.168.5.0/24 src-address-type="" dst-port=80
Code: Select all
[admin@MikroTik] > /ip route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 192.168.0.1 1
1 A S 0.0.0.0/0 192.168.169.1 1
2 A S 0.0.0.0/0 192.168.0.1 1
3 S 0.0.0.0/0 192.168.169.1 2
4 A S 10.10.10.0/24 pmdo 1
5 ADC 10.10.10.200/32 10.10.10.201 pmdo 0
6 ADC 192.168.0.0/24 192.168.0.254 ETB 0
7 ADC 192.168.5.0/24 192.168.5.2 br0 0
8 ADC 192.168.169.0/24 192.168.169.254 UNE 0
Code: Select all
[admin@MikroTik] > /interface print
Flags: D - dynamic, X - disabled, R - running, S - slave
# NAME TYPE MTU L2MTU MAX-L2MTU
0 R LAN ether 1500 1526 1526
1 R ETB ether 1500 1522 1522
2 R UNE ether 1500 1522 1522
3 ether4 ether 1500 1522 1522
4 ether5 ether 1500 1522 1522
5 ether6 ether 1500 1522 1522
6 ether7 ether 1500 1522 1522
7 ether8 ether 1500 1522 1522
8 ether9 ether 1500 1522 1522
9 R br0 bridge 1500 1526
10 R pmdo pptp-out 1400
11 wlan1 wlan 1500 2290
Cheers.