Community discussions

MikroTik App
 
medhatemad
just joined
Topic Author
Posts: 1
Joined: Tue Mar 24, 2020 2:01 am

Virtual IP on WAN mikrotik

Tue Mar 24, 2020 2:06 am

I have one wan only

The internet is a static /29 with 5 public IP's. I can only ip 1 of the 5 public ip's.
how can I configure a virtual IP 11.22.33.147 on interface WAN. like pfSense or fortegate ?

i am do this

192.168.10.100 VM domain control
192.168.10.20 VM website
192.168.10.30 VM smartermail

First add the second ip-adress to the gateway-ethernet
IP, Addresses, Add New
Address: 11.22.33.147/29
Network: 11.22.33.144
Interface: ether1-gateway
==================================================
Second add 1 NAT rule
IP, Firewall, NAT, Add New
General
Chain: dstnat
Dst.Address: 11.22.33.148
Protocol: 6 (tcp)
Dst.Port: 25
In. Interface: ether1-gateway
Action
Action: dst-nat
To Addresses: 192.168.10.20 (private lan-address of my website server)
To Ports: 25
====================================================
third add 1 NAT rule
IP, Firewall, NAT, Add New
General
Chain: dstnat
Dst.Address: 11.22.33.149
Protocol: 6 (tcp)
Dst.Port: 25
In. Interface: ether1-gateway
Action
Action: dst-nat
To Addresses: 192.168.10.30 (private lan-address of my mail-server)
To Ports: 25
===============================================

but my local server ip 192.168.10.30 cannot send email because spf record read ip 11.22.33.147
 
tdw
Member Candidate
Member Candidate
Posts: 279
Joined: Sat May 05, 2018 11:55 am

Re: Virtual IP on WAN mikrotik

Thu Mar 26, 2020 4:33 am

The dst-nat rules only apply to traffic from WAN to your servers.

For traffic originating from your servers to WAN add specific src-nat rules BEFORE the generic one.

Who is online

Users browsing this forum: No registered users and 19 guests