In all the configuration examples I've seen, and even in the default configuration, I see this:
Code: Select all
/ip firewall nat add action=masquerade chain=srcnat out-interface=ether1
In a multi-wan setup, there is such an entry for each wan.
I've always wondered, why is it necessary to specify the "out-interface"?
We are in the source-nat chain. The packet is destined to exit the router.
We already know what interface it is heading towards.
Why can't we just have:
Code: Select all
/ip firewall nat add action=masquerade chain=srcnat
Thanks all.