Community discussions

MikroTik App
 
duranta143
just joined
Topic Author
Posts: 5
Joined: Tue Dec 12, 2017 7:45 pm

SNAT LOG in mikrotik os

Tue Dec 12, 2017 8:01 pm

Our online user is apox 350 and 5 ip in our wan side how to configure dynamic nat. And how to show log in below format:-
Date and time - scrose ip : scrose port - destination ip: destination port - nat ip: nat port - nas ip
 
User avatar
ZeroByte
Forum Guru
Forum Guru
Posts: 4047
Joined: Wed May 11, 2011 6:08 pm

Re: SNAT LOG in mikrotik os

Tue Dec 12, 2017 8:09 pm

tick the logging box on the srcnat rules in your router. (the checkbox is in the actions tab for each rule)
The log entries contain the information you want, but the format is defined by the system and the most you can do is put a block of predefined text (log prefix) into each entry.

Then set up logging to make sure that info,fireall is being logged.
(by default, info,* is being logged to memory)

You can set up a special logging action which sends info,firewall to a syslog server.
 
duranta143
just joined
Topic Author
Posts: 5
Joined: Tue Dec 12, 2017 7:45 pm

Re: SNAT LOG in mikrotik os

Tue Dec 12, 2017 9:01 pm

Thks, but pls help me any log server name, which supports this log format.
And how to dynamic nat rules. I am using dma radius manager
 
User avatar
ZeroByte
Forum Guru
Forum Guru
Posts: 4047
Joined: Wed May 11, 2011 6:08 pm

Re: SNAT LOG in mikrotik os

Tue Dec 12, 2017 9:26 pm

It's just syslog - any Linux host can do this, and there are many syslog server programs available for Windows.
Setting up syslog is something you should probably do some research on and come up with your own solution.

And the dynamic NAT functions in Mikrotik are src-nat / dst-nat / masquerade
Any rule in the srcnat chain with action=src-nat will dynamically source-nat the packet per the configuration of the rule.
The same is true for masquerade (which simply uses the preferred address of the interface where the packet is going out from the router)
dst-nat is dynamic, but modifies the destination IP address of the packet per the configuration of the rule.

netmap is a stateless NAT rule and probably not what you're looking to use.
 
duranta143
just joined
Topic Author
Posts: 5
Joined: Tue Dec 12, 2017 7:45 pm

Re: SNAT LOG in mikrotik os

Wed Dec 13, 2017 7:11 am

dear ZeroByte

pls, details rules of dynamic SNAT
 
User avatar
ZeroByte
Forum Guru
Forum Guru
Posts: 4047
Joined: Wed May 11, 2011 6:08 pm

Re: SNAT LOG in mikrotik os

Wed Dec 13, 2017 5:02 pm

Who is online

Users browsing this forum: Bing [Bot], ChadRT and 130 guests