Community discussions

MikroTik App
 
zaza355N
just joined
Topic Author
Posts: 16
Joined: Mon Jan 14, 2019 3:32 pm
Contact:

Transparent NAT

Sat Aug 03, 2019 8:07 pm

Good evening all, how are you doing ?

Here is my topology :
LTE MODEM <----> CCR 1036
LTE public IP: X.4.4.4 / ETHER1 IP : 192.168.1.1 ------------- ETHER1(WAN):192.168.1.2 / ROUTE+NAT / LAN BRIDGE: 10.0.0.1/8

I would like to know how can i link LTE to the CCR 1036 ETHER1 WAN transparently, because i don't want to double NAT.
Basiquely the LTE interface forward everithing received to the ETHER1 of 1036, and vice versa ?

How would you do it ?
Thank you very much
 
User avatar
sebastia
Forum Guru
Forum Guru
Posts: 1782
Joined: Tue Oct 12, 2010 3:23 am
Location: Antwerp, BE

Re: Transparent NAT

Sat Aug 03, 2019 8:14 pm

Hey

two options:
* lte passthrough
* or just route (and don't nat) traffic to lte modem. lte modem would need to know how to reach your internal network, so you'll need to add route table entries for internal ranges.
 
zaza355N
just joined
Topic Author
Posts: 16
Joined: Mon Jan 14, 2019 3:32 pm
Contact:

Re: Transparent NAT

Sat Aug 03, 2019 8:21 pm

Yes very good !

Passthrought i knew it :)
and second option
* or just route (and don't nat) traffic to lte modem. lte modem would need to know how to reach your internal network, so you'll need to add route table entries for internal ranges.
I don't want to do that because i can expect lot of customers (more than 20000 devices), the LTE modem is a bit too weak for letting it doing that. i think it is better to try to do ANT on the CCR1036.
Any other idea ?

Thank you very much
 
User avatar
sebastia
Forum Guru
Forum Guru
Posts: 1782
Joined: Tue Oct 12, 2010 3:23 am
Location: Antwerp, BE

Re: Transparent NAT

Sat Aug 03, 2019 8:24 pm

Need NAT + LTE not enough for NAT -> NAT somewhere else -> pass-through is the ONLY option
 
zaza355N
just joined
Topic Author
Posts: 16
Joined: Mon Jan 14, 2019 3:32 pm
Contact:

Re: Transparent NAT

Sat Aug 03, 2019 8:44 pm

okay i see.
Or any idea with netmap or srcnat/dstnat ?
Like it just translat the ip address but keep same src port and dst port ?

thank you
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11598
Joined: Thu Mar 03, 2016 10:23 pm

Re: Transparent NAT

Sat Aug 03, 2019 9:19 pm

Most LTE modems playing smart by doing NAT themselves are not configurable enough to do netmap-style of NAT ... even if they do, you should find a way to configure that on the LTE modem thingy, nothing to be done on RB. And since you want to perform NAT on CCR in a smart way, you can't do netmap-style of NAT on CCR either.

Who is online

Users browsing this forum: Amazon [Bot], Bing [Bot] and 85 guests