OK, I guess I misunderstood what you were doing. This is just the normal way of doing dst-nat in the Mikrotik. My problem is I find certain applications don't want to work behind nat (IP phones, for example) so I want to have actual public addresses on LAN side of my Mikrotik as well. Setting up a segmented subnet such as 184.108.40.206/26 on the LAN side of the router (while having 220.127.116.11/24 on the WAN side) doesn't seem to work. Or am I missing something?