hi all,

Really I don't know how it can done. One of our client is asking for static public IP for their service. Our network is on private ip with 192.168.xx.xxx/24 network. The client need a VPN tunneling with their office in another country. It can be static but how can we bind a public ip???? Anybody help.....please.....

Regards,

You need to buy IP's man.

You need to buy IP's man.

oops, I forgot to mention that... I have IPs. My prob is how to implement????? Please give some idea.......

Check Mikrotik manual, you have examples there.

What you are wanting to do is DST-NAT the public IP to the private, and SRC-NAT the private to the public in IP/firewall/NAT settings.

Check Mikrotik manual, you have examples there.

Do you mean One-to-One NAT??? Can you please explain in detail....

What you are wanting to do is DST-NAT the public IP to the private, and SRC-NAT the private to the public in IP/firewall/NAT settings.

Thank you for your reply.... I will try to do that. if you don't mind can you please explain deeply...........

Copy & paste to your router after editing the ip's:

Copy & paste to your router after editing the ip's:

Code: Select all

/ip firewall nat add chain=srcnat src-address=<private ip> action=src-nat to-addresses=<public ip> to-ports=0-65535
/ip firewall nat add chain-dst-nat dst-address=<public ip> action=dst-nat to-addresses=<private ip> to-ports=0-65535

Thank you verymuch...... Really a great job.... I will Post my reply after trying......Once again thank you very much

correction in 2nd line:

correction in 2nd line:

Code: Select all

/ip firewall nat add chain=srcnat src-address=<private ip> action=src-nat to-addresses=<public ip> to-ports=0-65535
/ip firewall nat add chain=dst-nat dst-address=<public ip> action=dst-nat to-addresses=<private ip> to-ports=0-65535

Thank you for your correction

http://wiki.mikrotik.com/wiki/How_to_li ... Local_ones

BTW, this is wrong forum for your question.