Community discussions

MikroTik App
 
zizobaddy
Member Candidate
Member Candidate
Topic Author
Posts: 107
Joined: Mon Sep 13, 2010 10:13 am

Incoming connection NAT

Sun Dec 15, 2013 1:05 am

Hi

Please i got this mail from a new client

"Can you please exclude our both peers from then nat rule? Peers: 173.xx.x.xx and 178.xx.xxx.xx (public IP from a remote connection to their new site)
This 2 addresses MUST be reach the cisco router without Nat!"

Please can you help
 
nerdtron
Member Candidate
Member Candidate
Posts: 123
Joined: Sat Nov 30, 2013 7:49 am

Re: Incoming connection NAT

Sun Dec 15, 2013 2:35 am

What is your /ip firewall nat export?
 
zizobaddy
Member Candidate
Member Candidate
Topic Author
Posts: 107
Joined: Mon Sep 13, 2010 10:13 am

Re: Incoming connection NAT

Sun Dec 15, 2013 9:38 am

0 ;;; Public Mask to NSL Server (src)
chain=srcnat action=src-nat to-addresses=41.xxx.xx.x src-address=10.0.1.20

1 ;;; Win Server to NAT
chain=dstnat action=dst-nat to-addresses=10.0.0.10 dst-address=41.xxx.xx.x

2 ;;; Public Ip to VoIP (NETMAP)
chain=dstnat action=netmap to-addresses=10.0.1.27 dst-address=41.xxx.xx.x

3 ;;; Public IP to Enterprise (NETMAP)
chain=dstnat action=netmap to-addresses=10.0.1.20 dst-address=41.xxx.xx.x

4 ;;; Tuns Public IP
chain=dstnat action=netmap to-addresses=10.0.2.1 dst-address=41.xxx.xx.x

5 ;;; Public Mask NSS (src)
chain=srcnat action=src-nat to-addresses=41.xxx.xx.x src-address=10.0.4.1

6 ;;; Public Mask NSS (dst)
chain=dstnat action=dst-nat to-addresses=10.0.4.1 dst-address=41.xxx.xx.x

7 ;;; Public IP to NSS (NETMAP)
chain=dstnat action=netmap to-addresses=10.0.4.1 dst-address=41.xxx.xx.x

8 ;;; **************masqueradeNSL network**************
chain=srcnat action=masquerade to-addresses=0.0.0.0

Please the client @ NSS is the one asking for this

Kindly find below thier own nat rule

NSS

0 ;;; masquerade hotspot network
chain=srcnat action=masquerade src-address=172.16.254.0/24

1 chain=dstnat action=netmap to-addresses=172.16.254.1 dst-address=10.0.4.1

this is how i forward public IP since i have not gotten how to forward the IP given by my ISP to the client it self without netmap

Who is online

Users browsing this forum: jonah1810, sindy and 69 guests