I am using Mikrotik for NATing about 1,5 k users. Previously I've use ROS5.18 version with RB1100AH and all was fine for up to 1K users. Now I am using x86 with ROS6.11 and some users has complains for problems with some services.
For example there is a problem with SIP.net, WebMoney security. Ordinary web sites show different src ip in request for short period. Is there any problem with -same rule in ROS 6.x or it may be issue in my setup?
Here is a configuration:
I've changed Nat pool from /29 to /28 without any changes.
Code: Select all
/ip firewall nat add action=same chain=srcnat out-interface=ether1-bb src-address=172.16.0.0/19 to-addresses=\ 126.96.36.199/28
Connection tracking shows currently 64K entries and 540k max entries.
Should I split our network for several /24 pools and make translation each into single IP?
A bit stupid configuration I think.