You're saying that using srcnat uses more CPU then masquerade?  Is
that a Mikrotik thing or an iptables thing?

Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373



On Thu, Sep 16, 2010 at 11:57 AM, Scott Reed <[email protected]> wrote:
>  Thanks, Butch.
> That makes sense, too.
>
>
> On 9/16/2010 11:48 AM, Butch Evans wrote:
>>
>> On Thu, 2010-09-16 at 08:59 -0400, Scott Reed wrote:
>>>
>>> Tried basically that.  Problem is the masquerade takes the management
>>> address, not the public.  I am guessing masquerade uses the lowest
>>> address on the interface.
>>
>> It uses the first IP assigned to the outbound interface.  You can't see
>> the order of assignment from winbox.  You can see which IP will be used
>> from the terminal with "/ip address print" and look for the address
>> listed first for the outbound interface.  To change which IP is used,
>> you have 2 choices:
>>
>> 1. Use src-nat action instead of masquerade.  This method gives you the
>> option of specifying the IP that will be used without sacrificing very
>> much in terms of CPU requirements.
>>
>> 2. Change the order of the IP assignments on the outbound interface.
>>
>>
>
> --
> Scott Reed
> Owner
> NewWays Networking, LLC
> Wireless Networking
> Network Design, Installation and Administration
> Mikrotik Advanced Certified
> www.nwwnet.net
> (765) 855-1060
>
>
> _______________________________________________
> Mikrotik mailing list
> [email protected]
> http://www.butchevans.com/mailman/listinfo/mikrotik
>
> Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS
>
_______________________________________________
Mikrotik mailing list
[email protected]
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS

Reply via email to