You're saying that using srcnat uses more CPU then masquerade? Is that a Mikrotik thing or an iptables thing?
Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Thu, Sep 16, 2010 at 11:57 AM, Scott Reed <[email protected]> wrote: > Thanks, Butch. > That makes sense, too. > > > On 9/16/2010 11:48 AM, Butch Evans wrote: >> >> On Thu, 2010-09-16 at 08:59 -0400, Scott Reed wrote: >>> >>> Tried basically that. Problem is the masquerade takes the management >>> address, not the public. I am guessing masquerade uses the lowest >>> address on the interface. >> >> It uses the first IP assigned to the outbound interface. You can't see >> the order of assignment from winbox. You can see which IP will be used >> from the terminal with "/ip address print" and look for the address >> listed first for the outbound interface. To change which IP is used, >> you have 2 choices: >> >> 1. Use src-nat action instead of masquerade. This method gives you the >> option of specifying the IP that will be used without sacrificing very >> much in terms of CPU requirements. >> >> 2. Change the order of the IP assignments on the outbound interface. >> >> > > -- > Scott Reed > Owner > NewWays Networking, LLC > Wireless Networking > Network Design, Installation and Administration > Mikrotik Advanced Certified > www.nwwnet.net > (765) 855-1060 > > > _______________________________________________ > Mikrotik mailing list > [email protected] > http://www.butchevans.com/mailman/listinfo/mikrotik > > Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS > _______________________________________________ Mikrotik mailing list [email protected] http://www.butchevans.com/mailman/listinfo/mikrotik Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS

