/ip address add address=5.5.5.5/30 comment=Public disabled=no interface=eth1 network=\ 5.5.5.4 add address=1.1.1.1/24 disabled=no interface=eth2 network=1.1.1.0 add address=2.2.2.1/24 disabled=no interface=eth3 network=2.2.2.0
/ip firewall filter add action=reject chain=forward disabled=no in-interface=eth2 out-interface=\ eth1 reject-with=icmp-network-unreachable /ip firewall nat add action=masquerade chain=srcnat disabled=no out-interface=eth1 \ src-address=2.2.2.0/24 Now I didn't actually test this, but Mikrotik accepted all of the above and I would expect it to work. 5.18. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest Internet Exchange http://www.midwest-ix.com ----- Original Message ----- From: "Mike Lyon" <[email protected]> To: "Mikrotik discussions" <[email protected]> Sent: Sunday, May 10, 2015 10:07:30 PM Subject: Re: [Mikrotik] NAT help with Mikrotik Exactly. On May 10, 2015 8:04 PM, "Mike Hammett" <[email protected]> wrote: > You want to masquerade eth3 2.2.2.1/24 when it goes out eth1. You do not > want to masquerade eth2 1.1.1.1/24, therefore it does not get public > access? Are eth2 and eth3 to talk to each other without NAT? > > > > > ----- > Mike Hammett > Intelligent Computing Solutions > http://www.ics-il.com > > > > Midwest Internet Exchange > http://www.midwest-ix.com > > > ----- Original Message ----- > > From: "Mike Lyon" <[email protected]> > To: "Mikrotik discussions" <[email protected]>, "Mikrotik > Users" <[email protected]> > Sent: Sunday, May 10, 2015 8:58:41 PM > Subject: [Mikrotik] NAT help with Mikrotik > > I can never figure out NAT with MK, I have no idea why I can never figure > it out. > > Anyways, I have an MK with 3 interfaces: > > eth1: public /30 > eth2: 1.1.1.1/24 > eth3: 2.2.2.1/24 > > I want to masquerade the 2.2.2.0/24 network to the public IP on eth1. I do > not want eth2 to be NAT'd at all. > > How do I do this? > > Thank You, > Mike > > > -- > Mike Lyon > 408-621-4826 > [email protected] > > http://www.linkedin.com/in/mlyon > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: < > http://mail.butchevans.com/pipermail/mikrotik/attachments/20150510/64ff0d18/attachment.html > > > > _______________________________________________ > Mikrotik mailing list > [email protected] > http://mail.butchevans.com/mailman/listinfo/mikrotik > > Visit http://blog.butchevans.com/ for tutorials related to Mikrotik > RouterOS > > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: < > http://mail.butchevans.com/pipermail/mikrotik/attachments/20150510/7e6b24a7/attachment.html > > > > _______________________________________________ > Mikrotik mailing list > [email protected] > http://mail.butchevans.com/mailman/listinfo/mikrotik > > Visit http://blog.butchevans.com/ for tutorials related to Mikrotik > RouterOS > -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mail.butchevans.com/pipermail/mikrotik/attachments/20150510/ca96b9d6/attachment.html> _______________________________________________ Mikrotik mailing list [email protected] http://mail.butchevans.com/mailman/listinfo/mikrotik Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mail.butchevans.com/pipermail/mikrotik/attachments/20150510/d18d64b5/attachment.html> _______________________________________________ Mikrotik mailing list [email protected] http://mail.butchevans.com/mailman/listinfo/mikrotik Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS
