Prihlásiť sa Odoslať Novinky :: FAQ :: Rozšírené vyhľadávanie :: Napísali o nás :: Ankety
Main Menu
· Home
· 
· FAQ
· 
· Diskusia
· 











Main Menu
· Domov

Moduly
· AvantGo
· Downloads
· FAQ
· News
· Recommend Us
· Reviews
· Search
· Sections
· Stats
· Topics
· Top List
· Web Links
· Forum

Jazyk
Výber jazykovej mutácie:



The time now is 19.03.2024 - 08:36


NAT-ovanie v RouterOS

Post new topic Reply to topic
View previous topic Printable version Log in to check your private messages View next topic
 
Author Message
neos
Post subject: NAT-ovanie v RouterOS  PostPosted: 10.07.2017 - 12:56 #112971
Ucen


Joined: Aug 09, 2004
Posts: 752

Ahoj,

ako vlastne spravne robit NAT na mikrotiku, ak je situacia takato:
- WAN IP 1.2.3.6/30, gw: 1.2.3.5
- dodavatel smeruje subnet 5.5.5.0/24 na WAN mikrotiku -> 1.2.3.6
- NAT robim stylom:
Code: › /ip firewall nat chain=srcnat action=src-nat to-addresses=5.5.5.0/24 src-address-list=NAT_SRC1 out-interface=sfp4 log=no log-prefix=""

- takto to funguje, ale traceroute zvonku na niektoru IP z rozsahu 5.5.5.x sa zacykli medzi mojim routrom a routrom dodavatela, kedze mikrotik ten pool vlastne nikde nema, len za neho preklada spojenia iniciovane zvnutra

Otazka: Staci to vyriesit tak, ze spravim bridge interface s IP 5.5.5.1/24, aby som k tomu poolu mal (directly connected) routu? Alebo mate lepsi napad ako to spravit?
 
 View user's profile Send private message Visit poster's website ICQ Number 
Reply with quote Back to top
misohero
Post subject: NAT-ovanie v RouterOS  PostPosted: 10.07.2017 - 13:55 #112972
Basic


Joined: Jan 21, 2005
Posts: 180
Location: Bratislava
na to aby RB vedel poslat ten paket spravnym smerom potrebuje vediet kde je ten subnet 5.5.5.0/24. ak si mu nenastavil ani routu a ani nieje na lokalnom interfaci , tak ho posle zasa na branu - tym vznika zacyklenie

tvoj problem nieje s natom, je s routovanim

nestaci len tak niekam nastavit tu ip na bridge, musi to byt tam kde su tie IP naozaj realne pripojene a mali by mat branu na tvoju ip napr 5.5.5.1/24 tak ako si spominal
 
 View user's profile Send private message Visit poster's website  
Reply with quote Back to top
neos
Post subject: NAT-ovanie v RouterOS  PostPosted: 10.07.2017 - 14:59 #112973
Ucen


Joined: Aug 09, 2004
Posts: 752

misohero wrote: ›na to aby RB vedel poslat ten paket spravnym smerom potrebuje vediet kde je ten subnet 5.5.5.0/24. ak si mu nenastavil ani routu a ani nieje na lokalnom interfaci , tak ho posle zasa na branu - tym vznika zacyklenie

tvoj problem nieje s natom, je s routovanim

nestaci len tak niekam nastavit tu ip na bridge, musi to byt tam kde su tie IP naozaj realne pripojene a mali by mat branu na tvoju ip napr 5.5.5.1/24 tak ako si spominal


Verejne IP nejdu az k zakaznikom, ti maju privatne IP a NAT sa robi na hlavnej GW, cize tam tie IP su. Nemam ich kam naroutovat, takze jedina routa, ktoru viem vyrobit, je directly connected na nejakom dummy interfejsi, cize bridge. Tak by som to riesil na Ciscu, toto mi pride ako najlepsi ekvivalent na MK.
 
 View user's profile Send private message Visit poster's website ICQ Number 
Reply with quote Back to top
misohero
Post subject: RE: NAT-ovanie v RouterOS  PostPosted: 10.07.2017 - 15:03 #112974
Basic


Joined: Jan 21, 2005
Posts: 180
Location: Bratislava
uz som pochopil ,povodne som myslel ze verejne ip routujes, ak ich natujes tak ti chyba pravidlo DNAT zvonka dovnutra
 
 View user's profile Send private message Visit poster's website  
Reply with quote Back to top
Display posts from previous:     
All times are GMT
Post new topic Reply to topic
View previous topic Printable version Log in to check your private messages View next topic
 
Jump to:  

Powered by PNphpBB2 © 2003-2005 The PNphpBB Group
Credits

(C) SKFree 2002-2010: Powered by POSTNUKE. Môžete prebera? naše správy vo formáte XML(RSS)