| The time now is 12.10.2024 - 14:54 |
|
|
|
|
| Author |
Message |
|
|
Post subject: NAT-ovanie v RouterOS
 Posted: 10.07.2017 - 12:56 #112971
|
|
Ucen
Joined: Aug 09, 2004
Posts: 753
|
|
Ahoj,
ako vlastne spravne robit NAT na mikrotiku, ak je situacia takato:
- WAN IP 1.2.3.6/30, gw: 1.2.3.5
- dodavatel smeruje subnet 5.5.5.0/24 na WAN mikrotiku -> 1.2.3.6
- NAT robim stylom:
Code: › /ip firewall nat chain=srcnat action=src-nat to-addresses=5.5.5.0/24 src-address-list=NAT_SRC1 out-interface=sfp4 log=no log-prefix=""
- takto to funguje, ale traceroute zvonku na niektoru IP z rozsahu 5.5.5.x sa zacykli medzi mojim routrom a routrom dodavatela, kedze mikrotik ten pool vlastne nikde nema, len za neho preklada spojenia iniciovane zvnutra
Otazka: Staci to vyriesit tak, ze spravim bridge interface s IP 5.5.5.1/24, aby som k tomu poolu mal (directly connected) routu? Alebo mate lepsi napad ako to spravit? |
|
|
| |
|
|
|
 |
|
|
|
Post subject: NAT-ovanie v RouterOS
Posted: 10.07.2017 - 13:55 #112972
|
|
Basic
Joined: Jan 21, 2005
Posts: 180
Location: Bratislava
|
|
na to aby RB vedel poslat ten paket spravnym smerom potrebuje vediet kde je ten subnet 5.5.5.0/24. ak si mu nenastavil ani routu a ani nieje na lokalnom interfaci , tak ho posle zasa na branu - tym vznika zacyklenie
tvoj problem nieje s natom, je s routovanim
nestaci len tak niekam nastavit tu ip na bridge, musi to byt tam kde su tie IP naozaj realne pripojene a mali by mat branu na tvoju ip napr 5.5.5.1/24 tak ako si spominal |
|
|
| |
|
|
|
|
|
|
|
Post subject: NAT-ovanie v RouterOS
Posted: 10.07.2017 - 14:59 #112973
|
|
Ucen
Joined: Aug 09, 2004
Posts: 753
|
|
misohero wrote: ›na to aby RB vedel poslat ten paket spravnym smerom potrebuje vediet kde je ten subnet 5.5.5.0/24. ak si mu nenastavil ani routu a ani nieje na lokalnom interfaci , tak ho posle zasa na branu - tym vznika zacyklenie
tvoj problem nieje s natom, je s routovanim
nestaci len tak niekam nastavit tu ip na bridge, musi to byt tam kde su tie IP naozaj realne pripojene a mali by mat branu na tvoju ip napr 5.5.5.1/24 tak ako si spominal
Verejne IP nejdu az k zakaznikom, ti maju privatne IP a NAT sa robi na hlavnej GW, cize tam tie IP su. Nemam ich kam naroutovat, takze jedina routa, ktoru viem vyrobit, je directly connected na nejakom dummy interfejsi, cize bridge. Tak by som to riesil na Ciscu, toto mi pride ako najlepsi ekvivalent na MK. |
|
|
| |
|
|
|
|
|
|
|
Post subject: RE: NAT-ovanie v RouterOS
Posted: 10.07.2017 - 15:03 #112974
|
|
Basic
Joined: Jan 21, 2005
Posts: 180
Location: Bratislava
|
|
| uz som pochopil ,povodne som myslel ze verejne ip routujes, ak ich natujes tak ti chyba pravidlo DNAT zvonka dovnutra |
|
|
| |
|
|
|
|
|
|
|
All times are GMT
|
|
|
|
|
|
Powered by PNphpBB2 © 2003-2005 The PNphpBB Group
Credits |
|
|
