Cilj mi je da serveru dodelim jednu javnu adresu iz opsega.
Ovo mi je delimicno uspelo, kada neko spolja gadja javnu adresu, ruter uspesno preusmeri,
ali kada sa servera proveravam koju IP adresu sam dobio,
rezultat mi je adresa Mikrotika, tj. zajednicka adresa za sve ostale (213.X.X.66 umesto 213.X.X.67).
Komande su mi:
Code:
/ip firewall nat add chain=dstnat dst-address=213.X.X.67 action=dst-nat to-addresses=172.16.30.135
/ip firewall nat add chain=srcnat src-address=172.16.30.135 action=src-nat to-addresses=213.X.X.67
/ip firewall nat add chain=dstnat dst-address=213.X.X.67 action=dst-nat to-addresses=172.16.30.135
/ip firewall nat add chain=srcnat src-address=172.16.30.135 action=src-nat to-addresses=213.X.X.67
Rezultat konfiga je:
Code:
/ip address> print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK INTERFACE
0 ;;; default configuration
172.16.30.254/24 172.16.30.0 wlan1
1 213.X.X.66/28 213.X.X.64 ether1-gateway
2 213.X.X.67/28 213.X.X.64 ether1-gateway
3 213.X.X.68/28 213.X.X.64 ether1-gateway
4 213.X.X.70/28 213.X.X.64 ether1-gateway
5 213.X.X.71/28 213.X.X.64 ether1-gateway
6 213.X.X.74/28 213.X.X.64 ether1-gateway
[admin@MikroTik] /ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; default configuration
chain=srcnat action=masquerade to-addresses=0.0.0.0 out-interface=ether1-gateway
1 chain=dstnat action=dst-nat to-addresses=172.16.30.135 dst-address=213.X.X.67
2 chain=srcnat action=src-nat to-addresses=213.X.X.67 src-address=172.16.30.135
/ip address> print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK INTERFACE
0 ;;; default configuration
172.16.30.254/24 172.16.30.0 wlan1
1 213.X.X.66/28 213.X.X.64 ether1-gateway
2 213.X.X.67/28 213.X.X.64 ether1-gateway
3 213.X.X.68/28 213.X.X.64 ether1-gateway
4 213.X.X.70/28 213.X.X.64 ether1-gateway
5 213.X.X.71/28 213.X.X.64 ether1-gateway
6 213.X.X.74/28 213.X.X.64 ether1-gateway
[admin@MikroTik] /ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; default configuration
chain=srcnat action=masquerade to-addresses=0.0.0.0 out-interface=ether1-gateway
1 chain=dstnat action=dst-nat to-addresses=172.16.30.135 dst-address=213.X.X.67
2 chain=srcnat action=src-nat to-addresses=213.X.X.67 src-address=172.16.30.135
Sledece sto treba da uradim je harpin nat, jos nista nisam trazio na tu temu, pa ako neko moze da mi odmah da primer i za to :)