A
A
Andrey Makarenko2021-06-22 13:07:55
Mikrotik
Andrey Makarenko, 2021-06-22 13:07:55

Mikrotik, ip address forwarding?

Good afternoon!
There is an external mikrotik with an external ip address, local network 10.12.0.0/24 + service (let there be a web server on port 4856).
There is a client clients working via the Internet.
Port forwarding done.

But in the server logs, connections come from Mikrotik. But you need to make sure that the real addresses of clients are visible in the logs.

If Mikrotik is replaced with Zuxel, then the real addresses of clients are in the logs.

Answer the question

In order to leave comments, you need to log in

1 answer(s)
I
Internet, 2021-06-23
@geniuscomposervsevolodpus

We make (or edit) NAT for IPs that will bypass, exclude white ip "white_ip"
/ ip firewall nat add action=masquerade chain=srcnat src-address-list=!white_ip disabled=no out-interface=ether3
Next is the NetMap list addresses to which we “bind” the white
ones /ip firewall nat add chain=srcnat src-address=10.0.40.67 action=netmap to-addresses=1.1.1.1
/ip firewall nat add chain=dstnat dst-address=1.1.1.1 action=netmap to -addresses=10.0.40.67
And the final part, add our VIP addresses to white_ip:
/ip firewall address-list add list="white_ip" address=10.0.40.67

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question