Bill- 

Thanks for the input.
I have a couple of questions.
Have you done this where your "inside" is a hotspot portal?
Do you need to put a passthru (IP binding) for the inside address to get
out?

I tried your suggestion and haven't been able to get it to work.

Thanks

Ralph

-----Original Message-----
From: mikrotik-boun...@mail.butchevans.com
[mailto:mikrotik-boun...@mail.butchevans.com] On Behalf Of Bill Prince
Sent: Tuesday, December 01, 2009 12:08 PM
To: Mikrotik discussions
Subject: Re: [Mikrotik] Question about 1:1 NAT and netmap

We use something like this:

add action=netmap \
    chain=srcnat \
    disabled=no \
    out-interface=ether1 \
    src-address=172.16.4.2 \
    to-addresses=10.13.101.252

add action=netmap \
    chain=dstnat \
    disabled=no \
    dst-address=10.13.101.252 \
    in-interface=ether1 \
    to-addresses=172.16.4.2

In the above case, the 10.13.101.252 is the "public" side on ether1.  It 
didn't work unless we specifies the in/out interface.



Bill Prince
Skyline Broadband Service
(a division of Coastal Sierra)
650-917-9279



rwf wrote:
> I have 2 static public addresses. One is being used for a hotspot. The
> internal address range for the hotspot is 10.50.50.0/24
>
> I need to route the second public address  204.16.x.y to an internal one
for
> a webcam (10.5.50.246) on the hotspot subnet.
>
>  
>
> I have entered the following commands, but I am not having success.
>
> .         Is netmap the proper action?
>
> .         Will this work, since the inside address is within the hotspot
> range? (it is not in the DHCP range if that matters)
>
> .         Anyone have any better suggestions?
>
>  
>
> /ip firewall nat add chain=dstnat dst-address=204.16.x.y action=netmap
> to-addresses=10.5.50.240
>
> /ip firewall nat add chain=srcnat src-address=10.5.50.240 action=netmap
> to-addresses=204.16.x.y
>
>  
>
>  
>
> Thanks
>
>  
>
> Ralph
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL:
<http://www.butchevans.com/pipermail/mikrotik/attachments/20091201/4a151e97/
attachment.html>
> _______________________________________________
> Mikrotik mailing list
> Mikrotik@mail.butchevans.com
> http://www.butchevans.com/mailman/listinfo/mikrotik
>
> Visit http://blog.butchevans.com/ for tutorials related to Mikrotik
RouterOS
>
>   
_______________________________________________
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS

_______________________________________________
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS

Reply via email to