NAT Tutorial

NAT Tutorial
MIKROTIK NAT
This is a short howto explaining how to set up a full-NAT on a Mikrotik RouterOS. This setup allows you to hide (masquerade) your private IP address from a public network. This means, for example, that in your private network you can have whatever private IP you want which is then in turn translated to the public network IP given to you by your network provider. This tutorial can thus be used by clients who want to connect to a network without requiring a change to the internal IP addressing of their LAN.

Example
In the following example we have a wireless interface which connects to a public wireless network and an Ethernet interface for the local private network.
Suppose we have 192.168.1.2/24 (Internal Private Network) Your RouterBoard's Ethernet interface is 192.168.1.1/24 (fixed Private Network IP) Your RouterBoard's Wireless card is 10.140.1.30/26 (Public Network) The Access Point you connect to is 10.140.1.1/26 (Public Network gateway)

First set the two IP addresses of the ethernet and wireless interfaces

NAT Tutorial

Second set the static route so that we can access the external Public network

NAT Tutorial

most likely you will want to use 0.0.0.0/0 as the destination in your primary public route----

We start building the NAT as follows

NAT Tutorial

First the Destination Network Address Translation setting (DST-NAT)

NAT Tutorial

Only do this if you want to expose this specifice internal pc to all ports, this is the same as a DMZ-----

Then the Source Network Address Translation setting (SRC-NAT)

NAT Tutorial ---On the Action Screen you could instead choose masquerade---

Private to Public Network Address Translation (NAT) is Complete!

NAT Tutorial

Note: Network Address Translation (NAT) requires that connection tracking be enabled.

Article Sources and Contributors

Article Sources and Contributors

NAT Tutorial Source: http://wiki.mikrotik.com/index.php?oldid=19695 Contributors: Ccie2285, Djneoplan, Miahac, Nest

Image Sources, Licenses and Contributors

Image:Nat with 1 pc.jpg Source: http://wiki.mikrotik.com/index.php?title=File:Nat_with_1_pc.jpg License: unknown Contributors: Djneoplan Image:Mikrotik nat howto01.jpg Source: http://wiki.mikrotik.com/index.php?title=File:Mikrotik_nat_howto01.jpg License: unknown Contributors: Djneoplan Image:Mikrotik nat howto02.jpg Source: http://wiki.mikrotik.com/index.php?title=File:Mikrotik_nat_howto02.jpg License: unknown Contributors: Djneoplan Image:Mikrotik nat howto03.jpg Source: http://wiki.mikrotik.com/index.php?title=File:Mikrotik_nat_howto03.jpg License: unknown Contributors: Djneoplan Image:Mikrotik nat howto04.jpg Source: http://wiki.mikrotik.com/index.php?title=File:Mikrotik_nat_howto04.jpg License: unknown Contributors: Djneoplan Image:Mikrotik nat howto05.jpg Source: http://wiki.mikrotik.com/index.php?title=File:Mikrotik_nat_howto05.jpg License: unknown Contributors: Djneoplan Image:Mikrotik nat howto06.jpg Source: http://wiki.mikrotik.com/index.php?title=File:Mikrotik_nat_howto06.jpg License: unknown Contributors: Djneoplan Image:Mikrotik nat howto07.jpg Source: http://wiki.mikrotik.com/index.php?title=File:Mikrotik_nat_howto07.jpg License: unknown Contributors: Djneoplan Image:Mikrotik nat howto08.jpg Source: http://wiki.mikrotik.com/index.php?title=File:Mikrotik_nat_howto08.jpg License: unknown Contributors: Djneoplan Image:Mikrotik nat howto09.jpg Source: http://wiki.mikrotik.com/index.php?title=File:Mikrotik_nat_howto09.jpg License: unknown Contributors: Djneoplan Image:Mikrotik nat howto10.jpg Source: http://wiki.mikrotik.com/index.php?title=File:Mikrotik_nat_howto10.jpg License: unknown Contributors: Djneoplan Image:Mikrotik nat howto11.jpg Source: http://wiki.mikrotik.com/index.php?title=File:Mikrotik_nat_howto11.jpg License: unknown Contributors: Djneoplan