+ All Categories
Home > Documents > Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT...

Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT...

Date post: 07-Aug-2021
Category:
Upload: others
View: 3 times
Download: 0 times
Share this document with a friend
19
Pongpipat Thunyawiraphap ([email protected]) www.mikrotiktutorial.com
Transcript
Page 1: Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT configuration would look like below: / ip firewall nat add chain=dstnat dst-address=l.l.l.l

Pongpipat Thunyawiraphap ([email protected])

www.mikrotiktutorial.com

Page 2: Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT configuration would look like below: / ip firewall nat add chain=dstnat dst-address=l.l.l.l

Ruamrudee International SchoolTechnology Committee / Network Admin

2,400 users : Computer 1,300 Units

Live Inc. Public CompanyIT Director

Broadcasting, High Availability system, Networking

NowNetwork Infrastructure Consultant

Page 3: Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT configuration would look like below: / ip firewall nat add chain=dstnat dst-address=l.l.l.l

http://wiki.mikrotik.com/wiki/Hairpin_NAT

Page 4: Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT configuration would look like below: / ip firewall nat add chain=dstnat dst-address=l.l.l.l
Page 5: Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT configuration would look like below: / ip firewall nat add chain=dstnat dst-address=l.l.l.l
Page 6: Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT configuration would look like below: / ip firewall nat add chain=dstnat dst-address=l.l.l.l
Page 7: Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT configuration would look like below: / ip firewall nat add chain=dstnat dst-address=l.l.l.l
Page 8: Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT configuration would look like below: / ip firewall nat add chain=dstnat dst-address=l.l.l.l
Page 9: Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT configuration would look like below: / ip firewall nat add chain=dstnat dst-address=l.l.l.l
Page 10: Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT configuration would look like below: / ip firewall nat add chain=dstnat dst-address=l.l.l.l
Page 11: Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT configuration would look like below: / ip firewall nat add chain=dstnat dst-address=l.l.l.l
Page 12: Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT configuration would look like below: / ip firewall nat add chain=dstnat dst-address=l.l.l.l

NAT Hairpin NAT

Page 13: Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT configuration would look like below: / ip firewall nat add chain=dstnat dst-address=l.l.l.l

NAT Hairpin NAT

Page 14: Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT configuration would look like below: / ip firewall nat add chain=dstnat dst-address=l.l.l.l

NAT Hairpin NAT

Page 15: Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT configuration would look like below: / ip firewall nat add chain=dstnat dst-address=l.l.l.l

NAT Hairpin NAT

Page 16: Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT configuration would look like below: / ip firewall nat add chain=dstnat dst-address=l.l.l.l

Hairpin NAT rules

Page 17: Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT configuration would look like below: / ip firewall nat add chain=dstnat dst-address=l.l.l.l

/ip firewall nat(1)add action=masquerade chain=srcnat comment=Solution1 out‐interface=LANsrc‐address‐list=LAN(2)add action=masquerade chain=srcnat comment=Solution2 dst‐address=!192.168.1.1src‐address‐list=LANadd action=dst‐nat chain=dstnat dst‐address‐type=local dst‐port=80 protocol=tcp src‐address‐list=LAN to‐addresses=192.168.1.253 to‐ports=80

add action=masquerade chain=srcnat out‐interface=WAN src‐address‐list=LANadd action=dst‐nat chain=dstnat dst‐port=80 in‐interface=WAN protocol=tcp to‐addresses=192.168.1.253 to‐ports=80

Black = regular rules.Green = Hairpin NAT, Choose one between (1) or (2).Orange = Hairpin NAT, a must.Purple = vary to environment.

Page 18: Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT configuration would look like below: / ip firewall nat add chain=dstnat dst-address=l.l.l.l
Page 19: Pongpipat Thunyawiraphap  · 2016. 9. 8. · 192.168.1.2 192.168.1.1 Router 192.168.1.10 The NAT configuration would look like below: / ip firewall nat add chain=dstnat dst-address=l.l.l.l

Recommended