NAT Tutorial

MIKROTIK NAT

This is a short howto explaining how to set up a full-NAT on a Mikrotik RouterOS.

This setup allows you to hide (masquerade) your private IP address from a public network. This means, for example, that in your private network you can have whatever private IP you want which is then in turn translated to the public network IP given to you by your network provider. This tutorial can thus be used by clients who want to connect to a network without requiring a change to the internal IP addressing of their LAN.

Example

On the following example we have a wireless interface which connects to a wireless network and an ethernet interface for the local network.

Suppose you are 192.168.1.2/24 (Private) 
Your RouterBoard's Ethernet card is 192.168.1.1/24 (Private) 
Your RouterBoard's Wireless card is 10.140.1.30/26 (Public) 
The Access Point You connect to is 10.140.1.1/26 (Public) 

• Firstly we set the ip addresses

• Secondly we fix the static routes so that we can access the network

• We start building the NAT as followed

• DST-NAT

• SRC-NAT

• NAT Completed!