Professional Documents
Culture Documents
Static NAT
Static NAT
Static NAT
NAT Tutorial
From MikroTik Wiki
MIKROTIK NAT
This is a short howto explaining how to set up a full-NAT on a Mikrotik RouterOS.
This setup allows you to hide (masquerade) your private IP address from a public network. This means,
for example, that in your private network you can have whatever private IP you want which is then in turn
translated to the public network IP given to you by your network provider. This tutorial can thus be used
by clients who want to connect to a network without requiring a change to the internal IP addressing of
their LAN.
Example
In the following example we have a wireless interface which connects to a public wireless network and an
Ethernet interface for the local private network.
First set the two IP addresses of the ethernet and wireless interfaces
https://wiki.mikrotik.com/wiki/NAT_Tutorial 1/7
8/24/2020 NAT Tutorial - MikroTik Wiki
Second set the static route so that we can access the external Public network
https://wiki.mikrotik.com/wiki/NAT_Tutorial 2/7
8/24/2020 NAT Tutorial - MikroTik Wiki
most likely you will want to use 0.0.0.0/0 as the destination in your primary public route----
https://wiki.mikrotik.com/wiki/NAT_Tutorial 3/7
8/24/2020 NAT Tutorial - MikroTik Wiki
https://wiki.mikrotik.com/wiki/NAT_Tutorial 4/7
8/24/2020 NAT Tutorial - MikroTik Wiki
Only do this if you want to expose this specifice internal pc to all ports, this is the same as a DMZ-----
https://wiki.mikrotik.com/wiki/NAT_Tutorial 5/7
8/24/2020 NAT Tutorial - MikroTik Wiki
https://wiki.mikrotik.com/wiki/NAT_Tutorial 6/7
8/24/2020 NAT Tutorial - MikroTik Wiki
Note: Network Address Translation (NAT) requires that connection tracking be enabled.
https://wiki.mikrotik.com/wiki/NAT_Tutorial 7/7