Hello,

I have a Mikrotik configured as a transparent bandwidth shaper. That works as expected.

The issue I am having is that now I want to enable the web-cache transparently. There are several subnets on the throttled side of the Mikrotik. Only the local subnet can access the web when I enable the destination nat rules that redirect the ports for web cache. The clients in this subnett work as expected and traffic hits the cache.

However it appears that when I use Destination Nat the Microtik seems to be constricted by subnet boundries. But this confuses me since it is bridging the 2 ethernet interfaces. Any one else experienced this or have I implimented the destination rules incorrectly.

thanks

Joe

You have two interfaces bridged, and you assigned ip's to the bridged interface itself right, not the interfaces that you are bridging?

My point is, make sure your assigning the IP's to the bridge interface, not its seperate components.

Also, you say you have multiple subnets, I assume assigned to the bridge interface. When you say "local", what exactly do you mean? All the subnets you assign to the bridge interface are equally "local".......

Brian

I do infact have the ip assigned to the Eth1 interface ( the one connected to my internet provider) I have a class C that has been variably subnetted. Directly connected (Eth2) to the MT is a /26 12.x.x.0 12.x.x.10 is the ethernet port of a wireless router that has 12.x.x.192/26 on it wireless interface. 12.x.x.62 is the E0 port of a cisco 26xx that routes over a t-1 to 12.x.x.64/26 the Microtik is a transparent shaper but my dst-nat rules only worked properly on the directly connected subnet. once I put routes on for the other subnets all work fine.

i am just unclear why it cares about the subnet boundries.

thanks

Joe