hello i have this comment centos is have any commond have mikrotik like this use postrouting
iptables -t nat -A POSTROUTING -s 192.168.1.20 -o venet0 -j SNAT --to-source 10.10.10.99
iptables -t nat -A POSTROUTING -s 192.168.1.21 -o venet0 -j SNAT --to-source 10.10.10.100
2 ip connection ..
for explain
username1 : when connection show : 10.10.10.99
username2 : when connection show : 10.10.10.100
Re: POSTROUTING
It's very similar in RouterOS:
Code: Select all
/ip firewall nat
add action=src-nat chain=srcnat out-interface=venet0 src-address=192.168.1.20 to-addresses=10.10.10.99
add action=src-nat chain=srcnat out-interface=venet0 src-address=192.168.1.21 to-addresses=10.10.10.100
Re: POSTROUTING
Make sure the out-interface is set correctly to an IP interface.
If you have a bridge interfaces, then never specify the physical interfaces that are ports of the bridge for IP features (nat, firewall, dhcp, etc) - specify the bridge interface.
If pppoe interface, then use the pppoe interface itself in your nat rules
Etc.
In fact, you could probably get away with not even specifying an interface in your two sample rules, unless you have multiple LAN segments and you don't want to NAT when going between the lan segments....
If you have a bridge interfaces, then never specify the physical interfaces that are ports of the bridge for IP features (nat, firewall, dhcp, etc) - specify the bridge interface.
If pppoe interface, then use the pppoe interface itself in your nat rules
Etc.
In fact, you could probably get away with not even specifying an interface in your two sample rules, unless you have multiple LAN segments and you don't want to NAT when going between the lan segments....