Page 1 of 1

Log Nat translations

Posted: Thu Dec 01, 2016 8:44 am
by zapper
Here we are required to maintain the logs of the following parameters

1: Internal IP Address and port
2: NAT translated IP Address and port
3. Destination IP Address and port

How do i get these logs in routeros, perferably using syslog

Re: Log Nat translations

Posted: Fri Dec 02, 2016 4:59 am
by TyBermea
You could try this (or some netflow alternative).
/system logging action
add name=syslog remote=1.2.3.4 target=remote

/system logging
add action=syslog topics=firewall
add action=syslog topics=dhcp

/ip firewall nat
add action=log chain=srcnat
add action=log chain=dstnat