@Anyutta

Первый (с белым адресом)
/ip firewall nat
add action=dst-nat chain=dstnat dst-port=5000 in-interface=ether1 protocol=tcp \
to-addresses=192.168.88.205 to-ports=5000
add action=dst-nat chain=dstnat dst-port=5786 in-interface=ether1 protocol=tcp \
to-addresses=192.168.88.205 to-ports=5786
add action=dst-nat chain=dstnat dst-port=1333 in-interface=ether1 protocol=tcp \
to-addresses=192.168.88.205 to-ports=1333
add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=\
ether1
add action=dst-nat chain=dstnat protocol=rdp to-addresses=192.168.88.252
add action=netmap chain=dstnat dst-port=3351 protocol=tcp to-addresses=\
192.168.88.2 to-ports=3351
add action=dst-nat chain=dstnat dst-port=1194 in-interface=ether1 protocol=tcp \
to-addresses=192.168.88.2 to-ports=1194
add action=masquerade chain=srcnat comment="masq. vpn traffic" out-interface=\
ether1 src-address=192.168.89.0/24

ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 77.221.192.29 1
1 ADC 77.88.99.11/30 77.88.99.11 ether1 0
2 A S 192.168.2.0/24 192.168.88.2 1
3 ADC 192.168.88.0/24 192.168.88.1 bridge 0
4 ADC 192.168.88.52/32 192.168.88.1 <pptp-sbushev> 0
5 ADC 192.168.88.136/32 192.168.88.1 <pptp-admin> 0
6 ADC 192.168.88.137/32 192.168.88.1 <pptp-1COlga> 0
7 ADC 192.168.88.138/32 192.168.88.1 <pptp-1CNina> 0
8 ADC 192.168.88.159/32 192.168.88.1 <pptp-s33> 0
9 ADC 192.168.88.165/32 192.168.88.1 <pptp-s27> 0
10 ADC 192.168.88.167/32 192.168.88.1 <pptp-s17> 0
11 ADC 192.168.88.169/32 192.168.88.1 <pptp-dimasikr> 0

Второй:
/ip firewall filter
add action=accept chain=input dst-port=1723 protocol=tcp
add action=accept chain=input protocol=gre
add action=accept chain=input dst-port=1194 in-interface=ether1 protocol=tcp
/ip firewall nat
add action=masquerade chain=srcnat dst-address=!192.168.89.0/24 out-interface=ether1

ip route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 192.168.88.1 1
1 ADC 192.168.2.0/24 192.168.2.1 bridge2 0
2 ADC 192.168.88.0/24 192.168.88.2 ether1 0
3 A S 192.168.89.0/24 192.168.88.1 1

Вернуться к обсуждению:
VPN в подсеть за вторым роутером Mikrotik

0