What's new in 5.24 (2013-Feb-19 15:29):
*) l2tp - fixed problem with reconnects when it added multiple ip addresses;
*) wireless - fixed AES encryption speed issues (upgrade suggested);
*) lcd - changed gamma, which gives greater contrast
*) fix reboot when running on third party hypervisors;
*) ppp client - fixed possible loss of configuration after reboot for some modems;
*) fixed wifi led order on "SXT Lite5";
FB: Pctine
在一般 IP 分享器上有所謂的 Virtual Server or Port Forwarding, 例如, 小弟架了一個網站, 以下是以 Vigor 2920 為例, web server 內部 IP 為 192.168.22.10

而在 RouterOS 是以 ip firewall nat 設定. 在官方文件裡找到了二則有關 NAT 方面的資料.
How to link Public addresses to Local ones
Forwarding a port to an internal IP
上述都是以固定 IP 為例. 設置大致如下.
/ip firewall nat add chain=dstnat dst-address=69.69.69.69 protocol=tcp \
dst-port=80 action=dst-nat to-addresses=192.168.22.10 to-ports=80
但如果 WAN IP 是 dynamic IP 呢? 很簡單, 直接用 in-interface 來做就好
/ip firewall nat
add action=dst-nat chain=dstnat comment="http server" disabled=no \
dst-port=80 in-interface=pppoe-out1 protocol=tcp to-addresses=192.168.22.10 \
to-ports=80
2013/11/18更新
WAN 為 dynamic IP 的 port forwarding 也可以利用 dst-address-type=local 來達成, 此時就不需要指定 in-interface
/ip firewall nat
add action=dst-nat chain=dstnat comment="Synology DSM" dst-address-type=local \
dst-port=5000-5006 protocol=tcp to-addresses=192.168.22.10 to-ports=\
5000-5006
FB: Pctine
內文搜尋

X