In the example we are using simple PPTP type of VPN tunnel. Other clients in network 192.168.10.0/24 (laptop and smartphone) should be able to access internet directly without being router through the VPN. The goal is to route all the packets coming from this network (192.168.60.0/24) to the tunnel, and packets coming from the tunnel back to the clients in that network. See commands below.From the diagram above you can see that PS3 console is inside network 192.168.60.0/24.

However, ensure that the public IP your are pointing to has been duly assigned to you by your service provider. To configure your router to use the Mikrotik source NAT feature described in this article, simply go to the command line interafec and enter commands similar to the ones below. How to configure Mikrotik source NAT to a specific IP address The specified IP address does not need to be configured on an interface on your Mikrotik device.įrom a security point of view, option two, Mikrotik source NAT, is preferable as it offers device protection, flexibility in choosing who uses what public IP on the internet and ensures that an IP address is not overloaded. The former allows local hosts connected to your network to access the internet using the public IP address configured on the WAN port of your Mikrotik router while the latter allows your local hosts to access the internet using the public IP address specified by you as their source IP.

You may also like: How to configure secure Mikrotik IPSec vpn using xauthentication

Before going into the configuration proper, I would like to explain the difference between the use of the masquerade feature and configuring Mikrotik source NAT to a specific IP address.

Mikrotik l2tp firewall