On this page, you can define IP address ranges (public addresses) that will be used to NAT clients’ private IP addresses.

A new range can be added to the system by clicking on + Add new IP range. Enter a network and its name. Define from which IP address IP addresses are to be offered. You may add reserved IP addresses, which will not be offered (+ Reserve IP address). Choose a particular locality. Finally, select the router or routers that will use a given IP address range. Finish the process by clicking on Save. 

When you are in the process of adding an Internet service in the Client card, you will be able to enter an IP address (a public address) from the range you have specified. If NAT is enabled, it is automatically done for a client’s private IP address on a given router.

To activate it, it is necessary to set the mikrotik_nat_for_end_user key to 1 in Settings Syst. settings Mikrotik. In the opposite case (value = 0), NAT is not done on the router. When you activate the function, a dstnat and srcnat rule will be added to the router for each client.

/ip firewall nat add action=netmap chain=ispadmin_first_dstnat comment=ispadmin_NAT_1.2.3.4_10.10.0.100 dst-address=1.2.3.4 to-addresses=10.10.0.100
/ip firewall nat add action=netmap chain=ispadmin_last_srcnat comment=ispadmin_NAT_10.10.0.100_1.2.3.4 to-addresses=1.2.3.4 src-address=10.10.0.100

In the overview of NAT IP pools, you can find how many IP addresses there are in a particular subnet and how many of them are used and how many are unused. Individual IP pools can be edited and deleted here.

When you click on a particular item in the Number of engaged IP addresses column in the overview, a list appears of clients and IP addresses assigned to them.