Network Address Translation - NAT secrets they didn't teach you

Поделиться
HTML-код
  • Опубликовано: 23 ноя 2024

Комментарии • 141

  • @HåkanStill
    @HåkanStill 11 месяцев назад +12

    Still missing ipv6 videos.

  • @ollisollis
    @ollisollis 11 месяцев назад +62

    Great Video, but reduce the volume of music. Please.

    • @stevenm45
      @stevenm45 11 месяцев назад +8

      Yes, broadcast sound engineer here! Please re-mix to drop the background music by 10dB or so. Other than that I just learnt some extra stuff about NAT, thank you MT!

    • @mikkio5371
      @mikkio5371 11 месяцев назад

      😂​😂

    • @krusher00
      @krusher00 11 месяцев назад

      And 9:20 🎉

  • @hristobarbolov5953
    @hristobarbolov5953 11 месяцев назад +1

    An idea for a video - IPv6 and how to configure it

  • @black_ierax
    @black_ierax 11 месяцев назад +2

    A video going into detail for LTE, cell locking, and carrier aggregation.
    In a water bottling facility in Mount Athos, I am facing issues with my mobile operator.
    The cell tower that is located above Daphne is around 300m from the 4g router, and has power saving features enabled on high frequency bands, causing the router to drop connection to the cell tower.
    The router then establishes connection at cell towers located in Ierisos that is located around 36 ΚΜ, or at Sarti that is around 25km away, and located on the left of the dish. I am using a RBLHGR&R11e-LTE and waiting for a LHG LTE18 kit to arrive soon.

  • @Micheph
    @Micheph 11 месяцев назад

    Saved me rereads. Do not forget to remind us who are just users why it is important to read Mikrotik block diagrams.

  • @stephanszarafinski9001
    @stephanszarafinski9001 11 месяцев назад +1

    Great video! I like it that you explain not only the basic things, but also more in depth stuff. That way the video is interesting for both beginners and more advanced users. Good visuals too!

  • @matelotjim9035
    @matelotjim9035 11 месяцев назад +4

    Another great video Druvis, explaining the bits that others miss.

  • @drumaddict89
    @drumaddict89 11 месяцев назад +20

    since MT is a routing/router company ... more videos on BGP. basics, case studies, best practices, v7 limitations and BGP in-depth with routerOS!
    BGP needs to get more love at mikrotik again.
    also MPLS/VPLS case studies or tutorials would be great in context of ROSv7 configurations

    • @chadtaylor1148
      @chadtaylor1148 11 месяцев назад +1

      I have a /24 of public IP it was breeze to set up on VULTR with ROS6 but 7 has been a no go I absolutely cannot get it to announce. So I would very much love to see some more examples of BGP in version seven.

    • @drumaddict89
      @drumaddict89 11 месяцев назад

      @@chadtaylor1148 not examples alone ... improvements and features which are there in v6 !!!

    • @erlonsilva3396
      @erlonsilva3396 10 месяцев назад +1

      Currently version 7 is behaving like other manufacturers. You must have your prefix in the FIB so that it can be announced. In fact, not only that, but you need to create an addres-list with it and also send it in the out (export) filter.

  • @umsaldanha
    @umsaldanha 18 дней назад

    Implementation of Full Cone, Restricted Cone, Port Restricted Cone and Symmetric NAT on Mikrotik, and how to apply them to different workloads, games and meetings platforms demands an non Symmetric NAT but some companies does require this level of Security implementing Symmetric NAT.

  • @vladislavkaras491
    @vladislavkaras491 10 месяцев назад

    I don't know if there is anything interesting and/or complicated in bridging adapters together, but if there is, would be interesting to watch it!
    Thanks for such great video!

  • @chaseendicott
    @chaseendicott 10 месяцев назад +1

    I would like to see more info about how Endpoint Independent NAT can help in a carrier grade NAT situation for ISP's that want to help open things up for customers so things aren't double NAT'ed. Setup and the benefits being highlighted would be helpful!

  • @vitea1
    @vitea1 11 месяцев назад +2

    Good video. Will be great to see video about DS-lite and IPv6

  • @happy_dev
    @happy_dev 11 месяцев назад +2

    uPNP part is missing in the summary as one of the options for how to make port forwarding.
    for the next video, I would show ipv6 with examples - we don't need nat but at the same time how don't open any home device into the internet, etc.
    another topic - wifi k/v/r - what every letter means and demos with facetime/voip calls during transitions between APs

    • @mikrotik
      @mikrotik  11 месяцев назад +1

      Not planning to do IPv6 videos at the time, but more wifi videos can be expected.

    • @happy_dev
      @happy_dev 11 месяцев назад

      @@mikrotik btw, any news about 160mhz and wifi 6e devices? And more 2.5gb/s ports, please!

  • @mikkio5371
    @mikkio5371 11 месяцев назад +1

    Network trip was doing some great vidoe on firewall though too

  • @SecOps-7
    @SecOps-7 11 месяцев назад +1

    Thanks for the great video. Would love to see a video on WiFi configuration best practices, especially Radio wave frequency best practices on Mikrotik devices. Wifi wave2 does not do great out the box without some configuration and trial and error first. 😊

  • @DeFi-Macrodosing
    @DeFi-Macrodosing 11 месяцев назад +1

    You guys are great, and your devices too. I'd never heard of you before, until I got my ATL LTE router. Amazing. I'd love to know more about customising the router's firewall.

  • @MohammedBizzan
    @MohammedBizzan 11 месяцев назад +2

    Hey Mikrotik, will we get an Apple Silicion native winbox app?

    • @mikrotik
      @mikrotik  11 месяцев назад +1

      Eventually ;)

  • @tannoy
    @tannoy 11 месяцев назад +1

    Great video. Would be good to add how to set this up on RouterOs. Thanks.

  • @kolifx
    @kolifx 11 месяцев назад

    Great video, concise and clear. Great follow up would be to explain how Zerotier can help if one (or both) networks is/are behind CG NAT.

  • @nicolaperotto1933
    @nicolaperotto1933 9 месяцев назад

    The music is disturbing and confusing: some people here has to concentrare to understand what you say.
    The video is very well done, interesting and informative. Thanks

  • @SiBex_ovh
    @SiBex_ovh 11 месяцев назад

    Nice Music, this is a next level of video's :).
    I remember when in past, we use a Public IP on all internal PC. Police in Poland use Dual PC (one PC with Internet, second PC internal network). Those time was awesome, so big wow effect was in every category in IT.

    • @mikrotik
      @mikrotik  10 месяцев назад

      Thanks for the cool story from the old times. We will try to make more good videos :)

  • @ttrs1854
    @ttrs1854 3 месяца назад

    Hey, Mikrotik! Could You please post a video about cgnat with all details? Thanks in advance.

  • @agentbayabas
    @agentbayabas 10 месяцев назад

    can you create an details like that on how port forwarding works i want like that with visualization

  • @jesusmedina-oi7sl
    @jesusmedina-oi7sl 11 месяцев назад +2

    Great video, make another one explaining load balancing techniques.

  • @kiranrajr
    @kiranrajr 11 месяцев назад +6

    Hi Team, The Video was amazing and very helpful for us. Can you make a video explaining CG NAT in MikroTik?

    • @mikrotik
      @mikrotik  11 месяцев назад +11

      For sure, probably after the holidays.

    • @kiranrajr
      @kiranrajr 11 месяцев назад +1

      @@mikrotik Thank You 🙏🏻

  • @pavelsmarhels8868
    @pavelsmarhels8868 10 месяцев назад

    It would be great to hear something about (diff/incr) config backup of bunch of mikrotiks. With products like rancid + git.

  • @philippeastier7657
    @philippeastier7657 11 месяцев назад

    Thank you again, those series of videos are just great.

  • @gcinini
    @gcinini 11 месяцев назад +1

    Great video. Also loved the VLAN series. If you guys could go deeper with the VLAN videos presenting specific scenarios to increase security in home LANs leveraging VLANS and multiple Wi-Fi networks or other similar scenarios that would be great!
    Keep up the great work.

  • @BrianShefveland-l9u
    @BrianShefveland-l9u 10 месяцев назад

    RouterOS Firewall Mangle is fantastic. Please create new videos about different usages of Mangles and firewall rules like blocking Ads, doubling internet speed by using two ISPs, or even connecting to a website using a specific VPN interface.
    I also need to know how to monitor and debug the routing rules, connections, interfaces, and packets.
    Thank you for the great videos.

  • @maxvideodrome4215
    @maxvideodrome4215 11 месяцев назад

    Nice work again Mikrotik - really enjoy your products.

  • @thestoneworks
    @thestoneworks 2 месяца назад

    would be nice showing more of 1 to 1, hairpinning and masquerade setups

    • @mikrotik
      @mikrotik  2 месяца назад +1

      All those topics have been covered in other videos, such as - ruclips.net/video/rZh_OePiH0c/видео.html

  • @salembaabbad8783
    @salembaabbad8783 11 месяцев назад

    Thank you sir I really enjoyed the video,I hope you made a videos for network topology examples 😊

  • @mikkio5371
    @mikkio5371 11 месяцев назад

    Port address translation. The last two is what I don't know about ( harping & carrier ) . Druvis is back !! Being a while .

  • @LuisAriasSanchez
    @LuisAriasSanchez 5 месяцев назад

    Un material excelente. Muchas gracias.

  • @dummydummydummy7568
    @dummydummydummy7568 11 месяцев назад +2

    Hello,
    Very interesting video but could you please make other videos that delve deeper into the types of nat he showed?
    Thank you

    • @mikrotik
      @mikrotik  11 месяцев назад +2

      Absolutely! There will be demonstrations in RouterOS.

    • @dummydummydummy7568
      @dummydummydummy7568 11 месяцев назад

      Thank you@@mikrotik

  • @nday345
    @nday345 11 месяцев назад

    Thank you for the video! Tell us how SNAT works for protocols other than TCP and UDP, for example ICMP, GRE, IPIP, etc. How does a router keep track of connections when several hosts on the local network behind a NAT send ICMP requests to the same host on the Internet? How does he understand which host on the local network to return the ICMP reply to?

    • @mikrotik
      @mikrotik  11 месяцев назад +1

      Valid questions, there will be something short on ICMP and NAT.

  • @leratoradebe6438
    @leratoradebe6438 11 месяцев назад +1

    Great video, certainly learnt something!

  • @frankh.4420
    @frankh.4420 11 месяцев назад

    Thank you for that informative video. What about ipv6 fundamentials and subnetting?

  • @criticalmoorhen
    @criticalmoorhen 11 месяцев назад

    Video idea - CAKE and queue trees. There is also lack of documentation from your side on Cake, so I guess video would do it. Personally I expect you to show off how to setup up CAKE with proper parameters and set up queue tree, all for home/homelab users. I would like to see general recommendations on what kind of queues you might recommend, how to prioritize primary network and give "leftover" traffic to guest network or seedbox. Also - great video!

    • @criticalmoorhen
      @criticalmoorhen 11 месяцев назад

      Another idea - how to properly set up hairpin NAT. It's one of those tricky areas to set up correctly and no "right" answer in forums too. :)

    • @mikrotik
      @mikrotik  11 месяцев назад

      We have a video about that ruclips.net/video/1I5FywY6opQ/видео.htmlsi=YvZBr2ygOkkPilp0

  • @jeytis72
    @jeytis72 11 месяцев назад

    I'd like to see more videos about routing tables, routing rules, and firewall mangle marking. Thanks

  • @gregmc3957
    @gregmc3957 11 месяцев назад

    Good video.
    Can you do a video on MSTP where vlans or redundant links between devices occur.

  • @huascarosinaga6586
    @huascarosinaga6586 3 месяца назад

    Can you post a configuration guide for point-to-point radio link?
    so I can use it

  • @bartomiejsikora910
    @bartomiejsikora910 11 месяцев назад +4

    Hi MikroTik Guys. We need more videos like this. Thanks .

  • @pmcmar
    @pmcmar 11 месяцев назад

    Cool video. Maybe you could add the OSI model layer's namely the transport layer.. but it could get confusing 😅

  • @mnsidarryl
    @mnsidarryl 11 месяцев назад

    Solid intro on how NAT work, perhaps you can expand on NAT forwarding rules in RouterOS since you touched on the port knocking topic :)

    • @mikrotik
      @mikrotik  11 месяцев назад +2

      For sure, more videos on NAT are coming.

  • @matejsojka6683
    @matejsojka6683 11 месяцев назад +1

    make another video and show how to configure those nats explained here on mikrotik routers.

    • @mikrotik
      @mikrotik  11 месяцев назад +1

      There will be videos on all of them. We have already covered port-forwarding and Hairpin NAT in the past, however.

  • @HarishSharmaDelhi
    @HarishSharmaDelhi 11 месяцев назад

    I am small hotel owner and I would love to see a video that will explain how hotspot and usermanager work on RouterOS 7

  • @cruronet
    @cruronet 11 месяцев назад

    Hello i have a issue i have a server on my house port xxxx but when i turn of the server i pop up the router UI.... how do i prevent that happening

  • @aligenawi
    @aligenawi 11 месяцев назад +1

    grate work , if you lower or remove the music during the talking it will make it easy to concentrate and follow up the topic .

  • @jantichy2668
    @jantichy2668 2 месяца назад

    Would you care to address double NAT controversy. Home users often end up with double NAT due to misconfiguration and added network devices with different impacts on their internet experience, often braking specific protocols.

  • @sergiocavazos8963
    @sergiocavazos8963 3 месяца назад

    what models of home routers do you know that have the option to disable nat ?? the er604w from tplink has the option but this model is discontinued

    • @mikrotik
      @mikrotik  3 месяца назад

      What do you mean by disabling NAT? What would be the purpose for that? Of course all MikroTik routers can disable NAT, but maybe you mean something specific for your need

    • @sergiocavazos8963
      @sergiocavazos8963 3 месяца назад

      @@mikrotik thank you for your answer. I'm trying to bridge two diferent subnets using a third router as getway (tplink er605). each subnet have a router (tplink er604w with nat option disable and a tenda rx2pro which can not disable nat) I can make ping fromo the tenda site to the other subnet but not the other way. Thats why i'm thinking in replacing the tenda with one with the option to disable nat

  • @АндрійКотовський-я4э
    @АндрійКотовський-я4э 11 месяцев назад

    Дуже дякую за такі гарні відео 😉😊

  • @黑沙漠-v5n
    @黑沙漠-v5n 11 месяцев назад

    chateau 5G ax update 7.13 后,找不到wlan1 wlan2 怎么解决?

  • @jiucaibox
    @jiucaibox 11 месяцев назад

    This video is so magnificent, I hope it can be translate to various languages.

  • @tlturner3
    @tlturner3 11 месяцев назад

    Great video. It would be be to explain a common misconception to those new to routing and that confusing source NAT with static NAT and destination NAT dynamic NAT.

    • @mikrotik
      @mikrotik  10 месяцев назад

      Ok, we will do more RouterOS specific NAT videos!

  • @MartinEscudero
    @MartinEscudero 11 месяцев назад

    HEY! When will routers have harpin nat activated by default and a DDNS integrated client for no-ip or other providers? Thanks

    • @mikrotik
      @mikrotik  11 месяцев назад

      Only a small percentage of customers will use Hairpin NAT, so there is no need to do the extra configuration for everyone. DDNS is integrated and available for everyone, just enable it in the IP Cloud section.

  • @SavroRus
    @SavroRus 11 месяцев назад

    thank you for clear explanation 🙏

  • @chadtaylor1148
    @chadtaylor1148 11 месяцев назад +1

    I really enjoy the deeper videos where they deep dive into a topic, explain things, programming examples etc. Dont get me wrong I don't want the fun ones to go away but I would love a weekly series where we could expect to see a technical video every Tuesday or something like that.

  • @yingpan6436
    @yingpan6436 11 месяцев назад

    hello miktorik, how to nat dstnat range port to range ip on mikrotik router ?

    • @mikrotik
      @mikrotik  10 месяцев назад

      We will cover dstnat in more detail :)

  • @brucemoriarty
    @brucemoriarty 11 месяцев назад +1

    amazing video and very informative :D

  • @Graham_Rule
    @Graham_Rule 11 месяцев назад +1

    Great content. Terrible background 'music' made it difficult to concentrate on the words though.

  • @rihardsbimanis8390
    @rihardsbimanis8390 11 месяцев назад

    Why i cant port forward with BITE mobile network? Mikrotik LTE device shows private address, so maybe they are using NAT and blocking port 80?

    • @mikrotik
      @mikrotik  11 месяцев назад +2

      Mobile operators usually use CG NAT and other techniques, so for port-forwarding to work they would have to configure it at their end.

    • @ВсеобоВсем-я6и6я
      @ВсеобоВсем-я6и6я 11 месяцев назад

      Rihards, did you buy from BITE static public IP address?

  • @FranciscoMatusCL
    @FranciscoMatusCL 9 месяцев назад

    amazing content, thanks for your effort!

    • @mikrotik
      @mikrotik  9 месяцев назад

      Glad you enjoy it!

  • @phcsmile
    @phcsmile 11 месяцев назад

    How to use Mikrotik NAT or another. Trick. To avoid starlink detect internet sharing and stop throttle and tarping connection - bandwidth

  • @ДжониКейжд-э2б
    @ДжониКейжд-э2б 11 месяцев назад +2

    make bgp video settings on v7 mikrotik

    • @mikrotik
      @mikrotik  11 месяцев назад +1

      In the plans already :)

  • @SoranEngineer
    @SoranEngineer 11 месяцев назад

    great video thank you so much for explain

  • @MateusProvesi
    @MateusProvesi 9 месяцев назад

    Please talk about IPv6.

  • @meddle999
    @meddle999 11 месяцев назад

    IPv6 security topics please

  • @silentwind222
    @silentwind222 Месяц назад

    good job. good serie.

  • @apruszko
    @apruszko 11 месяцев назад

    Dear Dru, please create some video about iot mqtt with SSL and safe configuration (now: mqtt credentials in config are in plain text, reading this config, an intruder can break our mqtt broker, please see that certificates and keys are no stored in config, I mean "/export teres" does not show critical information). Thanks for previous video - those helps me buy many mikrotik hardwares 😊

    • @mikrotik
      @mikrotik  11 месяцев назад +1

      Like with other sensitive data on your router - the key is to use strong user passwords and not hand them out to anyone you don't trust.

  • @anakinskywalker8624
    @anakinskywalker8624 11 месяцев назад

    Thank you for this video topic :)

  • @jetmanbg
    @jetmanbg 11 месяцев назад

    More info about CGnat please

    • @mikrotik
      @mikrotik  11 месяцев назад

      Sure, after the holidays.

  • @cruelyamagaming7096
    @cruelyamagaming7096 11 месяцев назад

    When 5G sim router launching in india..?

  • @CarmineIannace
    @CarmineIannace 11 месяцев назад

    Excellent video! Paldies!

  • @sebastiankutter3630
    @sebastiankutter3630 10 месяцев назад

    I have an idea for a video series: Let's create our own ISP with MikroTik, including CGNAT, PPPoE, and so on.

    • @mikrotik
      @mikrotik  10 месяцев назад

      Depends on the region in the world. PPPoE is not used around here. I guess common ISP setups in Latvia would not be possible in your region.

    • @sebastiankutter3630
      @sebastiankutter3630 10 месяцев назад +1

      @@mikrotik In Germany you usually login to your isp with pppoe

    • @mikrotik
      @mikrotik  10 месяцев назад

      It's very sad, I'm sorry

    • @sebastiankutter3630
      @sebastiankutter3630 10 месяцев назад

      @@mikrotik How does it work in Latvia?

  • @treanwercomanche
    @treanwercomanche 3 месяца назад

    great. I need more

  • @phil2768
    @phil2768 11 месяцев назад

    Thank you!

  • @nelsonlim5189
    @nelsonlim5189 4 месяца назад

    please do a CGNAT video please

  • @WiHu_Fibra
    @WiHu_Fibra 11 месяцев назад

    Great video!!

  • @renekuhl7934
    @renekuhl7934 11 месяцев назад

    Good Video.. Kepp it up Guys!

  • @zanydaproduction
    @zanydaproduction 10 месяцев назад

    Спасибо. Если добавите русские субтитры будет вообще фантастически❤. Mikrotik 👍🤟

    • @zanydaproduction
      @zanydaproduction 10 месяцев назад

      Хотя если смотреть через Яндекс браузер с переводом нейросети на РУССКИЙ то воОбще Агонь. 😀

  • @Grmreeper100
    @Grmreeper100 11 месяцев назад

    Thank you for the greate work

  • @sabitzubairzayn6945
    @sabitzubairzayn6945 10 месяцев назад

    Make a proper video about CGNAT if possible.

    • @mikrotik
      @mikrotik  10 месяцев назад +1

      Will do!

  • @rusnyasosat
    @rusnyasosat 11 месяцев назад +1

    Nice

  • @userbanned4419
    @userbanned4419 11 месяцев назад

    ну на вас давно подписан, по этому нашел)

  • @next3138
    @next3138 11 месяцев назад

    pls fix a problem ipv6 dhcp bad server duid 6660, ignore it

    • @next3138
      @next3138 11 месяцев назад

      SUP-137795

  • @notDacian
    @notDacian 11 месяцев назад +3

    The background music is way to loud!

  • @Eyckus
    @Eyckus 9 месяцев назад

    ros The download speed is so slow

  • @emanuelcoc
    @emanuelcoc 11 месяцев назад

    Muito bom

  • @davidz1264
    @davidz1264 11 месяцев назад +3

    What is NAT?
    It‘s EVIL 🙈

  • @userbanned4419
    @userbanned4419 11 месяцев назад

    основные вопросы:
    по видео всё понятно, лучше туториалы делайте как настраивать оборудование конечным клиентам, тк ваше оборудование с среднем сигменте для конечного пользователя.

  • @QueeeeenZ
    @QueeeeenZ 11 месяцев назад

    You are pronouncing the word ”allow” wrongly. The emphasis is on the last syllable.

  • @husseinadil6290
    @husseinadil6290 11 месяцев назад

    The music has ruined the benefit of this video. Please make the background music calm and volume it down as much as possible. We are here to gain knowledge from you. Music is our last concern.

    • @mikrotik
      @mikrotik  11 месяцев назад

      We will try to do better.

  • @wisperinternetinalambrico8590
    @wisperinternetinalambrico8590 11 месяцев назад

    el nat deberia desaparecer para eso está ipv6

  • @kiharamuchangi4228
    @kiharamuchangi4228 7 месяцев назад

    Bridging Video

  • @IgorThompsonMusic
    @IgorThompsonMusic 4 месяца назад

    bold start!