Network Address Translation - NAT secrets they didn't teach you

Поділитися
Вставка
  • Опубліковано 5 січ 2025

КОМЕНТАРІ • 144

  • @HåkanStill
    @HåkanStill Рік тому +13

    Still missing ipv6 videos.

  • @ollisollis
    @ollisollis Рік тому +62

    Great Video, but reduce the volume of music. Please.

    • @stevenm45
      @stevenm45 Рік тому +8

      Yes, broadcast sound engineer here! Please re-mix to drop the background music by 10dB or so. Other than that I just learnt some extra stuff about NAT, thank you MT!

    • @mikkio5371
      @mikkio5371 Рік тому

      😂​😂

    • @krusher00
      @krusher00 Рік тому

      And 9:20 🎉

  • @happy_dev
    @happy_dev Рік тому +3

    uPNP part is missing in the summary as one of the options for how to make port forwarding.
    for the next video, I would show ipv6 with examples - we don't need nat but at the same time how don't open any home device into the internet, etc.
    another topic - wifi k/v/r - what every letter means and demos with facetime/voip calls during transitions between APs

    • @mikrotik
      @mikrotik  Рік тому +2

      Not planning to do IPv6 videos at the time, but more wifi videos can be expected.

    • @happy_dev
      @happy_dev Рік тому +1

      @@mikrotik btw, any news about 160mhz and wifi 6e devices? And more 2.5gb/s ports, please!

  • @stephanszarafinski9001
    @stephanszarafinski9001 Рік тому +1

    Great video! I like it that you explain not only the basic things, but also more in depth stuff. That way the video is interesting for both beginners and more advanced users. Good visuals too!

  • @matelotjim9035
    @matelotjim9035 Рік тому +4

    Another great video Druvis, explaining the bits that others miss.

  • @black_ierax
    @black_ierax Рік тому +2

    A video going into detail for LTE, cell locking, and carrier aggregation.
    In a water bottling facility in Mount Athos, I am facing issues with my mobile operator.
    The cell tower that is located above Daphne is around 300m from the 4g router, and has power saving features enabled on high frequency bands, causing the router to drop connection to the cell tower.
    The router then establishes connection at cell towers located in Ierisos that is located around 36 ΚΜ, or at Sarti that is around 25km away, and located on the left of the dish. I am using a RBLHGR&R11e-LTE and waiting for a LHG LTE18 kit to arrive soon.

  • @vladislavkaras491
    @vladislavkaras491 Рік тому

    I don't know if there is anything interesting and/or complicated in bridging adapters together, but if there is, would be interesting to watch it!
    Thanks for such great video!

  • @Micheph
    @Micheph Рік тому

    Saved me rereads. Do not forget to remind us who are just users why it is important to read Mikrotik block diagrams.

  • @hristobarbolov5953
    @hristobarbolov5953 Рік тому +1

    An idea for a video - IPv6 and how to configure it

  • @SiBex_ovh
    @SiBex_ovh Рік тому

    Nice Music, this is a next level of video's :).
    I remember when in past, we use a Public IP on all internal PC. Police in Poland use Dual PC (one PC with Internet, second PC internal network). Those time was awesome, so big wow effect was in every category in IT.

    • @mikrotik
      @mikrotik  Рік тому

      Thanks for the cool story from the old times. We will try to make more good videos :)

  • @vitea1
    @vitea1 Рік тому +2

    Good video. Will be great to see video about DS-lite and IPv6

  • @DeFi-Macrodosing
    @DeFi-Macrodosing Рік тому +1

    You guys are great, and your devices too. I'd never heard of you before, until I got my ATL LTE router. Amazing. I'd love to know more about customising the router's firewall.

  • @agentbayabas
    @agentbayabas Рік тому

    can you create an details like that on how port forwarding works i want like that with visualization

  • @umsaldanha
    @umsaldanha 2 місяці тому

    Implementation of Full Cone, Restricted Cone, Port Restricted Cone and Symmetric NAT on Mikrotik, and how to apply them to different workloads, games and meetings platforms demands an non Symmetric NAT but some companies does require this level of Security implementing Symmetric NAT.

  • @gcinini
    @gcinini Рік тому +1

    Great video. Also loved the VLAN series. If you guys could go deeper with the VLAN videos presenting specific scenarios to increase security in home LANs leveraging VLANS and multiple Wi-Fi networks or other similar scenarios that would be great!
    Keep up the great work.

  • @chaseendicott
    @chaseendicott Рік тому +1

    I would like to see more info about how Endpoint Independent NAT can help in a carrier grade NAT situation for ISP's that want to help open things up for customers so things aren't double NAT'ed. Setup and the benefits being highlighted would be helpful!

  • @kolifx
    @kolifx Рік тому

    Great video, concise and clear. Great follow up would be to explain how Zerotier can help if one (or both) networks is/are behind CG NAT.

  • @maxvideodrome4215
    @maxvideodrome4215 Рік тому

    Nice work again Mikrotik - really enjoy your products.

  • @tannoy
    @tannoy Рік тому +1

    Great video. Would be good to add how to set this up on RouterOs. Thanks.

  • @chadtaylor1148
    @chadtaylor1148 Рік тому +1

    I really enjoy the deeper videos where they deep dive into a topic, explain things, programming examples etc. Dont get me wrong I don't want the fun ones to go away but I would love a weekly series where we could expect to see a technical video every Tuesday or something like that.

  • @philippeastier7657
    @philippeastier7657 Рік тому

    Thank you again, those series of videos are just great.

  • @SecOps-7
    @SecOps-7 Рік тому +1

    Thanks for the great video. Would love to see a video on WiFi configuration best practices, especially Radio wave frequency best practices on Mikrotik devices. Wifi wave2 does not do great out the box without some configuration and trial and error first. 😊

  • @GerardTost
    @GerardTost Місяць тому

    Cool video, great explanation. I like music, it's part of the show.

  • @MohammedBizzan
    @MohammedBizzan Рік тому +2

    Hey Mikrotik, will we get an Apple Silicion native winbox app?

  • @drumaddict89
    @drumaddict89 Рік тому +19

    since MT is a routing/router company ... more videos on BGP. basics, case studies, best practices, v7 limitations and BGP in-depth with routerOS!
    BGP needs to get more love at mikrotik again.
    also MPLS/VPLS case studies or tutorials would be great in context of ROSv7 configurations

    • @chadtaylor1148
      @chadtaylor1148 Рік тому +1

      I have a /24 of public IP it was breeze to set up on VULTR with ROS6 but 7 has been a no go I absolutely cannot get it to announce. So I would very much love to see some more examples of BGP in version seven.

    • @drumaddict89
      @drumaddict89 Рік тому

      @@chadtaylor1148 not examples alone ... improvements and features which are there in v6 !!!

    • @erlonsilva3396
      @erlonsilva3396 11 місяців тому +1

      Currently version 7 is behaving like other manufacturers. You must have your prefix in the FIB so that it can be announced. In fact, not only that, but you need to create an addres-list with it and also send it in the out (export) filter.

  • @jesusmedina-oi7sl
    @jesusmedina-oi7sl Рік тому +2

    Great video, make another one explaining load balancing techniques.

  • @IgorThompsonMusic
    @IgorThompsonMusic 5 місяців тому

    bold start!

  • @mikkio5371
    @mikkio5371 Рік тому +1

    Network trip was doing some great vidoe on firewall though too

  • @mikkio5371
    @mikkio5371 Рік тому

    Port address translation. The last two is what I don't know about ( harping & carrier ) . Druvis is back !! Being a while .

  • @criticalmoorhen
    @criticalmoorhen Рік тому

    Video idea - CAKE and queue trees. There is also lack of documentation from your side on Cake, so I guess video would do it. Personally I expect you to show off how to setup up CAKE with proper parameters and set up queue tree, all for home/homelab users. I would like to see general recommendations on what kind of queues you might recommend, how to prioritize primary network and give "leftover" traffic to guest network or seedbox. Also - great video!

    • @criticalmoorhen
      @criticalmoorhen Рік тому

      Another idea - how to properly set up hairpin NAT. It's one of those tricky areas to set up correctly and no "right" answer in forums too. :)

    • @mikrotik
      @mikrotik  Рік тому

      We have a video about that ua-cam.com/video/1I5FywY6opQ/v-deo.htmlsi=YvZBr2ygOkkPilp0

  • @АндрійКотовський-я4э

    Дуже дякую за такі гарні відео 😉😊

  • @kiranrajr
    @kiranrajr Рік тому +6

    Hi Team, The Video was amazing and very helpful for us. Can you make a video explaining CG NAT in MikroTik?

    • @mikrotik
      @mikrotik  Рік тому +11

      For sure, probably after the holidays.

    • @kiranrajr
      @kiranrajr Рік тому +1

      @@mikrotik Thank You 🙏🏻

  • @mnsidarryl
    @mnsidarryl Рік тому

    Solid intro on how NAT work, perhaps you can expand on NAT forwarding rules in RouterOS since you touched on the port knocking topic :)

    • @mikrotik
      @mikrotik  Рік тому +2

      For sure, more videos on NAT are coming.

  • @jiucaibox
    @jiucaibox Рік тому

    This video is so magnificent, I hope it can be translate to various languages.

  • @pavelsmarhels8868
    @pavelsmarhels8868 Рік тому

    It would be great to hear something about (diff/incr) config backup of bunch of mikrotiks. With products like rancid + git.

  • @BrianShefveland-l9u
    @BrianShefveland-l9u Рік тому

    RouterOS Firewall Mangle is fantastic. Please create new videos about different usages of Mangles and firewall rules like blocking Ads, doubling internet speed by using two ISPs, or even connecting to a website using a specific VPN interface.
    I also need to know how to monitor and debug the routing rules, connections, interfaces, and packets.
    Thank you for the great videos.

  • @ttrs1854
    @ttrs1854 4 місяці тому

    Hey, Mikrotik! Could You please post a video about cgnat with all details? Thanks in advance.

  • @salembaabbad8783
    @salembaabbad8783 Рік тому

    Thank you sir I really enjoyed the video,I hope you made a videos for network topology examples 😊

  • @nday345
    @nday345 Рік тому

    Thank you for the video! Tell us how SNAT works for protocols other than TCP and UDP, for example ICMP, GRE, IPIP, etc. How does a router keep track of connections when several hosts on the local network behind a NAT send ICMP requests to the same host on the Internet? How does he understand which host on the local network to return the ICMP reply to?

    • @mikrotik
      @mikrotik  Рік тому +1

      Valid questions, there will be something short on ICMP and NAT.

  • @huascarosinaga6586
    @huascarosinaga6586 5 місяців тому

    Can you post a configuration guide for point-to-point radio link?
    so I can use it

  • @Smoothy0911
    @Smoothy0911 7 днів тому

    Hi @mikrotik
    Thanks for this interesting video.
    Well and clearly spoken and explained straight forward, but the background music is very disturbing and much too loud.

  • @leratoradebe6438
    @leratoradebe6438 Рік тому +1

    Great video, certainly learnt something!

  • @dummydummydummy7568
    @dummydummydummy7568 Рік тому +2

    Hello,
    Very interesting video but could you please make other videos that delve deeper into the types of nat he showed?
    Thank you

  • @cruronet
    @cruronet Рік тому

    Hello i have a issue i have a server on my house port xxxx but when i turn of the server i pop up the router UI.... how do i prevent that happening

  • @LuisAriasSanchez
    @LuisAriasSanchez 7 місяців тому

    Un material excelente. Muchas gracias.

  • @黑沙漠-v5n
    @黑沙漠-v5n Рік тому

    chateau 5G ax update 7.13 后,找不到wlan1 wlan2 怎么解决?

  • @thestoneworks
    @thestoneworks 3 місяці тому

    would be nice showing more of 1 to 1, hairpinning and masquerade setups

    • @mikrotik
      @mikrotik  3 місяці тому +1

      All those topics have been covered in other videos, such as - ua-cam.com/video/rZh_OePiH0c/v-deo.html

  • @sergiocavazos8963
    @sergiocavazos8963 5 місяців тому

    what models of home routers do you know that have the option to disable nat ?? the er604w from tplink has the option but this model is discontinued

    • @mikrotik
      @mikrotik  5 місяців тому

      What do you mean by disabling NAT? What would be the purpose for that? Of course all MikroTik routers can disable NAT, but maybe you mean something specific for your need

    • @sergiocavazos8963
      @sergiocavazos8963 5 місяців тому

      @@mikrotik thank you for your answer. I'm trying to bridge two diferent subnets using a third router as getway (tplink er605). each subnet have a router (tplink er604w with nat option disable and a tenda rx2pro which can not disable nat) I can make ping fromo the tenda site to the other subnet but not the other way. Thats why i'm thinking in replacing the tenda with one with the option to disable nat

  • @matejsojka6683
    @matejsojka6683 Рік тому +1

    make another video and show how to configure those nats explained here on mikrotik routers.

    • @mikrotik
      @mikrotik  Рік тому +1

      There will be videos on all of them. We have already covered port-forwarding and Hairpin NAT in the past, however.

  • @tlturner3
    @tlturner3 Рік тому

    Great video. It would be be to explain a common misconception to those new to routing and that confusing source NAT with static NAT and destination NAT dynamic NAT.

    • @mikrotik
      @mikrotik  Рік тому

      Ok, we will do more RouterOS specific NAT videos!

  • @gregmc3957
    @gregmc3957 Рік тому

    Good video.
    Can you do a video on MSTP where vlans or redundant links between devices occur.

  • @FranciscoMatusCL
    @FranciscoMatusCL 11 місяців тому

    amazing content, thanks for your effort!

    • @mikrotik
      @mikrotik  11 місяців тому

      Glad you enjoy it!

  • @ДжониКейжд-э2б
    @ДжониКейжд-э2б Рік тому +2

    make bgp video settings on v7 mikrotik

    • @mikrotik
      @mikrotik  Рік тому +1

      In the plans already :)

  • @HarishSharmaDelhi
    @HarishSharmaDelhi Рік тому

    I am small hotel owner and I would love to see a video that will explain how hotspot and usermanager work on RouterOS 7

  • @jeytis72
    @jeytis72 Рік тому

    I'd like to see more videos about routing tables, routing rules, and firewall mangle marking. Thanks

  • @brucemoriarty
    @brucemoriarty Рік тому +1

    amazing video and very informative :D

  • @bartomiejsikora910
    @bartomiejsikora910 Рік тому +4

    Hi MikroTik Guys. We need more videos like this. Thanks .

  • @pmcmar
    @pmcmar Рік тому

    Cool video. Maybe you could add the OSI model layer's namely the transport layer.. but it could get confusing 😅

  • @frankh.4420
    @frankh.4420 Рік тому

    Thank you for that informative video. What about ipv6 fundamentials and subnetting?

  • @jantichy2668
    @jantichy2668 4 місяці тому

    Would you care to address double NAT controversy. Home users often end up with double NAT due to misconfiguration and added network devices with different impacts on their internet experience, often braking specific protocols.

  • @yingpan6436
    @yingpan6436 Рік тому

    hello miktorik, how to nat dstnat range port to range ip on mikrotik router ?

    • @mikrotik
      @mikrotik  Рік тому

      We will cover dstnat in more detail :)

  • @aligenawi
    @aligenawi Рік тому +1

    grate work , if you lower or remove the music during the talking it will make it easy to concentrate and follow up the topic .

  • @silentwind222
    @silentwind222 2 місяці тому

    good job. good serie.

  • @nicolaperotto1933
    @nicolaperotto1933 11 місяців тому

    The music is disturbing and confusing: some people here has to concentrare to understand what you say.
    The video is very well done, interesting and informative. Thanks

  • @cruelyamagaming7096
    @cruelyamagaming7096 Рік тому

    When 5G sim router launching in india..?

  • @phcsmile
    @phcsmile Рік тому

    How to use Mikrotik NAT or another. Trick. To avoid starlink detect internet sharing and stop throttle and tarping connection - bandwidth

  • @MateusProvesi
    @MateusProvesi 11 місяців тому

    Please talk about IPv6.

  • @SavroRus
    @SavroRus Рік тому

    thank you for clear explanation 🙏

  • @MartinEscudero
    @MartinEscudero Рік тому

    HEY! When will routers have harpin nat activated by default and a DDNS integrated client for no-ip or other providers? Thanks

    • @mikrotik
      @mikrotik  Рік тому

      Only a small percentage of customers will use Hairpin NAT, so there is no need to do the extra configuration for everyone. DDNS is integrated and available for everyone, just enable it in the IP Cloud section.

  • @rihardsbimanis8390
    @rihardsbimanis8390 Рік тому

    Why i cant port forward with BITE mobile network? Mikrotik LTE device shows private address, so maybe they are using NAT and blocking port 80?

    • @mikrotik
      @mikrotik  Рік тому +2

      Mobile operators usually use CG NAT and other techniques, so for port-forwarding to work they would have to configure it at their end.

    • @ВсеобоВсем-я6и6я
      @ВсеобоВсем-я6и6я Рік тому

      Rihards, did you buy from BITE static public IP address?

  • @meddle999
    @meddle999 Рік тому

    IPv6 security topics please

  • @treanwercomanche
    @treanwercomanche 4 місяці тому

    great. I need more

  • @jetmanbg
    @jetmanbg Рік тому

    More info about CGnat please

    • @mikrotik
      @mikrotik  Рік тому

      Sure, after the holidays.

  • @CarmineIannace
    @CarmineIannace Рік тому

    Excellent video! Paldies!

  • @Graham_Rule
    @Graham_Rule Рік тому +1

    Great content. Terrible background 'music' made it difficult to concentrate on the words though.

  • @anakinskywalker8624
    @anakinskywalker8624 Рік тому

    Thank you for this video topic :)

  • @WiHu_Fibra
    @WiHu_Fibra Рік тому

    Great video!!

  • @apruszko
    @apruszko Рік тому

    Dear Dru, please create some video about iot mqtt with SSL and safe configuration (now: mqtt credentials in config are in plain text, reading this config, an intruder can break our mqtt broker, please see that certificates and keys are no stored in config, I mean "/export teres" does not show critical information). Thanks for previous video - those helps me buy many mikrotik hardwares 😊

    • @mikrotik
      @mikrotik  Рік тому +1

      Like with other sensitive data on your router - the key is to use strong user passwords and not hand them out to anyone you don't trust.

  • @sebastiankutter3630
    @sebastiankutter3630 Рік тому

    I have an idea for a video series: Let's create our own ISP with MikroTik, including CGNAT, PPPoE, and so on.

    • @mikrotik
      @mikrotik  Рік тому

      Depends on the region in the world. PPPoE is not used around here. I guess common ISP setups in Latvia would not be possible in your region.

    • @sebastiankutter3630
      @sebastiankutter3630 Рік тому +1

      @@mikrotik In Germany you usually login to your isp with pppoe

    • @mikrotik
      @mikrotik  Рік тому

      It's very sad, I'm sorry

    • @sebastiankutter3630
      @sebastiankutter3630 Рік тому

      @@mikrotik How does it work in Latvia?

  • @renekuhl7934
    @renekuhl7934 Рік тому

    Good Video.. Kepp it up Guys!

  • @phil2768
    @phil2768 Рік тому

    Thank you!

  • @nelsonlim5189
    @nelsonlim5189 6 місяців тому

    please do a CGNAT video please

  • @SoranEngineer
    @SoranEngineer Рік тому

    great video thank you so much for explain

  • @Grmreeper100
    @Grmreeper100 Рік тому

    Thank you for the greate work

  • @zanydaproduction
    @zanydaproduction Рік тому

    Спасибо. Если добавите русские субтитры будет вообще фантастически❤. Mikrotik 👍🤟

    • @zanydaproduction
      @zanydaproduction 11 місяців тому

      Хотя если смотреть через Яндекс браузер с переводом нейросети на РУССКИЙ то воОбще Агонь. 😀

  • @next3138
    @next3138 Рік тому

    pls fix a problem ipv6 dhcp bad server duid 6660, ignore it

  • @notDacian
    @notDacian Рік тому +3

    The background music is way to loud!

  • @rusnyasosat
    @rusnyasosat Рік тому +1

    Nice

  • @sabitzubairzayn6945
    @sabitzubairzayn6945 Рік тому

    Make a proper video about CGNAT if possible.

  • @userbanned4419
    @userbanned4419 Рік тому

    ну на вас давно подписан, по этому нашел)

  • @Eyckus
    @Eyckus 11 місяців тому

    ros The download speed is so slow

  • @davidz1264
    @davidz1264 Рік тому +3

    What is NAT?
    It‘s EVIL 🙈

  • @QueeeeenZ
    @QueeeeenZ Рік тому

    You are pronouncing the word ”allow” wrongly. The emphasis is on the last syllable.

  • @emanuelcoc
    @emanuelcoc Рік тому

    Muito bom

  • @husseinadil6290
    @husseinadil6290 Рік тому

    The music has ruined the benefit of this video. Please make the background music calm and volume it down as much as possible. We are here to gain knowledge from you. Music is our last concern.

    • @mikrotik
      @mikrotik  Рік тому

      We will try to do better.

  • @userbanned4419
    @userbanned4419 Рік тому

    основные вопросы:
    по видео всё понятно, лучше туториалы делайте как настраивать оборудование конечным клиентам, тк ваше оборудование с среднем сигменте для конечного пользователя.

  • @wisperinternetinalambrico8590

    el nat deberia desaparecer para eso está ipv6

  • @kiharamuchangi4228
    @kiharamuchangi4228 8 місяців тому

    Bridging Video