Join Log in
Score:0
avatar Server

iptables NAT With traffic shapping

cn flag
Steven Y

I have centos 7 as BGP Router with FRR, and have 2 interface 1. Public 1. Customer . On Public interface i put mikrotik as traffic shapping . There's 2 block with private IP (10.11.12.x/24 and 10.11.13.x/24) NAT behind BGP Router, there's no problem with SNAT they can reach internet without problem. Problem is in Traffic Shapping router just Private IP on queue can't limit. The Public IP no problem . Here's the topoology. What i'm missing ?

                   | x.x.x.x/24
         +---------|----------------------+
         |                                |
         |  Centos BGP Router  (NAT)      |
         |                                |
         +---|----------------------|-----+
             |                      |

Public Interface | | Customer Interface | | | | | | +---|----------------------|-----+ | | | | | | Mikrotik Traffic policer- | | | | | | | | | +------|-----------|-------------+ | | 192.168.0.1/16 | | Client With Private IP | 10.11.12.x.xx Clients with Public IP (103.217.xx.xx)

Here is Nat Rule on BGP Router :

Chain POSTROUTING (policy ACCEPT) target prot opt source destination SNAT all -- 10.11.12.0/24 anywhere to:103.217.xxx.xxx SNAT all -- 10.11.13.0/24 anywhere to:103.217.xxx.xxx

Please need advice , thank you

12
0 + 0
ธงชาติไทย
Elon Musk
I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.