NAT lab: R1

# Config of R1 in NAT lab
# Management in EVE-NG:
/system identity
set name=R1-SSTP-client
/tool romon
set enabled=yes

# Addresses and routes:
/ip address
add address=10.1.0.2/30 interface=ether1
add address=192.168.1.1/24 interface=ether3
/ip route
add gateway=10.1.0.1

# DHCP-Server:
/ip pool
add name=dhcp_pool0 ranges=192.168.1.2-192.168.1.254
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=ether3 name=dhcp1
/ip dhcp-server network
add address=192.168.1.0/24 gateway=192.168.1.1

# NAT
/ip firewall nat
add action=src-nat chain=srcnat dst-address=10.1.0.6 dst-port=443 protocol=tcp src-address-type=local to-ports=65432 comment="NAT SSTP"
add action=masquerade chain=srcnat out-interface=ether2

# SSTP-client
/interface sstp-client
add connect-to=10.1.0.6 disabled=no name=sstp-out1 profile=default-encryption user=ppp1

# Disable unused services
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes