Masquerading is a form of source NAT (src-nat) where the router dynamically replaces the source address of outgoing packets with the IP address of the router's outgoing interface. This is commonly used when internal LAN clients access the internet through a single public IP.
Key points for masquerade configuration:
* Use chain=src-nat (because it modifies the source address)
* Use action=masquerade
* Specify the out-interface (i.e., the WAN interface)
MTCNA Course Material - NAT Section:
"To configure masquerading, use chain=src-nat and action=masquerade. Specify out-interface to define the traffic direction." Rene Meneses MTCNA Study Guide - NAT Examples:
"Masquerade automatically uses the IP address of the specified out-interface. Required parameters: chain=src- nat, action=masquerade, out-interface." MikroTik Wiki - Source NAT / Masquerade:
"Masquerade is a special form of src-nat. You must use it in chain=src-nat and define the out-interface for which NAT will be applied." Option A: Incorrect action=accept (used in filter rules, not NAT) Option C: in-interface is not applicable here Option D: chain=dst-nat is used for destination NAT, not source NAT Only Option B is fully correct.