In the way I do it, I do not need to specify the Wan IP. My rules will work fine if my ISP change the outside IP. General: Chain=dst-nat Protocol=tcp Port=8080 In-Interface=Wan interface Action: Action=netmap To-address=ip of webserver To-Port=80 Simpler and works with DHCP on outside.
Good morning, I did it the same way as in your video with the difference that I have different ip address values. I think I should have it set up correctly. The only thing that bothers me is whether it works as it should. When I look into IP/Firewall/Nat - here I look at the created 4 port forwarding rules for one online game, so the first two rules are ( for port: 27015 and 27036 ) the other rules are for the TCP protocol and the others are the UDP protocol ( for the port: 27015 and 27031-27036 ) so I look at it and there is no data flowing at all. I still have 0 B in the Bytes column, so I doubt port forwarding is working for me :(
Hi! Thank you for this tutorial, its been helpful. Still I have another issue with Mikrotik LTE router; I am using it as a LTE sim run outdoor modem, but as soon as I want to connect a device on it via ethernet cable, it collapses… the question is how to set the ethernet port on Mikrotik to be LAN instead of router understanding ethernet cable connected is an inbound internet?
I'm trying to forward a UDP port for a Game Server. By RouterOS just isn't letting it though. I tested with another basic router , and all is well, but I can't make my hap2AC forward a UDP port. Am I missing something? is there something beyond the port forwarding instructions in this video?
Hi TKSJa, I am now looking after a Mikrotik RB951Ui-2HnD Router (no experience on these as yet) connected to a VSAT modem service. I notice that on the Quickset menu screen the config for Firewall is not checked whereas the NAT box on the Local Network config is. The unit is running in Masquerade mode. I would have thought it best to have both Firewall checked as well as NAT to create 2 stage firewall security or is this incorrect? I believe this may slow the router down but I am after security. Any assistance appreciated.
I do not understand what to enable in DHCP client, and what in DHCP server. There are many fields, and I am afraid to mess my current working internet connection.
Hi I hope you are fine, I have many question in NAT genernal you put ip and port which differnt from action port and IP kinldy explain more for that , thanks again
Howzit going? I have a client that has a Mikrotik and behind that mikrotik an AP has reset to default how do I find that AP and then how to I access it to reconfigure
Hey, thanks for the tutorials! However I am having trouble with my FTP port forwarding, I did exactly exactly as you showed in the video and I checked it 10 times that I did the exact same, but I still cant access my FTP, I cant even access it locally. I am using Mikrotik hAP AC^2, when I turn on my old TP-Link that I retired in favor of the Mikrotik, my ftp is working without touching the FTP server computer at all, so the FTP is there, its something with the Mikrotik. Is there anything additional that I have to allow/do to make it work? Everything was working fine with my TP-Link...
Hi, do you have tutorial for that rule ? For my setup, i need to port forwarding to 192.168.9.2:21 ( Port 21-FTP ) . My main IP is: 192.168.9.1 . Thank you so much sir
Hi, I have watched numerous tutorials and I am still unable to forward ports for steam. The ports i need to forward is 27001-27030 and 6112-6122 on tcp and udp. Is there any way you could possible assist me?
Enjoying your videos. I have been doing a variation on this - same thing except I have not been entering a value in Dst. Address and works same as yours. Are you accounting for multiple IP address on the interface or something else?
I have two routers one is dlink router from ISP, and Mikrotik router which gets its link from the dlink. My DVR is connected to the mikrotik router. Which IP should I use white configuring port forward
If you're just trying to make a connection to the DVR from within the dlink router then you just need to make one port forwarding rule inside your Mikrotik. Use the Mikrotik's ip as the 'WAN'(DST Address) and forward to the DVR ip over whichever ports you want. If you're trying to make a connection from the WAN(public ip) then you'll have to also make a forwarding rule in your dlink as well as the one mentioned above. For the dlink, use the public ip given by the ISP to your router as the DST Address and forward to the Mikrotik's ip...
thanks very much for this tutorial.. i have two questions. 1st, how can i filter the ip address that can access have access to the port from the internet. i.e i only want some certain IP or a certain IP address to have access to the NAS on my raspberry 2nd, my router web config is on port 80 and my apache service is also on port 80, how can i filter traffic destined to the router or apache without changing the port number. remember, once i enable port forwarding to port 80, i can no longer access my router webconfig
1. In the Src Address enter the ip you want to allow from 2. You could leave one completely alone, for instance the web server, and just change the incoming port for the router's web config. It'd be cleaner to give out a website without a port involved(website:8000 doesn't look clean). For your router web config you could come in on port 8080 or whatever you wish and just forward that to the router's ip on port 80.
Nice video. Will this work to port forward to a cellular 4g internet connection from a provider that doesn’t provide port forwarding like a standard dsl or cable ISP? I need to port forward in a rural area where only cellular internet is available. Many thanks
Dear Sir, I did not understand about WAN IP Address (192.168.11.196) in your network diagram. In my case, I have a modem (given by ISP having a public IP address) attached to mikrotik. The link between modem and mikrotik has private IP address (192.168.2.X). Now which would be my WAN IP in this case?
Hi. if you have a private address on internal side of your ISP device, then it is a router (not a modem) and you either allow DMZ to your Mikrotik or your must do port forwarding on the ISP routing to the Mikrotik for each port you want to make accessible outside. Then you should do another port forwarding on Mikrotik to your internal device behind the Mikrotik. But why you have a Mikrotik there in first place? You can see your public address (than can be static or dynamic) using Whatismyip web site.
I don't even put in ip address. I use the "IN INTERFACE" = ETH5-WAN. This rule will apply to whatever comes in the WAN interface, regardless of your public IP.
Anything inside 192.168.x.x is a private ip. A Class C private ip range. In the video he's just using it as an example. He must have 2 routers daisy chained. In this instance 192.168.11.196 is considered the 'WAN'(dst address) ip.
hi tk i have been looking for tutorial that covers on how to do a double nat with mikrotik . i didn t get any luck yet can you give me idea or refer me to a site that covers thank for your attention.
I want to port forwad to a cctv dvr this is the setting (WAN) mikrotik router dhcp range (192.168.88.10-192.168.88.254) to another mikrotik router dhcp range(192.168.30.10-192.168.30.254) CCTV DVR Ip Address:192.168.30.50 port number8000
Anything in 192.168.x.x is a private ip but in the scenario he's using it as the WAN. He must be stacking 2 routers. One router connected to another router... For this video, think of 192.168.11.196 as the WAN.
Good day sir, I am a subscriber to your youtube channel, and I have been following you all along with your videos, by the grace of God am really learning fast with your videos, but there is an issue with me port forwarding my dahua ip camera ,I have tried all possible best I cannot still get it , I dont know if it is as a result of my huawei moderm/router that is giving me internet to the mikrotik router that is the course, but when I did the port forwarding on the huawei router to the dahua ip camera I could watch it remotely, but to the mikrotik router it doesnt work, pls if need be I wouldn't mind given you access to my mikrotik router remotely for you to help me solve this problem, or if you are to do a video on dahua ip camera portforwarding just because of me I will appreciate it so much. pls attention urgently sir.
any free software i give user self registeration and get user data first name last name mobile number when user put this information user access internet
I've watched several Mikrotik port forwarding rules and they don't work. This one was simple and it actually worked! Thanks man.
Great!
Bro you make thing thing much easier "Thanks a Million"
You are welcome
Yeah. Thanks man. This is what I was looking for. Many people were talking about a public IP and I don't have that.
Thanks again.
thanks so much for these videos! very, very helpful.
good work man many blessings keep the good work to teach the world.
In the way I do it, I do not need to specify the Wan IP. My rules will work fine if my ISP change the outside IP.
General: Chain=dst-nat Protocol=tcp Port=8080 In-Interface=Wan interface
Action: Action=netmap To-address=ip of webserver To-Port=80
Simpler and works with DHCP on outside.
Cool, I have never done it that way before.
it should be 192.168.11.196:8080 on diagram.. instead of redirects 192.168.11.192:8080
Good morning,
I did it the same way as in your video with the difference that I have different ip address values. I think I should have it set up correctly. The only thing that bothers me is whether it works as it should. When I look into IP/Firewall/Nat - here I look at the created 4 port forwarding rules for one online game, so the first two rules are ( for port: 27015 and 27036 ) the other rules are for the TCP protocol and the others are the UDP protocol ( for the port: 27015 and 27031-27036 ) so I look at it and there is no data flowing at all. I still have 0 B in the Bytes column, so I doubt port forwarding is working for me :(
What if there is a modem between remote computer and router? Do I need to allow incoming connection somehow?
I have been following you ever sence, bro I have subscribed now pls continue this good work.... thanks
Hi! Thank you for this tutorial, its been helpful. Still I have another issue with Mikrotik LTE router; I am using it as a LTE sim run outdoor modem, but as soon as I want to connect a device on it via ethernet cable, it collapses… the question is how to set the ethernet port on Mikrotik to be LAN instead of router understanding ethernet cable connected is an inbound internet?
wow, thanks for the tutorial!
Wakanda foreva
I'm trying to forward a UDP port for a Game Server. By RouterOS just isn't letting it though. I tested with another basic router , and all is well, but I can't make my hap2AC forward a UDP port. Am I missing something? is there something beyond the port forwarding instructions in this video?
Perfect thanks for the step by step information
Showing WAN as 192.168.*.* is quite confusing, cause it's usually associated with the LAN IP addresses.
Hi TKSJa, I am now looking after a Mikrotik RB951Ui-2HnD Router (no experience on these as yet) connected to a VSAT modem service. I notice that on the Quickset menu screen the config for Firewall is not checked whereas the NAT box on the Local Network config is. The unit is running in Masquerade mode. I would have thought it best to have both Firewall checked as well as NAT to create 2 stage firewall security or is this incorrect? I believe this may slow the router down but I am after security. Any assistance appreciated.
Can I do SSH login to my internal server from a PC in the internet by using the port forwarding technique you have shown here?
I do not understand what to enable in DHCP client, and what in DHCP server. There are many fields, and I am afraid to mess my current working internet connection.
Hi
I hope you are fine,
I have many question
in NAT genernal you put ip and port which differnt from action port and IP kinldy explain more for that , thanks again
Thanks a log man, you made my day.
Howzit going? I have a client that has a Mikrotik and behind that mikrotik an AP has reset to default how do I find that AP and then how to I access it to reconfigure
What is your WAN ip changes because the internet provider gives you a new IP?
Great guide, exactly what I was looking for. Thanks.
Hey, thanks for the tutorials! However I am having trouble with my FTP port forwarding, I did exactly exactly as you showed in the video and I checked it 10 times that I did the exact same, but I still cant access my FTP, I cant even access it locally. I am using Mikrotik hAP AC^2, when I turn on my old TP-Link that I retired in favor of the Mikrotik, my ftp is working without touching the FTP server computer at all, so the FTP is there, its something with the Mikrotik. Is there anything additional that I have to allow/do to make it work? Everything was working fine with my TP-Link...
In my setup, this wasn't enough. I had to add the fwd firewall rule to allow incoming traffic to that port.
Hi, do you have tutorial for that rule ? For my setup, i need to port forwarding to 192.168.9.2:21 ( Port 21-FTP ) . My main IP is: 192.168.9.1 . Thank you so much sir
Hi, I have watched numerous tutorials and I am still unable to forward ports for steam. The ports i need to forward is 27001-27030 and 6112-6122 on tcp and udp. Is there any way you could possible assist me?
Hi my friend how do i connect IPSEC site to site server connection between cisco and mikrotik
I need this exactly! If you have a tutorial, please post a link as a reply
Enjoying your videos. I have been doing a variation on this - same thing except I have not been entering a value in Dst. Address and works same as yours. Are you accounting for multiple IP address on the interface or something else?
Thanks a lot man. This makes it much easier for me to manage my router. =)
Glad I could help!
how about port triggering? is this the reverse funtion ?
For some reason I cant set up my Lan ip in hyper v mikrotik.
I have two routers one is dlink router from ISP, and Mikrotik router which gets its link from the dlink. My DVR is connected to the mikrotik router. Which IP should I use white configuring port forward
The Mikrotik router WAN ip.
If you're just trying to make a connection to the DVR from within the dlink router then you just need to make one port forwarding rule inside your Mikrotik. Use the Mikrotik's ip as the 'WAN'(DST Address) and forward to the DVR ip over whichever ports you want.
If you're trying to make a connection from the WAN(public ip) then you'll have to also make a forwarding rule in your dlink as well as the one mentioned above. For the dlink, use the public ip given by the ISP to your router as the DST Address and forward to the Mikrotik's ip...
tanks for your nice videos. please can you do us a video how to configure printers in the Mikrotik Router ?
. thanks
man you rock...keep the great work up
thanks very much for this tutorial.. i have two questions.
1st, how can i filter the ip address that can access have access to the port from the internet. i.e i only want some certain IP or a certain IP address to have access to the NAS on my raspberry
2nd, my router web config is on port 80 and my apache service is also on port 80, how can i filter traffic destined to the router or apache without changing the port number. remember, once i enable port forwarding to port 80, i can no longer access my router webconfig
1. In the Src Address enter the ip you want to allow from
2. You could leave one completely alone, for instance the web server, and just change the incoming port for the router's web config. It'd be cleaner to give out a website without a port involved(website:8000 doesn't look clean). For your router web config you could come in on port 8080 or whatever you wish and just forward that to the router's ip on port 80.
Nice video. Will this work to port forward to a cellular 4g internet connection from a provider that doesn’t provide port forwarding like a standard dsl or cable ISP? I need to port forward in a rural area where only cellular internet is available. Many thanks
The device has to have port forward for this to work.
Hi. I would like to know how to port forwarding for xbox one. Thanks so much!
thank you very much.
i just want nat type 1 on my ps4 but i dont understand its a good video but i dont understand can you help me? please
How to port forward within a network with separate ip address on every port of the router
Dear Sir, I did not understand about WAN IP Address (192.168.11.196) in your network diagram. In my case, I have a modem (given by ISP having a public IP address) attached to mikrotik. The link between modem and mikrotik has private IP address (192.168.2.X). Now which would be my WAN IP in this case?
That would be your public IP.
Hi. if you have a private address on internal side of your ISP device, then it is a router (not a modem) and you either allow DMZ to your Mikrotik or your must do port forwarding on the ISP routing to the Mikrotik for each port you want to make accessible outside.
Then you should do another port forwarding on Mikrotik to your internal device behind the Mikrotik. But why you have a Mikrotik there in first place?
You can see your public address (than can be static or dynamic) using Whatismyip web site.
Please make video about how to connect ftp server through the PPTP VPN?
Why we use port number "80" on Action>To Ports: 80, instead of same port number as "8080"?
Because the port that I am forwarding to uses the same internal port.
how can you restrict The Source IP address to DDNS and it should automatically update
I don't even put in ip address. I use the "IN INTERFACE" = ETH5-WAN. This rule will apply to whatever comes in the WAN interface, regardless of your public IP.
I’m currently trying to port forward the port 30120 for my video game server but it won’t work if somebody could help me I would appreciate it
I kinda get a problem when it comes to the IP address of that replaces yours which is 192.168.11196, is that the public ip or????
Anything inside 192.168.x.x is a private ip. A Class C private ip range. In the video he's just using it as an example. He must have 2 routers daisy chained. In this instance 192.168.11.196 is considered the 'WAN'(dst address) ip.
can i use this method on pptp vpn?
hi tk i have been looking for tutorial that covers on how to do a double nat with mikrotik . i didn t get any luck yet can you give me idea or refer me to a site that covers thank for your attention.
mynr is not working trying to forward to my public ip...
Check you config again
where are you from ?
Request tutorial ip forward cctv and configure on access point or modem
I do a video on it when I get a IP camera.
port is still closed for me :(
hello sir how to port forwarding for games?
Just like in the video but replace the port numbers to match your needs.
I want to port forwad to a cctv dvr
this is the setting
(WAN) mikrotik router dhcp range (192.168.88.10-192.168.88.254)
to another mikrotik router dhcp range(192.168.30.10-192.168.30.254)
CCTV DVR Ip Address:192.168.30.50 port number8000
You will need to setup multiple port forwarding (WAN to router A to router B)
thanks
192.168.11.196 is your router ip address (Private IP Address) ?
Anything in 192.168.x.x is a private ip but in the scenario he's using it as the WAN. He must be stacking 2 routers. One router connected to another router... For this video, think of 192.168.11.196 as the WAN.
Yeah no yeah that's not a semicolon dude. It's a Colon [:] (two dots)
Semicolon [;] (dot comma)
not me trying to make an minecraft server and struggling
Good day sir, I am a subscriber to your youtube channel, and I have been following you all along with your videos, by the grace of God am really learning fast with your videos, but there is an issue with me port forwarding my dahua ip camera ,I have tried all possible best I cannot still get it , I dont know if it is as a result of my huawei moderm/router that is giving me internet to the mikrotik router that is the course, but when I did the port forwarding on the huawei router to the dahua ip camera I could watch it remotely, but to the mikrotik router it doesnt work, pls if need be I wouldn't mind given you access to my mikrotik router remotely for you to help me solve this problem, or if you are to do a video on dahua ip camera portforwarding just because of me I will appreciate it so much. pls attention urgently sir.
j aime
any free software
i give user self registeration and get user data
first name last name mobile number
when user put this information user access internet
noted
@@TKSJa i am still wating
free radius server video
Dear god miktotik sucks, even doing the simplest thing is a hassle
why not WebFig?????? noobs..