Thank you for the suggestions, I think using the console port or the USB port is my only option I had left 192.168.88.1 on ether 10, but that is also connected to a bridge, I'm learning some hard lessons. I have been reconfiguring other routers so that 192.168.88.1 is on it's own port WITHOUT a brid...

Unfortunately I have disabled winbox access, I only have HTTP access enabled.
David.

Thank you for the reply, 192.168.121 etc, is used on another router, I'm using that one at present.
Bur I cannot access the router that I set the restrictions on, it's still working, but I cannot get into it to configure it.
David.

I have 5 off RB3011 OS version 6.49.6 linked by OSPF, I noticed that somebody was trying to access one of the routers via it's public IP, they did not find my password. I decided to add to ip/services an available from address, as I have done to my CSS106's, I added 192.168.121.0/24. This blocked al...

Good Morning, I don't know how much help I can be, I got a /29 subnet working, with lots of help and guidance from Sindy. I did not disable NAT or use RIPv2. I started off with a post from 2014 from which I extracted the following:- ip firewall nat # Nat everything for Server1 add chain=srcnat actio...

Hi Sindy, I have solved the problem, The scr-nat and dst-nat rules only work on IP's that are 'homed' on the router, even if they do appear in the routes table from the OSPF settings. What I have done is set up a VLAN to the routers that require a public IP, and given the devices an IP from the PPPo...

Hi Sindy, Thank you for the reply. I have replaced the 192.168.121.200 with a local address on the PPPoE router, and that works fine, the address 81.143.42.218 is still enabled if you wish to try it. It connects to a thin client running Devuan. To my way of thinking this is therefore an OSPF issue, ...

Hi Sindy, I can access 192.168.121.200 from another connection to my LAN. I have tried accessing 81.143.42.218 from my LAN which will route it over the fiber connection, I've also got a 5G backup with Vodafone, using this interface gives the same results, the dst-nat counter counts, but no connectio...

Hi Sindy, Sorry for the confusion I've caused. As far as I can tell nothing, in-going or out-going is working. I have setup a test Mikrotik router on my network with the address of 192.168.121.200, the router is a RB2011UAS. I can access this router using 192.168.121.200, but I cannot access it with...

Hi Sindy,
The private IP I want to use is 192.168.121.200
The public IP I want to use is 81.143.42.218
David.

Hi Sindy, I think I have confused you, the port forwarding for GB3WK & GB3MW is working. I still cannot access private IP's when allocated with a public IP. If I use dst-nat and src-nat do I need to allocate an in-interface and out-interface? If so I presume pppoe-out is my in-interface? Is my o...

Hi Sindy, Thank you for the reply. The 'ping' problem is now resolved. I still cannot access private IP's when allocated with a public IP. If I use dst-nat and src-nat do I need to allocate an in-interface and out-interface? If so I presume pppoe-out is my in-interface? Is my out-interface the pppoe...

Hi Cindy, Sorry for the delayed response, work got in the way. I think I've found the issue why I could not 'ping' certain addresses, in the latest router under OSPF, Instances, I had not allowed Redistribute Connected Routes. The routes for GB3WK & GB3MW are to allow the repeaters to talk to an...

Hi Sindy, Does this help? David. # nov/20/2023 11:47:33 by RouterOS 6.49.9 # software id = SIEV-7BGG # # model = 960PGS # serial number = A51709BED650 /interface bridge add name=Lo0 add name=Lo1 add name=Lo2 add name=Lo3 add name=Lo4 add name=Lo5 add name=Lo6 add name=Lo7 add name="bridge 208&q...

Hi Sindy,
I've tried to export a file, but it's not readable.
Can you suggest a method to obtain a plane file that I can edit?
David.

Hi Sindy, Thank you for the link to a previous post, I can't understand it, I need to spend more time reading it. What I have done that has had mixed results is change the router, now it's a hEX PoE known as RB950PS, with this one I can move /firewall/nat rules as expected with Webfig. I set up a lo...

Hi Sindy, The more I try with the RB850Gx2 router the more I doubt it's integrity, I logged into it with a windoze box and Winbox and found I could move the NAT rules as I wanted. But that caused me more issues, I had set up the scr-nat and dst-nat rules to try and allocate a public IP to a test rou...

Hi Sindy, Thank you for the reply, I'll try the command line instructions a little later. Something odd here, the dst-nat rules I entered, port forwarding for a local amateur repeater, were below the masquerade line when I entered them, and would not move, now they are in the correct place above the...

Dear Sindy, Thank you for the very prompt reply. Am I correct in thinking that both the scrnat and dstnat rules must be above the masquerade rule? I've tried dragging and dropping the dstnat rules, and they don't move, I am using a Linux machine and WebFig. I have just added some more dstnat rules f...

Dear Sindy, I am confused, I have been looking at many posts to try and get a PPoE connection with static IP's working. The PPoE connection works fine and gives me a dynamic address. My ISP has given me a /29 block of addresses to use. A post from 2014 suggested adding all 8 addresses to a loopback ...

Morning James, I know your post was from a long time ago, did you get a reply about using static IP's with a dynamic PPoE service.
Thank you in advance, David.

Thank you for the replies.
What I was hoping for is a working configuration, so I could see how it works.
Thank you,
David.

I have found various posts about this subject, but I cannot get them to work, can anybody help me please? The dynamic IP from the ISP works well. I'm trying to add the static IP's One example showed how to add the static IP's as a loop-back address, when adding the Firewall NAT section, the dst-nat ...