Anything yet? This post is from last year. Please we need it @mikrotik

Did you've tried enabling the rule? i mean disabled=no add action=drop chain=input disabled=yes dst-address=10.77.0.2 protocol=icmp \ src-address=10.76.14.13 Hi guys, I have a problem and maybe you can help me: I have a MK that is doing PPPoE server. It releases an IP address NAT 10.76.14.0/24. The ...

Thanks Yes i keep certain subnets off the internet, and i do that because is the way to allow only the subnets you want to be "natted" It's better to block traffic than to just break it by breaking layer 3..... (see below) Oh interesting, I never thought of doing that. Do you do this so yo...

Yes i keep certain subnets off the internet, and i do that because is the way to allow only the subnets you want to be "natted" Thank you for the help! It was in fact the masquerading that was missing. From my config you can see I configured it (since I read about it somewhere) but it look...

Thank you for the help! It was in fact the masquerading that was missing. From my config you can see I configured it (since I read about it somewhere) but it looks like I never actually enabled it. Once the rule was enabled then everything worked great. Telnetpr, while you're not wrong, this config...

yes, I have this route: 0 A S dst-address=172.30.0.0/16 gateway=172.30.x.x gateway-status=172.30.x.x reachable via ether1-gateway distance=1 scope=30 target-scope=10 routing-mark=to-172 Try your masquerade only with the source address. And see what happen chain=srcnat action=masquerade src-address=...

Select your external interface or in. Interface

Did you create the static route with the new routing mark ??

In the DST NAT RULE you need to specify your public IP address in the dst-address

Verify in the bridge settings in STP TAB is set to NONE, default is RSTP in bridge settings in STP tab i set NONE, yes. But it not resolved the problem. I understand that the loop can not be in my network, in this case tunnel go down only when connected to an access point wi-fi customers. Run a deb...

Read This

http://wiki.mikrotik.com/wiki/Hairpin_NAT

This are Public IP Address

https://192.254.6.50:8080 it open my monitoring map

try this...

That's the way you want to use it... it works ahead port forwards... For example i can use my public ip address to access my services inside my network using port forwards.. For example: https://192.254.6.50:8080 it open my monitoring map https://192.254.6.50:8081 it open my UBiquiti Air Control Ser...

You mean to create a ptp link between 2 routers with differents isp? You can use IPsec for security but cant use OSPF because IPSec dont allow multicast, or EoIP Tunnels.

in winbox you can do this like this

You need port forwards to forward the traffic you want using the public ip. You need to determine which port you need to forward for example PC 1 - 192.168.1.100 PORT: 5050 PC 2 - 192.168.1.101 PORT: 5051 and so on. You need to configure the devices you want to access with an static ip address. Then...

i dont really understand your needs

-You are at your home and you want to see your cameras using the private ip address? If this is the problem then you need a VPN(PPTP).

- If you are in your home and want to see your cameras using your public ip address then you just need a port forward.

I can use this port forward using my public ip from the inside of my network.

Well, a simple port forward should work...

If you want to see your CCTV from the inside you just need your private ip address of your DVR, if you want to see your CCTV from outside your network then you need to setup your port forwards..

So what exactly you need?

i think you want to do is a 1 to 1 NAT ?

Or use a different public ip address for that private range range?

You need to configure a source address in your NAT RULE, like this

the external ip address is configured in the router itself or is in another device? The troubleshooting for this is: telnet from the outside to that port Example: telnet 69.69.69.69 943 And telnet from inside to 192.18.1.101 943? whats the output ? Do you see a blank window? or just say the connecti...

Try this ip firewall mangle add chain=prerouting src-address=192.168.0.0/16 action=mark-routing new-routing-mark=TEST And the route ip route add dst-address=0.0.0.0/0 gateway=192.168.0.1 distance=2 routing-mark=TEST IP ADDRESSES ARE JUST FOR EXAMPLES YOU JUST USE YOUR GATEWAY AND IP ADDRESS BLOCKS A...

Verify in the bridge settings in STP TAB is set to NONE, default is RSTP

I forgot my Mikrotik Winbox password and I do not have a backup configuration file either. Can some please tell me how can I recover it in this scenario as I do not want to lose my configuration. There's no way, the only thing you can do is reverse engineering to write the current configuration and...

in my opinion in your design right now policy routing is the best option

What about bridging your WAN with your lan port?

Same problem with a Air Grid and a CC, i change Flow Control to ON in the CC interface and the packet loss stop locally and it stop the warnings.