Community discussions

MikroTik App
 
vincentvega
just joined
Topic Author
Posts: 7
Joined: Tue Nov 04, 2014 10:48 am

NAT dont work

Wed Mar 18, 2015 10:37 am

hi i have problem i cant solved and guy from mikrotik.org.pl too.
i have DVR ip 192.168.88.240 with port 8090.37777 my statick ip from my isp 176.109.160.xxx

i have this settings;
ip-nat- action=dstnat dstaddress=176.109.160.xxx protocol=6 tcp port =37777,8090 action=dstnat to address =192.168.88.240

i insert some pictures about my net setup .look like my statick ip address is anreachble in route list ,my statick ip address is 176.109.160.xxx but my address in route list is 10.1.10.144 pppoe-out
please help, my problem going for months.mikrotik consultants can`t solved this problem
 
User avatar
hossain2004a
Member Candidate
Member Candidate
Posts: 247
Joined: Mon Dec 22, 2014 7:34 pm
Location: Iran

Re: NAT dont work

Wed Mar 18, 2015 5:14 pm

Actually this is not a place to state your problem, you should do it in Beginners or general.

But.
to solve your problem for port forwarding for DVR;
If your DVR is like mine, so You need two NAT, it describe here:
http://forum.mikrotik.com/viewtopic.php?f=2&t=94998
 
vincentvega
just joined
Topic Author
Posts: 7
Joined: Tue Nov 04, 2014 10:48 am

Re: NAT dont work

Wed Mar 18, 2015 7:24 pm

Thanks for help hossain2004a but your solution don`t work on my router.Sorry i use not right place on forum for my problem.i post some pictures from my router state. in past i use rule posted by Forum Guru ;
/ip firewall nat
add action=dst-nat chain=dstnat dst-address=xxx.xxx.x.xxx dst-port=8090 \
protocol=tcp to-addresses=zzz.zzz.zz.zzz
add action=dst-nat chain=dstnat dst-address=xxx.xxx.x.xxx dst-port=6001 \
protocol=tcp to-addresses=zzz.zzz.zz.zzz
add action=dst-nat chain=dstnat dst-address=xxx.xxx.xx.xxx dst-port=6002 \
protocol=tcp to-addresses=zzz.zzz.zz.zzz

my ports TCP-8090,37777 and UDP-37778,8090

i mask ip numbers

and i include udp port add action=dst-nat chain=dstnat dst-address=xxx.xxx.xx.xxx dst-port=37778,8090\
protocol=udp to-addresses=zzz.zzz.zz.zzz

xxx-static ip
zzz-dvr

/ip firewall filter
add chain=input dst-port=8090,37777 protocol=tcp action=accept
add chain=input dst-port=8090,37778 protocol=udp action=accept


the guy from the shop i buy this router look on the setup of my network from teamviver and he told me nat is not going to work because my statick ip is anreachble .my ISP use UBNT on one side i have my statick ip 176.109.xxx.xxx and on my side of UBNT i have 10.1.10.xxx.please look pictures.but i use ddwrt router and work fine .Please help and if anywone can tell me way my static ip is anreachble in my /route list/ on my router.Thanks for help.
 
User avatar
hossain2004a
Member Candidate
Member Candidate
Posts: 247
Joined: Mon Dec 22, 2014 7:34 pm
Location: Iran

Re: NAT dont work

Thu Mar 19, 2015 8:54 am

There is no picture here. I can't see it.
and
I don't have any experience in Static IP, because I didn't use it and it's very dangerous for me to use it (security reasons :D ) so don't know when static IP is unreachable. so other guys should help you :D

Just temporary solution:
use DDNS
 
vincentvega
just joined
Topic Author
Posts: 7
Joined: Tue Nov 04, 2014 10:48 am

Re: NAT dont work

Thu Mar 19, 2015 9:20 am

Sorry for pictures but i can`t post them from atachments and i don`t see the message box.
 
User avatar
ZeroByte
Forum Guru
Forum Guru
Posts: 4047
Joined: Wed May 11, 2011 6:08 pm

Re: NAT dont work

Thu Mar 19, 2015 11:53 pm

If your Mikrotik has no public IP on it, then you're behind double NAT.

Go to ipchicken.com from a computer behind the Mikrotik.

If the address it shows is not to be found anywhere on your Mikrotik, then you're definitely behind double nat.
You will need to get whatever device DOES have the visible public IP address to do NAT translation back to your Mikrotik.
Then you can nat - make sure the rules in your dstnat chain use the IP of the wan interface of your Mikrotik.

(actually, I avoid using IP addresses in nat rules and filter rules as much as possible - you can just as easily specify dst-port=8080 and in-interface=WAN - I like this method better because if you ever do need to change your IP address, then you don't need to remember to go change it in dozens of firewall rules too.)

Even if you get the public IP router to forward those ports to your Mikrotik, and you forward them again to the DVR, - it's not a guarantee that it will work, because some services are broken by double nat no matter what. If this is the case, you're better off having the UBNT static route to your LAN and turning off NAT on the Mikrotik entirely.
 
vincentvega
just joined
Topic Author
Posts: 7
Joined: Tue Nov 04, 2014 10:48 am

Re: NAT dont work

Fri Mar 20, 2015 10:29 pm

Mikrotik support sucks!!!!!!!!!!!!!! you buy product and you have support for 30 days by @.this how you care for costumers 30 days./Support is only for paying customers/ NO!!!!!! LIARS!!!!!!! i buy 3 routers and i have no support .andf if you have problem mikrotik side tell you to hire a certified consultation specialist. 25euro for set up NAT,NICE!!!!mikrotik now how to support costumers?my router cost 21euro./users should pay for the license to receive support/NO!!!!!!LIARS!!!!!!!!!!! i pay no support, only for 25euro i can get support.now i know how you make your money ,costumer support.
 
User avatar
bax
Member Candidate
Member Candidate
Posts: 268
Joined: Mon Dec 20, 2004 8:45 pm
Location: Croatia

Re: NAT dont work

Sat Mar 21, 2015 9:32 am

Mikrotik support sucks!!!!!!!!!!!!!! you buy product and you have support for 30 days by @.this how you care for costumers 30 days./Support is only for paying customers/ NO!!!!!! LIARS!!!!!!! i buy 3 routers and i have no support .andf if you have problem mikrotik side tell you to hire a certified consultation specialist. 25euro for set up NAT,NICE!!!!mikrotik now how to support costumers?my router cost 21euro./users should pay for the license to receive support/NO!!!!!!LIARS!!!!!!!!!!! i pay no support, only for 25euro i can get support.now i know how you make your money ,costumer support.
Tell me something : If you buy let say Linksys router does you expecting that they (Linksys) will setup router for you ?
offcourse NOT ... then if you want to setup any router you must read documentation.
Mikrotik is linux based so it was complicated ... if is too much complicated for you ... you must pay someone to setup.
If you dont want to pay ... sell your router and buy some other router which is not such complicated.
Here in forum we are ordinary users like you and nobody "must help you" :D
And yes Mikrotik is good . Wherewer you say. :)
 
vincentvega
just joined
Topic Author
Posts: 7
Joined: Tue Nov 04, 2014 10:48 am

Re: NAT dont work

Sat Mar 21, 2015 1:16 pm

Bax first linux is not complicated .Windows is.i use linux for 10 years and i don`t have problem.i was not talking about setup but about support.and if you talking about /linksys/ one time i have problem i call them and they fix my problem in 5 minutes.i send 10 @ to mikrotik no answer .and i not saying Mikrotik is bad ,Mikrotik make best routers.i talking about support.and on ther side mikrotik saying /Support is only for paying customers/ i pay NO support!and im not saying users on this forum /must help me/. because i dont have support from Mikrotik i need look on forums like this .And next thing im nat superhumen like YOU BAX who knows everything .im simple man who like learn new stuff, and some times you run in problems.and i like solf problems not sell my routers.
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

NAT dont work

Sat Mar 21, 2015 2:21 pm

I have never paid mikrotik for any special support. Just bought their devices. Whenever I consider anything to be a bug I sent message to support and they never replied to hire a consultant. They sometimes are not right with their answers, but they are always kind and trying to solve problem. I already managed to force them to make some software corrections based on my bug reports.

You didn't provide any information about what you asked for and what exact answer you got so we cannot judge...

If you understand what are you doing and if you can read documentation and use Google, you would not need any support normally with mikrotik devices.
 
User avatar
hossain2004a
Member Candidate
Member Candidate
Posts: 247
Joined: Mon Dec 22, 2014 7:34 pm
Location: Iran

Re: NAT dont work

Wed Mar 25, 2015 3:45 pm

Completely agree with this.
Even I remember I gave them access to connect remotely to my RB, so that they can fix it. SO no problem with them.
As I'm in business and such thing like this, I cal tell you if you insult your customer, so He will not buy from you again. and Mik Sup is not crazy to do such silly things ....
 
User avatar
ZeroByte
Forum Guru
Forum Guru
Posts: 4047
Joined: Wed May 11, 2011 6:08 pm

Re: NAT dont work

Wed Mar 25, 2015 4:51 pm

my statick ip address is 176.109.160.xxx but my address in route list is 10.1.10.144 pppoe-out
According to this, you do not really have the static IP on your mikrotik - the ISP is doing 1:1 nat to your private IP.
Your nat rules always show your public IP. Use the 10.1.10.144 as the dst-address=xxx.xxx.xxx.xxx in stead of the public IP.

And honestly...
Mikrotik support sucks!!!!!!!!!!!!!! you buy product and you have support for 30 days by @.this how you care for costumers 30 days./Support is only for paying customers/ NO!!!!!! LIARS!!!!!!! i buy 3 routers and i have no support .andf if you have problem mikrotik side tell you to hire a certified consultation specialist. 25euro for set up NAT,NICE!!!!mikrotik now how to support costumers?my router cost 21euro./users should pay for the license to receive support/NO!!!!!!LIARS!!!!!!!!!!! i pay no support, only for 25euro i can get support.now i know how you make your money ,costumer support.
This is unacceptable behavior.
Be reasonable - if they paid engineers to sit on the phone with newbies all day, then their routers would cost a lot more than 21 euros or else they would go bankrupt.

Would you yell and scream at Cessna if you bought an airplane and their salesman wouldn't teach you to fly it?

Who is online

Users browsing this forum: No registered users and 2 guests