Community discussions

MikroTik App
 
amolea
just joined
Topic Author
Posts: 3
Joined: Sat Jul 25, 2015 5:55 pm

access router from internet

Wed Nov 09, 2016 3:41 pm

Hello all,
I just bought an hAP and I'm very happy with it how it's working. Anyway, I'm stuck with setting up rules for accessing via internet. For initial setup I've connected from my ex router and all was quite simple and straight forward. I'm using PPPoE and a dynamic DNS. I can access my NAS and another computer (Raspberry) connected to it but I can not connect via WinBox. I tried port forwarding but nothing. Any help will be appreciated.
Thanks,
Alex
 
Rudios
Forum Veteran
Forum Veteran
Posts: 977
Joined: Mon Mar 11, 2013 12:58 pm
Location: The Netherlands

Re: access router from internet

Wed Nov 09, 2016 3:45 pm

The best way is to port-forward (dst-nat) an explicit outside port to the internal ip address of your routerboard, port 8291 (default winbox).
Additionally you probably need an allow rule in your firewall filter input chain.
 
amolea
just joined
Topic Author
Posts: 3
Joined: Sat Jul 25, 2015 5:55 pm

Re: access router from internet

Wed Nov 09, 2016 4:53 pm

not working, I already tried.

chain=dstnat action=dst-nat to-addresses=192.168.88.1 to-ports=8291 protocol=tcp in-interface=pppoe-out1 dst-port=8291 log=no log-prefix=""

for filter rules, I have default rules.
 
Rudios
Forum Veteran
Forum Veteran
Posts: 977
Joined: Mon Mar 11, 2013 12:58 pm
Location: The Netherlands

Re: access router from internet

Wed Nov 09, 2016 8:21 pm

not working, I already tried.

chain=dstnat action=dst-nat to-addresses=192.168.88.1 to-ports=8291 protocol=tcp in-interface=pppoe-out1 dst-port=8291 log=no log-prefix=""

for filter rules, I have default rules.
If you have default rules, you should add one for allowing traffic after dst-nat.
 
janus20
Member Candidate
Member Candidate
Posts: 108
Joined: Thu Nov 03, 2016 10:31 am
Location: Pitesti, Romania

Re: access router from internet

Wed Nov 09, 2016 10:17 pm

Hi,

If your winbox port is still 8291, try this:
/ip firewall filter
add action=accept chain=forward dst-port=8291 comment="Accept connections from Winbox" in-interface=pppoe-out1 log=yes protocol=tcp
kind regards,