Hello,

i have problem with right setting my mikrotik firewall.
I would like to get access to my web page, which is running on arduino.

I have found a lot of manuals, but none of them worked.

1st router from my ISP:
WAN side 84.19.xx.xx
LAN side 10.0.0.138

2nd router Mikrotik
WAN side 10.0.0.10
Wlan side 192.168.2.1

Arduino
IP 192.168.2.250

I have tried to set DMZ on the first router from ISP and i succefully get access to the mikrotik, but i cannot get access to the arduino.
Any idea how to do that right?

Do you have control of the first router?
Can you program it at all?
If not DMZ usually has drawbacks and its much better to ask your IP to simply make the modem/router a modem and for it to pass its WANIP (pass through mode).

Assuming you only have NAT on the externally facing router and your internal routing between the 10. and 192. subnets is set up correctly, I can't think why the second router is relevent.

Asuuming NAT is in play only on the first router then you would on the 1st router just need to enable port forwarding for port 80, 443 etc. to 192.168.2.250. The internal routing without NAT should then take care of the routing to the second subnet. If there is a firewall on the second router that will need configuring too, but it would be a simple rule to pass web traffic to the server.

If you are using NAT on the 2nd router, then things get more complex.

Perhaps I'm looking at it too simply and missing something important.