1:1 Nat from ISP Can't port forward

RouterOS General
1

I have requested some form of bridging/PPoE access from my ISP so I can control my connection through a Mikrotik RB750.

The ISP replied that they only offer 1:1 NAT for business clients (as myself) and have routed all the traffic to a designated internal IP.

My current setup is:

ISP Modem
WAN IP: 213.x.x.x
LAN IP: 192.168.0.254

Mikrotik
Interface 1 = WAN IP: 192.168.0.1
Interface 2 = LAN IP: 192.168.1.1

I have added 2 nat rules as adviced here: http://forum.mikrotik.com/t/1-1-nat-for-outgoing-and-incoming-connections/19398/1 and the internet connection works fine. The problem is I cannot take any incoming connections even though I specifically add a NAT/Firewall rule for it. My ISP says there’s no issue on their end and I have disabled the firewall on both routers (disabled on ISP/accept all on mikrotik).

Anyone got a clue what’s wrong?

P.S. On the netmap rules it seems like the external IP (213.x.x.x) and the local Modem IP (192.168.0.254) are interchangeable. At least I saw no difference when using one over the other.

2

Probably you don’t need netmap, you rather need (a few) simple DST-NAT rules … where dst-address is router’s WAN IP address (192.168.0.1) … router knows nothing about real WAN IP, it is already hidden by ISP’s modem.

3

@mkx You were right dst-nat and src-nat entries were correct, not netmap.
Although 1:1 Nat should bypass the ISP modem NAT table this wasn’t the case. I created a NAT rule on the modem and the port opened… My ISP is investigating the issue atm, probably gonna replace my modem.