Access DSL from LAN Side

RouterOS Beginner Basics
1

Hello I’ve done plenty of searching and trying the suggestions with no luck.

I have an SmartRG SR505N DSL Modem setup in Bridge mode with IP 192.168.0.2. My current subnet is 192.168.5.XXX.

I’ve added the follow NAT rule:

 ;;; NAT access to adsl modem
      chain=srcnat action=src-nat to-addresses=192.168.0.2 
      dst-address=192.168.0.2 out-interface=ether1-gateway log=no 
      log-prefix=""

I’ve also added the following address:

 1   address=192.168.0.1/24 network=192.168.0.0 interface=ether1-gateway 
     actual-interface=ether1-gateway

No luck. If I plug in my Windows tablet directly into the modem and set my IP to 192.168.0.5 and my Gateway to 192.168.0.2 I can login to the Admin page of the DSL modem without issue.

Appreciate any suggestions.

PS> As a newbie to RouterOS and MikroTIk, can I just say what a wonderful product this is! Coming from an older ASUS/Linksys/Dlink world with WW-DRT or Tomato firmware - wow a night in day difference in performance and functionality - love this product.

2

:smiley:

What is your Mikrotiks’s IP? (the one you connect to it via Winbox)

3

Scrummy,
I made an access to the ADSL-modem from WAN and from LAN (using access rights).
I’ll just show my config.

ADSL-modem is in bridge mode.
modem’s Web-port was changed from 80 to 9080
mikrotik’s ethernet port connected to modem has a name “eth2”, and ip 172.16.18.22/30
modem’s ip = 172.16.18.21/30
mikrotik LAN subnet = 192.168.200.0/24
allow access for external ip addresses = 175.15.x.x and 183.13.x.x
wan interface=pppoe-out

/ip address
add address=172.16.18.22/30 comment="For access to ADSL-modem" interface=eth2 network=172.16.18.20

/ip firewall address-list
add address=192.168.200.1-192.168.200.254 comment="Access to ADSL-modem" list=access-adsl
add address=175.15.x.x list=access-adsl
add address=183.13.x.x list=access-adsl

/ip firewall filter
add chain=forward comment="Allow access to ADSL-modem from Lan and Internet" dst-address=172.16.18.21 dst-port=9080 protocol=tcp src-address-list=access-adsl

/ip firewall nat
add action=dst-nat chain=dstnat comment="NAT access to ADSL-modem from Internet" dst-port=9080 in-interface=pppoe-out protocol=tcp src-address-list=access-adsl to-addresses=172.16.18.21
add action=src-nat chain=srcnat comment="NAT access to ADSL-modem from LAN" dst-port=9080 protocol=tcp src-address-list=access-adsl to-addresses=172.16.18.22

Then you need to reboot ADSL-modem.

4

Thank you both for your replies.

I had been playing last night and actually was able to access the modem by setting the Address to 192.168.0.5 instead of .2.

For a few hours everything was working perfectly, then this morning everything went wrong. When I looked at my router, my TX on my Gateway port was saturating the connection. I reverted the changes I made, but still it wouldn’t work.

I then replaced my DSL modem with a new one, and still nothing. Then about 4 minutes after changing my modem everything settled down again and my TX dropped to a small amount of traffic. It’s been fine since.

Now one thing I’ve noticed in various posts is that people are re-directing port 80. Why is this being done, as I had not done this.

5

You should set your public interface with IP 192.168.0.1 and add the following rule to ip/firewall/nat:

/ip firewall nat
add action=masquerade chain=srcnat comment="NAT ADSL router" dst-address=192.168.1.0/24 out-interface=ether1

regards