Hi guys pls need help since im very new to Mikrotik
here’s my set
my pfsense ip is 172.18.0.1
my mikrotik wan ip is 172.18.0.3
my lan ip from mikrotik is 192.168.6.246
my question is how can i get to pfsense gui? on this set up
- Allow access to 172.18.0.1 in Mikrotik firewall from your LAN. This means you need to edit existing firewall rules.
- Add DST-NAT rule in Mikrotik so when reaching 172.18.0.1 your src-ip is rewritten to 172.18.0.3.
Also your configuration is questionable in overall, but above solution should work.
What you said makes no sense to me, erkexzcx ability to see through your encrypted post is amazing. 
Seriously if the pfsense router is behind the MT, then it must be on an MT subnet.]
The wanip of the MT, is not going to be a private address its going to be a public IP.
In fact the WANIP of the MT is not even relevant here from what I can tell.
What can be stated is that the WANIP of the pfsense is also its LAN IP on the subnet of the MT>
Best you describe with a network diagram if able.
In summary what I think you are saying is that the MT has at least two different subnets one of which houses the pfsense, the other subnet the normal LAN subnet of users which of is you
YOu wish to be able to configure the pfsense.
To get to the pfsense why not a simple firewall rule.
add chain=forward action=accept in-interface=lansubnet source-address=yourDevicelanIP dst-address=lanIPofpfsense.
here my sample
so from my pc which is the 192.168.6.246 I just want to access the pfsense gui
Please post full mikrotik configuration: execute /export hide-sensitive file=anynameyouwish, copy resulting file to your PC, open it with plain text editor, copy-paste complete contents here (enclose it in [__code] [/code] environment).
Does pfSense know anything about LAN subnet 192.168.6.0/24?