Allow connection from Public to Local side in the hotspot

RouterOS General
1

Hi evryone

i have a hotspot with gateway 192.0.2.1 configured on ether3 & on he public side ip 10.11.12.126 configured on ether 2.
i connected a wireless IP camera ( ip 192.0.2.254 ) to the hotspot & created an IP Binding to let the camera bypass the hotspot.

Could anyone please help me how to let the a PC ( ip: 10.11.12.14 ) located on the public side to access the camera ?

Thank You

2

yes..
you are rigth...ip-binding behind hotspot server as dedicated line to the camera, now when you will allowing from public to local one. just put network translation for, one public for your router and one public for address translation to it local one and put together on your router.

i think this link will help you:

regrads
Hasbullah.com

3

Thank you Balimore

i Added one IP Address to the public interface 10.11.12.140.

i created as you show me 3 rules:
( dst-nat: from the new public address to the camera )
ip firewall nat> add action=dst-nat chain=dstnat \ dst-address=10.11.12.140/32
to-addresses=192.0.2.254

( src-nat: from the camera to the new public address )
ip firewall nat> add action=src-nat chain=srcnat \ src-address=192.0.2.254/32
to-addresses=10.11.12.140

( scr-nat: other internal hosts to main router public address )
ip firewall nat> add action=src-nat chain=srcnat \ src-address=192.0.2.0/24 to
-addresses=10.11.12.126

is that correct? because now i can ping the main router public address 10.11.12.126 with reply, but no reply for 10.11.12.140.
& if i try on the web browser i get Mikrotik Routeros administration page. while im sure the camera is connected.

Best Regards

4

yes,
we are trusting to you, your hotspot and camera great and connected.... :wink:

when correct config our logica and suggestion like this:
by pinging
every public ips should be reply... [ofcourse without dropping icmp protocol on network]

by browser to
http://10.11.12.126/ [should be Mikrotik Default Page/Mikrotik Main Web Interface]
http://10.11.12.140/ [Mikrotik Main Web Interface killed by your Default Web Page on Camera]

all traffic from 10.11.12.140 should translation to 192.0.2.254.
so, we are so sorry never try with online camera, but we have this methode on our network until now is great...
becareful behind hotspot will unreachable when incorrect config to your camera.


regards
Hasbullah.com

5

Thank You So much, its working great now. :slight_smile: :slight_smile: :slight_smile:

The problem was that the computer im using to connect to the camera is not included in the Ip Binding list, after i added its working fine, so the 10.11.12.140 going to the camera.

If i remove it from the Binding list & try to connect the camera, i have to pass by the Hotspot authentication page, i enter my username / password, then i got redirect to Mikrotik Main Web Interface.

Happy to see it working, Thanks for everybody & for Mikrotik.

Best Regards Balimore & Thank you for your help & time.