Please help me with a quick setup of Mikrotik RouterBOARD 750 router.
I made the following steps:
1) Started the router and accepted all default settings:
2) Created a PPPoE interface (set username and password, enabled the interface):
3) Opened terminal window and tested the setup with a ping:
Unfortunately i do not know what to do next. My PC is connected to ether2 port and there is no internet connection to that port. I would like to have internet connection to all ether2-5 ports.
PS: My PC has fixed iP 192.168.88.100 and there is no problem connecting to the router, you can see i used winbox to do the first settings.
Have you assigned IP address on any of the mikrotik interface from 192.168.88.0/24 subnet?
And if yes, since this is a private subnet, have you enabled NAT??
I only added PPPoE client, nothing else. But when i started the router i received this message:
I ques the following settings applied by default script to the router:
interfaces are switched
iP 192.168.88.1/24 is on switch
DHCP client on ether1
DHCP server is on switch, with adress pool 192.168.88.10-192.168.88.254
masquerade on ether1
The PPPoE interface is connected and the ping is working. My problem is that i can’t acces WAN from ether2-5. I guess that i must do some aditional settings but i do not know what ?!
I did not do any settings to NAT. Can you offer me some additional details about NAT settings ?
Thank you Rudios.
Removing the DHCP client on ether1-gateway was easy but putting the masquerade rule on PPPoE interface took me some time. But at the end i managed to find the Masquerade rule under the iP → Firewall → NAT → Action.
How i mentioned, i just put a simple Masquerade rule under the iP → Firewall → NAT → Action and now i have WAN acces on ether2-5. Not sure if this is optimal setting but for now it work. I will investigate more the router and get back with additional questions. If you have some suggestions for a newbie like me please post them here. Thank you.
The default config on the routers assumes you are getting your WAN IP from DHCP, not from PPPoE, so the NAT rule was only for ether1-gateway (which you can see there). You can remote that line now too.
Now you have added the same rule but said that the WAN interface is the PPPoE connection.
For basic setup, this is the best way to do it! Many more options you could do in future though
Thank you joegoldman. I removed the default masquerade rule from ether1-gateway and everything works fine.
I also changed Address List from 192.168.88.1/24 to 192.168.1.1/24 so in case something go wrong i can switch fast to my old router.
Now i go one step further: Port mapping. I tried but… new problems.
If you would like to direct requests for a certain port to an internal machine (sometimes called opening a port, port mapping), you can do it like this:
/ip firewall nat add chain=dstnat dst-port=1234 action=dst-nat protocol=tcp to-address=192.168.1.1 to-port=1234
In order to test this i started a web server on 192.168.1.198:15009 and a uTorrent client on 192.168.1.100:48164
I did this in telnet:
And the results:
I tested if the ports are open using the tools from: http://my-addr.com/
The results are positive, the ports look open:
Unfortunately, I can’t access the web server from exterior and the uTorrent client is also not working.
Can’t believe such a simple thing like port forwarding is so complicated on this Mikrotik routers.
Why i can’t access my web server hosted on 192.168.1.199:8080 from the WAN ?
Thank you very much Rudios. You made things now clear to me. So the settings are correct only if web server is accessed outside the LAN. I tested outside the LAN and it works. I can access the web server with the local iP, that’s no problem for me. I accessed it with the WAN iP only to test if port forwarding works (this method worked with my previous router).
So the port forwarding problem is solved for the moment. Thank you all for support.