Bridge makes impossible port forwarding?

RouterOS Beginner Basics
1

Hello.
I’m using MikroTik 1100AHx2 (routeros 6.2) as main router.

Ports 1-5 united in Bridge-1.
Ports 6-10 united in Bridge-2.
Port 11 - used for connecting router to LAN.

We have main and reserve ISP’s, so port 1 - for main, port 6 - for reserve.
IP addresses set up for port 1 and 6, other gateways, like Cisco 2911, Vyatta OS, MS ISA are connected to ports 2-5.
Same scheme will be used for reserve ISP.

Bridging works well - all gateways have access to internet and can build ipsec tunnels, can forward ports, but port forwarding from Mikrotik to LAN is not working.
I’ve followed this instruction:
http://wiki.mikrotik.com/wiki/Forwarding_a_port_to_an_internal_IP

Also, I have problems with creating IPsec tunnels, may be it’s all because same problem.

Can you explain, what is wrong?
What part of config you want to see, to troubleshoot? (most of it was set up by WinBox)

2

Bridging is a layer 2 function. Basic routing is a layer 3 function. Port forwarding is getting into layer 4. If you want access to IP Firewall functions while bridging then you need to set bridging to use IP Firewall.

3

Thank you!
It’s very strange behavior - when i set parameter “use-ip-firewall” to “yes”, i’ve lost all connections (because firewall rules for bridge wasn’t created), but after setting it up to “no”, connectivity is returned and got working dst-nat functionality! Now i can forward ports from internet to LAN without using ip firewall in bridge!!
Is it bug or what can it be?