My network is as following.
I can’t access CPE from my PC.
Any suggestion.

My network is as following.
I can’t access CPE from my PC.
Any suggestion.

Route is missing. Is cpe yours or does it belong to the provider? Maybe it has rule that disables access from wrong ways.
CPE belongs to me. I have configured the CPE myself. Can you please post me the route??
The route is there, since the WAN port is in the same subnet as the CPE.
What is probably missing are the forward rules allowing traffic from 10.55.0.1 to 172.18.34.xx and back.
I have added the forward rule and its counting packets but can’t access the cpe.
chain=forward action=accept protocol=tcp dst-address=172.18.34.153 dst-port=80
Can you ping, or telnet/ssh to the CPE from your router?
Yes, I can ping CPE from Mikrotik.
Try add a reverse rule, too:
chain=forward action=accept protocol=tcp src-address=172.18.34.153 dst-address=10.55.0.1
Or to start with, open complete forwarding from WAN to LAN and back on interface basis for all protocols and ports. Filter later more precise, after it works…
Its not working..
In this case you need to MASQUERADE to the WAN interface IP. Your CPE is probably accepting only connections in the proper IP range.
Thanks for the help. Its working now…
Have fun with it ![]()