Can't call static IP from private network

RouterOS General
1

Hi all,

I have problem with my settings on RB2011UAS-2HnD. The issue is that static IP provided by ISP is reachable from the internet but not from the office / private network.

Here is the settings: eth1/PPPoE is ADSL connection with provided static IP, eth2 is 192.168.254.1/24…there is Masquerade on PPPoE port thus eth1-gateway.

we have webserver in the office, it has netmap with dstnat on mentioned static IP.

when I am trying open website from 192.168.254.1/24, it doesn’t work.

can you please advice what can I do?

Thank you

2

Probably you will need a hairpin-nat rule.
http://wiki.mikrotik.com/wiki/Hairpin_NAT

3

Thank you, I will try it. Can I keep original masquerade and add this one on the top?

4

You have to keep your original one. Put a new one just below that.

5

I’ve tried hairpin-nat and it didn’t work, it looked like that port forwarding stopped working. I added out-interface eth2 which is office.

Here is my settings of this NAT:

/ip firewall nat
add chain=srcnat src-address=192.168.254.0/24
dst-address=192.168.254.235 protocol=tcp dst-port=80
out-interface=ether2 action=masquerade

Can you please tell me where is mistake?

There is also this NAT:

/ip firewall nat
add chain=srcnat
out-interface=pppoe-out1 action=masquerade

Thanks

6

Done! I haven’t use interface-out and it started working. Thanks