Cisco Conversions

Good Day,

Wondering if anyone could help me. I am going to install an MTK at a clients side and he ahs a few rules i wish to convert from his Csico setup to MTK.

One rule he has is

ip nat inside source static tcp 172.17.8.50 445 interface FastEthernet0/1 445

Does anyone know what this would be in mikrotik as i have no idea about Cisco at all and he did not setup the rules.

Any help would be greatly appreciated!

It is NATing traffic to TCP port 445 on Fa 0/1 to the same port on internal host 172.17.8.50. Presumably FA 0/1 is their WAN interface. That is the SMB port so I hope they have some restrictions in the firewall… :wink:

You would achieve the same with a (hopefully restricted) destination NAT entry in RouterOS.

Hi and thanks for the reply.

Could you provide the code for ROS pls.

I thought of ip firewall nat add chain=dstnat port=445 action=dstnat to addresses=172.17.8.50 to ports=445 but im not much of an expert on firewalling.

regards
MNub

If you are new to Mikrotik make life easy for yourself and use Winbox or Webfig.

The rule would be of the form:

add action=dst-nat chain=dstnat dst-address=public_IP dst-port=445 protocol=tcp to-addresses=internal_IP to-ports=445