I have Site-to-Site L2TP connection.
All works excellent, but how to connect from Internet to address192.168.88.150:8181 ?
Option
add action=dst-nat chain=dstnat dst-port=8181 protocol=tcp to-addresses=192.168.88.150 to-ports=8181 on router with 192.168.1.0/24 don’t work.
Any solutions?
can 192.116.1.0/24 communicate with 192.168.88.150?
As I write - All works excellent, that mean in local network 192.168.X.X no problems.
add action=dst-nat chain=dstnat dst-port=8181 protocol=tcp to-addresses=192.168.88.150 to-ports=8181 dst-address=78.84.162.nnn
Add on rule - dst-address=78.84.162.nnn don’t work.
By default on router enabled masquerade, all connections first access 78.84.162.nnn.
i trust you’re testing this from the internet, rather than from a device on one of those networks.
are the packet/byte counts at zero for that nat rule? are they increasing as you test?
Of course I test this rule from internet and counters count incoming packets, but there are no connection with host 192.168.88.150 and internet host.
Add a rule to the mikrotik at 88.1 to passthrough any traffic that matches any such connection coming in and also watch its counters. Also add the two reply columns in winbox so you can see how it’s natting the connection.
I am sorry to double this question but can you access 192.168.88.150:8181 by telnet command right from 192.168.1.1 (not from LAN behind it)?
Contents of /ip firewall from both routers would be helpful.
^ this. i was supposed to have asked it in my first post 
you need to test that the device or interface that receives the request from the world can route back to the intended server (and that replies go back as expected)
It is possible that 192.168.88.1 unable route packet to 192.168.1.1, but route all packet through LMT (3G modem) interface to internet. Because sync request from 192.168.1.1works Ok.
Any ideas?
You might be interested in this video at MUM about using l2tp with ipsec to achieve scalable vpn solution for both site to site and dial up road warrior scenarios.
If I have understood your need properly.
I don’t see a link.
Hi,
Sorry about the missing link. Here it is:
http://mum.mikrotik.com/presentations/HR13/kirnak.pdf
In fact I liked it so much we are now trialling it in my own network as we get familiar with the solution for our clients. Previously we have been making static tunnels and IPSec Policy.