CSR-125- 24 ether1 gateway not visible on ext address

RouterOS General
1

I am installing a CRS-125-24 as a routed/switch. I have assigned a static to eth-1 and masqueraded internal ether ports. The device is working properly on all outbound traffic. When I attempt to access the csr-125 from internet, the device does not respond other than to a ping on the public address. I am at a loss as to why it cannot be accessed by either webfig or winbox. Also any DSTNAT port forwarding in the NAT table will not function.

Can anybody help me with this. Unless I am misunderstanding the functionality of this devices firewall, I feel this should work.
Do I need to scrub the routing approach and put a routerboard in front of this device. It seems counterproductive.

2

I have a CRS as a router/switch in a configuration that seems similar to yours and it works perfectly. Can you please post an export of your firewall rules, nat rules, routing. Do you have a DSL modem or another form of ISP gateway between the CRS and the internet or is your ISP nating your traffic.

3

You need to allow the Winbox-port (Default 8291) and/or the http-port in your input chain.

If dstnat does not work, you are either doing it incorrectly (as previous poster said: post config) or something is blocking your access upstream.

4

Jan Joh you hit it on the head. I failed to include the public port address in the input chain. Did that and it came right up.
Everything is working great.
Thanks, my head was gettin real lumpy from that brick wall.