DMZ in mikrotik router

Hello guys,
please could anyone know how to configure DMZ configuration in Mikrotik Router , i searched on google and i just found articles for port forwarding.
Thanks in advance .

Describe in more detail what you would like to accomplish and a network diagram will help.

As @anav tried to explain, there isn’t such thing as DMZ check in RouterOS. It’s very much possible to construct one, but as it’s custom job, it can be nicely adjusted to requiremenrs.

@anav is allergic to the DMZ (and also I…) :unamused:

A DMZ is basically a isolated VLAN. Its easy to built this…

Stunning I might bronze those words…

But all useless until we understand the requirements and network.

A DMZ is basically a isolated VLAN. Its easy to built this…

Not even VLAN … :smiley: … “A DMZ is basically an isolated LAN. Its easy to built this… as a physical port or as a VLAN”
Don’t connect it to the bridge, direct route setting will be automatic, but do set in the firewall what can pass and what cannot. (Fully depends on requirements)

From “standard” point of view of some routers, a DMZ is a simply “redirect” all (un)wanted traffic, not previously assigned to something, to an IP on SAME SUBNET of the Router LAN, no VLAN involved…

DMZ is a military term co-opted by IT folks… and grossly misrepresented. :wink:
an area, agreed upon between the parties to an armed conflict, which cannot be occupied or used for military purposes by any party to the conflict.



Well, I’m preparing to adjust my routers (after purchasing my second Mikrotik) as follow:
Fiber Modem (bridge) >> Mikrotik 1 “pppoe” (192.168.1.1) >>> Mikrotik 2 (10.0.0.1 “static ip from Mikrotik1: 192.168.1.60”)

Currently on fiber modem I just tick DMZ & choose 192.168.1.60 (Mikrotik2), so Mikrotik 2 handle all the firewall.

How can I do that when the Mikrotik 1 will replace the modem?