Double nat From ISP

Hey i want a solution to access my network inside the mikrotik crs the problem is that my isp is giving me a private ip address always (10.0…or 192.168…) and when i perform a cloud update it isn’t working so my issue is double nat device one is the isp that is not accessible and one the tplink router before the mikrotik

Your crs has to initiate the connection. I had the same problem and I build me a SSTP server on the outside and the crs connects to it.

You can now route traffic from outside to the inside and vice versa.

http://forum.mikrotik.com/t/winbox-access-on-groove-from-the-internet/111207/8

You might simply on remote end add route which tells your device IP address (local one) can be found behind ISP public IP address. Then it should work (of course if allowed by firewall).

Can you please explain more

Please explain more i am using a 3g connection on a tplink router the isp is providing me private ip address and the microtik is behind the tplink now i need to setup an access (vpn or something else or just port forwarding to the needed devices behind the csr) to my internal network inside the crs let me know if its clear

That is a more complicated situation the I anticipated so the easiest way is to use SSTP. SSTP between two Mikrotik devices is even easier because you don’t need to generate an certificate for encryption.

Read the Wiki page: https://wiki.mikrotik.com/wiki/Manual:Interface/SSTP for all the information.