dst-nat problem? rb450g redirecting to windows pc

Hello to all,

I would like to enter to a PC wich is windows that is in a private network which ip address is 192.168.1.187, my first guess was this configuration:

A RB450G which is has in one ether interface 192.168.1.25, and in other interface has 201.x.x.x (public ip address), the default route is
0.0.0.0/0 with gateway 192.168.1.254
When I try to go to from winbox to 201.x.x.x it works, I can enter to the router but I would like to redirect everything to the Windows PC so I created a nat rule

ip firewall nat add chain=dstnat action=dst-nat to-addresses=192.168.1.187

I assumed that when I hit Run and put 201.x.x.x it will redirect inmediately to my windows machine that is 192.168.1.187, but nothing happens…what will be the solution for this problem??

Post the output of “/ip address print” and “/ip firewall export”.

ip add print

ADDRESS NETWORK BROADCAST INTERFACE

0 201.218.22.68/24 201.218.22.0 201.218.22.255 ether5
1 172.16.15.14/24 172.16.15.0 172.16.15.255 ether1

ip firewall nat print

0 chain=dstnat action=dst-nat to-addresses=192.168.3.187


I've got nothing in the filter or mangle


ip route print

DST-ADDRESS PREF-SRC GATEWAY-STATE GATEWAY DISTANCE INTERFACE

0 A S 0.0.0.0/0 reachable 192.168.3.254 1 ether1
1 ADC 192.168.3.0/24 192.168.3.24 0 ether1
2 ADC 201.x.x.x/24 201.x.x.x 0 ether5

I’m confused.

Your IP address list doesn’t show anything on the 192.168.3.0/24 network, yet there’s a directly connected route in the routing table. But it does show an address of 172.16.15.14/24, yet there’s isn’t a directly connected route showing. Your original post doesn’t mention 192.168.3.0/24 at all, it mentions 192.168.1.0/24. And the public IP address doesn’t go to the default gateway of the router.
I don’t understand your topology at all. Can you draw a diagram?

1 192.168.3.14/24 192.168.3.0 192.168.3.255 ether1

that was what i meant…and it is different because I was making some changes, but the actual network i am trying is the 192.168.3.0 the 1.0 was for taking it as an example

Hi to all,

I couldn’t figure out the problem, so I created a pptp tunnel and let the internal traffic pass through the tunnel and that way I can get into the pc in the internal lan at a different place

Thanks a lof for your help anyway

Regards