DSTNATing

RouterOS Beginner Basics
1

Hello!
I have NVR in my lan. I would like to publish it to internet and be able to access it with public ip not only from wan, but also from lan.
I have at the moment the following rule:

add action=dst-nat chain=dstnat comment=NVR_EXT dst-port=81
in-interface-list=WAN protocol=tcp to-addresses=192.168.1.100 to-ports=80

Now it is possible to access NVR from lan by its local address 192.168.1.100 and from internet 1.1.1.1:81. I want to be able to access NVR from LAN by external address: 1.1.1.1:81. How to achieve it?

Thanks!

2

https://wiki.mikrotik.com/wiki/Hairpin_NAT

3

Or add you public IP as dst address in your firewall rule. you may have to remove In Interface List as well.

4

You mean like this:
/ip firewall nat
add action=dst-nat chain=dstnat dst-address=1.1.1.1 dst-port=81
protocol=tcp to-addresses=192.168.1.100 to-ports=80

5

yes. give it a try.