eth4 and eth5 + nat configuration for begginer

RouterOS Beginner Basics
1

Hi
im trying to create configuration for rb951ui-2hnd. target wich i want to equire is:

eth4 ip 192.168.2.70 is from internet side
eth5 ip 192.168.1.20 is from lan side

eth4 must forward packages on udp 11000 to udp 11000 on eth5
eth5 must forward packages on udp 11001 to udp 11000 on eth4
on lan siede is switch wich broadcast packages to all members using 192.168.1.255
how im trying to do this work with fresh router:
make bridge1: bridge->add bridge protocol rstp
add eth4 and eth5 to bridge1 in bridge->ports

ip->adresses adding ip for each eth4 192.168.2.70/24 and 192.168.1.20/24

on ip->firewall i set NAT chain: dsnat, src adress 192.168.1.255 protocol 17 dst port 11000
action dst-nat to ports 11000 to adress 192.168.2.77 (pc simulating reciver)

on lan side i have transmiter that send packages on udp 11000 (ip adress 192.168.1.4)
on firewall connections i see packages

but on reciver side nothing happen what im doing wrong ?

2

anny sugestion ?

3

export from router:

\

jan/03/1970 03:00:40 by RouterOS 6.35.4

software id = L41Q-2Q8V

/interface bridge
add admin-mac=64:D1:54:25:25:41 auto-mac=no comment=defconf disabled=yes
name=bridge
add admin-mac=44:D1:54:25:25:41 auto-mac=no name=bridgeMN
/interface ethernet
set [ find default-name=ether2 ] name=ether2-master
set [ find default-name=ether3 ] master-port=ether2-master
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce
disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=
MikroTik-252545 wireless-protocol=802.11
/ip neighbor discovery
set ether1 discover=no
set bridge comment=defconf
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2-master
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridgeMN interface=ether4
add bridge=bridgeMN interface=ether5
/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-pppoe=yes
use-ip-firewall-for-vlan=yes
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=
192.168.88.0
add address=192.168.2.70/24 interface=ether4 network=192.168.2.0
add address=192.168.1.20/24 interface=ether5 network=192.168.1.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=
ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add chain=input comment="defconf: accept ICMP" protocol=icmp
add chain=input comment="defconf: accept established,related"
connection-state=established,related
add action=drop chain=input comment="defconf: drop all from WAN" disabled=yes
in-interface=ether1
add action=fasttrack-connection chain=forward comment="defconf: fasttrack"
connection-state=established,related
add chain=forward comment="defconf: accept established,related"
connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid"
connection-state=invalid
add action=drop chain=forward comment=
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat
connection-state=new in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade"
out-interface=ether1
add action=dst-nat chain=dstnat dst-port=11000 protocol=udp src-address=
192.168.1.255 to-addresses=192.168.2.77 to-ports=11000
/ip route
add disabled=yes distance=1 dst-address=192.168.1.20/32 gateway=192.168.1.0
pref-src=192.168.2.70
/system leds
set 5 interface=wlan1
/system routerboard settings
set protected-routerboot=disabled
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=bridge
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=bridge

4

It looks like you’re trying to forward broadcasts. In short, it doesn’t really work. They will pass through bridge, but unchanged.

5

i solved problem anny action with nat should end with router reset to make action… i need to solve just problem with broadcast from wan to lan anny sugestions?