Hairpin NAT on a new

RouterOS Beginner Basics
1

Migrated from sophos and want to setup a hairpin nat on my Mikrotik hAP (RouterBOARD 962UiGS-5HacT2HnT) Firmware 3.41

Set it up via quick set - so almost no changes to default configuration.
The hap is connected to the internet with a static IP to the outside and a static IP 192.168.13.4 on the LAN.
I have a home assistant server 192.168.13.13 i would like to be accessible via https://myweb:8123
Went through the manuals and added a dst-nat rule
General

  • dstnat.
    Protocol : tcp
    In.Interface ext1-Internet
    Action
    dst-nat
    To addresses 192.168.13.13
    To ports 8123

So now i can access is from the outside but not from LAN. Once again went through the manuals and set up a srcnat rule
chain=srcnat
src-address=192.168.13.0/24
dst-address=192.168.13.13 (IP OF HASS)
dst-port: 8123
Out. Interface: bridge (doesn’t let select ether2-master as it’s slave of bridge)
action: masquerade

And nothing happens. 0 on all the counters.
I have tried going to bridge settings and enable IP firewall (all 3 tick marks but that didn’t help as well)
What am i missing?

2

Firewall rules are right.
Possibly the problem comes from quick set which you should never use.
Try reset router with no default configuration and set it up again manually

My bad i didn’t notice in-interface.
Sob is right

3

It’s your dstnat rule. With in-interface=ext1-Internet, it works only for connections from outside. You need to remove in-interface and replace it with either dst-address= (if it’s static) or dst-address-type=local.

4

Problem solved. Thank you all