Help with basic? portforwarding

RouterOS Forwarding Protocols
1

This may seem like a very stupid thing to ask help with but…
Recently we changed our ISP thus we also changed our router: Now is a Mikrotik hAP Lite, which I found a little bit advanced to interact with.

I need help portforwarding the traffic from ports: 80,443,1935,3478-3480 (TCP) 3478,3479,6015 (UDP) to the internal ip address 192.168.20.249

My router is configured as a Home AP, with automatic IP addresses acquisition set as follows:

IP address: 192.168.2.231
Subnet mask: 255.255.255.0(/8)
Gateway: 192.168.2.1 (which is strange because I can access router web page through 192.168.20.1)

And the interface list i have are:

Ether1-4
Wlan1
Bridge.LAN
Bridge.WAN


Plus I already have a NAT rule but I don’t know if it’s okay configured:

GENERAL:

Chain: dstnat
Protocol:TCP
Scr port: 80,443,1935,3478,3479,3480
Dst port: 80,443,1935,3478,3479,3480
In. Interface: Bridge.WAN

ACTION
Action: dst-nat
Log: no
To address: 192.168.20.249

Any help?

2

This in nonsense, remove it:

Connections to your ports 80,443,1935,3478,3479,3480 will have random source ports.

And if you have 192.168.2.231 (private address) on WAN, you won’t get any incoming connections, unless the device with public address (you have public address somwhere, right?) forwards those ports to hAP.

3

I think that this is a great example on how to do the port forwarding:
https://wiki.mikrotik.com/wiki/Tips_and_Tricks_for_Beginners_and_Experienced_Users_of_RouterOS#Port_forwarding_on_RouterOS

These are three basic things which are required on router - srcnat, dstnat and accept firewall rule. If it is still not working, then check counters on firewall rules to see if they are working. If they are, then check if local device has access to public Internet.