Good evening!
I use RouterBOARD 450G in this scheme:
ether2,ether3,ether4,ether5 works like a switch. ether4 is master port. dhcp-server is up on ether4.
/ip pool add name=“OfficePool” ranges=“192.168.5.6-192.168.5.254”
/ip dhcp-server add name=“OfficeDHCP” interface=“ether4” address-pool=“OfficePool” disabled=“no”
ether1 connect to the internet and NAT is up in the same port(ether1). ether1 has ip 192.168.2.105.
/ip firewall nat add out-interface=“ether1” chain=“srcnat” action=“masquerade”
On the ether5 port works PC(address 192.168.5.252) with SSH open. I connected to ether2 and dhcp-server gives me 192.168.5.254.
Internet is works well. BUT I CANNOT CONNECT TO SSH(PC on ether5 - 192.168.5.252) when i type in PuTTY 192.168.2.105.
I use such rules for dstnat.
DSTNAT
ip firewall nat add chain=dstnat action=dst-nat protocol=tcp dst-port=22 to-address=192.168.5.252
FIREWALL
ip firewall filter add chain forward in-interface=!ether1 protocol=tcp dst-port=22 dst-address=192.168.5.252
action=accept
