I’ve read other topics but couldn’t find the answer.
I have one MT with two interfaces (wan-internet & lan) and the other one with lan and 4 wlan cards.
I want to access second MT which is in the same network as first (first - 192.168.1.254/24, second - 192.168.1.252/24)
From the Internet I can access the first one over winbox. I want to set-up a NAT on the first, so using Winbox and that other port, it connects to the other MT.
I do not want to use VPN.
I just want that running winbox and typing my_internet_ip:150 opens first MT, and my_internet_ip:160 opens second MT.
So what NAT rules must be set on first MT to allow that?
So, there is no way to NAT tcp 8291 and www port to the other MT?
I tried to NAT dest. port 102 to port 8291 and dest. port 103 to port 80 to the other MT but every time I try to connect it just loads the first MT…
dakky21 -
As I recall you can’t ‘re-map’ winbox but that could have changed since I tried it a few years ago…
If it would work then you’d have to insert a rule in the input chain to the router in Mangle. Most likely at that point marking the new connection, marking the established connection, and marking the parkets. Then maybe you could use dst-nat with you selected port number(s) and corresponding connection or packet mark.
Input rule placement is becuase when you use the public IP of the router - it is sure you are talking to ‘it’. So you’ll have to convince it you’re not…
As far as I know, the current version of winbox still cannot be configured to use a port other than the default 8291. As a result, it is NOT
possible to manage a MT behind another MT unless you either have two public IP’s on the first MT, or, if you only have a single IP on the first
MT, you use a VPN.
The VPN solution is quite easy to implement and works perfectly. I use PPTP on the windows machine where winbox resides. I wrote a wiki
article that address this problem, which you can reference here http://wiki.mikrotik.com/wiki/Multi_node_management.
Since you mention in your original post that you prefer not to use a VPN, I realize that this solution is not what you prefer, but until the MT folks implement a way to set the destination port that winbox uses, I think we are all stuck with this VPN solution.
If your reason for avoiding VPN is difficulty of implementation, hopefully the wiki entry will make that simple. If you have a problem with VPN due to intervening routers not forwarding the needed ports, than I can’t think of any solution for you.
