i have a CCR1009-7G-1C-1S+
connected to ONT from digi with PPoe.
internet was working but i cant do port forwarding i see tons of post and tutorials and nothing work for me
/interface ethernet
set [ find default-name=combo1 ] name="Combo ETH 0"
set [ find default-name=ether3 ] disabled=yes name="ETH 3"
set [ find default-name=ether4 ] disabled=yes name="ETH 4"
set [ find default-name=ether5 ] disabled=yes name="ETH 5"
set [ find default-name=ether6 ] disabled=yes name="ETH 6"
set [ find default-name=ether7 ] disabled=yes name="ETH 7"
set [ find default-name=ether1 ] name="LAN ETH 1"
set [ find default-name=ether2 ] name="WAN ETH 2"
set [ find default-name=sfp-sfpplus1 ] disabled=yes
/interface vlan
add comment="Vlan Digi" interface="WAN ETH 2" name=Vlan-Digi-20 vlan-id=20
/interface pppoe-client
add add-default-route=yes disabled=no interface=Vlan-Digi-20 name=pppoe-out1 \
use-peer-dns=yes user=XXXXXX
/interface list
add comment=WAN name=WAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=192.168.99.150-192.168.99.200
/ip dhcp-server
add address-pool=dhcp_pool0 interface="LAN ETH 1" name=dhcp1
/port
set 0 name=serial0
set 1 name=serial1
/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-pppoe=yes
/interface list member
add comment="WAN DIGI" interface=Vlan-Digi-20 list=WAN
add comment="WAN ETH 2" interface="WAN ETH 2" list=WAN
add interface=pppoe-out1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface="Combo ETH 0" network=\
192.168.88.0
add address=192.168.99.50/24 comment=LAN interface="LAN ETH 1" network=\
192.168.99.0
add address=188.26.223.37 interface="WAN ETH 2" network=188.26.223.37
/ip cloud
set ddns-enabled=yes ddns-update-interval=30m
/ip dhcp-server network
add address=192.168.99.0/24 gateway=192.168.99.50
/ip dns
set allow-remote-requests=yes servers=1.1.1.1,1.0.0.1
/ip firewall address-list
add address=192.168.99.0/24 list=LAN
add address=ddns.sn.mynetname.net list=WAN
/ip firewall nat
add action=masquerade chain=srcnat
/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.1.1 \
pref-src="" routing-table=main suppress-hw-offload=no
add disabled=yes distance=1 dst-address=192.168.99.122/32 gateway=\
192.168.99.50 pref-src="" routing-table=main scope=30 \
suppress-hw-offload=no target-scope=10