Nat helper and P2P/VoIP

RouterOS Beginner Basics
1

Hi everyone, I think I will buy a mikrotik RouterOS very soon, but I wonder if there’s a way to be transparent for P2P connections, because in the feature list I saw nat helping for some protocols, but can’t find which protocols. I know that uPnP can do something like that, however not every protocols support it.
I would have support for at least kazaa, edonkey/bitTorrent (this one can use uPnP), and SIP.

Thanks guys

2

SIP helper is available at /ip firewall service-ports

For the torrrents and other P2P applications, enable UPnP supports on the client side (application), enable UPnP on the router,

ip upnp set enabled=yes
ip upnp interfaces add interface=ether1 type=external 
ip upnp interfaces add interface=ether2 type=intern
3

Ok, so there is no helpers for P2P protocols ?
Anyway this should do the trick but I want to be sure :slight_smile:

4 
/ip firewall service-port

to see all supported NAT helpers.

5

Thanks, but I don not have a mikrotik yet, but I think it will come very soon, I just sent a mail asking some questions about different licenses.

6

You can login to the demo router,

demo2.mt.lv

login: demo
to check the available configuration options in the RouterOS.

/ip firewall service-port> print 
Flags: X - disabled, I - invalid 
 #   NAME                                                                 PORTS
 0   ftp                                                                  21   
 1   tftp                                                                 69   
 2   irc                                                                  6667 
 3   h323                                                                
 4   sip                                                                  5060 
                                                                          5061 
 5   pptp
7

Thanks, I’ll surely use the demo to check features. Last question, is there a way to add service-port (is there available packages, or a way to build new ones ?)

8

No, it is not possible.

9

Ok, thanks for your help

10

P2P programs don’t need NAT helpers, they can use UPnP instead

11

Yes, that’s what I understood, but all protocols are not uPnP capable… And I don’t know if many users with same software will be supported, does uPnP allocate different ports per user ?

12

it’s not said that your p2p programs won’t work without NAT helpers or UPnP. In fact, all programs work anyway. The only difference without a Nat rule could be “low id” or “firewalled” status in your program, but it would still work. UPnP makes dynamit NAT rule based on whatever the program tells it.

13

Yes, I now how P2P and nat works together, but my question is, imagine that I have several users that are using the same P2P application with uPnP, so their client are asking for the same ports, does the router negociate a new port for each client, or only the first client will be allowed to access the service ?

Anyway, thanks for your fasts replies, I think mikrotik is what I’m looking for.

14

UPnP will change ports so that everything works

15

Thanks guys for your fast responses, I think everything is clear now :slight_smile: