NAT in PPPoe

RouterOS Beginner Basics
1

Sveiki Mikrotik !

I changed provider, used LTE before. Now I have GPON and provider it provides through PPPOE.
In both cases I had a white address from the provider. I used NAT to access the access point on port 5060.
Access to the AP was both outside and inside the network.
NAT rules:
add action=masquerade chain=srcnat comment=“defconf: masquerade” out-interface=pppoe-RialCom
add action=accept chain=srcnat disabled=yes
add action=netmap chain=dstnat comment=“MikroTik AP” disabled=no dst-port=5060 in-interface=pppoe-RialCom protocol=tcp to-addresses=192.168.1.44 to-ports=80

now i have external access, but no access from home network. How can i get access from internal network?

firewall rules:
add action=accept chain=input comment=“defconf: accept ICMP” protocol=icmp
add action=accept chain=input comment=“defconf: accept establieshed,related” connection-state=established,related
add action=drop chain=input comment=“defconf: drop all from WAN” in-interface=pppoe-RialCom
add action=fasttrack-connection chain=forward comment=“defconf: fasttrack” connection-state=established,related
add action=accept chain=forward comment=“defconf: accept established,related” connection-state=established,related
add action=drop chain=forward comment=“defconf: drop invalid” connection-state=invalid
add action=drop chain=forward comment=“defconf: drop all from WAN not DSTNATed” connection-nat-state=!dstnat connection-state=new in-interface=pppoe-RialCom

2

Just use PPPoE interface for masquerading like out-interface, that’s it. It must be done on the edge router to your ISP.

3

This was already done, not ?
add action=masquerade chain=srcnat comment=“defconf: masquerade” out-interface=pppoe-RialCom

4

If you used NAT for acceess to AP, you need create a specific NAT rule before masq rule.