I’m new to Mikrotik devices having used Cisco devices for quite a few years. I’m liking the flexbility of Mikrotik J
I am trying to port map the same external IP address but with different ports going to different internal addresses. When I compare what they say on this forum and other sites it looks the same but one of my ports works and another doesn’t.
Here’s my setup:
External IP range: 123.123.123.176/28
Internal IP range: 10.10.0.0/16
I have a text externally available machine on 123.123.123.183. I can currently receive UDP requests on 1194 (to internal IP 10.10.1.16) without any issues. I have set up TCP ports on 12000 (to internal IP 10.10.1.224) and 12001 (to internal IP 10.10.1.16). I have netcat listening on those ports as a test, but telnetting to either of those using the external IP from other hosts times out.
I am probably doing something really stupid, so sorry for my noob knowledge! I am running RouterOS 6.38 by the way.
Thank you ![]()
/interface ethernet
set [ find default-name=ether11 ] name=Local
set [ find default-name=ether1 ] name=Public/ip address
add address=10.10.0.1/16 interface=Local network=10.10.0.0
add address=123.123.123.179/28 interface=Public network=123.123.123.176
add address=123.123.123.190 interface=Public network=123.123.123.190
add address=123.123.123.183 interface=Public network=123.123.123.183
add address=123.123.123.180 interface=Public network=123.123.123.180
add address=123.123.123.181 interface=Public network=123.123.123.181
add address=123.123.123.182 interface=Public network=123.123.123.182
add address=123.123.123.189 interface=Public network=123.123.123.189
add address=123.123.123.188 interface=Public network=123.123.123.188
add address=123.123.123.184 interface=Public network=123.123.123.184/ip firewall address-list
add address=10.10.0.0/16 list=Local/ip firewall filter
add chain=input connection-state=established,related
add action=drop chain=input in-interface=Public
add chain=forward connection-state=established,related
add action=drop chain=forward connection-state=invalid
add action=drop chain=forward connection-nat-state=!dstnat connection-state=new in-interface=Public
add action=accept chain=forward connection-state=new in-interface=Local
add action=accept chain=forward dst-address=10.10.1.16 dst-port=1194 protocol=udp
add action=accept chain=forward dst-address=10.10.1.224 dst-port=12000 protocol=tcp
add action=accept chain=forward dst-address=10.10.1.16 dst-port=12001 protocol=tcp
add action=drop chain=forward/ip firewall nat
add action=dst-nat chain=dstnat dst-address=123.123.123.183 dst-port=12000 in-interface=Public protocol=tcp to-addresses=10.10.1.224 to-ports=12000
add action=dst-nat chain=dstnat dst-address=123.123.123.183 dst-port=1194 in-interface=Public protocol=udp to-addresses=10.10.1.16 to-ports=1194
add action=dst-nat chain=dstnat dst-address=123.123.123.183 dst-port=12001 in-interface=Public protocol=tcp to-addresses=10.10.1.16 to-ports=12001
add action=src-nat chain=srcnat src-address-list=10.10.1.16,10.10.1.224 to-addresses=123.123.123.183
add action=masquerade chain=srcnat out-interface=Public
/ip route
add distance=1 gateway=123.123.123.177