I created a Hairpin NAT so that my webserver is accessible, but now the issue I have is that I still want to be able to access my router remotely, but my static IP points to my webserver. I have tried a NAT rule, and a firewall rule but cant seem to figure out how to make this work. I have the firewall rules so that only a handfull of specific addresses can access it already, so its not wide open. can someone point me in the right direction?
Go to IP / Services and change the port for WWW from 80 to something else you don’t use (like port 82)
Then you will access the router from a browser like this: aa.bb.cc.dd:82
Thanks for the quick reply, I switched it to port 88, and created a firewall rule to accept port 88, and it works perfect. I am just deep enough into setting up RouterOS to be dangerous and the group here is a huge help.
Would it not be better to use https to connect???
Save that for the next thread where his router gets hacked and needs to get back in 
But seriously glad to hear you got it working and sure its a basic question but we all started out similarly whether we want to admit it or not!
You could be “more” secure by turning off the WWW access completely and using Winbox. It’s far nicer than the web interface and it uses port 8291 default which is well out of the way of most other applications.
Winbox is here;
https://download2.mikrotik.com/routeros/winbox/3.12/winbox.exe