port forward not working for me

RouterOS Beginner Basics
1

i have done port forward to 192.168.17.8 and it is working then i tryed to do the same for 192.168.17.9 and its not working.
i dont realy understand why? i can contact to both from lan.

this is the nat rules
add action=dst-nat chain=dstnat disabled=no dst-port=1234 in-interface=lte1 protocol=tcp to-addresses=192.168.17.8 to-ports=1234
add action=dst-nat chain=dstnat disabled=no dst-port=2345 in-interface=lte1 protocol=tcp to-addresses=192.168.17.9 to-ports=2345

2

Both hosts are PCs?

3

no they are alarm systems. with ip and gateway

4

Can you ping both of them from a gateway?

5

yes and the gateway is routeros i can also ping both over openvpn

6

maybe there is something with nat order i dont understand

7

I think problem is that you try to establish second TCP session with different destination port. And you need the same as the first one. And why you using NAT while you using openvpn? Just make static route from source to destination on your Tik without NAT.

You can’t dst NAT same dst port in the same two ports but different hosts. It’s just not working that way. Use simple routing via L3VPN.

8

its a remote site so users needs site2site vpn and security needs port forward to access alarm from iphone on wan

i dont think that i am using “same dst port in the same two ports but different hosts.”
host 1= port 1234
host 2= port 2345
add action=dst-nat chain=dstnat disabled=no dst-port=1234 in-interface=lte1 protocol=tcp to-addresses=192.168.17.8 to-ports=1234
add action=dst-nat chain=dstnat disabled=no dst-port=2345 in-interface=lte1 protocol=tcp to-addresses=192.168.17.9 to-ports=2345

9

Yeah, but will this cameras understand that two different ports? Are you sure? All applications that working on a hardware are listening the same port by default. Telnet service listening 23, ssh 22, web server 80/443 and so on.

10

thanks, the alarm was configured with the wrong port.