I am a beginner when it comes to Mikrotik and router configuration. I have a problem with port forwarding. On my android mobile I use the FTP application that assigned me port 2211 and I used the command in the terminal /ip firewall nat add chain=dstnat dst-port=2211 action=dst-nat protocol=tcp to-address=IPonMobile to-port=2211 and after that my port is not open, and i cant access my cell phone. Need help.
All settings on the router are initial except that I added static IP addresses to the devices.
Make sure that you have either a firewall rule that allows that port in the forward chain or a rule that allows anything DSTNAT forwarded to be accepted in the forward chain.
Creating a port forward does NOT automatically allow that through the firewall (unless you have a allow anything DSTNAT rule).
Never seen anyone use these, it may not be wrong but its unusual.
/interface bridge filter
add action=drop chain=forward in-interface=wlan2
add action=drop chain=forward out-interface=wlan2
Never seen anyone use these, it may not be wrong but its unusual.
Suggest if you have firewall rules you wish to apply use the forward chain vice monkeying around with not utilized functionality.
You should state what you are trying to accomplish with those rules so its clearer.
Do you wish to stop wlan2 users from being able to reach everyone else?
Do you wish to stop wlan2 users from reaching the internet??
Now why would you go to all the trouble to put everything on the bridge and then do this???
/ip address
add address=192.168.2.1/24 comment=defconf interface=ether2 network=
192.168.2.0
Dont worry you are not the first or the last to do so. Its as if someone copied a config from somewhere or didnt change a default setup to complete the config, very common though!!
/ip address
add address=192.168.2.1/24 comment=defconf interface=bridge network=
192.168.2.0
I didn’t even touch the initial settings. In port 2 I put a switch and put all lan users in it and on the third port I put an ubnt antenna that sends the internet on.
The only thing I configured in the router was that I added a static IP address to the users and limited the speeds.
How do activate port forwarding on this existing configuration now?
If your phone is connected to WLAN2 then the bridge filter prevents any “forward” traffic (port forwarding will not change that…)
Which WLAN is phone connected when it is not working?
It is connected to wlan2 (SenaD). I haven’t tested it, with this router configuration, will port forwarding work on other devices that are connected via lan cable?