Port forwarding is not working

RouterOS General
1

I want use port forwarding but it is not working.

sfp-sfpplus1 is WAN and use static public ip

>ip address add address=165.132.40.50/24 interface=sfp-sfpplus1
>ip route add gateway=165.132.40.1
>ip dns set servers=165.132.10.21

Router is connected with 2PC, one is Window PC(192.168.88.254) and second one is Ubuntu server(192.168.88.101).
Both PC can using internet, and Window PC can access to Ubuntu using ‘ssh [user]@192.168.88.101’. So I thought SSH and network connection is not problem

My machine is CCR2004-1G-12S+2XS and I was followed this document https://help.mikrotik.com/docs/display/RKB/Port+forwarding.
fig1.PNG
fig2.PNG
Then, another Window PC(165.132.145.101)(Unconnected with router, so I did not need hairpin NAT) need to access to Ubuntu server using ‘ssh [user]@165.132.40.50 -p 2222’ ,but it is not work with the message “ssh: connect to host 165.132.40.50 port 2222: Connection timed out”

This PC(165.132.145.101) can access to router using ‘[user]@165.132.40.50’. So router-the PC(165.132.145.101) connection is also no problem.

What is the problem?

2

Some questions:

  • is 165.132.145.101 connected to the same network as your router or is it outside ? (WAN part) If inside, your dst-nat rule only allows incoming via sfp.
    If that PC is inside your network, it will never use that sfp-connection.

  • is traffic using port 2222 accepted to be forwarded on your router from WAN side (check firewall) ?