Port forwarding issue

RouterOS Beginner Basics
1

Hello there,

Iam proud user of mikrotik hex730gr3 and this is first time of owning mikrotik product.
iam not have lot of experinec with this kind of routers. I bought mikrotik for my home network to get pppoe client and dhcp server. I set up pppoe connection and dhcp server and everything working fine but when i get to next step when i need to open ports for my services ( remote desktop,filecloud and ftp server) i dont have luck to get to work.
Who can help me to understand and set up to work everything.
I watch some yt videos and i copied all settings from videos to my mikrotik but no luck. I found lot of guide on internte but all of them is almost the same and i not work on my mikrotik.
Short guide of my network

  • i have static ip from ISP
  • i set up static ip for my pc where i have my services which i mentioned

When i setup my mikrotik and tried to reach my server i just got access to mikrotik webgui for login and nothing more.

Question:
Should i need something change in firewall settings?
I just add my desired port to port forwarding section at NAT tab nothing more.

2

https://forum.mikrotik.com/viewtopic.php?t=179343

3

Ohhh this is so confusing for me,i cant add simple port forward to my server without this NAT HAIRPIN?

4

As the article states.
If you have USERS within the same SUBNET as the SERVER, and the users are not accessing the server by the server LAN IP address directly, but by the roundabout method of using the Domain Name/url/dyndns type name. then yes you need the hairpin nat rule. If you move the users or server to a separate subnet, then that is no longer the case.

5

If i understand right best and simpliest solution for my port forwarding issue is to change server to another subnet?

Now i setup my local network

  • 192.168.0.1 ( mikrotik like dhcp server and pppoe client)
  • 192.168.0.10 ( my services like filcloud etc)
  • 192.168.0.100-200 ( all other users in network which get ip from dhcp server)

Solution is…?

  • just to change IP of my SERVER (192.168.0.10 to another subnet) or change the dhcp server ip range to another subnet?
6

One bridge.
How every many vlans you need to have separate subnets.
One vlan for Servers, one vlan for trusted LAN users, one vlan for guests, one vlan for iot equipment etc…