Hello All,
I have set up a VOIP server with address 10.10.1.1 .
Also i have VOIP service that comes from VOIP Provider in a private network (VOIP Gateway Address 10.105.20.134) and i have set up 10.123.232.61/24 on my router. I can ping voip gateway ip address fine.
Now i need some rule to receive request from voip provider same as this
The forward needs to be allowed in filter table too. In default config, it’s done auto for all “dst-nat”-ed connections. If you have modified it, you need to allow it.
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www address=51.37.172.106/23 disabled=yes port=8021
set ssh disabled=yes
set winbox port=23321
set api-ssl disabled=yes
/ppp secret
add local-address=1.1.1.1 name=sohraab remote-address=1.1.1.2 service=pptp
These look all wrong to me…
add action=masquerade chain=srcnat comment=“VOIP server<====>Clients”
dst-address=10.10.1.1 out-interface=ether2-Clients src-address=
192.168.26.0/24
add action=masquerade chain=srcnat comment=“my laptop” out-interface=
internet src-address=192.168.26.11
add action=src-nat chain=srcnat dst-address=192.168.100.1 src-address=
192.168.26.11 to-addresses=192.168.100.1
add action=masquerade chain=srcnat src-address=1.1.1.2
Plus dont see any firewall rules and thus the config is not ready to put on the net!
(in the forward chain of firewall rules you would want this one)
action=accept chain=forward comment=
“Allow Port Forwarding - DSTNAT” connection-nat-state=dstnat
# You know what your internet interface is => pppoe, would suggest to disable it as it caused issues in other instances
/interface detect-internet
set detect-interface-list=all
# There is a fixed ip set & dhcp together? dhcp-client can / should probably be disabled/removed.
/ip dhcp-client
add add-default-route=no dhcp-options=hostname,clientid disabled=no interface=\
ether11-tctvoip use-peer-dns=no use-peer-ntp=no
# out interface is .26. and src too?, is that even needed both have router as default gateway anyway
add action=masquerade chain=srcnat comment="VOIP server<====>Clients" \
dst-address=10.10.1.1 out-interface=ether2-Clients src-address=\
192.168.26.0/24
# you should remove the src-address, as you want all traffic to be masqueraded
add action=masquerade chain=srcnat comment="my laptop" out-interface=\
internet src-address=192.168.26.11
# .100. address is not set on this router. This rule should be removed.
add action=src-nat chain=srcnat dst-address=192.168.100.1 src-address=\
192.168.26.11 to-addresses=192.168.100.1
# 1.2 address is not set on this router. This rule should be removed.
add action=masquerade chain=srcnat src-address=1.1.1.2
# This one is currently unused
add check-gateway=ping distance=1 gateway=10.123.232.1 routing-mark=TEST
currently there is no filtering at all: so once dstnat-ed it will pass to voip → pbx. but in reverse there is also translation needed, src-nat pbx → voip
