Hi,
Please help because I am pulling my hair out and am a complete nube with Mikrotik.
I want to setup port forwarding on my Mikrotik Router so I can connect to my DVR.
I have setup DDNS that updates a URL with the current public ip.
Here are the things that I want to do:
I want to be able to telnet from outside of my network to using my.URL:23 (I can use another port number externally if 23 is problematic) to be directed to 192.168.88.19:23.
When I enter http://192.168.88.19:16001/ locally I get a webpage with diagnostic information so when away from home I would like to enter my.URL:16001 to see the same information.
I have included configuration export from my Mikrotik. I do not think that I need a hairpin since I will always use the the local ip when home and the url when away...
Thanks in advance for your help!
Config export:
MMM MMM KKK TTTTTTTTTTT KKK
MMMM MMMM KKK TTTTTTTTTTT KKK
MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK
MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK
MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK
MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK
MikroTik RouterOS 6.23 (c) 1999- http://www.mikrotik.com/
[?] Gives the list of available commands
command [?] Gives help on the command and list of arguments
[Tab] Completes the command/word. If the input is ambiguous,
a second [Tab] gives possible options
/ Move up to base level
.. Move up one level
/command Use command at the base level
[admin@MikroTik] > export
dec/10/2015 00:41:07 by RouterOS 6.23
software id = WWS2-7578
/interface bridge
add admin-mac=4C:5E:0C:AF:2C:EB auto-mac=no name=bridge-local
/interface ethernet
set [ find default-name=ether1 ] name=ether1-gateway
set [ find default-name=ether2 ] name=ether2-master-local
set [ find default-name=ether3 ] master-port=ether2-master-local name=
ether3-slave-local
set [ find default-name=ether4 ] master-port=ether2-master-local name=
ether4-slave-local
set [ find default-name=ether5 ] master-port=ether2-master-local name=
ether5-slave-local
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=
20/40mhz-ht-above disabled=no distance=indoors frequency=auto l2mtu=2290
mode=ap-bridge ssid=HOTEL00 wireless-protocol=802.11
/ip neighbor discovery
set ether1-gateway discover=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods=""
mode=dynamic-keys wpa-pre-shared-key=xxxxxxxxxxx
wpa2-pre-shared-key=xxxxxxxx
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=dhcp_pool1 ranges=192.168.88.2-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=bridge-local name=default
add address-pool=dhcp_pool1 disabled=no interface=bridge-local lease-time=3d
name=dhcp1 relay=192.168.88.1
/interface pppoe-client
add ac-name="" add-default-route=yes allow=pap,chap,mschap1,mschap2
default-route-distance=1 dial-on-demand=no disabled=no interface=
ether1-gateway keepalive-timeout=60 max-mru=1480 max-mtu=1480 mrru=1600
name=pppoe-out1 password=ORwAtAbZe7xOxhAe profile=default service-name=""
use-peer-dns=no user=fxxxxx@xxxxxxxx
/snmp community
set [ find default=yes ] addresses=196.192.32.242/32 name=dts-custommer
/interface bridge port
add bridge=bridge-local interface=ether2-master-local
add bridge=bridge-local interface=wlan1
/ip address
add address=192.168.88.1/24 comment="default configuration" interface=
bridge-local network=192.168.88.0
/ip dhcp-client
add comment="default configuration" dhcp-options=hostname,clientid disabled=
no interface=ether1-gateway
/ip dhcp-server network
add address=192.168.88.0/24 comment="default configuration" dns-server=
196.192.32.5,41.188.9.130 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=196.192.32.5,41.188.9.130
/ip dns static
add address=192.168.88.1 name=router
/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-out1
add action=dst-nat chain=dstnat dst-port=12000 protocol=tcp to-addresses=
192.168.88.19 to-ports=12000
/ip service
set telnet disabled=yes
set ftp disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/snmp
set enabled=yes
/system leds
set 5 interface=wlan1
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-slave-local
add interface=wlan1
add interface=bridge-local
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-slave-local
add interface=wlan1
add interface=bridge-local
[admin@MikroTik] >
[admin@MikroTik] >