Reverse NAT or WAN NAT Redirection on RouterOS

RouterOS General
1

Hi.

I just purchased my first RouterBOARD, RB951G-2HnD.
It’s very different than the routers I have used so far, and I have many, many problems to solve. But here’s the biggest.

For example, my RB has LAN IP “10.0.0.1”, WAN IP “10.20.30.40” and WAN domain “myhome.ddns.net”
When a PC on the LAN with IP 10.0.0.100 types “myhome.ddns.net”, a “Connection Refused” error is displayed.
When the same PC is connected on the WAN with IP “20.30.40.50” and types “myhome.ddns.net”, the web server’s page is displayed.

So, I want to have access to my services from the LAN when I type my domain.
This feature was called Reverse NAT or WAN NAT Redirection on my old routers, and I had only to check a box to enable or disable it.
I think that in RouterOS it’s a bit more difficult, but I don’t now how to make it work.

Can anyone help me?

Thanks in advance.

2

Hairpin NAT

3

Thank you for your answer.

Found this http://wiki.mikrotik.com/wiki/Hairpin_NAT but I can’t understand how it works.


Here’s my network:

PPPoE Dynamic with example DDNS name: myhome.ddns.net

10.0.0.1 - RB951G-2HnD
Ports that have been forwarded on NAT:

HTTP Webfig - Port 9080
HTTPS Webfig - Port 9443
Winbox - Port 8291


10.0.0.10 - Server1
Ports that have been forwarded on NAT

HTTP Sever - Port 80
HTTPS Server - Port 443
Apache HTTPS Server - Port 8443

If the PC is connected on another network and tries to access myhome.ddns.net, all services are available under one DDNS name:

myhome.ddns.net:80 - HTTP Server
myhome.ddns.net:443 - HTTPS Server
myhome.ddns.net:8291 - Winbox
myhome.ddns.net:8443 - Apache HTTPS Server
myhome.ddns.net:9080 - HTTP Webfig
myhome.ddns.net:9443 - HTTPS Webfig

Can anyone write me the code to insert on the terminal to configure firewall so this above happens on LAN also?

Thanks in advance.

4

Here you go, this should give you all required info to solve it:
http://wiki.mikrotik.com/wiki/Hairpin_NAT