Simple NAT rule

RouterOS Beginner Basics
1

Hello,

I want to create simple NAT rule to forward FTP (21) port to my LAN server (192.168.88.10).

I create this way:

/ip firewall nat add action=dst-nat chain=dstnat disabled=no dst-port=21 in-interface=ether1-gateway protocol=tcp to-addresses=192.168.88.10 to-ports=21

But in the web interface I got this:

There is nothing about the server IP, is there something wrong?

Kind regards.

2

If you click on the rule, you can see the full list. It will include the to-address.

3

Thanks, but I want to do it with command-line.

Then configure some scripts.

Regards.

4

Set it up in Winbox and then open terminal end do EXPORT command.
You will see your configuration as commands so you can see how to do it in CLI.

5

Check your columns. the image shows src address and dst address, but your script is using in-interface and to-address. If you don’t have those columns turned on, you won’t see them.

6

Thanks!

One question, which “action” must I use to do a simple NAT from wan interface to LAN server?

Regards.

7

I got it!

/ip firewall nat add action=dst-nat chain=dstnat dst-address=10.X.X.X dst-port=21 in-interface=ether1-gateway protocol=tcp to-addresses=192.168.88.10 to-ports=21

But I have a problem, my WAN interface is a dynamic public one, is it possible to put a alias for it?

Best regards.

8

IP > Cloud

9

Thanks!

I enable the Cloud service, now I have a public domain.

So need I to use the “xxxxxxxxxxxx.sn.mynetname.net” in the “dst-address” configuration?

Best regards.

10

No, just use wan as in-interface

11

Thanks! It works for me.

Best regards.