I am trying to open a port on my new Mikrotik 150, previously I’ve used linksys router/firewalls and I’m more comfortable using Winbox than CLI.
Is there somewhere that has a step-by-step to open ports using winbox or even the web interface.
The remote access application I use needs port 5005 opened. So i’m trying to open port 5005 on IP Address 172.16.100.19 from anywhere in the “outside world”. The 172.16.x.x subnet is on ether2 if that matters.
I have read the document at http://www.mikrotik.com/testdocs/ros/2.9/ip/nat.php and I’m still lost. I now know that it’s dst-nat, but I haven’t figured out all of what needs to be put in the new NAT rule window in Winbox
Here is an example rule
Change a.b.c.d to be your public IP Address. Open up the CLI and add this.
/ip firewall nat add chain=dstnat action=dst-nat to-addresses=172.16.100.19 to-ports=5005 dst-address=a.b.c.d dst-port=5005 protocol=tcp comment=“Forward Port 5005 from Public to 172.16.100.19” disabled=no
Or in the GUI you can find all the spots and fill them in with things from this example.
The public IP being the address of ether1? Ether1 is handed a DHCP address from my cable modem, but it has a hardcoded to 192.168.100.1 so would that be the a.b.c.d address?
/ip firewall nat add chain=dstnat action=dst-nat to-addresses=172.16.100.19 to-ports=5005 in-interface=ether1 dst-port=5005 protocol=tcp comment=“Forward Port 5005 from Public to 172.16.100.19” disabled=no
And make sure you move it before the masquerade rule in your NAT list.