Winbox dicovery behind NAT

Hi,
I have RB with config:
1 WAN 192.168.1.5 (from ADSL modem (my PC in bridge)
LAN (NAT) 172.10.10.1 with DHCP server (10 mikrotik clients behind)
I can winbox discovery NAT ruter but nothing behind. What I need in firewall? Thx!

MNDP works on Layer 2, i.e. broadcast domain, cant cross Layer 3 network

Look at this:

https://wiki.mikrotik.com/wiki/Manual:Tools/RoMON

Thank u!

thank you, very useful

without romon secret, romon ssh still requires authentication right?