Community discussions

MikroTik App
 
foomy
just joined
Topic Author
Posts: 3
Joined: Mon Oct 20, 2014 2:31 pm

Accessing Webfig via https & api-ssl and Remote Desktop

Mon Sep 21, 2015 2:41 pm

Hi Everyone

Firstly thank you for this forum. I have learnt a lot from everyone.

I just have 2 questions. I'm sure this has been covered but for the life of me I cannot find it on the wiki or on this forum.

1. I have a standard ADSL at home (no static IP) and I can access my Mikrotik over the Internet when I am for example at work via Webfig (port 80) and Winbox (port 8291). I can also access my Mikrotik via the Tik App on my local LAN (port 8728). I have been unable to get the Tik App to work over the Internet.

I would like to access my Mikrotik via Webfig on https (port 443) as well as api-ssl (port 8729) using the Tik App over the Internet.

I have enabled both www-ssl and api-ssl from the IP Service List, and also added the dst ports under the Filter Rules, Input Chain and Accept. Other than that I am stuck because it does not work.

2. I would like to access one of my PC's via Remote Desktop (port 3389).

If someone can please paste a config I would be very grateful.

Thank again and I do apologize because I am sure these questions has been asked numerous times. I have searched for hours but have not gotten any proper info on how to implement the above.

PS: I am aware that the above are not best practices. These are for testing purposes only.
 
User avatar
emils
Forum Veteran
Forum Veteran
Posts: 906
Joined: Thu Dec 11, 2014 8:53 am

Re: Accessing Webfig via https & api-ssl and Remote Desktop

Mon Sep 21, 2015 3:11 pm

1. You need a certificate to use Webfig over SSL. http://wiki.mikrotik.com/wiki/Manual:Cr ... rtificates

2. This should work. Change the IPs, port and protocol accordingly. http://wiki.mikrotik.com/wiki/Forwardin ... nternal_IP
 
deanMKD1
Member
Member
Posts: 366
Joined: Fri Dec 12, 2014 12:06 am
Location: Macedonia
Contact:

Re: Accessing Webfig via https & api-ssl and Remote Desktop

Mon Sep 21, 2015 3:29 pm

1. For accessing from port 443 you need to get security sertificate. :)
2. For accessing Remote desktop to your PC via Internet you need to set FIxed IP adress via adding lease for static adress to your PC. For ex. check IP > DHCP Server > Leases to get current IP, MAC adress, and client ID.

In my case that looks like this..


MAC> 00:21:5D:2B:8F:76
IP > 192.168.88.47
Client ID 1:0:21:5d:2b:8f:2

Create a new lease and enter details listed before (your will be different from mine)

Image

SO now have static IP for computer. Every time when is turned off/on will get the same IP adreess. This is important to port forwarding easy. :)

SO now go IP > Firewall > NAT

Make a new NAT rule.. and fill with your infos (Note that in In Interface you must select your internet connection interface)

Image

on the same tab go to Action, and fill..

Image

OK, now you will can access to your RDP via Internet. :)

@emils you have fastest then me. Note that not everyone have static WAN IP, so setting dst-address=69.69.69.69 is not a good idea. Better leave empty this field.
 
foomy
just joined
Topic Author
Posts: 3
Joined: Mon Oct 20, 2014 2:31 pm

Re: Accessing Webfig via https & api-ssl and Remote Desktop

Mon Sep 21, 2015 4:26 pm

@emils - thank you for the links. I will have a look at it.

@deanMDK - thank you for the explanation and screenshots. Much appreciated. I will try this when I get home later today.
 
deanMKD1
Member
Member
Posts: 366
Joined: Fri Dec 12, 2014 12:06 am
Location: Macedonia
Contact:

Re: Accessing Webfig via https & api-ssl and Remote Desktop

Mon Sep 21, 2015 5:32 pm

No problem mate. :D

Who is online

Users browsing this forum: mrbroadband, mtkvvv and 38 guests