I don't want to hijack this thread, but if it's OK hop on to this.
I need to connect to a Mikrotik through
another Mikrotik and from one subnet to another.
My PC is on 10.10.11.0/24 and the other
Mikrotik is an AP on 10.10.1.0/24. the gateway
Mikrotik is on both 10.10.11.1 and 10.10.1.1
If I add the previously mentioned rules, will I still be able to log in on the gateway
I guess in my case the rules would be:
add chain=forward action=accept src-address=10.10.11.0/24 dst-address=10.10.1.0/24 out-interface=ether3 comment="Forward Accept Mikrotik2"
add chain=forward action=accept src-address=10.10.11.0/24 protocol=tcp dst-port=8291 out-interface=ether3 comment="Forward Accept Winbox - Mikrotik2"
(The mikrotik AP and the 10.10.1.0/24 network live on ether3
Is the first rule necessary in my case? And will the 2nd rule not log me out of the gateway
Mikrotik the rule is applied on?
I found this: http://shop.duxtel.com.au/article_info. ... icles_id=6
but am a bit afraid to log myself out (especially of the gateway which is live working).
I wonder if I really have to change the ports, if the gateway
mikrotik could just pass requests on 8291 that are not directed to it's IP.