ip firewall rules on CCR1 ?
what ip address you getting, ping CCR2 - ping xxxxxxxx.sn.mynetname.net

In first picture we see that IP address is 192.168.4.1/24
this ip for LAN ( out ) from CCR1036 ( 1 )
But in cloud we see 178.80.xxx.xxx
this is real ip a variable , When I turn off the cloud and turn it on again it will change the ip

I didn't remember which IP address cloud are getting..

Please provide full IP structure.

As I understood you need forward winbox management port on first router and accept management firewall rule on second router.

P.s. DDNS - it means it taking external IP address, so it is CCR1 , remove DDNS and you get CCR2 WAN IP address
explain what you mean

explain what you mean

Ping your domain names from both routers.

this is my guess , try remove DDNS and check which IP address you'l get ?

explain what you mean

https://wiki.mikrotik.com/wiki/Manual:I ... Properties

sorry I not fully understood your schema at the begining

you are double NAT'ed, so if you want connet from WAN to CCR2, then you must add forwardin rule in CCR1

This is example some port forwarding , just write ccr2 IP address.


ip firewall nat
add chain=dstnat protocol=tcp dst-port=8291 action=dst-nat to-addresses=192.168.100.77 to-ports=8291 comment="Winbox to CCR1" disabled=no

CCR2 add inut firewall rule

/ip firewall filter add action=accept chain=input disabled=no dst-port=8291 protocol=tcp


and from where you are trying connect ?

from yours local or from wan network ?

CCR2 add inut firewall rule

/ip firewall filter add action=accept chain=input disabled=no dst-port=8291 protocol=tcp


and from where you are trying connect ?

from yours local or from wan network ?

yes,

is there are option write private messages ?