Community discussions

MikroTik App
 
mikrouser25
just joined
Topic Author
Posts: 7
Joined: Tue Feb 04, 2020 4:26 pm

new management accesss port

Tue Feb 04, 2020 4:29 pm

Hello so the current setup is this we are using the sfp 1 one port as the WAN port with an ip address to access via web and winbox , this ip address at the same time is also used as a tunnel connecting other mikrotiks using this very same ip address

What we want to do
We want to set up a different port to access the mikrotik a private ip address on a different port , how can we achieve this without touching the sfp 1 WAN port ??

Thanks
 
Aerowinder
newbie
Posts: 27
Joined: Fri Jan 31, 2020 4:09 pm

Re: new management accesss port

Tue Feb 04, 2020 5:06 pm

/ip address

Add desired access address, assign it to appropriate interface.
 
mikrouser25
just joined
Topic Author
Posts: 7
Joined: Tue Feb 04, 2020 4:26 pm

Re: new management accesss port

Tue Feb 04, 2020 5:34 pm

Hi Aerowinder thanks for the reply

so its only those steps , i dont need to do anything else ?

ive tried it its not working yet
ive added the ip address in the
web Ip / addresses and add from their .

i am not able to access the mikrotik from winbox using the ip address set on ethernet port 5
 
Aerowinder
newbie
Posts: 27
Joined: Fri Jan 31, 2020 4:09 pm

Re: new management accesss port

Tue Feb 04, 2020 6:28 pm

What’s your firewall config look like?
 
mikrouser25
just joined
Topic Author
Posts: 7
Joined: Tue Feb 04, 2020 4:26 pm

Re: new management accesss port

Tue Feb 04, 2020 7:14 pm

Hi
i have only two rules 1 is accept input chain protocol tcp dst port 8291 and 80 for winbox and http src address is allowed in
the second one is drop , input , tcp , dst port 8291 and 80 , is the same rule except it is dropped
 
erlinden
Forum Guru
Forum Guru
Posts: 1961
Joined: Wed Jun 12, 2013 1:59 pm
Location: Netherlands

Re: new management accesss port

Wed Feb 05, 2020 10:24 am

Are you trying to make http and winbox available on the WAN interface? Except for the http (hopefully port forwarded to a webserver and not the one integrated in the Mikrotik), I would like to advice you to only use these services locally or make them available through VPN.

Can you please post an export hide-sensitive?
 
mikrouser25
just joined
Topic Author
Posts: 7
Joined: Tue Feb 04, 2020 4:26 pm

Re: new management accesss port

Wed Feb 05, 2020 12:15 pm

Hello yes
so a bit information
its by using a vlan that is coming in via an uplink trunk port
so on this vlan i want set the management ip address , it is not on the wan port but another ethernet port
i will get that info

what i did already is created this vlan
added the vlan under the ethernet port in question
added the ip address on the vlan , tried also on the ethernet

not able to get to the device via winbox
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11624
Joined: Thu Mar 03, 2016 10:23 pm

Re: new management accesss port

Wed Feb 05, 2020 6:23 pm

Any firewall?

Default setup allows management connections via interfaces (either physical or vlan or ...) which are members of LAN interface list.
 
Bolle
just joined
Posts: 5
Joined: Fri Aug 23, 2019 9:42 pm
Location: Germany

Re: new management accesss port

Wed Feb 05, 2020 9:53 pm

i have only two rules 1 is accept input chain protocol tcp dst port 8291 and 80 for winbox and http src address is allowed in
the second one is drop , input , tcp , dst port 8291 and 80 , is the same rule except it is dropped
Hi !
as far as I can see, Winbox uses tcp port 8291 & 50054 in both directions.

gtx Bolle
 
mikrouser25
just joined
Topic Author
Posts: 7
Joined: Tue Feb 04, 2020 4:26 pm

Re: new management accesss port

Thu Feb 06, 2020 2:32 pm

Lan interface list
ok i will have to check this
so what i did was create a bridge with the vlan in question ,and add ip address to the vlan interface
the interface coming iinto the mikrotik interface is trunk port
i need to manage the mikrotik throguht this ip address via this vlan on ethernet interface 5
 
mikrouser25
just joined
Topic Author
Posts: 7
Joined: Tue Feb 04, 2020 4:26 pm

Re: new management accesss port

Fri Feb 07, 2020 2:22 pm

So basically what i want to do is access the mikrotik via another port that is not the WAN port
is this possible
it needs to go via a vlan with the ip address on their .

Who is online

Users browsing this forum: Google [Bot] and 58 guests