is there a way to controlled router mikrotik behind another router and don't have to use 3rd software ???
IP cloud is nice but only worked with router has public ip.
Thanks in advance and sorry for my bad english

Check Romon, I believe it's the thing you need
http://wiki.mikrotik.com/wiki/Manual:RoMON

or you can do some NAT in your "front" router, redirecting some random port to the "back" router.

Check Romon, I believe it's the thing you need
http://wiki.mikrotik.com/wiki/Manual:RoMON

or you can do some NAT in your "front" router, redirecting some random port to the "back" router.

could u show me how to redirecting port to the back router

http://wiki.mikrotik.com/wiki/Forwardin ... nternal_IP

still not working =.=!!!
my router A which has public ip address is x.x.x.x. I have created firewall rule like the link u give me that forwading ip x.x.x.x from ether1 router A to ip y.y.y.y from ether 1 router B. Am i do it right ????

Give real figures, what internal IP is your router B, what port(s) you want to translate, and export the firewall rule you created.

Have your router behind the firewall VPN out to he router you have access to If all else fails.

Sent from my SM-G920I using Tapatalk

Give real figures, what internal IP is your router B, what port(s) you want to translate, and export the firewall rule you created.

Hi, sorry for the late answer. Here is my config on 2 routers.
RouterA
-ether1: received public IP (ISP)
-ether2-5: Lan (172.16.10.0/24)

RouterB
-ether1: received ip from routerA (172.16.10.x)
-ether2-5: Lan (10.0.0.0/24)

ether2 routerA link to ether1 routerB.

Then, try this assuming you want to access port 80 on Router B. If course, replace with real IPs

Then, try this

Code: Select all

/ip firewall nat
add action=dst-nat chain=dstnat dst-address=[Router1 WAN IP] dst-port=50080 protocol=tcp to-addresses=172.16.10.x to-ports=80

assuming you want to access port 80 on Router B. If course, replace with real IPs

I still cant do it =.=!!!
I tried to config like you did on both router A&B but it still not work =.=.I can only access router with public ip (routerA). Router B still not accessible.

Hi ,
you are changing ports ! so it's a one way communication , packets reach Router B , but unable to come back , i think we should have 2 NAT here , one in router A , one in B

Hi ,
you are changing ports ! so it's a one way communication , packets reach Router B , but unable to come back , i think we should have 2 NAT here , one in router A , one in B

2 NAT in router A&B with the same config right ?

Hi ,
you are changing ports ! so it's a one way communication , packets reach Router B , but unable to come back , i think we should have 2 NAT here , one in router A , one in B

created firewall rules on both router A&B but still not working

You can use romon

You can use romon

i know but ppl says i can ip cloud if i redirect port so i wan to try it

make a VPN to another site under your control and with IP public address

make a VPN to another site under your control and with IP public address

could you be more specific pls. I'm still new to this
Which router should i make a VPN ?

make a VPN to another site under your control and with IP public address

could you be more specific pls. I'm still new to this
Which router should i make a VPN ?

this image shows the concept

make a VPN to another site under your control and with IP public address

could you be more specific pls. I'm still new to this
Which router should i make a VPN ?

this image shows the concept

vpn.jpg

Look more confused now lol =]]. I think i will try to redirect it with nat rule :v

At first You should give router B, interface ether1 fixed IP address, i.e. 172.16.10.2, else it will not work, except You made reservation in router A DHCP server for router B (very probably, not).

Second, if You want to connect to it with Winbox, here is dst-nat rule for router A
By connecting with Winbox in address field You should write also port 8292, like this (only example) 10.10.10.1:8292

You need not change something on router B.

At first You should give router B, interface ether1 fixed IP address, i.e. 172.16.10.2, else it will not work, except You made reservation in router A DHCP server for router B (very probably, not).

Second, if You want to connect to it with Winbox, here is dst-nat rule for router A

Code: Select all

/ip firewall nat
add action=dst-nat chain=dstnat dst-port=8292 in-interface=ether1 protocol=tcp to-addresses=172.16.10.2 to-ports=8291

By connecting with Winbox in address field You should write also port 8292, like this (only example) 10.10.10.1:8292

You need not change something on router B.

Thanks for your replied. If i config like that i will be able to connect to routerB wherever i go right ?
what about DNS name in ip cloud ? Can i use it ?
i couldn't not test it right now

Thanks for your replied. If i config like that i will be able to connect to routerB wherever i go right ?
what about DNS name in ip cloud ? Can i use it ?
i couldn't not test it right now

I think yes, DNS name should work, if resolved correctly. And yes, You will be able connect to router B from every place where router A is accessible.

Thanks for your replied. If i config like that i will be able to connect to routerB wherever i go right ?
what about DNS name in ip cloud ? Can i use it ?
i couldn't not test it right now

I think yes, DNS name should work, if resolved correctly. And yes, You will be able connect to router B from every place where router A is accessible.

So i won't be able to connect to routerB from other network outside of routerA ???

So i won't be able to connect to routerB from other network outside of routerA ???

I don't mean physically accessible. If You can connect to router A from outside, also router B will be accessible.

solved.
i use this config in routerA after configured i can access to routerB using public ip in router A

If You don't need access from outside to routerA, problem is solved.
RouterA will be inaccessible because connections from Internet to any port on routerA will be redirected to routerB. The idea of my slution was to give access to routerB keeping access to routerA.

If You don't need access from outside to routerA, problem is solved.
RouterA will be inaccessible because connections from Internet to any port on routerA will be redirected to routerB. The idea of my slution was to give access to routerB keeping access to routerA.

yours worked too.
Thanks