Community discussions

MikroTik App
 
mperdue
Member Candidate
Member Candidate
Topic Author
Posts: 290
Joined: Wed Jun 30, 2004 8:18 pm

Accessing ports behind nat

Mon Aug 27, 2007 4:27 am

A customer wishes to use x10 video software on his computer to monitor a remote location.

Mikrotik unit pulls a pppoe ip address, and uses src-nat and while web surfing is fine he can't access the remote computer. Doing a test from the x10 site http://kbase.x10.com/wiki/Port_Forwardi ... 0_Software it fails to connect. (you have to use IE browser btw)

So the wireless pppoe gets a public ip address and on the ethernet port which is dhcp address on his computer which is a range of 192.168.1.100 to 192.168.1.200

I did some reading about dst-nat thinking perhaps that is what I needed to do but all I ended up doing was locking myself out of the unit several times.

Thoughts?
 
mperdue
Member Candidate
Member Candidate
Topic Author
Posts: 290
Joined: Wed Jun 30, 2004 8:18 pm

Re: Accessing ports behind nat

Mon Aug 27, 2007 9:39 pm

Guess I need to ask in a different way or explain more.

The mikrotik unit pulls a routable ip address and has a 192.168.1.0/24 setup on the ethernet port. I setup src-nat and masqurade.

A computer that gets a dhcp address in the 192.168.1.0/24 subnet wants to access a x10 camera placed at his home. I run the test above and it says it will not connect. Now if I hook up a linksys unit and do the same thing it works fine. So there is got to be a setting in mikrotik that would allow me to fix this issue.

The x10 camera uses many ports (about eight if I remember correctly)

-Michael
 
mperdue
Member Candidate
Member Candidate
Topic Author
Posts: 290
Joined: Wed Jun 30, 2004 8:18 pm

Re: Accessing ports behind nat

Mon Aug 27, 2007 10:31 pm

I was able to get this to work by setting up dst-nat

Add rule

Under General

select chain dst-nat
in interface pppoe-out

Under Action

Select dst-nat
To Address 192.168.1.2
to ports 0-65535

And set the computer to a static address 192.168.1.2

----------------
Is there anyway to allow the computer to stay on the dhcp server with dynamic address? I tried the to address with 192.168.1.100-192.168.1.200 but that didn't work for me.

Who is online

Users browsing this forum: johnson73, zekino and 125 guests