Community discussions

MikroTik App
 
kyanox
just joined
Topic Author
Posts: 8
Joined: Fri Apr 22, 2022 7:58 am

CCR1009 - SoftEther

Fri Apr 22, 2022 8:05 am

Hi,
So I'm new to Mikrotik but not our realm. Long story short I've ran into a bit of an issue with a CCR1009.

I run a network with SoftEther Nodes in it. I have a customer who can use any kind of DDWRT router, or Nighthawk X6 with factory firmware, forward ports 443,992,1194,5555 to an internal ip of 10.0.5.1 (the softether address) and it seems to work fine.

When running the CCR1009 it does not when trying to forward using the following.

0 chain=dstnat action=dst-nat to-addresses=10.0.5.1 to-ports=5555
protocol=tcp in-interface-list=WAN dst-port=5555 log=no log-prefix=""

1 chain=dstnat action=dst-nat to-addresses=10.0.5.1 to-ports=1194
protocol=tcp in-interface-list=WAN dst-port=1194 log=no log-prefix=""

2 chain=dstnat action=dst-nat to-addresses=10.0.5.1 to-ports=443 protocol=tc>
in-interface-list=WAN dst-port=443 log=no log-prefix=""

3 chain=dstnat action=dst-nat to-addresses=10.0.5.1 to-ports=992 protocol=tc>
in-interface-list=WAN dst-port=992 log=no log-prefix=""

SoftEther is listening default on these ports. Is there perhaps something I'm missing that I need to try to get this working? The other end keeps reporting a protocol 2 error but isn't really in depth about it and it seems like I see a lot of connection timeouts on this end from the other end.
 
javdeev
just joined
Posts: 2
Joined: Sat Jan 30, 2016 8:19 pm

Re: CCR1009 - SoftEther

Tue Aug 23, 2022 3:24 pm

You can also add rules to firewall filter
> ip firewall filter add action=accept chain=forward protocol=tcp dst-port=443
and add masquerade rules
ip firewall nat add action=masquerade chain=srcnat src-address=10.0.5.0/24 dst-address=10.0.5.1 protocol=tcp dst-port=443 out-interface=bridge
 
User avatar
Znevna
Forum Guru
Forum Guru
Posts: 1347
Joined: Mon Sep 23, 2019 1:04 pm

Re: CCR1009 - SoftEther

Tue Aug 23, 2022 7:51 pm

Provide an anonymized config export.
 
kyanox
just joined
Topic Author
Posts: 8
Joined: Fri Apr 22, 2022 7:58 am

Re: CCR1009 - SoftEther

Thu Sep 22, 2022 3:14 am

Oddly enough I got this working using the mikrotik app for android and basic port forwards.
I would like to see an add in pack for Router OS running softether. It's pretty amazing just how powerful this package is. I also was going to try zero tier but for the life of me can't find it for the CCR1009 or the LTE device.

I have considered SSTP and IPoEther but I only have 1 public IP and the other is behind a hotspot.

Who is online

Users browsing this forum: dj23, ekinsl and 95 guests