Community discussions

MikroTik App
 
solarwing
just joined
Topic Author
Posts: 10
Joined: Thu Apr 20, 2023 6:03 pm

make accessible from internet an host in a VLAN

Wed May 24, 2023 11:02 pm

hello,

I have a configuration like this on a CRS326

|internet| <--- |ISP modem/router| <---- | CRS326 WAN port |
On the CRS326 I have a couple of VLANs, and the CRS has the ip 192.168.1.123 (modem subnet) assigned on the WAN port. Some VLANs are already able to reach the internet (src nat).
What I need now, is the ability to make accessible an host in the VLAN1 (10.10.30.1/24) from the internet, how can I do that?

thanks in advance.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 18959
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: make accessible from internet an host in a VLAN

Wed May 24, 2023 11:31 pm

Your explanation is lacking, please provide a diagram.
As well your configurations
/export file=anynameyouwish ( minus router serial # )
 
sindy
Forum Guru
Forum Guru
Posts: 10205
Joined: Mon Dec 04, 2017 9:19 pm

Re: make accessible from internet an host in a VLAN

Thu May 25, 2023 9:02 am

Look for port forwarding. Since your WAN address is a private one, you will need to set up port forwarding (or 1:1 NAT a.k.a. DMZ) on the ISP modem itself, or maybe set the modem to bridge mode and terminate the PPPoE on the CRS if that's possible with your modem and if your ISP does use PPPoE at all. If the modem doesn't have a public IP either, you'll have to run a virtual router (CHR) somehwere in cloud, build a VPN tunnel to it, and set up port forwarding from that virtual router.
 
solarwing
just joined
Topic Author
Posts: 10
Joined: Thu Apr 20, 2023 6:03 pm

Re: make accessible from internet an host in a VLAN

Fri May 26, 2023 11:05 am

hi,

no I cannot use modem as bridge, it is not supported. And the modem has a public IP
Yes I know I have to enable the port forwarding on the modem too, but what I need to do on the CRS?
attache you can find the exported conf, I need that an host in VLAN_IOT can be accessible from internet on a given port
You do not have the required permissions to view the files attached to this post.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 18959
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: make accessible from internet an host in a VLAN

Sat May 27, 2023 11:38 pm

 
sindy
Forum Guru
Forum Guru
Posts: 10205
Joined: Mon Dec 04, 2017 9:19 pm

Re: make accessible from internet an host in a VLAN

Sun May 28, 2023 10:16 pm

I need that an host in VLAN_IOT can be accessible from internet on a given port
/ip firewall nat add chain=dstnat in-interface-list=WAN dst-port=xxx action=dst-nat to-addresses=ip.of.the.device.in.vlan
You can add also to-ports=yyy if you need to redirect the connection to a different port number than xxx.
 
solarwing
just joined
Topic Author
Posts: 10
Joined: Thu Apr 20, 2023 6:03 pm

Re: make accessible from internet an host in a VLAN

Thu Jun 01, 2023 11:09 am

cool, that works, thanks!

Who is online

Users browsing this forum: archemist, GoogleOther [Bot], tangent and 63 guests