Forwarding a port to an internal IP on a Mikrotik

Forwarding a port to an internal IP on a Mikrotik

This example will show you how to forward port (tcp 3389) to an internal IP using destination NAT. 69.69.69.69 is the example wan IP, 192.168.1.101 is the desired internal destination.

Terminal:

/ip firewall nat add chain=dstnat dst-address=69.69.69.69 protocol=tcp dst-port=3389 \
    action=dst-nat to-addresses=192.168.1.101 to-ports=3389

Winbox:

Go to IP>Firewall and click on NAT tab.  Then click new (+)


Chain: dstnat
Dst. Address: WAN IP
Protocol: tcp (change to your need)
Dst Port: 3389 (change to the port you need to forward)

Then click on Action tab.


Action: dst-nat
To Address: 192.168.1.101 (change to internat IP you will be pointing port to)
To Ports: 3389 (change to your needs)

Click OK.


Your port is now forwarded to internal IP.


    • Related Articles

    • Mikrotik - NAT Rule (Port Forwarding)

      In the event port forwarding is needed, a NAT Rule will need to be created in the Mikrotik. For this example, the NAT Rule is to allow access to a device on IP 192.168.88.100 using port 80 (extension 100). For devices such as onsite PBX that have ...

    • Mikrotik - Complete Setup Guide

      **Disclaimer: This guide is provided by 3NG as a courtesy to its partners. You are using this guide at your own risk and 3NG is NOT responsible or liable for any issues that may occur from the use of this guide or a Mikrotik device. While we ...

    • Mikrotik - DNS DoS Attack Prevention

      If you are experiencing high ping times and/or slower than normal internet speeds, you might be a victim fo a DNS DoS attack. This article will walk you through creating a firewall rule on Mikrotik routers to block this attack. Log into your Mikrotik ...

    • How to Disable SIP ALG on a Mikrotik

      SIP ALG Explained Many of today's commercial routers implement SIP ALG (Application-level gateway), coming with this feature enabled by default. While ALG could help in solving NAT related problems, the fact is that many routers' ALG implementations ...

    • Mikrotik Site to Site Ipsec VPN

      *Information on this page was taken directly from http://wiki.mikrotik.com/wiki/Manual:IP/IPsec. We did not create this document and do not take responsibility for any possible outcome of using these directions. Site to Site IpSec Tunnel Consider ...