• Springs

    Dude… you forgot to put an interface on the rule.

    That rule will grab anything :7000 and send it to your LOCAL DVR.
    So if you were on site and needed to check another system via IP or DNS name… that rule will capture it and send it to the local DVR. It will capture anything with that port and send it.
    Try this with that rule active and you will see. http://yousuck.youforgottohookupthedoll.com:7000

    You either need to put the external IP in the dst-address for the rule.
    Or you need to run that rule on the GATEWAY interface. (Ether-1 most of the time.)

    • admin

      Good catch. On these little jobs you almost never catch stuff like that because why would you be checking another site with port 7000 while you were there?
      BUT… If the customer has multiple sites with the same dvr and port 7000 and he tries to view the other cameras FROM this site he would never be able to get to them.
      I’ll update it.

      • Mike

        Hi there Admin, I am still having difficulties with enabling Port Forwarding on my device.. I have a dynamic IP and i can just not manage to get my port forwarding working.. please pop me a reply if you can help in any way.. psy.sinner@yahoo.com is my E-mail

        • admin

          dynamic IP… are you talking about your WAN IP being dynamic or the device’s IP being dynamic?

  • Springs

    Its still fucked up in the terminal commands! 🙂

  • Springs

    Looks good now!

  • Pingback: Port Forwarding on Mikrotik | Networking For Integrators()

  • thank u 😀

  • Him

    Awesome Awesome Awesome
    So easy and worked straight away.
    I would have liked to find this about 2 months ago 🙂
    Thanks for making it easy to follow….Awesome again

  • muhamed

    hi
    im trying to port forward in my routerboard 751 i’m using static ip and bridge connecting
    i did try every thing but my ports didn’t work i don’t know what to do
    can any one help me on this please i’m trying to open ports 28960 for mw2 server

    • admin

      You should just need to create a NAT rule that takes incoming traffic headed for port 28960 and dst-nat’s it to the IP of your MW2 server.
      Something like…
      /ip firewall nat add action=dst-nat chain=dstnat disabled=no protocol=tcp dst-port=28960 in-interface=ether1-gateway to-addresses=192.168.xxx.yyy (<-- the IP of your MW2 server)

  • zillur

    MY DVR pc that has a static IP of 192.168.100.37

    and my DRV TCP port 80.

    and my mikrotik web port 80 ,

    but port forwarding i have serup

    ip firewall nat add chain=dstnat dst-address=123.49.33.211 protocol=tcp dst-port=80 \
    action=dst-nat to-addresses=192.168.100.37 to-ports=80

    but i can’t log in. when i am giving dynamic IP 123.49.33.211 in my browser then don’t show any thing, so any body help me plz

    • admin

      If you’re trying to reach it locally but from you WAN address, you need to look up the Hairpin NAT article on here. There’s another step…

  • Kapila

    My internet static ip is 116.12.50.XX and my public ip 198.18.0.55/30 (not privet ip)
    How to config mikro tik router ( I wants log internet my pc web browser 116.12.50.XX:9000

    • admin

      You want to remotely log into a web browser running on a PC that is at 116.12.50.XX:9000 ?

  • mohannad

    hello
    i have the same problem like (zillur August 25, 2013 at 6:42 am :

    MY DVR pc that has a static IP of 192.168.100.37

    and my DRV TCP port 80.

    and my mikrotik web port 80 ,

    but port forwarding i have serup

    ip firewall nat add chain=dstnat dst-address=123.49.33.211 protocol=tcp dst-port=80 \
    action=dst-nat to-addresses=192.168.100.37 to-ports=80

    but i can’t log in. when i am giving dynamic IP 123.49.33.211 in my browser then don’t show any thing, so any body help me plz
    )
    Please can i have a clear answer it seems like ports 80 for dvr and mikrotik are making some conflict or something
    thanks

    • admin

      You can’t forward port the same port to more than one ip address, you would need to do something like take incoming port 81 and forward it to the dvr’s port 80.
      If you think about it, you only have one public ip address, so therefore only one port 80 you can forward. If you try and send port 80 traffic to multiple devices inside the network, how would it know which device to go to?

  • Juan Jose

    Hi

    I got this problem, these are my two rules (using winbox)

    1- srcnat
    Src Address : 192.168.10.0/24
    Out interface : wayout
    Action: masqueradre

    2- chain:dstnat
    Dst Address: My Public-IP
    Protocol:6(tcp)
    Dst port:8087

    Action

    Action: dst-nat
    To Addresses: DVT IP
    To ports: 8082—is the DVR port

    My attempt to los is public-address:8087

    But it does not work, But I can see some traffic thought the rule, is like the traffic came to the DVR but it does not respond.

    I check the dvr by LAN and it is working.

    Any help would be much appreciated

    • admin

      Are you testing it from inside your own network or from somewhere else?

      • Juan Jose

        It work in the LAN, but when I try to connect remotely it fails. Thanks

  • Greg

    Thank you very much! A bit frustrating that Mikrotik’s official documentation doesn’t take the time to document these “basic” operations…! Cheers

  • Farah

    Thanks a lot,
    Its help me.
    After make my device IP static running on port 80 on local network now I can connect with it by using WAN IP with different port (7000)

  • Mrky

    Please guys help, I cant set up my DVR to work online, I tried everything but it is not working.

    Local adress of my DVR is 192.168.88.199

    I have outside static IP adress xxx.xxx.xxx.xxx and I want to forward DVR on xxx.xxx.xxx:9000 but whatever I do it is impossible? :S

    • admin

      here’s an example from Terminal:

      /ip firewall nat add action dst-nat chain=dstnat dst-port=9000 in-interface ether1-gateway protocol=tcp to-addresses=192.168.88.199

      That’s assuming the DVR only needs TCP port 9000 forwarded, and ether1 is your WAN port.

  • sattar

    hi please hellllllpppp.
    i have a problem in routerboard 750gl. i have internet in tp-link modem (with ip 192.168.1.1) and set virtual server in port 1723 and pptp protocol (for vpn connection). in routerboard i config ether2 to ip address 192.168.1.2 and connect that port to modem.
    how i can config the routerboard to accept the vpn request from ethe2??

    • admin

      Why are you using ether2 to connect to the modem? All the default settings are assuming your WAN is on ether1 and LAN is ether2-ether5.

  • Awesome i am impressed……………http://mikrotikroutersetup.blogspot.com

  • Kaspersz

    Port forward in Routerboard 750GL

    Question: port forward HTTP (port 80)
    ——————————-
    working great from outside ( from internet / computer in another home) but from inside the same www address ( in the same network as webserver) it going to the router itself login page or nowhere.
    how to solve it please help!