MikroTik Tutorial 28 - Port Forwarding

Learn MikroTik RouterOs Tutorial Series (english)
In this tutorial, I will show you how to configure Port Forwarding.
You will need any one of these Mikrotik routerboard router for this tutorial:
Mikrotik RouterBoard RB951Ui-2nD hAP
Mikrotik RB3011UIAS-RM
Mikrotik Routerboard RB2011UiAS-2HnD-IN
Mikrotik RB750Gr2
Mikrotik hEX RB750Gr3
MikroTik RB2011iLS-IN
MikroTik Cloud Router CRS109-8G-1S-2HnD-IN
hAP lite
hAP
hAP ac lite tower
hAP ac
mAP lite
mAP
wAP
RB951Ui-2HnD
RB951G-2HnD
RB2011UiAS-2HnD-IN
Mikrotik RB941-2nD-TC

[@JakeLoeppky]

I've watched several Mikrotik port forwarding rules and they don't work. This one was simple and it actually worked! Thanks man.

[@TKSJa]

Great!

[@WMartinNI]

Great guide, exactly what I was looking for. Thanks.

[@stanleemoks]

Bro you make thing thing much easier "Thanks a Million"

[@TKSJa]

You are welcome

[@MrPherez]

good work man many blessings keep the good work to teach the world.

[@mukiibipeter07]

Yeah. Thanks man. This is what I was looking for. Many people were talking about a public IP and I don't have that. Thanks again.

[@nadiezdatamosauske4782]

wow, thanks for the tutorial! Wakanda foreva

[@kutsalkaanbilgin]

thanks so much for these videos! very, very helpful.

[@sheprev]

man you rock...keep the great work up

[@todorvachev891]

Hey, thanks for the tutorials! However I am having trouble with my FTP port forwarding, I did exactly exactly as you showed in the video and I checked it 10 times that I did the exact same, but I still cant access my FTP, I cant even access it locally. I am using Mikrotik hAP AC^2, when I turn on my old TP-Link that I retired in favor of the Mikrotik, my ftp is working without touching the FTP server computer at all, so the FTP is there, its something with the Mikrotik. Is there anything additional that I have to allow/do to make it work? Everything was working fine with my TP-Link...

[@redfoxinet]

Thanks a log man, you made my day.

[@arslanshaheen6671]

Perfect thanks for the step by step information

[@psychodelicr]

it should be 192.168.11.196:8080 on diagram.. instead of redirects 192.168.11.192:8080

[@parasmehta1326]

Thanks a lot man. This makes it much easier for me to manage my router. =)

[@TKSJa]

Glad I could help!

[@stephenkojovan8634]

I have been following you ever sence, bro I have subscribed now pls continue this good work.... thanks

[@ge9301]

Hi TKSJa, I am now looking after a Mikrotik RB951Ui-2HnD Router (no experience on these as yet) connected to a VSAT modem service. I notice that on the Quickset menu screen the config for Firewall is not checked whereas the NAT box on the Local Network config is. The unit is running in Masquerade mode. I would have thought it best to have both Firewall checked as well as NAT to create 2 stage firewall security or is this incorrect? I believe this may slow the router down but I am after security. Any assistance appreciated.

[@ericknaus4998]

Enjoying your videos. I have been doing a variation on this - same thing except I have not been entering a value in Dst. Address and works same as yours. Are you accounting for multiple IP address on the interface or something else?

[@jayantaghosh95]

Can I do SSH login to my internal server from a PC in the internet by using the port forwarding technique you have shown here?

[@colonelmotorov5854]

Showing WAN as 192.168.*.* is quite confusing, cause it's usually associated with the LAN IP addresses.

[@petrkortys1932]

What if there is a modem between remote computer and router? Do I need to allow incoming connection somehow?

[@lakromani8172]

In the way I do it, I do not need to specify the Wan IP. My rules will work fine if my ISP change the outside IP. General: Chain=dst-nat Protocol=tcp Port=8080 In-Interface=Wan interface Action: Action=netmap To-address=ip of webserver To-Port=80 Simpler and works with DHCP on outside.

[@TKSJa]

Cool, I have never done it that way before.

[@DarrylGibbs]

I'm trying to forward a UDP port for a Game Server. By RouterOS just isn't letting it though. I tested with another basic router , and all is well, but I can't make my hap2AC forward a UDP port. Am I missing something? is there something beyond the port forwarding instructions in this video?

[@RudiOnRails]

Hi, I have watched numerous tutorials and I am still unable to forward ports for steam. The ports i need to forward is 27001-27030 and 6112-6122 on tcp and udp. Is there any way you could possible assist me?

[@mustachess]

Hi! Thank you for this tutorial, its been helpful. Still I have another issue with Mikrotik LTE router; I am using it as a LTE sim run outdoor modem, but as soon as I want to connect a device on it via ethernet cable, it collapses… the question is how to set the ethernet port on Mikrotik to be LAN instead of router understanding ethernet cable connected is an inbound internet?

[@psycho_therapy6011]

thank you very much.

[@theophileamougou2622]

tanks for your nice videos. please can you do us a video how to configure printers in the Mikrotik Router ? . thanks

[@kailiaflymore9164]

Hi. I would like to know how to port forwarding for xbox one. Thanks so much!

[@MiamiWebDesign]

Nice video. Will this work to port forward to a cellular 4g internet connection from a provider that doesn’t provide port forwarding like a standard dsl or cable ISP? I need to port forward in a rural area where only cellular internet is available. Many thanks

[@TKSJa]

The device has to have port forward for this to work.

[@teephart]

thanks very much for this tutorial.. i have two questions. 1st, how can i filter the ip address that can access have access to the port from the internet. i.e i only want some certain IP or a certain IP address to have access to the NAS on my raspberry 2nd, my router web config is on port 80 and my apache service is also on port 80, how can i filter traffic destined to the router or apache without changing the port number. remember, once i enable port forwarding to port 80, i can no longer access my router webconfig

[@JakeLoeppky]

1. In the Src Address enter the ip you want to allow from 2. You could leave one completely alone, for instance the web server, and just change the incoming port for the router's web config. It'd be cleaner to give out a website without a port involved(website:8000 doesn't look clean). For your router web config you could come in on port 8080 or whatever you wish and just forward that to the router's ip on port 80.

[@blackbarry45]

how about port triggering? is this the reverse funtion ?

[@rolandow2]

What is your WAN ip changes because the internet provider gives you a new IP?

[@newmiziri]

Hi I hope you are fine, I have many question in NAT genernal you put ip and port which differnt from action port and IP kinldy explain more for that , thanks again

[@AP-qc9hi]

In my setup, this wasn't enough. I had to add the fwd firewall rule to allow incoming traffic to that port.

[@JustinSangTran]

Hi, do you have tutorial for that rule ? For my setup, i need to port forwarding to 192.168.9.2:21 ( Port 21-FTP ) . My main IP is: 192.168.9.1 . Thank you so much sir

[@jesuslopezmartinez5649]

i just want nat type 1 on my ps4 but i dont understand its a good video but i dont understand can you help me? please

[@mozky3314]

For some reason I cant set up my Lan ip in hyper v mikrotik.

[@badral9]

Please make video about how to connect ftp server through the PPTP VPN?

[@MilanKarakas]

I do not understand what to enable in DHCP client, and what in DHCP server. There are many fields, and I am afraid to mess my current working internet connection.

[@dexlaine]

How to port forward within a network with separate ip address on every port of the router

[@MrPherez]

Hi my friend how do i connect IPSEC site to site server connection between cisco and mikrotik

[@HMIBarryLSalter]

I need this exactly! If you have a tutorial, please post a link as a reply

[@SkullLuckForza]

thanks

[@badral9]

can i use this method on pptp vpn?

[@redechiko]

I have two routers one is dlink router from ISP, and Mikrotik router which gets its link from the dlink. My DVR is connected to the mikrotik router. Which IP should I use white configuring port forward

[@TKSJa]

The Mikrotik router WAN ip.

[@JakeLoeppky]

If you're just trying to make a connection to the DVR from within the dlink router then you just need to make one port forwarding rule inside your Mikrotik. Use the Mikrotik's ip as the 'WAN'(DST Address) and forward to the DVR ip over whichever ports you want. If you're trying to make a connection from the WAN(public ip) then you'll have to also make a forwarding rule in your dlink as well as the one mentioned above. For the dlink, use the public ip given by the ISP to your router as the DST Address and forward to the Mikrotik's ip...

[@Riley26781]

I’m currently trying to port forward the port 30120 for my video game server but it won’t work if somebody could help me I would appreciate it

[@talktomesek]

hi tk i have been looking for tutorial that covers on how to do a double nat with mikrotik . i didn t get any luck yet can you give me idea or refer me to a site that covers thank for your attention.

[@dharmaputra7394]

Request tutorial ip forward cctv and configure on access point or modem

[@TKSJa]

I do a video on it when I get a IP camera.

[@fixinformationtechnology9110]

I kinda get a problem when it comes to the IP address of that replaces yours which is 192.168.11196, is that the public ip or????

[@JakeLoeppky]

Anything inside 192.168.x.x is a private ip. A Class C private ip range. In the video he's just using it as an example. He must have 2 routers daisy chained. In this instance 192.168.11.196 is considered the 'WAN'(dst address) ip.

[@farhanrijvi9169]

Why we use port number "80" on Action>To Ports: 80, instead of same port number as "8080"?

[@TKSJa]

Because the port that I am forwarding to uses the same internal port.

[@hassansheikh3406]

Dear Sir, I did not understand about WAN IP Address (192.168.11.196) in your network diagram. In my case, I have a modem (given by ISP having a public IP address) attached to mikrotik. The link between modem and mikrotik has private IP address (192.168.2.X). Now which would be my WAN IP in this case?

[@TKSJa]

That would be your public IP.

[@maurogario1291]

Hi. if you have a private address on internal side of your ISP device, then it is a router (not a modem) and you either allow DMZ to your Mikrotik or your must do port forwarding on the ISP routing to the Mikrotik for each port you want to make accessible outside. Then you should do another port forwarding on Mikrotik to your internal device behind the Mikrotik. But why you have a Mikrotik there in first place? You can see your public address (than can be static or dynamic) using Whatismyip web site.

[@computeguru3526]

how can you restrict The Source IP address to DDNS and it should automatically update

[@AP-qc9hi]

I don't even put in ip address. I use the "IN INTERFACE" = ETH5-WAN. This rule will apply to whatever comes in the WAN interface, regardless of your public IP.

[@maimounacombo9487]

j aime

[@allanquezon6841]

hello sir how to port forwarding for games?

[@JakeLoeppky]

Just like in the video but replace the port numbers to match your needs.

[@williammarshall275]

mynr is not working trying to forward to my public ip...

[@TKSJa]

Check you config again

[@jackula123]

port is still closed for me :(

[@wavesdataservices5178]

I want to port forwad to a cctv dvr this is the setting (WAN) mikrotik router dhcp range (192.168.88.10-192.168.88.254) to another mikrotik router dhcp range(192.168.30.10-192.168.30.254) CCTV DVR Ip Address:192.168.30.50 port number8000

[@TKSJa]

You will need to setup multiple port forwarding (WAN to router A to router B)

[@blackbarry45]

where are you from ?

[@techsupport6495]

192.168.11.196 is your router ip address (Private IP Address) ?

[@JakeLoeppky]

Anything in 192.168.x.x is a private ip but in the scenario he's using it as the WAN. He must be stacking 2 routers. One router connected to another router... For this video, think of 192.168.11.196 as the WAN.

[@diyotv2150]

not me trying to make an minecraft server and struggling

[@usmanjutt7908]

any free software i give user self registeration and get user data first name last name mobile number when user put this information user access internet

[@TKSJa]

noted

[@usmanjutt7908]

@@TKSJa i am still wating free radius server video

[@trewbless]

Good day sir, I am a subscriber to your youtube channel, and I have been following you all along with your videos, by the grace of God am really learning fast with your videos, but there is an issue with me port forwarding my dahua ip camera ,I have tried all possible best I cannot still get it , I dont know if it is as a result of my huawei moderm/router that is giving me internet to the mikrotik router that is the course, but when I did the port forwarding on the huawei router to the dahua ip camera I could watch it remotely, but to the mikrotik router it doesnt work, pls if need be I wouldn't mind given you access to my mikrotik router remotely for you to help me solve this problem, or if you are to do a video on dahua ip camera portforwarding just because of me I will appreciate it so much. pls attention urgently sir.

[@christopherbedford9897]

Yeah no yeah that's not a semicolon dude. It's a Colon [:] (two dots) Semicolon [;] (dot comma)

[@kamilgagatek3078]

why not WebFig?????? noobs..

[@s1ubbe]

Dear god miktotik sucks, even doing the simplest thing is a hassle