NAT v mikrotiku

[pavlos]

pokousim se dostat prez winbox ale nejde to, jak se tam da dostat pomoci telnetu? jaky port pouziva? Dik

[Radek Úlehla]

- > google

poslední co ti řeknu je to, že v defaultní konfiguraci je na wan portech zapnutý ve fw drop

[pavlos]

I tak moc dekuu, mt mam 30km od sebe a nemuzu se na nej dostat, ted uz aspon vim jakym smerem jit. Ale bez toho kdyz je na stole to jde ztuha,a vecer tam bude mrznout tak tam moc casu taky nemam. Moc dik kazde nakopnuti pomuze

[pavlos]

Pekny den,

prosim o kontrolu nejak to proste nemaka

Flags: X - disabled, I - invalid, D - dynamic
0 ;;; zatim nevim
chain=dstnat action=dst-nat to-addresses=192.168.1.10 to-ports=3389
protocol=tcp in-interface=ether1-gateway src-port=54321 dst-port=3389

1 ;;; zatim nevim
chain=dstnat action=dst-nat to-addresses=192.168.1.88 to-ports=3389
protocol=tcp in-interface=ether1-gateway src-port=5555 dst-port=3389

2 ;;; zatim nevim
chain=dstnat action=dst-nat to-addresses=192.168.1.88 to-ports=3389
protocol=udp in-interface=ether1-gateway src-port=5555 dst-port=3389

3 ;;; default configuration
chain=srcnat action=masquerade to-addresses=0.0.0.0
out-interface=ether1-gateway

predem dik

[Radek Úlehla]

src-port nech prázdný

[pavlos]

Ale kdyz budu chtit z venku pristupovat na port 5555 a do vnitrni ip na port 3389 tak tam nekde musi byt?

[pavlos]

lags: X - disabled, I - invalid, D - dynamic
0 ;;; zatim nevim
chain=dstnat action=dst-nat to-addresses=192.168.1.10 to-ports=3389
protocol=tcp in-interface=ether1-gateway src-port=54321 dst-port=3389

1 ;;; zatim nevim
chain=dstnat action=dst-nat to-addresses=192.168.1.88 to-ports=3389
protocol=tcp in-interface=ether1-gateway src-port=5555

2 ;;; zatim nevim
chain=dstnat action=dst-nat to-addresses=192.168.1.88 to-ports=3389
protocol=udp in-interface=ether1-gateway src-port=5555 dst-port=3389

3 ;;; default configuration
chain=srcnat action=masquerade to-addresses=0.0.0.0
out-interface=ether1-gateway

[pavlos]

Tak jsem valcil cely vykend a postupne jsem testoval , koukal a sledoval co slo. Hrabalů jsem si i demu opsal ale proste tam mam nekde nejaky problem. Proste jsem lama potrebuju proste pomoct nebo trosku vic nakopnout

[pavlos]

Lama se prokousala prvni kupou sena

Flags: X - disabled, I - invalid, D - dynamic
0 ;;; pokus
chain=dstnat action=dst-nat to-addresses=192.168.1.1 to-ports=80 protocol=tcp in-interface=ether1-gateway dst-port=140

1 ;;; default configuration
chain=srcnat action=masquerade to-addresses=0.0.0.0 out-interface=ether1-gateway
I tak dik



krucek po krucku a je jde to