Port Forwarding on MikroTik RouterOS

Port forwarding on a MikroTik RouterOS involves configuring your router to redirect traffic from the internet to a specific device within your local network. This is typically needed for hosting services like web servers, game servers, or other applications that need to be accessible from outside your local network.

Step-by-Step Guide

1. Access the MikroTik RouterOS

Connect to your MikroTik router using Winbox or WebFig. Winbox is a graphical user interface that provides an easier way to configure your MikroTik Router, while WebFig is a web-based interface that you can access through your browser.

2. Navigate to IP > Firewall

This menu allows you to manage firewall settings, including NAT (Network Address Translation) rules which are used for port forwarding.

3. Create a new NAT Rule

• Go to the "NAT" tab within the Firewall settings.
• Click on “+” or "Add New" to create a new rule.

4. Configure the NAT Rule for Port Forwarding

• Chain: Select "dstnat" – this specifies that the rule is for incoming traffic.
• Protocol: Select the protocol used by the service (TCP, UDP, etc.).
• Dst. Port: Enter the port number you want to forward (e.g., 80 for HTTP).
• In. Interface: Choose the interface that connects to the internet (often named 'ether1-gateway', 'pppoe-out1', or similar).

5. Action Settings

• Action: Choose "dst-nat".
• To Addresses: Enter the local IP address of the device that will receive the traffic (e.g., 192.168.88.100).
• To Ports: Enter the internal port number if it’s different from the external one; otherwise, it can be the same as "Dst. Port".

6. Enable the Rule

• Ensure the rule is enabled by checking the box or making sure it isn’t disabled.
• Apply and save your settings.

7. Configure Additional Firewall Rules

It’s advisable to check or set up corresponding firewall filter rules to allow the forwarded traffic to pass through to the internal network. You can do this in the "Filter Rules" tab, ensuring there's an allow rule for incoming connections on the forwarded port.

8. Test the Configuration

From outside your network, try to access the service using your public IP address and the port number. You can check your public IP by searching "What is my IP" in a web browser, or you can ask someone to test accessing your service from a different location.

This setup should enable port forwarding on your MikroTik RouterOS. Remember, each network configuration can vary slightly based on different factors like the specific RouterOS version or additional network settings, so some steps might need adjustments.