How to forward a link to mikrotik for wan port is ubiquiti rocket m5?

I

Ingvarr2015-03-31 09:31:41

network hardware

Ingvarr, 2015-03-31 09:31:41

Please help me with the following.
The private sector, Mikrotik is at home as the main gateway, firewall, dhcp server. which distributes the Internet to home stuff. (addressing mikrotik ether2=192.168.100.0/24)
ether1 is connected to ubiquiti rocket m5 which has static address 192.168.1.21.
The provider issues a permanent address (example 5.5.5.5)
ubiquiti rocket m5 is configured as a bridge to the dish distributing the Internet from the provider, the dish is on the MKD of course.
General information on the screenshots.
Now the question itself: how to get on a plate that is connected to Mikrotik through the ether1 port with the address 192.168.1.21
I tried a bunch of options, disabled default routes, assigned a static address to the ether1 = interface with ip address 192.168.1.22 and gateway 192.168.1.21, but all to no avail.
The maximum 192.168.1.21 was pinged, but when I try to enter the plate through the web interface, I get to the web of my own mikrotik.
What and where am I missing, help?
How to get on the web face of the plate?

Reply

Answer the question

In order to leave comments, you need to log in

2 answer(s)

C

Cool Admin, 2015-03-31
@ifaustrue

So, the first point, on the ether1 interface we assign the address 192.168.1.22 with the desired mask, we do not add any routes
In the NAT settings, we make the dst-nat rule with action = dnat to the address 192.168.1.21 and the desired port. If no firewall rules interfere, this seems to be enough for traffic to flow (if not, then you need to go to the plate itself and assign the main gateway 192.168.1.22 to it)

I

Ingvarr, 2015-03-31
@ariets1982

What is most interesting, by assigning ether1 statically like this
I got access to the web interface of the dish on my house, without prescribing additions to the firewall
It seems that everything is correct and logical, but there is one more question from here, the dish that broadcasts the Internet, for some reason it has an address not 192.168 .1.20 as it should be, and the address of the provider (example 5.5.5.5)
Here the question arises, but how to get on the plate here.