A
A
Andrew Electis2020-02-18 00:23:19
Mikrotik
Andrew Electis, 2020-02-18 00:23:19

How to set up Mikrotik (local sites)?

There are several sites on the machine in the local network, on Mikrotik outside the ports to this machine are forwarded, everything is OK, but the web interface of Mikrotik opens from the local network via these domains, what should I write in it so that sites can also be opened from the local area?

Answer the question

In order to leave comments, you need to log in

4 answer(s)
Y
Yukkona, 2020-02-18
@Yukkona

There are 2 options - good and bad.
A good one is split DNS, in the local network you need to raise dns, on which you can already add A-records with local addresses.
The bad one is to use hairpin nat.
I will not give instructions for setting up DNS servers or hairpin nat on Mikrotik, they are easy to google.
Ps Disable the muzzle on Mikrotik web, he doesn't really need it, or transfer it to a non-standard port.

K
KomalovGleb, 2020-02-18
@KomalovGleb

Try to write static DNS records on MikroTik.

D
Dmitry Alexandrov, 2020-02-18
@jamakasi666

This is called Hairpin NAT . In fact, add another rule to the masquerading.

T
Talyan, 2020-02-18
@flapflapjack

but the Mikrotik web interface opens from the local network via these domains

Is this a kag at all?
Inside your network, the domain should lead not to Mikrotik, and not to its external IP address, but to the local IP address of the web server.
At the same time, no web muzzle of Mikrotik should open in any way.
Have you either tied the IP address of Mikrotik to domains in hosts or something?
And in order for the sites to be accessible from the outside, then on Mikrotik you need to forward only 80 and 443 (if there is a ssl) to the local address of the web server.
At the same time, users outside will get to the desired domain only if they register in their hosts the correspondence of the domain and your external ip.
Well, or hang each domain in the web server on different ports, and do port-forwarding for each site separately, then the sites will be accessible from the outside without a domain name, by ip with an explicit port.
When logging in from LAN, you will also have to specify ports.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question