Port forwarding for IP camera on mikrotik 951 how to do it right?

Question

Mikrotik

There is a home network based on mikrotik 951, the network has an IP camera. It is necessary to make it so that there is access to the camera from the web, create a rule in the firewall (firewall - nat), when it is turned on - there is access from the web to the camera, but the Internet on the network drops. How to create a rule? Thank you.

Answer 1

Connect via ssh or via webfig, launch the terminal. Write:
> ip firewall nat
then:
> add action=dst-nat chain=dstnat disabled=no dst-port=3389 protocol=tcp to-addresses=192.168.88.2 to-ports=3389
dst-port, to-ports - change 3389 (rdp) to the appropriate camera
protocol port - either udp or tcp. If you need access to the camera's web muzzle, then most likely tcp.
to-addresses - address of your camera in LAN.
Check :)

Answer 2

add action=dst-nat chain=dstnat dst-port=[external port] in-interface=[external interface] protocol=tcp to-addresses=192.168.88.[cameras] to-ports=80
Ports typically 80 (web) , 554 (rtsp), 8008 (mjpeg), manufacturer dependent.

Answer 3

Thank you, it worked, only if I knock on it from my network through Wi-Fi, it is silent. If it's just from the web under the IP not from the network, then it works. It should be?

Answer 4

Good afternoon.
Tell me, I entered these commands in winbox through the terminal, shouldn't the entry appear in ip / firewall?