In order to accomplish port forwarding on MikroTik, it’s recommended that you understand the MikroTik firewall. Once the firewall is understood, port forwarding is by no means a daunting task. You can utilize a process called DST-NAT. Note: Be sure to have a firewall rule to allow your DST-NAT traffic.

IP Firewall Menu

Figure 1

The first step is to make sure that you know what the internal IP Address of the device you are port forwarding. Also be sure you know the port(s) you want to forward. Once this information is known to you, go ahead and open up Winbox and point your cursor to IP > Firewall.

Second, continue on to the NAT tab of the firewall.

New NAT Rule

Figure 2

From here choose the “dstnat” setup in the Chain tab and make sure Port 80 is entered (assuming you want the port opened for a web server).

New NAT Rule

Figure 3

Once you set the port to your liking, go to the Action tab. This is where you will setup the address of your device on your network in order to confirm the port you want forwarded to the device.

Action Tab

Figure 4

In this instance, shown above, we are forwarding to an internal address of 10.10.5.6 and to the port 80, which is the HTTP server. This can be set to another port if the web server on the device is listening to a different port.

Congratulations! You have successfully set up MikroTik port forwarding.


Joshua Gray

About Joshua Gray

Joshua’s experience includes 8 years of networks engineering in enterprise environments and 8 years in LAN/WLAN design, configuration, implementation and monitoring. Joshua’s specialties include Routing Protocols, IPV6, and Wireless. He is also currently completing his Masters in Network Engineering, Security and Management at DePaul University. Joshua’s teaching experience comes from an academic background where he taught networking technologies as a lab assistant.

More posts by Joshua Gray

Leave a Reply

X