de portforward is wel degelijk ok
Dubbele nat ? Mijn bridging is very basic op routerOS. Heb daar ook niets van NAT opstaan
De router heeft een ip 192.168.0.98 ( zelfde subnet als modem ) meer is daar ook niet ingesteld
Ik wil herust hier de config neerzetten staat toch niets specifiek in ( heb het gehide ) ; maar goed dit is RouterOS specifiek
/interface bridge
add admin-mac=2C:C8:1B:D2:AC:34 auto-mac=no comment=defconf name=bridge1
/interface ethernet
set [ find default-name=ether1 ] arp=proxy-arp mac-address=2C:C8:1B:D2:AC:33
set [ find default-name=ether2 ] mac-address=2C:C8:1B:D2:AC:34
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=x wpa2-pre-shared-key=x
add authentication-types=wpa2-psk group-key-update=1h mode=dynamic-keys name=5GHZ supplicant-identity="" wpa-pre-shared-key=x wpa2-pre-shared-key=x
/interface wireless
set [ find default-name=wlan1 ] amsdu-limit=4096 amsdu-threshold=4096 band=2ghz-onlyn country=belgium disabled=no disconnect-timeout=10s installation=outdoor mode=ap-bridge security-profile=5GHZ \
ssid=Terras-2Ghz-Rob wireless-protocol=802.11 wmm-support=enabled wps-mode=disabled
set [ find default-name=wlan2 ] amsdu-limit=4096 amsdu-threshold=4096 band=5ghz-n/ac country=belgium disabled=no disconnect-timeout=4s frequency=5260 installation=indoor mode=ap-bridge \
security-profile=5GHZ ssid=Terras-5Ghz-Rob wireless-protocol=802.11 wmm-support=enabled wps-mode=disabled
/ip pool
add name=OVPN ranges=192.168.0.55-192.168.0.60
/ppp profile
add local-address=192.168.0.98 name=VPN_Profile remote-address=OVPN
set *FFFFFFFE local-address=192.168.0.98 remote-address=192.168.0.57
/interface bridge port
add bridge=bridge1 comment=defconf interface=ether2
add bridge=bridge1 comment=defconf interface=wlan1
add bridge=bridge1 comment=defconf interface=wlan2
add bridge=bridge1 interface=ether1
/ip firewall connection tracking
set generic-timeout=0ms icmp-timeout=0ms loose-tcp-tracking=no tcp-close-timeout=0ms tcp-close-wait-timeout=0ms tcp-established-timeout=0ms tcp-fin-wait-timeout=0ms tcp-last-ack-timeout=0ms \
tcp-max-retrans-timeout=0ms tcp-syn-received-timeout=0ms tcp-syn-sent-timeout=0ms tcp-time-wait-timeout=0ms tcp-unacked-timeout=0ms udp-stream-timeout=0ms udp-timeout=0ms
/ip settings
set accept-redirects=yes accept-source-route=yes
/interface detect-internet
set detect-interface-list=all
/interface l2tp-server server
set ipsec-secret=x use-ipsec=required
/interface ovpn-server server
set auth=sha1 certificate=Server cipher=aes256 default-profile=default-encryption enabled=yes require-client-certificate=yes
/ip address
add address=192.168.0.98/24 comment=defconf interface=bridge1 network=192.168.0.0
add address=192.168.0.230 disabled=yes interface=ether1 network=192.168.0.230
/ip firewall filter
add action=accept chain=input dst-port=98 protocol=tcp
add action=accept chain=input dst-port=1194 protocol=tcp
add action=accept chain=input dst-port=8291 protocol=tcp
/ip firewall nat
add action=accept chain=srcnat dst-address=192.168.0.98 protocol=tcp src-address=x.x.x.x(telenet wan )
add action=accept chain=dstnat disabled=yes dst-address=192.168.0.98 src-address=0.0.0.0
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www port=98
set ssh disabled=yes
set www-ssl disabled=no port=4443
set api disabled=yes
set api-ssl disabled=yes
/ip upnp
set enabled=yes
/ppp secret
add local-address=192.168.0.98 name=x password=xxx remote-address=192.168.0.56 service=ovpn
/system clock
set time-zone-name=Europe/Brussels
/system logging
set 0 topics=info,debug
set 2 topics=warning,debug
add prefix=Wifi topics=wireless,debug
add topics=dhcp
add prefix=vpn topics=ovpn
add prefix=firewall topics=firewall
add prefix=watchdog topics=watchdog
add topics=warning
add prefix=system topics=system
/system script
add dont-require-permissions=no name=disable owner=xx policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="Interface wireless disable wlan1"
add dont-require-permissions=no name=Enable owner=xx
policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="Interface wireless enable wlan1"
Master-Magic | 
