Enable Outside Access to Internal Devices

Let’s say you have a DVR that has a static IP of and you need to forward port 7000 so that you can connect to it remotely. This article will give you step by step instructions to set up the port forwarding.

How to port forward?
1. Once logged in, go to IP > Firewall
2. Select section on NAT

3. Click the red “plus” sign to add a new rule
4. Under General, select your chain as “dstnat” (Steps 4-7 caters for traffic incoming to router)
5. Change Protocol to TCP
6. Change Dst. Port to 7000
7. Set the “In. Interface” to your WAN port

(You are telling the router that any traffic coming IN from the internet on port 7000 should follow this rule.  If you forget this step, the router will grab ANY traffic on port 7000 and send it to the IP you specify in the next step)

8. Select section on Action(Steps 8- caters for the action to take with the traffic selected in the above steps)
9. Enter the To address, which should be the LAN IP to send the port forwarding traffic
10. Enter the To port 7000 for the intended destination port on the LAN IP.

11. Click OK to save changes and you are done.

Terminal version:

This is all you would have to type into a Terminal window to enter this port forwarding rule.

/ip firewall nat
add action=dst-nat chain=dstnat disabled=no dst-port=7000 in-interface=ether1-gateway protocol=tcp to-addresses= to-ports=7000

Please click here if this helped you.
37 people found this helpful.

Category: Wireless

← FAQs