How to port forward on Mikrotik


Let’s say you have a DVR that has a static IP of and you need to forward port 7000 so that you can connect to it remotely. This article will give you step by step instructions to set up the port forwarding.

How to port forward?
1. Once logged in, go to IP > Firewall
2. Select section on NAT

  1. Click the red “plus” sign to add a new rule
    4. Under General, select your chain as “dstnat” (Steps 4-7 caters for traffic incoming to router)
    5. Change Protocol to TCP
    6. Change Dst. Port to 9000/80 (Allow Port)
    7. Set the “In. Interface” to your WAN port

(You are telling the router that any traffic coming IN from the internet on port 7000 should follow this rule.  If you forget this step, the router will grab ANY traffic on port 7000 and send it to the IP you specify in the next step)

  1. Select section on Action(Steps 8- caters for the action to take with the traffic selected in the above steps)
    9. Enter the To address, which should be the LAN IP to send the port forwarding traffic
    10. Enter the To port 9000 or 80 for the intended destination port on the LAN IP.
  2. Click OK to save changes and you are done.

Terminal version:

This is all you would have to type into a Terminal window to enter this port forwarding rule.

/ip firewall nat

add action=dst-nat chain=dstnat disabled=no dst-port=9000 in-interface=ether1-gateway protocol=tcp to-addresses= to-ports=9000