Mikrotik Routerboard configuration so you can see webserver or web page on LAN and WAN

Mikrotik Routerboard configuration so you can see webserver or web page on LAN and WAN

Configuracion Routerboard Mikrotik para que pueda ser webserver o pagina web en LAN and WAN

Paso 1 validar que todo este normal en 
/ip firewall filter

add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
    "defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
    in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
    ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
    ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related
add action=accept chain=forward comment=\
    "defconf: accept established,related, untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
    invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" \
    connection-nat-state=!dstnat connection-state=new in-interface-list=WAN \
    log=yes log-prefix="I just dropped this"

Paso 2
Calocar esta configuracion

/ip firewall nat
add action=masquerade chain=srcnat out-interface=WAN
add action=dst-nat chain=dstnat comment="NAT for web server" dst-address=\
    aaa.aaa.aaa.aaa dst-address-type=local dst-port=80 log=yes log-prefix=\
    "NAT for web server" protocol=tcp to-addresses=192.168.1.sss to-ports=8083
add action=masquerade chain=srcnat comment="Hairpin for web server" \
    dst-address=iii.iii.iii.iii dst-address-type=local to-ports=8083 log=yes log-prefix=\
    "Hairpin for web server" protocol=tcp src-address=192.168.0.0/24

FUENTE

Puede visitar y darnos sugerencias en 

www.sutelcom.com/sugerencias