Mikrotik Port Forwarding from Winbox – Step by Step

Port Forwarding in MikroTik Router

MikroTik Port Forwarding is the best way to access your servers from any location without compromising network security. Using Port forwarding you can access your FTP server, Game server, Web server, NVR, and DVR that is running in the private network using your internet WAN IP by Mapping Port number to a specific server IP address and port number. If you are using the MikroTik routerboard and want to forward ports for your web server, FTP server, and any other that you wish to access from a WAN network then this user manual will give you a brief user guide to Port forwarding on Mikrotik from Winbox.

You need to login MikroTik RouterOS from Winbox to setup port forwarding for different servers and applications running on a private network but you want to access from public networks.

Network connection diagram to setup MikroTik Port forwarding

To learn how to port forward in Mikrotik you need to understand the network diagram and configurations.

In this network diagram, the web server and FTP server are configured to a private IP address inaccessible from the internet. With Port forwarding, we can access both servers from public internet access using Port Mapping NAT configurations.

MikroTik router  WAN IP Address –

Mikrotik LAN IP192.168.88.1/24

Web Server IP -   Webserver Port– 80

FTP server IP – webserver port– 21

Using port forwarding configuration we can access the server from the WAN IP address by mapping the port destination to a specific IP address i.e web server, FTP server, ssh server.

Setup Port Forwarding for Web server

If you have a web server configured with a private IP address class and want to access it from the internet without using static IP to web server LAN IP then you need to forward the webserver port.

Connect MikroTik Router to LAN port from PC/Laptop and login with Winbox configuration utility.

Go to IP- Firewall

Go to the “NAT” tab and follow the configuration as shown below the image.

NAT (network address translation) under the NAT option you need to create a forwarding root assigning source and destination address with port numbers.

Press the plus (+) button to create new NAT rules.


Chain- select dstnat

Dst. Address- (WAN IP address of MikroTik Router configured in Internet Port)

Protocol– TCP

Dst Port– 80 (if you are using different port numbers you can use the same for your server).

Press the Appy button and go to the Action tab

Action – dst-nat

To Addresses: (Web server Local IP address )

To Ports- 80

Press Apply and OK button

Access Mikrotik WAN IP address from different internet you will get Web server access because of port forwarding.

Port Forwarding for FTP server

FTP (file transfer protocol) server is used to share files using client and server applications. Using MikroTik port forwarding, you can also create Nat rules to access your FTP server from the internet.

In the diagram FTP Server, the local IP address is, and Port number 21

Go to IP – Firewall

NAT tab

Press the + Plus button and create new NAT rules.

Chain- select dstnat

Dst. Address- (WAN IP address of MikroTik Router configured in Internet Port)

Protocol– tcp

Dst Port– 21 (you can forward any port number depending on your server type and assign port number)

Press Apply button and go to the Action tab


Action – dst-nat

To Addresses: (FTP server Local IP address )

To Ports- 21

Press the Apply and OK button and the configuration are done.

Now you can access your FTP server ( from the internet using port forwarding methods.

 Using MikroTik port forwarding NAT rules you can also enable and disable SSH, and Telenet access for your MikroTik router from the internet to manage and monitor your network from any location. You can access your DVR, NVR, Gaming server, and any other server using forwarding rules in Microtik routers.

MikroTik Router Configuration Manual | Download

Related Post


This website uses cookies.