Abnan Software's: Access Mikrotik Remotely via DynamicDNS

<div dir="ltr" style="text-align: left;" trbidi="on"><h3 class="storytitle">Access Mikrotik Remotely via DynamicDNS</h3><h3 class="storytitle"> </h3><pre style="text-align: center;"><span style="color: blue;"><strong>~ Article By Syed Jahanzaib ~<br /><span style="text-decoration: underline;"><span style="color: red; text-decoration: underline;">Last Updated : 28th January, 2014</span></span></strong></span></pre>If you have Mikrotik Server with <strong>DSL</strong> connection with <strong>dynamic ip</strong> , which changes on every reboot / reset, and you want to access mikrotik from the Internet then you can use <strong>changeip.com</strong> (DynamicDNS) service, using this service, you don’t have to query the  DSL IP every time, all you have to remember the domain name that you  register on the site, and rest of things will be handled by the <strong>DDNS</strong> script configured on the Mikrotik.<br /> Following is the the scenario:<br /> <ol style="text-align: left;"><li><strong>…    INTERNET            >>    DSL MODEM          >>> MIKROTIK</strong><br />User with WINBox            (with dynamic ip)</li><li></li><li><blockquote>DSL MODE IP              =   192.168.30.1<br />MIKROTIK WAN IP =  192.168.30.5</blockquote></li></ol><span style="color: magenta;">Ok Lets Start.</span><br /> <h2><strong>CONFIGURE DSL MODEM TO ENABLE PORT FORWARDING</strong></h2><ul style="text-align: left;"><li>First open you <strong>DSL</strong> Modem page to enable <strong>PORT</strong> <strong>Forwarding</strong> (from <strong>DSL</strong> Modem to <strong>Mikrotik</strong> box)<br />Now add <strong>Port</strong> <strong>Forwarding</strong> rule</li><li></li><li><strong>WINBOX uses TCP Port 8291</strong><br /><em>As showed in the image below . . .</em></li></ul><a href="http://aacable.files.wordpress.com/2012/03/add-port-in-dsl-modem.png"><img alt="" class="aligncenter  wp-image-2074" height="399" src="http://aacable.files.wordpress.com/2012/03/add-port-in-dsl-modem.png?w=643&h=401" title="add-port-in-dsl-modem" width="640" /></a><br /> Now Click on <strong>SAVE / APPLY</strong><br /> .<br /> <h2><strong>CREATE NEW ACCOUNT ON CHANGEIP.COM</strong></h2><ol style="text-align: left;"><li>Now Open <strong><a href="http://www.changeip.com/" rel="nofollow">http://www.changeip.com</a></strong> in your browser and register new account.<br /><em>As showed in the image below . . .</em></li></ol><a href="http://aacable.files.wordpress.com/2012/03/1.png"><img alt="1" class="aligncenter size-large wp-image-4549" height="175" src="http://aacable.files.wordpress.com/2012/03/1.png?w=1024&h=175" width="1024" /></a><br /> <strong>▼<br /><a href="http://aacable.files.wordpress.com/2012/03/2.png"><img alt="2" class="aligncenter size-large wp-image-4550" height="412" src="http://aacable.files.wordpress.com/2012/03/2.png?w=1024&h=660" width="640" /></a></strong><br /> ▼<br /> Now it will send you an confirmation email, Open your mail box, and click on the link it have send you to activate your account.<br /> <ol style="text-align: left;"><li><h2><strong>ADD DOMAIN NAME TO YOUR ACCOUNT</strong></h2></li></ol><ul style="text-align: left;"><li><strong>Login</strong> to see your account , by default no domain name is added, Just click on <strong>DNS MANAGER</strong> to add your required name</li></ul>▼<br /><em>As showed in the image below . . .</em><br /> <a href="http://aacable.files.wordpress.com/2012/03/3.png"><img alt="3" class="aligncenter size-large wp-image-4553" height="333" src="http://aacable.files.wordpress.com/2012/03/3.png?w=1024&h=533" width="640" /></a><br /> <h2><strong>▼</strong></h2><b>Now you have to add your own desired name and its domain.  You can select various domains from the drop down list.</b><b><em>As showed in the image below . . .</em></b><br /> <a href="http://aacable.files.wordpress.com/2014/01/4.png"><img alt="4" class="aligncenter size-large wp-image-4554" height="313" src="http://aacable.files.wordpress.com/2014/01/4.png?w=1024&h=502" width="640" /></a><br /> <b>After adding your domain name, You can see your domain name in the main page,</b><br /><b></b><b><em>As showed in the image below . . .</em></b><br /> <a href="http://aacable.files.wordpress.com/2014/01/5.png"><img alt="5" class="aligncenter size-full wp-image-4555" height="419" src="http://aacable.files.wordpress.com/2014/01/5.png?w=916&h=601" width="640" /></a><br /> <strong>Now its time to configure the DynamicDNS script on the Mikrotik.</strong><br /> ▼<br /> <h2><strong>CONFIGURE DDNS SCRIPT AND SCHEDULER ON MIKROTIK</strong></h2><h2><strong> </strong></h2><ul style="text-align: left;"><li>Login to Mikrotik via <strong>WINBOX</strong>,<br />Click on <strong>NEW TERMINAL</strong> , after login, paste the following text in the <strong>TERMINAL</strong> window,</li><li></li><li><strong>ddns-script-direct-nat script code:</strong></li><li></li><li>Script taken from<br />[Preferred]<br /><strong><a href="http://www.changeip.com/mikrotik/5.x.txt" rel="nofollow">http://www.changeip.com/mikrotik/5.x.txt</a> </strong></li></ul><h2><strong> </strong></h2><blockquote class="tr_bq"><div class="container"><div class="line number1 index0 alt2"><code class="plain plain">/system script</code></div><div class="line number2 index1 alt1"> </div><div class="line number3 index2 alt2"><code class="plain plain">add name=ddns policy=\</code></div><div class="line number4 index3 alt1"><code class="plain plain">ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api \</code></div><div class="line number5 index4 alt2"><code class="plain plain">source="# HomingBeacon Main Dynamic DNS Update Script\r\</code></div><div class="line number6 index5 alt1"><code class="plain plain">\n# Written by Sam Norris, ChangeIP.com\r\</code></div><div class="line number7 index6 alt2"><code class="plain plain">\n# 20100728 Tested on RouterOS 4.9\r\</code></div><div class="line number8 index7 alt1"><code class="plain plain">\n# 20110511 Tested on RouterOS 5.2\r\</code></div><div class="line number9 index8 alt2"><code class="plain plain">\n\r\</code></div><div class="line number10 index9 alt1"><code class="plain plain">\n# Set your specific ChangeIP.com preferences here.\r\</code></div><div class="line number11 index10 alt2"><code class="plain plain">\n:global ddnsuser \"your-userid\"\r\</code></div><div class="line number12 index11 alt1"><code class="plain plain">\n:global ddnspass \"your-password\"\r\</code></div><div class="line number13 index12 alt2"><code class="plain plain">\n:global ddnshost \"your-site-name\"\r\</code></div><div class="line number14 index13 alt1"><code class="plain plain">\n# Change ddnsport to 8245 to bypass proxy.\r\</code></div><div class="line number15 index14 alt2"><code class="plain plain">\n:local ddnsport 8245\r\</code></div><div class="line number16 index15 alt1"><code class="plain plain">\n\r\</code></div><div class="line number17 index16 alt2"><code class="plain plain">\n# Do not edit anything below this line.  You have been warned.\r\</code></div><div class="line number18 index17 alt1"><code class="plain plain">\n# Abusive updates to the system will cause firewall blocks.\r\</code></div><div class="line number19 index18 alt2"><code class="plain plain">\n\r\</code></div><div class="line number20 index19 alt1"><code class="plain plain">\n# Please be considerate and\r\</code></div><div class="line number21 index20 alt2"><code class="plain plain">\n# do not let this script run more than once per 3-5 minutes.\r\</code></div><div class="line number22 index21 alt1"><code class="plain plain">\n\r\</code></div><div class="line number23 index22 alt2"><code class="plain plain">\n:log info \"DDNS: Starting.\"\r\</code></div><div class="line number24 index23 alt1"><code class="plain plain">\n\r\</code></div><div class="line number25 index24 alt2"><code class="plain plain">\n# Initialize checkpoint\r\</code></div><div class="line number26 index25 alt1"><code class="plain plain">\n:global ddnscheckpoint\r\</code></div><div class="line number27 index26 alt2"><code class="plain plain">\n:if ([:typeof \$ddnscheckpoint] = \"time\") do={\r\</code></div><div class="line number28 index27 alt1"><code class="plain plain">\n\t:log info (\"DDNS: Last check was \" . ([/system clock get time] - \$d\</code></div><div class="line number29 index28 alt2"><code class="plain plain">dnscheckpoint))\r\</code></div><div class="line number30 index29 alt1"><code class="plain plain">\n} else={\r\</code></div><div class="line number31 index30 alt2"><code class="plain plain">\n\t:log info \"DDNS: Cannot determine checkpoint, set now.\"\r\</code></div><div class="line number32 index31 alt1"><code class="plain plain">\n\t:global ddnscheckpoint ( [/system clock get time] - 1d )\r\</code></div><div class="line number33 index32 alt2"><code class="plain plain">\n}\r\</code></div><div class="line number34 index33 alt1"><code class="plain plain">\n\r\</code></div><div class="line number35 index34 alt2"><code class="plain plain">\n# Get the current IP\r\</code></div><div class="line number36 index35 alt1"><code class="plain plain">\n:if ([/system clock get time] - \$ddnscheckpoint > [:totime 180s] || [/s\</code></div><div class="line number37 index36 alt2"><code class="plain plain">ystem clock get time] - \$ddnscheckpoint < [:totime 0s]) do={\r\</code></div><div class="line number38 index37 alt1"><code class="plain plain">\n   :log info \"DDNS: Performing remote IP detection.\"\r\</code></div><div class="line number39 index38 alt2"><code class="plain plain">\n   /tool fetch address=\"ip.changeip.com\" host=\"ip.changeip.com\" src-\</code></div><div class="line number40 index39 alt1"><code class="plain plain">path=(\"/\?\" . [/int eth get 0 mac-address ]) dst-path=\"ip.changeip.com.\</code></div><div class="line number41 index40 alt2"><code class="plain plain">txt\" mode=http port=\$ddnsport\r\</code></div><div class="line number42 index41 alt1"><code class="plain plain">\n   :global ddnscheckpoint [/system clock get time]\r\</code></div><div class="line number43 index42 alt2"><code class="plain plain">\n} else={\r\</code></div><div class="line number44 index43 alt1"><code class="plain plain">\n   :log info \"DDNS: Please be considerate and wait a few seconds longer\</code></div><div class="line number45 index44 alt2"><code class="plain plain">.\"\r\</code></div><div class="line number46 index45 alt1"><code class="plain plain">\n   :break\r\</code></div><div class="line number47 index46 alt2"><code class="plain plain">\n}\r\</code></div><div class="line number48 index47 alt1"><code class="plain plain">\n\r\</code></div><div class="line number49 index48 alt2"><code class="plain plain">\n# Parse the IP address received from fetch script.\r\</code></div><div class="line number50 index49 alt1"><code class="plain plain">\n\t:global ddnslastip\r\</code></div><div class="line number51 index50 alt2"><code class="plain plain">\n\t:local html [/file get \"ip.changeip.com.txt\" contents]\r\</code></div><div class="line number52 index51 alt1"><code class="plain plain">\n\t:local ddnsip [:pick \$html ([:find \$html \"\"] ]\r\</code></div><div class="line number54 index53 alt1"><code class="plain plain">\n\r\</code></div><div class="line number55 index54 alt2"><code class="plain plain">\n# Is it a valid IP and is it different than the last one\?\r\</code></div><div class="line number56 index55 alt1"><code class="plain plain">\n\t:if ([:typeof [:toip \$ddnsip]] = \"ip\" AND \$ddnsip != \$ddnslastip \</code></div><div class="line number57 index56 alt2"><code class="plain plain">) do={\r\</code></div><div class="line number58 index57 alt1"><code class="plain plain">\n\t\t:log info \"DDNS: Sending UPDATE with \$ddnsip\"\r\</code></div><div class="line number59 index58 alt2"><code class="plain plain">\n\t\t:log info [/tool dns-update name=\$ddnshost address=\$ddnsip key-nam\</code></div><div class="line number60 index59 alt1"><code class="plain plain">e=\$ddnsuser key=\$ddnspass ]\r\</code></div><div class="line number61 index60 alt2"><code class="plain plain">\n\t\t:global ddnslastip \$ddnsip\r\</code></div><div class="line number62 index61 alt1"><code class="plain plain">\n\t} else={\r\</code></div><div class="line number63 index62 alt2"><code class="plain plain">\n\t\t:log info \"DDNS: No update required.\"\r\</code></div><div class="line number64 index63 alt1"><code class="plain plain">\n\t}\r\</code></div><div class="line number65 index64 alt2"><code class="plain plain">\n}\r\</code></div><div class="line number66 index65 alt1"><code class="plain plain">\n"</code></div></div></blockquote><br /><b><em>As showed in the image below . . .</em></b><br /> <a href="http://aacable.files.wordpress.com/2012/03/paste-script-in-terminal.png"><img alt="" class="aligncenter  wp-image-2064" height="369" src="http://aacable.files.wordpress.com/2012/03/paste-script-in-terminal.png?w=640&h=369" title="paste-script-in-terminal" width="640" /></a><br /> ▼<br /> To verify that the script is pasted and working properly,<br />Goto <strong>SYSTEMS</strong>   > <strong> SCRIPTS</strong> , and double click on the <strong>DDNS</strong> to view its contents, Just verify it everything is in place.<br /><em>As showed in the image below . . .</em><br /> <a href="http://aacable.files.wordpress.com/2012/03/script-showed.png"><img alt="" class="aligncenter size-full wp-image-2065" height="640" src="http://aacable.files.wordpress.com/2012/03/script-showed.png?w=678&h=692" title="script-showed" width="627" /></a><br /> Okay, as the script is in place, its time to Execute the script so it can update the current <strong>WAN</strong> <strong>IP</strong> to your <strong>DynamicDNS</strong> account.<br /> <em>As showed in the image below . . .</em><br /> <a href="http://aacable.files.wordpress.com/2012/03/script-executed-result-ok-dns-updated.png"><img alt="" class="aligncenter  wp-image-2066" height="600" src="http://aacable.files.wordpress.com/2012/03/script-executed-result-ok-dns-updated.png?w=640&h=600" title="script-executed-result-ok-dns-updated" width="640" /></a><br /> As you can see that the script have updated the record to <strong>dynamicDNS</strong> account, its time to verify it.<br /> ▼<br /> <h2><strong>ADDING SCHEDULER (So it can update record after every 5 minutes)</strong></h2><blockquote class="tr_bq">Also add this in scheduler so it can run after every 5 minutes, you can adjust it as per your requirement.<br /> <div><div class="syntaxhighlighter  plain" id="highlighter_938468"><table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td class="gutter"><div class="line number1 index0 alt2">1</div><div class="line number2 index1 alt1">2</div><div class="line number3 index2 alt2">3</div></td><td class="code"><div class="container"><div class="line number1 index0 alt2"><code class="plain plain">/system scheduler</code></div><div class="line number2 index1 alt1"><code class="plain plain">add disabled=no interval=5m name="Run DDNS every 5 minutes" on-event=update-ddns policy=\</code></div><div class="line number3 index2 alt2"><code class="plain plain">ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api start-date=mar/30/2012 start-time=14:24:00</code></div></div></td></tr></tbody></table></div></div>▼</blockquote><h2><strong>VERIFY UPDATED <strong>IP </strong>RECORD ON CHANGEIP.COM</strong></h2>Go back to <strong>changeip.com</strong> and see your domain name record by clicking on<br /> <blockquote><span style="color: blue;"><strong>View Recent DDNS Updates</strong></span><strong></strong></blockquote><em>As showed in the image below . . .</em><br /> <a href="http://aacable.files.wordpress.com/2014/01/6.png"><img alt="6" class="aligncenter size-full wp-image-4557" height="306" src="http://aacable.files.wordpress.com/2014/01/6.png?w=928&h=444" width="640" /></a><br /> <span style="color: blue;">Now it will show you the updated Record.</span><br /> <em>As showed in the image below . . .</em><br /> <a href="http://aacable.files.wordpress.com/2014/01/7.png"><img alt="7" class="aligncenter size-large wp-image-4560" height="315" src="http://aacable.files.wordpress.com/2014/01/7.png?w=1024&h=505" width="640" /></a><br /> Everything is now ready and in place.<br /> ▼<br /> ▼<br />  <h2><strong>TEST TIME !!!</strong></h2><h2><strong><br />CONNECT TO YOUR MIKROTIK FROM INTERNET</strong></h2>Its time to hit the road. From any other Remote PC with separate  internet connection, try to ping your domain name and try to connect it  via winbox or try open it in your browser,<br /> <span style="text-decoration: underline;"><span style="color: magenta;"><strong>NTOE:  In the image below, I used another domain name, as at the moment I only  had old image , so ignore the name, just understand the logic</strong></span></span><br /> <em>As showed in the images below . . .</em><br /> <a href="http://aacable.files.wordpress.com/2012/03/ping-winbox-via-dns-name1.png"><img alt="" class="aligncenter size-full wp-image-2070" height="617" src="http://aacable.files.wordpress.com/2012/03/ping-winbox-via-dns-name1.png?w=438&h=617" title="ping-winbox-via-dns-name" width="438" /></a><br /> .<br /> .<br /> <a href="http://aacable.files.wordpress.com/2012/03/mikrotik-web-via-dns-name.png"><img alt="" class="aligncenter size-full wp-image-2071" height="398" src="http://aacable.files.wordpress.com/2012/03/mikrotik-web-via-dns-name.png?w=666&h=398" title="Mikrotik-web-via-dns-name" width="666" /></a><br /> ▼<br /> ▼<br /> ▼<br /> ▼<br /> ▼<br /></div>

Access Mikrotik Remotely via DynamicDNS

Access Mikrotik Remotely via DynamicDNS ~ Article By Syed Jahanzaib ~ Last Updated : 28th January, 2014 If you have Mikrotik Server with D...