From the bits of information you've posted instead of the complete configuration, I assume that you didn't get the purpose of setting the connection-mark in the /ip ipsec mode-config row. You can use src-address-list , connection-mark , or both, but if you use both, packets need to match both to ge...

If using connection-mark then you still have to mark traffic in Mangle.

The previous post suggested I unset the connection mark, it would be simplest if someone posted their working config including mangle rules etc.

From the bits of information you've posted instead of the complete configuration, I assume that you didn't get the purpose of setting the connection-mark in the /ip ipsec mode-config row. You can use src-address-list , connection-mark , or both, but if you use both, packets need to match both to ge...

Hello, This is the full export of my IPSec setup, you have to have a paid protonvpn account to be able to do this. # may/07/2020 17:11:44 by RouterOS 6.46.6 /ip ipsec mode-config add connection-mark=ProtonVPN name=ProtonVPN responder=no /ip ipsec policy group add name=ProtonVPN /ip ipsec profile ad...

As I didn't get a reply here I replaced it with a 3x6x3.5 momentary switch from Ali Express, seems to be a perfect fit(after removing two plastic "pegs" on bottom)- and works perfectly.

I have a second hand CCR1036-12G-4S, the front panel reset button has fallen off the PCB - can someone provide a replacement part number or substitute part for the reset button?