I think you need to use RB450Gx4, Its enough.

Ok, so can you tell me how can I investigate for the present issues?

How can I monitor the hardware usage and the VPN issues of the box? The problem is real: if I disable the VPN tunnel on the board and I use a client on the PC all is ok. As soon as I try to use the VPN on Routerboard I have again the disconnetcions. The problem happen on three different boards in th...

Thank you sindy.

Why not choose one of the ethernet routers in https://mikrotik.com/products/group/ethernet-routers plus the AP (like the hAP AC Lite)?

Thank you.

There is a possibility to need the wireless in a different zone where the router will be installed.
If I want to split the router with the wireless funcionality (ethernet router + AP) what are the best models to choose?

I need wireless in the office with the new routerboard.

The hAP AC^2 is more or less powerfull than the RB951g-2hnd?

I want to install a more powerfull router.

The RB2011UiAS-2HnD-IN is a good solution or maybe to much powerfull?

I do not have any particular requirements.

There will be low traffic sent between the two routers.

Good evening,

I need to buy a Mikrotik Firewall in a company with 5 PCs and 1 Server, which can connect via IPSec VPN to another Mikrotik RB951g-2hnd and necessarily have Wireless.
Any suggestion on the routerboard with the best price-performance ratio?

Thanks to everyone in advance

From the debug it seems to me as if one of the firewalls is closing the pinholes too early so the packets from the remote site cannot get through it. Can you simultaneously sniff at the internet-facing interfaces of both mikrotiks into a file and then use Wireshark to check that everything that one...

Please hook both boxes to some ntp reference, IPsec is sensitive about time. Next, switch off the debug of ipsec, as you've provided just a small portion of the log and the interesting part is missing. If you use the cli command I've given and then use Ctrl-H in a text editor to replace all occurre...

On your main site, you have created a manual IPsec policy with sa-dst-address=0.0.0.0. It does not work this way for remote peers behind a NAT. Your settings for the peer correctly say that policy must be generated, but I assume that as a policy with necessary src-address and dst-address already ex...

what does "/ip ipsec remote-peers print" and "/ip ipsec installed-sa print" and "/ip ipsec policy print" show (don't forget to replace public addresses if you are concerned) HQ Site: /ip ipsec remote-peers print 0 local-address=XXX.XX.XX.33 port=4500 remote-address=XX....

Place here the output of "/export hide-sensitive" from both routers, and replace public addresses, if any, with some x.x.x.x but in a way that the same address is replaced by same letters everywhere. OK. HQ Site with Public IP Static: jan/06/1970 05:55:24 by RouterOS 6.23 # software id = ...

Hello,

Did you put your nat rule in the top?

Yes...

Firewall Rule: - accept - input - tcp - 1701 NAT Rule: - accept - srcnat - Scr Address (LAN Network remote mikrotik) - Dst. Address (Local LAN Network) These two rules are wrong: filter: L2TP uses UDP 1701, not TCP. And as you are interested in plain IPsec with policies, not in L2TP tunnelled throu...

Post your ip/route print

IP/Routes in attachments

Hello everyone, I have a problem with an IPSec VPN between two Mikrotik. The VPN connects directly without problems, but the two LANs can not communicate. I tried to ping the mikrotik IP LAN without success, I tried to and from the two mikrotik. Below is the firewall / Nat rules I added on both Mikr...