Did you also update the RB firmware on the 2011 (is it in sync with the ROS version)?

You could try making a specific rule firewall rule for this traffic and putting that above the fasttrack rule, maybe also add a specific "established,related" rule for this traffic.

After that you can use marks/queues/limits for this traffic and use fasttrack for the other traffic.

The connection to the new ISP could have higher latency and/or packetloss (especially if it's a wireless ISP). This also leads to lower (single stream) speedtests. Have you tried the (multi-connection) DSLreports speedtest? http://www.dslreports.com/speedtest And do you have any numbers on latency/p...

I agree that using old algorithms is not advisable, please try using AES + SHA256.

If fore some reason you _have_ to use them: RB750GR3 does support unaccelerated DES + MD5 and hardware accelerated 3DES+MD5.

Please look here: https://wiki.mikrotik.com/wiki/Manual:I ... celeration

Look at https://wiki.mikrotik.com/wiki/Manual:I ... LAN#Q-in-Q

Are you sure the transport layer (the "cloud" in your picture) doesn't strip the extra vlan tags?

So you don't get an IP address through DHCP if you connect wired ( on any port but port 1 )? Are you sure you did a reset after 5 seconds and not 10 seconds (which puts the device in CAP mode)? If you have a serial cable you could also try connecting to the (RJ45) serial port on the back of the rout...

Also look into Fasttrack https://wiki.mikrotik.com/wiki/Manual:IP/Fasttrack this can improve performance dramatically.

Hello, I want to know if there is a method to use the sniffer tool or something else to catch all dropped traffic from firewall. I would like to know if there are some rules that drop something and then allow the traffic if this is good. I would use it for debug purpose. Is there a solution with th...

It is https://www.multilink.us I couldn't find a supplier with a decent price for this install in the US. Shame. A quick search led me to https://www.roc-noc.com/mikrotik/routerboard/RBD52G-5HacD2HnD-TC-US.html looks like they are US based. Searching with "RBD52G-5HacD2HnD-TC-US" yields s...

The forum might not be the best place to contact support, maybe send a mail to support@mikrotik.com ? More options on https://mikrotik.com/support Do you have an export of your caps-man configuration? Multiple virtual AP's might be because you have multiple slave configurations under your "prov...

Hello, i have 2 rule and they are : 6 chain=forward action=accept src-address=x.x.x.x dst-limit=4000,20,src-address/1m log=no log-prefix="" 7 chain=forward action=drop src-address=x.x.x.x log=no log-prefix=" so when i start send flooding with hping from x.x.x.x to the internet i see ...

And you provide even less information than the author of the topic. Model, software version... So if it is also bound to hEX v3 in your case, has any of you three sent an e-mail to support@mikrotik.com with a supout.rif created while the issue exists (the VPN connection is already down and you have...

I see the exact same problem with the ovpn and sstp servers on a HEX v3 router (RouterBOARD 750G r3). This might have something to do with this specific model. I upgraded the routerboard firmware to 6.42.3 today in the hope of fixing this issue. (routerOS was already on 6.42.3, there do not seem to ...