usually, you need to make script for this purpose, but there's easy trick to perform this based on your setup without script. first, modify the routes /ip route add gateway=192.168.1.1 distance=10 comment="ISP1" add gateway=192.168.2.1 distance=20 comment="ISP2' then assign routes to ...

have you enable both interfaces to be managed by capsman?

since your cap lite has been controlled by capsman, all you need to do is just to disable capsman manage on your wireless interface. here the simple steps: login to your cap lite using winbox or webfig. go to wireless menu. click on "CAP" button. uncheck "Enabled" option and clic...

the reason why other vendor can put their controller on the cloud and let the access point run when having loss connection with the controller is because all the wifi functions (like channel selection, authentication, acl filter etc) is done on the access point, the controller function just like pro...

imho, quickset is only for making initial configuration only, not for modify running config since it will overwrite all other settings with default. usually i use quickset on fresh new device on factory default setting, after that never touch quickset again on that device. use webfig or winbox to co...

congrats on your successful implementation

congrats on your successful setup

yes, device with multiple switch chip like 4011 and 1100ah4x may cause headache also. i guess it's better to use layer 3 switch if wirespeed is needed, router only for wan & outgoing traffic only.

still miss the old days way when routeros still support master/slave port

assumed the ip subnet of 69.174.131.176/29 is routed to 69.174.129.202 by your isp. in that case, you can try to put all the server in your lan subnet, use ip private address of 10.0.1.x/24 with default gateway of 10.0.1.1 then, make a port forward/reverse nat on the mikrotik firewall, for example: ...

i used that method on 1100 and 4011 since the cpu is strong enough to handle the traffic, but on 750 or 951 it bang the cpu to 100% on lan traffic since no hardware offload can be enabled. the trick i made maybe not a best practice but at least it can let hardware offload enabled on the primary brid...

you're welcome :) yes, capsman works in vpn tunnel too. i've deployed many remote access point with this setup and it works. there are 2 scenarios to setup capsman over vpn: using vpn bridge as i wrote above using layer 3 vpn using udp connection to capsman the method 1 requires mikrotik to mikrotik...

since you're using "bridge company" as trunk port, all the vlan must be set on it, like this: /interface vlan add interface="bridge company" name="VLAN company" vlan-id=8 add interface="bridge company" name="VLAN company host" vlan-id=10 Correct. th...

check your config below: add address=69.174.131.176/29 interface=bridge1-lan network=69.174.131.176 you assigned the same ip address & network address, this may cause issues. set different ip address like 69.174.131.177/29 for example. on all devices that use this subnet, set 69.174.131.177 as d...

the one reason you need to split traffic classification like this is for assigning different priority in qos/queue, like to set smaller bytes get higher priority over higher bytes. usually you do this to separate browsing traffic & download traffic. if you do not need to change priority between ...

i assume you want to change isp by changing wifi connection right? for that scenario, the logic is like this: make 2 bridges for each isp, bridge1 to rain and bridge2 to mtn. set local lan ip address, setup dhcp and all other required settings like firewall rules, nat etc. on both bridges. make sure...

if i were you, i'll go with option 3 with slightly modification: using rb4011gs+rm (plain one without wifi) and 3 hap ac² behind the tv configured as access point only. it has 4 lan ports, so enough for all devices in the that location. if you still need more lan port, a $20 tplink or d-link unmanag...

i assume you use hotspot captive portal on the central router while the remote sites only handle connection, right? in this configuration, you need to setup like this: create a bridge on core router, set ip address, dhcp and hotspot to this bridge. make sure the hotspot is working on this bridge, yo...

since you're using capsman forwarding and it works on your wifi clients, i think your capsman config is correct, the issue is not on the capsman but on the vlan passing between bridges. on your config: /interface vlan add interface="bridge company" name="VLAN company" vlan-id=8 a...

for CAPsMAN forwarding to works, you should make an internet-able bridge on your CAPsMAN controller first. use this simple steps: create a bridge with no STP. assign ip address to the bridge, create dhcp server for the bridge if needed and other settings that required for any ip on the bridge can ac...

the CAPsMAN forwarding even works for remote access point connected through VPN, so basically you can deploy remote access point using whatever means of connection to your network. off course, performance is based on the performance of the VPN. i'm using this for deploying wifi hotspot among multipl...

this is what i do and it works: enable web proxy. in web proxy access, create entry with dst-host=connectivitycheck.gstatic.com action=deny /ip proxy access add action=deny dst-host=connectivitycheck.gstatic.com and put it on very top (number 0). in the hotspot user profile, check the "transpar...

you probably have hilink mode huawei lte modem. for this to works, try this: 1. open dhcp client, add dhcp client with your modem interface, probably lte1. i assume you already understand how to do this. 2. check if there any new ip address acquired, usually 192.168.8.100/24 added to your lte interf...

probably you have terminal session open, either from telnet, ssh or winbox. change your admin password if you suspect unauthorized access to your router.