Just confirming the RADIUS login problems on Mac. The requests look exactly the same on the server between Winbox Mac, Winbox Windows, and web UI, but the Mac fails. So there must be a problem with the MS-CHAP encryption code in the app. It would be nice to see more native UI used, though I suppose ...

I have not contacted them yet; I had hoped this was a fairly simple setup and I was overlooking something obvious! IMO their IPsec is primarily suited for site-to-site RouterOS <-> RouterOS connectivity, not roadwarriors. Yeah we have site-to-site tunnels set up between this unit and other Mikrotik...

What does Mikrotik’s Technical support say?

Is running a container with strongSwan or alike solution feasible?

I have not contacted them yet; I had hoped this was a fairly simple setup and I was overlooking something obvious!

I assume that their clients were properly provisioned. As I understood current RouterOS config is merely a migration of their pfSense. It's just that behavior of pfSense for matching identities is different from RouterOS. I wish I knew what (and how) Radius attributes RouterOS uses for the IPsec su...

Hi, I don't know what RADIUS you are using but it eap-radius works with NPS, look at this presentation (second part as BONUS) - https://mbum.pl/archive/mbum5/Profilowanie%20Sesji%20VPN.pdf (sorry, but it's only available in Polish) Thanks, my Mikrotik configuration looks same as that one except for...

Could you share the pfSense config that worked?

Not very easily, and it's not really relevant here.

We are looking to move from pfSense/opnSense in our offices; our current routers provide site-to-site tunnels as well as VPN connectivity to Mac/iPhone and WIndows machines using native clients, but we are having problems replicating the end-user VPN functionality on Mikrotik. We can get it working ...

Since updating to the 7.2 release candidate on one of our devices, the web interface has been super slow. Can't seem to attach pictures to this post, but loading the login page after a cache clear looks like this in my browser inspector's network tab: GET / 6.90KB / 8602ms GET mikrotik_logo.png 3.69...