Hello, I have the opposite issue, how can I have a VPN user access all VLAN? thanks I have 3 vlans. v1 v2 v3 I want certain PPP / secret (accounts) to only have access to certain vlans. At the moment, any VPN user has access to all vlans. For example: VPN user1 can ONLY access v1 VPN user2 can ONLY ...

oh :-) I just ruled it out with some drop rules thanks! so I managed to make it work from a clear configuration, now I have the problem I can ping items cross vlans... You don't have a problem, you are/were not aware that inter VLAN communiction isn't blocked by default. You have to block it manuall...

so I managed to make it work from a clear configuration, now I have the problem I can ping items cross vlans... # jan/02/1970 01:59:17 by RouterOS 7.6 # software id = J9R6-AECV # # model = CCR2004-16G-2S+ # serial number = /interface bridge add ingress-filtering=no name=bridgeTrunk vlan-filtering=ye...

ok, I untagged the interfaces from "interface" tab, put back to 1, and left only on the bridge the tag/untag config. Also removed dhcp relays which came automatically with dhcp setup. while removing these settings a DHCP address was "offered" and showed up in the leases but disap...

thanks for the hint :-) Printing a few sections of the settings doesn't provide much useful information, post the output of /export after redacting any identifying information (serial number, public IPs, etc.) # oct/23/2022 18:57:23 by RouterOS 7.6 # software id = J9R6-AECV # # model = CCR2004-16G-2...

I can only ping the VLAN address but can't reach anything on untagged or tagged (i have a switch on vlan10) ports and DHCP don't assign any address. /interface/bridge/vlan> print Flags: D - DYNAMIC Columns: BRIDGE, VLAN-IDS, CURRENT-TAGGED, CURRENT-UNTAGGED # BRIDGE VLAN-IDS CURRENT-TAGGED CURRENT-...

viewtopic.php?t=143620

yes, I've been following all kind of tutorials, even this one which is really nice, but still can't make it

Hello Forum, I'm trying to configure Vlans on my CCR2004 with 7.6. I can only ping the VLAN address but can't reach anything on untagged or tagged (i have a switch on vlan10) ports and DHCP don't assign any address. This is a snip of my config, thanks in advance for your help /interface> print Flags...

Hi I have issues with receiving rsyslog messages and netflow from my 4011, just a switch between the router and remote syslog server and nfsen server. Tcpdump shows messages from other machines on port 514 and 2055, but there is no way to receive from MikroTik. Could this be due to a firewall rule? ...

Hi
I made some tests with tcpdump: the packets are not reaching the nfsen server at all, while I can get them from RouterOS VM

next step is to capture the data from a mirror port with my laptop

Hello Forum, I have this setup: RB4011iGS+ RouterOS 6.46.6 (Level 5) sending traffic to Nfsen server which doesn't receive it. I tested the Nfsen setup and it is receiving correctly from a RouterOS virtual machine on the same network. RouterOS setups are same OS level and configuration tried differe...