I tried to setup the same thing very recently, metallb on physical machines in my home, and metallb to publish services over the home network. My first attempt actually worked very simply, I used the configured AS in mikrotik (routing - bgp - interfaces), and I setup a peer using my configured asn f...

I'm trying to achieve the following: 1. Default DNS server to be my pihole. DNS server configured in my DHCP server is the pihole. by default have the router itself dns server be the pihole 2. Every DNS requests that are going elsewhere, to catch them and dnat them into the pihole 3. When my pihole ...

Thanks anav Yes, I understand, It doesnt add much for just 1 managed access point. Let me please ask about the original question in this thread - What is the benefit of defining vlans in a single bridge, compared to just creating a bridge per sub network? Because I can just specify another address p...

Ha, sorry, after re-reading I guess I got confused. There are two options to configure my wAP with my router: 1. Configure my wAP as a cap, and configure the wifi interfaces via capsman 2. Take a blank configuration and only configure my wifi antennas directly on the wAP Can you explain to me your o...

Thanks guys. anav, can you please explain why you are against capsman? Because I thought its nice to be able to configure everything once from the router, and to be able to configure firewall rules only once. I even thought to simplify by setting the router which is the capsman, to manage itself the...

Thanks anav, I think I should choose this path, for my requirements, no? This seems to allow the biggest flexibility in seperating my network as I want, with minimal set of firewall rules and complexities. Please correct me if Im wrong I tried following this guide for deeper understanding but I have...

I want to setup 3 networks, with three different subnets for different purposes (guest, home, and a lan only no internet network) And I want everything separated completely, but access to a single IP (dns server, pihole) 1. I saw the guide suggested in here , that suggests creating vlan interface in...

I want to setup 3 networks, with three different subnets for different purposes (guest, home, and a lan only no internet network) And I want everything separated completely, but access to a single IP (dns server, pihole) 1. I saw the guide suggested in here , that suggests creating vlan interface in...

Yes, I have an ethernet cable going from my router to a regular (non mikrotik) switch, and to one of its ports, I have the wAP connected. I see "managed by capsman" on both my interfaces in the wAP (both 2.4 and 5) What is the purpose of the SSID configuration under capsman menues in the r...

I just received my wAP, and tried to connect it to my hapAC2, to extend my wifi range. I followed mostly this guide: https://www.timigate.com/2018/10/use-mikrotik-capsman-to-manage-all-access-points-and-enable-roaming.html I went blindly on the steps, since I want sure how this is supposed to be con...

Thanks guys.
Both forward dst-natted rules and hairpin NAT did the trick.

Thanks, I wasnt aware of that capability (connection-nat-state), packets does hit my new filter rule now, but I cant access those services still. Is there an additional configuration that should be made?

Hi everyone, I own a mikrotik hap ac, and recently started separating my network to three main networks: 1. vlan-guests (id=10)- subnet 10.10.0.0/24 where guests can login, and access only the wide internet. the config I attached shows that they are allowed to access also my home dns server, which r...