Hi,

Anyone have luck that configure the Ikev2 vpn on Mikrotik for Android 13?

If yes, please share how to do it.

Thank you

Nice to see that you do not use Bridge Vlan Filtering since it was not a must for your Vlan implementation... ( on the Router's side ) As far as the switch is concerned, did you setup a management Vlan for your Switch? Under /interface Vlan configure your management Vlan for the Bridge interface......

After I read the tutorial as below. https://wiki.mikrotik.com/wiki/Manual:CAPsMAN_with_VLANs#CAPsMAN_Router I finally got a Vlan works for PCs. My PCs can get the IP address from the router's DHCP server. However, for the WiFi Vlans are still completely not working. The Caps are unable to obtain IP ...

If the device has hardware support, vlan switch is better, but if one of your device are 4011, compared with CRS328, 4011 "switch" are useless. The key is how many traffic you need to be inspected from 4011... if more than 200Mbit/s is better you use switch chip, i do not have any 4011 to...

all more simple like (not tested, writed at memory): on RB4011iGS+ /interface vlan add interface=sfp-sfpplus1 name=vlan-10 vlan-id=10 add interface=sfp-sfpplus1 name=vlan-50 vlan-id=50 /ip address add address=192.168.10.254/24 interface=vlan-10 network=192.168.10.0 add address=192.168.50.254/24 int...

(1) You can improve the bridge ports add bridge=Bridge interface=sfp-sfpplus1 frame-types=allow only tagged frames ingress filtering=yes add bridge=Bridge interface=ether1 frame-types=allow priority and untagged frames ingress filtering=yes pvid=10 Repeat same for all access ports 2-22. (2) The bri...

I think my scenario is (Switch with a separate router).

I was trying to config my switch from the command of the provided switch configuration.
Once I am enable vlan-filtering, I cannot be able to connect to the switch anymore.

Hi, I would like to config my network with RB4011 router and CRS328 shown in below diagram. https://i.ibb.co/mGGNbkP/Home-Mikrotik-Network-Gateway-at-Router.png I tried to apply the config as below. However the config doesn't work. (Switch) [admin@MikroTik] > /export # jan/02/1970 01:15:00 by Router...

Hi Sindy,

Thank you very much for the detail tutorial.
I will read it carefully and try this today.

Tony

Hi Sindy, I know the approach with my hardware is a bit non sense. However, the reason I bought the 4011 and 328 was I want to use MikroTik to build a layer3 switch network like where I was worked. And later I will buy another router and try VRRP. So would you please guide me how to set up capsman W...

Hi, Anyone can give me some hint to set up multiple SSID in a network which the capsman and cap is not in the same subnet? As I can see in the datapath is all about Layer2 protocol. My Capsman is sit in the router. And my caps are connect to another switch in a standalone vlans. There is not trunk p...

Hi Sindy, Below is the router config. However, the same setting was applied more than 10 times. Somehow, the L2TP server with IPsec is working eventually. # feb/17/2021 22:25:57 by RouterOS 6.48.1 # software id = MPYV-N028 # # model = RB4011iGS+ # serial number = D4450C9894D9 /caps-man datapath add ...

Hi Sindy, Thanks. Now I am realize the firewall rule have to put it in correct order. Below is the output those ip sec info. [admin@Router] > /ip ipsec profile print Flags: * - default 0 * name="default" hash-algorithm=sha1 enc-algorithm=aes-128,3des dh-group=modp2048,modp1024 lifetime=1d ...

What is wrong about the manual , and how exactly your setup "doesn't work"? I just found that even I add the firewall rule to allow 1701,500,4500. It might be another firewall rule which I copy and paste from Mikrotik basic firewall setup page is still block the connection. So I disable e...

Hi,

I tried to follow many L2TP server tutorial on the internet . Unfortunately, I still can't able get it work.
Would anyone can share me a good tutorial so I can follow it.

But be careful with set command: it sets value of a property, doesn't add new one to existing. E.g. if you had bridge=BR1 tagged=etherX vlan-ids=10 and you executed "your" command, then interface etherX would be removed from list of tagged members of that VLAN. If you wanted to keep ether...

Hi, I would like to setup multiple SSID for home network and Guest network with below network topology, Previously, I am already able to set up one SSID with capsman & multiple caps within a subnet. The wireless client can get ip from dhcp server and connect to internet. Would someone please giv...

Hi MKX, Thanks a lot! After reading the article you suggested, I am able to create the VLAN. I found the missing step I didn't do before was set the bridge as a tagged member. Example command as below. set bridge=BR1 tagged=BR1 [find vlan-ids=10] Now the vlan is functionable, but when I export and c...

It's not clear to me how duties are shared between both MT devices and where BGP enters the game. You did not mention the other device's model, but CRS328 is not a router, it's a switch. Sure it can route but performance is next to none (compared to switching performance). Anyway, have a look at th...

Hi, I got 2 Mikrotik devices. One is act as a router and one is act as a layer 3 switch and the model is CRS328. Currently, the switch have 3 bridges and each bridge have it own subnet. All the routing between subnet and internet are fine. There is no trunk configuration connect to the router. The r...

I am trying to build a 3 wireless AP network with 5 wire connections. I am prefer an all in one equipment for AP POE power , routing and switching. Someone, please tell me what Mikrotik equipment I should purchase.