Thank you everyone for your responses, they were quite helpful :) I was having headaches in my room, and I found the issue. It wasn't this MikroTik dish at all, it was actually caused by the high-pitched whine coming from my UPS. Once I turned off the UPS, my headache went away and I felt much bette...

Hi, I have a temporary setup where I am using an LHG 5 in station-bridge mode to connect to a hAP ac2 in bridge mode to create a PTP bridge inside my house. The hAP ac2 and LHG 5 are less than 5 meters away from each other with a wall in-between. The LHG 5 is in my room where I sleep, inside my cupb...

Hi,

Please refer to the MikroTik RouterOS documentation for NAT, there is a section about Hairpin NAT which I believe is what you are looking for:

https://help.mikrotik.com/docs/display/ ... HairpinNAT

Hopefully this helps and you can find the solution by following that documentation.

HI, Yes, those firewall rules must be in place on both routers. But further down the tutorial, it mentions replacing those rules with Raw firewall rules instead for better performance (bypasses connection tracking). Just remember that if you need any port-forwarding stuff through the IPsec tunnel (e...

Hi, You can specify "In. Interface" for the dst-nat rule to be the WAN of router A, as well as "Out. Interface" to be LAN interface (most likely bridge) for the src-nat rule of router A. For example, if your WAN interface is ether1, then in-interface=ether1 would work. Otherwise,...

Hi, You need to use both dst-nat and src-nat rule on router A. If you use /ip firewall raw to bypass connection tracking for that IPsec tunnel, then this will not work as connection tracking is required for NAT to work properly. If you use /ip firewall raw for the IPsec tunnel, you must move to /ip ...

Hi everyone, I resolved the issue. I am just making this post to document what resolved the issue for me so that if anyone else has this issue, they can potentially solve it. I had to add a firewall rule to allow "ipsec-esp" protocol. Like so: /ip firewall filter add action=accept chain=in...

Hi everybody, I have set up an IPsec site-to-site tunnel between two sites. Both routers were reset to default configuration, then I followed the guide from the official MikroTik documentation for the IPsec site-to-site tunnel. Both sites have dynamically-assigned public IP addresses through PPPoE f...