Thank you for your replies!
I added tkip encryption, and removed WPA PSK, not the error message changed..

D8:1F:12:9D:EF:46@cap3 rejected, does not provide suitable security method

Most probably it requires WPA with tkip... I will try that out too.

Hello, I have a wifi compatible xmas light which can be controlled with a mobile app and that is rarely reachable. I found this strange error in the logs, but I didn't find any useful solution on this forum or Google.. I assuem the ciphers are correct in the security profile, but I might be wrong.. ...

Hi, What mkx is really stating that its rude not to provide the entire config so we actually have the facts to help......... What part of the config you miss? I posted the full config in the first post, removed serial number, wireguard peers, country and mac addresses. Thank you mkx for your suggest...

Spaces come from formating the config before published. ( removed the new "\ new line" to make it more readable... didn't succeed) This rule should allow traffic from VLAN100 to VLAN200. Is it hit (either counters or log entries when logging is enabled)? Where do the spaces come from? Code...

Hello, I would ask your help in routing between vlans on RB4011iGS+5HacQ2HnD. VLAN filtering is enabled and working, but I can't open connection from vlan100 to vlan200. I just assume the routing is missing, but I'm not sure what should be added. eth1: WAN eth2 (vlan100): hap ac2 1 (caps) eth3 (vlan...

Hello! Appreciate your suggestions, they helped a lot! Why you have add bridge=bridge tagged=ether2,ether3,ether4,ether5,bridge vlan-ids=100 I guess that you have clients there and not another switch, so they should be untagged, not tagged I added ether2-5 as untagged (ether2-3 are cap devices and t...

Hi, When adding the entries under /interface bridge vlan you also need to add the "bridge" to the list of tagged ports. Otherwise, layer 3 features won't work. In this case the "bridge" port acts as the CPU port. Added bridge to vlan100 and set PVID 100 on interface eth4 and eth5...

Hello, I would like to ask you help regarding VNET filtering, as I think I read all docs and videos regarding this, but still not functioning fully. About the setup: Main router is RB4011iGS+5HacQ2HnD with 2 hap ac2 managed by capsman. It's a home environment. eth1: WAN eth2 (vlan 100): hap ac2 1 et...

You are absolutely right!
Beside this I had to add my local DNS servers to interface config on the remote site and finally it's working. Thanks!

Hi All, I have a basic home network setup but none of the remote clients in Wireguard network can't reach or ping local devices or the internet (not even the router). I already read this great article, but I didn't find the solution. https://forum.mikrotik.com/viewtopic.php?t=182340 Please help me w...

Thank you for the replies. Finally I could revive my router!
I found an old version of netinstall (6.48.6) on my laptop and the router appeared in the list for the first try.

I don't know why it didn't working with netinstall 7.5..

Unfortunately it does not help.. Indicator shows it is in Netinstall state, but it doesn't show up in the list if I reconnect the cable. After a minutes I see the wired connection lost, then usr led lights up, so most probably it rebooted.

Hi All, I have a quite strange issue in my home network and I would ask your profession to find answers. My home setup: Main router is a RB4011iGS+5HacQ2HnD-IN was running on 7.5 stable and a hap AC2 was managed by CAPSMAN with POE (idk if it is important). I updated RouterOS and the firmware on the...

Soooo....... Question. /system/device-mode/print mode: enterprise [...] l2tp: no [...] /interface/l2tp-server/export verbose /interface l2tp-server server # inactivated, not allowed by device-mode [...] enabled=no [...] /log/print 05:46:01 l2tp,info first L2TP UDP packet received from x.y.x.z 05:46...

Thanks Jotne for this script. "Invalid exchange " section does not work for me, it adds 0.0.0.0 to the address-list instead of the IP in the message. I would like to parse this kind of message: 10:59:24 ipsec Invalid exchange type 243 from 185.xxx.142.172[500]. Maybe word "for" s...

Thanks drasir for the list! I had started to collect them at the beginning, but after 3 or 4 addresses, I thought it's endless. I made the following changes, might be it will be useful for others too. "log" part can be removed from the filter if you are not interested how it is working. /i...

Hi, I have a working L2TP with IPSec configuration on my RB4011, but the following error messages appears few times per day from some random IP addresses. Are they just harmless port scanning or show some security hole? Password and preshared key are complex enough. I'm using the built-in <sn>.sn.my...