OPENCONNECT PLEASE!!!

I'm sorry that I did not get back to this thread. Been dealing with the death of my Dad. iaskakho, Do you still need my examples? I am good thank you very much we worked it out with Anav. But I would like to see your example as well! Anav, I removed the gateway ips. Why can someone use the gateway ...

Sorry I never used the /ip route rule, before: [igor.astakhov@gateway1] /ip route> export # apr/12/2022 01:44:36 by RouterOS 6.48.4 # software id = NUTA-4YVB # # model = RB4011iGS+5HacQ2HnD # serial number = F03C0EEDBD0B /ip route add comment=to_xfinity distance=1 gateway=x.x.x.x routing-mark=to_xfi...

This is all I have in the routing menu:

K6cc,

Yes please.

Anav, I don’t think I have these options my version is 6.48 there is no /routing table or rule option if I am not mistaken I will double check otherwise this should suffice.

Hello, I've been trying many different things and its not seems to be working traffic still goes to the best route and not out of specific gateway. I marked the connections and marked the traffic with src-address and still no good I see it uses mac of wan2 instead of wan1. Here is my set up 10 ports...

I've been having an issue as well recently I got 3 little hapMinis, they don't have enough space to update so netinstall was needed. The first one went fine but the next 2 gave trouble... 2nd one kept error "FAILED TO REPLY".. then after multiple commands and setting a different ip on the ...

Should you add the wlan virtual interface on the CAP to the bridge OR add the virtual interfaces on the CAPsMAN to the bridge?

and the automatic setting is called datapath.bridge?

I wanted to provide my experience. I was updating the mini hAP because it doesn't have enough space via netinstall. [iaskakho@ap1] > /system routerboard print routerboard: yes board-name: hAP mini model: RouterBOARD 931-2nD r2 serial-number: 94A2096251B5 firmware-type: qca9531L factory-firmware: 6.4...

What kind of VPN?

I use OVPN: https://wiki.mikrotik.com/wiki/Manual:Interface/OVPN

People like to use pptp with ipsec too.

You would have to set the routes on the client, there is no option from the server side mikrotik.

I suggest then setting a firewall rule to drop any traffic from <ovpn-gateway> that is not those 2 networks.

[iaskakho@gateway1] /ip arp> print Flags: X - disabled, I - invalid, H - DHCP, D - dynamic, P - published, C - complete # ADDRESS MAC-ADDRESS INTERFACE 0 DC 10.0.2.8 74:8D:08:91:12:1D bridge 1 DC 10.0.2.71 90:81:58:F3:91:DB bridge 2 DC 10.0.2.48 98:E7:43:7F:47:32 bridge 3 DC 10.0.2.2 00:E0:4C:12:13...

Can you show your routing table? Best if the export of config.

I specify the global ip as the src-address not the dst-address and also the port on the to- and interface from which it is coming from: chain=dstnat action=dst-nat to-addresses=10.0.2.2 to-ports=3306 protocol=tcp src-address=<global-ip> in-interface-list=INET dst-port=3306 log=no log-prefix="&q...

I figured it out, after my initial configuration I updated the OS to newer version. 6.48.3 I downgraded back to 6.47.9 and it worked no problem. No need for the proxy-arp or anything. At first this was the issue I thought but then realized it broke again and after using /tool sniffer quick ip-protoc...

I went to: https://mikrotik.com/download/archive found the needed npk, make sure you get the correct architecture: [igor.astakhov@gateway] /system identity> /system resource print uptime: 2w5d5h41m20s version: 6.47.9 (long-term) build-time: Feb/08/2021 12:48:33 factory-software: 6.44.6 free-memory: ...

Hello, I am having an issue where I cannot ping from my LAN 10.0.2.0/24 to the network connected via OVPN. OVPN server is RB4011iGS+5HacQ2HnD and the client is the RB4011iGS+5HacQ2HnD, software version are different client is newer software. When I originally set it up it was working. But then somet...