The UI update is a welcomed update. Yet, I am not convinced by the current iteration. We went from the "ugly" but very functional style and clear to read to the "pretty" but less functional & "harder to find what you need "style. Functionality and ease of use does t...

It should work when you put it as a string, I do this. You don’t have to have a DHCP rule, it’s just your current configuration drops all input that is not accepted. I don’t think the suggestion to accept dhcp server input on wan is valid, it should be trusted_vlan where your windows machines are. ...

Thank both of you!

The combination of the firewall rule (i had no idea you needed a firewall rule in IPv6 for DHCP) and the hex generator instead of putting it in plain text seems to have done the trick

It appears that your firewall blocks DHCP requests from LAN, try adding this rule: add action=accept chain=input dst-port=547 in-interface-list=LAN protocol=udp \ comment="Accept DHCPv6 Clients from LAN" (alter as needed to only allow clients from the vlan you want). Thank you for your re...

/interface bridge add admin-mac=2C:C8:1B:FD:72:F8 auto-mac=no comment=defconf name=bridge pvid=900 vlan-filtering=yes /interface pppoe-client add add-default-route=yes disabled=no interface=ether1 name=pppoe-proximus user=user /interface wireguard add listen-port=13231 mtu=1420 name=WG_Roadwarrior ...

Good afternoon I have IPv6 running since a couple of months using RA + SLAAC. It works great except Windows devices do not get the DNS server from the RA. It's a know "bug"?. Till now I just set the DNS manually on my Windows 11 devices. Today, I wanted to look a bit more into it and the w...

Thank you allot for your help. I just had a constructive call with my ISP, now let's hope they will implement the changes. Till then I will keep my MTU on 1492 as a work around.

My client is running Windows 11. I tried the http://icmpcheckv6.popcount.org also on Windows 10 and one android device all with the same results. I just tried to disable the drop rules in the forward and input rule set. Sadly, this had exactly the same results. What I also noticed when not setting t...

Cloudflare has a few articles about this on their blog, I've mentioned them on other topics on this forum about IPv6 and MTU: This: https://blog.cloudflare.com/path-mtu-discovery-in-practice/ And this: https://blog.cloudflare.com/ip-fragmentation-is-broken/ And this: https://blog.cloudflare.com/inc...

Or just do some tests and gather proof before blaming the ISP blindly.

This interest me. What tests could I do? Is something wrong in my config?

Good morning I'm having some trouble with getting the IPv6 MTU Discovery to work. If I do not set the MTU at 1492 in the router advertisement most websites will not load. I'm using a PPPoE connection with an automatic MTU of 1492. I understand that some servers do not accept ICMPv6. But shouldn't my...

+1 we need NAT64. We are in 2023 not 2003.

Out. Bridge Port Filter works only when use-ip-firewall in bridge settings is enabled Bridging and Switching Bridge Settings https://help.mikrotik.com/docs/display/ROS/Bridging+and+Switching#BridgingandSwitching-BridgeSettings Thank you for your answer. Sadly as you can see it is enabled. I tried m...

I did not manage to find out why the Out Bridge Port is not working however I found a better solution to identify my two computers. I mark the connection using the Src. MAC Address from the computers. Afterwards I use this connection marker to mark the corresponding packets the packets. It looks lik...

Good afternoon I'm trying to set some Queue on the network to prioritize two computers in the network to the WAN. To make it a little more complicated the network is dualstack and the IPv6 prefix is dynamic (thank you ISP). Since the IPv6 Prefix will change, I cannot use a simple queue and assign it...

Good afternoon My home network is currently on dual stack. I would like to implement a CAKE queue to the traffic going to my WAN as I am still on VDSL. The IPv4 is simple. But the issue I have is how to apply the queue on my IPv6 addresses. I can set today's IPv6 network/prefix, but nothing guarante...

Good morning I am setting up a wireguard tunnel. the tunnel is working as expected but I would like to add an extra layer of security by using a preshared key. This preshared key has to be a 256-bit symmetric encryption key following the wireguard document. How can I generate such key in routerOS wi...

Good news. It is working now 1Gbps/s intervlan routing with hardware offloading and vlan-filtering on my little hEX S.

I was reading the changelogs of the routerOS versions above mine and found this line

*) bridge - added fast-path and inter-VLAN routing FastTrack support when vlan-filtering is enabled;

I will give this version a try.

If the bottleneck is routing, I don't see how using an external switch will help, since inter-vlan traffic needs to be routed (through the CPU). Since vlan 10 is trusted. can your hyper-V allow a second interface on the virtual NAS, with an virtual interface in vlan 10? Then the largest consumer of...

How is the right way to configure it? And why is it only using 50% of the CPU instead of 100%? 50% of all cores combined, means 100% one core is being used. you may check by looking: /tool profile cpu=all or /system/resource/cpu/print The reason of slow speed may be the the non-ARM cpu and the lack...

I am trying to learn vlans on ROS too. I just recently got a hEX S. I know Ubiquiti ER-X much better, but I am starting to understand how ROS does things. You may be hitting a Single core limit, the MT7621A SOC has 2 full cores (hyper threaded to 4). If I am understanding your config corrrectly, al...

You're using a bridge based VLAN which is only really supported on a limited number of newer devices. While it works it does result in the performance you are seeing.

How is the right way to configure it? And why is it only using 50% of the CPU instead of 100%?

Good afternoon Firmware: 7.1rc7 Device: Hex S I recently noticed I only get 200Mb/s intervlan routing. The cpu is only hitting 40-50%. Is there a way to get the CPU to be utilized more? I also noticed the fast track is not working when doing inter vlan routing. I have checked the cables and devices ...

Thank you. This was indeed the "issue". Sometimes you don't learn from your mistake. I remember I had "resolved" this issue in the past. Let's hope I won't forget it this time. If someone ever have this issue and find this thread by googling: The two clients might be able to ping...

Yes, I am. When I connect them both devices to the same VLAN they manage to communicate with each other without any issues.

Good day! I have two newbie questions: 1) I would like device 10.0.1.253 to be able to connect to device 10.0.2.254 and vice versa. The accept rule sees the packet and allows it. Still, the packets are not reaching their destination. What have I forgotten? 2) I have set a FasTrack and an accept rule...