Hi, I have a RB5009 router and have configured 3 VLANs (10, 20, 30). In a public cloud, I want to run Ubuntu (or maybe ROS7) and establish a connection (Wireguard) with the RB5009. The goal is to have network traffic from devices on VLAN30 go out to the internet through the server in the public clou...

Thank you @anav! Yes, you understood my problem to the point.

Yes, I am aware of that, but I have 5 endpoints that need a speed greater than 1Gbps to the Internet.

Hi! Currently, I have an RB5009 router that functions as a switch and router. I have increased my internet bandwidth to 2Gb/s. Unfortunately, I can't utilize this speed because the RB5009 has 1Gb/s ports. Would the solution be to buy a switch with 2.5Gb/s ports and connect it to the RB5009 by aggreg...

Thank you!

I learned it from you @anav! and, wanted to help, obviously you were faster :) @bastiitsab what @anav said is fully transparent for user, so on the PC where you configure custom DNS, and wants to use dig/nslookup, you will see the response from the custom DNS which you configured - which is not true...

@anav You will note I already have rules to allow you to manage the router via winbox......... For the interface list called MANAGE, we defined/included the management vlan as I assumed thats where you were doing your managing, AND we also include the WG interface so if you were remotely trying to ...

How effective is this "forcing the use of the PiHole" for DNS really? especially with DoH? It's easy to enable in FireFox connection settings FireFox DoH.png The rules applies to port 53, using DoH users will bypass the restrictions configured on the router. That's a good question though,...

Having Pi-hole connected to the router and using custom DNS, I was able to resolve DNS query like i.e. dig google.com - and get response from 8.8.4.4 (set as a custom DNS). So, such behaviour led me to the conclusion that the firewall rule is not working. I wanted to test out firewall rule that DNS ...

@anav - Being connected to 10.0.30.0/24 network, and manually changed DNS on PC to 8.8.4.4 - I'm still able to browse the Internet (secure DNS is disabled in Chrome/Edge), do nslookup or dig using the 8.8.4.4 server. My fault! Once I disconnected cable from Pi-hole, then I wasn't able to resolve DN...

By forcing the configuration for users, I thought these rules would also not allow, the use of DNS addresses that were changed manually by the users.
Now I understand, by FORCE you mean to assign Pihole(IP) as DNS server for users.

Yikes I noticed on your post of the config you FAILED to copy the ip dhcp-server network properly ????????????? Yes, this was at the very beginning, as this is new for me, I checked configuration several times, and found a few typos - thanks to them, it forced me to review config carefully, which w...

Yes, you were right @anav & @Buckeye . Everything works as expected now - a HUGE THANK YOU @anav for your support! I'm trying to understand the config and firewall rules, and of course there are multiple questions, but I have to dive into the documentation first, and so far, I would like to ask ...

Thank you very much @anav for your support. I've applied the following config and PC cannot obtain IP from DHCP on ports: ether2 and ether3 - getting IP 169.254.x.x. On the ether4 and ether5 DHCP works fine. What could be wrong? Also its easier to allow a lan subnet or users to access a particular I...

No, no, just me.
Wireguard is fine as well.

Good catch!, Updated the code block at the first post. Added also VPN part.

Yes, you are right @anav.
I've updated network diagram and VLAN/Port overview.
Should be better now unless you have comments to the design of network.

Here is the output: I haven not configured more than below, as I wanted to solve this issue first. # jan/02/1970 06:42:38 by RouterOS 7.5 # software id = 2XKJ-KFM8 # # model = RB5009UPr+S+ /interface bridge add name=BR1 protocol-mode=none vlan-filtering=yes /interface vlan add interface=BR1 name=BLU...

Hello, I've been trying to get the configuration to work, but after a week, I'm really fed up... I was searching for similar topics, trying to glue the configuration but without a luck. I also followed this article https://forum.mikrotik.com/viewtopic.php?t=143620&sid=02eafc2a9fa87f5a9201e7170cf...