Hello holvoetn, Thank you very much for your explanation. I saw the table from the link you attached earlier, but in a different place, so I didn't fully understand it. Now I'm clear, thank you :) My surprise with the interfaces turning off was also due to the fact that I use Unifi APs elsewhere and...

Hello, Just a quick question. So far, AC2 used CAPsMAN, mAP [as CAP] and hap Lite [as CAP] as a controller. 6/49/13. Now hAP and Map upgraded to 7.16.1 I wanted to replace the old AC2 with AX3 but I encountered several problems. From what I read, the new wifi-qcom driver package creates a "new ...

kleshki, Thank you very much for your help,
you saved me many hours of searching.
Enabling IP Firewall + Vlan Firewall on the bridge and adding rules on the firewall as forward solved my problem.

Hello and welcome, I have a maybe obvious question. I have been struggling with the on-prem email server for several days. I decided to temporarily change the concept and instead of keeping it behind NAT, it got a public IP address (let's say 10.0.1.200). My Mikrotik router has a public address of 1...

Gentlemen,
Check if you have routing set on both devices on each side

up!

Hi, In Mikrotik, in IP DHCP Server -> Leases, make the address received by MX static. Then try adding a rule in the IP->Routes tab DST. Address 10.0.0.0/8 Gateway: IP address with DHCP for MX e.g. 192.168.88.100/24 and see if you can ping the MX address from the Mikrotik terminal, first to the DHCP ...

Hi, thank you for your answer :) DNS in domain.com is not a problem. This is external hosting and all DNS records are set by this provider. I only have influence on my subdomain, so I suspect that the nat rules are somehow intercepting all the packets that go to the e-mail ports and I don't know how...

I'm very glad I could help, have a nice day

I think that's a good point, but I haven't fully checked the other configuration. This is probably due to the fact that PVID 1 is the "default" vlan and many other devices communicate on it, which may cause some security problems. However, in the case of my networks, apart from TAG ports, ...

Hi, If I understand correctly, you want to get "Internet" on RB 4011, which you will get from CPE 5g via DHCP and it is to be forwarded via VLAN 1000. In this case, you can no longer treat port 1 as WAN and you must instead assume that VLAN 1000 is your new "WAN" So if I interpre...

Hello and welcome, I'm trying to set an email address within my network (192.168.4.0/24 gate 192.168.4.1, email server 192.168.4.103). I have a public IP address that the entire network accesses. The email server is located inside the network and has dst-nat rules set on it. Generally, sending and r...

OK. So we have clarity.

You can set on unused port IP - dhcp client - port 7, Add Defoult Route Yes, Advanced , Default route change 1 to 5 and connect them to LAN Asus port. Now you should have access to them.

Or you can try it:

https://www.asus.com/support/FAQ/1000926/

It's working!

Thank you very much for your help and time!

I uploaded your configuration to CHR for a test... and there is indeed a problem with the connection. I'll try to look at it, although as you wrote it looks very simple...

Sob, thank you so much for your attempt to help, I really appreciate it

I removed redundant routing, broke the IPSEC connection using Kill Connection. SAs cleared and after reconnecting, the values ​​on the screen appeared. I ping both sides, unfortunately no change.

sorry, i messed up a bit. See these three scenarios. reply.png Option 1 I assume you had at the beginning. Asus WAN plugged into mikrotik. There was no communication because by default ASUS did not accept incoming connections from the WAN. It gave parental control for its WiFi clients and 50.x netwo...

Sob, Thank you very much for your reply and your time. Of course, I'm probably fussing too much. I uploaded the configuration from you and the IPSEC tunnel connected without a problem. Unfortunately, the pings do not fly, this time from both sides. I am posting screenshots from the mikrotik configur...

Hi.
Maybe The Dude will be solution for you ?

https://mikrotik.com/thedude

You can run it on VM. Clients, can be connected via VPN for monitoring.

Regards

Ok as far as I understood Mikrotik is directly connected to the internet and at the same time you want to use asus and its parental features. The simplest solution is Asus as AP and network for children. So you connect the WAN port to Mikrotik, it gets the network and treats it as an exit to the wor...

Hi. Please see if moving the rule to the top of the list solves the problem: add action=accept chain=input comment="Allow MGMT devices full access" \ in-interface-list=MGMT_LIST You also have MGMT_VLAN assigned to two lists add interface=MGMT_VLAN list=MGMT_LIST add interface=MGMT_VLAN lis...

Hi. Few details. If you want to have communication between them, see the Bridge - ports settings in mikrotik. Select an unused port, e.g. 9, and remove it from the bridge. Then tab IP->addresses, add 192.168.50.2/24 (other IP than Asus) and assign it to port 9. In ip routes add new routing: DST. add...

See what your cable is made of. I had a case of poor quality wiring (CCA) and an outlet that was probably tarnished. After disassembling it, and earning it again, the problem disappeared for a while, but it reappeared. I ended up replacing the cable and socket. I'll just add that it was a distance o...

Good morning, Hello everyone on the forum, this is my first post, so I apologize for any inaccuracies or omissions. SITE A - vlan7 - LAN+mgmt (192.168.7.1) main router, DHCP server, firewall, L2TP VPN server (192.168.11.1 - currently disabled), IPSEC VPN (10.0.88.1). Ethernet 1 is as WAN and gets pu...