I can confirm that my vrf setup was broken due to the change in firewall filter table where you can no more match specific input/output interfaces if those interfaces are put within a VRF. For more info see the note about 7.14 and VRF here: https://help.mikrotik.com/docs/pages/viewpage.action?pageId...
My issue could be related to the following behavior change starting from 7.14: Started from version 7.14 when interfaces are added in VRF - virtual VRF interface is created automatically. If it is needed to match traffic which belongs to VRF interface, VRF virtual interface should be used in firewal...
I've upgraded from 7.12.x to 7.15.2 and this broke my wireguard connection with a raspberry and my vrf setup. For the VRF I've opened a ticket and I'm waiting for support. I'll try to redo the wireguard config changing the key to see if it starts working again.
I've just updated from 7.12 to 7.15.2 and it broke something on my VRF setup. I have a lan_bridge in vlan 254 along with eth4 and I've created an interface vlan lan_bridge.254 with an IP address that usually was placed in a specific vrf along with a pope interface. The hosts on eth4 vlan 254 can not...
Same issue on 7.8. Let's hope support will find the root cause of the issue or at least gives me a command to reset fasttrack in order to schedule a reset every few hours until the issue is resolved, without needing a complete reboot of the router.
Updated my hAP AC2 from 7.7 to 7.8, still having the problem that FastTracking stops working after few hours until you reboot the router (with a performance drop Speedtest over PPPoE from 930Mbps to 350Mbps). I have updated the support case I've opened for the issue on 7.7. Everything else seems ok,...
I can confirm that even without fastTracking on vlan-tagged traffic, after few hours fast tracking stops working and the rule with action=fasttrack-connection matches all the traffic instead of the first bytes of a connection, thus meaning that anything is fast tracked. I run a speed-test every 4 ho...
Hi, some days ago I've opened this thread because I was noticing problems with FastTrack on my hAP AC2 after upgrading to RouterOS 7.7. After a reboot everything worked fine and I've thought that the problem was related to some config tests that possibly messed up FastTracking. Now I had a look at m...
L3HW offloading is not supported by any of "small" routers, only by CRS3xx, CRS5xx and some CCR2xxx. Configuration does indicate the presence of L3HW, but even if you set it to enabled in config, it just won't be enabled in reality. So this rule matches but can't do HW offloading: add act...
Hi, I've cleaned up my config and I've found a port-mirroring set on switch1. I've disabled it and nothing changed. I've also removed unused bridges and now I have only a single bridge. After a reboot of the device I went back to the usual 930Mbps of throughput :) : Speedtest by Ookla Server: KONVER...
True forum guru @sindy mentioned in another topic that filter rule with action=fasttrack doesn't accept the packet (same as action=accept which terminates rule evaluation), it rather marks connection for fasttracking. This affects subsequent packets of same connection (allowing them to skip firewall...
Where are the rest of the rules without context nothing can be ascertained,,,,,, and no you dont need duplicate fastrack rules...... Those two rules are the first two rules, so they should not be influenced in how they match by following rules. Then, have you carefully read what I’ve written? I’ve ...
Hi, I have an hAP ac2 with RouterOS 7.7 and I have the following two rules at the beginning of my firewall rule base, as explained on the documentation in Offloading Fasttrack Connections section here : /ip/firewall/filter> export # feb/18/2023 10:28:09 by RouterOS 7.7 # software id = 8U9P-DH4C # # ...