Wouldn't USB Power reset be a better approach for your script ? https://wiki.mikrotik.com/wiki/Manual:USB_Features The problem is that some features, such as containers, run on startup and rely on having the USB drive present and properly mounted. They will fail to start if the USB is mounted in th...

I believe this only happens with USB3 capable thumb drives. As far as I can tell this is what's happening: Router OS is assigning a drive slot name to each USB device reported by the xhci-hcd driver. xhci-hcd reports two USB devices for each physical USB port (/system/resource/usb): "Device: 1-...

I saw a lot of folks are having trouble getting IKEv2/IPsec/PSK working post Android 13+ with the new IKEv2 requirement. There are plenty of tutorials out there on getting IKEv2/IPsec/PSK set up on the Mikrotik, but if you want it to work with Android 13+ initiators (i.e., where the Android 13+ phon...

Don't know if anyone is still reading this, but I was trying to set up IKEv2-PSK for Android 13 and ran in to the exact same ""killing ike2 SA: xxxxxxx (IP:xxxxx)"" issue. And found the fix! The initiator (that is, the Android 13 phone calling home to the Mikrotik router) is maki...

Ah, yes, that makes sense. Even though VLAN 1 is default, without setting mainBridge as tagged it appears untagged on mainBridge; if I set mainBridge as tagged for VLAN1 I have to actually create a VLAN1 interface to untag the packet. Creating a VLAN1 makes extra work for the router since it now has...

Sorry, I mean that when I realized I didn't have mainBridge marked for tagged VLAN2 egress, I initially tried marking mainBridge for both tagged VLAN2 egress _AND_ tagged VLAN1 egress. That didn't work either, and I'm guessing that by marking mainBridge tagged for VLAN1 egress, the mainBridge switch...

Thanks, I'll try this.

I have a SurfShark dedicated IP account that I wish to use to set up a second IP access point with complete port forwarding capability. (I'm not doing this for privacy, I'm doing it because I want to have a second IP that is apart from my main IP.) My goal is to have ether8 (and VLAN 2 tagged packet...

Ah, I figured it out! You're a life saver. Thanks so much for the help. It was stupid. I thought I added the bridge as tagged to VLAN1 and VLAN2, but when I checked again it was added as UNTAGGED egress! But one thing still eludes me. I thought that setting the tagging option set egress from the rou...

Unfortunately, I was mistaken. There was no change in behavior. When I released my HDCP hold and tried to renew it I still got "unable to contact your DHCP server. Request has timed out" and defconf (the wrong DHCP server) is still trying to offer leases without success. Somehow traffic is...

I might have spoken too soon, I think there is a change but I'm out on the town and remoting in by phone so it might take me a bit to figure out whats going on exactly. edit: behavior changes, but still not what's expected. it got an IP, but was 192.254.64.71? I can't do more until I get home. thank...

Good catch, it was missing! I think there is a change in behavior, but I'm on my phone and it might take me bit to figure out if this fixes it.

edit: spoke too soon when I originally wrote no change in behavior, it just took a bit for the computer to retry properly.

It should be under /ip dhcp-server network ... Ah, sorry, I do have that entry already. I must have accidentally deleted when doing reactions. here it is: /ip dhcp-server network add address=192.168.1.0/24 comment=defconf dns-server=192.168.1.1 gateway=\ 192.168.1.1 netmask=24 add address=192.168.1...

you don't have dhcp network settings for either IP subnets ... I wonder how any of DHCP clients can get usable lease? I thought I did? Did I mess up and these are not the appropriate settings, or perhaps you just missed them? /ip pool add name=main_dhcp_ip_pool ranges=192.168.1.100-192.168.1.254 ad...

Sorry for the delayed reply, it was my bedtime. 4:29AM here =) erlinden/mkx : The reason I have both ether2 and ether3 that way is because during testing I've been moving my ethernet cable back and forth between the two cables. I can set the PVID of ether2 to 2, lose connection, move my cable to eth...

Thanks. Unfortunately, unplugging and replugging did not get me a new IP. I just get error messages that the DHCP server is unreachable. Here's my redacted configuration: # 2023-08-29 21:06:53 by RouterOS 7.11 # software id = Z8XQ-IISM # # model = RB5009UPr+S+ # serial number = {redacted} /interface...

Hi. I'm trying to get my feet wet in VLANs, and for right now I'm trying to do something I thought would be really simple and it's just not working. The initial state of my router is pretty simple: a bridge named mainBridge has ether2-ether8 assigned to it. ether1 is WAN, and masquerading is set up ...

I have created an L2TP VPN server to which a windows client is attached. I need to be able to connect to this remote VPN client with Remote Desktop from the LAN. I can connect to clients on the LAN from the VPN'ed machine using Remote Desktop, but I cannot connect to the VPN'ed machine from the LAN ...