The PCUNITE post is excellent, congratulations! I would like to see you continue the project teaching more about this content.

I'm like a pervert watching the announcements of new releases hoping that they will bring this feature. Mikrotik has a great advantage in that it has all the tools we need and lets us configure it the way we want, super flexible. Unlike other manufacturers. I can't imagine any major internet operato...

Exactly my idea and that's what I did, open a ticket via email with the following subject: Resource request - Tunnel Interface (VTI) I explained my motivations. I hope that community demand changes Mikrotik's stance on the feature. One of the main reasons is with Cloud providers too, we cannot use, ...

Exactly what I did, open a ticket via email with the following subject: Resource request - Tunnel Interface (VTI)

I explained my motivations. I hope demand changes Mikrotik's positioning.

One of the main reasons is with Cloud providers.

Well, I tried again using a support desk request, but the status still is "At the moment, there is no plan to add this functionality,., but we will see if it can be supported in the future." Thanks for updating this post pe1chl. I've come across posts several times that you helped the com...

Well, I tried again using a support desk request, but the status still is "At the moment, there is no plan to add this functionality,., but we will see if it can be supported in the future." Thanks for updating this post pe1chl. I've come across posts several times that you helped the com...

It's very satisfying to witness a conversation between intelligent people.

If I understand correctly, using no-mark on the connection marked in the connection state would disable fasttracked? This way it would use the mangle rules and not be ignored by the jump from fasttrack to fastpath.

In simple terms there are tools you can use. What is common to both is needing a table and an IP route. One is create a table add fib table=utilizeWANX Create the route add dst-address=0.0.0.0/0 gateway=ISPX routing-table=utilizeWANX Then you have two options: a. use routing rule This basically sta...

Yes. It's covered by Packet Flow Diagram. The "Mikrotik's own traffic" is a "routing process" here going through LOCAL: https://help.mikrotik.com/docs/display/ROS/Packet+Flow+in+RouterOS#PacketFlowinRouterOS-OverallPacketflowDiagram https://help.mikrotik.com/docs/download/attach...

What is the requirement in better detail. a. identify user(s)/device(s), groups of users/devices b. identify what traffic they should be allowed to execute. c. identify any particular routes traffic should take d. identify any traffic that the router needs to execute ( aka router services like VPN ...

It is possible to control the output of Mikrotik's own traffic with mangle rules?

I apologize for the delay. I need to sort out some personal stuff. Unfortunately I'm not in my home lab at the moment to send the settings. I'll do it as soon as possible. I really appreciate your time. I will try to be better in the explanations. I was wrong not to talk about my environment. A stud...

Thanks for the sugestion. They were helpful. As I understand it, you direct the clients that go through routerOS. Right? When is the Mikrotik itself that needs to do this query? Would it work? Imagine that Mikrotik would need to query the DNS names of my network, for any type of validation. Then in ...

First of all. Thanks for your time in reading. I'm running some tests and evaluating my rules. I have an IPsec connection, it's working. I would like to make the RouterOS system refer to the DNS that is on the other side VPN. But his internal traffic does not reach the VPN. It must not be hanging ou...

1 - In IPsec settings, when you use IKEv2 Roadwarrior, you have an assigned IP. Is it possible to put it as static on the client side? I don't think it's necessary to supply a "virtual" IP via Mode Config as long as the client can handle it. Builtin desktop / mobile OS clients usually can...

for some stupid reason, I opened this topic twice.

I'm trying to remove the post, but the mikrotik website is giving me an http 500 error.
While I try to remove this post, I leave the url of the original post:

viewtopic.php?t=196491

Hey, guys. Before I start, thanks for taking the time to read my question. I wanted to know if it is possible to make some of these configurations in IPsec. These are unrelated questions. Plucked from scenarios of my imagination from my creative mind like a donkey. 1 - In IPsec settings, when you us...

Hey, guys. Before I start, thanks for taking the time to read my question. I wanted to know if it is possible to make some of these configurations in IPsec. These are unrelated questions. Plucked from scenarios of my imagination from my creative mind like a donkey. 1 - In IPsec settings, when you us...