Is there anyway to do it with FW rules? How can you block OUTPUT chain traffic by incoming interface? I will setup the zt instances to use specific interfaces or lists for now. How do you create a wg interface that only has traffic in/out of LTE? Thanks! Ok, since you can't make a FW rule using inbo...

Ok, since you can't make a FW rule using inbound interface matching (chain=output in-interface=ZT1 action=drop) how do you block ZT interface from going out LTE? And wg is by design very quiet where zt is very noisy. Wg should send almost no packets if no traffic is passing, even if we set keepalive...

That's what I thought and I think that's the exact rule I had but it wasn't working correctly at the time, there was mb of traffic adding up on the LTE interface $$. I don't have the configs from then as I was trying a lot at the time. But trying to get best way before retrying. How would I make a w...

I will update the original post also, let me clarify; All sites have Fiber or cable internet -> Main WAN They all have a Quecetel LTE modem plugged into the USB port, LTE is all up and working, no issues. The LTE interface is only for inbound management and I want to create a persistent outbound WG ...

Before we get to failover and LTE routing, I'd like to simply get LTE to only access the router. No access to network or devices behind it, yet, just able to access winbox/ssh via LTE anytime. And have no packets go from network to LTE. At the same time, is it possible to make a wg interface only us...

PLEASE simply include mini-pcie or m.2 port in all products and offer version with no installed modem.

Then we can install modem as needed, mostly for management, Cat 4/6 is plenty or Cat-M/NB-iot for remote management.

We had an issue with hAPAC3 doing the same sometime after 7.7. It doesn't happen often but kernel failure in the logs. Upgraded to 7.10.2 and hasn't happened yet, but no idea if resolved as it was rare but never happened before. Not much useful info but a data point.

Hi, Using a Quecetel LTE module via USB, got it configured and left it alone, a few days later realized it ate up many mb of data traffic. My question, simple FW rule to only allow LTE traffic IN/OUT to router for management (winbox port, ssh, etc.) so no other random traffic should be going out the...