can anyone share the ipsec speed result on 009? I'm especially interested in the comparison with the hex

On which ROS version? There is file add command introduced in some 7.x ver., see doc: https://help.mikrotik.com/docs/spaces/ROS/pages/2555971/Files#Files-Createnewfileordirectory where with single command call file with contents can be created. thanks for the help, changed it to /file add name=(&qu...

I do not know if I should laugh or cry? I'm sad that I had to do everything myself https://media-hosting.imagekit.io//2618fcb3fe154b3f/65434534.png?Expires=1834223094&Key-Pair-Id=K2ZIVPTIP2VGHC&Signature=Z4IhzG8JrP4vy8Mmkh2z25V9S1K3OeukNuLI72MeSP-Ivm1Bu8-elAn4kk5K0rD1ijgoDZPCJskPI55ApH8klaP...

:local sourceDir "source-directory" :local destDir "destination-directory" :local fileList [/file find where name~("$sourceDir" . "/")] :foreach file in=$fileList do={ :local fileName [/file get $file name] :local fileContents [/file get $file contents] :loca...

thanks for the answers, but i don't need to copy large files, just three dozen files witch configurations, macros, rsa keys, etc. the largest file does not exceed 1.5 KB. enabling external services is not allowed. i would be very grateful if someone rewrote my single file script into a proper workfl...

good afternoon, I have this script for copy one file :local buffer [/file get [/file find name="flash/tmp1/ubuntu_rsa"] contents] /file print file=("tmp1/ubuntu_rsa"."\00") /delay 1s /file set tmp1/ubuntu_rsa contents="$buffer" and it works great, how to modif...

Good day, I would like to ask, I have a hEX RB750Gr3 and I use a fairly simple setup, with default settings: ros 7.16.2, ether1-4 in bridge witch vlan-filtering, several vlan networks, ether5 - wan pppoe, added l2tp client with ipsec and simple mangle rule that routes some connections to this separa...

I got 123.5Mbps(Tx)+121.8Mbps(Rx) while CPU usage is around 72%.

thanks for the work!
but this once again proves that hex is dead

It is impossible for the "WAN and LAN" ports to be on a single bridge sir.

why not, if, for example, the provider provides pppoe, then you can easily add the entire port to the bridge.

thanks for the answer TheCat12 , first I focused on installing Phase 1 and turned on logging, so i saw that i need to enable sha256, for that created a new profile: /ip ipsec profile add enc-algorithm=aes-256,aes-128,3des hash-algorithm=sha256 name=profile1 after that i imported R10 and R11 certific...

are used there free certificates letsencrypt https://letsencrypt.org/certificates/ CN=R10 or R11

good afternoon, I have a mikrotik, how can I connect it as an ikev2 client? in windows I just create a new vpn connection, specify the remote address, username and password. ikev2.png on my iphone I also create a new vpn connection, specify the remote address, username and password. how can I also c...

Yes, everything is exactly as I wrote above. one of the providers blocked traffic, moved Mikrotik to another provider and everything worked, there is a connection between the Mikrotiks. There is one more small question left: if I connect a client 192.168.88.2 to one of the Mikrotiks, how can it acce...

thanks for your answer, but the problem is that most of the examples on the Internet, including your answer, are examples for connecting networks, left and right subnet configuration, in my case, as I already wrote, there are no subnets or vpn networks, this is a simple host to host configuration wi...

doesn't work :( , just want to use ipsec for all trafic between two mikrotik introduction, there are two devices on the Internet with public IPv4, no NAT and masquerading, no local subnets, both contain the same, minimal firewall /ip firewall filter add chain=input in-interface=ether1 src-address=20...

good afternoon, I use a simple configuration between two Mikrotiks with public ipv4, and I just want to use ipsec between them Mikrotik A /ip ipsec peer add name=peer1 passive=yes /ip ipsec identity add generate-policy=port-strict peer=peer1 remote-id=ignore secret=12345 Mikrotik B /ip ipsec peer ad...

think i did, like works
/ip ipsec mode-config
add name=HomeVPN responder=no src-address-list=HomeVPN use-responder-dns=no

good afternoon, please help with advice, mikrotik acts as an initiator of the ipsec connection /ip ipsec mode-config add connection-mark=HomeVPN name=HomeVPN responder=no use-responder-dns=no /ip ipsec policy group add name=HomeVPN /ip ipsec profile add name=HomeVPN /ip ipsec peer add address=my.hom...

Looking at the screenshot, you're trying to add the pool to a secret, not to the profile which is, as correctly suggested by most internet resources, located in the PPP –> Profile section

you are absolutely right! thank you!!

do as shown in many guides on the Internet, but I get an error
/ip/pool/add name=pool1 ranges=10.0.3.2-10.0.3.30
/ppp/profile/set remote-address=pool1 numbers=1
(ros 7.12.2, no configuration)

it seems to me that you both never read my message :( I have ether1 in Mikrotik where Vlan10 and Untag come, I need to combine all this into one bridge and add Mikrotik bridge1 itself does this mean that I will not be able to do everything on one bridge? and I will need to do something like: /interf...

Please tell me, a regular(uncontrolled) switch with several ports is connected to my Mikrotik in lan1, regular clients are connected to this switch, as well as clients that have VLAN 10 installed on their network cards, how can I get them all in one bridge on Mikrotik? When I install on mikrotik PVI...

Not something normally done. What is your use case for this? in our working network, vlan numbers are defined by technical documentation, and I cannot change them, and in this case, another network provider provides its services with other VLANs, which we also cannot influence in any way we previou...

Is the hex acting as a router or a switch?

Does bridge vlan filtering on hex on used as a router or a switch work differently?

Why would you want to change the tagging of a vlan? ( dont think its possible in your context )

I always considered this to be the basic functionality of VLAN.

/interface bridge add name=bridge1 protocol-mode=none vlan-filtering=yes /interface bridge port add bridge=bridge1 interface=ether1 add bridge=bridge1 interface=ether2 add bridge=bridge1 interface=vlan1 /interface bridge vlan add bridge=bridge1 tagged=bridge1,ether1 vlan-ids=30 add bridge=bridge1 t...

good afternoon, I'm just studying microtick, and I have a simple question to which I have not yet been able to find the answer,

I have mikrotik hex on port ether1 which receives tagged traffic - vlan 30, how do I output this traffic to ether2 with the new vlan 20 tag?