Likewise when one uses PPPoE for WAN ... interface for WAN will be pppoe-out1 interface and not e.g. ether1. In this case it is sensible to add ether1 to WAN interface list ... but because it's used to access ISP's modem management interface. But has nothing to do with internet traffic. "off-t...

Woah thanks, for the exaustive reply. So, the LAN interface list with the "main" bridge is useless because, due to the vlans, when using the firewall, it doesn't know what's going on inside with the vlan packets, right? I'm making a rule to block all the inter-vlan traffic, and I created t...

You need to look through rest of the config to know how both of those lists are used in it. I wonder - did you mean to ask "what is the difference between the-bridge-itself interface and the vlan interfaces"? (Happy to answer but don't want to infodump if that's not what you want...) Sorr...

Hello, what's the difference between the following two interface lists (I want to use them in the firewall rules): Interface List with the only item added being the main bridge Interface List with all of the single VLAN interfaces The following picture explains better maybe: https://i.ibb.co/SyHk7pJ...

Ok so, I've created the following rules. How do they look to you? Are they OK to secure my network? (and did some other stuff from the First Time Configuration docs ) /ip firewall filter add action=drop chain=input comment="drop <invalid> packets" connection-state=invalid log=yes log-prefi...

Yes, so what ?
I got no problems with that setup.

Nothing, just wanted to confirm if I understood correctly

I only allow ports which I need for my wireguard connections through ISP router, nothing else.

So you have a double-nat going on?

deleted

Why will you need BTH I need it to easily have a VPN to my home from my phone (with MT app), not PTP routers. I know how to setup a "normal" Wireguard server and so on but BTH seemed a good "integrated" feature, along with the Android app. Ref Firewall: what is the point of us g...

I've started without the default configuration to know exactly what was going on under the hood and what I did with my hands :/

Hello, I've just bought an RB5009 for my homelab to get better at my networking skills. I have started from ground up, so I'm not using the defconf of the MT. Currently I've set-up just a PPPoE client (my modem is in bridge mode) and a NAT rule to get internet access on the router and made some VLAN...

And how about the power consumption of the 5009? Is it a power hungry device even if I use a small set of features?

If you can pickup RB5009 for that price ? Always.

If not, should I fall-back to the AX3?

So should I avoid the RB4011 in any case?

Hello, I hope someone can help me as I'm burning out on this. I would like to to join the MikroTik world's to get better at my networking skills. I'm a pseudo-beginner, I know some basic concepts but I really would like to get hands dirty with something more complex and enhance my home network. The ...