MikroTik

Rockyboa

Would like to see something like hap ax2, but wifi 7 and with USB port.

Yes, I would also like an SFP+ cage for my PON ONT, 2.5G Ethernet interfaces and get this Homeplug AV2 1300 standard back for CPL meshing over powerline option in a USB-C power supply option!

Rock.

Rockyboa

Runing latest RouterOS 7.15.2 on two mantboxax, I wish to make a bridge between those two. On is configure as a AP, the other one as a bridge-station on the 5GHz wifi interfwace. I need the 2.4Ghz for cameras located close to the antenna and bot Mant 2.4GHz antenna are set to AP To my suprise the al...

Rockyboa

Hi, first I want to thank all of you. I finally solved my issue. I reset my CRS328 to default and magically started to work the way I wanted. 1) after reset I quickset to router and set sfp1 as the WAN interface temporarely and 2) /interface vlan add interface=bridge name=bridge-vlan35 vlan-id=35 3)...

Rockyboa

RhoAius, You actually provide me a missing piece, the addition of the VLAN inside on the same bridge with VLAN id =35 allows me to ping interface ether1 on vlan35 on CRS125 from ether1 on vlan25 on CRS328. Strangely the on the bridge VLAN 35 is mandantory CRS328 to add my brigde in untagged. But rem...

Rockyboa

Thank you very much for your reply. My goal is to have a dual PPPoE connection from one device (CRS125) and a second one from my second router (CRS328) to make some tests / home lab whitout playing with my environment. They both use same PPPoE credential but will end up with two public IP thus ahavi...

Rockyboa

Hi, I have a question concerning PPPoE over VLAN, I'm hoping someone could help. Running a CRS125-24G and a CRS328-24P-2S+ connected via both ether1 interface. Since my ISP allows me to have two public adresses I'm trying to get two PPPoE interface over tagged vlan 35 from the same GPON ONU in my CR...

Rockyboa

Hi, Thank for taking time to reply to my question. It is actually the case and when using a Linux machine running dnsmasq with this configuration line dhcp-host=00:e0:66:59:88:8b,client1,192.168.78.51,set:diskless it does assign the client1 to my device. So trying to achieve similar behavior with th...

Rockyboa

Hi, looking at the different way to change all the hostname of my servers that are booting using PXE, I'm trying to leverage the isc- dhclient https://kb.isc.org/docs/isc-dhcp-44-manual-pages-dhcp-options that handle host-name. I build a script that use host to do reverse DNS, but I have some issue ...

Rockyboa

Anav,

Thank you, when I look at the gain (6 on 2.4GHz and 5.5 on 5GHz) it makes me believe that the shape is not so spherical anymorem, but I'm no wifi expert.

Obviously, I want to manage them using CAPsMAN, I'll look at your suggestion though if a manage solution exist.

Martin

Rockyboa

Hello, I'm interested in getting some cAP XL ac. My concerns are related to the wall mounting and reflectors on the antenna. I would supposed this unit is design optimally to be mounted on ceiling. In my case it would be preferable to mount them on wall. Looking at the doc it seams to be an option, ...

Rockyboa

Hi Mikrotik Forum. I order a couple of Audience to understand meshing technology by studying the default configuration of Audience and learning WDS / Mesh from this experience (more on that later). As usual, I first updated my firmware on all my 3 units to the latest stable 6.49. I then proceed to a...

Rockyboa

I ordered more CPL devices, I like them very much.

Even though the PWR-LINE AP and PWR-LINE US use the same QCA6410, I have different version of the firmware

Again trying to update those to latest.

Here
PR-LINE AP PL6411
1.2.0(3008-20171215-CS)

PWR-LINE US
1.1.2(1611-20150928-CS)

Martin

Rockyboa

Hi,

I can connect both unit via CPLwihtout issue, I'm just wondering how is newer PLC firmware are provided.

Are they provided through the normal process via routerOS upgrade.

I noticed a /interface pwr-line upgrade-firmware command. wondering where can I get newer firmware

Rock

Rockyboa

Hi, I'm a big fan of data over power lines. I'm using PWRLine-US in combo with TP-LINK AV500. I noticed today that my speed from two AV500 was noticeable better than between my hAP mini+Powerline and an AV500. Notice also that my firmware insode my AV500 was 1.3 and the one inside Mikrotik unit was ...

Rockyboa

Hi, I was up for a bit of reading and learn some new wireless tutorial. I have been experimenting a lot with capmans lately and now, wish to learn more about WDS and mesh. Reading different wiki, Here are some conclusion I came to and would like you to comment. - When no ethernet cables are availabl...

Rockyboa

Hi,

I would I verify the presence of an interface in an list using a script?

Thank you

Rock

Rockyboa

Hi, I was trying to find why I had poor performance over my VPN provider until I found that Fasttrack was causing the issue. I then implemented this solution https://blog.johannfenech.com/mikrotik-fasttrack-configuration-with-l2tp-ipsec-vpn/ which solved my issue. My question is more about the two o...

Rockyboa

Hi, Using the Quick Set I configure a PL6411-2nD into PTP CPE CPE. As I understand it this configure the device into bridge-mode, which is what I wanted, i then setup a VPN with my provider and I do see the tunnel attributing an IP to my bridge. I also remove the ether1 interface from the bridge Wha...

Rockyboa

Should we specify the Antenna gain in the wlan interface config. The parameter is no longer there in winbox for my RB951G-2HnD v6.47.4 device.

Also for a specification of the antenna gain, we can read 2.5. I don't think we can put set a decimal parameter from the cli, shjould I go to 3 or 2?

R.

Rockyboa

Sindy, thanks for trying to help me. I would start by saying that my hAP ac³ was swapped with the 951G, so there is no other other equipment between the CPE and the router in both scenario. I'm putting back my default computer interface to MTU 1500 and try to see if that would work. Here is my NordV...

Rockyboa

I recently updated my home router RB951G-2HnD to a hAP AC³ LTE Router. I purchased the unit one day before the announcement of the none LTE version, which I would not use. But I would expect the same issue with it. I have copied all my config from exporting the appropriate section to my new rtouter....

Rockyboa

I'm wondering if anyone, except me, is wondering or using if a PWR-Line AP PL6411-2nD is a viable option for an home AP router using the eth interface to connect my CPE. I bought one last week and configuring it as a nat / router. I personally like the small form factor and the possibility to extend...

Rockyboa

Hi made those rule to get a good iptv service and to have fair amount of bandwith to all remaining connection. I have a 15M/1M link /queue type add kind=pfifo name=TVqueue pfifo-limit=2000 /queue simple add burst-time=5s/5s max-limit=1M/8M name=TVqueue1 priority=6/6 queue=TVqueue/TVqueue target=\ 19...

Rockyboa

Thank you both for taking the time to explain. After looking at different vendor, I understand I do they achieve to configure more than one sector antenna on the same mast. obviously they synchronised the radio and make sure they listen and talk together on the same channel. Since I have been using ...

Rockyboa

Hi,

I always wonder if two back to back radios such as the mAntbos24 on the same pole, should share the same channel or use different one

Martin

Rockyboa

oh... yes!

We have been waiting to much for such feature. LAG across more than one switch is the feature I need the most to migrate to Mikrotik switch product.

Rock

Rockyboa

Anybody tested any of those SFP modem in north america?

Rock

Rockyboa

Thank you both, so I would guess that marking the connection based on the source adress list of the devices I want to be behing this VPN is my best bet. I guess a could be even more granular by actually connection marking protocol and ports! MSS. If the IP header (20 bytes) and ICMP (8Bytes) making ...

Rockyboa

Zacharias, thank you for this super fast reply. I'm using IPSec mode config with a source address list, thus not having an interface. This is where I get stuck. Should I mangle against the same source address-list? There is also a parameter to set a connection mark in this mode config dialog box, mi...

Rockyboa

I have setup NordVPN accordingly to this guide https://support.nordvpn.com/Connectivity/Router/1360295132/Mikrotik-IKEv2-setup-with-NordVPN.htm Works great. But have an issue with multiple links.. I lowered the MTU on my windows10 to 1438 and since then I have no issues. I would like to use a mangle...

Rockyboa

Sindy, thank you for the detail information. Running through you explanation I think I do understand most of it, and indeed, if I disabled vlan filtering on the single brigde setup but leave the virtual wifi interface to tag on VLAN ID 2, it works as expected. So this single bridge configuration on ...

Rockyboa

I think it will help if I post my cAP ac configureation /interface wireless set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \ country=canada disabled=no distance=indoors frequency=auto mode=ap-bridge \ name=wlan-2GHz ssid=AEPONYX-2GHz wireless-protocol=802.11 set [ find def...

Rockyboa

At the other end of this trunk port (now with an interface VLAN and DHCP serving some IPs to my new guest VLAN), I have a hAP ac. After struggling with the first implementation of this wiki ( https://wiki.mikrotik.com/wiki/Manual:VLANs_on_Wireless I'm still unable to get this bridge vlan working cor...

Rockyboa

CZFan,

Thank you for this reply. So then, it will no be possible to run a dhcp server from a switch vlan nor a bridge vlan?

Rock.

Rockyboa

I'm trying to configure a simple setup using the hardware offloading feature of VLAN table inside the Atheros 8327 switch chip. First question: I have a RB1100AH router where a configure the ether5 in trunk port with untagged traffic on VLAN ID 1 and Tagged traffic on VLAN ID 2. Can I add an IP addr...

Rockyboa

Hi, recently playing with simple queues and reading / listening on different turorial I see that when a parent simple queue is added to another queue if get indent below. This is not my case and was wondering if this is a change that was made recently in winbox. Mine are shown without this indentati...

Rockyboa

Strange but would like to know if someone came across such situation After setting up PPP VPN with my internal AD using IAS service, some user were able to log some were not. After investigating a bit we believe that password containing the $ character were not able to sign in. Are they any other sp...

Rockyboa

+1 On MC-LAG feature!

Rockyboa

I'm trying to achieve the same. Starting from a defualt congif on hAP ac lite Add an ip address 192.168.89.4 to my ether4 port I have set my bridge port ether4 to pvid 10 Added the brige as a tag port on this Bridge VLAN I plug my pc into ether4 as soon as I turn on the VLAN filtering, I can no long...

Rockyboa

Thank you omega for helping out. I might not be clear but I'm located on the main office router with a single WAN but with two public IP assigned to it. I'm not tying to mangle on two interfaces but trying to build a rule that will make sure that my traffic coming in my router (and ending there sinc...

Rockyboa

I have two public IP on my WAN interface. I'm trying to build two tunnels to this interface originating from the same remote router. I think I have good chances to make this work but there is a little captcha I need to solve. on the main office WAN interface when I disable one of the IP thus changin...

Rockyboa

Same issue here, even building a route for the remote IP doesn't solve, tunnel will always instantiate from the default route. Whatever routing mark is goes over the WAN with the lowest metric and no mark

Rockyboa

I think I should clarify that I run multiple vlan, thus multiple PPPoE, maximum connections globally I wish to limit and wish not to manage them per running instance in each VLAN.

Rockyboa

I tought about it last night,

It would be a nice feature to add if it doesn't exist, a max-connection limit. Where can we propose such a thing as a feature request.

Martin

Rockyboa

We have trouble scaling up our PPPoE service. We have setup some dedicated PPPoE Mikrotik to serve our PPPoE requests, we have disabled everything else on those RB1100AH. After 800 or so we see some connection being dropped. We have put together more than one box but we usually sees on one RB1100 ge...

Rockyboa

I would like to configure a simple network for VoIP using EoIP tunnels. Since my primary office will bridge all connection from remote office reading in the wiki http://wiki.mikrotik.com/wiki/Manual:Interface/EoIP we can read: When bridging EoIP tunnels, it is highly recommended to set unique MAC ad...

Rockyboa

+1 for better IPSec support.

Would like to get mode-config push pull for road warrior

http://forum.mikrotik.com/viewtopic.php?f=2&t=45516

Rockyboa

This is an interresting topc on Natting. I'm trying to achieve basiacally the same and just to make sure I understand clearly here is what I understand on this subject; masquerade, is a src-nat rule that will automatically use the assigned destination IP of the outgoing interface src-nat: 1:1 Nat fr...

Rockyboa

Very simple setup for my configuration of 2 WAN. What I'm trying to do is par of one of my LAN vlan (vlan5-dmz LAN01) I wish to send an address list (iDigit Private Subnet) to WAN02 iDigit. When I activate the following mangle rule, tracert to external IP from iDigit Private Subnet still goes throug...

Rockyboa

I understyand that the RB1100 has one physiccal port witch is serial0, but is it possible to use serial1? Is there a pin out on the board to add an extra DB9?

Rockyboa

Looking at the example in the HTP wiki http://wiki.mikrotik.com/index.php?title=Manual:HTB&printable=yes . The refer to figure 8.6, which suppose to include a network diagram. I would like to know what they refer has the outgoing interface for upload and download lets take the same example would...

Rockyboa

Anyone running RouterOS v5 on XenServer? hvm? I know that RouterOS 5 is no longer having a Xen aware kernel but would like some feedback about performance even though this PV support has been removed.

Rockyboa

Same issue here, so if an account is not recognized in the on-site radius, our central radius is also getting this request, even if we set-ip up has an accouning backup. We are getting thousand of request from all of our sites into our central radius. Is this normal behaviour or should I filled a bu...

Rockyboa

Good point, how could I contact DNS without first establishing the PPPoE connection. I guess the best I could do is still use VRRP in a n+1 fashion and distributing manually those subnet across many RB1100 for example 2x /24 subnet per router and havin a hot standby in case of a unit break down. Wou...

Rockyboa

For load balancing I tought about using DNS round-robin and for redundancy VRRP (sorry.) The ISP just wish to get a gross figure of how many RB1100 or RB1200 (since just dicovered that RB1100 is eol and can't wait till RB1000AHx2 You are right about the broacast domain, but can the PPPoE server many...

Rockyboa

Question from a customer running a small ISP of 5000 users. Is the RB1100 will handle PPPoE services correctly for this number of user, if not can someone tell me best practice or average we are looking at? Also can we use a combination of RB1100 for clustering the PPPoE server in a way that we have...

Rockyboa

Thank you very much for your valuable opinion fewi. I will then use a private subnet for my DMZ and make use of the IP firewall rules has I always did and avoid going into bridging. I would be nice from you if you can answer my remaining question about bridge interface (even though I wont use it) wi...

Rockyboa

I an attempt to save some ressources on my router, we decided to look at using, for our DMZ, a bridge. So instead of using a private subnet and do some connection tracking and natting, we bridge our WAN01 interface with our DMZ interface, we use the default name bridge1. I would like to know first, ...

Rockyboa

I hate to reopened such old thread, but I'm also still wainting for this USB cable pass-through cable. I haven't found a MFM indoor chasis that will let us use USB. I tought that this square hole would eventually get a USB external connector, did someone found a decent way to hook up USB devices usi...

Rockyboa

I don't have a Mikrotik equipped with a radio card handy and I had this request today. Will it be possible from an AP to create 3 Wireless network in three diferent VLAN using three SSID.

Thank You

Rockyboa

I just passed my MTCNA and during the training we saw how to use statefull packet inspection in the firewall to only filter new connection to unload the filter. I do understand the benefit of doing so, but my question is, can a hacker spoof the state of a packet to make the router believe it is an e...

Rockyboa

I have a setup where I use NAT with masquerade that redirect different Public IP to my internal Private IP. Working fine but when a trace route from a internal server, they all go out using the same Public IP (the first IP that was assign to my WAN interface). Is there a way to control this outgoing...

Rockyboa

Hum, just updated my new RB493G to 5.2, type /system reset-configuration and a strange thing happend. All my interfaces were rename starting at eher10 to ether18.

Do I have to rename them manually or this is normal behaviour?

Martin

Rockyboa

I would lika also to confirm that Nokia CS-18 is working.

There is no mention on the wiki about this 3G key, it has been working for 24 hours without issue...

Martin

Rockyboa

We tend to use Tunnel for most of our external traffic. But we have to leave a RDP server dst-nat for some users.

We can see a lot of retries of people that fails the RDP autherntication. Is there a simple way to block those new connections after 5 retries for a day using a filter rule?

Martin

Rockyboa

Can someone, that use openVPN, on a windows or linux client,tell me if I really need to recompile the openVPN software --auth-user-pass. If someone has recompile 2.1.3 or 2.1.4 (if it works with openVPN in the routerOS 5.0rc10) for windows and would like to send it to me, I would really appreciate. ...

Rockyboa

Fewi,

Yes, that will be great if Mikrotik eng., could at least give more info on what would be accelerated using this hardware.

MB

Rockyboa

I always wonder whcih part of the RouterOS uses Hardware Acceleration. I'm pretty sure IPSec does but Profile Encryption also does? What about /interface ovpn-server server?

Thank you

MB

Rockyboa

Hi all, This is my first try at openVPN, many places stop allowing PPtP and wish to try ovpn. I would like to use a routed setup and Win32 clients. After struggling with this stuff all afternoon, I get some connection reset on my client. My question is, do we still need to create an authfile? If yes...

Rockyboa

This is more a general vendor question than related to SwOS but think it would be great to ask this community for some input. I'm struggling to fing a good vendor switch solution that will offer a nice lineup of product but more competitive than Cisco such as Mikrotik does with their router. I need ...

Rockyboa

Fewi,

But when I use a PPP-Profile associated to this L2TP with default-encryption set to yes, I guess it is encryted and somewhat secure? Would that default-encryption setting benefits from the hardware assisted chip in the RB1000?

Martin

Rockyboa

Thanks guys,

I don't have a lot of rule so I think I will strart with simple queues. I guess when they grow in numbers, then, I will rethink all of this but for now I wont use more than 8 to 10 rules for now.

Rockyboa

Fewi, should he also take care of traffic in the forward chain? I use to mark this chain the same way as the input chain to make sure dst-nat is also working. I also saw you in another similar topic using the prerouting chain to mark the traffic, in this case no need to mark the forward chain since ...

Rockyboa

Ok I'm convinced, I need to setup queues for better traffic management. I read a lot of post and wiki and certainly would like to keep it up to a fairly simple environment. I tought using priorization without queues at first but, I do understand that this is relatively not efficient. So I would like...

Rockyboa

As I understand RB1100 does not have the RB1000 capability of hardware accelerated IPSec cryp/decrype engine.

IS this dedicated hardware only use in IPsec or L2TP would also benefits from that?

Rockyboa

I knew you would send me to that DFD! :) I manage to get all my subnet talking between them! Your help is very appreciated. I even created a rule that work for relaying my email by marking the route from any LAN with dstport 25 and unchecking passthrough. Two last questions: 1) When using !local in ...

Rockyboa

Chupaka,

Will try this after operation hour. My IPSec tunnels are also no longer working. Are Mangle rules have priority over firewall rules?

Rockyboa

People, I have been trying to make the PCC Wiki working in my setup. It does work but break my PPTP VPN. My VPN is using a subnet range that is not in the same LAN subnet, since I have few LAN addresses available. Since I never was able to make the appropriate route to make the PPTP subnet work with...

Rockyboa

Fewi, I have been wondering why would you mark connection in the prerouting chain instead of input and forward. I understand that you save mangle rules by doing so, but if you follow the PCC wiki, they mark input chain only. If you do dst-nat without adding any other rules than the one in this wiki,...

Rockyboa

Trying to figure out why as soon as I activate my rule #8 both LAN100 and Bridge110 don't see each other anymore. This is taken directly from the PCC example. 0 ;;; from Telus mark conn_telus chain=input action=mark-connection new-connection-mark=telus_conn passthrough=yes in-interface=Telus 1 ;;; f...

Rockyboa

Humm, I don't see any mangle in this NAT rule. I disabled PCC alltogether just want to make thing simple to start. So I'm trying to resend all traffic from a NAT rule (like yours) to the WAN link that has a higher distance to the same interface. Using the same NAT rule on the WAN with the lower dist...

Rockyboa

Hi all, I read the following wiki http://wiki.mikrotik.com/wiki/Manual:PCC but since implementation I'm unable to dst-nat some service inside my Local subnet such as: chain=dstnat action=dst-nat to-addresses=192.168.0.50 to-ports=80 protocol=tcp in-interface=WAN2 dst-port=80 Should it still work aft...

Rockyboa

We currently have RB1000 and wish to leverage the IPSec offload processor. Since we have particular need we would like to use EoIP as our VPN tunnel architechture. So we started thinking about building a EoIP tunnel and use IPSec in transport mode over this tunnel. Problem is that remote sites are m...

Rockyboa

So no more MTU problems?! This is huge

And in terms of ressources used, is one more demanding than the other?

Martin

Rockyboa

HI all, Since I'm pretty new to Mikrotik I would like to know the difference between EoIP and IPIP tunnel and in which situation examples should I use one or the other . I read the Wiki and here are some differences I figured out. IPIP: - Layer 3 routed type traffic - Inter operability with other ve...

Rockyboa

Sob,

I got the desired result with your mangle rule. Thank you very much for all your help.

Martin

Rockyboa

I'm trying real hard to create a rule in the remote site in the output chain that every request to UDP 67 going to 192.168.110.0/24 to be catch and forward to my IpSec tunnel instead on public interface. If any NAT expert can help me. I have almost a solution. On my main router I can see the followi...

Rockyboa

Sob, Very interresting. IPSec always worked but I use as as the sa-src on my Remote Site 0.0.0.0. Would you think I should script something to push the address for the sa-src? Some other weirdo: On my IpSec main site a total of three policies are generated dynamically. I was expecting only one. Also...

Rockyboa

Sob, Thank you for not letting me down, I really appreciate your help. Yes I forgot the giaddr which is 192.168.181.1 (remote router). Since I put created an new environment with 2x RB750, I creted the DHCP server on the test-main 192.168.110.1 router. That is why I was expecting some DHCP-server lo...

Rockyboa

No traffic increase on my IPSec policies statistic.

But even a Ping does not increase the counters, is this normal?

Martin

Rockyboa

I just tried with two RB750G I had. Updated both to v4.6 like my production environment. on the remote site, I can see in dhcp-debug: dhcp-relay-181 sendind discover with id 2443951115 to 192.168.110.1 hops = 1 secs = 7424 flags = broadcast ciaddr = 0.0.0.0 chaddr = 00:26:9E:CA:D6:CE Msg-Type = disc...

Rockyboa

Humm, maybe I need to add something in my main site RB1000.. do I if I use my Windows Clustered DHCP? On my remote site I do ping my Windows DHCP over my IPSec Tunnel, but still unable to received lease. And yes I use IPSec in tunnel mode. I did provide on my RB450G a relay local address. (192.168.1...

Rockyboa

I build an IPSec tunnel between two Mikrotik Router. I'm running a DHCP server behing my main site and would like to hand out addresses from a single point (since I have clustered DHCP server on my main site). Should DHCP relay work over a IPSec tunnel, because it doesn't.

Thanks

Martin

Rockyboa

Ok great. Would modify both of my wan interface to the max !frag packets. Leaving my PPPoE interface to 1492. And both MRU / MTU. So I should not need to modify some MSS?

Will try this and get back.

TY again.

Martin

Rockyboa

TY for this fast reply,

On the PPPoE side do I modify both the PPPoE client value and WAN value. Also should I lowered the MRU to the same value of the MTU? I guess to find the optimal value, to find the biggest not frag packet using the ping -l size -f?

Again thank you

Martin

Rockyboa

I have a similar problem. on two sites. using a IpSEC VPN connection. One DSL PPoE and one Broadband connection. 1) On the site using PPoE, should I change the MTU to 1492 on the WAN and PPoE interface or just the PPoE? 2) As soon as I lower one site the packets get framented to a least value when I...

Rockyboa

Argh... I tought I will get away using this little dns server, it would have been fine if it was going to round robin my clustered storage for my virtual host. I guess I would need to install two dns server just to accomodate my virtual hosts, yikes! I would have preffer my two RB1000. Mikrotik plea...

Rockyboa

Thank for this quick reply, Yes thats what I did, in terms of adding static host record RR: Round Robin. So each time I interrogate the host name I would like to get the first IP, next time I would like to get the next IP, etc... What would be the use of setting three IP for the same host name if I ...

Rockyboa

Hi,

We use the DNS in the Mikrotik and we are building a clustered SAN. We need to RR a host so we had 3 time the host record with the three different IPs in the static entry. MT doesnt seem to RR the host. Is there a way to do it?

Martin

Rockyboa

David,

no, what I meant was an IPSec tunel from a dynamic, not reserved IP site to a fixed IP. But strangely I would also need to do multiple tunnel scenario, but can you just prioritized the routing table using metrics?

Sabrina

Rockyboa

Hi all, Since I have finally established dynamic IPSec tunnel between two Mikrotik, I would like to know if anyone had any success doing dynamic IPSec tunnel with other vendor. We are in the process of replacing a lot of RV042 but would like to do so without replacing them all at once. Also bigger c...

Rockyboa

Solved it, my mistake, peer needs to be 0.0.0.0/0 not 0.0.0.0/32 to all accept connections. Hope this will help others.

But still need explanation why it creates 3 dynamic policies (noticed that 2 are identical - src: remote ste dst: primary site)

Sabrina

Rockyboa

ahrg, usually I'm pretty good without needing to ask spoon feeding me the procedure. But again I'll need help and hopefully this will be helpfull for some other people. I deleted the policy on the remote site and check the generate policy, that works, but strangely it created not one, nor two but th...

Rockyboa

IPSec is working fine, but unable to make it work with dynamic IP at remote site. Remote Site: /ip ipsec export /ip ipsec proposal set default auth-algorithms=sha1 disabled=no enc-algorithms=3des lifetime=30m \ name=default pfs-group=modp1024 /ip ipsec peer add address=69.x.x.122/32:500 auth-method=...

Rockyboa

Hi, I netinstall routeros-mipsbe-4.0beta4.npk on my RB450 and noticed that I had a NTP client but no NTP server, I configured the client using the RM but their was more info and options available, like active server, next update time, etc... I tought it was related the the newer version 4. I decided...

Rockyboa

Those are very good info and pointers I will try as soon as my vacation are over. Again, can someone with good knowledge in tunnelling technology using Mikrotik router would be able to give me a very easy to understand pros and cons of each of them, like I said we plan to use a pure Mikrotik solutio...

Rockyboa

Thanks for the reply. Will experiment with pptp, but some says it is less secure than Ipsec, would I achieve higher perfomrance using pptp on my RB1000? But like I said would like prefer using IPSec hardware offloading feature of the RB1000. So is dynamic IP supported at the remote location, using R...

Rockyboa

Hi, We just bought some Mikrotik hardware and I just read that the RB1000 is having IPSec tunnel dedicated hardware, thats pretty cool and would really benefit from that. I would like to know which tunnel are supported by this feature, is PPTP, OVPN, L2TP and IPsec use the offloading engine? Also, w...

Search found 108 matches