Did you solve this?

@hq83 - Which router do you have? Just wondering if your router supports the rules.

I'm trying to understand what you want. You said this: Port 1 : Internet WAN Port 2: IPTV Wan Port 3: IPTV STB Port 4: IPTV STB Port 5: LAN But then you say this: traffic from port 5 goes to port 2 My understanding is that traffic from port 5 should go out on port 1 and traffic on port 3 and 4 shoul...

Did you try the config line I provided? There might be two other lines you need to add, will take a look when I open my computer, I don't have it in my head.

You can limit it even more by only open up this port from your office subnet.
chain=input action=accept protocol=tcp src-address=xx.xx.xx.xx/24 dst-port=8291
That's what I do. I close everything and then open just the ports I need from the source I need.

Hello. I've had similiar with my setup as you can see here:
http://forum.mikrotik.com/viewtopic.php?f=2&t=64908
I have not yet solved that. A workaround that seems to work for me is to let the router restart each morning. I just made a script that does that.

You need to set the state of the port to secure and add-if-missing in vlan-header.
So if it's port 4 then this should probably be the setup:
/interface ethernet switch port
set 3 vlan-header=add-if-missing vlan-mode=secure

This is taken from RB750G, I guess it's similar in your case.

I don't think you can do this without using VLAN. You could set the DHCP to give your pc a static IP and in the firewall only allow your IP to connect to the management part of your router.

I locked myself out of MikroTik router because of a firewall rule. What I managed to do was to connect to the router by it's MAC address, not IP address, using WinBox. It's worth the try for you. You might have to connect to the outer interface, i.e. ISP interface.

Hi. This should not be hard to do. How do you get the IP from the modem or your ISP? PPPoE? Anyways, you have to separate the interfaces. I don't know the router you are using but I guess it's similar to RB750G and I know them. :) Setting up PPPoE client (or whatever you are using) for WAN1 and conn...

I've got several RB750G and I'm happy with my purchase. I've had some problems with IPsec tunnel to Cisco when connected straight to ethernet on WAN port, see here:http://forum.mikrotik.com/viewtopic.php?f=2&t=64908 But I've had help on the forum so that's great. I'm still working on this proble...

Why the two ADSL's? Load balancing?

It is possible if you use VLAN's on the external interface but they'd need to be tagged. Can't see another way but I might be wrong.

I haven't tried it but I would think it should be possible, just set ether1 as master for all ports? Worth trying. I think I will try it on Monday, I have a couple of RB750G I can play with. This is an interesting approach. :) Just make sure you take a backup of your config (if you need) before maki...

Did you get this to work?

Do you want to just forward the IPTV vlan to port 5? Not route it or anything, just forward/bridge it? The other vlan, do you want to terminate that on the RB and have it as the external IP of your router? To clarify let's say you have vlan 2010 and on that vlan you have IP 1.1.1.1. Then you have yo...

Not sure it answers you... about ClearOS, shouldn't you be able to add your networks in the proxy? Here's one asking the same thing on the ClearOS forum:
http://www.clearfoundation.com/componen ... 340/#45342

OK. According to this, rules are not supported on RB750 but it is on RB750G:
http://wiki.mikrotik.com/wiki/Switch_Chip_Features

This one had similar problem:
http://forum.mikrotik.com/viewtopic.php?f=9&t=36841

Get RB750G.

This worked on my RB750G, maybe RB750 is different, I wouldn't think so though. The names I use, ether1 and so on, are the names on the interfaces, it might be different in your case. Check the names or change them to match this. That's my best bet. You might be able to update the firmware/OS? Hope ...

One question, are you just forwarding the traffic on these vlans through the interfaces or do you need to route from ether1/ether2 to ether3? If I understand you right you're just forwarding the traffic? If that is the case then this scenario should work for you: /interface ethernet switch port set ...

Do you want vlan1 and vlan2 to be tagged on ether3? That's I think the only way it's actually seperated. You can easily set up your ports so vlan1 is untagged on ether1, vlan2 is untagged on ether2 and vlan1 and vlan2 are both tagged on ether 3. Can't find it now but I did it on RB750G and I found s...

Hello. If this is a new setup I think I'd use RB750G on both ends. If you already have something at your main office then see if you can use that and connect RB to it from the other end. I have Cisco 5510 at our main office and I connect 3 remote offices to with RB750G. I use IPsec tunnel to achieve...

At the moment I'm just monitoring it with ping. I ping the external interface and the internal also but that of course only shows response when the tunnel is up. It's an IPsec tunnel, 3des sha1. It's the same setup I'm using on the other sites but they are behind ADSL modem (router bridged as a mode...

I'm not sure if you have the same scenario as I do but let's try. I assume you have private subnets on both ends? Let's say Cisco site has 192.168.10.0/24 and MikroTik site has 192.168.20.0/24. Then you need to exempt your subnets from NAT so it goes through. It was something I had to add to the Mik...

@gsloop - There's no packet loss to the external IP from my site, at least I don't see any problem in Nagios. But I get a drop in the tunnel for this time I mentioned. I shall try to pinging continuously the external port for some time and see if that shows anything. @jerryroy1 - There are fewer por...

I can ping the public IP of both the MT router (from Cisco side) and the Cisco box (from MT side). With tunnel up I can ping internal IP of the MT from the Cisco site. Everything works apart from I can't connect with WinBox and Nagios can't pull informations from SNMP. On the other places, the ADSL ...

If your IP is 20.1.1.1/32 then the other end should be 20.1.1.2/32 so that should be your GW or next hop don't you think? That's how it's setup at my connection, the other side of the 2 IP subnet is the GW.

Hello. I'm no expert in this and I'm not using 1100 but RB750G so maybe it's not similar but here's how I did it. In WinBox I click on Interfaces and add new PPPoE client interface. Name of the interface doesn't really matter, mine came up with pppoe-out1 and I left it at that. On the first tab I on...

Hello all. I've managed to set up VPN tunnel between MikroTik RB750G and Cisco ASA 5510. Actually I've set up tunnels to 3 locations. 2 of them are behind an ADSL router which is setup as a modem, i.e. I bridge the ADSL router and use it as a modem. So the MikroTik is set up with a PPPoE connection ...