The most important settings, next to the correct server address and VPN type, are entering the correct algorithm (you need to check "Advanced settings"). I guess you need to enter at the end of the settings the following: IKEv2 algorithm aes256-sha256 IPsec/ESP algorithm aes256-sha256-sha1

I have exactly the same problem. A connection can be established from the VPN client (Android 13, also Android 14 - IKEv2/IPSec RSA), but nothing can be reached either in the local network or on the Internet. Clients in the network can reach the VPN client. No settings have been changed and no updat...

Hey guys, i have a little problem with my mikrotikrouter and i dont know how to fix it. i have 2 wan ports configured. Currently it depends in a manner of speaking by happenstance with what WAN-ip a client reaches the internet. I want that Clients 1-10 reach the internet via pppoe1 and Clients 11-20...

and do u have a solution?

Do u mean: [admin@MikroTik] /interface print Flags: D - dynamic, X - disabled, R - running, S - slave # NAME TYPE MTU L2MTU MAX-L2MTU 0 R ether1 ether 1500 1598 4074 1 R ether2 ether 1500 1598 4074 2 R ether3 ether 1500 1598 4074 3 ether4 ether 1500 1598 4074 4 ether5 ether 1500 1598 4074 5 R ;;; Le...

i think i'm too silly -.-

i have only on server 192.168.1.2

->
so i have to add



right? But nothing happens

i know i am a pain in the neck, sry

*push* again. There is only a little mistake, but i cant find it

Hmm, i dont know how to do that That is my mangle /ip firewall mangle print Flags: X - disabled, I - invalid, D - dynamic 0 ;;; Client 1 ueber DSL B chain=prerouting action=mark-routing new-routing-mark=dslB passthrough=yes src-address=192.168.1.2-192.168.1.99 in-interface=ether3 so i edited your co...

*push* No one can help?

You think it's a firewall problem?

Could be 9 13 or maybe 2 I am not sure. I'm not that big a firewall guy.

Try disabling the drop rules and retesting. If it works go back through enabling them one at a time.

no success -.-

Sorry -.- Flags: X - disabled, I - invalid, D - dynamic 0 ;;; Bereits vorhandene Verbindungen akzeptieren chain=spi action=accept connection-state=established 1 ;;; Related Verbindugen akzeptieren (z.B. ICMP-Meldungen) chain=spi action=accept connection-state=related 2 ;;; Mikrotik Empfehlung: Paket...

Here is the export: /ip firewall filter add action=accept chain=spi comment=\ "Bereits vorhandene Verbindungen akzeptieren" connection-state=\ established disabled=no add action=accept chain=spi comment=\ "Related Verbindugen akzeptieren (z.B. ICMP-Meldungen)" connection-state=\ ...

Sorry ;) ok /interface print Flags: D - dynamic, X - disabled, R - running, S - slave # NAME TYPE MTU L2MTU MAX-L2MTU 0 R ether1 ether 1500 1598 4074 1 R ether2 ether 1500 1598 4074 2 R ether3 ether 1500 1598 4074 3 ether4 ether 1500 1598 4074 4 ether5 ether 1500 1598 4074 5 R ;;; Leitung 1 pppoe1 p...

What is your /IP Address configuration?

Of my Computer?
192.168.1.101

What is your /IP Interface configuration?

pppoe1, because 192.168.1.100-192.168.1.199 --> pppoe1

What interface is the Server connected to?

Interface pppoe2

Done! But that destroys the policy based routing, because the pppoe1 is set as default, and now the server has the WAN-IP of pppoe1. Or do you know my mistake?

You mean
or what? idk what u mean. sorry

load balance How are your routes setup? /ip route add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=pppoe2 routing-mark=dslB scope=10 target-scope=10 I've only one server (192.168.1.2), the server comes via DSL2 in the Internet (pppoe2). You can reach the server via the WAN-IP of pppoe2, but ...

Hey everybody, i've a problem. How can i reach the server at the same time via dsl line 1 and dsl line 2? This is the export of my firewall: /ip firewall connection tracking set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s tcp-close-wait-timeout=10s tcp-established-timeout=...