Community discussions

MikroTik App

Search found 14 matches

by mcw
Thu Jul 11, 2024 10:22 pm
Forum: General
Topic: output chain: Change source address [SOLVED]
Replies: 2
Views: 2610

Re: output chain: Change source address [SOLVED]

Isn't there a src-address option in the /radius menu?
There is.

Thanks for opening my eyes :lol:
by mcw
Wed Jul 10, 2024 3:16 pm
Forum: General
Topic: output chain: Change source address [SOLVED]
Replies: 2
Views: 2610

output chain: Change source address [SOLVED]

Hello, please consider the following setup: - Router with WAN IP on ether1. - ether2-ether5 are part of bridge "intranet" that has LAN IP 10.2.1.1 (with subnet 10.2.0.0/16). - There exists an IPsec site-to-site VPN between this router and a remote router. The remote router hosts the subnet...
by mcw
Fri Oct 14, 2022 2:09 am
Forum: General
Topic: Load Balancing over 2 VPN Tunnels
Replies: 1
Views: 1408

Load Balancing over 2 VPN Tunnels

Hi, we need a solution for the following setup: A site to site VPN shall be established between headquarter and branch office: A) Headquarter is online via 1 WAN line and uses Palo Alto appliance. Subnet 10.1.0.0/16. B) branch office is online via 2 WAN lines (different providers) using Mikrotik CCR...
by mcw
Thu Jul 28, 2022 8:19 am
Forum: General
Topic: SSTP Site-to-Site VPN
Replies: 1
Views: 822

SSTP Site-to-Site VPN

Hello, current setup is as follows: Site A: LAN subnet 192.168.100.0/24. Provider router with 5 Gigabit bridged Ethernet ports, usable for LAN. Site B: LAN subnet 192.168.200.0/24. Provider router with 5 Gigabit bridged Ethernet ports, usable for LAN. Both sites' routers are not capable of VPN (cons...
by mcw
Thu Jun 23, 2022 6:39 am
Forum: General
Topic: Routing incoming SMTP traffic over VPN to Exchange server in remote subnet
Replies: 6
Views: 1053

Re: Routing incoming SMTP traffic over VPN to Exchange server in remote subnet

sindy, thank you very much for the additional info + clarification you provided.

I will try to implement some changes based on your advice next week.
by mcw
Tue Jun 21, 2022 6:06 am
Forum: General
Topic: Routing incoming SMTP traffic over VPN to Exchange server in remote subnet
Replies: 6
Views: 1053

Re: Routing incoming SMTP traffic over VPN to Exchange server in remote subnet

Thanks for your helpful advice. I managed to get it running using the src-nat rule! Nevertheless I would favour the IPsec policy way, because of - as you wrote - the security related analysis aspect. Unfortunately I did not get this running. Currently the policy setup is as follows: Router A (respon...
by mcw
Sun Jun 19, 2022 2:30 pm
Forum: General
Topic: Routing incoming SMTP traffic over VPN to Exchange server in remote subnet
Replies: 6
Views: 1053

Re: Routing incoming SMTP traffic over VPN to Exchange server in remote subnet

Hello sindy, thanks for your reply. As regards the way of using another policy: At the moment, in router A we have /ip ipsec policy add comment="S2S VPN" dst-address=172.21.79.0/24 peer=peer1 proposal=aes256_sha512_PFS2048 src-address=192.168.100.0/24 tunnel=yes In router B vice versa. Can...
by mcw
Sun Jun 19, 2022 12:07 pm
Forum: General
Topic: Routing incoming SMTP traffic over VPN to Exchange server in remote subnet
Replies: 6
Views: 1053

Routing incoming SMTP traffic over VPN to Exchange server in remote subnet

Hello, the issue is as follows: Two locations, internet access each via a Mikrotik: A) Subnet 192.168.100.0/24 B) Subnet 172.21.79.0/24 Both locations have a functioning IPsec VPN, traffic between the subnets works without problems in both directions. Now an Exchange server is to be put into operati...
by mcw
Sun Apr 23, 2017 11:36 pm
Forum: General
Topic: Balancing over two IPsec tunnels
Replies: 1
Views: 1691

Balancing over two IPsec tunnels

Hello, please consider the following setup: WAN-lines.png I want to connect the subnet of location B to the subnet of location A by using IPsec VPN. As there are no realistic options to get a fast internet connection at location B we have two DSL lines which we like to bundle for use with the VPN. A...
by mcw
Tue Oct 14, 2014 11:36 pm
Forum: General
Topic: IPSec VPN to LANCOM router
Replies: 0
Views: 1130

IPSec VPN to LANCOM router

Hi,

has anybody set up an IPSec VPN to a LANCOM router and if yes, do you have a HowTo or any hints how to get it running?

Thanks!

-mcw
by mcw
Wed May 28, 2014 10:48 pm
Forum: General
Topic: LAN Link Aggregation + Load Balancing
Replies: 5
Views: 18048

Re: LAN Link Aggregation + Load Balancing

If you want one connection to use all the 8 cables at once, use bonding in balance-rr mode (balance per packet). Your aggregated thruput will be 8 x the slowest link minus some %. So using mode balance-rr together with hash policy "layer 3 and 4"? Do both bonding interfaces need to get as...
by mcw
Wed May 28, 2014 10:44 pm
Forum: General
Topic: LAN Link Aggregation + Load Balancing
Replies: 5
Views: 18048

Re: LAN Link Aggregation + Load Balancing

isn't cat 5 suitable for 1Gb/s http://en.wikipedia.org/wiki/Category_5_cable
Currently we get 100 MBit/s, probably because of the wiring. I will check this.

Thanks!
by mcw
Wed May 28, 2014 3:53 am
Forum: General
Topic: LAN Link Aggregation + Load Balancing
Replies: 5
Views: 18048

LAN Link Aggregation + Load Balancing

Hi, we have a server (with a Gigabit nic) located in room #1 and a NAS (with Gigabit nic) located in room #2. Both rooms are connected by eight Cat 5 cables. Maximum throughput over each cable is slightly more than 100 MBit/s. Is it possible to aggregate the eight links to a virtual line with an eff...
by mcw
Wed May 14, 2014 12:39 am
Forum: General
Topic: URL-based filtering instead of port-based filtering
Replies: 7
Views: 13619

URL-based filtering instead of port-based filtering

Hello, consider two servers behind a Mikrotik router: one Microsoft Exchange machine running Outlook WebApp (OWA) and one Terminal Server (RDP), which shall be used as Remote Desktop Gateway. Both servers share the same internet connection (same external IP). External users must have the possibility...