Hello everyone!

Could you explain me what the difference between (for example) /interface pptp-server server default-porfile and /ppp secret profile_name profile values? What is the profile used to establish a connection&

Hi all! I faced with the following issue. For the OpenVPN and SSTP services certificate authentication doesn't work. I specified "verify client certificate" and "verify server certificate" options for the server and the client RouterOS 5.26. But connection is established even if ...

Thank you buddy!!!

What about official documents which describe this feature?

Hi everyone!!! I don't understand a mikrotik's firewall behaviour. I have two rules in the input chain: 1. /ip firewall filter add chain=input protocol=tcp dst-port=8291 action=accept 2. /ip firewall filter add chain=input action=drop There are no any other rules in firewall. My PC gets ip address f...

Hello! The first workaround is to use public DNS servers such as google DNS (8.8.8.8, 8.8.4.4). May be this one is the best variant to You. The second is to use particular script to switch DNS settings. Visit my site http://mikrotik911.com/en where You will find a solution to Your problem. If You ne...

You did all well. But if I am not mistaken the port 1 has no the PoE feature.

Hello! I think vlan's settings cause the problem: [user@MikroTik] > /interface vlan print Flags: X - disabled, R - running, S - slave # NAME MTU ARP VLAN-ID INTERFACE 0 R vlan100 1500 enabled 100 lan_bridge 1 R vlan200 1500 enabled 200 lan_bridge 2 R vlan300 1500 enabled 300 lan_bridge You should ch...

The bandwidth isn't divided into equal parts. You need create PCQ queues for incoming and outgoing traffic. /queue type add name="Download" kind=pcq limit=2M pcq-classifier=dst-address /queue type add name="Upload" kind=pcq limit=400k pcq-classifier=src-address /queue simple set ...

Well, the export file You can see in the menu item Files.

Hello! Try this: /queue simple add name=ISP target-addresses=0.0.0.0/0 /queue simple add name=LAN2 priority=6 target-addresses=192.168.7.0/24 max-limit=2M/400k limit-at=2M/400k parent=ISP /queue simple add name=LAN1 priority=7 target-addresses=192.168.6.0/24 parent=ISP /queue simple add name=LAN3 pr...

Add an ip route rule where src-address is ip you want. Use a special route table for this rule.
Add the route into this table where gateway is specific wan.

Oh, This is a stupid question. Of course, You do have these rules.

I don't understand. You can ping 10.5.0.11?

The only suggestion is that firewall filter rules block port 445. Enable this port on both sites.

Do You have such rules?
Site 1: 0 chain=srcnat action=accept src-address=10.0.0.0/8 dst-address=192.168.88.0/24.
Site 2: 0 chain=srcnat action=accept src-address=192.168.88.0/24 dst-address=10.0.0.0/8.

Well, all settings are correct. PC's are be accessible by IP. How do You try to access shared folders?

Ok. It will be easier if you describe an entire scheme of Your networks on both sites: LAN addresses, IPSec addresses and etc.

Can You show Your filter rules?

Hello! 1. First of all check Your policy settings. It might affects inaccessibility of resources. 2. Do You have any rules in a nat table to access your site? 3. How do You access shared folders? For example, if You are trying to open it through windows networking environment You should create speci...

Hello!
Of course, when you have specified an operator ! in the rule masqurade worked correctly.
But you should declare your WAN interface in this rule as an out-interface.

Thank you!!!

Ohh! I understood. When I uploaded files I used file names without pointing their extensions. That is why router couldn't find these files.

Topic is closed.

Hi all! What src-address do packets generated by router itself have? Illustration Addresses: 1. address=1.1.1.1/24 interface=ether1-gateway 2. address=2.2.2.1/24 interface=ether5-local Route table: 1. Active dst-address=0.0.0.0/0 gateway=1.1.1.254 2. Active dst-address=0.0.0.0/0 gateway=1.1.1.254 ro...

Ok! I found solution to my problem. But the new problem appeared. When I run command /tool fetch address=192.168.0.100 src-path=1 user=user mode=ftp password=pass upload=yes dst-path=1 It works ok. File 1 is transmitted successfully. But in script this instruction isn't executed. File 1 is created o...

Ok. I solved this problem! I changed range of ports for passive mode in firewall nat rule. Excuse me for silly question.

Hi, everyone!!!
Can fetch tool work as ftp client in passive mode?
Thx in advance.