which parameters are not holding your configuration changes? What are you trying to do?

I'm surprised that all the forum experts can't answer this question!! It seems pretty basic. I went back and read the page on basic router configuration: http://wiki.mikrotik.com/wiki/How_to_configure_a_home_router#IP_firewall and reviewed the MikroTik Packet Flow Diagram http://wiki.mikrotik.com/wi...

Thanks for the reply. How do I “allow it in input and forward chain?? I thought DST-NAT forwards desired traffic to the TO-ADDRESS and TO-PORT and records an ESTABLISHED connection. The rule in the forward chain (rule 8) allows all ESTABLISHED traffic (I thought). If this is not the case, how do I r...

I am learning RouterOS with the Steve Discher book and tried to setup a simple firewall configuration suggested in that book. Rules 7 thru 10 (below) forward new traffic from the LAN, then accept established and related packets. When I enable rule 10 to block everything else, all traffic from my ser...

Thanks for the suggestion, I upgraded to v6.11 which is the most recent ROS version for the RB 2011. 6.7+ is not available for this model on the MikroTik web site. The Problem persists! I cannot connect remotely! I see GRE and TCP port 1723 connections before the VPN connection fails. But I get erro...

I cannot get a pptp vpn client (laptop) to connect to a RB 2011UAS-2nD running RouterOS v6.0rc14 The pptp server is working and I can connect when any client is on the LAN. I cannot connect to the router from any remote location. I winbox into the router from the WAN and watch the connection start t...

I have the same problem on the same router. I posted my problem on the beginner basics forum, where did you post this??

I'm having trouble connecting with a pptp VPN server!

Just as a trouble shooting step, can you connect without the IPSEC configuration? If you can then you've found which part of the configuration is at fault

I cannot VPN into my RB2011 over the public Internet. I setup a pptp server on my RB2011 and got it to work on my LAN. The client machine shows a p-t-p connection with the proper IP addresses and a ppp0 interface when I issue a ifconfig command and it shows up on the mikrotik router as an active con...

Have you looked at the manual page? is there anything you don't undertand there?

This is the Mikrotik manual info:
http://wiki.mikrotik.com/wiki/Manual:Interface/PPTP

I don't understand why the to-port=22 and the dst-port=24??

I'm a beginner but hairpin nat worksfor me on my RB2011 with an out interface, not a dst-address. I'm sending local traffic (192.168.1.0/24) to the local bridge. 6 ;;; Hairpin NAT chain=srcnat action=masquerade protocol=tcp src-address=192.168.1.0/24 out-interface=bridge-local dst-port=21,22,25,80,1...

I feel lke a jerk! Last night I could not connect,or draw an IP address from the dhcp server I setup on wlan2. The netwok (192.168.2.0) and interface were marked unreahable with a distance of 255 in the webfig. IP Route page (attached). It all looked rhe same this morning. I just tried to connect an...

I made wlan1 the master as shown below [admin@kp-router] /interface wireless> pr Flags: X - disabled, R - running 0 R name="wlan1" mtu=1500 mac-address=D4:CA:6D:7B:BC:5F arp=enabled interface-type=Atheros AR9300 mode=ap-bridge ssid="kp-private" frequency=2412 band=2ghz-b/g/n chan...

I setup a virtual AP but deleted because of problems with a laptop. The Laptop was the problem and when I reconfigured the virtual AP the router is telling me the separate LAN I created for the Virtual AP (wlan2) is unreachable. 1. I created the Virtual AP with a SSID & Open security 2. I gave t...

Did you look at this page from the wiki? I was checking it out because I want to setup a simple queue on my virtual AP subnet

http://wiki.mikrotik.com/wiki/Manual:Qu ... ple_Queues

I have a RB 2011with wireless AP. I configured a second wireless interface (a virtual AP) for public and private network access. I wanted to know if there would be any advantage to putting the two wireless interfaces on separate wireless channels ( i.e: 1 and 5 or 1 and 11). would this reduce possib...

I tried to ues wine a long time ago and it didn't run reliably or well. Maybe I'll try again. I wanted to access the ROS GUI from the Internet but the Webfig won't work because I have dst-natted my web server and all port 80 trffic goes there. I do use ssh and the CLI but like to look at the GUI to ...

Is there or will there be a Linux eqiuivalent of Winbox?
I use Ubuntu 95% of the time.

I'm a real beginner, but one thing I see is that ether1 can't be the DHCP client of the ISP and hold your LAN address (192.168.3.1) at the same time.

It seems that you should put the LAN address on ether2 & bridge 2-10

have heard that VLAN 1 should not be the management nor native VLAN but never saw documentation. And your right Cisco Academy actually instructs this use of VLAN 1 in many exercises

I'll look for information on the proper configuration of VLAN 1
Thanks

I don't know the answer but since no one has responded yet, i'll ruminate on a possible solution. A firewall filter rule might work. here are the ports CDP uses: CDP units use the following ports for TCP/IP communications: 22/TCP: When working with support, may be needed for SSH/console access. 443/...

I couldn't find a good straight forward example of how to do "Router on a stick with a MikroTik and Cisco Switch. This worked for me and I was wondering if anyone had any ideas on how to make it better? I have a MikroTik 751G – Router/Wireless Access Point/5 Port Switch running Router OS 5.2. ...

Yes, You're right. The default configuation has a DROP on the INPUT chain for traffic entering ether1-gateway. I disabled this rule and I can now access the router. Now I have to learn to build firewall filter rules. Thank you /ip firewall filter add action=accept chain=input comment="default c...

LAN routing I have 2 MikroTiks on my LAN to experiment with and test. My RB2011 is my gateway which is configured to accept a dhcp address from my ISP and has 1 LAN attached with the address range of 192.168.1.0/24. this router is configured with 2 static routes: one quad 0 default route to the WAN ...

I posted this response without enough understanding of hairpin NAT.
I removed this response 4/11/2013