@HeadCraft be more specific, what you described works: [admin@rack1_b3] /interface ipip> /ip ipsec policy print Flags: T - template, X - disabled, D - dynamic, I - invalid, A - active, * - default 0 T * group=default src-address=::/0 dst-address=::/0 protocol=all proposal=default template=yes prior...

As in v6.39.2 still not changing dynamic ipsec src. address in policies and peers, when setting it in ipip tunnel interface in local address setting. And if I delete dynamic entries in ipsec policies or peers, the will not appear anymore until reboot, or set another dst address.

Upgraded to 6.39.2. IPSec tunnel stopped working . I saw that if my clients who have dynamic external ip with IPIP tunnel configured with ipsec passphrase cannot initialize phase1 with send error. It is because of dynamic entry in ipsec policies and peers not changing to new one. As example: after t...

Upgraded from 6.38.5 to 6.39.1 Wireless clients (Honeywell Dolphin 6000) can't connect to wi-fi, while all other devices can (included dolphin 6500, notebooks, smartphones, etc) I have CAPsMAN configured on mikrotik 1100AHx2 and CAP clients on mikrotik hAP ac lite and RB912UAG-2HPnD. Log on CAPsMAN ...

Have anyone faced with bridge flood in wireless and vlan interfaces when traffic have to go to ethernet interface with this 6.38 version?
P.S.: Sorry for wrong topic, noticed to late..

+11010001 for IGMP Snooping. Realy need it! I have a bridge of 4 ethernet ports and 7 vpn tunnels with encryption 256 aes. When you start multicast, the router burns out with a blue flame sending frames in each other port. I even would be glad if this functionality will be realized, but hard to get ...

I have an RB2011 running capsman and a cap.

I use local forwarding onto my bridge for that traffic.

Nick.

Yes, I know this is working. But my setup needs forwarding on capsman with broadcast mac address mask for all caps to provision. So I want to know is it real or it can't be done like I want

I have the following configuration: Router1: CAPsMAN + CAP, NO local forwarding, create dynamic enabled Router2: CAP Router3: CAP Router2 and Router3 works perfect. Clients on Router1, which holds manager and CAP have no internet. They recieve IP, appear in registration table, but can't ping anythin...

Issue: Wrong behaivor of SNMP TRAP generator Description: In SNMP configuration options there is parameter which means " List of interfaces that traps are going to be sent out " /snmp set trap-interfaces=ether1 But it does no effect when sending trap to a subnet, that belongs to another i...

Hi! I have updated my mikrotik RB450 to firmware version 6.5 from 6.2. Removed default config to start from clear. I need OVPN Client, so I took my certificate, key and CA to import. Nothing happened when I pressed the "import" button! Neither from winbox, nor from terminal. And CPU gets 1...

We assume that there is one main router with IPsec configured with a lot of another routers. Private key is generated localy. If it will die and we buy another, how to restore this generated private key, so our tunnels continue to work with new device, and so not to rebuild configuration on all othe...

Hi! A have RB951G-2HnD. It was running on RouterOS 6.0 from the date of release with no changes in configuration and all was fine, until I added some new filters in firewall that block ddos. Just three. And my mikrotik went broken! Firewall started to show huge statistical numbers and all 56 policie...

Is there some device with throughput over 35 Mbit with chipher and MIMO 1x1?
35/35 Mbit is a limit of tkip as I understood, not wpa2 aes? My collegue tested RB951-2hND with aes, he gets ~65mbit/s

That's good. But what is the real throughput with WPA TKIP/WPA2 AES chipher on?

Hi I have to decide, what hardware to buy for the project of covering large area with wifi signal using mesh technology. The speed of link must be as high as possible with WPA/WPA2 AES 'on'. I'm interested in model RouterBOARD Metal-2SHPn. Specification says it supports MSC7 but no info about does i...

I have mikrotik RB2011UAS-RM rack mount router wich supplies with DC power adapter NLB100120W1U . This adapter is not unpluggable from the router and in truth, is rather pathetic for use in rack. http://s17.postimage.org/vivo9tbnf/05032013127.jpg http://s21.postimage.org/59g907cqr/05032013130.jpg Is...