Since 7.10 ipsec IKEv2 with ECDSA certificates are broken. 6.49.7 ECDSA <-> 7.9 ECDSA is worked 6.49.7 ECDSA <-> 7.10 and 7.10.1 ECDSA does not worked - errors "digital signature verification failed" at 7.10 and "authentication failed" at 6.49.2 6.49.7 ECDSA <-> 7.10 and 7.10.1 R...

Action "add to address-list" in firewall rules use a addresses with /32 or /128 masks only. But the IPv6 end user can use any address from the /64 network, so there is not enough memory to use the add-to-address-list operation properly. It seems reasonable to realize the possibility of spe...

Another successful story. Same issue with Mikrotik RB951G-2HnD (v6.49) and IPTV box "Movix Pro Voice ZTE" (AKA "ZXV10 B867RE"). A IPTV box is connected through a wire to ether2 on RB951G-2HnD, the port is not a part of bridge, DHCP server binded to ether2. It didn’t receive IP co...

Lets look at https://wiki.mikrotik.com/wiki/Manual%3APacket_Flow : https://wiki.mikrotik.com/images/thumb/1/17/Routing_Diagram.jpg/450px-Routing_Diagram.jpg https://wiki.mikrotik.com/images/thumb/2/2f/Pfd.png/840px-Pfd.png The path of 'output' packet are: - postrouting \-- src-nat - ipsec encryption...

CCR1016-12G, v6.44.2 (stable), OTG cable and two USB modems connected via USB hub: /system resource usb print value-list device: 1-0 2-0 2-1 2-1.1 2-1.1.1 2-1.4 vendor: Linux 3.3.5 ehci_hcd Linux 3.3.5 ohci_hcd VIA Labs, Inc. HUAWEI Technology HUAWEI Technology name: Tile-Gx EHCI Tile-Gx OHCI USB2.0...

All tests are performed on a clean configuration, i.e.:
- there are no IP address on the bridge and ARP is "enabled";
- bridge setting is default "protocol-mode=rstp". The "stp" and "none" protocol-mode also probed without success.

RB951Ui-2nD, versions 6.42rc56, 6.41.4, 6.40.7, 6.39.2, 6.38.5, winbox to MAC server on ether5. (1) On a clean system (after a full config reset without defaults) do: /ip dhcp-client add disabled=no interface=ether5 Address successfully acquired. (2) After rollback do it with bridge: /interface brid...