Hi All, With the great support of anav and the finishing touch of mkx I finally managed to reach my goal, a normal working network AND one guest port with no access to the rest of the LAN. Seems I rather underestimated all possibilities of this router. Without your help I would not only still have a...

I found the reason why I dindnt have internet: /ip dhcp-server network add address=192.168.11.0/24 comment=GuestDMZ_Network dns-server=192.168.11.1 Changed to: add address=192.168.11.0/24 comment=GuestDMZ_Network dns-server=8.8.8.8 gateway=192.168.11.1 Now I have internet on the guest port! The only...

Wow, thank you for your help! I really appreciate that! Seems I'm almost there. There are no red remarks anymore and both dhcp servers distribute addresses from the correct address pool However the computer on port2 is not able to reach the internet. Not by url, also not by ip address, so it does no...

I tried to fix the issues you appointed Still when i try to add the 2nd dhcp server (interface: ether02_Guest, addresspool: dhcp_Guest) I get the message: Couldn't add new DHCP server - can not run on slave interface I still get a 192.168.10.x address on my computer on port 2, and still access to my...

I reverted my previous changes and followed the whole procedure. Managed to get most done. See my current situation here: https://www.dropbox.com/s/xrgr4srqej1x7p8/configCompact.txt?dl=0 (Due to some cable issues i used ether_02_Guest and not ether04) But: /ip dhcp-server add address-pool=dhcp_Guest...

Tried to make a separate bridge, dhcp server, ip pool, vlan. But i could not make it work. Here the farrest I came: https://www.dropbox.com/s/xrgr4srqej1x7p8/configCompact.txt?dl=0 I can't figure out in what order I have to connect all. Should the vlan be connected to port 1 (the port to my internet...

Indeed i want to create a guest port.
Can you give me some hints how to achieve this securely? I'm not really confident yet with this router.

Hi,
For one specific physical port on my router (port 14) I like to block all LAN activities, browsing, share access. Only internet access should be allowed. How can I achieve that?
MikroTik RouterBoard on 192.168.10.1 (runs DHCP, DNS etc)

Thanks!

internet from inside mikrotik is fine, ping gives normal results. I type this reply from inside the mikrotik lan.

Attached you can find the complete script the network setup is straightforward, and everything works, except the external vpn

Hi all, I just installed my first mikrotik RouterBOARD 1100AHx2. All routing works fine, but I face problems with the L2TP/IPSec VPN connection. From direct outside the RB it works, but from outside, via the internet, I can't connect. The setup is rather simple ( https://dl.dropboxusercontent.com/u/...