I had similar problem with my setup and was able to solve it. There is no need to add firewall rules. Important is to set proper ip pool for IKEv2 clients. It should be different from your subnet. So in your case, if your subnet is 192.168.0.0/24, then use a 192.168.1.0/24 for the IKEv2 ip pool. It ...

Thx for the feedback, even if not helpful. I have solved the problem, it turns out problem was in ARP. The thread can be closed.

Hello everyone, recently I bought a Mi TV Stick to make my old TV a little bit smart. The TV stick use wifi to access the internet. It connects to my wifi network, get a proper IP address but after 20-30s it shows message: "Connected, no internet". I'm using CAPsMAN to manage my wifi netwo...

Could you please provide any example of the bridge filtering?

Hello, I'm trying to assign specific clients by mac address to specific VLANs using Hap AC2. The case for me is exact the same as in this topic https://forum.mikrotik.com/viewtopic.php?t=73901 but when I try to add the switch rule, I get following error message: Couldn't change Switch Rule <34:D0:B8...

I have discussed the issue with ISP and it the problem was on their side. Everything is working now. You can close the thread.

According to ISP their router has set up DMZ, so everything should go through directly to my router. Unfortunately the ISP can't set it into bridge mode.

Here you are: # may/12/2020 08:33:05 by RouterOS 6.46.6 # # model = 951G-2HnD /interface bridge add admin-mac=4C:5E:0C:A2:55:57 arp=proxy-arp auto-mac=no comment=defconf name=bridge protocol-mode=none /interface ethernet set [ find default-name=ether1 ] speed=100Mbps set [ find default-name=ether2 ]...

Hello, I have following setup: ISP Router <=> Mikrotik <=> LAN ISP Router has public IP address 176.X.X.X and LAN 192.168.1.0/30 with 1:1 NAT (176.X.X.X <=> 192.168.1.1) and DMZ set for 192.168.1.2 Mikrotik is connected over ETH1 with ISP Router and get IP address 192.168.1.2/30 with gateway 192.168...