@anav The easy way to block vlans at L3, the fact that users/devices are withing vlans means L2 separation is achieved, in the forward firewall filter set, is simply to set the last rule as block all else. add chain=forward action=drop comment="Drop all Else" This has the effect of ensurin...

Hi, I have the script bellow that I have got here in the forum of Mikrotik. It works correctly notifying if one of the default routes become "Unreachable", but the problem is that on every script run it shows repeated status on the logs and e-mail notification (ie: link Down, link Down, Li...

Same problem here... downgrading to 6.46.8 solved the problem.

I'm in a lab, trying to do two things on a RB951ui-2HnD v6.38.7 A) create 2 trunk ports where each one goes to a Dell ( from ether2) and a HP (from ether5) switch. *** Every thing that I did here were using the SWITCH feature and NOT the BRIDGE, since (at least where I read here in the forum) is the...

I'll try to play with the OpenVPN service permissions and with different store folder for the files..thanks for the idea.

I discovered the trick.

Just adding a new line "connect-timeout 10" solved the problem and reduced to 10s the time to wait for a response before trying the next server.

Hi! I wonder if there are any methods for a user only be able to start a openvpn connection on my company laptops? Like authorize the remote connection just if be started from a specifc mac address of the company laptop.. Reason: I don't want the employees to copy the config folder that contains the...

Hi, I have a Mikrotik that has an OpenVPN server running. There are 2 WANs and I want to set a failover for OpenVPN client computers. Bellow is the .ovpn that I set in Windows client. The problem is that when the WAN1 fail, it takes 120s (average) to cycle to the next wan available (WAN2). Is it pos...

Is it correct to assume when working with VLANs using the switch instead of bridges, is the best practice in terms of performance? When using the switch like I did, we are using the ASIC chip, and the processor is more "free" to work with routes, QoS, etc? and if use bridges, the VLANs wor...

I think that was a bug at one time. You're pretty behind on updates, I'd update to at least 6.34x bug fix only.

Yes! I've updated to 6.34.6 and now is correct:

Did you add the switch1-cpu to the vlan tab as well as the ports tab?

Did that and now it is working! But what's means placing this "switch1-cpu" inside de vlans? What's the logic that I should understand?
And why is shown switch2-cpu / switch3-cpu ?

The other device is a Cisco SG300 switch: switchf450d5#sh running-config config-file-header switchf450d5 v1.3.0.62 / R750_NIK_1_3_647_260 CLI v1.0 set system mode switch file SSD indicator encrypted @ ssd-control-start ssd config ssd file passphrase control unrestricted no ssd file integrity control...

Looks like you need to configure "switch1-cpu" port just like "ether2" port in the switch menu to allow access to DHCP servers configured on VLAN interfaces. Tryed what you said but didn't work yet. Even setting a manual IP on the pc interfaces, can't ping the vlan gateway: sw.P...

Hello! I'm trying to reproduce this scenario of Mikrotik Wiki: http://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features#Example_1_.28Trunk_and_Access_Ports.29 I want to be able from a Mikrotik RB951 to have a trunk port on eth2 and access ports with vlan 200,300,400 running on eth3, eth4, eth5 resp...

The problem was in the board. A new one was sent to me and is working fine now.

Thanks!

Hello! I just received a new RB 951Ui 2HnD this week and I noticed that when the wifi is on, a strange noise comes from the board. I recorded the sound and uploaded here in this topic. This is really normal or my RB has some problem? Just rename the RB951_noise. doc to .mp3 please. The sound starts ...

Are the users "heavy" network users? I mean including network shares, database usage etc... Also what is the existing interference level of other neighbour AP's? And why do the smartphones have separate AP's? Why not a second SSID with a separate VLAN? That way you keep the interference t...

Hi, I'd like to implement a network scenario where I can use the firewall of Mikrotik and a Webfilter (Squidguard) + proxy cache. What I have in mind is something like this: 1- The computers is configured with the DNS of my Active Directory server. 2 - I would like to have a transparant proxy where ...

They are computers only...

For the smartphones there is one dedicate access point.

Hi, I'm needing to install an access point 2.4 / 5.8 AC to cover an area of 350m² of a small office with 60-70 devices aprox. The office doesn't has a lot of walls, is quite clean for wifi signal. There are 2 dedicated WAN links of 20Mbits/s each, working together in a load balance on a Mikrotik 110...