check it now.
so AX2 neither USB port nor more NAND space. Keep an AC2, adding en new AX3000 WiFi router as a AP is the best choice.
Less cost, best performance.
I used this filter to block invaild users since v.6.38.7, and it works prefect. CUZ the invaild cilent will continued reconnect my VPN port when I disable the user. /ip firewall filter add action=drop chain=input comment="Drop pptp invaild 7 Day" dst-port=1723 protocol=tcp src-address-list...