Site 1 has 50/10 MBit/s (Down/up) and site 2 has 100/50 MBit/s.

If those are the correct numbers I am surprised you get 16 MBit/s, since upload speed on site 1 is 10 MBit/s...

Or is the usb just to power the router?

It is just for power.

//A

How are things looking with this, I would really like a single unit to mange users and to do WPA-Enterprise?

Best regards
//Anders

Just for comparison [anders@rtr39] > system resource print uptime: 4w12h56m40s version: 6.39.1 (stable) build-time: May/03/2017 08:17:10 factory-software: 6.36.3 free-memory: 38.4MiB total-memory: 64.0MiB cpu: MIPS 24Kc V7.4 cpu-count: 1 cpu-frequency: 400MHz cpu-load: 13% free-hdd-space: 108.6MiB t...

nobody? with so many users and years of usage, nobody say anything? it's so nice to have quality support , right? Trust me, that attitude is getting you nowhere, this is a user forum where people help if they can and have the time. If you want "quality support" then I suggest support@mikr...

Perhaps they have static addresses set manually and not DHCP?

I know the feeling...

In Winbox

IP -> DHCP Server -> Leases

you can see all the DHCP leases, doubleclick and you can make them static and also changed the IP if you like.

//A

This one works for me and Loopia, not my code though. //A :global ddnsuser "loopiaUsername" :global ddnspass "loopiaPassword" :global theinterface "ether1-gateway" :global ddnshost my.domain.name :global ipddns [:resolve $ddnshost]; :global ipfresh [ /ip address get [/i...

I understand, fasttrack is not enabled since I thought it would interfere. This is the RB2011 /ip ipsec proposal set [ find default=yes ] auth-algorithms=sha512,sha256,sha1 lifetime=8h pfs-group=none /ip ipsec peer add address=nnn.nnn.128.166/32 nat-traversal=no secret=test /ip ipsec policy add dst-...

First time, bear with me... I have an RB2011 at home with public dynamic ip and want to connect to my SXTLTE which has public fixed IP. I have managed to configure policies (with sa-src and sa-dst) and peers on both, I have active connection between both (remote peers) and I have installed SAs on bo...

Thanks jmay, I added "your" rules with just ports 21,22,23,1194 and I got 8 IP:s poking around in just 8 minutes...

Scary indeed!

Its a pretty simple rule that says if connections are made on the input chain of the router to common ports like ssh, telnet, http, etc then put the incoming ip into an address list for a period of time and drop all traffic from those ips. As a beginner I would really like to see that rule, kind of...

On a completely unrelated matter, stop using 25.25.25.0/24 and go for an address in designated space https://en.wikipedia.org/wiki/Private_network