Hi all, is it somehow possible to forward multicast packets from a VPN client that dialed onto the mikrotik router (PPTP oder SSTP) to a host that is connected to an ethernet port on said mikrotik? I even tried giving the VPN client an IP from the same subnet than the host, but it seems multicasts d...

Thanks, that sounds feasible. I'll try that.

Anyone here with SSTP throughput experience?

Hi all, which Routerboard could you suggest as a termination point for SSTP VPN clients. I think at maximum there will be 2-3 concurrent users logged in (most of the time they won't download or upload anything, it's more about RDP) and we have a 100 MBit/s line. Which routerboard would be able to de...

Hi all, I already set up a SSTP Server with ppp onboard users and also AD integration. What I want to do is to have the Mikrotik router allow certain users access to certains subnets or hosts only. I know it can be done on IP basis (e.g. allow masquerading from certain sources to certain destination...

After months of testing and trying different approaches I can tell: the RB2011 series is not working flawless with at least the Huawei E3372 and E8372 USB LTE sticks. There seems to be an issue with the USB port in that series, as even using other OTG cables and a USB hub with separate power didn't ...

Hello, please upgrade to latest RC version, there are some fixes regwrding this issue.

I too have this issue and tried the latest RC, but to no avail. I have the very same problem with the E8372 stick. When there will be a fix for this problem? Or is there any workaround for it?

I even tried the e8372 model now (because someone wrote it works without problems), with the same result. Sometimes when there is even low load on the connection it fails, rendering the USB stick useless until I restart the whole board. Is there something wrong with my routerboard?

What version you had before on your router where it was working ok?

I reverted back to 6.40.3 where speeds are normal, but that version too has the problem that the E3372 is unstable an looses LTE connection when there is some load. I hoped the latest RC would fix this...

With v6.41rc31 my LTE connection was very slow, max. 7-10mbit/s and high pings >200ms. Also the E3372 LTE modem (still) loses connection when downloading larger amounts of data (via Steam for example) so you have to reboot the RB.

I updated to the latest RC as suggested, but still the modem loses connection when there are heavy downloads on it. It is more stable now, but still the connection resets and the USB modem won't connect anymore until the router is rebooted

Anyone?

Hi all, I know the LTE support list in the mikrotik wiki, but we tried the E3372 which has a big flaw - it looses connection when under load and then won't reconnect. As I can't find a solution for that problem: can anyone recommend a LTE USB modem for Europa (Austria) that works without problems? I...

I have the same problem: when there is some load on the stick it sometimes disconnects and won't reconnect unless the router is rebooted. Is there any fix for this issue? I put (rather: hacked) the E3372 in LTE mode (as some reports indicate that issue persists in PPP mode only), but to no avail

I have the same problem: when there is some load on the stick it sometimes disconnects and won't reconnect unless the router is rebooted. Is there any fix for this issue?

Sure:

RB2011UiAS-2HnD with RouterOS 6.39.1 (stable)

The modem is a Huawei E3372h

Hi all,

when I activate "Add default Route" and "Use Peer DNS" in the interface menu of LTE1 the router loses that settings when it is shut down. Is this a bug or am I missing something? Is there a workaround possible?

Cheers

Thanks, I had the NAT rule added already. Also tried the firewall filter as described, but to no avail. I can see on the firewall, that the outgoing packets hit the accept filter, but still I don't get any reply from the destination subnet. Any chances that this might be some issue with the Meraki s...

Okay it seems I really had a problem with defining the subnets. I defined 10.0.0.0/8 as destination address in the ipsec policy, now a tunnel is created when having a look a the installed SAs. Also meraki reports an established tunnel: msg: IPsec-SA established: ESP/Tunnel xx.xx.xx.xx[500]->213.225....

Okay thanks, I have some ipsec debug info now. Short explanation: xx.xx.xx.xx is the public IP of the meraki appliance. 10.24.6.76 is the mikrotik public IP on ether1. 10.24.0.203 is a client within the peers subnet I want to ping from my client behind the mikrotik router with the IP 192.168.88.44. ...

Can I do a verbose log on the mikrotik router, and if so, how?

Hi all, I successfully built an IPSec connection from my Mikrotik router to a Cisco Meraki MX400 appliance. Unfortunately I can't get any traffic through, I get the following errors in the Meraki log file: msg: failed to pre-process ph2 packet (side: 1, status: 1). msg: failed to get sainfo. I speci...

Thanks for your answers bedior and wimpy!

@bedior did you try using AES128, whats the speed then? If I assume correctly AES256 was faster with an older firmware?

Thanks alot for the swift reply! 24Mbit is sufficient for my needs. So I can use this board as a router/ipsec router providing VLANs and and wifi?

Hi everyone, I'm currently searching for a router/wifi-AP thats capable of providing VLANs and an IPSec tunnel to it's LAN clients (wifi only local internet breakout). Is the RB2011UiAS-2HnD-IN suitable for this case? Does anyone know what max. performance I can expect throught the tunnel (will be u...