Thank you for your clear answer. I will ask my customer to test the port with the application instead of using this online test. When you mention that I use tow ethernet ports for the same switch, is it because I only represented 1 switch on the second router? In fact there are more switches, but I ...

Hi Anav Thank you for your reply. This is the diagram for the current setup. Shortly I will discontinue 2 WAN links, so I am concentrating on the WAN_F100. The machine for which I need to open the door is behind the second router (on a second building). That router has NAT so on the first router I o...

We have an equipment within our network that needs to communicate with port 9090. I followed all this forum topics related with this port but it still does not work. When I do a port check (website ping.eu), it says that port 9090 is closed. What might I be missing on the setup? Attached I have the ...

I have a a Mikrotik router on building A with WAN access and 3 LANs. It also has a link to building B where I have just installed a new Mikrotik router. On this building I want that some of the users have access to one of the LANs of building A. And the others I want to have access to Internet but w...

Hi Sebastia. Thank you for the suggestion. It seems a good approach. A colleague proposed: /interface pppoe-server server add authentication=pap,chap,mschap1 default-profile=profile_REDE_20MB \ disabled=no interface=ether9_REDE_20MB one-session-per-host=yes \ service-name=service_REDE_20MB /ip pool ...

Hi. I have been through the documents but I could not find a practical explanation on how I could solve my problem. I have a Mikrotik RB2011-UiAS-2HnD-IN. Physical port 1 is connected to the Internet with a 100 Mbps link. On physical ports 2 through 9, I want to set different LANs using specific ban...

Probably my question was a little confusing. What I want: To connect 2 buildings, each one with a Mikrotik RB2011 il-IN. On router 1 I have the Internet connection, and 3 internal VLANs. This router is working for a while without major problems. On router 2 I need to have 2 VLAN (VLANx and VLANy) an...

Hi, I have a network with a RB2011 managing 2 internet links (WAN_Fiber20 and WAN_Fiber100) and 3 internal VLANs (VLAN-Area1, VLAN-Area2 and VLAN-Wifi). The routing completely blocks accesses between different VLANs, but allows access to Internet. Now the general manager decided to connect a new bui...

It worked fine with one of the new PCs. I will check with the older ones to see if they still connect
Thank you!

Hi When setting the VPN on the client side, I selected "VPN type=Automatic". Probably with the newer Win10 version it behaves differently. So, I changed to "VPN type=L2TP/IPsec with pre-shared key". Now it also fails but now the error is: "The L2TP connection attempt failed ...

Hi You are right. It should be 0.0.0.0/0 and not 0.0.0.0/32. I already fixed it. Attached you can find the log with the new details. When we finish debugging, what is the command to restore the normal log without all those details? This is the output of the command /ip ipsec peer print: # aug/ 5/201...

Hi Sindy, Sorry for my confusion. This time I followed the instructions. I cleaned up the configuration, returning to the starting point (cleaned configuration attached) I also set: /system logging add topics=ipsec,!packet /log print follow-only file=ipsec-start where topics~"ipsec" The re...

Hi Sindy. Thank you for your reply. I went through the post that you mentioned and the linked wiki page https://wiki.mikrotik.com/wiki/Manual:IP/IPsec. I tried the L2TP setup and I tried the Mode Conf and the IKE2. But none worked and at this time I am already confused. I attached the configuration ...

I am having difficulties remotely accessing through VPN. I have a Mikrotik RB2011iL with RouterOS v6.42.6 and had setup a VPN link which has been used for many months. However, 2 new colleagues need to have access and it is not working (despite working fine for all the other colleagues). And it is n...

/ip address ... add address=ddd.eee.fff.82/29 interface="[2]WAN_Fibra2" network=ddd.eee.fff.80 add address=ddd.eee.fff.80/29 interface="[2]WAN_Fibra2" network=ddd.eee.fff.80 /ip arp add address=ddd.eee.fff.81 interface="[2]WAN_Fibra2" I have somehow completely missed t...

The answer we are waiting for is can you ping or traceroute to 8.8.8.8 or 8.8.4.4?

Hi CZFan,
No. I still get timeout when ping or traceroute 8.8.4.4 (when forcing to route through ddd.eee.fff.81

I suppose that ping and traceroute directly to ddd.eee.fff.81 do work - if they don't, there is really something rotten. If they do, what I had in mind was the following: choose a single remote address you are going to traceroute, such as one of Google's DNS server addresses, 8.8.4.4, and before tr...

I suppose that ping and traceroute directly to ddd.eee.fff.81 do work - if they don't, there is really something rotten. If they do, what I had in mind was the following: choose a single remote address you are going to traceroute, such as one of Google's DNS server addresses, 8.8.4.4, and before tr...

I'm not sure what you mean by "incoming route", but I suggest you to add an individual (/32) route for the address you use for traceroute, indicating the gateway of the new uplink as a gateway, and then traceroute again. If it works, it means that routing was the problem. If it doesn't, p...

Hi I am having difficulties to connect a new Internet connection to my Mikrotik RB2011 iL-IN (software version 6.34.3). I tried everything but I am getting frustrated for not being able to put it up and running. I have an existing Internet connection on physical port 1, and I have the LAN ports on 3...

Thank you Hi man, what resolve your problem ?? i have the same problem here and nothing works Hi celoownz, I tried the firmware upgrade and I reviewed the settings but the messages continue appearing. As it is not affecting the functionality and I did not have the time to go after it, I just left i...

Thank you

What I got is: # jan/12/2018 13:58:12 by RouterOS 6.34.3 # software id = 6X1L-00W2 # /interface ethernet set [ find default-name=ether1 ] name="[1]WAN_Fibra" set [ find default-name=ether2 ] disabled=yes name="[2]WAN_Livre" set [ find default-name=ether3 ] name="[3]LAN_Quart...

It seems as if you have something weird in ipsec configuration, like a peer configured with localhost as a remote peer's address. Can you post here the output of /ip ipsec export after replacing sensitive information by xxxxxx? Hi Sindy, I have no access to a console but I managed to use Winbox to ...

I forgot to mention that I am running version 6.34.3 (stable)

I forgot to mention that I am running version 6.34.3 (stable)

Hi, I have been using remote access with VPN and never had problems with PCs that use Win10. However, today a colleague tried to access the VPN using a Win 7 Home Edition PC, and was unable to establish communications. Looking at the log of the Mikrotik RB2011 iL-iN, I could see these messages: .......

Hi, I have a Mikrotik RB2011 iL-iN and I seldom look at the log. Today I was surprised to see that it is full of red lines with: ... memory ipsec, error phase 1 negotiation failed due to time up 127.0.0.1[500]<=>0.0.0.0[500] .... Nobody is complaining about the network so it seems that it is not aff...

Thanks for your reply.
On that router I have a VPN with IPSec tunneling, but it was not changed recently.
What I found out is that I was using the usual Google DNS (8.8.8.8, 8.8.4.4) and it was down during Wednesday afternoon causing this error message.

I have a RB2011 iL;IN with firmware 6.34.3, and everything was working fine until today. Suddenly, some machines were unable to connect to Internet.The only log I get is lots of: Jun/14/2017 16:15:23 memory ipsec,error phase 1 negotiation failed due to time up: 127.0.0.1[500]<=>0.0.0.0[500] followed...

Hi I am a newbie and my questions might be too trivial. I have a Mikrotek RB2011iL-IN to which I need to connect 2 WANs and 2 LANs. • WAN1 on port 1 is high speed fiber Internet access and, therefore, the preferential path to the Internet. • WAN2 on port 2 is an old low speed cooper Internet access ...