It's too late to mark connection in forward chain, if you also need to mark routing for all its packets, because in forward chain, routing is already decided. What happens is that first packet takes default route and only following ones take marked route. And obviously it can't work. So move connec...

Hi, Let me explain what I need as probably it's easier. I need to have a regular wlan network with password with no limitations and then a second (guest) wlan network without authentication and that has only access to 3 websites. So I configured the guest wlan and was trying to set the rules for it...

There's some good discussion on this topic in this recent thread I posted.

http://forum.mikrotik.com/viewtopic.php?t=117648

Sent from my Nexus 6P using Tapatalk

It's too late to mark connection in forward chain, if you also need to mark routing for all its packets, because in forward chain, routing is already decided. What happens is that first packet takes default route and only following ones take marked route. And obviously it can't work. So move connec...

Scenario: RB2011 with two WAN connections: pppoe lte There are two default routes. 0.0.0.0/0 with distance 1 sends all traffic out of pppoe 0.0.0.0/0 with distance 2 sends all traffic out lte in case of pppoe failing. We have one host on the network that we want to use the lte as the primary out int...

What does this show?

Have you watched https://www.youtube.com/watch?v=KL6wrfa9Cnk (Managing 1500 mikrotiks...")? (second presentation video on the presentation stripe on the top of the page)

I have not! Thank you! I will see what he recommends.

Hello, I manage 100+ Mikrotik routers, the vast majority of which are RB2011UiAS-2HnD-IN models. Currently we use Winbox to manage all of these routers remotely. We document each install with customer name and their static IP. Or we set up Mikrotik cloud address if they use DHCP. This allows us to m...