I have two mikrotik devices, one acting as the main AP and the second functioning as a client on the first.

All other clients open a PPPoE connection to my main AP to obtain Internet Access via NAT. The second mikrotik device have 2 wireless interfaces - typical guesthouse setup. One connect as client, other must offer Internet Access without any further settings.

At this stage I have configured a second NAT rule (Masquerade / same / redirect option on Action tab). Internet connectivity seems to work, but certain web sites (including SSL) are extremely slowly.

Solutions I found that works
1. Create a PPTP connection to second AP - traffic via this connection
2. Using Windows Registry add a MTU entry for client's network card. 1488 works

I would like to enable all clients to have access to all sites without any further settings. I did try the "Packet Size" option in the Source Nat page, but this doesn't seem to work.

I would appreciate some help on this... The problem is that the end-user (client) working on the 2nd AP must be able to connect to the Internet via the 1st MikroTik device. This first device has one ADSL pppoe dialout and accepts only PPPoE / PPTP connections from clients

You need to setup a mangle rule to clamp mss. Something like:
Regards

Andrew

I don't understand how it works......but it works!

My problem was that the browser hangs (and than timeout) on some SSL sites.

I have: TIM Alice 20Mb -> Mikrotik (PPPOE)

Thank you very much!