The Dual Access is a crutch by design. Nowadays, many providers moves from the dual access to more easier solutions. As for Mikrotik in comparison with other vendors, such as D-Link, Asus, Zyxel, TPLink, Edimax...: in order to operate with the Dual Access properly All of them MUST to implement a som...

In my router, RIP and OSPF work simultaneously on different interfaces. I receive default route from OSPF. Then, I need to redistribute it via RIP. How to do it correctly. My RIP config: distribute-default: never redistribute-static: no redistribute-connected: yes redistribute-ospf: yes redistribute...

Dear Community, I have several ZyWALLs (model 2 plus). It's hardware is very good (in my view), but ZyNOS with it's vendor limitations nullifies all benefits. These disadvantages make me get rid of the ZyWALLs. If it were possible to install RouterOS on this ZyWALLs, this would bring them new life. ...

I know about a regexp.
But situation with "=" is a real "bug" (unfortunately, not only one in the RoS).

Hi!

When I create new bridge, RouterOS sets "only-hardware-queue" for it.
But, when I try to set "only-hardware-queue" for existing bridge, I receive an error
"only-hardware-queue not supported for this interface"

Metarouter with 2 virtual RouterOS

Firstly, i recommend to read http://wiki.mikrotik.com/wiki/Manual:IP/Route

I think, in your case, there's no need for complex routing policy.
Simple add a set of explicit static routes to IX networks
International traffic, in turn, will follow the default route (dst-address=0.0.0.0/0)

In Vyatta, "Pseudo‐Ethernet Interface" exactly what you need.
But, I'm not sure that it is not just a frontend for bridge interface.

create vlan
create bridge
set admin-mac on bridge
add vlan to bridge

suppose your local ix networks is 192.168.1.0/24, 192.168.11.0/24 /ip firewall address-list add list=IX address=192.168.1.0/24 /ip firewall address-list add list=IX address=192.168.11.0/24 /ip firewall mangle add chain=forward src-address-list=IX connection-state=new action=mark-connection new-conne...

create address-list with local IX addresses
mark packets via mangle
use simple queues on non-marked packets (marked packets will receive max bandwidth)

Hi! BFD protocol looks very useful, especially in case of failover. But in case of congestion it can generate false alarms (CISCO doc, http://www.cisco.com/en/US/technologies/tk648/tk365/tk480/technologies_white_paper0900aecd80244005.html) and it is subject to optimization on kernel side. Should i c...

What's new in 5.12 (2012-Jan-19 14:31):
...........
*) fix gre tunnels on x86 and other little endian machines;

It means all GRE tunnels, including EoIP? What exactly has been fixed?
"Keepalive" still doesn't work in EoIP on x86.

In my queue tree configuration some names have form of "LAN" "LAN->Central" "LAN->pppoe-Ukrtel" When i type: /queue tree print where parent=LAN system returns an error ambiguous value of parent, more than one possible value matches input So i can't get properties of rec...

Hello!

It would be nice to implement in RouterOS something like a Cisco Packet-Tracer (https://supportforums.cisco.com/docs/DOC-5796).
It would be very useful and would save a lot of time while debugging firewall rules (especially in situations with a lot of rules labeling packets).

Hi!

In my firewall tables a lot of rules and I got confused adding new ones.
Is it possible to create a virtual packet with the specified characteristics and to get a log, which lists the tables, chains and rules that are applied to the packet in a router?

Thank you very much

Hi! I have several routing tables and routes with no mark. When I type: /ip route print where routing-mark=tab1 then all is ok and content of a tab1 is printed. But when I type: /ip route print where routing-mark=main then result is empty. And when I simply type /ip route print then console prints m...

Tell me, please, where I can find the list of hardware supported by Vanilla (unmodified) Linux Kernel?

RouterOS doesn't have support for iTE IT8213.
Can you add driver for this device?

Can I disable IPSec replay window or increase int's size?
(CISCO can!)