Hi the IPsec peer finally established. I use this doc for base config. https://mum.mikrotik.com/presentations/US15/godinichconsulting_mum.pdf this is my config so far. now I want to go next step. let say we have a server VLan in HQ. this config only route to the remote LAN specified in config (192.1...

Maybe this could help? Not really what you are asking, but you might get some hints.

Thank you erkexzcx. I find several resource about mikrotik to mikrotik IPSec behind NAT and also ipsec between mikrotik and cisco. but I cant merge this two to make a working config for my problem.

Hi I try to setup a site to site tunnel between a Cisco router and a Mikrotik Router behind NAT. could anyone share experience or some example about that? HQ LAN (192.168.5.0/24) ------------(192.168.5.1) [Cisco 1841 Router] (192.168.114.226) ------ some infrastructure -------- (172.16.177.36) [Mode...

I remove tls configuration from server and it now work. is it unsupported on RouterOS?

Hi I try to connect a openvpn client interface with certification authentication from mikrotik to an openvpn server on centos. I think I have problem with matching parameter between cleint and server specially about "auth", "cipher" & tls config. could you check this config a...

Ok. Thank you every one. Its UP! apparently I used wrong frequency! So I set the AP & Station Tx power manually to 1 db and both Antenna Gain to 1 dBi. Should I has to set all them manually or just AP side is enough? This is my status now. Is it sound good? any suggestion to Improvement? I need ...

I just set both of them to 10MHz for Test. I reset them to default now. Nothing change from default.

If I set Channel Width to 10MHz or 5 MHz station could see AP in scan but not connect. in 20MHz it can't see AP.

Ok. This is the setup. I apply 1 or 2 db tx power but cant get it work. Is it to low to the buildings roofts? the AP side is 2-3 meter higher than station and I apply some angle to both side. I can't see AP on Station with 5GHz-A/N 20/40MHz Ce Frq: 5775 Station Side http://i.imgsafe.org/82ae627cbe.j...

Hi, I try to setup a wireless link with Mikrotik SXT Lite 5 between 2 building that each one have 2 floor (about 10 m height) and distance about 200 meter. there is no Higher Building between. I have 2 question 1-what Height I need for antenna above the roof. 2- How much Tx power should applied for ...

update question (more specific now). any idea?

i don't think use of mark connection & packet be mandatory. i use mark routing without them in some configuration and it works.

(I think i can be more specific now. edit topic subject with new one) I want to policy route reply packet of a src-nat (masquerade) that basically must be done with mark routing this packets. I have this configuration(part that matter here). /interface pppoe-client add disabled=no interface=ether1 n...

thanks Caci99 & AlexS for sharing your idea. i try to clear what i need. i don't really feel good to relay all my traffic on a proxy box. I somehow do it with 2 step nat now. one on the proxy box and another on RB for pppoe-out interface. now i try to eliminate that NAT on proxy box. that cause ...

all http and non http traffic for regular users go through proxy box for AAA, monitoring and bandwidth shaping.
main problem is if i change proxy box to "route mode" i cant figure it out how route reply packet to box for traffic came from box.

still need help with this. i think it is possible with policy route but i cant figure it out. specially how manage reply traffic from pppoe-out to route to desired interface.
please help i need this badly.
thanks

about 70 view but not even a clue??

Hi I try to setup a dual route to gateway configuration (try to explain in below pic). my intention is to control which client go throgh proxy box (for AAA and bandwith shape and quata) and which one use a direct route to gateway using an Address List (for some devices). http://i58.tinypic.com/242wf...

Hi

i have same problem with strong vpn. could you explain the exact setting about MTU and MSS that workd for you.
i have confused about ppoe and pptp MTU and MSS.

now i have MTU and MSS default in ADSL Modem. strongvpn show MTU 1400 when connected.

tanx

Hi, I'm still looking for help.

hi again tanx mrz i add the policy. i totaly confused about that: i go with this http://wiki.mikrotik.com/wiki/L2TP_%2B_IPSEC_between_2_Mikrotik_routers and it didnt work yet. here is what "netsh ipsec dynamic show all" say on windows that work fine with connection. what is the same parame...

well, my connection work on windows. base on that what is proper setup. excuse me i,m not a mikrotik pro. here is my config so far: /interface l2tp-client add add-default-route=yes allow=mschap1,mschap2 connect-to=*.*.*.* \ dial-on-demand=no disabled=no max-mru=1460 max-mtu=1460 mrru=disabled \ name...

Hi mrz,

Yes. i want make a L2TP/IPsec connection.
but in my network RB450G is the L2TP client not the server. is this supported?
can i set secret ket with ip ipsec peer when the RB450G is client that make connection?

hi perspetolis

tanx for your reply.
but my problem actually is i cant find where i set L2TP key (shared secret) that i need it to set in connection.
in windows we can set it in L2TP Connection Properties/Security/Advanced Settings/ "Use preshared key for authentication"

Hi

I try to set up a RB450G as a VPN L2TP Client, The problem is my i need setup a L2TP key (shared secret) plus Username and password.
how i do that? I cant find how i set up L2TP key (shared secret) in L2TP Client Interface.
I test it on a Windows box and the account have no problem.
Please Help.

Hi friends

I just found out my problem was misconfigure the DNS. Now everything is OK.

Now i have another question.
1- Is this proxy server can set for authenticate user from a domain?
2- how can i shape bandwidth that every user use?

Tanx for your help.

Hi kirshteins,
I read the manual and check the settings. but it doesn't work yet.
here is my settings and connections:







and the result:

Hi, I am a newby with mikrotik. i have a RB450G and want to config it as a web proxy in a network. i have an ADSL modem that have ppoe connection inside and NAT LAN to single IP wan. LAN IP: 192.168.0.1 now i want router board process web request.LAN IP:192.168.0.6 i enable web proxy but it dont see...