Code: Select all
/queue tree print bytes
Regards
Andrew
/queue tree print bytes
At the top of this thread.and how look your up/down scripts?
Yes & the VRRP RFC. It's a little vague on what should happen if the parent interface goes down.Did you check it ?
I want to do the opposite; i.e. if a vlan tag is present, remove it before the packet exits the switch port. Is this possible?new-vlan-id - if specified changes the vlan tag id, or add new vlan tag if one was not present
/interface ethernet mirror
set mirror-port=none source-port=none
Doesn't this configuration require a Nokia VPN client?I created the following VPN policy using "Nokia Mobile VPN Client Policy"
Maybe. NAT rule? Hard to tell without more information.What is/could blocking that communications, is it a firewalll rule?
Exactly. It's a /64 per network, all 65536 of them.if i undertood , i need to break these /48 into lots of /64 in my lan?
chain=forward action=accept connection-state=established
chain=output action=accept protocol=41
chain=input action=accept src-address=216.66.80.26 protocol=41
But this is an ipv6 in ipv4 tunnel. You need to allow the tunnel traffic.right now i have block'd ALL trafic to my main IPv4 where the IPv6 is routed to
2000::/3 is the current allocation of global unicast addresses.Wonder why that address?: dst-address=2000::/3
generate-policy=no
/ip address add address=200.200.200.107/32 interface=wan
/ip firewall service-port
That isn't a SYN/FIN packet. Let's see some examples along with the traffic that immediately preceeded it.in:DSL out:(none) .... proto TCP (ACK,RST), web.server.ip.address:80->mikro.tik.ip.address:someport, len 40
[admin@MikroTik] ip firewall nat> add chain=srcnat action=masquerade out-interface=Public
generate-policy=yes
/interface vlan print
/ip address print
/ip route print
/ip firewall nat print