Hi there! You can do it using just routing mark without problem. The only problem is you have to use IP address (not domain names). First in the firewall: Mangle table, chain=prerouting dst-address=IP action=mark-routing new-routing-mark=to_isp1 And then in your routing table you have to create a ne...

Hi, We have arround 200 openvpn clients using routerboard 750 (v5.24 most of them) connected to a linux box running openvpn server on debian working fine until now! Some clients (maybe 20% of them) loss conectivity and reconnect to the server over and over again. We can probe the connection got lost...

thanks everyone!
we`ll start to upgrade a lots of mk`s!

I`ve realized that I have the same problem.
I don`t wanna split into two different routesOS for now.
So I`m using mark-connection to ensure the flow through the proper interface.
And mark-packet alone for the queues (I`know this is not the best approach).

Hi, Apparently after your test, you can guest that the mikrotik configuration is ok, so I recommend to check the cisco config: are the trunk port allowed vlans? Also, could you show us a brief graphic? Because I don`t follow you when you said that you connect directly (from/to what?) Hope I can help.

sounds good news!!!
I`ll do some lab practice first because I have so many lines in the mangle that I`m a bit dizzy!
Yes, passthrough is very important I`ll check looking for mistakes.
thanks!

Hi fewi, I got doubt about this marks. I`m using mark-connection in prerouting chain and then for two different reasons I`m using mark-packet (for queue tree) and mark-routing (to route through different wan`s) but I can`t use both, right ? I suppose that just can use or mark-packet or mark-routing ...

Today I have the problem in both dns servers. Feeling that I`m going backwards. As soon I have more time I will capture the packets and try to figure why, because works fine when I delete the second dns entry in the DNS configuration and flush the cache. But for now I`ll change the dns server in dhc...

hi, I´m having the same dns problem. it´s seem to be random. when I try to resolve several times I get not answer: :resolve dns.domain.com failure: dns name does not exist and then without doing nothing works fine (previous I flushed the cache). I can add some information but for now I can´t says wh...

Hi there, I've been working since a while with ipsec-tools and l2tpns in linux as a server vpn. The most of the client are windows, native connections (ipsec/l2tp) or using a client ShrewSoft (great soft!). Ipsec-tools let you simplify the connection using the mode_cfg (gather network information th...

Me again, the last comment let me think and I just tried l2tp without ipsec and work great! I mean I can reach well from client to server IP tunnel and even more I can ping an IP address behind the server, after adding the necessary routes. So its let me know that l2tp isn't the problem, something i...

I'm almost totally agree with siel. I'm trying to do the opposite, the client IPSec/L2TP RouterOS (v5.0beta3 and v4.10) and the server Linux with racoon and l2tpns. The client is behind the nat, the server has an IP Public (tipically roadwarrior scenario). The same happens, I have the SA's installed...

greats news!!!
i just can't wait to see that!

/rodrigo

thanks!!! it's realy helpful.
/rodrigo