Community discussions

Search found 8 matches

by petrz
Fri Oct 18, 2019 1:43 am
Forum: General
Topic: DualWAN - route for specific dest IP / port [SOLVED]
Replies: 3
Views: 423

Re: DualWAN - route for specific dest IP / port [SOLVED]

Thank you, Sob. If somebody will need, this works for me: /ip settings set rp-filter=loose /interface list member add interface=wan1 list=WAN_all add interface=wan2 list=WAN_all /ip route add check-gateway=arp comment=wan1_marked distance=1 routing-mark=to_wan1 gateway=GW-IP-FOR-WAN1 add check-gatew...
by petrz
Mon Oct 14, 2019 12:54 am
Forum: General
Topic: DualWAN - route for specific dest IP / port [SOLVED]
Replies: 3
Views: 423

DualWAN - route for specific dest IP / port [SOLVED]

I have following situation: WAN1, WAN2, LAN. All traffic is routed via WAN1, WAN2 is used as fallback. WAN1 is connected to LTE modem directly, WAN2 is connected to other mikrotik (that makes masquerade). I need to route traffic to particular IP / port always via WAN2, even when WAN1 is reachable. W...
by petrz
Tue Mar 05, 2019 4:09 am
Forum: Wireless Networking
Topic: cAP ac disconnecting
Replies: 1
Views: 205

cAP ac disconnecting

I got brand new cAP ac, made reset to CAP mode. Provisioning worked only for small amount of time, than connected client is disconnected, SSID is not broadcasted, device is not reachable via IP, not reachable via MAC, not visible in neighborhood, not visible in winbox. I tired upgrade to 6.44, still...
by petrz
Tue Nov 20, 2018 4:30 pm
Forum: General
Topic: [Solved] TLS SSL_ERROR_SYSCALL with bonding [SOLVED]
Replies: 1
Views: 535

Re: TLS SSL_ERROR_SYSCALL with bonding [SOLVED]

Problem was caused by MTU sizes in combination with DF (don't fragment) bit of some TLS streams.
Fixed by changing MTU values.
by petrz
Tue Sep 18, 2018 12:08 pm
Forum: General
Topic: RB3011 IPSEC Hardware Encryption?
Replies: 17
Views: 5900

Re: RB3011 IPSEC Hardware Encryption?

What's new in 6.43.1 (2018-Sep-17 06:53):

Changes in this release:
*) rb3011 - added IPsec hardware acceleration support;
by petrz
Sun Jul 22, 2018 2:26 am
Forum: General
Topic: [Solved] TLS SSL_ERROR_SYSCALL with bonding [SOLVED]
Replies: 1
Views: 535

[Solved] TLS SSL_ERROR_SYSCALL with bonding [SOLVED]

After switch to bonded DSL lines I have problem with TLS handshakes with some sites. Some works (e.g. google), some not. Setup: 4 DSL modems + LTE modem (backup) -> ISP's RB3011 doing bonding -> our RB3011 -> NATed LAN When we used single DSL line of other ISP, it worked with same configuration. Now...
by petrz
Wed Jun 13, 2018 7:51 pm
Forum: Beginner Basics
Topic: VPN subnets
Replies: 0
Views: 288

VPN subnets

Hi. I would like to ask you to suggest best practices for this: Office router is RB3011 and I would like to setup VPN access with different "access layers" based on user names / groups. At this moment I have OpenVPN server, each user is assigned to one of remote address pools (range of few IPs) acti...
by petrz
Mon Dec 18, 2017 12:56 pm
Forum: General
Topic: 2x hAP AC Lite - Redundancy
Replies: 0
Views: 176

2x hAP AC Lite - Redundancy

Hi. I have 2x hAP AC Lite (RB952Ui-5ac2nD). WAN is connected into ETH1 in "Master hAP". "Slave hAP" ETH1 is connected to ETH5 of "Master hAP". On "Master" is DHCP for LAN and WLAN (2,4+5GHz). I would like to set "Slave hAP" in other part of building as "redundant". So it will offer same subnet on WL...