+1 wireguard

Hi - thanks in advance for replies. I have set up a gre/ipsec tunnel from MT to Cisco. It worked but the connection would drop every hours or so, and remain down for 10 minutes then come back up. Flushing the SAs would bring it back up immediately. Looking in the 'Installed SAs' tab I could see two ...

Hi. I am having a similar issue where I have a IPSEC/GRE tunnel to a Cisco router which works for a while, but the connection occasionally drops and will not reform for 10 minutes, unless you fush the SAs, then it comes back up straight away. I set the policy level to 'unique' and the drops stopped ...

Hi,

I have never tried it, but can't the "Limit" option in the "Extra" tab do this?

I don't know, but thanks for the suggestion. I will take a look.

Of course not. How should the router know which traffic is below and which is above 50 Mbps? Traffic is just packets and can only be judged "as a whole" to have a certain rate. Well perhaps connection-rate isn't the way forward, but this is obviously something that can be done. On Cisco I...

By using connection-rate as the criteria. connection-bytes is the bytes the connection has already transferred, not the rate. Thanks for the reply. I have tried using the 'connection-rate' command rather than 'connection-bytes', but the same problem applies. ie. if a user is sending data at 40Mbps,...

Hi Trema! Thanks so much for your reply. I am not 100% sure I have explained myself properly: If a customer is sending traffic at a rate of 0-50Mbps, I need it to me marked with, for example, AF11. If a customer then sends traffic at a rate of say, 60Mbps, I still need the first 50Mbps marked with A...

Have you configured the interfaces?

Hi. I have googled a lot for the answer to this question, and although I have learned a lot about mangle and queues, I have not found a way to do what I imagine is quite a simple task. I am looking to put Mikrotiks as NTEs which feed into a Cisco network. As such I want to mark packets leaving the M...