Community discussions

Search found 22 matches

by shamet
Wed Oct 16, 2019 2:54 am
Forum: General
Topic: VPN over Balancing PCC
Replies: 35
Views: 3574

Re: VPN over Balancing PCC

You can just use an accept rule if you want the main routing table to be used...

You mean the one that I'm currently using:
/ip firewall mangle
add action=accept chain=prerouting comment="PCC - Policy routing VPN" dst-address=10.11.12.0/24 in-interface=LAN
right?
by shamet
Mon Oct 14, 2019 5:14 am
Forum: General
Topic: VPN over Balancing PCC
Replies: 35
Views: 3574

Re: VPN over Balancing PCC

... goal is to have all, flawlessly running system, knowing why it does that (it's very helpful), and good feeling from doing it yourself... I coulnd't agree more. /ip route rule add action=lookup-only-in-table dst-address=10.11.12.0/24 table=main You basically tell the router to ignore routing mar...
by shamet
Mon Oct 14, 2019 3:00 am
Forum: General
Topic: VPN over Balancing PCC
Replies: 35
Views: 3574

Re: VPN over Balancing PCC

I like your approach. Thanks. ... trial & error, exploring dead ends, things like that.. I think it all depends on if you have enough satisfaction from having flawlessly running system or from making it by yourself it to run like that ;) I'm personally more into second option. But to the point: I'm...
by shamet
Thu Oct 10, 2019 8:06 pm
Forum: General
Topic: VPN over Balancing PCC
Replies: 35
Views: 3574

Re: VPN over Balancing PCC

Thanks for hint. I'm actually planning to remove everything and start from scratch again. Once again. And in matter of "missing all the fun". I don't want to be too easy ;) Posting complete config and counting that someone will spend time on finding errors in mess I have probably made is, I think la...
by shamet
Thu Oct 10, 2019 5:34 am
Forum: General
Topic: VPN over Balancing PCC
Replies: 35
Views: 3574

Re: VPN over Balancing PCC

Damn, I thought I finally have solution! Found it somewhere. Thing is that after making this rule it really works. When I disable it, I don't receive ping replies from some of the remote (L2TP/Ipscec over PCC) hosts. Unfortunately, you are completely right! I logged into server with this rule on and...
by shamet
Fri Oct 04, 2019 8:31 pm
Forum: General
Topic: VPN over Balancing PCC
Replies: 35
Views: 3574

Re: VPN over Balancing PCC

Mangle rule sets the first one, but there's no routing table for it. So, I think I have misunderstood the thing completely. I thought to_WAN1, mr_vpn in routing table somehow joins those two into one route. My config is pretty much according to https://wiki.mikrotik.com/wiki/Manual:PCC, but with on...
by shamet
Fri Oct 04, 2019 3:54 pm
Forum: General
Topic: VPN over Balancing PCC
Replies: 35
Views: 3574

Re: VPN over Balancing PCC

Quick note, routing-mark="to_WAN1, mr_vpn" means one routing mark named "to_WAN1, mr_vpn", NOT two routing marks "to_WAN1" and "mr_vpn".
Yes, I'm aware of that. And I understand it as "route it to vpn interface (from which connection comes) and further to gateway of WAN1". Am I correct?
by shamet
Fri Oct 04, 2019 3:46 pm
Forum: General
Topic: VPN over Balancing PCC
Replies: 35
Views: 3574

Re: VPN over Balancing PCC

There is certainly a mistake in your configuration... if you want you can export the whole router's configuration with hide sensitive and post is here... As for now, I have asked my ISP to change config of my connection to static IP instead of PPPoE. If they agree i will check if first post's trick...
by shamet
Fri Oct 04, 2019 1:51 pm
Forum: General
Topic: VPN over Balancing PCC
Replies: 35
Views: 3574

Re: VPN over Balancing PCC

My advice is to study carefully the mangles PCC example... https://wiki.mikrotik.com/wiki/Manual:PCC
That was my starting point and this is exactly how I have it set up right now, for quite a time already. It seems to work good, but not with VPN, hence the whole story.
by shamet
Fri Oct 04, 2019 2:32 am
Forum: General
Topic: VPN over Balancing PCC
Replies: 35
Views: 3574

Re: VPN over Balancing PCC

... because obviously your L2TP connection was initiated from wan1 Well, it does not seem likely. I was trying to connect with vpn using my WAN2 IP address. I have two connections configured with WAN1 and WAN2 IPs. What do you mean by: You can change the priority of your wan interfaces... ? Do you ...
by shamet
Fri Oct 04, 2019 1:58 am
Forum: General
Topic: VPN over Balancing PCC
Replies: 35
Views: 3574

Re: VPN over Balancing PCC

Can you disable all your wan interfaces except the one you want to use with your l2tp? If yes then it works? Even if you have mr_vpn in your routing table? Yes, I did it with shaking hands because I was afraid loosing connection with remote location, but I did it with scheduled simple disable and e...
by shamet
Thu Oct 03, 2019 10:58 pm
Forum: General
Topic: VPN over Balancing PCC
Replies: 35
Views: 3574

Re: VPN over Balancing PCC

And how? I wish I would know it. I have l2tp-in interface configured but mangle rule calling it in is marked in red colour until connection is established. When I export I receive: # l2tp-in1 not ready add action=mark-connection chain=prerouting comment="VPN TRAFFIC" in-interface=\ l2tp-in1 new-con...
by shamet
Thu Oct 03, 2019 10:18 pm
Forum: General
Topic: VPN over Balancing PCC
Replies: 35
Views: 3574

Re: VPN over Balancing PCC

I think it's not going to work even with static l2tp-in in my case.
This kind of interface is inactive until connection is established so this mangle rule is not going to work.
by shamet
Thu Oct 03, 2019 1:44 am
Forum: General
Topic: VPN over Balancing PCC
Replies: 35
Views: 3574

Re: VPN over Balancing PCC

True, sounds reasonable and simple :D. I'll try to search for solution for that. Edit: Thanks for hint. I've added static l2tp-in interface but it somehow doesn't seem to work for me. When I remove , mr_vpn part from my routing mark it works but with this part included, not. I receive: ipsec,error p...
by shamet
Thu Oct 03, 2019 1:24 am
Forum: General
Topic: VPN over Balancing PCC
Replies: 35
Views: 3574

Re: VPN over Balancing PCC

Yes, the thing is that I cannot select VPN interface because it is some kind of dynamic interface and when there is no connection established I can't see any VPN interface in the list to pick.
by shamet
Thu Oct 03, 2019 12:51 am
Forum: General
Topic: VPN over Balancing PCC
Replies: 35
Views: 3574

Re: VPN over Balancing PCC

Yes, I understand marking rule. But marking incomming in-interface=all-ppp when one of my WANs is PPPoE marks all comming from this WAN as comming from VPN. At least that's what I have observed when I was trying to implement his solution. I'm strugling with problems with accessing all devices (I can...
by shamet
Wed Oct 02, 2019 9:28 pm
Forum: General
Topic: VPN over Balancing PCC
Replies: 35
Views: 3574

Re: VPN over Balancing PCC

I think it makes sense only if your WAN connection is not PPPoE.
Please correct me if I'm wrong.
by shamet
Sat Sep 28, 2019 7:43 am
Forum: General
Topic: 2 different interface with 2 subnet : make them talk...
Replies: 32
Views: 25023

Re: 2 different interface with 2 subnet : make them talk...

Folks! First of all sorry for digging up such an old thread but my problem seems to be similar so... I have serious doubts if this problem is MikroTik related, but anyway. Here is a thing. I have running network, only one LAN until now. I thought to give a try network segmentation and make separate ...
by shamet
Fri Sep 27, 2019 3:35 am
Forum: Wireless Networking
Topic: Mikrotik wi-fi and Iphone = problem
Replies: 70
Views: 46946

Re: Mikrotik wi-fi and Iphone = problem

Using all the recommended, in this and other threads, "tips and tricks", brought me to a point where wifi was finally working on Iphone X but not anymore on Galaxy S6. Thing was STP instead of RSTP in bridge config (for Iphone). What I finally have done was complete reset of system, update to 6.45.6...
by shamet
Mon Sep 23, 2019 5:06 am
Forum: Wireless Networking
Topic: Mikrotik wi-fi and Iphone = problem
Replies: 70
Views: 46946

Re: Mikrotik wi-fi and Iphone = problem

I found solution by djape posted in another thread solving my problem. I know it is old topic, but after many hours of struggle with 2 MacBook Pro not being able to get IP, complaining about IP already used by another device (when it's not) I was able to solve the problem by changing protocol-mode f...
by shamet
Thu Apr 11, 2019 10:28 pm
Forum: The Dude
Topic: Dude 6.41.2 lost SNMP interfaces
Replies: 26
Views: 4566

Re: Dude 6.41.2 lost SNMP interfaces

"... just close dude and open it again, ..." In my case restarting client didn't help at all. I was testing a bit in the meantime and I think that The Dude has major problem with working with SNMP v3. Tested both with and without encryption. I guess, even lenght of the encryption key and password m...
by shamet
Wed Apr 10, 2019 2:21 am
Forum: The Dude
Topic: Dude 6.41.2 lost SNMP interfaces
Replies: 26
Views: 4566

Re: Dude 6.41.2 lost SNMP interfaces

I'm also struggling with new The Dude loosing interface status and even not listing corectly SNMP interfaces. What I tried today was to stop The Dude server for a moment and then start it again (dude set enabled=no, and dude set enabled=yes). It helped. Maybe you can try it for yourself to check if ...