Just in case it helps anyone, i noticed that this error could also come up in case a secret is disabled. In my case, the local adminintrator had disabled some secrects - mine included - without letting me know. The error disappeared as soon as i activated my secret. To be honest, i really can't see ...

Not sure if it's the issue. But what is the OpenVPN server/concentrator? Another Mikrotik? It's strange you have this in OVPN client config then cipher AES-256-GCM auth SHA512 cause all Mikrotik boxes I ever had supports just Auth mechanism SHA1 or MD5. So I have this in OVPN config file cipher AES...

There's sha512 in 7.2rc, first only in CLI, but latest one added it to WinBox too.

That would be great!

Thank you both for your replies!
At least now i am more confident on the fact that it's not gonna work.
Have a good day!

What did you do with "tls-crypt new-test.key"? AFAIK RouterOS doesn't support this. And compression may be a problem too (I know that RouterOS doesn't have LZO, but I'm not sure if it supports anything else). Thank you very much Sob for taking the time to answer me. I'm not sure at all ab...

Hello everyone! I'm struggling with configuring the client part of a Site-2-Site OVPN. For the same person i have already configured a Site-2-Client (same server) which works properly. I have only one file available : The windows client .ovpn file From that, i was able to extract the ca.crt, the cli...

PBX configuration is ok they sayed... for sure they sayed.. After checking over and over the same Mikrotik configuration, they finally let me take a look on the PBX config. SIP Settings/NAT only contained the VPN server's local subnet where the PBX resides but not the remote site's local subnet. Aft...

Hello everyone! I could reeeealy use some help here..... :? I have a Site-to-Site L2TP/IPsec VPN that seems to working fine. On the VPN server site there is a Grandstream UCM6200 (192.168.5.20) and some Grandstream IP phones (192.168.5.21-32) On the VPN client site there are only 2 IP phones (192.16...

Hello there! Here is a weird case i got into: There is a PPTP Site-to-Site connection. Server site suffers from power outages from time to time, so in that case, router reboots. After booting, the destination address of the "route to client local network" shows "unknown". So, eac...

It does have a modem inside.. like your first picture.
Suppose that it is faulty indeed? Perhaps customer damaged the device with wrong use of POE or something? It used to work as he says...

Hey SiB, thanks for the reply: I got these results: [admin@MikroTik] > /system resource usb print # DEVICE VENDOR NAME SPEED 0 1-0 Linux 3.3.5 ehci_hcd RB400 EHCI 480 [admin@MikroTik] > /port firmware print directory: firmware ignore-directip-modem: no Also there is no trace of lte1 anywhere... And ...

Hello everyone, this is the first time i try to configure an LTE interface in order to connect to a cellural ISP. I am using the wAP LTE kit / 4G kit, in which i've inserted a mobile phone SIM card. I also use this article, as a guide. https://stevedischer.com/mikrotik-rbwapr-2ndr11e-lte-us-with-lte...

Emils, it worked thanks to your advice. Finally, I created one peer with four identities. One common proposal, one profile, one policy. I just used different mode configs to implement access restrictions. Thank you very much! For anyone who is interested i leave the configuration below: /ip ipsec po...

So, here i made only 2 peers: remoteUserVPN.peer and remoteAdminVPN.peer . Each one with two identities. One peer uses DHCP for its identities. The other one uses static IP addresses, because i wanted to make different use of "split include" for each identity. Again, first peer is reachabl...

I'm sorry! Here are the missing parts: /ip ipsec policy group add name=remoteAdminVPN add name=PapatheodorouVPN add name=KampaniVPN /ip ipsec profile set [ find default=yes ] enc-algorithm=aes-256,aes-192,aes-128,3des add dh-group=modp2048 dpd-interval=disable-dpd enc-algorithm=aes-256 \ hash-algori...

Hello there! I'm trying to set 3 mobile users through IPsec VPN. The strange thing is, that my configuration works like a charm, but only for one peer. To explain further, in the "Peers" tab, the 1st peer is reachable while 2nd and 3rd are unreachable. If i disable the 1st peer, the 2nd on...

Problem solved. Thank you so much for your aswers both. Disabling vlan firewall did the thing. Avav, i'm gratefull that you put the time to correct me and advice me in 11 points! I tried to reform my firewall following your advice. Sorry for all the nonsense you saw, this was the first time i set a ...

Hello there, i'm not so much experienced in vlans yet.. so i have this problem: When i try to ping from a vlan host to another, it just fails and gives me a "rejected" message. I can't even ping the vlan interface. No one pings no one under the same vlan. It doesn't seem to be any of my fi...

Just in case it matters, all lans under router are virtual...

Hello everyone, Today i set up a RoadWarrior with Mode Conf. I only configured Ipsec and Shrew client, according these wiki pages https://wiki.mikrotik.com/wiki/Manual:IP/IPsec https://wiki.mikrotik.com/wiki/IPSEC_between_Mikrotik_router_and_a_Shrew_client . Tunnel is enabled, i get an IP from pool,...

This is a very old thread, however my solution may come in handy to someone. I checked "Use IP Firewall" on Bridge tab, as routerboarda stated above. I chose to have no parent for my simple queue. I set as Target my bridge(eoip tunnel along with a physical interface). I set no Dst.(cause t...

Thank you very much for your answers.
Switch did the job.
As for my NIC, it would support VLAN tagging as long as i download Intel's drivers for that purpose.

Good point indeed. In my case it's just practice.. i borrowed the device from work

Thank you both guys!
I'll try the switch. I'll also check my NIC about VLans.
Probably i'll be back with questions.

Ops.. didn't even know.. may be a silly question but how do i configure vlans on my pc?

Hello Kurosudo and thanks for your immidiate response. I put 172.17.81.1 in vlan81, deleted my dhcp server configuration and made a new one through DHCP setup button. However nothing changed... my pc doesn't take an IP. I made a DHCP server work that way for a physical port yesterday, but i cannot m...

Hello everyone, I'm totally new to Mikrotik. I'm practicing with a RB 3011 Routerboard which i've connected to my home router. I've already made a bridge(ports ether1-5) with DHCP relay to my home router which works fine. What i want to do now, is set vlan81 interface as a DHCP server at ether6 and ...