But did I do it correctly? in the /interface bridge port section, should I be using 'priority' or 'path-cost' ?

Don't use add bridge=bridge interface=all on the station. Add the wlan60-1 and wlan1 interfaces explicitly and set the spanning tree path cost to favour the 60G interface, also make sure that the AP itself or something upstream is the root bridge. I think I'm in the deep end here with regards to fi...

Assuming I have the numbers relatively correct (ie. smaller where they should be smaller), there shouldn't be further changes to the config? Apparently, not quite. On the AP side, I also needed to change the "priority" in "/interface bridge port" for something larger than that b...

Don't use add bridge=bridge interface=all on the station. Add the wlan60-1 and wlan1 interfaces explicitly and set the spanning tree path cost to favour the 60G interface, also make sure that the AP itself or something upstream is the root bridge. This is entirely new to me, so forgive me for makin...

We are just starting out with using these Mikrotik Cube60SA APs with Cube60 stations. We had a fairly simple setup in the lab, multiple client stations connecting to a single AP. We simulated interference events by turning off either the wlan1 or wlan60-1 interface on the client, and the connectivit...

So, queue trees then. And yes, I am fully aware that to prioritize all OSPF traffic I've got to do this on both devices, as each mikrotik can only actually control its own outbound packets. As a test example, say that I've got one of two links between the devices paired on their matching "sfp-s...

/ip firewall mangle add action=mark-packet chain=output comment="Mark OSPF" new-packet-mark=OSPF passthrough=no protocol=ospf If you are going "out" a vlan interface, you may want to set COS priority and to do so: /ip firewall mangle add action=set-priority chain=output comment=...

We are setting up a network, using mpls/vpls/ospf to link the devices. As the connections are all over wireless links, link connectivity/uptime is not nearly as guaranteed as wired connections, so the mpls failovers need to be pretty robust. But of course, regular network traffic can overwhelm the d...

Thank you so much for your help. It was definitely a MUCH better experience here than the "hurr hurr hurr learn how to internetz dude" one I had on Reddit. But I'll at least be able to update my post there with the pair of fixes required to make it work. (Because SOME day somebody else wil...

I will be able to continue work on Monday. In the meantime, your explanation does NOT explain why the config does indeed work when it’s a non-router connecting to the switch’s ports, the dhcp query fully works in that case. The dhcp only fails when it’s a router (Mikrotik, D-Link, etc) connecting to...

Update: FIXED. Entries in the config that were removed are now commented out in the main post. Our end-goal is to be able to rate-limit all the individual ports on a switch, so that our customer's tenants can better share bandwidth. I THOUGHT I had it working well, but ran into a major wrinkle once ...

Some additional info, my end-goal is to be able to monitor/manage this problematic device via The Dude. This (apparently because of the pppoe link and the resulting problems with the snmp) is currently not working for us.

1. /snmp community print shows: Flags: * - default, X - disabled # NAME ADDRESSES SECURITY REA WRI 0 *X public ::/0 none yes no 1 XXXXXXXX 0.0.0.0/0 none yes no The "public" default has been disabled, and the community I'm connecting to should be available on all ip addresses. 3. I want th...

Solved: As a not-exactly-expert in Mikrotik, it didn't quite occur to me that I had to manually enable "snmp" TWICE: once for the community I'd added, and once again for SNMP entirely. Generally other networking devices are much simpler: enable/disable SNMP in one single spot, and have a (...

Routing traffic for a specific destination over the VPN is definitely much easier. After creating the VPN tunnel between two Mikrotik routers, it was a two-more step process: /ip firewall nat add action=masquerade chain=srcnat ipsec-policy=out,none out-interface=NAME-OF-L2TP-INTERFACE /ip route add ...

I am fairly new to Mikrotik. I'm generally more comfortable working on a command-line than on any webby clicky interface. A customer has a webapp hosted on a specific ip address x.x.x.x ; This is a public ip address, not an internal/private one. They also have multiple offices, none of which have st...