Solved: viewtopic.php?t=128635
You must use two ACL rules for "accept" and "reject" respectively at the same time

Hello there, I am trying to kicking low signal clients from 11ac radio, but it seems does not work. env: RouterOS v17.4.3, wAP ac with wifi-qcom-ac package /interface/wifi/access-list> print detail Flags: X - disabled 0 interface=wifi-11ac signal-range=-120..-65 allow-signal-out-of-range=3s action=r...

wAP series might be a good choice, entry-level cost and waterproof. But its airtightness is not good as Aruba's outdoor access point. You can also buy a plastic box, put the ap inside and seal it. Thank you. Any suggestion on the box? When you say put in a plastic box, do you mean as is or remove i...

Oskars K. said this will be patched in the upcoming release.

Normally you use both, prerouting (for everthying the router routes) and output for traffic the router itself produces. With 2 rules (prerouting and output) you catch everything. If you want to route traffic from the router itself (eg. DNS requests from the routers DNS-Clinet) you qould need the ou...

Normally you use both, prerouting (for everthying the router routes) and output for traffic the router itself produces. With 2 rules (prerouting and output) you catch everything. If you want to route traffic from the router itself (eg. DNS requests from the routers DNS-Clinet) you qould need the ou...

Move the 2nd rule in your 3rd code-snippet to the prerouting-chain. The output-chain is for traffic the router itself produces. You cant conn-mark in prerouting and route-mark this in the output-chain. There is simply nothing which will match, which correlates with your observation :D Thanks for yo...

It appears that you have two RouterOS devices, one designated as "C" for client and the other as "S" for server, which has a public IP address. Your need to establish a VPN connection between the two devices, it could be WireGuard/IPIP/SSTP... Once the VPN connection is establis...

ok. because you have asked this packet counter for the mark-connection rule increased, which means that the packets have been delegated a connection mark. But the traffic does not go through the VPN interface, and the packet counter of the mark-routing rule doesn't change. Do you have any ideas? Ma...

If the counter doesnt increase, simply nothing matches agianst your rule. But why do you frst the routing-mark and then the conncection-mark? Id set it up, match the connection and then use the connection-mark as a matcher for the routing mark. The 2nd code snippet was shown as a example config, wh...

hello @ tty1 from all your config and those mangle list - just one thing i would like to ask: where is that ip route command directing the traffic go to the wireguard? do you need nat as well? I created a routing table named "vpn", with a default route to the wireguard interface. There is...

hello

i am sorry I am not sure about what you want to achieve.

did you mean:

remote pbr to your cloudflare warp?

or vice versa, pbr warp for inbound outbound to internet?

I wanna use RouterOS as VPN client, route specific traffic to WARP.

It appears that you have two RouterOS devices, one designated as "C" for client and the other as "S" for server, which has a public IP address. Your need to establish a VPN connection between the two devices, it could be WireGuard/IPIP/SSTP... Once the VPN connection is establish...

wAP series might be a good choice, entry-level cost and waterproof. But its airtightness is not good as Aruba's outdoor access point. You can also buy a plastic box, put the ap inside and seal it.

Yes, you can.
You need to purchase a "PON Stick", which is a modem in the shape of SFP/SFP+. A well-known manufacturer is http://www.natywish.com/ .
For further information, you can check the link below, a translator might be required.
https://www.ponstick.com/

Hi guys, I have set up Cloudflare WARP as a WireGuard interface on my RouterOS, and I want to route specific traffic to it. The interface is up and accessible to the Internet. It works well if I add a static route, or mark routing for an IP address or address list in the mangle table. I use curl htt...

FYI: https://www.youtube.com/watch?v=Ifsb3viu-OM
You can write a scheduled script to check the accessibility of the ISP WAN, and increase the distance of its default route bigger than the default route of the ZTE modem.

I think this is a really important and easy-implemented feature for Winbox users...

Firmware: RouterOS v7.8
Hardware: RB5009UG+S+

It worked in earlier versions.

hardware: RB5009UG+S+
version: v7.8 Stable
issue: the cable test does not show cable pairs output, and stuck there.

terminal output:
[admin@rb5009] > interface/ethernet/cable-test ether2
name: ether2
status: link-ok
(being stuck and no more output)

Have you tried to evaluate the performance of the WireGuard on RB5009 in the local network? You need to control variables to narrow down the potential factors that cause the performance bottleneck.

Hi guys, I am considering setup a QCC load-balance or fail-over just in case one of my ISP is down. Any ideas? device: RB5009 firmware: v7.1.1 wan1 (eth1): 1Gbps DHCP wan2 (eth2): 100Mbps DHCP scenarios: gaming and online streaming. Q1: If I set up a QCC load-balance by executing the following comma...

As described in https://help.mikrotik.com/docs/display/ ... Management, the safe mode is waiting for 9 minutes to roll back configurations until the TCP connection was expired, but 9 minutes is so long.
Does it is possible to reduce the value to tens of seconds?

Thanks!