have you read this wiki?
https://wiki.mikrotik.com/wiki/Manual:S ... sMAN_setup
maybe it can help you with your user login problem.
maybe you can try to tune it by @ nescafe2002 pointer.The question here is, if the NAT on Mikrotik becomes a problem with a time of around 30 minutes with no communication on a specific NAT connection.
did you plug those 2 cables on the same switch?after this, I plug the ether-2 wire into the unmanageable switch and also plug ether-5 in the switch but my users are facing problems with the internet.
your router needs to listen on different port - for the wg tunnels to be usable. ie. 13231 for nordvpn and 13232 for purevpn.I'm not certain-certain but the IF is up,
/ip firewall nat add chain=dstnat action=dst-nat dst-address=100.100.100.100 src-address=10.10.10.100 dst-port=25 to-addresses=10.10.10.100 protocol=tcp
did you ever check how many users connected to the hotspot?
Customers randomly are not able to browse, we have noticed that those cannot ping to their Gateway.
/interface wireguard add listen-port=13231 mtu=1420 name=wg1-nordvpn add listen-port=13231 mtu=1420 name=wg2-purevpn
ok. let us see your MT dns settings,
However, this doesn't seem to have fixed the problem, and the wifi clients still cannot connect.
nahh.. nevermind, mission accomplished.
which I count as "mission accomplished" when it comes to the edit, but you tell me; should I have left it as-is or put the breaks in somewhere else, or rewritten it for formatting, or…
can you try that @ gavinj suggested - hw=no?Probably when this happens and there is enough load, the result is packet loss due to buffer overflow?
routing ospf instance
set [ find default=yes ] disabled=no distribute-default=never
do you mean:Now I would like to route two (fixed IPv4 address based) outgoing WireGuard peers through the second WAN. All others through the first WAN.
can you show us your ping and traceroute output, from the branch to the central, and vice versa?
. I can ping and access other filials they can ping me but opening ports just hangs from filial to center.
hmm, i have forgot what was that tool to check...The source IP of the tcp-reset-attack is the same, or it appear to be the IP of the remote site requested?
If is the same... just drop that IP...
reading your post,My ISP employs DPI and as one of its strategy is to use TCP Reset Attack
10.10.2.0/24 ---> MT ---> 100.253
no no. that 64 is the lte path priority, with its default cost you have set = 500. not the router priority.went ahead and tested changing the router priority at site 'D' to 64, but I'm still having the same issue
the problem is - if your ISP locked down their router then you can't do much with your router.ISP will provide 0 help, I have asked them how to configure IP POOL they said your headache,
yes. it is possible - but it is easier for you to get help from your isp directly. because forum members don't have any idea/privilege on your isp router.is it possible to ping Miktotik router from public? If yes! How to configure my routers?
it's good for you(though in practice I have never seen it change the past years).
speaking of which.. has anyone tried to port routeros to an onie-based bare metal switches?in MikroTik, neither are offloaded to ASIC.
absolutely,much more efficient to have a drop rule at the end of the forward chain.
ok. i am just trying to draw @ op topology and knowing what he wants -- i don't like crystal ballDon't let you distract by questions from wiseroute, it is clear what you want.
does your router have a public ip?the requests should go from internet (FQDN) to local servers (IP or FQDN). I have local DNS server which resolve also some other local FQDN's.
even if they were real - can the router or the server or the target (read: cpu+ram) buffers such a massive objects in single window time frame?in a ddos attack source ip addresses are fake you are not catching nothing useful
as per your pptp question,If the result of this checking faile, connection will be close or disconnect.
i really like this one
Perhaps enabling "debug" as topic in logging would yield more clues on what's going on for you during PPTP session establishment
I'm just wondering how will your isp call center handling your pppoe change request twice a daythe main reason is that i need to make a script, where it will automatically change the username and password of that pppoe interface and then put it on a schedule..
well, I am sure you know it better than meThis is all about BGP and filtering the routes advertised by (eBGP) peers