Community discussions

MikroTik App

Search found 12 matches

by h2desk
Sun Oct 01, 2023 3:56 pm
Forum: General
Topic: Mikrotik's own traffic with mangle rules [SOLVED]
Replies: 11
Views: 1321

Re: Mikrotik's own traffic with mangle rules [SOLVED]

It's very satisfying to witness a conversation between intelligent people.

If I understand correctly, using no-mark on the connection marked in the connection state would disable fasttracked? This way it would use the mangle rules and not be ignored by the jump from fasttrack to fastpath.
by h2desk
Wed Sep 27, 2023 3:16 pm
Forum: General
Topic: Mikrotik's own traffic with mangle rules [SOLVED]
Replies: 11
Views: 1321

Re: Mikrotik's own traffic with mangle rules [SOLVED]

In simple terms there are tools you can use. What is common to both is needing a table and an IP route. One is create a table add fib table=utilizeWANX Create the route add dst-address=0.0.0.0/0 gateway=ISPX routing-table=utilizeWANX Then you have two options: a. use routing rule This basically sta...
by h2desk
Tue Sep 26, 2023 8:58 pm
Forum: General
Topic: Mikrotik's own traffic with mangle rules [SOLVED]
Replies: 11
Views: 1321

Re: Mikrotik's own traffic with mangle rules [SOLVED]

Yes. It's covered by Packet Flow Diagram. The "Mikrotik's own traffic" is a "routing process" here going through LOCAL: https://help.mikrotik.com/docs/display/ROS/Packet+Flow+in+RouterOS#PacketFlowinRouterOS-OverallPacketflowDiagram https://help.mikrotik.com/docs/download/attach...
by h2desk
Tue Sep 26, 2023 8:52 pm
Forum: General
Topic: Mikrotik's own traffic with mangle rules [SOLVED]
Replies: 11
Views: 1321

Re: Mikrotik's own traffic with mangle rules [SOLVED]

What is the requirement in better detail. a. identify user(s)/device(s), groups of users/devices b. identify what traffic they should be allowed to execute. c. identify any particular routes traffic should take d. identify any traffic that the router needs to execute ( aka router services like VPN ...
by h2desk
Tue Sep 26, 2023 6:01 pm
Forum: General
Topic: Mikrotik's own traffic with mangle rules [SOLVED]
Replies: 11
Views: 1321

Mikrotik's own traffic with mangle rules [SOLVED]

It is possible to control the output of Mikrotik's own traffic with mangle rules?
by h2desk
Sat Jun 03, 2023 12:21 am
Forum: General
Topic: traffic from MK system to VPN
Replies: 4
Views: 597

Re: traffic from MK system to VPN

I apologize for the delay. I need to sort out some personal stuff. Unfortunately I'm not in my home lab at the moment to send the settings. I'll do it as soon as possible. I really appreciate your time. I will try to be better in the explanations. I was wrong not to talk about my environment. A stud...
by h2desk
Thu Jun 01, 2023 12:39 am
Forum: General
Topic: traffic from MK system to VPN
Replies: 4
Views: 597

Re: traffic from MK system to VPN

Thanks for the sugestion. They were helpful. As I understand it, you direct the clients that go through routerOS. Right? When is the Mikrotik itself that needs to do this query? Would it work? Imagine that Mikrotik would need to query the DNS names of my network, for any type of validation. Then in ...
by h2desk
Wed May 31, 2023 8:59 pm
Forum: General
Topic: traffic from MK system to VPN
Replies: 4
Views: 597

traffic from MK system to VPN

First of all. Thanks for your time in reading. I'm running some tests and evaluating my rules. I have an IPsec connection, it's working. I would like to make the RouterOS system refer to the DNS that is on the other side VPN. But his internal traffic does not reach the VPN. It must not be hanging ou...
by h2desk
Wed May 31, 2023 5:42 pm
Forum: General
Topic: Questions about ipsec
Replies: 2
Views: 344

Re: Questions about ipsec

1 - In IPsec settings, when you use IKEv2 Roadwarrior, you have an assigned IP. Is it possible to put it as static on the client side? I don't think it's necessary to supply a "virtual" IP via Mode Config as long as the client can handle it. Builtin desktop / mobile OS clients usually can...
by h2desk
Mon May 29, 2023 9:24 pm
Forum: General
Topic: Questions about ipsec
Replies: 1
Views: 309

Re: Questions about ipsec

for some stupid reason, I opened this topic twice.

I'm trying to remove the post, but the mikrotik website is giving me an http 500 error.
While I try to remove this post, I leave the url of the original post:

viewtopic.php?t=196491
by h2desk
Fri May 26, 2023 12:57 am
Forum: General
Topic: Questions about ipsec
Replies: 2
Views: 344

Questions about ipsec

Hey, guys. Before I start, thanks for taking the time to read my question. I wanted to know if it is possible to make some of these configurations in IPsec. These are unrelated questions. Plucked from scenarios of my imagination from my creative mind like a donkey. 1 - In IPsec settings, when you us...
by h2desk
Wed May 24, 2023 9:10 pm
Forum: General
Topic: Questions about ipsec
Replies: 1
Views: 309

Questions about ipsec

Hey, guys. Before I start, thanks for taking the time to read my question. I wanted to know if it is possible to make some of these configurations in IPsec. These are unrelated questions. Plucked from scenarios of my imagination from my creative mind like a donkey. 1 - In IPsec settings, when you us...