Ah si? Null'altro?

Hello, how can I create a DHCP server that lease out a single address?
I would use it for my P2P management port, where I would connect only a single machine (and want to avoid changing its address manually every time).

Thanks in advance.

As I wrote in the title, I would like to connect a 5V fan to the USB 3.0 port of my RB5009 (non-poe) because that's would be the only way I have to power it easily.
Can it be done? Ofc the fan will not draw more than 5W (iirc USB 3.0 max wattage is 15W)

Scripting is the only way to define the address lists automatically based on my existing vlans?

And what if I have multiple vlans? Do I need to use address lists?

add chain=dstnat action=dstnat src-address=serverSUBNET dst-address=serverSUBNET

What's should that do?

It does make sense (in my opinion) to have this handled by DNS. All traffic doesn't have to pass the router that way.

And what about Wireguard traffic, having a domain like: wireguard.mydomain.com? It can be handled still from DNS?

Hello, after following the https://help.mikrotik.com/docs/spaces/RKB/pages/154042388/Port+forwarding guide, I'm able to access my HTTP server from the Internet using my domain. Now, when trying to access the HTTP server using the domain from the local network (same subnet of the HTTP server) I reach...

I've removed the address list and set the to my WAN and now it seems to work!

Hello, I have the following NAT/Port Forwarding rules and everything works fine when Cloudflare resolves my domain to my public ip. If I route my traffic through Cloudflare proxies, so no more forwarding the traffic directly to my public ip but instead using Cloudflare IPs, I cannot longer reach my ...

Likewise when one uses PPPoE for WAN ... interface for WAN will be pppoe-out1 interface and not e.g. ether1. In this case it is sensible to add ether1 to WAN interface list ... but because it's used to access ISP's modem management interface. But has nothing to do with internet traffic. "off-t...

Woah thanks, for the exaustive reply. So, the LAN interface list with the "main" bridge is useless because, due to the vlans, when using the firewall, it doesn't know what's going on inside with the vlan packets, right? I'm making a rule to block all the inter-vlan traffic, and I created t...

You need to look through rest of the config to know how both of those lists are used in it. I wonder - did you mean to ask "what is the difference between the-bridge-itself interface and the vlan interfaces"? (Happy to answer but don't want to infodump if that's not what you want...) Sorr...

Hello, what's the difference between the following two interface lists (I want to use them in the firewall rules): Interface List with the only item added being the main bridge Interface List with all of the single VLAN interfaces The following picture explains better maybe: https://i.ibb.co/SyHk7pJ...

Ok so, I've created the following rules. How do they look to you? Are they OK to secure my network? (and did some other stuff from the First Time Configuration docs ) /ip firewall filter add action=drop chain=input comment="drop <invalid> packets" connection-state=invalid log=yes log-prefi...

Yes, so what ?
I got no problems with that setup.

Nothing, just wanted to confirm if I understood correctly

I only allow ports which I need for my wireguard connections through ISP router, nothing else.

So you have a double-nat going on?

deleted

Why will you need BTH I need it to easily have a VPN to my home from my phone (with MT app), not PTP routers. I know how to setup a "normal" Wireguard server and so on but BTH seemed a good "integrated" feature, along with the Android app. Ref Firewall: what is the point of us g...

I've started without the default configuration to know exactly what was going on under the hood and what I did with my hands :/

Hello, I've just bought an RB5009 for my homelab to get better at my networking skills. I have started from ground up, so I'm not using the defconf of the MT. Currently I've set-up just a PPPoE client (my modem is in bridge mode) and a NAT rule to get internet access on the router and made some VLAN...

And how about the power consumption of the 5009? Is it a power hungry device even if I use a small set of features?

If you can pickup RB5009 for that price ? Always.

If not, should I fall-back to the AX3?

So should I avoid the RB4011 in any case?

Hello, I hope someone can help me as I'm burning out on this. I would like to to join the MikroTik world's to get better at my networking skills. I'm a pseudo-beginner, I know some basic concepts but I really would like to get hands dirty with something more complex and enhance my home network. The ...