Of course that is without context of your current config, which we don't know. The mangle rule must sit at an appropriate point in the rest of your mangle rules. The route should list the tunnel internal next hop as the gateway (the RB1000 IP on 192.168.3.0/27 - why a /27 for a P2P link?) and shoul...

I have a setup like this: RB1000 with RoS 5. Static IP and GW, One 192.168.1.0/24 network behind that gets SNAT through RB1000. RB433 with RoS 5. Dynamic IP. One 192.168.2.0/24 network behind that gets SNAT through RB433. RB433 connect through OpenVPN to RB1000 and has a small linknet 192.168.3.0/27...

Hmm. Yes, I follow you on this one. Problem is I don't want to refer to the servers as 192.168.99.xx. I want
to be able to connect to them with their original adress. Is that possible?

Chris

Hello everyone. I have a problem, and I am thinking of an ugly solution. Question is: Can it be done in Mikrotik? I have two networks: A: 192.168.100.0/24 B: 192.168.100.0/24 (Yes, both networks has same IP:s). In network B, there are two servers 192.168.100.10 and 192.168.100.11 that needs to be re...

Hi! I am using IPSEC client (in this case Checkpoint) to connect to a Checkpoing Firewall. I am behind a Mikrotik device that makes masquerade or src-nat action against Internet. Problem I have, is IPSEC sessions is established but I can never get any traffic through IPSEC tunnel. BUT it works on on...

Yes ofcourse, I'm a bit tired. THANK YOU!

Chris

Hmm, but in that example there are no match on the traffic from the outside.
Lets say like this:

External Client 88.100.100.37 connects to Mikrotik Outside 78.108.40.3 on port 5555.
Then Mikrotik Inside 192.168.1.1 should be seen on the internal machine 192.168.1.15 port 5555.

Hi! I have an internal machine with no default gateway (for reasons). Because of that I can't dst-nat ports against that machine. In linux I can solve that, so the firewall just acts as a "proxy", so the internal machine sees the firewall internal adress instead of the real external source...

Hi!

I have problem with this configuration. The E220 is detected and seen under System - Resources - USB
but not under Ports, so I am unable to make a PPP connection.

I have seen several posts that this configuration should work.

Any ideas?

Best regards,
Christian

What is the routing performance of RB1000 when doing BGP with full views at the same time?
In what environment are you running your pair?

Anyone knows anything about this? Will udp support be included in upcoming releases?

Maybe some from Mikrotik can tell us?

Chris