Yes, all clients can ping each other.
If you have different subnet on the client side, you must use router for the VPN client and configure the routing on each router so they can connect each of the subnets.

it's not MMCX, I think it is CRC9 connectors like usually used on GSM Modem or cell phones

Dear Mikrotik Support, Please add the driver on the new releas of RoS for the Mellanox ConnectX®-2 EN 10 Gigabit Ethernet Adapters, or did somebody already try this card on MT RoS ?

By Default Serial Port on Routerboard configured for console, if you want to make the serial port to become normal serial port for dialing modem you can turn off the console service: " /system console disable serial0 " and then you can configure the ppp dial-out (Client) or dial-in (SERVER).

From my experiece i can't build pptp-server works on bridged interface, if i use non-bridged interface it works just fine. I dont know why Maybe my configuration not perfect enough doh.

Yes you can use Serial-port for PPP, try disable the system-console.

From your first rule Try change to-addresses=192.168.111.1-192.168.111.254 with something like to-addresses=192.168.111.1 <-- local ip on your local interface

Q: are there any default gateway on your hotspot-router (ip-route) ? also check your main router (gateway) are there any NAT rules for your internal-ip (not the hotspot-ip)

Its so simple :

- make pptp connection on both mt
- make bridge interface on both mt
- make eoip interface on both mt and use pptp ip for eoip remote-address
- put eoip and local-ethernet on the same bridge on each mt

i hope it can solve your problems

regards
usrox

Hi, yes you can use pcq to equalizing your clients bandwith also you can excluding the p2p traffic using mangle and make queue (queue-tree) for your traffic to ensure your clients not taking others bandwith.

Hi, You can change the www service port with /ip service set www port=8899 and then you can add dst-nat rule :

chain=dstnat dst-address=[public-ip] protocol=tcp dst-port=80 action=dst-nat to-addresses=[local-server-ip] to-ports=80

My vpn ip-client (ip-pool) are the same segment with my local-networks 10.xx.xx.82-10.xx.xx.85, I just add 2 NAT rules like my post before and it works perfectly.

Same question as "winxp2000" did.
The versions which you try to install are very old.

Hello, try change the MTU/MRU config to "1400" or "1300" on your l2tp server.

Hi, its more simpler if you build one bridge interface and put ether1 and wireless (AP mode) on bridge. If you want to make the routerboard as DHCP-relay you can use DHCP-relay feature.
I just wondering if you already have routerboard as router why you still use windows

Sorry for my bad english.

Hi yanuarputra, Yes you can use your 2nd Radio as your clients AP.

Hi, Run "sys reset" and reconfigure your routerboard it may solving your problems.

Hello, you can use incoming/outgoing-filter on user-profile to put your own filter-rules on your user-profiles, so you can make different access type for you user.

Hi, are you already try install mikrotik on another disk ? or you can also try install mikrotik on DOM or CF Disk.

If you use masq rule from default config (setup-wizard), hotspot use any public ip on your router.
If you want to specify your hotspot outgoing ip you can change default masq rule with src-nat.

I have similar problems and i use NAT to reach the local network NAT-VPN-to-local chain=srcnat out-interface=eth-local src-address=10.xx.xx.82-10.xx.xx.85 action=src-nat to-addresses=10.xx.xx.80 to-ports=0-65535 NAT-VPN-to-Public chain=srcnat out-interface=eth-gateway src-address=10.xx.xx.82-10.xx.x...

Hi, i have similar config for port redirect to my local server and it works perfectly chain=dstnat dst-address=[public ip] protocol=tcp dst-port=80 action=dst-nat to-addresses=172.21.2.2 to-ports=80 chain=dstnat dst-address=[public ip] protocol=tcp dst-port=22 action=dst-nat to-addresses=172.21.2.2 ...

Use Netisntall (for Routerboard) to reinstall and use RB500 packages (-ns)