Say, you create a pool for VPN in 192.168.3.0/24 Then create those rules: /ip firewall filter add src-address=192.168.3.0/24 dst-address=192.168.1.0/24 action=accept add src-address=192.168.3.0/24 dst-address=192.168.2.0/24 action=accept add src-address=192.168.1.0/24 dst-address=192.168.3.0/24 act...

I won't suggest handing out IPs from the same subnet. The better approach is to have a dedicated IP range for VPN.
Then just add filter rules to allow traffic between VPN pool and the specified subnets.
-Chris

example plis how do this?

Hi. What exact configuration I have to need for access to remote LAN witch two subnets via VPN ? VPN tunnel works ok. But on remote LAN are subnets 192.168.1.0/24 and 192.168.2.0/24. On remote router is on its LAN both gateway 192.168.1.1 and 192.168.1.2 If in VPN server config is as local and remot...

I have a NAT rule to redirect all DNS requests, on edge router. like this: http://wiki.mikrotik.com/wiki/Force_users_to_use_specified_DNS_server redirect is to its own IP address-whrere running Mikrotik DNS. If customer has WiFi router, which on LAN side via DHCP server assignt to computer IP addres...

Previous PC router goes permanently on 70% on CPU load (dual-core 2200MHz Pentium. And it has lower latency to internet and no such issue, during 4 years.

Hi, can I ask - I have CCR1009 as edge router with NAT. I used Eth5 as WAN and Eth6 as LAN. But in high data load from customers - above 300Mbps, occurs high cpu usage of CCR up to 100% and traffic decerase to forexample 110Mbps and latency to internet is 100ms and higher. This is during 3-6s, then...

Hi, can I ask - I have CCR1009 as edge router with NAT. I used Eth5 as WAN and Eth6 as LAN. But in high data load from customers - above 300Mbps, occurs high cpu usage of CCR up to 100% and traffic decerase to forexample 110Mbps and latency to internet is 100ms and higher. This is during 3-6s, then ...

Hmm, but if I trying tracert from some machine from telnet command prompt result is OK. result is wrong from graphical telnet. i dont understant..

I have strange situation. If trying Tracert from MK accessed from Winbox from PC connected on edge router I have different results as i connect to the some routerboard from another PC deep inside network. See attached picture. WTF? Thanks. In picture on Left is wrong answer and on right is ok answer...

Ok, super.
sincerelly
R.K.

I have a CCR1009-8G-1S-1S+.
My question is, what interfaces can be used-for best performance, if this CCR will by used as edge router. With one Eth port as LAN and other port as WAN. Traffic 300 - 400Mbps, with routing and NAT.
Thank you very much.

Why any version SXT hasn`t LED to indicate that Ether link UP? It will be very useful in particular maitenance situations. it is verystrange. hmm. thx.

It is possible that MikroTik considering a change of holder SXT/SEXTANT, so that it can be adjusted elevation without buying additional holders? That would be a great advantage over UBNT products.

http://routerboard.com/RBSXT-5HPnD Now we are moving. Waiting for SEXTANT with the same output power ! :D Mikrotik, 23dbi antenna and metallic enclosure please. Fedup with plastic. 16 dbi with that much power is a low requirement. High antenna gain is needed more. Sextant is a bit short. Agreed, hi...

if you have 90% failure, maybe you are doing something wrong. Ehm ... I have network about thousands of clients ... And if I change f*cking RB711 and give in the same box RB411 with your R52n-M, all is running correctly. I think, problem is not in our hands. if there is a problem, send to distribut...

Hi Normis !
The problem is still persist. It was discovered on start of November, but In our distributors we still getting invalid RB711xxx`s.
We buy RB, we send RB to RMA back, or we claim the credit note.. and around. Is it normal? And what about your reputate?

That seems as temperature based.
Bellow are graphs of two RBs associated on different AP on different locations faraway oneself.
For comparison, bellow is graph of temeretures on GROOVE in our area (district).

I'm sorry but the problem is unclear. What's wrong exactly? You lowered the TX power, and the TX power became lower? This is to be expected! Do not change txpower, leave at default. Normis - that is not black and white. In my case - I was wrote it in the first contribution of this thread - if is Tx...

I'm sorry but the problem is unclear. What's wrong exactly? You lowered the TX power, and the TX power became lower? This is to be expected! Do not change txpower, leave at default. Normis - that is not black and white. In my case - I was wrote it in the first contribution of this thread - if is Tx...

In some pieces (often !) of new version RB711-5Hn (with new PCB and plastic LAN connector) appears problem with regulation of Tx power. If Tx power is set to some value manually (on client board) on near AP has this client signal level -85dB (on faraway AP this client doesn`t connect at all. With Tx...

i have used netinstall a dozen times, but on two pieces of boardRB411 it just does not want to work right. i followed the manual http://wiki.mikrotik.com/wiki/Netinstall to the letter. oh npk version 4.11 stable it hangs on "Waiting for installation server..." in Netinstall the RB411 showe...

Maybe you can upgrade firmware of the RouterBOARD by serial port. Download firmware from RouterBOARD.com Go to the BIOS of the RouterBOARD, there is option upgrade firmware over serial, Use xmodem protocol to send firmware file from your Terminal program on Windows. Try Netinstall one more time. I ...