Same problem here and routeros v6.41 doesn't help. Ports in second bridge don't have "H" flag so it uses CPU: https://i.imgur.com/hsICgKg.png

CRS326 sux. CRS125 had multiple switch groups. Probably you can achieve what you need with VLANs but it's a limited solution.

+1 for both

Package wireless has better nstreme performace then fp and cm2. Tested on many production links (5GHz-n 1x1 and 2x2). You cannot ad another wireless package to bundle package. Why is that? There was no problem to install cm2 and have all 3 packages. Netisntall Router and chose what package you need....

Hello, How should I report a bug? Is this forum correct? On a SXT Lite-5 v6.33 I'm trying to install package: wireless-6.33-mipsbe.npk from all_packages-mipsbe-6.33.zip and I get the error: [admin@Mikrotik] > log print jan/01/1970 01:00:10 system,info verified wireless-6.33-mipsbe.npk 13:52:36 syste...

Hello, the arp=arp-proxy mode lacks a very simple option to set the delay after which reply is sent. In Linux: echo VALUE > /proc/sys/net/ipv4/neigh/INTERFACE/proxy_delay Default delay is very high which makes it impossible too use in some scenarios. Is it possible to add the feature to set the dela...

cieplik206, run-after-reset works well. I had problems with it until I looked at default MT script, it starts with: :while ([/interface ethernet find] = "") do={:delay 1s;} This means: wait for any ethernet interface If you don't wait you may execute a command that fails due to no interfac...

Hi, I'm trying to reset configuration (with "keep-users") as a user with all perms but "policy". I get an error: /system reset-configuration keep-users=yes Dangerous! Reset anyway? [y/N]: y system configuration will be reset not enough permissions (9) /user group print [...] 3 na...

Does MAC NAT maintain any NAT table as in L3 NAT? I guess it doesn't. So we need to DNAT returning packet (first check in L3 if it's not directed to MT itself). For DNAT we need to set host MAC address which again forces us to reconfigure MT after each MAC change.

Yes, CPE. Routing creates other problems. Routers need to know what IP is behind the CPE and I can't divide address space into small subnets (to little public IPs).

Hi, "This mode is available for all protocols except nv2 and should be avoided when possible." http://wiki.mikrotik.com/wiki/Manual:Wireless_Station_Modes#Mode_station-pseudobridge However this mode is very useful and I don't know how to replace it. The drawback of poor handling non-IP tra...

Still get no results for dst-nat. Thing is, it's very simple to reproduce by anyone who has any MT device. Commands below are for devices with at least 2 ethernet ports, otherwise you need to change ether2 for example to wlan1. /system reset-configuration no-defaults=yes skip-backup=yes /interface b...

Counters are increased. Flags: X - disabled, I - invalid, D - dynamic # CHAIN ACTION BYTES PACKETS 0 dstnat dst-nat 4554 99 I determinate by observing ping - it's lost when I activate the rule. What you mean where? LAN --- MT --- CPE --- WLAN-HOST I've done some more tests: when I ping WLAN-HOST and...

No IP firewall rules, 100% default config with changes stated. MAC filtering itself works - action=drop/accept/jump/return. In this configuration traffic is dropped. I've set admin MAC - no change. add admin-mac=11:0C:42:BF:67:19 ageing-time=5m arp=enabled auto-mac=no disabled=no forward-delay=15s l...

# jan/02/1970 00:04:21 by RouterOS 5.7 # software id = T585-J63M # /interface bridge add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes \ disabled=no forward-delay=15s l2mtu=1600 max-message-age=20s mtu=1500 \ name=bridge1 priority=0x8000 protocol-mode=none transmit-hold-count=...

http://wiki.mikrotik.com/wiki/Manual:Interface/Bridge
"dstnat - used for redirecting some pakets to another destinations"

I forgot to tell that the traffic is dropped.

Hi, I'm using MT 5.7 on 711-5Hn-MMCX. 1. /system reset-configuration 2. On startup: Remove (default) configuration. 3. Add bridge1 with ports: ether1, wlan1 and IP address on bridge1 interface. 4. /interface bridge nat add chain=dstnat action=dst-nat to-dst-mac-address=MAC2 src-mac-address=MAC1/ff:f...

Hi, I had problems with activation mail send by this forum. The e-mail is sent via mail server with invalid (from the point of view of many mail server admins) HELO/EHLO command: Sep 25 19:42:26 *** postfix/smtpd[26397]: NOQUEUE: reject: RCPT from tuncis.mt.lv[159.148.147.201]: 450 4.7.1 <tuncis.loc...