Mikrotik will not implement this. I asked 5 years ago. They give a reason of openvpn being hard to develop, bad coding ang so forth, yet UBIQ has implemented it and PfSense has as well. Mikrotik has nice features and neat stuff. Except for UDP Openvpn with compression. They give and excuse that it'...

I am using http://www.yubico.com/ for 2FA on several places, including some linux machines. Works good.

6.7 to 6.9 broke pptp connections on several of our systems in production. It actually works fine, however after upgrade security profiles were not working/applied ... showing <unknown> instead of the configured profile (we always set new profiles rather than "default-profile") could you ...

As i read that post, and hav watched one of the video - The problem is in your setup. You want to have the mikrotik to resolve Local addresses from the 10.x.x.x DNS and the rest from "another" DNS. To solve this, its your 10.x.x.x server that needs to forward non authorative requests to a...

It is pretty easy actually :

DO NOT use transparent proxy. If you setup the proxy in your web browser, you can deny/allow any http or https traffic. This is not possible with transparent proxy.
Yes you will have to MAKE your customers use the proxy

I've spent the last 14 hours or so trying to find out why broadcast traffic is not being sent over my VPN (desktop client -> L2TP/IPsec). I have been using this tutorial . I need to be able to see network devices from Network Places on my PC and Network on my Mac. I have been through every Google r...

Are you running SSTP without certificate ?

From v6rc12 changelog :

*) sstp server - removed test mode which allowed running server without certificate;

You don't need the accept rule. Only the nat rule.

We terminate up to 100 L2TP/IPSec peers on a 1100AHx2.

The clients are MikroTik and Android/Windows. No problems for more than half a year now.

Is it a bridged setup ? With l2tp interfaces being added to bridges ?

Can anyone tell if this is supposed to work like that ? Any response at all, would be fine. "Works for me fine" etc.

Hello, I am having a weird problem with RouterOS and a few different RB's ( 2011's, but also happens on 951-n2 and so on ). Basically i have 3 sites connected with bridged L2tp interfaces. Everything is working correctly. I have set mrru=1600 and traffic is flowing just fine between the 3 sites The ...

Has there been at least some testing on the existing openvpn functionality ? It was completely broken in rc10.

Create an Address List containing the IP's you want to have all the time access on. Create srcnat rule that srcnat's those ip's all the time Create a srcnat rule that nat's the rest of the IP's ( or everything different than the Address List from above ) ONLY at the times you want ( Time setting is ...

hello, since release .10, openvpn server @ rb2011 isnt working anymore. ive already cleaned my certificates, renewed them and so on.. my mac client ( /w tunnelblick ) always says: TCP connection established with [AF_INET]x.x.x.x:1194 2013-02-16 17:36:25 TCPv4_CLIENT link local: [undef] 2013-02-16 1...