I do have CRS and I use LACP... In WinBox its under Switch features and called "trunk", and AFAIK it is done in Switch HW as it doesnt seem to tax CPU whatsoever. http://wiki.mikrotik.com/wiki/Manual:CRS_features#Trunking could you describe your config and benchmarks (with CPU utilization...

It would be usefull to have in-interface-list/out-interface-list in terms of src-address-list/dst-address-list: for example: /interface gre add name="tun0" ... /ip firewall interface-list add list=transport interface=ether1 add list=transport interface=tun0 add list=lan interface=ether2 ad...

Well, now I can tell myself that I had a mistake in PBR :) After modeling the same scheme on debian linux, I've realised, that I didn't use "ip rule" in routeros. After that, I've spotted the /ip route rule and life is became great again =) /ip rule add src-address=1.1.1.1 action=lookup ta...

if IPsec policies are enabled after testing GRE tunnels (ping or etc), but before iptables timeouts connections (/ip firewall connections print where protocol="gre"): all working as expected - policies working, traffic encrypted and goes through the expected interfaces. Maybe some routing ...

Hi, I have an issue with PBR, that does not working after enabling ipsec in transport mode: sever.png I have 2 ISP in Offices A and B and I am using GRE tunnels with OSPF in order to have backup channel in case of ISP troubles. So, in order to have both working tunnels I am using PBR, that works fin...