SimWhite, nuffrespect, w0lt, snake27, Hyperlight - Please try to add a new firewall rule at every end of the tunnel and see if it starts to work properly? The rule should be located at the top (at least before drop rules) of input firewall filter rules chain (/ip firewall filter add chain=input act...

SimWhite, nuffrespect, w0lt, snake27, Hyperlight - Please try to add a new firewall rule at every end of the tunnel and see if it starts to work properly? The rule should be located at the top (at least before drop rules) of input firewall filter rules chain (/ip firewall filter add chain=input act...

On another remote router (mipsbe + wireless) - nothing -> no gre in Connection tracker with 6.45.1. > Tunnels DOWN

The same on the CHR side.

I just tried to create GRE-tunnel without IPsec between 6.45.1 versions on external IPs and disabled firewalls. GRE interface gets the "running" state on the one side but on the other side it does not start. When the 6.44.3 on the other side everything is working fine. CHR is used on the s...

Is this just GRE or GRE over IPSec? Possibly an IPSec issue?

Both.

GRE tunnels won't start anymore between 6.45.1 versions. But 6.44.3 <--> 6.45.1 are working fine.

1. Could someone explain how Static DNS works? When I try to disable system DNS in IPsec Mode Config and set something in static DNS field my iOS/Mac devices didn't get DNS at all. 2. Why IPsec packets comes from the outside interface? It is a correct logic? I mean every packet coming from client (1...

I can't wait to start using the interface lists feature - this is an excellent addition to ROS because now it's easy to make a true zone-based policy configuration that is independent of physical interface names - just add/remove interfaces from the policy! Could you explain what are you talking ab...

Please explain how domain name to address-lists works? Does it resolve it just once while address list created or on every query?

Here is temporary workaround.

This question to the Mikrotik team. Do you have any plans to release router like RB951G-2HnD with 802.11ac support?

Hello, my english is not so fine but I'm trying to explain my problem. I trying to setup L2TP/IPsec connection between two Mikrotiks. There is a client with dynamic WAN IP on the left side and the server with static WAN IP on the right side. Also there is mobile phones as L2TP/IPsec clients. On the ...

Hello everyone. Does anybody make a VPN perfomance tests between Mikrotik and Linux connectivity? I mean PPTP vs. IPSEC vs. OpenVPN. What type of VPN is faster?

I can post some scripts as examples of someone else doesn't beat me to it.

I'm really sorry, but could give any examples?

I'm on my phone now, but I can post some scripts as examples of someone else doesn't beat me to it.

I will be much appreciated.

Hello, could some explain, it is possible to establish Site-2-Site IPSec VPN using domain names of the endpoints?

Hmmm.. I can't find this option on x86.

Hello, I'm a newbie with Mikrotik devices and have a question about IPsec with Cisco. When I setting up an IPsec Site-to-Site tunnel between two Cisco devices, I can use two tunnel endpoints which is will be working as failover, i.e.: crypto map blabla 1 set peer 192.168.1.1 crypto map blabla 1 set ...

Already tried the same variants as at previous post.

Doesn't work for me. I need to find domains like ".local", I tried: No chance.

I'm trying to use ".tld$" (without quotes) regex for selecting top-level domain at layer7, but Mikrotik doesn't understand it? How should I fix it?

I have two Mikrotik routers (951g-2hnd) connected to each other via ethernet. As I understand if I will be using WDS for extending WiFi coverage, my routers will be using WiFi for communicate between themselves, but I want to use ethernet link instead of WiFi, could someone provide example configura...