Hi, I've tested fresh installation of router (CHR, 7.0beta4) and basic setting for OpenVPN over UDP (no radius, statically set local and remote IP, almost everything left in default settings) and I was able to connect and send/receive data over OpenVPN. However when I've tried to upgrade from latest...

you can count attempts in mangle prerouting chain. I do not think the Mangle section will be the right place for such a rule. I am suggesting to use firewall raw section with dst-limit parameters. I won't argue with you, you're probably right. This is how I configured and solved similar problem whe...

Hi,

you can count attempts in mangle prerouting chain. There is dst. limit in Extra tab when you can set rate to 5 / hours and set action accept for this rule. Then you have to add another rule that simply puts abusive IP to some address list which you will block.

There is only "login failure for user ... via api" in logs. I've tried to change user password in Mikrotik and edit script with new password with no luck (using Python3). Then I've tried to login without any password and it worked !! :shock: Now I can log as any user stored in system via a...

Hi, thank you, I can confirm, that with latest beta (6.45beta54) it works also on Android Strongswan client. However upgrading to this beta version brakes logging to server via API (using username and password) which works on other mikrotiks (v6.44.3) and I didn't find anything in changelogs regardi...

Hi, sorry for delay :) here is config of server related to IKEv2 /ip ipsec mode-config add address-pool=vpn-dynamic-pool address-prefix-length=32 name=rw-conf split-include=0.0.0.0/0 /ip ipsec policy group add name=rw-policies /ip ipsec profile add dh-group=ecp256,modp3072,modp2048,modp1024 enc-algo...

Hi, I've managed to configure MikroTik (v6.44.3) as IKEv2 server with authentication users via eap-radius and it is working on MacOS, Windows 7/10, Linux (StrongSwan) as clients, but I can't get it work on Android using Strongswan application. Server has certificates generated from Let's Encrypt and...

Hi,

thank you for info

Hi, I've noticed strange behaviour while setting PPP's profile rate limit via terminal (or script) - every change also removes on-up and on-down scripts. When I change it via Winbox, scripts remains as they were. I assume that it is not correct behaviour, isn't it? This problem happens on ROS 6.3x.x...

I've disabled antivirus and firewall and ran program as administrator. Still no luck. I can see that netinstall does something when these tree LEDs on mAP flashes two times fast but no new device is in list. Is it correct to use the only one ether port on mAP for netinstall ?

Thanks for answer. I've been holding that reset button almost for 2 minutes and still nothing in Netinstall - just my hard drives. I've followed all steps I've found. Power off the device connect patch cable to ether port (there's just one) and directly to PC (set static IP on PC iface and set clien...

Are there any other options to factory reset this device?

I've been holding reset button during boot until other 3 LED flashes.

Hi,

does somebody have issue with factory reset of mAP? I've tried several times, but every time I want to login as admin with empty password (connected to its wifi) it failed with wrong username/password message.

I've already read many threads here about requests for UDP support for OpenVPN and I wasn't able to find one explanation why it is not supported or why it is not planned to be supported :-/ It's really shame :/ So count me as another customer "begging" for this feature. I think there is p...

I've already read many threads here about requests for UDP support for OpenVPN and I wasn't able to find one explanation why it is not supported or why it is not planned to be supported :-/ It's really shame :/ So count me as another customer "begging" for this feature. I think there is pl...

Works like a charm, thank you very much

Thanks for replays... :-) I've already set use-ip-firewall=yes in /bridge level but it doesn't change the fact that rules are applied for whole bridge and not for specific interfaces in the bridge... I will try RafGan's asap :-) and let you know how it works for me. And let me extend this question. ...

Hi guys, I really need your help and wisdom :-) Let's say that I have RB751U with 2 virtual APs created. Both VAPs and ethernet ports are bridged in one local-bridge. Is there any chance to separate clients connected to first VAP and clients connected to second VAP?? Or is there any chance to set di...