As far as I can tell there are no plans to implement L2TPv3 in near future.

Thank you for your reply!
Could you please tell me - are there any plans for implementing of any other multi-vendor EOIP capable technology? i.e. vxlan/gretap

Hi, any news about this?

A lot of APIs need custom headers for authentication.
Please, add ability to specify them.
Thanks!

Going to switch my RB750Gr3 + 3rd party AC AP with this device.

Good news!
Will bridge on MT7621 have hw offloaded vlans?

Hi, Mikrotik team. Thank you for USB port in RB750Gr3 and for MosChips MCS7830 driver in RouterOS. Now my Hex has 6 Ethernet interfaces and it works perfectly. I wonder, will hardware like this work with Mikrotik? http://www.ebay.com/itm/USB-3-0-to-1000Mbps-Gigabit-Ethernet-Network-Card-Realtek-RTL8...

This module is absent in Linux mainline kernel, also Mikrotik EOIP is not supported on other devices/software.

Today I hit an issue - Mikrotik does not support no one of well-known open EOIP standards. In Linux we have: gretap: http://backreference.org/2013/07/23/gre-bridging-ipsec-and-nfqueue/ vxlan: https://www.kernel.org/doc/Documentation/networking/vxlan.txt L2TPv3(l2tp_eth): https://remote-lab.net/linux...

Hi! So, I have a rule: add action=mark-connection chain=prerouting connection-state=new dst-address=1.1.1.1 \ dst-port=80,443 new-connection-mark=web passthrough=yes per-connection-classifier=src-address:2/0 protocol=tcp Packets counter increases, when I connect from Internet and not increases, when...

Thanks guys for fixing CPU profiling on mmips devices.
I hope implementing hw switch functionality will be next

You may try this:
http://www.mikrotik.com/download/changelogs/

Quickly tested tunnel mode: Strongswan->Mikrotik direction: [ 3] 0.0-10.0 sec 222 MBytes 186 Mbits/sec Mikrotik->Strongswan direction: [ 3] 0.0-10.0 sec 193 MBytes 161 Mbits/sec Firmware: 6.37.1 So, slowness of ipsec could be either firmware version related or Strongswan<->Mikrotik pair related. May...

@kvic, thanks for tips, I'll make pure IPSec(tunnel mode) in nearest few days.

@bedior I'll make L2TP+Ipsec test also in nearest few days.

@janisk sorry, but my tunnels are AES-128 - please see my first post with my ipsec config.

Updated results with GRE-over-IPSec: 1) [strongswan_server]>>>[rb750gr3]>>>[plain_server] iperf -c <ip_of_plain_server> -B <ip_of_strongswan_server> -t 30 -l 1400 ... [ 3] 0.0-30.0 sec 550 MBytes 154 Mbits/sec iperf -c <ip_of_plain_server> -B <ip_of_strongswan_server> -t 30 -l 1400 -P 10 ... [SUM] 0...

I'll do these test either today evening or(more probable) tomorrow morning.

What about RB750Gr3 + http://wiki.mikrotik.com/wiki/Supported ... less_cards ?

P.S. Sorry, this will not work:

Note: RouterOS v6 does not support any USB Wi-Fi adapter

Thanks for tip, I'll test with more powerful server in local network with hex. (CPU is loaded for about 30% on strongswan side, but who knows)
P.S. I'm using transport mode, i.e. gre-over-ipsec, hope this could not be an issue.

My IPSec tunnels are built between hexv3<->strongswan
Is there a way to improve throughput in my case?
What about other two questions?
Thanks!

P.S.
@mrz, could you please share IPSec config(without confidential information, of course) and RouterOS version from your tests?
Thank you in advance!

I boght brand new RB750Gr3 aka new HEx. Upgraded to 6.37.1 RouterOS(also tried 6.38r15) 1) Switch functionality does not work - there is no vlan support, could not modify Ethernet header and so on. Example: /interface ethernet switch port> set 4 vlan-header=add-if-missing failure: vlan header mode n...

Hello!
Problem was resolverd - there was Proxy ARP on the server

Hello! I've found a problem in using vlans. There is: rb751g-2hnd OS 6.1 ethernet5 - server connected. Server has few vlan interfaces, for example we will use VLAN60. Server has address 192.168.60.254/24 on this interface. Routerboard configuration: Ports: [spoiler] [admin@home] /interface ethernet ...