Same here. It seems to be a bug..

RSTP on bridges still blocking traffic. Two RB951g connected with VLANs declared on bridges. Traffic doesn't pass while RSTP is enabled. If it is disabled everything is fine. Going back to 6.37.4 bugfix fixes the issue. So, what is the problem? Can anyone clear this issue? This started with 6.38. I ...

VLAN interfaces that have a bridge declared as a belonging interface don't work anymore. You need to declare a physical interface instead for it to work properly. It worked ok in previous versions. At least in RB951G-2Hnd Same problem with CCR1009-8G-1S-1S+, VLAN port belongs to bridge and doesn't ...

VLAN interfaces that have a bridge declared as a belonging interface don't work anymore. You need to declare a physical interface instead for it to work properly.
It worked ok in previous versions. At least in RB951G-2Hnd

I am trying to connect a Mikrotik router in station mode to an access point that uses PEAP and having some problems.
Can it be done in current routerOS versions?

One interface issue: System->resources is not refreshing in the web page.

It appears that v6.35.1 breaks the OID for /system health voltage monitoring (OID .1.3.6.1.4.1.14988.1.1.3.8.0). This was working in v6.35 (and prior). [arosen@admin ~]> snmpget -v 2c -c XxXxXx 172.12.23.1 .1.3.6.1.4.1.14988.1.1.3.8.0 Error in packet Reason: (noSuchName) There is no such variable n...

Asuming I had ca misconfiguration this should happen with every ISP. When I connect using one ISP it works and with another one it doesn't(actually with another two both mobile) Now that I look through the logs I see the same errors and it still connects. It seems it tries different authentication p...

No, it's obviously not that . It works with the exact same settings from a different ISP. I have noticed this happens with mobile operators.(don't exactly know why)
I did something else and it seems to work now. I manually declared 0.0.0.0/0 peers and disabled ipsec secret in L2TP server.

I have a problem when setting up a dial-in L2TP/Ipsec server. I set it up by entering ipsec secret in L2TP Server so that it automatically generates policies. The problem is that it works when connecting from certain networks.(ISP networks) but when connecting from mobile ISPs I can't connect and I ...

I plug my router into a switch which is connected to the isp router. This is also where router X connects.

Thanks but I just wanted to understand what can cause this so that I address the question to the right side: there is also the router that originates the traffic(X) which does not belong to the isp.

I don't quite understand what you are saying. The problem is that this traffic is not sourced by the router or destined to it because it doesn't go on any other interface. It is just on the one facing the internet.

I have an issue with an RB1100AHx2: I'm getting GRE traffic on the interface facing the internet. The traffic (seen with torch) is between a host on the same subnet as my router(both are connecting to the ISP router) and a different ip from the internet. It is GRE and since it is not meant for my ro...

No, I did GRE IPsec in transport mode(default mode) and it worked with the issue I mentioned.

NAT-T only works with IPsec tunnel mode and using ESP. No transport mode, no AH. Not really, L2TP/Ipsec is transport mode and works with no problems over NAT. I have been trying to get GRE over IPsec transport work over NAT-T and have not been successful. GRE over IPsec transport works OK without N...

PEER IPSEC >> INTERNET >> MIKROTIK >> CISCO CMIIW, you need to create an ipsec connection using cisco device? why dont you use mikrotik as an ipsec vpn gateway? if you want to use cisco as your VPN Gateway, you need to allow UDP connection 500, 4500, ipsec-esp, passthrough mikrotik firewall, and ma...

I have an Mikrotik device with a public address on an interface and I need to allow a cisco router that connects to it to establish ipsec vpn(it requires udp 500, udp 4500, ipsec-esp). I have done dst-nat from the public address to the local one(cisco router) and masquerading for the outgoing connec...

Thanks a lot.
I went for the second choice which seems cleaner and I have used it in other programming languages. I just didn't know there was a length function in the scripting language.
Thanks again, I've been struggling a bit with this although now it seems extremely easy.

I need to do a simple test to check if a connection is alive. The connection has a connection mark and I just need to test if it exists or not. If it exists the script will send an email or log it. I have this: if ([/ip firewall connection get value-name=connection-mark [find connection-mark="K...

I don't need DNS locally or otherwise. So it is blocked in firewall and allow remote request are off like I said.
It is solved now. Thanks.

Well, changing the ip is not really a solution.
This is not such a big issue since this is used as a backup connection and the traffic
it uses is really small. I'll wait for it to stop.

Hi, I have a problem with a mikrotik router that has a 3g modem connected and gets a public ip. Starting 2 days ago I noticed traffic coming in through that interface. I did a torch on the interface and saw udp dns requests coming from..of course China. I then added a rule in the firewall to filter ...

So far I couldn't find an USB modem to do that.. you can do it with 3g modems though. I have read you can setup an ppp connection if you enable Ignore DirectIP Modem option but it didn't work for me. I think the best way to do it is to use a 4g router with it's own mobile interface and put your sim ...

Well, I'm starting to believe it can't be done using this modem. Or at least not without accessing its nat features(if there are any).
I'm gonna ask for a different modem from Vodafone when I get the chance and request that it is able to do NAT...can't think of anything else.

I get a private address on the LTE interface(192.168.9.0/24 class) I can't tell you if it is pppoe. The interface allows you to declare apn, user, pass. There is no forwarding option in the modem interface. Or at least not directly accesible. This is what surprises me because what is the point of ha...

I have an issue trying to setup a ZTE K5008-Z modem from Vodafone on a RB951-G 2HND router. The modem detects the LTE interface and I am able to get DHCP address from it. Also I can access the internet using this connection after setting a default route. My problem is that I have a static IP from Vo...