At the very beginning You should enable NAT Traversal. It uses UDP port 4500.

To connect via console through Your USB -> COM cable You need additionally a Null modem cable. Have You tried a Mikrotik Netinstall?

To enable firewall on the Brige (Winbox) go to Bridge > Settings and mark 'Use IP Firewall'. If You need more help You should paste config or picture of Your network.

Port knocking on mikrotic is described here:
http://wiki.mikrotik.com/wiki/Securing_ ... rOs_Router

You can use Netwatch script to disable VRRP interface when ISP is down. Then You can remove iBGP cross link. This solution isn't perfect, but should works.

Your modem is not present on thist list:

http://wiki.mikrotik.com/wiki/Supported_Hardware

If You are desperated try to change Data Channel and Info Channel. Go to Interfece ppp, press Advance Mode button and get lucky.

Now try one you WANT to work: 172.16.100.0/24 Rule 1: 172.16.100.0/24 IS a match, so invert that = FALSE - rule fails, proceed to rule 2 Rule 2: 172.16.100.0/24 does NOT match 172.16.101.0/24 - invert that -> TRUE - Action = Discard So, rule 2 drops the stuff rule 1 should keep, and rule 1 drops th...

Thank You, everything is clear now. I have had no idea that routing filter works like the firewall. Your both propositions are understandable, but I will stay with my rule "add action=discard chain=only_local_out invert-match=yes locally-originated-bgp=yes" because it is not sensitive for ...

If You use bridge, you may have similar issue:

http://forum.mikrotik.com/viewtopic.php?f=13&t=94876

Below working example of PCQ - limit download stream to 1 Mbps, WAN interface is ether2. 1. Define a mangle to mark what traffic You want to limit: /ip firewall mangle add action=mark-packet chain=prerouting in-interface=ether2 new-packet-mark=client_download 2. Create queue type: /queue type add ki...

Is it a known/unknown issue?

http://forum.mikrotik.com/viewtopic.php?f=14&t=94850

In my opinion You don't need to modify front_nat_network router. I have an example configuration made on Cisco devices. On Mikrotik it should be the same.
Routers configuration below.

Try "NAT Traversal" in IPsec Peer configuration.

Hi, I have three routers: "11", "12" and "13" connected as in the picture, running eBGP. I do NOT want to redistribute routes from router "13" to "12". Pict1.png I have prepared routing filter: add action=discard chain=only_local_out invert-match=yes...