I have to use VLAN tagging on the WAN port for my internet connection to work. While absolutely not a dire necessity, it would be nice to see my public IP in the QuickSet page. But I can only choose from the two interfaces eth1 and sfp1. Is it possible to add my VLAN interface to this list somehow?

Hi Gurus, I just had something very strange happening on my Mikrotik 4011 Router and I hope someone can give me context. To explain what happened and confused me, I'll just mention the configuration of the relevant parts. I had WAN access (dhcp) through eth1, Ports 2-4 and 6-9 are part of the same b...

Thank you, sob, for the very welcome nudge. I followed your instructions and no traffic would pass between the router and the wAP. So I disconnected my wAP from the TP Link Switch and attached it to the Mikrotik switch. Now, pings would work in both directions. Clearly, the second switch was the pro...

While I have dabbled in SoHo-Routing for quite some time, this is the first time I'm trying to use VLANs. Thanks for your patience if something shouldn't be immediately clear to me. Having said that, I have done some extensive research before asking this question. I read through the various official...

Sorry for reviving such an old thread but it's the first result in Google for "mikrotik duplicate firewall rule" and it's not complete. Unless I'm missing something, the copy command is only available in Winbox. It would be nice if the web interface for RouterOS also allowed rules to be du...

Hi Matta, if one believes that the information provided in the Mikrotik POE out manual is complete, then there are basically 2 possible reasons for your problem: Either the POE port on the cameras don't have the correct resistance, or your cable quality is not sufficient. What I'm also noticing is t...

@r00t, thanks for chiming in. I was in the middle of editing my previous post so didn't see yours before sending it off. It indeed looks as if 802.3af devices (needing not more than 40V) can be powered fine as long as a 48V power supply is attached to the router or the injector. Concerning PDs with ...

Today, I put all theories to the test. I received a new POE switch (non-Mikrotik) and used the enclosed 48V power supply to power my Mikrotik RB4011. Of course, I checked the output voltage and power, all fits, and so does the plug. After all the discussions, it didn't come as a complete surprise th...

Active POE has some kind of negotiation, so it will clearly be more complicated to add that. That's the question though, isn't it? 802.3af is active POE. According to the standard, a negotiation takes place between the PSE and the PD to determine the power class of the PD: Class 1: PSE sends 4W Cla...

later it was only lower-voltage passive POE. Most likely because wireless CPE on the roof didn't need anything fancy, so passive POE was good enough. That was my original assumption, too. That's why I was quite surprised to see that even very recent products such as the RB4011 and the RBS260 "...

One simple check of the specs would have seen that your PBX is 48V and the Mikrotik units you tried are 24V. if you know that 802.3af means 48V and that passive POE may mean less, then yes, I agree. If you, like me, don't know that POE from vendor X means something else than POE from vendor Y, you'...

No offense taken, on the opposite, I agree. It is a lack of understanding. Hence my hours of research, hence my questions here - yet to be answered. With regards to being standardized or not, it makes a big difference. Switches and routers made for the SOHO market, such as the RBS260GSP, will most l...

Which standards? Wikipedia: Standards-based Power over Ethernet is implemented following the specifications in IEEE 802.3af-2003 (which was later incorporated as clause 33 into IEEE 802.3-2005) or the 2009 update, IEEE 802.3at. Mikrotik devices can power each other with Passive PoE Wikipedia: Passi...

I recently received a hardware PBX that can only be powered via POE. No problem, I thought, my RB2011Uias supports POE after all, and the required 11W the PBX needs should be no problem to supply. But no matter which cable I used, the PBX just wouldn't start up. I still had a RBGPOE injector lying a...

It looks like there could be a bug in RouterOS or the documentation is faulty. According to the Manual:Scripting , the policy "policy" is necessary if the script needs access to user policies. This information doesn't seem complete. As is explained in Manual: Router_AAA , the policy "...

Is it possible to connect two Mikrotik Routers using Nv2 and have each Router also accept Wi-Fi clients? Internet ----> Router 1 ----(Nv2)----> Router 2 \ \ \----> WLAN1 \---->WLAN2 What would be the maximum transmission speed that can be achieved between the two routers?

You know that internet must enter in the WAN port... Sure. No mistake there. It's not actually internet but the wired connection to the other subnet (192.168.0.0/24) which in turn is connected to the internet. Anyway, a export of configuration might help. I didn't export anything because it's all d...

It's very possible that this question has a simple answer but I probably didn't use the correct search terms so I couldn't find anything appropriate. I have the following configuration: Internet -> Cable Router (third party) @192.168.0.1 -> DMZ entry pointing to Mikrotik Router @192.168.0.240 ->Mikr...

Almost 2 days waiting for my reply to be posted.. very poor moderation here. Anyway, I found a workaround in the meantime. I just disabled the rule "FastTrack Forward" in the Filter Rules list, and voilà, the port is being properly forwarded. Is it possible to keep fast track on and to sti...

[admin@MikroTik] > /ip address export # dec/15/2015 17:46:41 by RouterOS 6.32.2 # software id = 0PSH-3MGN # /ip address add address=192.168.1.2/24 comment="default configuration" interface=\ ether2-master-local network=192.168.1.0 [admin@MikroTik] > /ip firewall filter export # dec/15/201...

I want to forward requests to port 2222 to port 22 on internal machine. I created the rule in WebFig, but it's the same as: /ip firewall nat add chain=dstnat protocol=tcp dst-port=2222 \ action=dst-nat to-addresses=192.168.1.100 to-ports=22 I can ping the external address of the router just fine but...