i have 2 AS#, lets say AS0001 and AS0002 , my AS0001 is peering with AS1001 and AS0002 is peering with AS2002, i have made route objects at RIPE for both networks to both my AS#. The route objects at RIPE is XXX.XXX.XXX.0/24 for both AS# I want to use XXX.XXX.XXX.0/27 from location of AS0001 and i w...

I need to block certain devices from getting an IPV6 address, i have tried to add all possible icmpv6 options to drop for MAC address, but the devices still get an IPV6 address, which makes the device try to use IPV6 and services fails, i need to block the device from at all receive an IPV6 address....

I contacted my ISP and requested a IPV6 range, back i got this information: 2001:2c1:f2a2::1/64 PE = 2001:2c1:f2a2::1 When i ping from a remote location, i get answers from 2001:2c1:f2a2::1 before having anything setup, so i guess the ISP has the ip configured as GW already, how do i proceed to get ...

Would it be possible for Mikrotik to make Winbox 64bit compatible? joshaven.com usually has made a nice winbox-for-mac pack, but since MacOS Catalina MacOs has gone "all-64-bit" and now we (mac users) cant get it running any more, so could Mikrotik please make a x64 version of winbox, or even better...

At home i have a rb2011, and for travels i have a rb433 with 2 sets of wlan cards. At home i have several gre tunnels for administering networks / sites i manage (which works well when im home). But i would like to be able to manage these networks / sites when im on the road. I already have a ipsec ...

Works like a charm, obviously i over-complicated the whole ting

Thanks Sob, will try this in short time and "report" back

It is that part on the configuration im not getting, the 6to4 from router to router and setup of first ip(s)

Ive got a router with AS origin and an /29 announced ipv6 block, i would like to use 6to4 to send some subnets to another router via 6to4. Ive been reading lots of guides, but mostly they deal with ranges from he.net (tunnelbroker) to a router. Router1 info: RouterOS CHR example public ipv4 ip: 10.1...

Could it be an idea to add a submenu under system called notes, where single admins and / or multiple admins could leave notes and remarks regarding various stuff? i.ex. here this morning i wanted to start configuring for a site-to-site vpn between two boxes, the other box is shut down at the moment...

To clarify the part "cabling is not an option" I am renting the house, and the owner does NOT want any drilled holes anywhere, which i intend to respect. Though it would made things 200 times easier just to put a tube in the ground and put up network points here and there. I can only use existing ca...

Cabled / wired from house to garage is not possible / an option. The setup is planned something like in this picture. Cabled between isps modem and the first rb433 / rb493, cabled from rb433/rb493 to rb3011 and wireless from from the rb433/rb493 to the other rb433´s http://lnx.boskos.net/wan-lan-set...

Ive got 2 x rb433 and 1 x rb433ah, all 3 boxes contains 2 x R52Hn. My ISP provides upto 4 public ip adresses pr modem. Im moving into a house which has a rental apartment over the garage, and i would like that the rental apartment gets its own public ip on its own rb433 (with that making wlan1 wirel...

For some strange reason, all of a sudden the vlans started to work. I had some days i didnt have time to test, and sat down yesterday, tried to fetch ip via dhcp and there it came, im not sure what or how, but as the saying goes "if it works, dont fix it"

Thanks for all the help

Ive got a NAS on internal network (*.*.*.44 and would like certain ip adresses from remote location(s) to be able to mount shared folders from it. I generated the rules below add action=dst-nat chain=dstnat comment="Samba allowed 137 TCP" dst-port=137 in-interface=ether1 protocol=tcp src-address-lis...

Yes it was a typo, eth12 already have the following vlan interfaces eth12-vlan20, eth12-vlan30, eth12-vlan35, eth12-vlan37, eth12-vlan40 i have added the vlan interface eth12-vlan800 with no success the vlans 20-37 works fine, 40 is not tested. https://home.boskos.net/rtros/interface.png https://hom...

I´ve got a CHR 125, and on ether17 i have attached a cable from the iptv output on my ISP´s modem (this traffic is untagged on entry) This traffic i would like to get into vlan-bridge800, and make available to i.ex. eth12-vlan800. If i setup dhcp client on vlan-bridge800 it recieves configuration an...

Is there any news regarding metarouter on ARM ? (especially RB3011 series)

I will try to explain what i mean, since i dont remember what the function is called. Inside my lan i have some services (ip camera and some other services). These are forwarded in the routeros and works well from the outside, but If im on the lan connecting to my WAN ip:port i cant access them, i a...

ok - just to update this thread for posterity - I helped set the mangle rules to use connection-marking for the policy, and then set the mark-routing rules to match based on the connection marks, instead of trying to just mark the packets themselves. Thanks for all the help, awesome people, awesome...

If the /29 subnets from the ISPs are located on the GRE link, then you could actually remove the IP from the GRE interface and place it on the ether1/ether2/ whatever local interface you like, as GRE is a true point-to-point type of interface and doesn't actually need an IP on it directly. Just mak...

sbin/ip route add default via 172.16.100.10 dev gre_1 table 2 /usr/sbin/ip route add ???.???.???.??/29 dev eth0 table 2 /usr/sbin/ip rule add from 172.16.100.9 table 2 priority 2002 /usr/sbin/ip rule add from ???.???.???.?/29 table 2 priority 2002 The equivalent command in RouterOS is: /ip route ad...

I will try to explain this as good as possible. My configuration is a RB2011UiA , i have set ether1 as WAN1, ether2 as LAN, and ether 6 as WAN2 (for failover) i also have some gre tunnels, in tunnel 1 i have routed a /29 ip range in to me, and another /29 range routed in via another tunnel, in linux...