Yes; LLDP-MED: See forum; viewtopic.php?t=192169

Yes the CRS1xx are special ones with switchchips which need more loving in the /switch menu. We use them only for simple desktop switch with normal birdge config with hw=no. CPU is not a bottleneck for our use but I can imagine it will be with so many vlans and high load of them. https://help.mikrot...

You mean voice network with LLDP. That's a hidden feature we long awaited for which you can find in IP/NEIGBORS for quite a while now. https://help.mikrotik.com/docs/display/ROS/Neighbor+discovery#Neighbordiscovery-Discoveryconfiguration As long you have your ports tagged with the voice-vlan and use...

The Cisco most likely wants to seperate SA's
Try to set both policies to level=unique

I also have mixed results with fasttrack on my HAPac - I use it as main router on my home netwerk with a PPPoE WAN port. Sometimes when rebooting it works and I can get fullspeed internet 500Mbit+ sometimes it doesn't and only have a download speed op 20Mbit but upload is still OK. Then I just disab...

All major hypervisors support ova templates - Yours should as well. The more clicks you can save as admin the happier they should be that they get a ova instead of something else. But before the ova download option we used to download the disk itself, and they are still provided like that (vmdk, vmd...

You can add a default gateways in the main routing table? Use higher metrics as fallback in the main table. Or you looking for so it works with all connections? Then you can mangle. Take a look at : https://www.youtube.com/watch?v=67Dna_ffCvc / https://mum.mikrotik.com/presentations/US12/tomas.pdf W...

PPPoE internet, fasttrack enabled, with a hAP ac. CPU around 70% .. Max out my ISP speed. Cant test more.
Get around 200/200 without fasttrack on this board.

Sometimes the board needs a second reboot before fastrack works, PPPoE/Fastrack sometimes bugs out or something.

..or point your internal (Windows) DNS server (forward zone) so that mail.domain.com points to the internal IP of your mailserver.

Should be there since 6.38: What's new in 6.38 (2016-Dec-30 11:33): Important note!!! RouterOS v6.38 contains STP/RSTP changes which makes bridges compatible with IEEE 802.1Q-2014 by sending and processing BPDU packets without VLAN tag. To avoid STP/RSTP compatibility issues with older RouterOS vers...

Since we are asked to make a new topic and there already is one. @TomjNorthIdaho: Does your ether1 have a static IP bind to it, and the DHCP is still coming back? Then it does actually sound like a bug. RouterOS should never change a configuration on its own.. Cause on my test CHR's (RC20>) we CAN N...

I think I found a bug The problem is on every reboot, the Mikrotik CHR auto injects a dhcp-client option. There must be a little more to it, as on my CHR (which has ether1 and ether2 both with static address and no DHCP) I cannot reproduce it. Can not reproduce it either. It does however create a D...

Well both your portfowards are exactly the same, so both should work. 2 chain=dstnat action=dst-nat to-addresses=192.168.1.73 to-ports=64738 protocol=tcp dst-address=88.159.162.39 log=no log-prefix="" 3 chain=dstnat action=dst-nat to-addresses=192.168.1.73 to-ports=64738 protocol=udp dst-a...

The interfaces looks fine, something not working? By the looks of it you have a bridge with slave (S) intefaces ether2-5 and ether1 is not in the bridge so can be configured as WAN port. But with only this screenshot nobody can tell if you configured the router correctly. The default config is actua...

So that works, then it should be working already! Hmm.. Your NAT rule doesn't have any hits at all? Your FW/filter rules are a bit messy. In a way they should be allowing all forward traffic as it seems. Number10 is not default - That action should be DROP This is default forward drop: filter add ch...

but this "add action=dst-nat chain=dstnat dst-port=80 in-interface=ether1-gateway protocol=tcp to-addresses=192.168.88.125 to-ports=80" Does not work - 192.168.88.125 is a real address - but I cant check for an open port on 80 wiht this rule ... How you check this? Does 192.168.88.125 act...

Change your line to:

/ip address
add address=192.168.88.2/24 interface=bridgeLocal network=192.168.88.0

Then it should start responding.

From your router, can you telnet to 192.168.1.73 on port 64738?

/system telnet address=192.168.1.73 port=64738

If not it is either a firewall on the endpoint or the port is not used by Mumble.

These work, the last three, cause they have a destination --> to-addresses. add action=dst-nat chain=dstnat dst-port=80 in-interface=ether1-gateway protocol=tcp to-addresses=192.168.88.125 to-ports=80 add action=dst-nat chain=dstnat dst-port=1900 in-interface=ether1-gateway protocol=udp to-addresses...

I noticed when using VMXNET3 and having a 10Gbit link there is a 'incomplete' status message at auto negatiotion, see attachment.
Is this something known?

The most important reason to install VMware tools are the (virtual)drivers. And since its a router it basically just needs NIC driver support, and they already implemented the VMXNET3 driver. It does not need a mouse, graphics or paravirtualscsi drivers, shared folders from console, ect. It is a rou...

First of all, thanks for the list! Been using it for a while and started to use it on costumer routers as well! Appreciate all the hard work! Today at work we noticed a (strong) increase in upload from the router and noticed that Winbox was constantly keeps loading all records in the firewall/adress...

*) lte - added initial fastpath support (except SXT LTE and Sierra modems);

Any updates when we can expect fastpath support for PPPoE Client interfaces?

I don't know what I did wrong before but it seems to be working now with the basic setup. @vilts: Config on the CHR doesn't show anything wrong, I pretty much have the same setup. Looks like the logs say it is established so maybe its your client? Maybe you stil need to add https://support.microsoft...

I would also like to know a example config. It still doesnt seem to work in 6.38.1 to get L2TP-VPN working behind NAT on Mikrotik..

Upvote, +1

Found some dead links on https://www.mikrotik.com/training/, all 'view outline' (PDF documents) are unavailable.
(https://www.mikrotik.com/pdf/MTCNA_Outline.pdf / ect)

My 2 cents: Then you should just ask from the cisco guys what they expect from you to configure?! If they only expect a external address over the 'tunnel' it sounds to me you just need to make a client-vpn with them? (PPP --> L2TP/ipsec ?). Then you get a new interface with a network-address from th...

If your tunnel is up, fase1 and fase2, and your policy is set right is should work with a clean router setup. Reason its probably not working is you have a srcnat/masquerade rule which 'overrules' your traffic so it wont be send to the tunnel. Either make a exemption in the masquerade rule to not na...