https://wiki.mikrotik.com/wiki/Manual:I ... hop_lookup
https://wiki.mikrotik.com/wiki/Manual:U ... attributes

MAC connection is fragile and is only to be used for setting up IP address. Then you can reconnect and use the device normally. MAC is only for emergency access.

I dont need connect to router, i can do it. I need connect to last router LAN.
I need two VPN connections on one IP, but for two devices.

First vpn is working fine, it is my management vpn. But i need another connection directly to last routers lan.

I'm stuck almost for months now looking for the solution but still no luck.

Thanks for your suggestion, but sadly it did not help.

This seems to be a common pattern, looks like it's pretty much impossible to achieve more than 250-300 Mbit/s real world single client throughput with Mikrotik ac WiFi.
In case you ever manage to break this limit please let me know how you did it

Synchronize time on routerboard with ntp client or manually ?

With ntp client!!!

I don't think you can. You can block some with L7 like this:

Code: Select all

/ip firewall layer7-protocol
add name=proxy regexp="^(CONNECT\\ .*|GET\\ https\?:\\/\\/.*)\\ HTTP\\/1\\."

But it's far from perfect.

Does nobody have any Idea ;(

Sorry this discussion is NOT to include mangling LOL.

So if I put a vpn server under a public ip pc or routerboard I could connect the sxt routerboard to that server and example Android phone to same server and then with this" kind of bridge " see sxt contents with Android phone and viceversa ?

Wow, okay that is good to know. I wonder why hotspot functionality bypasses NAT rules??

really hoping someone can point out what I'm doing wrong

Hi
Can you please help me how to do Dynamic nat of apporx 100 private ip with /24 public ip pool . thanks

I do nor heva any limitations in filter

Okay, 50% of mystery solved
Why is then my connection working even while I'm not allowing ipsec protocol (50) on input chain?

It's not possible, because I need 3 ethernet port for our project, and a mPCI used for LTE with R11e-LTE.

It is why I need to add a port or a way to communicate with the board.

Regards.
Olivier

But that whats the point of this, i ran it 3 times and got all my ports listed 3 times before mikrotik blocked it, "attacker" already have all it needs.

GENERAL TAB
chain:forward
protocol:6(tcp)
dst.port:3389
ACTION TAB
Action:accept
And my remote desktop still not works:( thanks in andvance for help.

Hello,

How can I block DHCP lease for specific mac addresses?

Hey thanks for the reply!
I will need like 30 - 40Mbit/s.
Do you guys think that I will achieve this speeds?

Many thanks to all.
Kind regards

i dream an rb750GR4 on this chipset

Hi,

Would you mind explaining me a little what these ratio does?

I'm a bit noob. How do I do that?

I have all 3chains enabled and no problems with restart. Maybe you have problem with power?

Hi yeah thanks for pointing that bit out, thats the bit I already know how to do

What main crux of my question was how to do this with a dynamic public IP address at both ends.

L2TP is layer 3.

Just add 2 rules in firewall filter on the top of the forwards rules:

These are completely unnecessary. You should NOT add them because they don't do anything that isn't done already.

please help me......

this is not working
how to block arp responses (reply) from clients to clients ?

Yes, as it's a 1 chain radio, TCP Mbps will be around 50-70Mbps max.

Try this :
First put the power, after 2-3 seconds press the reset button and after 5 seconds release it and see if you will initialize the flash!
I use 10.0.0.1/24 for PC lan adapter and 10.0.0.2 for PXE .

I said in my post that my router was running now.