Hi, for a project my routers need to contact a central server via https on a regular basis. The tool "fetch" allows to verify the identiy of the server (" check-certificate"). All our routers for this project are equipped with individual certifcates. So it would be possible for t...

Do you really meant "dst-port=27000-2760" and not instead "dst-port=27000-27600"?
If this was a typo, it might be part of the problem.

TCP-RST are typically sent when either no server process is running on that port (8080 in your case) or some access control (iptables/firewall) actively rejects the connections for some reasons. It also happens when the TCP state machine runs into a timeout while expecting another packet from the re...

If it is only the Chrome browser that spits that out - you might find this article helpful: https://sslmate.com/blog/post/ct_redaction_in_chrome_53

There seems to be a bit much networks defined in DHCP servers which might be confusing. I suggest to start freshly - delete all dhcp-server network entries and all other dhcp-server configuration - including related ip-pools. Then configure your interfaces so that they are correctly switched togethe...

If you have multiple VLANs, you (typically) have also multiple IP networks, which requires routing to work. So if you have devices that can not do routing (you can't set a default gateway and you can't configure static routes on them), then these devices can not open connections to anywhere but thei...

Check these Wiki articles: http://wiki.mikrotik.com/wiki/Load_Balancing_over_Multiple_Gateways http://wiki.mikrotik.com/wiki/NTH_load_balancing_with_masquerade It gives you the method to share the load between two links (coming with different IPs) from different ISPs. Be aware that you can not achie...