/interface bridge add name=bridge vlan-filtering=yes
Both on same interface?My ISP gives the IP address - DHCP.What is connected to ether1?
And i have second ISP with static IP. Static work fine.
/ip firewall nat add chain=srcnat action=src-nat src-address=your.vlan.10.range/24 dst-address=0.0.0.0/0 to-address=your.public.ip-forVlan10 out-interface=ether1
Have you seen this?Could you give me some examples of configuring vlans in switch chip and inter-vlan routing please.See
https://wiki.mikrotik.com/wiki/Manual:S ... p_Features (+examples)
/ip settings set rp-filter=strict
Matches connections per address or address block up to and including given value.
connection marking? You would still have 3 tunnels on the "x1" side but all three using same endpoint.I don't think so...
because how do I "tell" the tunnel to go with ADSL 1\2\3?
/ip firewall filter add action=accept chain=test dst-address=!192.168.88.10
/ip firewall filter add action=fasttrack-connection chain=forward connection-state=established,related out-interface=ether1-kabelnet
... slower ...This works well. I use a 5 minute time and have no issues. There is almost nothing doing a keep-alive quicker than that.
0 ADS 0.0.0.0/0 120.148.AAA.BBB 1 1 DS 0.0.0.0/0 192.168.8.1 2
/ip firewall nat add chain=dstnat action=dst-nat to-addresses=10.100.200.99 protocol=udp dst-address-type=local dst-port=1194
/ip route rule add dst-address=192.168.1.0/24 table=main add dst-address=192.168.2.0/24 table=main ...
dhcp protocol is in UDP, based on IP, and using broadcast ip's when necessary.DHCP broadcast, request, etc is layer 2, firewall is layer 3 of OSI model
There a wiki for that https://wiki.mikrotik.com/wiki/Manual:I ... :1_mappingTypically used when you have like lots of users / devices behind a NAT to prevent running out of port numbers (PAT) for a single IP NAT but not typically for 100 users/devices, never tested, but maybe: