hello friends please i need help, i have a mikroutik hap ac2, i had plug it to an ISP modem that give to the WAN interface a DHCP address 192.168.1.25… the probleme, i can’t ping from my lan this address. the config line are : ip address print Flags: X - disabled, I - invalid, D - dynamic # …

Little detail, remove b (leaving only 2ghz-g/n) and something strange happen on NAT: masquerad"ipsec output is traffic GENERATED from rotuerboard, not from any devices on all the networks! Paste this, fix all what I have easily noticed, do not omit the { } !!! { /interface wireless set [ find de…

Little detail, remove b (leaving only 2ghz-g/n) and something strange happen on NAT: masquerad"ipsec on the firewall filter the output chain should be ignored, except on rare occasions. output is traffic GENERATED from rotuerboard, not from any devices on all the networks! Paste this, fix all …

paste this, but do not move the rules on top: /ip firewall filter add action=accept chain=output dst-port=500 protocol=udp add action=accept chain=output dst-port=4500 protocol=udp add action=accept chain=output protocol=ipsec-esp

paste this, but do not move the rules on top: /ip firewall filter add action=accept chain=output dst-port=500 protocol=udp add action=accept chain=output dst-port=4500 protocol=udp add action=accept chain=output protocol=ipsec-esp i had added it, and not move it on top, but still don't UP, …

export again yes my dear, export # aug/06/2021 14:33:18 by RouterOS 6.47.10 # software id = # # model = RBD52G-5HacD2HnD # serial number = /interface bridge add admin-mac=zz:zz:zz:zz:zz:zz auto-mac=no comment=defconf name=bridge /interface wireless set [ find default-name=wlan1 ] band=2ghz-…

Ok the key is the NAT what output you have to /interface print ?

Ok the key is the NAT what output you have to /interface print ? for address : ip address print Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK INTERFACE …

ok paste this, do not omit { } this restore previous rules on first export try to disable / enable one at time on winbox the first two rules (do not disable the last) the third are already disabled on first export { /ip firewall nat remove [find] add action=accept chain=srcnat dst-address=10.14.…

ok paste this, do not omit { } this restore previous rules on first export try to disable / enable one at time on winbox the first two rules (do not disable the last) the third are already disabled on first export { /ip firewall nat remove [find] add action=accept chain=srcnat dst-address=10.1…

i can't ping wan interface from LAN

RouterOS Beginner Basics

rextended August 6, 2021, 1:37pm 26