Questions on setting up new RB2011UAS-2HnD-IN

Hi all,

Got myself a new RB2011UAS-2HnD-IN just today, and have managed to get it up and running. However, there are a few areas I need help with and I hope you guys can guide me. Prefer to use the Web interface wherever possible, since I am not a command line person :smiley: . But I am open to learning, so will be nice to have guidance in both web and command line.

  1. DHCP Reservations - not working. I populated the MAC Address details of the devices and assigned an IP to each of them, but the devices are not getting the IPS I want them to.
  2. Firewall configuration - Does the device do basic filtering by default? Saw some excellent info on securing the device, but are there any guides to secure a home network?
  3. A media player connected to the FE port is complaining that it cant see the server connected to a GE port. Do the GE and FE ports communicate with each other by default? If no, how to enable this?
  4. How to configure OpenVPN client and NTP server on this device?
  5. Saw a cool guide in http://wiki.mikrotik.com/wiki/Manual:System/LEDS, how to make this work for the RB2011UAS-2HnD-IN?

Deleted because not related.

Thank you for your response.

I think you have misunderstood my question. I am trying to assign a fixed IP for certain devices on my network. Rather than configure them for static IP, I prefer to “reserve” an IP for each device MAC address. This is possible on DD-WRT, and I am sure it can be done on routeros. Just got to figure it out.

After much fiddling around and a LOT of help from the re-seller, I got some of this stuff working (Highlighted in Green) Turns out that I cannot manually add client IDs when reserving an IP.

That brings up another question. How to add a label to a IP address reservation?

Still need help on item 3 (Firewall config) and 4.

Also need help on setting up rules to forward all traffic destined to port 80 to a squid proxy connected to the same subnet. Tried this rule, but does not work

ip firewall nat add in-interface=eth1 src-address=! dst-port=80 protocol=tcp action=dst-nat to-addresses= to-ports=3128