[solved] How to disable fastpath

Hi,

I want to extend my router with ipsec-enabled EoIP, but i have to disable fastpath:

[admin@mikro-vts-fw] > /interface eoip add comment="nach drueben" name="EoIP2drueben" local-address=1.1.1.1 remote-address=1.1.1.2 tunnel-id=0 ipsec-secret=blabla
failure: cannot enable fastpath together with ipsec yet

I already disabled fasttrack-forward chain and disallowd fastpath with allow-fast-path=no in ip settings. Where else can I disable fastpath? I can’t disable the builtin fasttrack prerouting rules.

I hope it is possible to disable fastpath online without any impacts for the users and without knocking me out (~300km away)

easy solution:

adding allow-fast-path=no to the /interface eoip add command :wink:

[admin@mikro-vts-fw] > /interface eoip add comment="nach drueben" name="EoIP2drueben" local-address=1.1.1.1 remote-address=1.1.1.2 tunnel-id=0 ipsec-secret=blabla allow-fast-path=no