A very newbie question:
What is a fasttrack connection I've seen on basic filter rule ?
How does it work ? What mechanism is involved ??
thank you
It does not work between mikrotiks in any way. It works only inside the ros and is not relevant to whatever device you have around.so the packets will be forwarded faster and doesn´t go to the other rules. Its good to use between mikrotiks.
/ip firewall filter
add action=fasttrack-connection chain=forward comment="fasttrack and accept established/related forwarding traffic" connection-state=\
established,related
add chain=input comment="accept established,related" connection-state=established,related
add chain=input comment="defconf: accept ICMP" protocol=icmp
add chain=input comment="allow dhcp offers on port 68" dst-port=68 protocol=udp
add chain=input comment="track new connections from vlan5" connection-state=new in-interface=vlan5
add chain=input comment="track new connections from bridge" connection-state=new in-interface=bridge
add chain=output comment="track new connections from mikrotik" connection-state=new
add chain=forward connection-state=established,related
add action=drop chain=input comment="drop other input" log=yes log-prefix="drop and log wlan1"
add chain=forward connection-state=new in-interface=vlan5 out-interface=vlan2
add chain=forward connection-state=new in-interface=bridge out-interface=vlan2
add chain=forward connection-state=new in-interface=bridge out-interface=vlan5
add action=drop chain=forward comment="drop other forward traffic" log=yes log-prefix="drop forward"
/ip firewall nat
add action=masquerade chain=srcnat comment="masquerade output" out-interface=vlan2
add action=masquerade chain=srcnat out-interface=vlan5
/interface bridge
add admin-mac=..mac.. name=bridge protocol-mode=none
/interface wireless
set [ find default-name=wlan2 ] band=5ghz-a/n/ac bridge-mode=disabled channel-width=20/40/80mhz-Ceee country=ireland disabled=no frequency=5500 \
mode=ap-bridge ssid=mikrotik5 vlan-id=5 vlan-mode=use-tag wps-mode=disabled
/interface vlan
add interface=ether1 name=vlan2 vlan-id=2
add interface=bridge name=vlan5 vlan-id=5
/interface ethernet switch port
set 0 default-vlan-id=2 vlan-header=always-strip vlan-mode=secure
set 1 default-vlan-id=10 vlan-mode=secure
set 2 vlan-mode=secure
set 3 vlan-mode=secure
set 4 vlan-mode=secure
set 5 default-vlan-id=10 vlan-header=add-if-missing vlan-mode=secure
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys
/interface bridge port
add bridge=bridge interface=wlan2
add bridge=bridge interface=ether2
add bridge=bridge
/interface ethernet switch vlan
add independent-learning=yes ports=switch1-cpu,ether2 switch=switch1 vlan-id=10
add independent-learning=yes ports=switch1-cpu,ether2 switch=switch1 vlan-id=5
add independent-learning=yes ports=switch1-cpu,ether1 switch=switch1 vlan-id=2