We have several EoIP tunnels (MikroTik V2.9 51) running over a Cisco MLPS network which give us Layer 2 network connections from remote tower sites back to our main office.

On this Layer 2 connection, we have a managemnt VLAN which all of our wireless equipment works on. Customer traffic is untagged. Our wireless equipment uses Passive FTP to update software to the subscriber stations. The units will connect to the FTP server fine, negotiate authentication, and request PASV. The FTP server sends back the passive acknowledgement with a port number that is never received by the client device.

We also have other base stations that are not linked via EoIP and the subscriber units connected to them update without issues.

There is another post in the forums asking the same question, however on Mikrotik V3.

Any ideas?

Terry