It's very satisfying to witness a conversation between intelligent people.

If I understand correctly, using no-mark on the connection marked in the connection state would disable fasttracked? This way it would use the mangle rules and not be ignored by the jump from fasttrack to fastpath.

In simple terms there are tools you can use. What is common to both is needing a table and an IP route. One is create a table add fib table=utilizeWANX Create the route add dst-address=0.0.0.0/0 gateway=ISPX routing-table=utilizeWANX Then you have two options: a. use routing rule This basically sta...

Yes. It's covered by Packet Flow Diagram. The "Mikrotik's own traffic" is a "routing process" here going through LOCAL: https://help.mikrotik.com/docs/display/ROS/Packet+Flow+in+RouterOS#PacketFlowinRouterOS-OverallPacketflowDiagram https://help.mikrotik.com/docs/download/attach...

What is the requirement in better detail. a. identify user(s)/device(s), groups of users/devices b. identify what traffic they should be allowed to execute. c. identify any particular routes traffic should take d. identify any traffic that the router needs to execute ( aka router services like VPN ...

It is possible to control the output of Mikrotik's own traffic with mangle rules?

I apologize for the delay. I need to sort out some personal stuff. Unfortunately I'm not in my home lab at the moment to send the settings. I'll do it as soon as possible. I really appreciate your time. I will try to be better in the explanations. I was wrong not to talk about my environment. A stud...

Thanks for the sugestion. They were helpful. As I understand it, you direct the clients that go through routerOS. Right? When is the Mikrotik itself that needs to do this query? Would it work? Imagine that Mikrotik would need to query the DNS names of my network, for any type of validation. Then in ...

First of all. Thanks for your time in reading. I'm running some tests and evaluating my rules. I have an IPsec connection, it's working. I would like to make the RouterOS system refer to the DNS that is on the other side VPN. But his internal traffic does not reach the VPN. It must not be hanging ou...

1 - In IPsec settings, when you use IKEv2 Roadwarrior, you have an assigned IP. Is it possible to put it as static on the client side? I don't think it's necessary to supply a "virtual" IP via Mode Config as long as the client can handle it. Builtin desktop / mobile OS clients usually can...

for some stupid reason, I opened this topic twice.

I'm trying to remove the post, but the mikrotik website is giving me an http 500 error.
While I try to remove this post, I leave the url of the original post:

viewtopic.php?t=196491

Hey, guys. Before I start, thanks for taking the time to read my question. I wanted to know if it is possible to make some of these configurations in IPsec. These are unrelated questions. Plucked from scenarios of my imagination from my creative mind like a donkey. 1 - In IPsec settings, when you us...

Hey, guys. Before I start, thanks for taking the time to read my question. I wanted to know if it is possible to make some of these configurations in IPsec. These are unrelated questions. Plucked from scenarios of my imagination from my creative mind like a donkey. 1 - In IPsec settings, when you us...