Having wireguard is nice and all, but ipsec is still sadly the standard.

We still wish for vti, either in the form of linux kernel based virtual tunnel or xfrm interface.
Both are mature within the 5.x kernel versions that v7 routeros is based on.

So yeah +1 for vti.

My remote hands couldn't insert a tap You don’t need one. RouterOS gives it to you out of the box. Post a pcap file for one of these failed lease requests, and a solution should follow shortly. Yes, I've tried that; BUT here's the kicker it did not capture ANY incoming dhcp packets, which I found o...

I've also upgraded an rb4011 and even moving the dhcp client around on different interfaces the device does not receive an address.
My remote hands couldn't insert a tap device between the modem and the router so that I could capture incoming traffic.

I understand, even if its messy it might be a solution. I'll try tho since those are not the only packets that need to be filtered. Difference is that I'm just playing with it for fun, while you need it to work for real. [off] Yes, you are right. But this is a one off use case. This customer did not...

Kernel knows, but RouterOS doesn't show, seeVRF and hidden interfaces.

So we are in the same boat?
My search-fu needs some work.
Thanks!

Hi, I'm kinda losing my marbles, but I've run into this problem on 4 devices running 7.1.1. The premise: A customer has an enterprise campus site with a couple of vrfs (printers, voip, etc). But they are now expanding to other sites and wish to have those vrfs there as well and have the central ngfw...

Thanks for the reply! Yes, that should be possible, but you will have to configure IPsec manually (i.e. if you simply specify IPsec PSK in your L2TP client configuration you will not be able to adjust IPsec settings). The wiki seems kind of hazy/confusing to me on this: /ip ipsec proposal set [ find...

Hi all, TL;dr: Is it possible for the mikrotik l2tp-client to use stronger ipsec phase1 and phase2 crypto? Our company (unnamed for nda reasons) is planning to move many of the employees to "tele-work/home office". This is something that's been planned and started by my predecessor years a...