mikrotik – David Stein

Connecting Offices: A Step-by-Step Guide to MikroTik Site-to-Site WireGuard

fires — Wed, 07 Jan 2026 11:12:08 +0000

WireGuard has revolutionized the way we think about VPNs. It’s faster than OpenVPN, leaner than IPsec, and significantly easier to configure. If you are running MikroTik hardware (RouterOS v7+), setting up a secure tunnel between two locations is now a 10-minute task. In this guide, we’ll walk through connecting Site A (Headquarters) to Site B (Branch Office).

Source

Mikrotik – quick OpenVPN setup

fires — Wed, 03 Sep 2025 08:36:33 +0000

In this post, you will find the basic commands to set up OpenVPN on a Mikrotik router. Find the openssl.exe, standard location is C:\Program Files\openvpn\

Source

Fixing Website Access Issues with Mikrotik MSS Clamping

fires — Thu, 17 Oct 2024 09:44:48 +0000

If you’re having trouble accessing certain websites—like partial page loads or dropped connections—your network’s Maximum Segment Size (MSS) may be the issue. This is common when the MTU (Maximum Transmission Unit) is mismatched across the network, causing packet fragmentation or loss. The problem is mostly on some “really” safe websites like banks, government, etc.

Source

Zabbix – how to monitor clients on Mikrotik Capsman

fires — Mon, 29 Jul 2024 13:21:13 +0000

Hello, I want to share my solution for monitoring connected clients to CapMan interfaces on Mikrotik in the Zabbix monitoring system. First, for the Zabbix server part, to get data from Mikrotik Capsman we will use the Python script to communicate with Mikrotik API. The Zabbix server needs access to the Mikrotik API, so if you have any problem first check your firewall on Mikrotik and also if…

Source

Mikrotik – failover script with link quality check

fires — Thu, 26 Jan 2023 10:43:17 +0000

Source

Mikrotik – DHCP Options – TFTP server

fires — Thu, 01 Dec 2022 18:15:02 +0000

Sometimes you need to push the TFTP server value as part of the DHCP process, for example, this is used in most VoIP systems. The VoIP phone use the TFTP server to download configuration files. Here I will show you how to set this value in the Mikrotik DHCP server. The boring stuff for a start. The pushing TFTP server value with the DHCP server is described in RFC 5859. The part that we…

Source

Unable connect Windows 10 to Mikrotik L2TP/IPsec behind NAT – Solved

fires — Tue, 04 Aug 2020 15:48:00 +0000

Open regedit (Windows + R -> regedit -> enter) find key : Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent. Create new DWORD value with name : AssumeUDPEncapsulationContextOnSendRule and value 2 Restart PC and enjoy the L2TP/IPsec without problems.

Source

Mikrotik P2P mangle rule – SOLVED

fires — Wed, 06 Jun 2018 19:15:28 +0000

Its long time ago but MikroTik removed P2P matcher from mangle rule, so now you have to use L7 analyze to mangle this traffic. Here is code to paste to the terminal: /ip firewall layer7-protocol add name=P2Pmatch regexp="^(\\x13bittorrent protocol|azver\\x01\$|get /scrape\\\ \?info_hash=get /announce\\\?info_hash=|get /client/bitcomet/|GET /data\\\?f\ id=)|d1:ad2:id20:|\\x08'7P\\)[RP]" /ip firewall mangle add action=mark-connection chain=prerouting layer7-protocol=P2Pmatch \ new-connection-mark=P2Pconnection passthrough=yes […]

Mikrotik CAPsMAN config cheatsheet

fires — Tue, 22 Aug 2017 11:43:57 +0000

Best order to create CAPsMAN Manager station Channels Datapaths Security Configuration Provisioning Interface->Manager->Enable Client station Wireless->Interface->CAP

Mikrotik – Remove fasttrack forward rule

fires — Wed, 29 Mar 2017 12:32:49 +0000

Hi, first of all fasttrack is awesome thing.In short, it enable to skip whole routing and filtering process for established connections for ultimate increase passtrough ability. More info at mikrotik wiki. Here I will show you stupit thing what I was solve for about half a hour 🙂 If you for some reason need disable fasttrack filter rule you are unable to delete fasttrack counter rule. …

Source