ROSv7 Tutorials
- ROSv7 – OSPF Basic Configuration
- ROSv7 – BGP Basic Configuration – eBGP Peering to Advertise Subnets
- ROSv6/7 Routing Flags
- Routing Fantasy – Easy To Use Route Simulator
- WireGuard
- WireGuard (Site to Site VPN Example)
General Topics
- Intro to Using MikroTik SFP Products
- Using MikroTik with GNS3
- Installing a MikroTik Cloud Hosted Router on Amazon Web Services
- Multicast Address Space (Large Block Assignments as per RFC 5771)
- Multicast Address Space – Local Network Control Block
MikroTik Tools
- BTest Server & Bandwidth Test Tools
- Flood Ping Tool
- Graphing
- IP Scan
- MAC Server & MAC Ping
- Netwatch
- Packet Sniffer
- Ping Tool in RouterOS
- Ping Speed
- Profiler
- RoMON
- Wireless Scanner
Layer 2
SwitchOS
Routing
MikroTik VPNs
- MikroTik VPN Comparison
- WireGuard
- WireGuard (Site to Site VPN Example)
- MikroTik VPNs – Short presentation on the difference between the tunnels
- IPSEC Tutorial
- PPP Based Tunnels & Bridging (BCP) Tutorial
- PPTP & L2TP Tutorial
MikroTik Firewalls & Security
- Building Effective Firewalls With MikroTik
- Explanation of MikroTik Layer 3 Firewall Pattern Matchers
- Explanation of MikroTik Layer 2 Firewall Pattern Matchers
- Manipulating Packets With MikroTik
- DNS Filtering using MikroTik, Pi-hole, and OpenDNS
- MikroTik Router BGP Peering with Team Cymru for BOGONS
Does 2 mikrotik site to site ipsec , with other side is dynamic and other side is static ip , really works?
If you are asking about what is commonly called a “Road Warrior” configuration, where the client is roaming and the IP address is changing, but it needs to connect back to a central server which does have a static IP, then yes, it does work. It actually, works very well. The MikroTik wiki has some examples, here is one that I like:
http://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Road_Warrior_setup_with_Mode_Conf
What’s your consulting rate?
Thank you for the OSPF stuff. Clearest stuff on the net.
Perhaps you could oblige me.
We have a baseball diamond shaped network with two feeds to the internet, one to home base, and the other to second base. It is set out pretty much like your basic configuration in the first tutorial, except it forms a routed loop. There are other routers connected to the various bases, and some connections ‘shorting out’ parts of the diamond, for example a link from second directly to home, different from the second -> third -> home, or second -> first -> home. It is getting messy as
we install wireless connections where we can and try to cross connect all of them.
The goal has always been redundancy when things go down, and load balancing when we need to distribute the load. OSPF has been a bit of a bucking bronco, but it works.
My problem has been two fold.
1.) How do default routes work. We presently have them hard coded into each router as a static route, but clearly if an outgoing link fails along the default route, the sending router will not
intelligently shift its default route to another link. Does OSPF take care of this transparently by changing the default route for us?
2.) If both links are up, say from 2nd base to home, but we want the traffic to go out one of the links and not the other, (unless it is down) what is the standard way of telling OSPF this?
3.) Is there a way to tell OSPF to take ‘the same route back to the customer’ that it used on
the outgo, or is that meaningless?
4.) When there are two equal routes to take to an end point, will OSPF load balance automatically, if so how do we STOP that.
Pointers to RTFM are welcome.
Your stuff is the clearest to date. If there is a better way to e-mail you than this public comment let me know.
Homer W Smith
CEO Lightlink.com internet
Tutorial for lowbalancing 3 ISP
Thanks Rick! Your website is a goldmine for MikroTik knowledge! Thanks for taking the time to post it.
Thanks!
My pleasure!