RouterOS version 7.16 changelog mention this new feature
certificate - added support for cloud-dns challenge validation for sn.mynetname.net (CLI only);
But there is no documentation yet. How this feature works? Let’s find out.
Read More »Mikrotik Letsencrypt SSL certificate using new cloud-dns challenge featureTen years ago I have published my IP ranges generator and few other articles how it can be used to generate mikrotik firewall address lists or Haproxy ACLs This articles gets many comments about missing or wrong IP ranges. Yes, I know about it, but I can’t do anything with that – source data delegated blocks have country assigned by RIRs. Manually doing exceptions is no way to go…
Read More »New country IP ranges generatorMikrotik version 7 brings many new features, including wireguard vpn. Wireguard vpn is fine, but it is layer 3 VPN – can not be bridged. What if you need L2 VPN, for example to migrate local server to datacenter and from network view keep it in your local network?
In my setup I wanted to be able migrate VMs from local Proxmox PVE to PVE running in Hetzner in datacenter. PVE in datacenter was dedicated server.
Mikrotik 7.1 also support l2tpv3, which is not very well documented in Mikrotik wiki yet, but it enables Layer 2 VPN. L2tpv3 is also supported in linux. How to create bridge between them?
Many comments in http://blog.erben.sk/2014/02/06/country-cidr-ip-ranges/ was about IPv6 support.
In my previous post I have showed how to easily generate IP range assigned to some country. I have modified this previous script to generate IP blocks for all countries and put it online for free download and usage.