/ip firewall filter add action=accept chain=enter disabled=no dst-port=8291 in-interface=pppoe-out protocol=tcp I feel capability to control consumers with out providing permission to RoS are going to be extremely practical. My uscase - I have to setup EAP in smaller community, so I won't set up independent server for it. And no, https://winboxdownload54319.bloggactivo.com/34067010/a-secret-weapon-for-https-www-winbox-download