Hi Dave, I have indeed done this, mainly so that customers within a VRF can do SNMP queries on the device. I also needed to so this for DHCP Relay to function correctly. I can possibly dig up the config, but in short I believe it was as simple as 2 mangle rules: One on Input chain to identify traffic coming in on a VRF, and apply a connection mark to it One on Output chain that matches the connection mark and applies the route table rule If you keep the first rule fairly broad it should be able to respond to most traffic coming in and out, but it will not cover traffic initiated by the router itself. Also note that Fastpath may skip the rules. Alternatively I've had some luck with use Route Rules to control which route tables are used in various circumstances, but I think I went with the mangle rules in the end. Regards, Philip Loenneker | Senior Network Engineer | TasmaNet -----Original Message----- From: Public <public-bounces@talk.mikrotik.com.au> On Behalf Of Dave Browning Sent: Thursday, 25 June 2020 8:27 AM To: public@talk.mikrotik.com.au Subject: [MT-AU Public] Winbox from a VRF Interface Hi Team, While I already understand that RouterOS does not listen on VRF interfaces for IP services (Winbox, SSH etc) - I am interested to know if anyone has put together some janky mangle rules to make this work? Cheers, Dave _______________________________________________ Public mailing list Public@talk.mikrotik.com.au https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftalk.mikrot...