MikroTik

Letni

+1 bridge: learn-limit per bridge port, counter reset condition (on router reboot, on port down/up, manual etc)

Letni

I had a similar issue yesterday. I had to use netinstall to get it upgraded.

Letni

Sounds like someone should have come to MUM. Good thing the MUM can come to you. Janis Megis addresses several common issues you may be experiencing with PPPoE. Please watch his talk. I know he would appreciate not getting one less support email. ;) Most underused and overused RouterOS tools and fea...

Letni

Same here.

Guess I need to find another way.

-Louis

Letni

I received a CCR1036-12G-4S with bad power supply. When you move the AC cable the unit reboots. I have tried several cables and have attributed this issue to a cold solder joint on the PSU. I am working with distributor on a resolution but do not have high hopes on a smooth RMA processes. Since I ha...

Letni

I may be expecting to much out of this. But I did some reading and came up with this. http://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features My interpretation is that you can run rules in the switch chip therefore creating a rule that redirects boots packets from un-trusted ports to the CPU where...

Letni

Not if it is bridged and he does PPPoE in the MT.

-Louis

Letni

I would expect MT to say that you have not designed your network properly if this is a concern to you. *just saying* Please elaborate on how you would implement this and what functionality do you think MT is currently missing. Also, what it would do to help the community. Make a case not just a requ...

Letni

How much do you know about VoIP? First session of SIP is on 5060 (typically), but what about the voice streams of the call? Will your server have a private IP that is NATed by the MT or will you have Public IP on the server? Do you have any way of isolating all parts of the VoIP traffic from the ser...

Letni

1: My definition of an Edge router is one that connects to another providers network. For example I may have 20 routers in my network. They will all have multiple routes so know where to get to different subnets in my network but I may only have one of them connected to AT&T. AT&T is a provi...

Letni

This sounds more like a switching setup then a routing one. In my experience the upstream provider will assign you a /30 for your internet side and route an additional /28 to your router where then you can break it up as needed. Sounds like you need to just set it up as a switch and assign static IP...

Letni

You need to find some way of matching your VOIP traffic. If you can send VOIP traffic from a unique IP on your server like 192.168.1.200 then you can set the MT to route all traffic from that IP out the VOIP gateway. Once you have a reliable way to tag what is VOIP and what is data then you send it ...

Letni

I am not seeing what is missing? According to http://en.wikipedia.org/wiki/DHCP_snooping One of the primary concerns is ARP spoofing. In MT you can Add ARP for Leases and set ARP on the DHCP-Server interface to reply-only. The other key point is. Ensure that only authorized DHCP servers are accessib...

Letni

The check Gateway with ping does just that, pings the gateway address. It should not care what the dst-address is. With this setup. If the gateway of your primary internet connection fails to respond then route would disable itself. With a second route setup with the same dst-address but pointing to...

Letni

I have a RB411AH 200 feet in the air. I lost Ethernet connectivity with it from the bottom. Changed everything at the bottom including the POE-24i and still got the same symptom. Sent a climber up to take a look. Board lights were on. Had him disconnect the Ethernet cable and we tested the line. It ...

Letni

I don't think that it is because of this software version that it is happening. I only think that this software version is actually reporting it is happening. The two primary symptoms that tip me off to look at the caps are all the lights come on when powering up and stay on. The other is wonky Ethe...

Letni

Check to see if you have some green capictors on the board with an X on the top of them. It may be obvious that they have leaked fluid and or are swollen. Even if they do not show signs of this they are still probably your issue if your board has them. RB750BadCaps.jpg Mikrotik removed the capacitor...

Letni

/file ? Files can be uploaded to router and downloaded from it using FTP, or sent via e-m ail attachment. Here a list of all files kept locally on router (such as exported configuration scripts) can be found. .. -- go up to root add -- Create a new item edit -- find -- Find items by value get -- Ge...

Letni

Traceroute results would have shown that sooner. ;)
Glad you found your answer.

-Louis

Letni

Since you are not getting a response from 2.1 then your NAT rules are causing the issue. If you disable them then it should work as expected OR Option 2 is to add a couple more rules like /ip firewall nat chain=srcnat action=accept src-address=172.16.1.0/24 dst-address=172.16.2.0/24 /ip firewall nat...

Letni

From 172.16.1.2
ping 172.16.1.1. What the results?
ping 172.16.2.1. What are the results?
ping 172.16.2.2 What are the results?

What does a trace route show?

I am going to assume that you do not have any firewall rules that may be interfering since you did not include them before?

-Louis

Letni

This may be off the wall but how is your wireless link setup? Are you using WDS, MPLS, Pseudobridge?

-Louis

Letni

When this has happened to me in the past I did not have the default gateway set right on one/both the clients.

On device 172.16.1.2 make sure the default gateway is 172.16.1.1
On device 172.16.2.2 make sure the default gateway is 172.16.2.1

-Louis

Letni

(1) can version 3.30 be used, You can find out what versions are supported for your model by going to http://www.mikrotik.com/download.html (2) without serial connector, if OS gets corrupted or password reset how can this be done, is there a netinstall equivalent method for the 711 These questions ...

Letni

We just replaced bad caps on 3 RB450's. Found a bad motherboard with comparable caps that we could re-use. It wasn't to bad to do just a PITA that we have to do it.... Seems as though there was some power hack for the RB100's as well? I really wish the RB line was a bit more hardened for longer MTBF...

Letni

AFAIK there are no _fake_ Routerboards.

-Louis

Letni

I was having this issue with RouterOS V4. V4 has been very unstable for us. A duplicate Supermicro router is running V3.30 without issue. I have reloaded the machine running V4 to V5Beta4 with good results so far.

-Louis

Letni

You could try pointing the dishes up toward the sky more so you are shooting over the tops of each other. Enough where you are minimizing how much is reflecting off the ground/water.

Still have not told us what version of RouterOS you are using.

-Louis

Letni

Change frequency. Change Channel Size. Limiting Rates. Enable NStreame (Does wonders for us.) I know the recommendation is the leave power at default but you will probably want to lower it.
What RouterOS version are you using?

-Louis

Letni

What distro are you using?
Vsftpd is a ftp server not a client.
What about output for ftp -h ?
-Louis

Letni

I tested the script using CentOS/Redhat Enterprise Linux 5.4. See if doing an ftp -h give you any help. Maybe the command line options are different. Does the Mikrotik show the user logging in at all after running the script? Also, I do not know how familiar you are with *nix. Do you have ftp client...

Letni

Using this utility. http://www.afar.net/rf-link-budget-calculator/ You can plug in the TX power of your card: 23dB @ 54Mb You can plug in the Antenna gains: 31dB on both ends. Set the receive sensitive to -74 dB. Once this is done you can adjust the distance to match what you want for your Fade Marg...

Letni

You need to turn off interactive prompting for multiple file downloads.
To do this change
ftp -n $FTP_HOST <<EOF
to
ftp -in $FTP_HOST <<EOF

You should also take out one of the H's in
FTP_HHOST=0
Just for the sake of clean code.

-Louis

Letni

Can you do a redirect on http://www.mydomain.com to go to https://www.mydomain.com

I have done this before using PHP detecting if the client is connected via HTTPS or not.

-Louis

Letni

It is doable.

This topic may be of help. http://forum.mikrotik.com/viewtopic.php?f=2&t=12063

-Louis

Letni

Hi KirillTs, I am using RouterOS 3.25 on an X86 box with 3.25 and able to arp ping using this command. /ping 10.30.0.253 interface=ether4 arp-ping=yes and get back response 10.30.0.253 with hw-addr 00:0C:42:07:2A:5B ping time<1 ms The link to the wiki you posted is for the older version of RouterOS....

Letni

Can you run the spectrum analyzer to see if there is noise on both sides?

-Louis

Letni

When trying to upgrade RouterOS 4.9 on a XenServer 5.5 VM to RouterOS 5beta2, I get this error message. 21:29:19 system,info verified routeros-x86-5.0beta2.npk 21:29:19 system,info installed routeros-x86-5.0beta2 21:29:19 kvm,error no hardware virtualization support 21:29:19 system,info router reboo...

Letni

Anyone try 4.3 on RB411 w/ R52n at 2Ghz 5Mhz? I would love to know if it continually reboots on you. *SIGH*

-Louis

Letni

For starts I would suggest of course upgrading to the latest version: 0.8.7e
Are you able to successfully graph anything?
The official site is http://www.cacti.net/
BTW. Google is your friend.
This may help: http://forums.cacti.net/viewtopic.php?t ... c4a1c7f05c

-Letni

Letni

upgrade to 3.30 and retest.
CLI = Command Line Interface. aka the console
-Letni

Letni

What RouterOS are you using?

Can you do it from CLI?

/log print

-Louis

Letni

Would VLANs be of any use in this situation?

-Louis

Letni

While I have never done this before the premise would be to pass pins 4,5,7,8 from ether1 to ether2 in the same order. I would guess that you could not get 4,5 wrong since they are the middle pair and use a volt meter to find 7,8. Another way to check which side 7,8 is the side the brown pair goes i...

Letni

Has anyone come up with a solution for this?
Has Mikrotik added the options to limit PPPoE connection requests?

-Louis

Letni

Is the "Disable CSMA" option on the Nstreame tab not what you are looking for?

-Louis

Letni

To quote myself since you will not go back and read.

I would like to note that when using the R2N & R52N you must use 4.0Beta which has some considerable issues.
If it is for non critical link and you feel like you have to much time on your hands have at it.
-Louis

-Louis

Letni

I would like to note that when using the R2N & R52N you must use 4.0Beta which has some considerable issues.
If it is for non critical link and you feel like you have to much time on your hands have at it.
-Louis

Letni

Mikrotik has shown no interest in adding an Anti-Spam/Anti-Virus filter. As an ISP you will need a dedicated solution to this and I recomend you purchase a machine dedicated to this. Examples http://www.barracudanetworks.com/ns/products/spam_overview.php OR https://www.mailfoundry.com/store/category...

Letni

Normis,

Are you telling us that V3.26 will recognize the R52N?

-Louis

Letni

If it does not upgrade as expected check the log for a reason.
What version are you current using and what version are you upgrading to?

-Louis

Letni

This can _not_ directly be done on RouterOS because the fetch command does not support HTTPS.

-Louis

Letni

It will re-use your license when you do the Netinstall.

-Louis

Letni

Reload with Netinstall.
http://wiki.mikrotik.com/wiki/Netinstall

-Louis

Letni

I have had success intermingeling RB532+RB564 w/ V2.9.51 Routing-test and RB493AH w/ V3.23 Routing-test. We are in the process of upgrading our core ring from the RB500 series to the RB400AH series since we have reached the limits of the 500's.

-Louis

Letni

Or maybe they figured with all the SMP issues RouterOS has experienced, it was safer on a production box to leave multi-cpu disabled.

-Louis

Letni

Do you have an allow established or related rule before your drop?

-Louis

Letni

Take a look at this document. http://www.faqs.org/rfcs/rfc3768.html Specifically this section. If the Priority in the ADVERTISEMENT is equal to the local Priority and the primary IP Address of the sender is greater than the local primary IP Address, then: o Cancel Adver_Timer o Set Master_Down_Timer...

Letni

I just tested VRRP on a pair of RB493's running 3.25 and it worked as expected. One thing that may be throwing off your results is having one of the routers have a priority of 255. Having a priority of 255 means that the router is the owner of the VRRP IP and will ALWAYS step in and preempt even whe...

Letni

Try this. http://wiki.mikrotik.com/wiki/Proxy_on_ ... rnal_drive

-Louis

Letni

/tool fetch url=http://66.228.113.58/all_packages-x86-4.0beta3.zip

Letni

We have to force 100/F on our X86 machines when connected to Cisco gear. I always took it as Cisco had a wierd auto-negotiate issue. http://en.wikipedia.org/wiki/Autonegotiation Interoperability section.

Also to show Ethernet errors in Winbox you will need to upgrade to at least 3.23.

-Louis

Letni

I am using YUJOBIKA's steps to recreate. Enable IP, wait 10-15s, disable IP (route will still be in winbox), wait 10-15s, enable IP(new identical route will appear in winbox), repeat. It appears to be a winbox issue though. Through CLI it is correct.

MTRouteIssue324ScreenShot2.jpg

-Louis

Letni

Packages:
advanced-tools
calea
ntp
routing - Disabled
routing-test
system

Intel Xeon 2.1Ghz
multi-cpu: yes
2G RAM
6 NIC: 2 onboard (intel), 1 RB44G

I have been using the box to test some BGP configurations and SMP stability.

MTRouteIssue324ScreenShot.jpg

-Louis

Letni

I am able to semi-repeat this on our X86, 3.24 Routing-Test. I was able to get the routing entry to show up twice. One of them being a stale record that would not update. I think the easier test is though. BUG: When you disable an IP address, the route still shows up in the routing table. Be sure to...

Letni

From the newsletter 18. http://www.mikrotik.com/pdf/news18.pdf

Starting with v4.0beta3 RouterOS now includes
support for these 802.11n cards, that is unlocked by
updating your RouterOS license with the new 8
digit SoftID.

Sounds like 8 digit SoftID's are not supported in V3.

-Louis

Letni

You can use torch to see how much bandwidth winbox is using.
Tools --> Torch.

Checking mine now I am seeing 46kbps Tx 5kbps Rx.

If you find that winbox uses to much bandwidth you have the option to use the CLI through Telnet/SSH.

-Louis

Letni

For "some other rules" you will most certainly need connection tracking on.

-Louis

Letni

I recall seeing this issue once when the desktop I was using to netinstall from had 2 NICS. I believe disabling all other NIC's than the one that was connected to RB fixed the issue. If that does not take care of it, you could try upgrading the firmware first. MT has available 2.19 on the routerboar...

Letni

What hardware are you running it on? (X86, RBXXX)
If it is X86, do you have multi-cpu turned on?

-Louis

Letni

The standard for measuring throughput for a mikrotik router is: Download the bandwidth test tool from this page http://www.mikrotik.com/download.html onto 2 computers that are directly connected to the router. Start one up and go into settings and check 'Server Enabled'. Then on the second machine, ...

Letni

Add these to the top of your list. It should help with performance. /ip firewall filter add chain=forward connection-state=established comment="allow established connections" add chain=forward connection-state=related comment="allow related connections" add chain=forward connecti...

Letni

http://wiki.mikrotik.com/wiki/Upgrading_RouterOS

To have Routers show up in the [...] list they need to be on the same broadcast domain as the computer.

-Louis

Letni

Upgrade to 2.9.51
Check your cabling.
Can you log into it via console? (serial, KVM)

-Louis

Letni

works fine for me with Winbox 2.2.14 to 3.23.
I tried MAC connection to a RB500 and X86 series boards.

-Louis

Letni

These are plain boards. No add-on cards. I took one straight out of the box. Hooked it up with a serial cable. Changed the CPU speed to 800Mhz and it did _not_ boot RouterOS. This indicates to me that these boards are _not_ being properly tested by Mikrotik. If anyone else has access to the RB493AH,...

Letni

Roc,

Even your site advertises using these at 800Mhz
http://www.roc-noc.com/product.php?productid=118

These are straight out of the box. It is certainly not a heat issue.
MT has a history of not testing things fully. I should not be surprised that they state factory tested and lie about it.

-Louis

Letni

I just purchased 5 RB493's. Mikrotik's website states that these units will do 800Mhz (Factory tested!?). Out of the 5 I can only get 1 of them to boot at 800Mhz. I have even tried upgrading the BIOS from 2.18 to 2.20 as well as upgrading the RouterOS to 3.23. Any suggestions? Think I should be able...

Letni

In Winbox you can go to 'System --> License' to find out what you can upgrade to.

Here is some info on how to upgrade.
http://wiki.mikrotik.com/wiki/Upgrading_RouterOS

-Louis

Letni

MLPPP is not supported in V2.9. Please upgrade to V3.

-Louis

Letni

Do you have the proxy service enabled and running on port 8080?

-Louis

Letni

I am throwing my vote in for GVRP.

-Louis

Letni

I submitted the info to support. They replied that they knew about the issue but recommended I do a reset-configuration and restore from an export. What a hassle! MT backup/restore system has always been a failure and should be redone.

-Louis

Letni

If you are using V3 you can grab one of the API scripts from the WIKI.

http://wiki.mikrotik.com/wiki/Category:API

-Louis

Letni

@Perit Are you running IBGP in any of those circumstances? I have been trying to mix V2.9.51 Routing-test, V3.20 Routing, and an upstream providers Cisco together with-out success using IBGP. Some of the issues I have experienced are: I have to close out winbox because it will become unresponsive af...

Letni

Read this
http://wiki.mikrotik.com/wiki/Load_Balancing_Persistent
and
http://wiki.mikrotik.com/wiki/Load_Bala ... e_Gateways

The first one is easier and probably will work for you.

-Louis

Letni

Make sure "Obtain DNS server address automatically" is selected under TCP/IP for your workstation NIC.

-Louis

Letni

I believe you will need to setup a security profile or modify default and apply it to the wireless interface.
http://www.mikrotik.com/testdocs/ros/3. ... ontent.php
http://wiki.mikrotik.com/wiki/Wireless

-Louis

Letni

Check logs for anything unusual.

Upgrade to the latest version of RouterOS.
Disable/Remove any packages you do not need.

If it still happens then make a supout and send it to support as well as setup watchdog

-Louis

Letni

Since you are unable to establish a wireless connection we will start there. Look at your logs to see if you have any error messages that may be useful. If using Nstreame make sure it is turned checked on both sides. On the AP side use bridge since you will only have 1 client. Make sure you have WDS...

Letni

Check the first thread in the wireless networking section! It is sticky so that everyone see's it. It is called Wireless disconnection messages explained!
No really, you should look.

-Louis

Letni

The skinny is to make a bridge interface. Add other interfaces into the bridge interface to get them on the same layer 2 network.
Can you be more specific on what you want to accomplish, what you have done, and what you have done to show it is not working as expected?

-Louis

Letni

The word from Ubiquity is "MikroTik's lack of willingness to support these cards"
http://ubnt.com/forum/viewtopic.php?p=28097

-Louis

Letni

X86 RouterOS 2.9.51 with integrated gigE and RB44G.

After doing a restore from a backup a couple of weeks ago I noticed ether4 was no longer in the interface list.
I needed to do another restore this morning from friday's backup and now ether3 has disappeared.
Has anyone else seen this issue?

-Louis

Letni

A lot of us have wanted this for a long time. MT answer is you can get it through SNMP and they show no interest in enhancing there error reporting. After 3 years of waiting I finally gave up.

-Louis

Letni

Take a look at this.
http://forum.mikrotik.com/viewtopic.php?f=9&t=28470

-Louis

Letni

After putting some more thought into it, I am thinking what you want is _not_ doable because PPPoE does a broadcast that gets sent out on the interface. Since you have your dsl-modems on the same switch, the broadcast goes to both of them. No way to filter that. I recommend you restate what your tru...

Letni

Your picture did not come out so well.

Are you trying to achieve bonding or redundancy?

If redundancy then only have one mikrotik connected to one modem and on your lan side use VRRP.
-Louis

Letni

What about upgrading the software? When pinging anything else on the second subnet do you see the high latency or is just the camera? Since it is _urgent_ you may want to hire a Mikrotik Consultant. We participate on the forum at our leisure. Here is the list. http://www.mikrotik.com/consultants.htm...

Letni

You have it setup properly. Have you tried connecting to it from a different workstation on the network. You may want to try upgrading the latest ROS. Also from the router try pinging both devices. Does the latency show which side the problem is on? Try forcing ethernet speed and duplex for your cam...

Letni

Sounds like the wired network and your WDS are bridged together. You should try putting the WDS and the wired network on separate subnets and getting rid of the bridge.

-Louis

Letni

You are going to want to read up on Firewall rules. Here is a link for the manual. http://www.mikrotik.com/testdocs/ros/2.9/ip/filter.php Here is an example of specifically what you are looking for. Drops packets with that source mac address destined for somewhere else. /ip firewall filter add chain...

Letni

You would do it the same way you added the first.
In Winbox
IP --> Addresses; +; Address = 192.168.11.0/24, Interface = <the interface you want it on>; OK

-Louis

Letni

We assign IP's via DHCP for our phones.

To disable SIP helper in V3 it is under Winbox: /IP --> Firewall (Service Ports)

-Louis

Letni

Gaining access to the RB through the serial interface is the best way to diagnose the issue.
Check your settings and try again.
Use with a serial terminal program like Hyperterm. Serial port settings should be 115200,8,n,1.

-Louis

Letni

Boot it up and check under /System License to find out what you can upgrade to.
-Louis

Letni

GustKiller
How much traffic are you passing on your bridge? Is it being used for bandwidth management? How many users?

Janis
Is Mikrotik working on a newer version of the IN/G44V that would maybe be PCI-x or PCIExpress?

-Louis

Letni

You are going to need to be more specific on what the issue is exactly.

I have run both VoIP ATA's and Asterisk box through RB's NAT and Routed.

-Louis

Letni

Sounds like an issue with Cacti. Sounds like an issue with the poller. I had a difficult time when I set it up the first time. I found using there CactiEZ CD for setup was quick and worked perfect.

-Louis

Letni

I have done this before to log into our managed switch. I think you have to first turn off the console running on serial0. That is what is keeping the port busy.

Go under /System Console and disable serial0.

Then try it again.

-Louis

Letni

http://www.mikrotik.com/testdocs/ros/2.9/ip/hotspot.php

The files are accessable either through winbox with the button on the left called Files or you can FTP/SFTP into the box and update the files in the Hotspot folder.

-Louis

Letni

http://www.mikrotik.com/testdocs/ros/2. ... serial.php
/system serial-terminal

Letni

Looking at the config your router is setup correct. This line confused me. Port 1 – 10.20.6.0/24 - (10.20.6.1 – 10.20.6.223) it didn't match your config. Your config would be Port 1 - 10.20.6.0/25 - (10.20.6.1-10.20.6.126) Example You have a client on port 1. The correct network settings would be IP...

Letni

Looking closer at your first post I see a discrepancy.
Port 1 – 10.20.6.0/24 - (10.20.6.1 – 10.20.6.223) != 2 10.20.6.1/25 10.20.6.0 10.20.6.127 ether1

Check your IP address for port 1, looks like you have the wrong netmask specified

-Louis

Letni

Any firewall rules in your Mikrotik that would prevent SNMP?

-Louis

Letni

You may have some issues if you are running NAT. Try disabling the SIP helper.

-Louis

Letni

Use the PC you have already and put a 3rd NIC in it. Then you can get your 2nd DSL and setup the necessary rules for what you want.

-Louis

Letni

Does your connected equipment have a the correct subnet info and a default gateway defined?

-Louis

Letni

/ip firewall filter add chain=forward protocol=icmp action=jump jump-target=icmp works fine for me on RouterOS 3.18. You should try reseting your router back to defaults and test again or Could you please show a screen shot of the error you are receiving. Are you adding it through Winbox or CLI? -L...

Letni

You can get the software ID by connecting via Winbox and going to
System --> License

-Louis

Letni

You would need to purchase a new license. You can _not_ upgrade license level. You can get a new license from any reseller or logging in to Mikrotik.com and purchase it. These should help you with any other licensing questions. http://www.mikrotik.com/pricelist.php http://wiki.mikrotik.com/wiki/Most...

Letni

Tested on 3.17

:for i from=2 to=254 do={/queue simple add name="192.168.0.$i" target-address="192.168.0.$i/32" max-limit="20000/64000"}

Letni

I noticed RouterOS 3.17 included Winbox 2.2.14.
The changelog does not show any updates to Winbox however.

Can we get the website updated with the new version of Winbox.

-Louis

Letni

You did not explain what you did to reach that error message or how you got that error message(pop up or log)?

Try uploading your "downgrade" and issuing

/system package downgrade

You may also find this handy.
http://www.mikrotik.com/testdocs/ros/2. ... ontent.php

-Louis

Letni

This can be done very easily with Mikrotik.

The skinny.
Create Bridge1, Bridge2, Bridge3
Create vlan2 on ether1, vlan3 on ether1
Assign ether1 and ether4 to Bridge1
Assign vlan2 and ether2 to Bridge2
Assign vlan3 and ether3 to Bridge3
Call it a day. ;)

-Louis

Letni

This may help.
http://forum.mikrotik.com/viewtopic.php?f=2&t=25595

Letni

DNS Server is already implemented.
In winbox look under: IP --> DNS

Letni

1: Yes
2: Upgrading firmware on switches/legacy wireless radio's
2: Saving/restoring configurations for managed switches
2: Would look into TFTP booting servers
3: Some form of mac authentication
3: Read & Write access (maybe definable by MAC)

Letni

They are fixed for the datarate it is using.

-Louis

Letni

create bridge2
add ether4 + ether5 to bridge2
move anything assigned to ether5 to bridge2. Example IP's, DHCP server, etc.

-Louis

Letni

You can not retrieve just the IP. You would need to parse out the information you need. This would take a lot of CPU and RAM if you had a lot of connections. It would be nice to have this functionality out of the box from MT but I doubt we will ever see it. You should try solving your issue from a d...

Letni

have you tried excluding your internal range from the port forward rule.
Try adding something like this to your rule. src-address=!192.168.1.0/24

-Louis

Letni

The only way I know of is to attend a training class and take the test.

http://training.mikrotik.com/

-Louis

Letni

I had thought about this for some time but had never tested it till today. V3.17 I was able to SFTP from my linux box to my home router and transfer a file. I was also able to SFTP from my Windows XP box to my home router and transferred a file using WinSCP from http://winscp.net/eng/download.php -L...

Letni

first stop SHOUTING. phew....

next. Make sure you have a firewall rule that allows related connections.
connection-state=related action=accept

oh. and always please upgrade to the latest version.

-Louis

Letni

Simple answer is no.

Tedious answer is to export out your variable to a file on Router1.
Then on Router2 fetch the file and import it to load your variable.

There are many drawbacks to this method.
But it gets some information from Rtr1 to Rtr2

-Louis

Letni

If you system is working properly then upgrade.

If you think RouterOS has gotten corrupted in some way or it does not boot normally then do a netinstall.

-Louis

Letni

http://wiki.mikrotik.com/wiki/Upgrading_RouterOS

Letni

Have you tried /system serial-terminal ?
http://www.mikrotik.com/testdocs/ros/2. ... serial.php
-Louis

Letni

http://wiki.mikrotik.com/wiki/Sending_t ... erial_port

Letni

There would be no sensible reason to buy a 2.9 license.
Your V3 license will work on 2.9.
-Louis

Letni

I have also wanted to know what the default is and how to change it.

-Louis

Letni

Some of your connection settings are wrong.
Take a look at the Quick Setup guide here. http://www.routerboard.com/pdf/rb433mA.pdf

-Louis

Letni

OMG. No way. Maybe you MISSPELLED something. :P
I took the time to post. You should take the time to read and understand.

-Louis

Letni

Sorry, Try this one. http://forum.mikrotik.com/viewtopic.php?f=2&t=25433

-Louis

Letni

You have misspelled unknown-server

Tested with the correct spelling on my router (3.14) and returned correct result.

-Louis

Letni

Follow parrini's advice here: http://forum.mikrotik.com/viewtopic.php?f=2&t=26168

-Louis

Letni

That is someone trying to brute force login via SSH. If you do not use SSH you should shut the service down. IP --> Services

-SLA

Letni

If they are empty and still showing up in the Address List drop down then you are referencing them from a firewall rule. The simplest way I know of to clean it up is to export your firewall configuration. /ip firewall export file=firewall Transfer the created firewall.rsc file to your pc and do a fi...

Letni

After re-downloading ALL file my torrent client is giving me this.
rejected by tracker - Torrent not registered with this tracker.

-Louis

Letni

Here is one way of doing it. Very inefficient, but does the job. Tested on V3.13 :global ListName SSHAttack :global NumFailures 10 :global bad "" :foreach i in=[/log find topics=system,error,critical] do={ :local message [/log get $i message] :local pos1 ([:find $message "from"]+...

Letni

I want to see the changes of v.3.14 but couldnt find the change_log file anywhere.

http://www.mikrotik.com/download/CHANGELOG_rc

-Louis

Letni

Bridge is used to take multiple interfaces and put them on the same layer 2. http://www.mikrotik.com/testdocs/ros/2.9/interface/bridge.php There are a lot of uses for bridge. One such use would be the RB153 where I have Ether1 connected to my Internet provider. Ether2-5 added to bridge called LAN Wl...

Letni

How do I schedule this script and operation(run) ? ? I using V3.13

http://www.mikrotik.com/testdocs/ros/2. ... eduler.php

-Louis

Letni

I think I understand now. You are looking for this.
Tested on 3.13

:global IpRoot 10.10.1.
:for i from=1 to= 254 do={
  :if ([/ip dhcp-server lease find address="$IpRoot$i"] != "") do={
    :put "$IpRoot$i"
  }
}

-Louis

Letni

What you are looking for is Netwatch
http://www.mikrotik.com/testdocs/ros/2. ... ontent.php

-Louis

Letni

You do not specify how you want them returned? E-mail / In log.

-Louis

Letni

This should get you started if it doesn't do all of what you want.

http://forum.mikrotik.com/viewtopic.php?f=9&t=19389

-Louis

Letni

First
Change your action to add-src-to-address-list.

Second
Is the CPU being maxed out?
I have heard disabling/uninstalling unneeded packages may help with your speed issue.

-Louis

Letni

A simple search turns this up.
http://forum.mikrotik.com/viewtopic.php?f=2&t=17400

-Louis

Letni

http://forum.mikrotik.com/viewtopic.php?f=2&t=24833

Letni

Some things to try.
Upgrade to the latest RouterOS. Currently 3.13 http://www.mikrotik.com/download.html
Upgrade the firmware. Currently 2.16

/system routerboard upgrade

Try a port other than ether1 for your internet uplink.

Hope it helps.
-Louis

Letni

:set hostcomp [:toarray comp1,comp2,comp3,comp4]

-Louis

Letni

Please verify that you are using the latest version of winbox. It can downloaded from here. http://www.mikrotik.com/download.html

Also, when connecting with winbox, make sure the "Load Previous Session" box is checked.

-Louis

Letni

You will need to contact who ever sold you the RouterOS license.

If the RouterOS came pre-installed on your Router Board then you will need to contact who ever sold you the Router Board.

-Louis

Letni

If you could please give more detail and when you would use such a script.

-Louis

Letni

Have a look at this.
http://www.ubnt.com/downloads/ubi_mtik_power.pdf

-Louis

Letni

Do you have primary and secondary DNS server specified in your MT?

From CLI can you resolve domains?

Letni

Try something like this for v2

/ip hotspot host remove [/ip hotspot host find DHCP=yes authorized=no]

Letni

Try connecting to it via serial cable and see what error you get. You may need to adjust what the boot device is in the BIOS.

Letni

Which version are you using. I am on v3.9

Letni

Try with just the DCHP and !AUTHORIZED arguments.

Letni

There is an auto execute for ftp'd scripts. Check out the MT newsletter.
http://www.mikrotik.com/download/Mikrotik_no002.pdf

Letni

You need more speed on your bridged ports? If true then this has already been discussed
http://forum.mikrotik.com/viewtopic.php?f=1&t=18695

Letni

http://www.mikrotik.com/download/router ... pc-3.7.npk
http://www.mikrotik.com/download/router ... pc-3.8.npk
http://www.mikrotik.com/download/router ... pc-3.9.npk
http://www.mikrotik.com/download/router ... c-3.10.npk

Letni

This was a good resource when I first started out. It should help you as well.
http://www.wi-pipe.com/userfiles/File/D ... 0Setup.pdf

Also take a look around the wiki for more examples.
http://wiki.mikrotik.com

Letni

http://www.mikrotik.com/testdocs/ros/2. ... ckages.php

Letni

Try this then

/ip hotspot host remove [/ip hotspot host find DHCP !STATIC !DYNAMIC !AUTHORIZED !BYPASSED]

Letni

I believe you want something like this

/ip hotspot host remove [/ip hotspot host find DHCP]

Letni

Modify this line :set body ("$body\r\n" . [/log get $int]) to :set body ("$body\r\n" . [/log get $int message]) I have a 153 at my house with v3.9. When I ran my original script my CPU went to 100%, then the routerboard would reboot after a couple of seconds. Modifying it with th...

Letni

I have thought about using this option with the Canopy Translation Bridging. This way it doesn't matter if the customer changes mac and gets a new IP. Then on the NAT list do a dst-nat and specify the src-mac-address and redirect them to the IP address of the web server running the I am sending Guid...

Letni

According to the manual

http://www.routerboard.com/pdf/rb411ugA.pdf

NOTE: that RB411 currently does not support Senao 8602 cards, Atheros
AR5211 or older chipset and Prism chipset based cards.

There was a thread where someone was using an older card and it was rebooting on them.

-Louis

Letni

is your 0.0.0.0/0 route dynamic or static?

Do you get an error message when you try to change it from CLI?

You can only set/edit static routes.

-Louis

Letni

Try something like this

/ip route set [/ip route find dst-address="0.0.0.0/0"] gateway="192.168.15.254"

-Louis

Letni

Could the reset button be stuck?

What do you get for
/system routerboard print

-Louis

Letni

That rule is for every client to be able to make one connection. That is what the 32 stands for.

-Louis

Letni

Possibly down to -30 according to CLI.

TxPower ::= [-]Num
Num ::= -30..30 (integer number)

YMMV, play with it and let us know.

-Louis

Letni

The XR2 has a 10db offset in MT. Here is the link to show you
http://ubnt.com/downloads/ubi_mtik_power.pdf

To get the desired 20 db output you would want to set it to 10 db.

-Louis

Letni

What are you trying to accomplish with your firewall and why do you not think it will work?

-Louis

Letni

Does your new machine have sata ports? Try turning them off in the BIOS.

-Louis

Letni

You should reload a version of MT OS that worked previously. Once loaded you can then ftp up the fwf and flash the firmware.

-Louis

Letni

/system resource get cpu

-Louis

Letni

Does your BIOS specify booting to the HD?
What version are you trying to install(Have you tried a different version?)?
What type of HD(IDE/SATA)?

If you are doing it just for testing I would suggesting a Virtual machine like VMWare.

-Louis

Letni

You can use the scheduler to run scripts automatically.

-Louis

Letni

Create a bridge interface and then add your ethernet and wireless interfaces you want bridged. Check your config to make sure you will not have 2 DHCP servers running on the same lan. I just found this on the net, it should help you. http://www.wi-pipe.com/userfiles/File/Database/MikroTik%20AP%20Set...

Letni

This rule would only allow one TCP connection at a time to IP 1.2.3.4. It would be nice to do this for UDP but MT does not support it. UDP needs to be controlled by queues. /ip firewall filter add action=drop chain=forward comment="Only allow 1 connection to 1.2.3.4" connection-limit=1,32 ...

Letni

I believe the equivalent to your example is (Tested on v3.7)
:local test [/ping [:resolve www.yahoo.com] count="2" interface="ether1"]
:if ($test = 0) do={:log info "No connectivity on ether1"}

-Louis

Letni

You will want to try something along these lines
http://wiki.mikrotik.com/wiki/ECMP_Failover_Script

The only thing I see missing in the wiki for your situation is to specify an interface when doing the ping tests.

-Louis

Letni

Thank you for noticing that hilton. Here is my revised script that fixes that issue as well as adds the ability to use the script when running multiple dhcp servers. Tested on v3.7 # WarnAt needs to be at what percentage you want to be warned you are running out of IP addresses. :local WarnAt 10 #Na...

Letni

http://wiki.mikrotik.com/wiki/Use_SSH_t ... key_login)

Search found 376 matches