MikroTik

geebs

I think this is related, I run Observium to monitor some Mikrotiks (CCR1036's), and I do not get any routing information. Am I running into this thread issue? Observium documents state this, just wanted to check with Mikrotik before I log a fault with the software. Mikrotik RouterOS CPU and Memory s...

geebs

If you get stuck, I am happy to help out on the phone.

Could you send me a PM or email me gweebo at gmail dot com.
Happy to pay you for your time

geebs

Hello all, I'm stuck on a very frustrating issue here. I've added a couple of CCR routers to our Cisco network in an attempt to expand our MPLS network. Our main routing protocol is OSPF, which works fine. I've completed that setup and there are no issues. Approx 15000 routes, routers humming along ...

geebs

Did you ever get a solution to this ?

geebs

Hello, We are looking at putting in a couple of these routerboards (CCR1036-8G-2S+EM) temporarily to terminate a couple of 10G trunks. Perhaps they may become permanent, we normally use Cisco ASR 1002's for these small scale data centre deployments. It's pretty standard setup, the routers act as a c...

geebs

I should have reported what we found.

It was a rogue router on the network generating that traffic.
When we disconnected it, the traffic disappeared.
From memory it was a D-link, apparently a firmware upgrade fixed the issue.

Sorry to be so vague, that's all I really recall.

geebs

Hello, We run a large wireless network which connects back to an rb1200 terminating pppoe sessions. Basically all clients have a router (in many cases a mikrotik routerboard), and they connect via pppoe. Radios connect to ETH1 and then we run pppoe interface on that, this is standard across the boar...

geebs

I don't mean to hijack the thread, but how do you currently do this ?
Can you point me to another thread please ?

I'm in the process of setting up a Layer 2 DSL service and would love to terminate it on a Mikrotik, not a Cisco.
Is it possible ? Is there a workaround ?

geebs

Hi all, We have a few mikrotiks around the country which people connect to via PPPoE. We use Radius to set their speeds and IP address. So they all get a dynamic simple queue automatically when they connect. We also cap them, by changing their speeds in Radius then uploading a script to kick them of...

geebs

The voting page in the wiki hasn't been touched for months, so I assume it's not being looked at. Once of the major things I would like to see would be some sort of backup facility for all RouterOS devices. I simple click or schedule to get the configuration and store it on the server. <device-name....

geebs

Hello, Is there an equivalent setting in MT like Cisco ? http://www.cisco.com/en/US/docs/ios/12_2sb/feature/guide/sbecidtg.html We are having an issue with a vendor forwarding pppoe packets over a vlan to us. We use MT pppoe server and MT client. (latest 4.x). Vendor in-between uses a cisco. As soon...

geebs

Oh cmon, no winbox iphone app ?????
Get on-board !

geebs

I am also seeing this at all sites, with a variety of MT's, from Routerboards to x86 servers. From 3.11 all the way to the latest 4.x. We use Netflow exclusively for all traffic data collection. All our Cisco's are fine, no issues, however the MT's are always reporting errors in flow-capture. Mar 30...

geebs

Hi all,

I've been looking for a script to use on our VRRP interfaces to inform us that is has changed from master to slave and so on.

Does anyone have an example ?

geebs

Perfect !

Thanks very much for your help Aug.

geebs

Perfect that does work

However, if that comment doesn't exist, the rule is not inserted, it errors.
I was hoping it would just insert it normally if the place-before command did not match.
Or am I doing it wrong ?

geebs

Hi all, We upload many dst-nat rules via a script to redirect customers as required. However, I have 1 dst-nat rule which I need to always be at the bottom of the list (last read). The issue is, as new rules are uploaded, the one rule I need to be last is being pushed up and no longer last. Is there...

geebs

I've seen this with the rb500s.
I recall it happened when they were running 3.14, we upgraded and also upgraded the firmware, rebooted, the ether showed up again.

geebs

Hi all, We have a box here which used to be a Mikrotik x86 box, level 4. However, one of the younger techs used it to test a Linux ISO and formatted the drive. Now when I installed the MT OS is obviously does not find the license. Is there a way to regenerate the key from the Harddrive somehow ? Is ...

geebs

Are you using any routing protocols (bgp, rip, ospf, etc)?

What does memory usage look like, it is also climbing ?

No Routing protocols.
Memory is always stable with approx 400MB free.

geebs

Just to add, the only thing I could do to fix it was reboot.

geebs

Hi all, I've had this issue for a while, just being trying to find something that could be causing it. Hoping someone else may have run into this problem aswell. It's a x86 box, 3ghz, runs fine normally, but then all of a sudden it fails. I've attached some pics so you can see what I mean. Red marke...

geebs

Hi all, I'm having some issues with a Router and I am trying to generate a supout.rif file for the MT guys to look at, however the files size is very large. It's coming in at about 28MB !! It's a RB333 running 3.16 What could be causing this file to be so large ? There are no files on the files sect...

geebs

Hi all, I noticed that the dude package is now available on Routeboards. I installed it, and it wiped my existing config :) From my understanding, basically this is just a Routerboard package to turn a Routerboard into a Dude server. Is this correct ? Is there someway to use it as a Dude Client to p...

geebs

bump,

Does anyone know how to do this ?
Clients are connecting fine on their Windows XP machines, however they do not get a DNS suffix.

geebs

Hello,

Is it possible to apply a dns suffix to clients connecting via pptp (windows XP to Mikrotik).
Each client has their own ppp secret.

Thanks !

geebs

For simple queue you must use 'target-address'. Your queue should be like this, 'queue simple add target-address=<IP_of_The_Client> max-limit=21M/5M' If you have interface you may set network address instead of /32 IP address. This client has multiple Class Cs which we route thru an interface, so c...

geebs

I'll give this a shot. In regards to how the rules are read, is all traffic tested against every rule ? Eg, I have a global rule on an interface. I then have other rules after that applying to specific IP addresses which travel over that interface. Will both rules be applied ? Or is it Cisco ACL sty...

geebs

Hi all, I'm having issue capping a client, they have their own interface, and I've tried setting a queue with no luck, they still seem to go over their limit. My latest attempt is this, still the client goes over... 4 name="CLIENT1 GLOBAL CAP" dst-address=0.0.0.0/0 interface=vrrp-client1 p...

geebs

I have a cpu issue on 3.10 aswell.
Only started when we upgraded to 3.10.
But this is on a routerboard 230.
I have also seen it happen on the 500s aswell.
Reboot fixes it for a bit.

PPPoE server ~50 users

geebs

Yeah tried it, no good.

geebs

So don't use the .npk file and upload the packages individually ??

geebs

Just an Intel board, sata drive.

geebs

Not sure if it's related, but we found that any machine with the Cisco VPN client installed cannot mac telnet.
It sees the router thru (...), connects, then immediately disconnects.

This happens on any machine that has the Cisco VPN client installed.

geebs

I have an x86 box here which is very strange. Currently running 2.9.51, everytime I try to upgrade it to 3.6, just hangs on booting kernel. Even installing 3.6 from ISO on it fails. I'm wondering whether it's worth trying to upgrade to 3.7, anybody had an issue like this before ? edit: I should ment...

geebs

Here is the full script we use. :if ([:len [/queue simple find dst-address="118.67.3.70"]] > 0) do={ /queue simple remove [find dst-address="118.67.3.70"]; :log info "Queue removed: 118.67.3.70" } else={ :log info "Queue not found: 118.67.3.70" };:if ( [:len [...

geebs

Hi all,

This works on 2.9.51
/queue simple find dst-address="118.67.3.70"]] > 0) do={ /queue simple remov
e [find dst-address="118.67.3.70"]

Yet is does not work on 3.6, it doesn't throw any error. The queue is definitely there.
Has there been a change ?

Cheers.

geebs

This is something that I would love.
Any word on the web interface ?

geebs

Hi, I too am having this issue, when I right click on a Mikrotik and select upgrade, there is nothing there. I have loaded all the packages into the Packages section of Dude, and they show up. I've also tried just using the complete packages, and this does not show up. I've attached a pic. dude.jpg

geebs

I don't understand, why would I need to use the routing-test package ? Is it better than the normal routing package ?

We've tried everything with this ISP, they believe it may be an issue with incompatibility between the Cisco RIP implementation and Mikrotiks RIP.

geebs

Hi all, We recently upgraded to 2.9.46 from 2.9.39 Everything seems to be working except one connected route is not being advertised by RIP. I can't seem to get it to work. Our route list shows about 20 connected routes, I have set RIP to redistribute connected. All of them except one route is being...

geebs

Hi all, Running 2.9.44, RB500. All our customers connect to an RB500 PPPoE server. They get their speed given to them via Radius, so on the MT there is a simple queue dynamically created for each customer. Now our backend will boot the customer off once they reached their download usage quota, once ...

geebs

Mikrotik sends out the logs in syslog format, SARG needs to read in squid log format, hence the ugly and unreliable result.
It would be wonderful if Mikrotik folks could change that!

That would greatly help yes !

geebs

Hi all, Has anyone successfully logged and graphed individual users on a Mikrotik PC based ? It would be great to have a built in version. The way I ended up doing it is by sending squid logs from the MT to a remote syslog syrver, then parsing those files with SARG, which generated the reports. but ...

geebs

Src-nat did the trick, thanks !

geebs

Hi all, Our MT's primary address is an internal address, we also have a secondary LIVE address on the same interface. At the moment, all Radius requests come from the internal address, is there a way to define Radius to come from the external IP on the same interface ? Basically changing the source ...

geebs

Just set you modem to bridged PPPoA as per http://forum.mikrotik.com/viewtopic.php?t=4779&highlight=pppoa. It works for me using a normal Linksys modem. Tim Hi all, Here in Australia we have many SHDSL connections. I have a few SHDSL modems which work fine and sync up but I cannot get the MTs t...

geebs

maybe you should use traffic flow for this:
http://www.mikrotik.com/docs/ros/2.9/ip/traffic-flow

That's what I normally do, but in this case I don't want deploy a netflow collector at this location.

geebs

I came across this thread and this is the same question I wanted to ask. I need individual ip graphs. is it possible? SCENARIO: Someone on this network is using too much bandwidth. One of our clients has a MT running on a server in a remote location. They have about 4 internal class C's attached to ...

geebs

Same issue, does dude support snmp v2c ?

Dude 1.1

geebs

When one user moves a window or clicks a device, everyone sees that ?

In future releases will you be able to have independant users ?
ie. 2 to 3 people configuring Dude.

geebs

Is dude able to have concurrent users connecting doing different things ?

It doesn't seem so at the moment. Can someone confirm ?

geebs

Hi all, Could someone help me setup the auto upgrade process ? We have a few MT's deployed out in the field. Ranging from: x86 rb230 rb500 I'd like to setup one of the x86 servers as the master and get the other MT's in the field to download the new software, I can then reboot them when possible. ht...

geebs

Hi all, I'm just wondering how most people setup their filter rules. I have an MT with 2 live addresses which masquerades for 2 servers behind it. This MT also terminates a PPTP connection to another office. I basically just want to let thru port 80 and 443 to the webservers. And block all access to...

geebs

Hi all, We have a few MT's in production and our upstream provider has asked us to make sure all the traffic which is leaving our routers to be put in the "business" class, at the moment it is all in the "best-effort" class which is being shaped. Is there a way I can apply a glob...

geebs

Hi all,

I'm looking at disabling icmp redirects on the MT, on a cisco device all I do is "no ip redirects", how do I achieve the same result in an MT ?

Thanks !

geebs

hi all, I'm using a routerboard and its parent proxy feature to forward requests to an external squid box. Standard setup, I've got it running in other locations just fine. Basically: all clients are located on ether2 214.168.47.0/25 == chain=dstnat src-address=!214.168.47.250 dst-address=!214.168.4...

geebs

MPLS is in the long term agenda, but there are extensive standards of which most parts are not needed. It will take allot of work to get the right mix without taking all of our development time. At the moment, we are getting close to completing our own bgp and moving on ospf -- in the routing-test....

geebs

Hi all, I need some assistance with a performance issue we are having. We have 2 MT's RB230's in production bridging 2 networks. Basically exactly the same as described in this article. http://www.mikrotik.com/docs/ros/2.9/interface/eoip down the bottom example. The only difference is that both Inte...

geebs

Does anyone have any idea how I can do this ?

geebs

Hi all, I have squid running on the outside ether1 network of the MT, see shabby diagram below. Hope it makes sense :) INTERNET || || || ===SQUID || Mikrotik Routerboard 230 ||pppoe server || || CLIENTS The MT runs a PPPOE Server on the internal side, ether2, (all using live addresses), The SQUID Pr...

geebs

The dialupadmin web interface that comes with FreeRADIUS has scripts that do just that, hourly, daily and monthly.

I'm running these scripts now, still seems not to tally up users who have not disconnected

I'd love a script that disconnects users on a monthly basis.
Anyone have one ?

geebs

OMG it's been there all the time !
I just had a look in the dialupadmin folder

Thanks for that !

geebs

yep I have the data being updated every 5 mins. Only thing that worries me is that the session radacct table is constantly being updated and does not stop until the client dsconnects. Let's say someone has been connected for a week ? Do you query SQL for 1 day, then query it the next day and subtrac...

geebs

Hi all, We have a few MT's in the field that use Radius (freeradius 1.04 and mysql) for accounting and PPPOE. We set speeds, usernames and passwords in radcheck and radreply, all usage is also logged in the radacct table. I'm trying to work out how the best way to retrieve daily totals is. I read th...

geebs

ok got it.

It's the Interim command in AAA that you need to set to get periodic accounting.

Thanks.

geebs

Using a sniffer I did not see any packets coming from the MT to Radius, only on connection and disconnection.

What I need is the accounting information which is in the radacct table in SQL. I need that to be sent periodically, not on disconnect only.

Does anyone know how to do this ?

geebs

Hi all, I'm sure this has been discussed before but I can't seem to find the thread. We have a simple setup here, we use an MT to terminate PPPOE and the MT talks to Radius. When the client disconnects, we also get the Accounting data. My question is: Is there anyway to get accounting data from the ...

geebs

sorry let me re-phrase that, not secure as in https. I mean secure as in secured by windows authentication over regular HTTP. For example, when you try and access certain Microsoft administration tools on another domain, eg, sharepoint, susadmin, it's secure by an Active Dir user/pass. I believe it'...

geebs

Ever since we started using our web-proxy (running in transparent mode as a bridge), all our secure websites that require you to enter a user/pass are not working. It's almost like you don't even get the password pop up box anymore. It just basically gives you a "You are not authorised", a...

geebs

actually that does work, thanks

geebs

ok back again, still no go :( If I add the proxy in manually, it works fine, but without it, it's bypassing the proxy. ========================= [admin@MikroTik] > /ip web-proxy export # mar/01/2005 08:02:17 by RouterOS 2.8.24 # software id = <removed> # / ip web-proxy set enabled=yes src-address=0....

geebs

Hi all, I can't seem to get the transparent proxy feature working on our MT. I've followed the documentation with no luck. Basically we have a box with 2 nics. Works perfectly as a gateway, internal address range gets nat'd out the external interface. No special rules atm. I've setup the web proxy, ...

geebs

actually I might try getting 1 thing at a time working.

I'm really mostly interested on how to run RIPv2 with the PPPOE server, seeing as it's recommended that the interface of the pppoe server does not have an IP address.

geebs

Hi all, We have a few MT Routerboards deployed around the network running Ripv2 which I then redistribute into our Cisco EIGRP network. Works well. We are basically a simple Ethernet network, with a lot of transparent Wireless points that our clients use to connect to us. I'm looking at introducing ...

geebs

thx normis, appreciate your time.

geebs

http://www.mikrotik.com/hotspot.html

Just reading thru that documentation, it looks like exactly what we need.
WIll it be made available so we can host it sometime soon ?

In the documentation it doesn't say anything about automating it though.

geebs

but how will payments work ?
How would our webpage put in a user automatically inot to the Hotspot manager ?

Will the MT's use that Radius server instead ?

confusing

geebs

but wait - if you added the user with winbox, right?, then this has nothing to do with radius ... the user is in the router's local database. local database and radius database are two different things, they are not being syncronised. this is what I see now yes, but when adding a user by winbox it ...

geebs

basically simple hotspot functionality. kinda like prepaid cards yes. User connects to network gets IP address opens browser and gets redirected to a webpage either log in or pay by CC (only in timelimits, not data) The reason for the original question was that I noticed when using winbox that you c...

geebs

Which radius server?

freeradius

geebs

thx for the tips.

geebs

btw that test user was made using radius manager.

geebs

rosst@dude:~$ radtest xxx xxx 127.0.0.1 1812 xxxxx 127.0.0.1 Sending Access-Request of id 25 to 127.0.0.1:1812 User-Name = "xxxx" User-Password = "xxxx" NAS-IP-Address = dude NAS-Port = 1812 Framed-Protocol = PPP rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=25, len...

geebs

and in the radiusd.conf

I enabled SQL in the 2 sections, accounting authorisation as stated in the freeradius doco.

geebs

Hi Yazzy That's correct it uses mysql. Here is the sql.conf ====================== # Configuration for the SQL module, when using MySQL. # # The database schema is available at: # # src/radiusd/src/modules/rlm_sql/drivers/rlm_sql_mysql/db_mysql.sql # # If you are using PostgreSQL, please use 'postgr...

geebs

Hello, I noticed that in Winbox you can set an uptime limit in hotspot so the user is disconnected after a period of time. The issue is that it doesn't seem to be writing them to Radius. It keeps them locally. I do know that Radius is working becuase when I add a user using Radius Manager (3rd party...

geebs

oh god, I am so embarressed, apologies.... I'm really tired

Thanks

geebs

hello, I'm looking to deploy some Mikrotik Routeboards into an EIGRP cisco network. At the moment I've just setup a simple lab with 2 Mikrotiks connected via a crossover cable. I've given them the IP addresses. 10.10.10.1/24 and 10.10.20.1/24 I then enabled RIP on those 2 following the RIP documenta...

Search found 89 matches