MikroTik

roland

any guru can solve this problem? We had similar MAC cloning on our hotspots, especially because we also use/offer the TRIAL feature ('free' for a few minutes per day). It is impossible to see a difference between real and fake MACs, however each time they change the MAC, they get a new IP from our ...

roland

Laptop clients in our Internet Cafe don't need authentication, but some may not have DHCP enabled. Is the universal client (used by hotspot), available WITHOUT hotspot? or Can run hotspot with "always authenticated" ? (I don't know their MAC addresses, and IP-Binding with MAC-wildcards sti...

roland

anything back from support?
I feel uncomfortable knowing that something (e.a. DHCP) bypass by firewall.

would be interesting (for me) if this "leak" is true for bridging filters as well.

roland

I mentioned "AP" aka AccessPoint (wireless). We don't provide wired access. And we use filters in 'firewall' and 'bridge'.
Anyway, so far it worked. We got the hackers away. Not important for me if 'technically correct'

roland

We blocked several ports (udp 161,135-139,445) and icmp traffic; our Hacker's scanner because useless. In addition we filter all traffic from clients directed to the AP (input chain) or other clients. Only traffic from client to gateway (AP is not the gateway, we use bridging) got passed. Maybe not ...

roland

but eventually you will ruin your PC PSU

and why is that?

However, I found the RB rebooted every few hours, perhaps the PSU isn't stable??

roland

Can I take the internal 12V from a PC powersupply to power up a routerboard 112? Stable?

The PC is running on a UPS.
(I don't want to use an extra 18V powersupply for the RB).

roland

I'm trying to limit the speed (Queue) for hotspot TRIAL users and to do so, I need some sort of packet marking...
but how to identify the TRIAL users (e.a. usernames T:XX-XX-XX-XX etc).

Baisclly, I try to give TRIAL users lower speed than paying customers.

roland

I had a similar problem (during migration from stp to rstp). Wrong admin-MAC or a MAC address from a disabled interface used as admin-mac ... We had to connect by ethernet (PoE) with a laptop to fix it. One eithernet was damage, so we had to take the unit down. (Actually replacing was faster than 'w...

roland

Thanks GWISA, glad to hear that your mesh works on RSTP. I read a bit and learned that rstp and stp can co-exists. http://www.cisco.com/en/US/tech/tk389/tk621/technologies_white_paper09186a0080094cfa.shtml#comp802 I testet that by enabling rstp 1 single system only... and it continue to work :o abou...

roland

Maybe you have low signal levels. When the wireless disconnects from the AP your bridge is rebuilding itself. Most of our APs have 3 WDS links: (a) WDS to parent (backbone to root), (b) WDS to a client-AP and (c) a WDS to a third AP for backup. The last one is sometime very week, but as it is a bac...

roland

I have several AP with WDS linked in a bridge, which are running the STP. I often see my bridge collapsing and rebuilding (very difficult to debug). Now I would like to try the rstp, but some questions to those who have tried that: There is no docu for rstp (and apparendly no support from MT). What ...

roland

I've tried the b-only, but I have a mix of SR2, SRC and CM9. Some like to work on g and give very poor speed on b . meanwhile, we notice that quit a few clients (non-MT) have problems to get good speed when connecting to our sr2 while its works good if we have a cm9. We now start to use sr2 only for...

roland

honestly, I've never seen the sr2's specification sheet.

We have several clients who use Smartbridge's Airbridge (11b only). They get good signal strength; perhaps too good? they now get about 100-200kbps (before on CM9 they got 2-3mbps).
Since we replaced CM9 by SR2, our problems started.

roland

but why the CM9 and the SRC doesn't have that problem?
It happen only with SR2 cards

roland

another 2 SR2 started to slow on 11b clients.
Do I have just a faulty set of cards, or does anyone else have problems with SR2 cards on 11b clients (while 11g clients are fine) ?

Anyone?

roland

We took Laptops to the location and verified it. Connecting on 11b... signal excellent, thruput 200kbps :( Connecting on 11g... signal excellent, thruput >3mbps :) We replaced the SR2 with an SRC (its a RB230) and 11b jumped up to 3mbps as it should. We have this on 2 locations already, and basiclly...

roland

We found 2 of our SR2 cards (2.4G) give clients very slow speed if they connect on 11b (150kbps), but high speed if they connect on 11g (2-3mbps). I don't see this on the SRC cards. Are those cards malfunction on 11b and ok on 11g (thus, need to be replaced)? Or is this a common problem with SR2 car...

roland

I'm using the standard bridge package with STP, and there is a pretty simple work-around: The bridge always uses the lowest MAC address available from its ports. I setup a (unused) EoIP interface, where I can set the MAC to something "lower", e.a. 00:00:5E:80:01:00 Adding this to the bridg...

roland

So for you, the 2x SRCs in RB230 work better than 2x SR2 in RB532 ?
Interesting. I always read the 532 is more 'powerful' (cpu), but somehow I favour the 230. How exactly do you messure 'noise'?
Btw,we installed about 10x 230s (Prism, to be replaced by SRC)
and 15x 532 (CM9, to be replaced by SR2).

roland

In my case I had two 200mW prism cards so it was very easy to change to the SRC. Same slot, same pigtail, same or better power. Jober, are 2 SRC cards in the 230er PCMCIA slots running stable? I worry about the heat... (after I touched them an hour later). I get 2 SRC plus 1 SR2 on a routerboard 23...

roland

Can I run a Prism2.5 300mW PCMCIA
AND and SRC 400mW PCMCIA at the same time in Routerboard 230??
They load and show up as interfaces, but I worry about heat...

(and there is another SR2 MiniPCI at the backsite as well)

roland

nobody ?

roland

We are running many AP (RB500, 2.9.23) all of them interconnected with WDS. Each AP has a STP bridge where the wlan and the WDS are in the bridge (1 IP on each AP). So far so good; works perpect. Like huge outdoor bridged network. :D Now, some APs have 2 radios (all CM9). It is possible to establish...

roland

The SRCs are working very well on the other APs so as soon as I have time I will replace the last few prisms. The SRC is a PCMCIA card from Ubiquiti and it has 300mW in B/G mode but only 100mW in A. I might replace the Prism with the SRC, if I can get them somewhere... In our location, we are fixed...

roland

I try to figure out if a Prism 2.5 PCMCIA (300mW) performs better than a CM9 (65mW). It sounds obvious, but somehow it isn't. A link with a Prism on one site and a CM9 on another gives me better results then Prism on both ends. (both link-samples are obviously 802.11b not 11g). And I just don't unde...

roland

We offer hotspot and PPPoE always together, so the customer can choose. Its very easy to setup and both options authenticate to the same radius server. (eric: you don't need an virtual AP for that. Thus, it works on Prism etc as well)

roland

ok, for RB230 can/haveto wait for 2.9.13
Is this bug also on the RB500 version of 2.9.12?

PS: rstp-bright-test : shall I open a new topic on this? So far I see that anything related to .....-test packages usually never gets any feedback from MT

roland

Normis, Could give me an updated (fixed) winbox? We are used to winbox and cannot upgrade to 2.9.12 given the above bug. Second option is we wait futher (for 2.9.13)... Also, we are really looking to get the RSTP in rstp-bridge-test, we we run about 20 APs with STP/WDS-bridging and the more APs we a...

roland

sorry that I ask silly question, but:

Where's the link on http://www.mikrotik.com/download.html ?
Is the 'all packages' which suppose to use for limited HDD space?

Its just not that clear (to me) which of the links are for upgrade 2.8 -> 2.9 on Routerboard 230 ....

roland

I have several RB-230 which I want to upgrade.

However, the download page tells:
<<<Warning: do not use this package to upgrade from versions 2.8 or older. To upgrade use regular packages.>>>

So, if not routeros-x86 ,then which package to use for upgrade the routerboard ?

roland

if one gateway is a dhcp-modem, then ok, you cannot replace masq by src-nat. At least for my situation (both gateways a static/public IP), I found that these 2x src-nat with out-interface set, replacing masq is a work-round for the IP/ARP mixup (which is clearly a bug, but ignored? by MT for a long ...

roland

Sam, look at my post above. Meanwhile I've tested it (both cases) and it works. Try the src-nat (NAT not masquerade) add src-address=0.0.0/0 out-interface=ethnet1 action=nat to-src-address=10.11.1.1 add src-address=0.0.0/0 out-interface=ethnet2 action=nat to-src-address=10.22.1.1 PS: if you set disa...

roland

Sam, Your post (and the related multiple gateway/NAT problems) seams to be what I WILL run into if I don't find a workaround. First, I have to say I'm in the wrong forum (I use v2.8.26). I have 2 separate enviroments: One with Multiple DG, wher both require NAT, and the other we one gateway need NAT...

roland

got the routerboard532 with OS 2.9 (unfortunatelly). Lot of problems because change from 2.8 to 2.9 are huge. Took me 30min to get a simple masquerade to work again and still FTP-sites have problems. (cannot connect and then times out). Q: Where is the trick to get simple FTP to remote sites back (l...

roland

normis, just ordered several wifi kits from Janis for our Samui project (will see how customs will work here...). But its a bit off-topic. Our experience says, that 30% of 580-production is not good. Having a replacment standby for each card in production use is not cost effective, I know. Unfortuna...

roland

we use 2 of them (2x 4port) without any problem (all ports in use). But there are issues in production quality. We needed 4 cards to get 2 working probably. This is a known issue that a high percentage dies of these cards within the first year. If you use it (we do and its a nice card), just keep on...

roland

I had the same situation and follow some settings in the manual ... then ok. First, try this one http://nospam-pl.net/op.php I can't really read it, but it can effectively test your IP on exactly this problem. The Spam-replay protection at http://www.mikrotik.com/docs/ros/2.8/howto/howto worked for ...

roland

I setup a web-proxy on 8080 similar t the manual, only to see my (fixed) IP listed on an open-proxy DNSBL. Where can I find info on how to secure the web-proxy? (Did I miss something in the manual?) thx for advise... [edited] saw my post 3min after the previous topic (which is the SAME problem. Webm...

roland

I want to replace my harddisk with a CF card.
How can I transfer the software, configuration and license ?

Search found 40 matches

Re:

universal client

Re: filter DHCP requests

RB112 powered by internal PC 12V?

hotspot TRIAL user speed limit

Re: WDS bridging: STP vs RSTP

WDS bridging: STP vs RSTP

HELP! Ubiquiti SR2 slow on 11b and fast on 11g

2x PCMCIA hgi power in RB230

Bonding WDS in bridge ... possible?

RB230: Prism PCMCIA vs. CM9

FTP not work

web-proxy is open proxy

replace harddisk with CF-IDE