MikroTik

El-Emin

Add NAS IP in radius server 192.168.0.253

El-Emin

Hi guys, what is the best network configuration for large wifi networks over 1000 users and over 50 MTs in network? I talked with my friend about 2 way of configuring network and implementing scope of public IPs without losing public IPs. Users are connecting with pppoe. 1st WDS beetween all MTs , c...

El-Emin

Chupaka, thanks I`ll try it.
I want to set up one dhcp server with public ips for pppoe users and redistribute connected users with osfp. I hope u understand my idea ?

El-Emin

So in that case MT dhcp-server may be far away more then one hop from dhcp-server ? client --- dhcp relay --- dhcp relay --- ... --- dhcp server ?

El-Emin

I thought, no matter what kind of netowork is and no matter how routers (dhcp relays) are away from dhcp server, to force users to get IP address from central dhcp server in routed network. As I see possibility is only to get ip address one hop away from DHCP server

El-Emin

Hi all, is there anz possiblilty to make one central dhcp server in routed network? Every router is pppoe server and here is idea to avoid ip pool scope and force users to get his IP address from central dhcp server where are public IPs. In that case every router will be something like dhcp relay. I...

El-Emin

Hi all, I had problem with user authentification at MT pppoe-server lvl4. For more then 3 month network work very well with out of any problems. But suddenly one of my MTs start to show some error msgs. I try to fix this problem with some version of MTs but with out of success. MT is connected with ...

El-Emin

It could be coz of bad or unstable signal intensity

El-Emin

And what if u want to count only internet traffic not internal traffic. Maby u want to make something like free zone of FTP servers inside your network. Thats why i am talking about seting up radius at public subnet and connect it to MT with pptp connection.

El-Emin

After I setup pppoe server at 10 of my MTs all network was slow down. After I explore where is problem, I saw that every router have CPU usage: from 60-99% except gateway there is no pppoe server. All Mtiks are lvl4 and ver 3.3.

El-Emin

Hi,
the reason for that is only if u want to count internet traffic. If u want to count internal and external traffic u can put radius inside with private ip.

thanks

El-Emin

Hi,
i am wondering should this toplogy work. If I set up pppoe server at every router and set up on every router ip of radius server after that use ospf for routing ? Are there any possible problems in communication between routers and radius server cuz there is no pppoe central server.

thanks

El-Emin

Thanks my firend,
But i want you to tell me How to do that on mirotik...

http://www.mikrotik.com/testdocs/ros/3.0/
http://www.mikrotik.com/testdocs/ros/3.0/vpn/pppoe.php
All u need is there.

El-Emin

Don't forget also, that on your mail server, you will have to put a IP address in to allow relaying from your MT radios. MT don't do SMTP Auth yet, so if you do not do this, then your mail server (if properly configured) should reject the message as its not an authorized sender. Thats true, but wha...

El-Emin

When use chain forward action=drop all pppoe conections goes down, for chain input its working.

El-Emin

does anyone now ?

El-Emin

Hi, which of these conf are better for droping internal broadcast traffic except pppoe session. 1. / interface bridge filter chain=forward mac-protocol=arp action=accept comment="" disabled=no chain=forward mac-protocol=ip action=accept comment="" disabled=no chain=forward mac-pr...

El-Emin

Thanks. May God bless u

El-Emin

Latest for 2.x or 3.x ?

El-Emin

Hi,
i have bundle of MTs in my network, all od them are licenced 2.9.50 lvl4. I indent to upgrade it to 3.x, what u suggest to me ? To do it or not, if not why, if yes why ?

Best regards,

El-Emin

Hi everyone. Thanks for very good answers. Last few weeks I am braking my brain how to design make the best toplogy. One of my ideas was to make somethink like samsoft08 said: make all bridge MT-s with one central point where users will authenticate. And now that ideas is definitly off my topic. Now...

El-Emin

Did u add Bosnia and Herzegovina in that new package ?
no. Why can't you use other country that matches your regulatory domain specification?

I can but why dont u put Bosnia in coutry settings ?????

El-Emin

Hello everybody I using a ADSL modem attached on my MT`s WAN port and if my customers make over 200 connections, this my f****d adsl modem crash over and over again Pls Help me this don`t work / ip firewall filter add chain=forward protocol=tcp tcp-flags=syn connection-limit=200,0 action=drop \ com...

El-Emin

Spoofing mac address ?
Pozdrav,

El-Emin

Problem was in disabled gre and pptp service ports.

El-Emin

NAT network is behind routerboard client.

El-Emin

Hi all, i am not shure what is problem, with mirkrotik or with something else. Well, mikrotik routerboard 133c is working like pppoe-client and its connecting to mikrotik RB133 pppoe-server. Network behind RB133C is NAT-ed and in that network are 2 machine with windowsXP os. All of that machines nee...

El-Emin

Hi all, i am not shure what is problem, with mirkrotik or with something else. Well, mikrotik routerboard 133c is working like pppoe-client and its connecting to mikrotik RB133 pppoe-server. Network behind RB133C is NAT-ed and in that network are 2 machine with windowsXP os. All of that machines nee...

El-Emin

Esselamu alejkum, try send notice via your internal web server like notice.html using dst-nat. This is examlpe: /ip firewall nat add chain=dstnat src-address=users-IP protocol=tcp dst-port=80 action=dst-nat to-addresses=web-server-address to-ports=80 comment="Customers Name" disabled=no Re...

El-Emin

Ok, and whan it start and how I can register for course?

El-Emin

how did u configure it ?

El-Emin

Is there any possiblitily to do it online. Does cisco certification help in basic networking staff cuz i am almost ccsp?

El-Emin

For example: /ip address 60.10.10.10/29 interface=Internet 60.10.10.11/29 interface=Internet 60.10.10.12/29 interface=Internet /ip firewall nat 0 ;;; NETMAP in 60.10.10.10 chain=srcnat out-interface=Internet src-address=192.168.100.0/24 action=netmap to-addresses=60.10.10.10 to-ports=0-65535 1 ;;; N...

El-Emin

Does anyone need answer I did it ?

El-Emin

Hi all, for few days I intend to use more than 1 public IP at MT. Well I need to setup at mikrotik who is gateway for internet. Behind gateway are 3 tiks, and users connect to internal network with pppoe and hotspot. Gateway limit bandwidth with Queue by IP address and work NAT for all network. I wa...

El-Emin

Did u add Bosnia and Herzegovina in that new package ?

El-Emin

How to block porn sites for hotspot users in dns client ?

thanks

El-Emin

All queues conf are like this one name="user" target-addresses=192.168.20.236/32 dst-address=0.0.0.0/0 interface=all parent=none direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=128000/128000 total-queue=default-small with diferent IPs and names thats all....

El-Emin · Re: Problems with 2.9.43 ?

El-Emin

Ok, I set IP address in MT (gateway) Simple Queues of user who is logging at another MT over hotspot. After that I am tracking his connection by torch and see everything what is he doing but at that time he have full internet speed not limited. Gateway mikrotik (Simple Queue) is limiting internet co...

El-Emin

Hi,
thanks normsis for your answer. In Simple Queues I have over 250 IPs that is only 1 example of configuration.

For example
It work for 192.168.1.10, 11, 12, 13, 14, 15, 16 but doesnt work for 192.168.1.24, 30, 48. I try limit-at too but nothing.

El-Emin

Hi, before 3 weeks I bought 2 lvl4 licence, before i used 2.9.6 not licenced. when i install and configure 2.9.43 i saw that 2.9.43 doesnt limit bandwidth some ips at simple queues. here is my configuration, Simpe Queues: name="korisnik" target-addresses=192.168.20.236/32 dst-address=0.0.0...

El-Emin

Each class in the hierarchy can prioritize and shape traffic. There are 2 main parameters in RouterOS which refer to shaping and one - to prioritizing: * limit-at - data rate that is guaranteed to a class (CIR) * max-limit - maximal data rate that is allowed for a class to reach (MIR) * priority - o...

El-Emin

Make profile for your pppoe uesrs.
ppp profile add name=256/256 rate-limit=256000/256000 dns-server=xxxx ..... or you can do everything over winbox. Just click at PPP and go on...

Selamu alejkum,

El-Emin

ok, thanks.

El-Emin

No answer ?

El-Emin

Hi,
I`d like do now how to set up same bandwidth for 2 IPs. When 1 IP is online it use max bandwidth etc. max-limit=64k/64k and 2 share same one.

thank you.
mt 2.9.43

Search found 47 matches