MikroTik

Lonecrow

Good idea about using a 1036, however in my environment that isn't possible. I need to keep some of the IP's private to pass through a traffic shaper before it gets to the nat 1072. Issue is we need more than 2x SFP+ ports that a 1036 would have. How about Mikrotik just fixes the damn connection tra...

Lonecrow

Some of us need to use nat for particulars so we need to keep connection tracking on. Even with a light amount of connection tracking it crashes weekly on our 1072's. Some of our 1072's with it disabled still randomly watchdog reboot. It all started a few versions back.

Lonecrow

What about those of us who NEED to leave conntrack on? I need to do some nat at this router so some of the devices behind it can get updates and they can't be natted further up or down. These constant weekly reboots are getting out of hand. I went from scheduled reboots to one firmware version later...

Lonecrow

My boss is starting to force me toward Juniper. Please Mikrotik - do something about this. I have like 30 CCR's out there. Wouldn't want to be forced into changing things. Today it rebooted on its own in the middle of the day, the boss was stock trading and lost a lot of money. Needless to say this ...

Lonecrow

For those of you who have disabled connection tracking or tweaked the connection tracking settings

Was it successful?

Lonecrow

Oh snap. Same issue with 3 of them. Supout shows nothing and I've looked into this heavily. Every 4-5 hours? WOW. For me it seems to be almost like when some sort of counter is being hit. Some sort of threshold. It isn't traffic because it reboots when traffic is low too. But its like a counter need...

Lonecrow

What realistically can you do before you notice issues? I have issues with the 1072's where they randomly reboot and the watchdog triggers. Maybe 1 time a week or less. No pattern to it and the supout shows nothing.

Lonecrow

"No, it is not necessary, but it is recommended." - Mikrotik Employee

I was just wondering because I've had it working without one. But I do see the benefits now in a bigger environment.

Lonecrow

What is the point of the loopback bridge? Anyone have link to docs on this?

Lonecrow

Anyone anyone? Nobody uses flashfig?

Lonecrow

1) I run an export on a working config on latest firmware / routeros version. 2) Set up flashfig on my computer with latest up to date version 3) Flash new Hap lite with the rsc file and it takes under 2 seconds. 4) Reboot 5) Check the new unit and it has only part of the config. 6) Troubleshooting ...

Lonecrow

I saw in the other thread they are planning NO NEW "Features" for the new version of RouterOS when it comes to routing.

I don't mind if they don't support a standard mib out there but how about at least adding routing information to their own mikrotik.mib?

Lonecrow

There will be no new routing feature in ROS v6.

You have to be kidding...

Lonecrow

Hi Mrz,
Any chance to have support for SNMP BGP4-MIB in 6.x?

Thanks.

YES PLEASE

Lonecrow

You need to use L7 stuff. But it changes so its difficult to track down the specific signatures. There are plenty of boxes out there that can ID the traffic with a multitude of definitions that if they match enough of them it'll be considered netflix and then you just decide what to do with it (ie d...

Lonecrow

We've been waiting a long time for Mikrotik to support BGP4-MIB or any form of BGP information as well as OSPF. There have been several topics posted about it in the past but we never seem to get an official reply as to whether it will eventually added or if its on any "to do" lists. Can w...

Lonecrow

This is to be a failover for our core router where all of our subnets are statically routed to a single IP from the outside. We are not big enough yet to start using BGP etc. Just want to have two routers in case of a hardware failure the other will take over. As far as the upstream arp tables in th...

Lonecrow

I've been testing it out and so far been unsuccessful getting it to failover. I can get the master/backup relationship going but when I unplug one, the other is not taking over, even though it does upgrade to "master". I'm testing on a couple office routers (450g's) using outgoing nat. Rou...

Lonecrow

Yeah I recently started using mikrotik for flow collection to the Netflow Analyzer program. The actual bandwidth collection is totally off. The source/destination data is all accurate however it is just the counting of the amount of data that seems to be off. I've actually not got accurate results f...

Lonecrow

Having some odd FTP issues since 4.16. First thing is my VPN (PPTP) stopped working properly, and the static routes I had set up to go through the tunnel for some private IP's failed working but I got that going. But now I can't FTP into sites out on the internet. I don't have any major rules on thi...

Lonecrow

He just marks packets depending on the types (http, video dns, p2p etc) and classifies them with multiple priority levels. Also determines which type of traffic is considered interactive and non interactive and gives priority for interactive stuff. I've had it working on a 450G with 300 customers on...

Lonecrow

I'm bumping this because I'm trying to do this now. I basically want any IP that is 10.x.x.x to have their packets market using mangle. But then I want any of those 10.x.x.x ip's to use a PCQ with a limit with those packet marks. What I'm seeing is instead of for example 10.1.1.1 and 10.1.1.2 and 10...

Lonecrow

Yes I purchased it from him and it works quite well. Works well if you don't use the l7 stuff on a 450G.

Lonecrow

Welp that didn't work either.

I'm starting to think its the other side that doesn't like our IP range or something. When I plug in outside my router I use a public IP outside the router, and the other router that does work is a completely different subnet.

Lonecrow

Yeah I saw that article. I'll give it a try and see if it fixes the issue. It is just odd that I have a second Mikrotik router with an identical setup but does not have this issue.

Lonecrow

That depends on the link - if you have a cable modem at one site and an ADSL link at the other the WAN link MTU and MSS would be different.

Isn't there mtu discovery that takes place? If we are large at 1500 and their end is lower wont the negotiation on size take place?

Lonecrow

No I've got straight fiber at both locations.. both can be 1500..

Lonecrow

I've set my lan and wan ports MTU from 1500 to 1492 to test and it didn't help. My other mikrotik router is at 1500 and it works fine. So I don't think its an MTU based issue. I'll have to look up MSS though.

Lonecrow

Thanks for trying it out. Which routerOS version were you running? I can't figure out why it is only this one PC. My other mikrotik router is fine. Do you have any mangle rules at all? Are you natted? The only difference between my two routers is one has only 2 ethernet cards running 4.9 so there is...

Lonecrow

This is odd. I updated to 4.14 and it still times out. Not as often but it still does. Anyone else want to give it a try with their Mikrotiks? Go to http://216.138.208.195/uhtbin/cgisirsi/VMqtTJGTIi/ADMIN/273630008/60/1180/X Browse around for a good 5-10 mins you will eventually be given this error ...

Lonecrow

Then you should use dashes instead of decimals

Most non linux type people assume a decimal is a decimal.

Lonecrow

Yeah. I think so too.. but I think it was because I thought the most recent stable version looks like its an earlier release than the one I have!!

I just realized they are using a back assward numbering of their versions.

Lonecrow

Wait a tick..

Is 4.11 higher than 4.9 ?

Normally versions with decimal points it would be 4.91 4.92 - 5.0 Not 4.9 4.10 4.11 etc..

Lonecrow

Ahh good old butch keeps a copy.. thank god for him

Lonecrow

Dang you'd think they'd keep a copy of all their progress etc. Thanks. . Dunno if I want to trust a copy that was just on someone else's site. Prefer official :) Can you downgrade from like 4.5 to 4.11 etc just by copying the file? Never did a downgrade. I'm just wondering if I should try the upgrad...

Lonecrow

Is there a repo somewhere? Like I want to upgrade to see how well it works but if it causes trouble I'd like to downgrade, but I lost my older copies of 4.5, 4.9 etc..

Lonecrow

So I go over to one of my other routers that is almost identical in every way except is running 4.9 and I don't have this problem. So I guess I better update the firmware.. :) I'm hesitant about upgrading to RC5 though because I've seen some bugs reported. I only do some straight routing and anti sp...

Lonecrow

ALso it isnt in taiwan this was the only good information I could find that could help with this problem. This is a library web software that is used around the world.

But I've had other issues with other sites like this as well. So it has me pretty confused.

Lonecrow

I've got a unique problem. I basically am using a PC for a router with routerOS 4.5 right now. I bridge ether1-4 and use ether5 as my WAN. I am pushing about 60-80mbit right now nothing fancy just straight routing. Everything has worked well but some particular websites don't like the mikrotik and w...

Lonecrow

I think I figured it out... I had NAT on one router and it was not working, so I think I would have had to add some firewall rules but it would have made it impossible to do. So I had to switch the VPN's ip's to a 172.x.x.x subnet and test it on a router that didn't have NAT enabled on that subnet. ...

Lonecrow

Thanks I'll check that out tomorrow. I love mikrotik it has sooo many ways of doing things..

Lonecrow

I'll be able to work on it Friday thanks.. I'll post it all then. I took it all apart.. I added a static route on the office side to the other side of the tunnel and it still would not work. I was able to ping the remote device/subnet from the office side's mikrotik, but not from inside the offices ...

Lonecrow

I also found out that I should use a VPN and then set up an IP tunnel or an EOIP tunnel. I've tried both via the VPN and I can't contact the other side no matter what from inside the lan of Router A. The only way i've been able to get it to work is just a straight ip tunnel with no VPN... Dangit.. E...

Lonecrow

I discovered an easier way using ip tunnels and added a route and it seems to be working now..

I just wonder how secure these ip tunnels are..

Lonecrow

I'm just testing something for future use and I can't seem to get it going. Router A = Office Router LAN 192.168.1.x Router B = Remote Location Router LAN 10.99.x.x Router A = pptp client 10.100.1.2 Router B = pptp server 10.100.1.1 I'm trying to set this up so that ALL TRAFFIC goes out our default ...

Lonecrow

Gotta check "passthrough" on the first rule to allow it to continue to the next p2p rule.

Lonecrow

I sit there with the window open in winbox it never goes past 50%.. It just never seems accurate. Another example is I put routerOS on this PC and got a license all I did was add a few IP addresses and the CPU usage is always going about 10-20% without it doing anything... The reporting is completel...

Lonecrow

So nobody can find anything wrong with these? Am I doing it right?

Lonecrow

Is the CPU a % of usage or a calculation of load average? It never seems to be accurate. I've been able to bring a mikrotik to its knees on rb411's, on a PC etc. But it never shows on the graphs that it goes past 40-50% maximum. Is it correct with the latest versions? I never seen accurate reports.

Lonecrow

I want to just graph (via cacti) how much traffic each of these queues are doing. This actually works fine, but on any router once the traffic starts to get going the whole internet starts to get sluggish and very poor performance. Even though the CPU is reporting that there is still low usage (30-4...

Lonecrow

We are using Mikrotik to handle about 80Mbit of traffic and 20,000 pps and 1000 customers.

Lonecrow

I've had 2 boards now Rb411 that I hold the reset button down during boot and other times without any luck. I've taken the enclosure off and tried the metal in the hole of the reset jumpers and tried to just close the contact during boot etc.. NOTHING will reset the passwords on these boards. Any id...

Lonecrow

What routerboard has the most amount of ethernet ports? I'm thinking of using a mikrotik basically as a bridge but with a firewall turned on so I can QOS and shape how much each port can use for each one of my servers etc. But it would be a switch basically. I need over 9 ports!

Lonecrow

Thanks for the info I'll give it a try.

Lonecrow

Anyone else been able to successfully use the sniffer to stream data through routers and then behind a nat to a computer?

Lonecrow

Hmm no luck on UDP either. I am receiving packets from the router but only from the actual bridge's IP. Not the actual payload of data. When I finish the sniff the mikrotik source of data (the bridge) does show its connections and packets etc. I changed my office router to forward all udp packets on...

Lonecrow

Oh great thanks. I was forwarding TCP I think that might be part of it..

Lonecrow

Nobody has tried this? I've tried to see what port the actual stream of data comes in on but it only shows the winbox port. So I port forwarded the winbox port on my mikrotik router into my laptop and tried to send data from outside directly to my laptop with no luck. When Mikrotik streams the sniff...

Lonecrow

We have some MT bridges we use in certain areas in which I need to use the packet sniffer. In our office router I can stream the output to my laptop and accept the information into wireshark. This is easy because i'm inside the same subnet and network. What I'd like to do is somehow have data outsid...

Lonecrow

Anyone see a problem with this simple setup? I can't go onsite to test it out unfortunately any time soon. But I need to get these guys under control..

Lonecrow

I have a bridge from a hotspot location where the customers are downloading like crazy and causing trouble. I don't have a mikrotik router on site it is a different brand wireless. But the bridge back is mikrotik so I use the firewall rules on the bridge. I want to use PCQ so that every hotspot user...

Lonecrow

I think you can get 12 volt solar chargers for like $50 or less that you can clamp onto a car battery. Wow. they actually will come and replace the batteries? I wonder how long they get? I mean the radios don't drop more than 500ma, I can't see the car battery going for longer than a day or two.

Lonecrow

Hilarious. I bet some of these remote places in Europe and elsewhere you have to use whatever room or materials you can to keep things going. Where we are located there are hardware stores or computer shops within a 15 min drive everywhere. So I guess people use what they can. I can't blame them. Bu...

Lonecrow

PPPOE over wireless sucks.. it isn't very reliable and will disco often.

Lonecrow

One more thing, although I think I saw some docs and examples on how to do this. lets say I have a specific subnet inside the LAN that I want to route to a gatewayB as well. Would the route be something like /ip route add dst-address=200.200.200.0/25 gateway=10.10.10.1 <gatewayB /ip route add dst-ad...

Lonecrow

Also I haven't used a web proxy with mikrotik yet. I know there is functionality built in but obviously on a routerboard without a hard drive this would be useless. I'd have to redirect it to a real web proxy for that to work right? Don't confuse proxy with cache. You can still use a proxy without ...

Lonecrow

I don't think this would work. I need 3 components here really. I need to intercept all traffic 0.0.0.0/0 on ether1 with a destination of mail.myserver.com and route it to router B (example 10.10.10.1) How would i accomplish that? /ip firewall mangle add chain=prerouting src-address=0.0.0.0/0 dst-a...

Lonecrow

Also I haven't used a web proxy with mikrotik yet. I know there is functionality built in but obviously on a routerboard without a hard drive this would be useless. I'd have to redirect it to a real web proxy for that to work right?

Lonecrow

Wow just one firewall rules can do that? No routes ? Can you explain how this works? In my case I would use ether1 as the gateway wan side, and ether2 as the lan side. Code: /ip firewall nat add chain=dstnat action=dst-nat to-addresses=196.30.31.207 to-ports=25 protocol=tcp src-address=192.168.1.0/2...

Lonecrow

Anyone know how I would be able to selectively pass particular destination traffic (resolved) to a particular router/server? In other words, if any IP wants to contact for example "facebook.com" I want them to go to a different router than the default gateway. This would be outgoing only. ...

Lonecrow

Point us to some GOOD easy documentation for queue trees...
Get yourself to the next MUM that you can - The bits on QoS were worth the airfare and hotel alone.

Nick.

I'm going to get training. I heard of MUM, and I think we might go this time.

Lonecrow

I don't mean to get down on you guys, because Mikrotik absolutely rocks, but some of us with limited experience have a real hard time getting started on some things. Most of the documention jumps right in and won't help people with limited linux or advanced tcpip experience. Even though it is not li...

Lonecrow

I do run dhcp though

Lonecrow

yeah it worked great thanks. I think I was using export filename= but its just file= .. thanks!

Lonecrow

Hmm thanks i'll try that out. I thought I tried using the export command from the root dir and it didn't work. I'll try again..

Lonecrow

the proxy arp thing worked. But now we can't change IP's to any IP at all without it telling us there is an ip conflict.. It is quite odd.

I'm looking at setting up the VPN IP's to be a a different range of IP's and then routing to the 192.168.20.0/24 network somehow.

Lonecrow

Point us to some GOOD easy documentation for queue trees...

Trying to find any starting material for any of this stuff is impossible. It is all starting at the advanced level without any common sense.

Lonecrow

name="queue1" dst-address=192.168.20.111/32 interface=all parent=none direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=2000000/2000000 burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small Here I just limited all traffic from 0.0.0...

Lonecrow

Is there a way to export an entire config? I know you can go into each sub section and export those settings and then copy them to a file etc. But I don't want to have to drag and drop 20 files to create a new radio. We are setting up clients and i'd like to have a default configuration I can just d...

Lonecrow

Thanks I'll try it out on Monday.

Lonecrow

Actually PROXY ARP is the problem. I disabled it and I can change IP's once more. BUT that gives me the same problem now. When I VPN into the network I get assigned a 192.168.20.50-99 and I can't talk to other people in the same subnet 192.168.20.x/24 at all.. but I have internet and everything work...

Lonecrow

So you are saying to assign pptp clients a 10.x.x.x ip address instead of the 192.168.20.x that the office actually uses?

Lonecrow

For mangle rules to work properly, as well as some other rules do you need to have connection tracking on?

Lonecrow

The reason why we turned on proxy arp was because when we VPN from home outside a different network with PPTP we need to be able to contact other users in the 192.168.20.0/24 network. We have several PC's inside we wish to VNC or grab files etc. When I turned on proxy arp it fixed that. Or do I need...

Lonecrow

Right yeah I know leases don't expire right away, sometimes days.

I'll give you an example .. we are in the 192.168.20.1 network but if I change to 192.168.1.100 it will give an error. if I change to 10.10.10.10 it gives an error.. any ip at all..

Lonecrow

Hi Lonecrow, Probably all settings would confuse the issue. To get started, just the output of the following would help: /ip address print /ip pool print /ip dhcp-server print and this (if it is not too long): /ip dhcp-server lease print detail (Changing the public ip's I know they will be incorrec...

Lonecrow

Ahh I knew about print just didnt know if there was a quick way to do all. I'll get those now thanks..

Lonecrow

How do you output all configs?

Lonecrow

The fix is to add large subnets to the ip addresses list. If the subnet doesn't exist it wont let you change to that IP. This is crap of course but I just had to add a whole bunch of large subnets that we use like 10.0.0.0/8 to allow us to change IP's without problems. BUT - this creates a huge prob...

Lonecrow

The fix is to go to ip addresses and add a large subnet like 10.0.0.0/8 and then if you change your IP to anythign in there you won't get the conflict.

Lonecrow

I have the exact same error and this is on a private small office network.

Lonecrow

Also I just upgraded the firmware to be sure. It still does it..

Lonecrow

I'm using a routerboard as an office router with VPN and proxy arp turned on. Ether1 is the WAN and ether 2-5 is the LAN. I am using DHCP in the LAN. But if I have ANY of my computers in the LAN try and set a static IP to ANY IP it comes back with an error "The static IP address that was just c...

Lonecrow

If you leave the main page IP blank it will assume 0.0.0.0 which is everyone from what I understand. I could be wrong. But if you enter the dst ip in the advanced tab it will basically set everyone who passes trhough that router to hit that IP to the speed selected. I tried that here with one partic...

Lonecrow

For example I just want to limit nntp and p2p. Here are the ip firewall mangle rules /ip firewall mangle> print Flags: X - disabled, I - invalid, D - dynamic 0 X chain=prerouting action=mark-connection new-connection-mark=nntp_conn passthrough=yes dst-port=119 protocol=tcp 1 X chain=prerouting actio...

Lonecrow

There is good documentation for Mikrotik and a lot of people have put their own time into this. But I find what we lack is some real basic stuff to help people getting started with Mikrotik. For the most part I understand the basics of subnetting, firewalls and TCPIP but most of the docs jump right ...

Lonecrow

Actually no I checked actually VPN's tend to do that. But why can't we ping other devices . Example WAN IP is 200.200.100.101 LAN Network is 192.168.20.0/24 When I VPN in it gives me an ip of 192.168.20.53 .. but I need to be able to contact and use devices in the 192.168.20.0/24 network. But it onl...

Lonecrow

We set up mikrotik router as an office router. From home we want to VPN into the router and get assigned an IP inside our network. We need to contact servers and computers inside our own network, and also surf using that particular IP of the router. So far it seems to work. I do an ipconfig and I ge...

Lonecrow

/ip firewall nat add chain=srcnat action=masquerade out-interface=Public

Yep thanks I've tested it out and it works well.

Lonecrow

Hey yah that LMS looks pretty slick and quick. Very nice little CRM but it doesn't do any monitoring right? No graphing or shaping or management of networks. From my initial look at it, looks lke its just a CRM, but I guess you could link information from other graphs and monitoring tools. Oh after ...

Lonecrow

Nevermind - just needed to use out-interface as the pppoe connection.

Lonecrow

I have a router that is connected to a PPPOE connection. Ether1 (WAN) is not assigned anything and it obtains the IP from the PPPOE connection. Ether2 (LAN) has an example 200.200.200.2/29 network ip (public) acting as a gateway in the LAN. Ether1 will always obtain 200.200.200.1/29 ip address. I ha...

Lonecrow

We are still having the same issues with even the latest firmware. 1km link 5.3 using two rb411's 2 cm9's -58 signal 36 SNR full connect at 54Mbit max noise floor I've seen is -94. All of a sudden pings drop for 1 min at a time. Knocks people out completely. This is happening across many of our link...

Lonecrow

Actually it does make sense because the pppoe connection doesnt route it connected p2p to another IP on the other end. So the issue is how he's routing from the WAN to the LAN... I've never heard of that other than bridging the ethernet ports. But I don't see any evidence that he's doing that. How d...

Lonecrow

I looked into it further and it seems he's added another network into the mix. 192.168.3.1/24 is added in there on Eth2 (LAN) and on the Router B he also has another IP attached. It also looks like he added some firewall rules $fw -t nat -A POSTROUTING -s ! 100.100.100.0/25 -o ppp0 -j SNAT --to $IP_...

Lonecrow

Thanks for the help. Yes it didn't make sense to me either. I'm sort of trying to reproduce something that already exists using an old slackware box. He has a a few DSL modems plugged in doing load balancing and we only need 1 dsl modem. So I want to just create a simple router, but we need to keep ...

Lonecrow

Just getting started learning Mikrotik lately as well as many aspect of routing etc so be gentle. I want to get up a very basic router that will have static routes for the most part. Here is a basic rundown of what I need to do. I need 1 pppoe interface that will link to a static IP. However that st...

Lonecrow

I'm bumping this because I've tried several things including bumping the power up to 30 with some of these 600mw receivers and we still do not get the same signal / rates we've seen with others. We took down the tranzeo had screen shots of everyone's signals and then compared after we put the new mi...

Lonecrow

sorry you must have misunderstood me. I was wondering which routerOS board I should buy? I don't needs any slots on it for wireless etc, just 2 network cards and decent amount of horsepower. I was wondering which boards or classes of boards you'd recommend?

Lonecrow

What would be the bare minimum router board we'd need (processor/mem etc) to service: 100 customers 15-20Mbit 250 customers 20-25Mbit 1000 customers 50-100Mbit Where we would be doing queues for bandwidth limit speeds, maybe some p2p throttling and maybe some shaping. Also graphing, possibly even lo...

Lonecrow

No I understand what the Dude does etc because I've used it in the past. I was just wondering if there was any sort of CRM that will easily tie in with Mikrotik, and the Dude etc. If anyone has successfully done that. We will be adding a few MT routers and I was also curious about the masquerading. ...

Lonecrow

I understand you can use the Dude very well with all the mikrotik routers, AP's and clients very well. But has anyone actually set up a system to integrate with all these routers to pull the data and have an actual CRM with ticketing and graphs etc?

Also can MT do net masquerading?

Lonecrow

More information that is interesting - the pings and dropped sessions are only happening to windows machines. If I ping it from a linux router, or machine the pings are returned. If I ping it from a DOS window in Windoze on any machine anywhere located around our network it will not return a reply. ...

Lonecrow

I opened up two sessions in Winbox and watched as our pings went from 15ms to 50 to 100 200 400 800 etc.. eventually cutting out and then it would return to normal. Cpu, mem on both sides were fine. Noise floor was -90 and -93 and signal was good around -73. (they both have Atheros AR5212 ABG in the...

Lonecrow

Nope, actually on the one bridge I can't get snmp to work. Even though I've allowed 0.0.0.0/0 on it just like the others with read only. Some of our AP's are doing the exact same thing too. Some stop responding to ping entirely and we can't get in with winbox or webgui, and it still passes traffic f...

Lonecrow

We have a couple routerboards with the latest OS and are using MT wireless cards as well. We set them up exactly as directed by someone to be used as a wireless backhaul. We have good signal and throughput. But every so often we'll see the pings on these things start to incrementally go upward from ...

Lonecrow

Were you able to glean any information from this?

Lonecrow

Well isn't that an interesting trick. I wish I had more time to delve right into this MT stuff, it seems endless the possibilities. Here is the info you requested with some personal stuff edited out. I did add 2 firewall rules for the 2 IP's to mark the packets 1 and 2 in the mangle rules but it is ...

Lonecrow

Also it is important to note that the MT Wireless bridge is located at Tower A.

Lonecrow

You still there? Do I need to mark traffic for the internet too? This is just a transparent bridge, and like I said we only need to restrict traffic in between those two customers A and B. Nothing else.

Or do you know any good sites that can demonstrate how to set up the firewalls and queues?

Lonecrow

Thanks. That helped.

What do you mean by "The emp's don't need the UBQ trick."?

Lonecrow

Hello, I want to replace all of my Tranzeo 4500 AP's with RB411-AH boards and Engenius NMP8602 PLUS S cards. I tested today and the result was much less power. I tested this on a sector that had 8 subscribers and each showed at least 50-60% lower signals. If this card really puts out 600mW then I mu...

Lonecrow

Thanks for the help, I appreciate it. In this case, the actual MT is at tower B, and the other side there is an ubiquiti actually. The MT is in AP mode. It is not controlling any traffic at all. It is just basically a transparent bridge. Tower A and B and the MT bridge are all 10.1.x.x IP's. The Cus...

Lonecrow

Here is a picture. http://img101.imageshack.us/my.php?image=exampleju2.jpg Customer A and B want to talk together. But both want access to the internet. We want to limit their talk across our bridge in our private network, but not affect their internet. So we'd have something like IF customer A want...

Lonecrow

I have 2 customers on the same network who wish to take a ride on our wireless backbone, but I want to limit the talk between these 2 peers. To get to each other they will need to pass through a MT wireless bridge. I was told we could use queues to limit their connection to say 3Mbit. Both of them w...

Lonecrow

I'm wondering - we set up a wireless bridge that does about 20mb. We have 2 customers on the ends of these 2 bridges so to speak on AP's in 2 different locations. The MT Bridge I am going to use a queue even though the bridge is 10.x.x.x network, lets just say both customers on either side of the br...

Lonecrow

I've been able to play with winbox on one of these routers with 5 ethernet ports. I haven't had the chance to test this yet though. It will be coming soon however. Thanks for the help. From what I can see from "queues" this is exactly what I was looking for, thanks.

Lonecrow

where in diagram you have mikrotik router, if they sit at customer A and B then you should limit at each customer the speed it gets, so no excess traffic is flowing over your links that will be eventually limited somewhere in the middle. to do that you can use simple queues without mangle, so just ...

Lonecrow

Just an FYI - we took over a failing company and had to tie into their network because they had no more internet service for over a month. So we had to bridge all 3 locations in this way to get them up as cheap as we could. I know there are a lot of locations for one router, but the router we had av...

Lonecrow

Actually I'm going to look into using TC to do this.

Lonecrow

Hmmm you mean run mangle on the iptables rules on the main router on our eth1 device which is the "lan".

hypothetically if they are trying to contact someone inside the same subnet would the router really do anything with it?

Lonecrow

Sorry the diagram didn't pan out with ascii very well. There will be no authentication. We don't use mikrotik wirelessly in our network yet, but we want to use just a router (no wireless) to limit someone's existing connection. We'll be using trango or motorola on both customers at 2 different locat...

Lonecrow

Exactly. Local traffic inside the network I want to limit across our bridges. But both of their internet connections will be limited by the main router before they exit the network. But traffic between the two offices we want to limit to a specific amount. 10.0.1.100 10.0.1.101 Customer A Customer B...

Lonecrow

We just started experimenting with MT and so far we love it. We are a wisp, and we will have 2 customers that are in the same subnet under our main router. They are in different locations on different AP's but they want to set up a VPN tunnel. But each location will want to continue to use the inter...

Lonecrow

Thanks for the tip. That is pretty painful and if you make any changes it'll be a pain in the butt to add people and subtract and change people all the time..

Sigh..

Lonecrow

Can someone walk me through the steps to take to get this properly? Basically this is how it works. Our Trango AP holds all the information for our Subsriber Units. (Rssi, rf traffic, eth traffic etc). I can SNMP walk the AP no problem and it pulls exactly the data I need and even converts the numbe...

Search found 136 matches