MikroTik

imaljko4

Hi, RB751 u -2hnd devises are not working after upgrading to v7. Both devices are almost inaccessible after upgrade to v7, constant freeze and reboot, its even not possible to revert them (because of constant reboot) without netintsall. I have also another device RB751 g -2hnd and this model seems t...

imaljko4

+1 to keep /ip accounting
We also use a bandwidth monitor that is programmed with the ip accounting feature.

imaljko4

How do we enable autocomplete in terminal? Hot-lock mode https://help.mikrotik.com/docs/display/ROS/Console says CTRL+V https://help.mikrotik.com/docs/display/ROS/Command+Line+Interface#CommandLineInterface-InputModes that now it's F7 but not work for me Thanks, For me F7 also doesn't work, so how ...

imaljko4

How do we enable autocomplete in terminal?
Previously we would enable/disable autocomplete with Ctrl+V, but how to do it now, since Ctrl+V now is only for pasting?

Thank you

imaljko4

Maybe you can just add "detail" after "print" command: 'ip firewall connection print detail' 'ip firewall connection print terse' . All is the same just with "print detail" or "print terse": Code: Select all import paramiko client = paramiko.SSHClient() client...

imaljko4

Yes i will post once i will manage to make the setup, but it will not be that soon as i am currently very bussy with my work.

imaljko4

ok. Great. Thank you for help.

imaljko4

@sindy, thank you very much for your detailed help. I am still very busy this days, but once i find some time i will try to set it up like described. Although might be that this setup will be to advanced for my "basic-beginner" knowledge but i can try. My setup is as follows: 1. LTE: i use...

imaljko4

Thank you for your replies. We would like to try both scenarios and see if it works(might be that my provider is allowing source address spoofing). We also have another very fast line in another city, so i could try to setup 2x vpn tunels (xDSl and LTE tunnel) and use that fast line over the vpn tun...

imaljko4

We have a very slow upload speed on our xDSL line and cannot get any faster option except 4G LTE, which has good upload speeds. Is it possible to setup the mikrotik router to route all download to the xDSL line and all upload to the 4G LTE line? And how to do it if possible, i found an article about...

imaljko4

Screenshot_2.png Hello, I am using rb v6.42.5, The rate limit for User-manager are suddenly not working (might be after updating to new version of RB). I have limited all users to 256k upload/ 4M download, but the queues are all red, and none of them has any impact on the users. What to do, please ...

imaljko4

Seems like if they are idle for a while even if there cookie has not expired it forces them through the login page to verify the cookie and it fails since its https. I wonder if I just add MAC to this it will not need to do that? To solve this, just enable the : login by "MAC Cookie" opti...

imaljko4

Ok thank you.
Grazie

imaljko4

ok thanks. On Router 1 i have enabled forwarding only to pppoe, all other forwarding is blocked, (also on bridge interface "ip firewall" is enabled, and i have created rule for Masquerade-Nat in firewall). So i guess that is enough. Or should i still create following rules on router 2 and ...

imaljko4

Hello, If i have multiple mikrotik routers in my network, do i need to setup the firewall on each router or just on the main router? All routers are in the same subnet, i have created firewall, dhcp, nat, routing etc... only on the main router. On each other connected router(acces points) i have jus...

imaljko4

ok, thanks for help

imaljko4

Thanks. I keep my telnet port closed, just i was suprised how each time I open the port just for 30 seconds, i get attacked immediatelly... My provider is Croatian T-com, and i red that this Mirai botnet is attacking German T-com routers, as its the same company, could it be that my T-com Router/Mod...

imaljko4

maybe this "udp 5678" log might not be harmful, but the src mac addres on him "02:01:xx:xx:xx:xx" is not from a MT device. Still i am more concerned about the " proto TCP (SYN) log" from "00:90:1a:xx:xx:xx", also when I change my public ip, this logg immediate...

imaljko4

Lately i am having very strange logs in my router, also immediatelly when i enable port 23 in firewall, somebody tries to acces my router with wrong user name and password, seems like brute force, so i have to keep port 23 disabled. This logs continue to happen, i tried refreshing my public ip addre...

imaljko4

+1 for UDP on openvpn !

imaljko4

Hello, I am using capsman with RB951xx and RB 751xx AP-s. My problem is when the client laptops connect to our ap-s (capsman network) they are constantly getting recconnected to the aps, even though they have a good signal to the ap. So for example if they use skype, the line breakes often for few m...

imaljko4

HI, thanks again for your software, do you know how many ip-s (computers) can the viewer show at once on a network. My network has about 50 computers connected, but seems that the viewer will show only up to 33 computers, or am i wrong? Do you know if i can somewhere specify that the viewer shows mo...

imaljko4

Hi, Thanks for the programs, it look like Awesome. I have the service Running, but im not beeing able to catch teh traffic, and when i check the SnifferService.txt appear "Error: Cannot get traffic: http response code: 401, unauthorized". Im suing the same usr, group and password in the r...

imaljko4

Can i monitor 2 different mikrotik routers on the same server ? ( 1 service running with 2 servers or 2 services running with 1 server each ?) I am able to monitor 2 different routers on the same computer. I had to install/run 2 services (had to rename the 2nd service to "sniffer2"), and ...

imaljko4

I've got the same problem. It works great but doesn't show hostnames. I'm using DHCP on my MT. I've tested on 2 MT's with the same effect. Usually it takes few minutes for the hosts to appear. Check in your log on the mikrotik router if you see the "sniffer" user connecting ?(if all works...

imaljko4

No one knows???

imaljko4

mik-qos.png Hello, step 1) I want to prioritize traffic, so that i give ; priority 1 to my 192.168.3.100 voip box, Priority 5 to my local network; 192.168.3.0/24 Priority 8 to my hotspot network; 10.0.3.0/24 step2) After that i want to apply 3 priority rules to each separate network (priority 1 for...

imaljko4

mikrotik3.png Hello I want to prioritize all my traffic that comes from an local ip address 192.168.3.100 (voip box). I tried to do it with mangle, or simple queue but it just doesn't work. I set 192.168.3.100 to have priority 1, and all others have priority 6 When i do a simultaneous download test...

imaljko4

Is it possible to use this tool to monitor 2 different mikrotik routers at the same time?
Thank you for help

imaljko4

ok. Thank you.
Yes I use the Mikrotik router in-between, just so that i can have some better monitoring of who is connected and the traffic... etc.

imaljko4

mikrotik.png http://prntscr.com/6gtgui This is my scenario. The Mikrotik router is the DHCP server and the default gateway for client computers. Then he forwards the traffic to the adsl/router which is on the same network as the client pc-s. Do i need to have Nat(masquarade) on Mikrotik router (asw...

imaljko4

I have tried disabling all firewall rules, exept the ones which are used for Hotspot (they are created automatically by hotspot), I don't have any queues rules setup, (exept the default ones, which are created by mikrotik): /queue interface set ether1 queue=ethernet-default set ether2 queue=ethernet...

imaljko4

or upgrade to 5.26 and see in tool-profile what use your CPU Upgraded to ROS 5.26, to see detailed cpu load. While i am testing, i have 1 wireless client and 2 Ethernet client PC-s connected to the router, one of them is downloading updates, i get following cpu 74% constantly (while the client is d...

imaljko4

Thank you for your suggestions.

I will try them out and see if i can fix this.

imaljko4

Have you firewall rules running? Yes i have about 30 regular firewall rules, i had also a script for paypal payments,see here: http://wiki.mikrotik.com/wiki/PayPal_with_hotspot_and_walled_garden_bypass which was creating additional firewall rules, (about 50 additional rules), so i will try to disab...

imaljko4

I am having a 100% cpu load on my rb 133, while no clients are connected to the router. Just I am connected to the router, no clients except me are connected, and the router is most of the time on high cpu load, often it goes to 100%. Routeros is 4.17 ( i tried upgrading to v 5.26 but it was even wo...

imaljko4

I have the same problem, since I can run the console plink.exe and is in the same folder where is stored snifferservice.exe. Can you make sure that the sniffer service is running (after install i had to manually start the "sniffer service" under control panel- "services")? Also ...

imaljko4

Because your interfaces is in bridge, that's makes S. Check Bridge/Ports you interface is add there. yes if the protocol mode is in rstp Yes, my wireless interface is added to the bridge. But my Bridge protocol mode is set to "none" (No rstp). (Ok. so probably as soon as it is in bridge m...

imaljko4

Hello Today evening i saw "S" flag on one of my wireless interfaces. Can anyone tell me what it means ? As you can see below, interface works in AP bridge mode and isn't ns2 or bonding slave. Thanks for help :) Regards, I have the same question/problem. My wireless card is set to ap-bridg...

imaljko4

Great! Thank you very much!

imaljko4

One more question; is it possible to monitor Ip addresses for 2 networks? On my Mikrotik router i have : network 1 : 192.168.1.0/24 network 2: 10.0.0.0/24 I would like to monitor Ip addresses on both networks. So how do i need to change the values in the SnifferService.ini file? Something like this ...

imaljko4

If you use DHCP and/or DNS on the mikrotik the host names should show (that is what you see in the logs - the dns entries being downloaded) Not sure how to disable logging in mikrotik You are wright, the host-names do show up, just they sometimes get lost when my server-computer(with sniffer servic...

imaljko4

What i need is real time monitor of clients, which shows realtime uplaod/download rate of clients per IP address. I found a great tool to do it here: http://forum.mikrotik.com/viewtopic.php?f=2&t=77193 (big thanks to the tool maker, its really great!!) Still i wanted to know if there is an optio...

imaljko4

Why not just put in a PCQ Queue and call the issue resolved. Then you can exempt your private computers from the rules so you have all the bandwidth you need. I didnt quite understand your answere. Can i see real time bandwidth of the client computers with PCQ Queue? And if yes, how can i do it? Th...

imaljko4

This is a great utility, just what i needed. Is it also somehow possible to see the hosts name, next to the Ip address (in my case the hosts name dont always show up)? Also how do i now disable the logs in mikrotik router, for the ssh sniffer user ( now my logs are full with the "sniffer" ...

imaljko4

I have set up openvpn server on "RB 751", and I am using a XP client to connect to the Openvpn. Everything is working fine, I am able to access the devices on the openvpn network, except that i dont know how do i successfully force the Windows XP client to route all internet traffic throug...

imaljko4

I have setup the openvpn Server (RB 751-2HND) like described in the wiki here: http://wiki.mikrotik.com/wiki/OpenVPN I am connecting to the Openvpn from a windows XP computer, but when i connect i am constantly getting "Connection reset, restarting" problem. I am using RouterOS 6.7. Kan so...

imaljko4

Thank you

imaljko4

That is pretty normal. These are attempts by outside hosts trying to connect to common ports on your router such as RDP (3389) etc. Disable logging for the Input rule if you want to stop seeing these entries. You can always enable the logging again for diagnostics if necessary. ok. so i can be sure...

imaljko4

After setting up the firewall like described in the WIKI here: http://wiki.mikrotik.com/wiki/Basic_universal_firewall_script I am constantly having dropped packets, from different IP addresses, showing up in my logg. Did i misconfigure something, or is it normal to have so many dropped packets? Here...

imaljko4

It doesn't *have* to be a Mikrotik, its just that some other systems work in strange was. Just view the source of the page, if its method is "GET" and the username & password are in the HTML it shouldn't matter what device its using I tried to launch the "get" command from t...

imaljko4

First, remove the default settings. Try this http://www.wirelessinfo.be/index.php/mikrotik/pages/station thank you for your help, Only in this scenario the client devices would still be redirected to the login page, where they would need to click on the "Accept" button in order to use int...

imaljko4

2 choices. 1) Create a bridge and add the wlan + all ethernet ports to the bridge that way the PC's will be able to go through the hotspot process and click accept. 2)alternatively if the hotspot provider is using mikrotik AND allow PAP login you can connect MT to the wifi open terminal and telnet ...

imaljko4

I need to connect to a public free wireless network, using a mikrotik device. The problem is, when i connect the mikrotik router, to the public network, there is no internet connection. Because, to use the free wifi, you first need to open the browser, and then it redirects you to the login page, an...

imaljko4

Hi, On our Hotspot access point somebody broke the antenna, so the wireless card was on for some time with a broken omni antenna. After we replaced the antenna with a new one but (as I was not there) they forgot to turn off the routerboard (mini PCI) while replacing the antenna. Now the wireless is ...

imaljko4

Sacrifice one of the led in your router, connect it to relay that control your camera power supply, routeros can control led which control relay

Can you give me more information on how to do it? is there a tutorial link?

thank you

imaljko4

Hello, Does somebody know a solution how i can power off and power on a POE 802.3af device, with help of a mikrotik Router? (I am having a POE 802.3af ip camera, that constantly freezes and then needs a power off/on to work again. I would need to be able to do it from a remote location...) Thank you

imaljko4

ok. Thank you

imaljko4

try this

ros code

/tool fetch mode=http url=192.168.0.5/form/reboot user=admin password=password

Cool, it worked. Is there something like a "sleep" or "wait" command, i would like to wait 30min and then reboot the second camera with the same script .

Thanks

imaljko4

I would like to reboot my network camera periodically by executing the following URL:
http://admin:password@192.168.0.5/form/reboot
Can i write a script in RouterOs that would execute the above URL (reboot the network camera), and how to do it?

Thanks for help

imaljko4

Hi janisk..
can we have option that, the casing can look like the ruckus or the ubnt unifi?

it will be more pretty for us to mount in the hotel.

appreciated it if mikrotik can consider on that.

Yes I agree, we also need that kind of look for the Hotel.

imaljko4

Is it because I am using http://www.sandbox.paypal.com ... Can you help me out, I am also trying to use sandbox for testing with paypal. But when i try to make a payment with User Manager it then redirects me to the original paypal page (https://www.paypal.com/....) and on that page I am not able t...

imaljko4

I don't know what PayPal calls it, but Authorize.net has a "sandbox" (test gateway?) feature. That allows you to test the setup without billing anyone's account until all is working. Did you try that first? I am tryin to use the Sandbox test account on paypal with User Manager in order to...

imaljko4

OK. Thank you very much for your help. I finally managed to solve it: So the key solution was: 1. 1) you have no default-route on 10.0.5.2. Add a route to 0.0.0.0/0 with gateway 10.0.5.1. 2. I had following firewall entry which was somehow also blocking the access: add action=drop chain=forward comm...

imaljko4

route added to 10.0.5.2( i did have it in the first place but had removed the route for testing reasons): /ip route> print # DST-ADDRESS PREF-SRC GATEWAY DISTANCE 0 A S 0.0.0.0/0 10.0.5.1 1 1 ADC 10.0.5.0/24 10.0.5.2 bridge1 0 Changed the dstnat rule to: 0 ;;; masquerade hotspot network chain=srcnat...

imaljko4

After I have added " protocol=tcp" and "to-ports=0-65535 " to the dst-nat rule so now it looks like: chain=dstnat action=dst-nat to-addresses=10.0.5.2 to-ports=0-65535 protocol=tcp dst-address=192.168.5.4 Now I am able to ping at 192.168.5.4., but still I am not able to connect w...

imaljko4

Can you do an export /compact of firewall rules on 10.0.5.2? There are no firewall rules created on 10.0.5.2 All firewall rules are at the main router 10.0.5.1 ( i tought i dont need to setup firewall on the repeater, because all is configured on the main router, I did all the setup on the 10.0.5.1...

imaljko4

Did you configure that 10.0.5.2 can bypass the hotspot? Can you ping from 10.0.5.2 outside of his range (like 8.8.8.8)? Do you have a default route configured in this repeater? Yes bypass is configured for 10.0.5.2 Yes now i have configured the default route on the repeater ( i tought i have to con...

imaljko4

Please can somebody help me?

I am still stuck and cannot solve it..

thanks

imaljko4

Hi, I have here a similar scenario but still couldn't figure out how to properly solve it:
http://forum.mikrotik.com/viewtopic.php?f=14&t=71079

Can you please help me out?

thanks

imaljko4

I have following scenario network copy.png RB133(main router) Lokal network: Eth1 192.168.5.3/24 (Internet gateway is 192.168.5.1) Hotspot is running on: wlan1 10.0.5.1/24 (wds enabled) rb411 (wireless repeater) wireles (hotspot from WDS): wlan1 10.0.5.2/24 (wds enabled) So how can i acess my rb411(...

imaljko4

Drag & Drop does not work between processes which were started with administrator privileges and normal processes. Probably explorer is running as normal process, but winbox is started with administrator privileges. Yes, in my case, this has solved the problem. I had to start winbox without Adm...

imaljko4

Hello I have Rb493 Ah I want to use ROS 5.14 but I Want to use 4.17 as usermanager... Is it possible? If possible How can I do that... I have tried to downgrade usermanager but because 5.14 is installed It didnt work.... Tried setting up by netinstall but when I click usermanager 4.17 it selects 4....

imaljko4

Hi, Is it possible to keep the old User Manager V3, because i find it much faster and easier to use, also it fits much better our needs. At the time I am still using RouterOS v4.17, because if i Upgrade, my current UM will be replaced with the new one. Is there an option to update to the latest Rout...

imaljko4

I was trying to connect to the mikrotik demo dude on address: 159.148.147.209 What is the username and password to connect? because i wasn't able to establish a connection. The Dude demo system: Our RouterOS demo routers are viewable from within the Dude, install The Dude and connect to our Demo dud...

imaljko4

I am having a problem with my new RB9521-2n. The signal sometimes drops very low and disconects. When i try to scan for other wireless access points through winbox (to set up the correct chanell), it shows just 2 APs, There is an other access point with "SSID:0101010100011", its 10m away f...

imaljko4

Hi, Is it possible to moniotor the actual download upload rate of client computers in my network? I am running an internet cafe, with 9 client computers in my network. I am not limiting the Upload/download speed of the client computers, but in case that somebody starts uploading or downloading to mu...

imaljko4

I am trying to connect via telnet, and through a command get the "used uptime" for a specific user,
But when i type in following, then nothing happens;

/Ip Hotspot User get user1 uptime

how can i get the "uptime" so that the value is written to the command line?

Thanks

imaljko4

I solved this problem by close all session in userman and clear all log.

Good, i didn't know that in user-manager 5 there is an option to Force/Close active session.

I found it now, i think this could help.

Thanks

imaljko4

Please contact support (support@mikrotik.com), give us remote access to User Manager and HotSpot router and point out problematic username. I don't have that user anymore, cause i had to delete that user and then create it again(so that the user is able to loggin again). But it happened already twi...

imaljko4

Why do you think "simultaneous session limit reached" is a bug? Perhaps shared-user limit is reached for the particular user (multiple sessions for one username). I think you dint understand my case : There are no Active sessions for that user!!! The user is not logged in at all !!!! Ther...

imaljko4

This has happened first in the log, after that the user was not able to log-in to hotspot anymore, because user manager reported him as active, even though he was not active.

imaljko4

There is another bug in the new version. User has logged out, but the User Manager shows the user as active. The user is not possible to log in again, because there is an error "simultaneous session limit reached". Few hours later the user tries again to log in, but still the same error &q...

imaljko4

Hello,

I have very strange logs recently, please explain me what it means, and is somebody trying to brake into my router or what?
I had a few thousands of this logs..., happening every few seconds.

Thanks a lot for help

imaljko4

No, it happens again!!

imaljko4

Is it also possible to put a custom website to main router page? Instead of the mikrotik default page?

imaljko4

Upgraded the router-board 433 firmware to latest version, rebuilt the database again, restarted the router 2 times after. Right now the problem seems to be gone, i will still test it and report if the issue happens again. One more question; Until now, the user wouldn't automatically get disconnected...

imaljko4

I have found out how to check for the URL-s , and found out that there was one URL missing in my walled garden;
"crl.globessl.com"
Thanks a lot for your explanation and help.

You saved me!!!

imaljko4

You need to look at the certificate and check the CRL and OSCP URLs, and allow those in the walled garden. They are two methods of checking the validity of a certificate, and if it has been revoked. If you can't check whether a certificate has not been revoked you may, depending on security setting...

imaljko4

Thanks I have already added this sites: crt.usertrust.com ocsp.usertrust.com crt.globessl.com ocsp.globessl.com After that Internet explorer worked fine, But safari is still not working. Yes the safari reports an error with "revoked" How could i check which site (address) is being blocked ...

imaljko4

Hello, I have a globeSSL certificate for Hotspot signup on UM signup page. The certificate works well if i am already logged in and have full internet access. But when customers access the signup page (before they have logged in), the certificate doesn't work. When using a Safari browser there is a ...

imaljko4

Thank you very much for support output file.
We are working on it!

Thanks
I am waiting for your help.

imaljko4

Hello, I am trying to scan for wireless networks around and then set up Frequency for my Router, which will not interfere with other access points around. Which value should i look at in the scan results? -Signal strength? -Noise Flor? -Signal to Noise? Also if the number (for ex. "signal stren...

imaljko4

Yes, the remove command is missing. When i check with "?", only the following commands are available: /tool user-manager payment>> .. -- go up to user-manager edit -- find -- Find items by value get -- Gets value of item's property print -- Print values of item properties set -- Change ite...

imaljko4

You should be able to use this:
Code: Select all
/tool user-manager payments
print
remove X
Replace X with the line number of the payment.

I tried but there is no "remove" command under payments.
I can only print, but not remove

imaljko4

Updated to UM 5.5., rebuilt the database, the problem still happens. P.s. In my payment records under " tool user-manager payments print ", there are few payments with user= (unknown) Is there a way how i can delete this payments records, cause maybe this is causing the problem? I am sendi...

imaljko4

What was the solution to your problem? Because I am having exactly the same problem.

Thanks

imaljko4

Hello When trying to add a new user, and assign a profile to that user, I am constantly getting the error "error primary key must be unique". I always have to click 5 times or more until it accepts the user and profile. have a look at the picture. How to fix it? I am using the Usermanager ...

imaljko4

Is it possible to create a script that will make an alert or send email, if a new user creates an account via User Manager sign up page .
The script should alert if a new account is created, no mater if the payment was successful or not.?

imaljko4

Good thanks for help.

I will do it without the WDS then.

Because i still don't understand when to use WDS and when not to use it..

Thanks

imaljko4

Hello

I have 3 antenas in bridge mode and a running hotspot (rb433).
Now do i need to put the antenas in WDS mode (if they are already in the bridge mode)?
And do i need to choose "dynamic" WDS?

Thanks

imaljko4

Yes, I need it to.

Can i use your files on RouterOS versions 4.17 and 5.4 ?

P.s I am using RB433

I also want to:
deny access to HTTPS://router
Allow access to HTTPS://router/usermanager

Thank a lot

imaljko4

So each router should be another subscriber?

Or can i make a sub-customer for each router?

imaljko4

I have now made following changes: -Upgraded from 4.17, to 5.4 - Until now i was using 1 subscriber and 3 sub-customers under it, the sub-customers had different profiles, obviously this didn't work well, so i had to create just 1 subscriber per router (without the sub-costomers), because i guess th...

imaljko4

Mikrotik Please, This is a shame!!! I am losing my customers with paypal payments, because of UM bugs !!! I am using User manager the new version for paypal payments and sometimes it just doesnt work!!!. I had to refund already a few clients(users) because of that!!! I am having 3 bugs with payments...

imaljko4

Thank you for your help.

Do all the routers need to have the same RouterOS version? or can i have the remote Router (UM databease) with RouterOS V 5.4,

and the rest routers would stay on RouterOS 4.17. ?

Is that possible and will in this case the synchronization with UM database still work?

Thanks

imaljko4

Hello, I have 3 Hotspots on different locations and one User-manager database on a remote Location. I have already opened ports 1812 and 1813 on the remote network with User-manager database. But do i need to configure different ports for each hotspot or will they all 3 be able to connect using same...

imaljko4

When i disable the "masquerade" of my hotspot network, then hotspot doesn't work anymore. So what exactly do i need to do? My Network is as follows: ip address>> print Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK BROADCAST INTERFACE 0 192.168.3.2/24 192.168.3.0 255.255.2...

imaljko4

Several older VPN protocols could break with double NAT (PPTPv3 and IPsec with NAT-T should be able to handle even that fine). So maybe this is the problem, My hotspot network is under "masquerade", but my mirkotik router is behind another router which is then connected to WAN -Internet. ...

imaljko4

Yes the users are logged in to hotspot, they surf the net and download emails without problems. But when they try to make an outgoing VPN connection it fails.
When i connect the users directly to my local network with a cable(without hotspot), then the VPN works.

imaljko4

Hello, Sometimes i need to open all ports for one particular hotspot user(have full internet access TCP/UDP without firewall). What command should i use to do it, if the users IP address is for example 10.0.0.23 ? The users on my hotspot have problems when trying to make outgoing VPN connections, so...

imaljko4

no sorry, the link you provided is not working.
It says: 404 - Not Found

imaljko4

Ok. thank you!

imaljko4

Where can i download mikrotik routerOS version 4.10??

imaljko4

I probably should use also User-manager test v 4.11, but i couldnt find the link to User-manager test v4.11

imaljko4

I am using routerOS version 4.11, User-manager test v.4.10

imaljko4

i had to uninstalled my User-Manager-test 4.10 because of some problems. Now i am trying to install it again, i have uploaded the User-man file to ftp server, but when i reboot the router it doesnt install. I have tried several times but it doesnt want to install the package. how can i force the ins...

imaljko4

thank you!

Can you give me a link where i can find all the parameters that I am able to input to get user- manager data.

I am using userman-test 4.10

Thank you

imaljko4

I agree...

imaljko4

ok, but with which command will I get user data from user-manager?

(username, password, money paid, prepaid time...etc..)
Because this e-mail should contain user data.

imaljko4

Is it possible to send e-mails with login details to users manually? The e-mail is being send automatically when somebody sings up online. But if I add a user manually, how can i send e-mail to that user? is there a command or a script which I can use to tell User-manager to send the e-mail to user.

imaljko4

Do you think my router is now secure with these firewall entries? I am constantly getting strange logs, so I wonder if somebody is trying to hack int my router. Please look at the logs attached. Also i had some user that was connecting to hotspot and when i look at his IP address the address was cha...

imaljko4

if I use my routers external IP, I can access the signup page/userman/etc after logging in. I think you need to add your external IP address to walled garden: /ip hotspot walled-garden ip add action=accept comment="" disabled=no dst-address="your external IP" Input your IP addre...

imaljko4

Its a bit hard to explain, i will try. Please look at the picture below, that is my network. "VPN-Bridge interface" is actually ethernet1 interface (lokal network 192.168.3.0). Its called VPN bridge because i added the Open VPN and ethernet 1 to the same bridge. But right now Open VPN is d...

imaljko4

I have added the rule, and the link to the signup page works now, but i have another problem: The sign-up process become unstable. If I wait on one of the pages to long and then i click on continue or singup button, the next page which should follow fails to load (please look at the photo) When i th...

imaljko4

Ok i will add that rule.

Thanks a lot for your help

imaljko4

Yes I am using User Manager V 4.10 Beta, on the same router. Here are the prints: When a user tries to access the signup and is blocked by firewall i get the following log: 23:37:13 firewall,info DROP INPUT input: in:vpn-bridge out:(none), src-mac 00:1f:3f:30:49:1f, proto TCP (SYN), *my public IP*:1...

imaljko4

add chain=input src-address=159.148.172.192/28 comment="From Mikrotikls network" So this should be address of my private lokal network? add chain=input src-address=10.0.0.0/8 comment="From our private LAN" This should be address of the WLAN- Hotspot network ( hotspot users are c...

imaljko4

Hello i have added the firewall rules like described in the wiki: http://wiki.mikrotik.com/wiki/Securing_your_router But after adding this rules, the users are not able to access the signup page anymore. I am using singup page with user Manager for payments with paypal. Can somebody explain me what ...

imaljko4

Try adding this. /ip hotspot walled-garden ip add action=accept protocol=tcp src-address=192.168.3.100 dst-address=192.168.3.1 dst-port=8291 If possible, post more info regarding your configuration so we may help. Thanks. But what i am trying to do is disable access to router from hotspot network. ...

imaljko4

Hello, How can i allow access to router only from a specified IP address? I tried to do following: Please look at the picture below. Also i tried to add the firewall rules as described here http://wiki.mikrotik.com/wiki/Securing_your_router But still when I connect to hotspot I am able to access the...

imaljko4

Finally solved! I had to input my own email under subscribers(customers) "private information". Now sending of email works. One more question, can the email also be sent via User Manager if I am manually adding a user? The email is only sent if the user is buying account online. How can i ...

imaljko4

I guess i have solve it now. i have created a new customer under the subscriber. I have disabled access to parent profiles for that customer. Now i can create profiles on that customer which will be only for online signup. The rest of the profiles will not be visible at the signup page, because they...

imaljko4

Please help me because i have now a big confusion with accounting. I am using new user manager-beta version. I am trying to use 2 subscribers for the same router and on the same hotspot. 1. Subscriber1 would contain profiles( credits) that will be available on the singup page. 2. Subscriber2 would c...

imaljko4

Code: Select all
 / tool user-manager router add subscriber=NEW-Subscriber ip-address=HOTSPOT-IP shared-secret=xxxxxx
You can create more than one...there's no problem with these two rules..

when i input the the second code, i get the error :

Failure: ip address is already used

imaljko4

Hello i have made two subscribers, both with owner permissions. But how do i add both of them to hotspot? The hotspot and usermanager are running on local router. I have been able to add one subscriber to work with hotspot, but when i try to add the second subscriber it fails. Under the subscriber i...

imaljko4

Hello, I have a big problem. I have created 3 profiles that are for the paypal payments, and appear on sing up page. I have many time clients that have different needs, so I make a deal with the client individually and create a separate profile for that client that meets his needs. But as soon i cre...

imaljko4

Hello again, My scenario is following: My ADSL speed : 4M download/ 256k Upload 1)I would like to give the users full speed for surfing : 256k=rx/4M=tx for the first 10-20 seconds 2) after that limit the users at: 50k=rx/1M=tx (if downloading/uploading constantly) 3)And then again recharge the Burst...

imaljko4

Must all profiles that I create be available at the UM sign up Page?

I have just tree profiles that are for the UM signup page, how can i disable the rest 6 profiles from appearing on the UM singup-page?

Please answer me

Thank you

imaljko4

But, am I able to make the above scenario with Burst rate ? I can give the burst rate under User profiles (and it will apply for the whole hotspot)? Or i can give the burst rate under User Manger aswell. But what should exactly input for the Burst rate? I could input the Burst rate to be double time...

imaljko4

Can somebody give me an example for a good rate limit for hotspot users. I would like to give a high rate for browsing, and then reduce the rate if somebody is downloading (torrents etc..) I have a network with DSL speed 4M/310K I have limited the users now to Rx/Tx = 100k/1M But i would like to giv...

imaljko4

Yes, this has helped. Now it works fine.

Thank you!

imaljko4

Thank you, but with this scenario the hotspot users will still be able to acces my ADSL-Router-Modem Page (192.168.3.1)?

Am I able to disable this as well?

imaljko4

Ok. here are the exports: /ip firewall> export # jul/16/2010 17:26:33 by RouterOS 4.10 # software id = ****** # /ip firewall connection tracking set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s \ tcp-close-wait-timeout=10s tcp-established-timeout=1d \ tcp-fin-wait-timeout=1...

imaljko4

Ok. I have added the drawing of my network. I am not very advanced with the Mikrotik firewall, so dont know exactly what should i input. At the moment hotspot users that are using hotspot are able to ping and access local network adresses (192.168.0.0.) I would like to disable it. I have put default...

imaljko4

The Hotspot is the layer 3 hop and does NOT get involved in local network traffic. I tried it my self, and when i sing in to hotspot I am able to access my loacal addresses for example my ADSL-Modem-router 192.168.0.1. How do i disable it, i dont want the hotspot users to be able to access loacal n...

imaljko4

Hello,

How do i disable the users that are connecting to hotspot (which is on the wireless interface) from being able to access local network addresses.

Also how do i disable the wireless (hotspot) users from being able to access each others addresses (and shared resources) ?

Thank you

imaljko4

a very dangerous workaround that can impact the longevity of your installation

So what would you suggest? this is what my reseller suggested me to buy.

Do you mean its dangerous if the cards are touching each other or what?

imaljko4

Finally i managed.
I just had to pull the 2 little connectors( card holders) up.
And its working now fine, all 3 cards fit.

thanks for advice

imaljko4

It is still not working, i don't know to use the sniffer, and how to run it..? Is it possible to create my own script for send e-mail, and then schedule it to run each time someone signs up via User Manager? P.s. can you send me a link to sniffer documentation, because don't know how to use it. Than...

imaljko4

Should i try to use force, and lock the cards down with force, maybe they will fit then, but they will be touching each other ( one card will be laying on the next card - this is probably not good).
P.s. has anybody managed to input 3 of the DCMA-82 cards?

Otherwise i will have to exchange the cards.

imaljko4

Hello, I bought routerboard 433 and 3 x DCMA-82 cards to be able to connect 3 Antennas. But seems that the DCMA-82 card is not thin enough, so I am not able to put all 3 cards in the slots next to each other. I am only able to input 2 cards. The one slot in the middle i have to skip, because otherwi...

imaljko4

No, unless the file from which it was imported is still in the file system on the router, in which case you can copy the key and cert file off.

I have the certificate file , but i dont have the private-key.pem file anymore.

So, what to do now? Can i re-create the private-key.pem file?

Thanks

imaljko4

One more question:

Is there a way how i can export the certificate and transfer it to new routerbaord?

thank you

imaljko4

Thank you very much, yes now i managed with copy pasting.

Thank you

imaljko4

ok.
You explained me how to export the settings. But how do i Import it then to the new board? Which command do i use?
Please explain me more detailed.

Thanks

imaljko4

Is there a way how i can force Fireofx to remember password for UM 4.9 test?

so that my employees don't have to enter the password each time they need to login to User Manager.

Thank you

imaljko4

Hotspots should be the layer 3 hop for the users, so no, you shouldn't run one Hotspot in front of both routers. Sorry i didnt understand your reply. what is the layer 3 hop? How you mean run one Hotspot in fron of both routers? What i was asking if i can have the same hotspot on both routers, inst...

imaljko4

Ok. So the only option is to use User Manager? Is there also the option to have the same hotspot running on both Routers? I have some users that i assign directly in winbox, so I would like that this users also are able to connect to the second hotspot. (Ok. I understand that users that are assigned...

imaljko4

Hello, I have the following network setup; please look at the picture. In my scenario I am having 2 hotspots, so for each hotspot I have to add separate users. Is it possible to have just 1 hotspot for both routers? so that for example: If a user is created on the first hotspot, he can also log in t...

imaljko4

Are you trying to the send the e-mail to the same recipient? Maybe person specified wrong e-mail during signup, User Manager uses /tool e-mail to send e-mails. No i tried with at least 10 different emails and all were unsucessfull, and also every time a customer signs up, it always says error sendi...

imaljko4

Please can somebody explain me?

When I am sending an email from Winbox (new terminal) it works fine, so i guess the smtp mail server is working fine.

But why does the User Manager fail to send mails to customers (error sending email: invalid TO address)?

imaljko4

So if I am adding the VAP interface, do i assign the same Ip adress to it, as to the wlan1 interface?
And also the SSID do i give it the same ssid as on the wlan1 interface?

Thank you

imaljko4

Any idea somebody?

I still didn't get it to work.

imaljko4

So if i want to use paypal payment with user manager i have to leave the router open for ssl connection to signup and user manager pages.

So you are saying that it is not possible to close the connections from outside to routers Webbox page?

imaljko4

Use firewall and disallow access to ports 80/443 from outside (in-interface=public_interface). But the users need to have access from outside, just not for all pages. They need to be able to access the page : https://mydomain.com/user - they need to be able to access it on public ip, because otherw...

imaljko4

I have enabled SSL connections to my router (to my public IP) to be able to use payments. But now everybody can access my router login page and also the usermanager page from internet. Is it possible to enable access from outside just for specific pages, example: I want to enable access to: https://...

imaljko4

As i told you I am not limiting users in advance, I am trying to give them maximum speed etc. Because i have just few users so i dont have to limit them in advance. I am asking in case my network gets stuck because of some user that is downloading for ex. torrents, how can i limit that specific user...

imaljko4

Is it possible to make a backup on rb433 and then transfere it and restore on rb133?

I have tried to do it with backup and restore, but I am not able to restore the backup file on rb133, I am getting an error message.

Both of the routerboards have the same routerOS version

imaljko4

There should be separate profile for the specific customer then. The problem is that all profiles are visible on the signup paypal payment page. So if i would create a single profile for that user, this profile would show up also at the signup (payment) page. So some user could make a mistake and b...

imaljko4

Use Profiles to configure Rate-Limit for the users. I have created rate limits under Profiles- Limitations. But I am not able to apply this limit to a specific user that has already bought credits. This rate limits apply only for the whole profile but cannot add the limit just for one user for exam...

imaljko4

I am using User Manager test 4.9.

So how do i make the rate limit to a specific user?
If i click on the user i want to make the limit to, i don't have the option for rate limit.
Also here is the "Money Paid" problem:

User_manager.jpg

imaljko4

So its not possible to give a rate limit directly to a user? In the new User Manager I can only make a rate limit to a credit which I will give to a user. But i usually don't limit the users rates in advance, only in case i have an overload then i go and make a rate limit on the user that is downloa...

imaljko4

Everything works fine when somebody buys credit over paypal, exept for that under "Paid Money" its written "0.00" although the user has successfully paid and is already using the hotspot. Also when the user logs in to his User page, under "Money paid" there is also writ...

imaljko4

Thank you for your answere.
One last question:
Can i use the test version also for paypal and secure payments?
Or is it better to stay with the old version?

Thank you

imaljko4

Hello, Which User Manager version is stable and secure to use for Payments? I have upgraded my routerOS to version 4.9, and when i go to System package print it shows that i have User Manager 4.9 installed. But when i log to User Manager, it looks the same as the old 3. version. So i guess I still h...

imaljko4

but this script is for radius server. How do i make a script that will change my Dynamic IP entry, which is in the Walled garden? Edit: Ok i finally managed to recreate the script and make it to change my IP entry in walled garden. Here is how i did it if somebody else needs it: /system script add n...

imaljko4

Of course i already have enabled ssl and i have a signed certificate. The problem is that the return URL brings the customer to the user page, and not to the login page. And i cannot make a secure ssl connection to the login page. If I enable under hotspot the HTTPS login and make a https link to th...

imaljko4

Hello, I am having a dynamic address as my public router adress. I have setup a dynamic domain name for my address ex. mydomain.dyndns.org. My Problem is how to add this address to Walled garden in hotspot corectly? I am trying to setup paypal with secure ssl page and Usermanager. If i put in walled...

imaljko4

ok. Thank you for your help

imaljko4

Well i will not explain one more time, i have already done for several time. If you don't understand me, than please don't call me a cheater because this is not nice. And of course the customers would know that they have a minimum time per session. In my cafe the customers are paying per blocks of 1...

imaljko4

Hello, I would like to have the return URL in paypal to bring the customers to the login page. How to do that? If i put in the return URL ex.: 10.0.0.1/login.html or www.google.hr (this will also redirect them to login page), then i get a warning message from PayPal when i press on the "Return ...

imaljko4

Hello I am having exactly the same problem. My return URL is working fine if i copy and past it in the browser. But when i click on the return to Merchant link after the payment with pay pal, i also get the error message: As though the page is not accessible. But if i click on try again in Firefox, ...

imaljko4

No, you didn't understand me. I am selling accounts that have uptime limit 5 hours, but they can be used over a month period. So i have some customers that than buy this 5 hours, come everyday, use the internet just for few minutes to send and receive mails, and then still sit in the internet for ho...

imaljko4

Thanks for your answers. I will try to configure it. But just to make sure: I would like to use: 1) 1st radius server -User manager which is running locally on the rb433 and i would configure it for pay pal payments, and for prepaid vouchers. 2)2nd radius server- is a remote server which would deal ...

imaljko4

Hello, I have a HotSpot running on RB433. I would like to integrate payments for hotspot with credit cards in Croatia. I already have a Payment Gateway, but how to make a radius server which will make authorizations? Can i make a radius server on my own, or do i have to buy one from some hotspot com...

imaljko4

Hello, Can i configure my HotSpot to use two radius servers? I want to keep user manager (for PayPal payments)as one radius server, and would like to have another radius server for credit card payments. I have a rb433 with Hotspot and UserManager running on it. How do i add another radius server on ...

imaljko4

*) Does the email address contain some specific characters? Space? Dashes? Dots? Letters other than Latin? No, i have tried with more email adresses ex. myemailadress@email.t-com.hr and my_email_adress@yahoo.com but when i try to send a mail from winbox to the same email adress, then it works. *) D...

imaljko4

Is it possible to use authorize.net in Croatia?

thanks

imaljko4

Hello Until now, i was using an Paypal to recieve paypal payments, but i would also like that customers can pay with credit cards. On my paypal account i have the busines/ "website payment standard" and "Website payments pro" feature. With this feature it is possible to receve pa...

imaljko4

Hello I have setup up paypal with user Manager, but the sending of email to users, with their login details doesnt work . In winbox it says "error sending email: invalid TO address" when i try to send a test email from winbox like this: /tool e-mail send to=xxx@yahoo.com body=hello then th...

imaljko4

I have made this testings: When I copy the URL https://xxx.xxx.xxx.xxx/user?startpage=21&page=start and paste it in browser then it works. When i click on the same link from paypal ( i click on the button "return to merchant") it doesnt work the first time, but when i click try again t...

imaljko4

I have already added all the addresses to walled garden, as described in the wiki.mikrotik.com. Also i already have added the routers public address (domain) to walled garden. Only i didnt add the routers local ip address to walled garden, but i have configured the signup link to use the public addr...

imaljko4

Hello i have setup usermanager and paypal as described in the wiki. Everything works fine, but after i make the payment with paypal, and then click the "Return To Merchant" link, it fails to return. There comes error message: Problem Loading the page, and i can click on try again. When i c...

imaljko4

Hello, I am trying to make a custom login page for the hotspot. How can i create a form for the customers to be able to send an email to administrator? I mean they would need to be able to send the mail via the html login Page , because they wount be able to use their mail client, in case they didnt...

imaljko4

I am using UM 3.28, is it possible to change the logo and the colour of the UM page?

Or is this featur only for the new 4... beta?

Thanks

imaljko4

For Skype, you need a PC and an audio device (sound card, handset etc.).

so whats the use of mikrotik router then? if i need a pc handset etc..
I can use skype with a pc and headset etc., without mikrotik router.

imaljko4

ok, but how do i attach the phone to routerboard? it doesnt have any port(connector) for phones as far as i know. If i am using skype or voipdiscount, do i also need to run a server? Or does skype and voipdiscount have their own server running? sorry i dont understand this things very well thank you...

imaljko4

Is it possible to install an email server for receiving emails on rb433, because i have a dynamic dns domain and i would like to use it for receiving emails. edit: I want to use my own email server for receiving emails (my own domain). Can i use mikrotik routerbard to run the email server?

imaljko4

Finnaly i have managed.
I got a free 30 days trial ssl from rapid ssl.
I imported it and works great.
This is all what i will need for now.

Search found 252 matches

ros code