It might be best for you to read my VLAN tutorial, linked in my signature. Read slowly. It will all make sense. It shows how to mange all devices on the network. How to setup everything from scratch. Wow, that's a really great tutorial at a glance. I will read over it slowly after work and see wher...

Hello Mikrotik community. I've been using Mikrotik for a long time in a very very basic setup and as I grow i'm finding new seemingly basic things that I just can't get my head around for some reason. I'm going to try and not ask stupid questions that can easily be looked up, but I do need to get a ...

I completely respect the consultants in this field, however, in my experience they want to simply do the work. I am actually trying to learn, so if there are specific consultants that are ok with a little teaching, then great, but that has not been my experience. I just need someone familiar with th...

Hey guys, please forgive me for my lack of detail, but I'm limited on time and just want to put this out there. I basically have a cable internet connection and am running a CCR1009-7G-1C-1S+. I'm happy to blow away my whole config, but I need help setting up the internet connection + VLANs for mult...

Hi guys. Firstly, thanks to all of you who give back to this forum and make it an awesome resource of knowledge. I've spent a great deal of time reading up on how to separate my networks so that my wifi users cannot access my LAN, etc. After having configured most everything, I have come to the poin...

Hi guys, I have used a mikrotik router for a really long time now, but I've never really used them to their full potential. I would like to someday get my CCNA as I work in the field, but I have a lot of other things to focus on right now (VCP, etc) and just dont have the time. What I'd like to do i...

Hi guys, I've been a long time using of the Mikrotik devices and I really enjoy their flexibility, and price point. There is so much to them that I do not understand yet, but I'm hoping you guys might be able to shed some light on my situation. The situation is this, I'm on a cable modem, I have 1 g...

Thanks janisk. I've got one more problem now, and its in production, so hopefully I can get a quick reply from you guys... I'd happily pay for it of course. So the current problem is that users inside cannot access the mail server by going mail.domain.com because it's an outside address I guess. The...

Alright guys, I got it all working great. Thanks for all the help in making this work. I did have one last question. I noticed that MASQ was at the bottom of the nat list... it did not seem to work unless that was the case. When it's at the top, I was unable to get onto the internet if I recall corr...

Thanks guys for the help. I'm almost there. My last question is, can I just forward ports to the nated addresses? and what about this configuration.... /ip address add interface=LAN address=192.168.0.1/24 add interface=WAN address=1.1.1.2/24 add interface=WAN address=1.1.1.10/24 add interface=WAN ad...

Thanks for the input taduikis. That is definitely different than I thought it would be. I have to install this tomorrow, so I'm hoping someone can shed a little more light on this, but my client wants NAT internally for firewall purposes and that is how the machines are all configured right now, so ...

Hey guys, I'm just wondering if someone can point me in the right direction for setting up a router on a /26 connection that a client has installed from a cable provider. The provider is not doing routing, and so we need to configure this router as the internal system. In my experience, if i have se...

If you wanted to set in-interface to LAN (assuming that's the name you've given it), would that work, but is not needed?

Thank you Very much! That's exactly what I needed.

So I set the interface to my gateway, but if I set a dst address, would that be the public IP or the internal ip of the machine forwarded to?

Hey guys and gals, I setup a routerOS box(RB400G I think?) and I'm running 5.14 at the moment. I'm not sure how to export my list of firewall rules, but I'd be happy to paste them here. I did a simple thing like this, but using winbox. add chain=dstnat action=dst-nat to-addresses=192.168.1.202 to-po...

Hey guys, I'm at this again and I'm wondering about a few things. I've installed SNMP on my windows 2008 server and I've got the dude running on my workstation. I'm trying to do this without installing the dude on the servers, is that possible? Does the dude read direct SNMP values? I'm also trying ...

Hey guys, I'm in the process of changing a mikrotik IP address but need to do it remotely. I've seen some other guys go into a special mode in the console to do things in case they dont work, but I cant seem to find that. I'm using winbox and wondering what the best way it to do this so I dont end u...

Hey guys, so I've already received some help from Dmitry(a Mikrotik Consultant) and I am posting this as a How-to as well as getting a little more info. He has been rather busy lately and I dont want to pester him anymore. So here is my setup: Old Network is on the left, New on the right. http://hos...

Yes it is. Easy. /ip firewall nat add chain=srcnat action=src-nat to-addresses=10.0.0.46 This will srcnat all localnet ips as 10.0.0.46. I normally would use "action=masquerade", but since there are two ips assigned to WAN-0 (ether1), that is unpredictable. ADD: This applies only if 10.0....

No problem as long as the interface networks are not identical. ether2 is ok for ssh into the router. It better be. That is what I use most of the time! Assign 10.0.2.1/24 to the LAN-1 interface. Then get on the LAN-1 interface with a 10.0.2.x/24 ip, and ssh admin@10.0.2.1. done and done. Thanks so...

..

How about SSH to the RB450 on LAN-1 (port 1 in 0-4)? Or should I have just made port 0 the LAN port?

I knew i would leave info out... sorry. The WAN is being connected to a comcast cable modem(DHCP) and has been configured with dhcp-client. the 10.0.0.46 port you see is reassigned(or is supposed to be) once i plug the unit into the cable modem. the 10.0.0.240 was just a static ip i set for configur...

Hey guys... I recently purchased a new RB450 and RB450G and had the pleasure of working with Dmitry to configure one of these units. But I'm trying to configure the second unit on my own and I'm running into some trouble. Hopefully this isnt basic stuff that I just missed in the manual--if so, my ap...

Hey guys, I'm reading right now and am sort of at a loss as to what I need to do here or even what this router is capable of. I am only use to routers like m0n0wall, and other more user friendly routers, so I'm a little dumb here, sorry. I'm trying to figure out if i need / should use NAT or if I ha...

I too am looking for a basic step by step to get me started. I have found a ton of great stuff in the manual, but most of it uses telnet commands and right now I'm stuck in the winbox config and am not having success configuring an ip address. That should be the first thing on this page: http://www....

Thanks for the info. This 1 router will be for 3 servers (1 file server & 1 SQL server...that wont see any internet traffic, and a web server) So I'm thinking that unit will work fine for this small application. But I'll get an RB450 as well for me and my other clients. So am I right to understa...

Hey guys... I'm totally new to RouterBOARDS but have been using Soekris with m0n0wall for a long while now. I'm wondering what board would be best for my application... I am putting 3 servers at a datacenter and would like to use this as a firewall primarily. VPN might also be used, but probably onl...

Hey guys, I am a totally new user to The Dude, so excuse my ignorance. I've been reading through a lot of material and I've found myself kind of frustrated with a lack of a beginners tutorial. So I'm hoping this will be home to one once I figure everything out. For starters what I've found out: Ther...

Hey guys, sorry if this question has been answered but my search didnt yield an answer. So I have a few servers in a DC somewhere and I'd like to be able to monitor all their CPU, HD, Memory stats from a remote box. The box is technically in the same DC but its on another network. So I'd be traversi...