webfig is not to connect to any other router, it's for connecting to the router where webfig is present. it's not a separate application, it's built into RouterOS. hello normis When can customize WEBFIG? include the following functions： 1、customized interface（different languages ）； 2、customized use...

and how to use in radius ???

I did see the issue posted previously but one of the MT guys that the issue was acknowledged (radius attributes not being displayed on the login page) and would be fixed in ROS v4.4.

Mikrotik sergejs replied value like this : $(radius3-18)

We are using MT HotSpot. I need to use radius server return some custom error message. But I didn't find the right radius-reply Attribute of MT. I only found MIKROTIK Radius Attributes here: # MikroTik Attributes VENDOR Mikrotik 14988 ATTRIBUTE Mikrotik-Recv-Limit 1 integer Mikrotik ATTRIBUTE Mikrot...

i just test it ....

it is the RouterOS software bug !!!

when the SXT works in bridge mode....the signal LEDs only one LED lighting!

the next works in station pseudobridge mode , it works fine!!!

I got a problem of SXT.

I have two SXT briged,one of SXT signal LED always very low,but the real signal is very high !

But the second one did not have this problem!!!

my routeros version is 4.17,,,i have tried to upgrade to Version 5.0,but it still the same!!

I hope Mikrotik becomes more OPEN!!!! :) From my experience, anything that went "more open" became buggier and less supported too. That's why I always liked using dedicated "closed" products like MT, Cisco and the rest. :) YES,OPEN Means more market place!.maybe Mikrotik profit ...

Customers needs more flexibility products to choose.

I hope Mikrotik becomes more OPEN!!!!

We know that DD-WRT is a linux based OS,the hardware archetecture is also similar...


So,,,,,i think ,Atheros Based chips also can running RouterOS.......Powered By RouterOS???


Somebody,,,,do you think so???

maozilee, you can try to implement the idea of additional AP. One wireless AP is installed on router, you can create additional virtual AP. Payed customers use one AP (with security settings WPA/WPA2), free AP with HotSpot is another interface for all other clients. What kind of router do you have ...

Anonymous users always Refresh the login page,or make a web DDOS(i could see from firewall-connection when attack happened),it cause my routerboard cpu very high > 90%! you could make a simple hotspot enviroment (just press F5 to login page!) then watch your cpu useage！ please see the picture I uplo...

Hello, I think you can combine fewi post with this: http://wiki.mikrotik.com/wiki/Bruteforce_login_prevention_%28FTP_%26_SSH%29 Please give me the right answer! See , My TOPIC is "hotspot server is attacked by Non-authenticated users" you just setup a simple hotspot ,then not login ,just ...

@maozilee ddos attack from intranet :shock: Why won't you limit connections per user? Regards, Grzegorz. you could try to do limit connections per user in RouterOS hotspot and non-authenticated (just a redirect to login page web DOS ATTACK!) environment ！ I have tried many times, it doesn't work we...

From your original post: i could see from firewall-connection when attack happened If you can see excessive connections in the firewall connection table, limit the number of connections. If there's not an excessive number of connections during the perceived attack that won't work. The real problem ...

Maybe try limiting the number of connections for unauthenticated clients in the pre-hs-input chain. To only give each unauthenticated client 20 connections at a time: /ip firewall filter add chain=pre-hs-input hotspot=!auth connection-limit=20,32 action=drop i'm sorry ,your configuration does not w...

Perhaps you can switch to PPPoE (if there is no problem to configure PPPoE client on every current client), then non-authorized user will not be able to get access to the network at all. thanks sergejs , We know through MUM China. There is too much problem to confirgure PPPOE client on every curren...

I want explain why i want to use scripting to solve ddos attack from intranet ! When ddos happening, i could check connection table manually,then put the MAC address to black list! drop it! So ,I think that if i could solve it manually ,why not make RouterBoard solve it automatically? let me show my...

hello. I have a good idea to reduce DDOS attack to RouterOS. when DDOS attack happening , IP->Firewall->Connections from one src-address increasing very fast (more than 100 connections per a second) ,it makes cpu useage up to 99%! My solution is write a script which check cpu useage ,when cpu up to ...

i setup a hotspot wireless server. All of the customers using username and password login to the net. my problem is: Anonymous users always Refresh the login page,or make a web DDOS(i could see from firewall-connection when attack happened),it cause my routerboard cpu very high > 90%! My client is n...

or use 'per-connection-classifier' instead of 'random': it will make results more predictable Could you check my example? the result l want is: 192.168.200.1:80->192.168.1.2:80 192.168.200.1:80->192.168.1.3:80 what i did: add action=dst-nat chain=dstnat comment="" disabled=no dst-address=...

you can probably just setup 2 dst-nat rules, with the first one using a 50/50. just a thought. add action=dst-nat chain=dstnat comment="" disabled=no dst-address=1.2.3.4 \ dst-port=80 protocol=tcp random=50 to-addresses=192.168.1.2 add action=dst-nat chain=dstnat comment="" disa...

I have one internet connection,two intranet servers.

I know that PCC can run for two internet connections,,,,,

My question is how to make pcc work as a load balancing server????

the result like this:
XXX.XXX.XXX:80->192.168.1.2:80
XXX.XXX.XXX:80->192.168.1.3:80

thx!

I'm using RB433AH ，Routeros Version 3.22 In order get an ipaddress connection count [include all of the port connections from the ip], it could work in this scripting /ip firewall connection> print where src-address="10.5.50.1:64874" i tried in /ip firewall connection print where src="...