MikroTik

ceL

I'm releasing a beta version since the original version was missing a few things, I fixed several issues with the script and added an example.rsc script. I also forgot to add an option to the ssh connection to disable stricthostkeychecking in the original. Please let me know what you think of the sc...

ceL

I've just developed a bash script which manages your mikrotik routers (performs backups, mass import rsc, mass command run). I will add more features when I have more time but I just wanted to see if anyone else might find it useful. Spent a few days on it so that I could perform things quicker and ...

ceL

For some reason in v3.11 if I add a routing mark it creates a table but if I remove everything in that routing table the table still exists in the table list but it has no routes in it at all, and I don't have any rules pointing to that table or routing mark, I think in 2.9 it would automatically re...

ceL

I'm trying to create a tunnel from our local network which is 10.0.0.0/24 and basically we are connecting to another router that has a bunch of class b 10.x.x.x subnets so I created a policy in IPsec on both routers to say the src address is 10.0.0.0/24 and the dst address is 10.0.0.0/8 but I think ...

ceL

Figured it out.. was someone's old linksys router connected incorrectly and setup wrong, and the firmware they had on it had a bug that was doing that, just sent it the DD-WRT firmware killer, all is good now

ceL

For some reason our clients start to drop packets and everything and I believe this has something to do with why there link is dying, does anyone know what may be the cause of this? We have 3 Motorola Canopy AP's plugged into a switch and going into this Mikrotik, I don't know if it's just an ip con...

ceL

Yea I see the same thing too, hopefully this gets fixed quickly lol I'm sure it will though

ceL

Can anyone confirm that this works?

ceL

Will we ever get a MAC-NAT feature, maybe in v3? I would like to be able to not have to run WDS for each client that needs a public ip address, and would rather not route little networks to these CPE's either just for 1 ip address, I know Tranzeo's utilize the MAC-NAT technology but why not MT?

ceL

You use simple queues and there are 2 little arrows on the right next to the 'Target Address' field, click the arrow pointing down and add your 2nd ip address then click the down arrow again and add the 3rd address then put in your Max Limit's up and down.

ceL

I have 2 wireless interfaces in a router both of them are used for backhauls, they both go to different towers and there is no bridging or anything being done on them aside from nstreme, just a regular ap-bridge and station setup, once one of the interfaces lost it's backhaul lost the other interfac...

ceL

We recently bought some Poweredge 1550 1u rackmountable servers, but come to find out we cannot get the SFF IDE to CF adapter we bought to work correctly with them, unhooked the SFF IDE cdrom drive and hooked it up to the CF adapter and it doesn't detect it at all, although it does show a green led ...

ceL

Only problem is if you only export you lose your passwords and ssh keys and what not but you get the configuration in plain text which is good, oh well maybe I'm asking too much.

ceL

We do daily backups of our routers and if we have a router fail or what not we will use the backup on a new router with new wireless card(s), is there some utility that will let you view the wireless settings from the .backup file or view the configuration all together rather than having another bac...

ceL

So that basically we can just authenticate an entire vendor so when we have installations we don't have to go in and authenticate them since we are not using radius yet and we have towers with all Mikrotik CPE's which we use R52 cards in and the vendor starts with 00:0C:42:xx:xx:xx it would just mak...

ceL

Well I don't think it's such a bad idea because we have RouterBoard R52 cards and the people around here hardly know anything about computers as it is, plus we use WPA2, I'd just like to use WPA2 and MAC filtering both but I would like to do wildcards to make it easier on myself not having to login ...

ceL

Does anyone know if it's possible to allow just the first 3 octets of the MAC address for example... mac-address=00:0C:42:xx:xx:xx just like a wildcard so anyone that tries to register with my AP which begin with that OUI will be able to connect?

ceL

It would be nice to be able to specify only a handful of ports or ip addresses in torch like, port 1-1024 or something like 6660-6669, and maybe for ip addresses along with the cidr which it already does maybe a 10.0.0.2-10.0.0.10 for example (similar to what the address-list feature can do with fir...

ceL

We have a network which is 10.4.4.0/22 routed to another mikrotik, if we disable the interface that, that network is assigned to for some reason the packet count shoots up to like 600 to 700pps on the interface which we are routing that network to until that interface with the 10.4.4.0/22 network is...

ceL

Anyone?

ceL

Does actually specifying the interface in the simple queue rather than using 'all' bring the load down on the processor at all, I'm trying to tweak out my mikrotik's to save as much cpu as possible. If anyone else has any tweaks please post them.

ceL

Does anyone have a list or know which daemons are compatible with Linux, I searched the forums and only saw that mainly Windows syslog daemons were compatible (Kiwi Syslog Daemon, etc...) I'm trying to find a daemon for Linux/*nix that is easy to parse and I can create filters to only get the data I...

ceL

Is there a web page within the hotspot I could redirect the user to and it would make the Mikrotik remove that mac address of the person from the hosts list? I'm assuming that no one is going to help on this matter since we still haven't heard anything and I've searched and saw previous people compl...

ceL

I'm having the same issue, we are using freeradius with radius manager, and if a user connects and registers or what not it puts them in the radius manager/mysql db fine but I always have to go into the hosts tab on the mikrotik and remove the mac of the customer then they can surf fine but I really...

ceL

what about the overlapping range problem with the spamhaus drop list, i always get that when i import it and then the script just fails

ceL

At random times throughout the day we might lose our backhaul link to a site that is 7 or 8 miles away, we are using CM9 cards in both, we've replaced cards and everything, changed channels, running in bridge mode, I can ping the other side with very low latency, sometimes it will spike but not much...

ceL

I'm assuming there is no other workaround to get WoW updates to work properly without allowing bittorrent :( We have a lot of customers that play WoW and always hear the complaining but they can use fileplanet or any other web site to get the updates, I guess they are just lazy, maybe I'll make a lo...

ceL

I'm trying to get a vlan to work properly with my canopy equipment and a rb532, I've upgraded the router to the latest stable MT 2.9.38 and I can get the traffic to pass through the vlan the only thing I'm running into is when I create a bridge interface and add the 2 vlan's at the bridge interface ...

ceL

any suggestions?

ceL

We have 1 gateway router that handles all the traffic out of our network which is a 2ghz machine with a compact flash to ide adapter, it is running 2.9.35, we have a bandwidth max of 20meg total in+out, I have setup a simple queue to shape the total or 'total-max-limit' in MT to 20meg, I'm not sure ...

ceL

ugh and another addition to this matter, would i join the eoip interface to the bridge then i assume

ceL

Would that be the only way to join to router boards that are up on a tower together keeping them in the same network for a sectorized setup? And would simple queueing still be possible?

ceL

well could i get routerB to be in the same network as routerA the 10.0.1.x network as you say, i don't know how that would be accomplished i guess or would they have to be seperate networks?

ceL

Is it possible to bridge across routers, for example if routerA had a 10.10.10.1/24 network assigned to bridge1 with 3 ethernet interfaces (ether1, ether2, and ether3) and you had a router that was for example routerB I guess you would have it connected through a crossover from say ether3 on routerA...

ceL

Another thing is, you shouldn't have an ip addresses on any interfaces that are in your bridge correct? Just on the actual bridge itself?

ceL

Could we maybe get some sort of implementation of 'lynx' just like in *nix environments, would be really handy for me and hopefully other people as well, not sure what kind of trouble that would be, maybe just have a lynx package that you could install.

ceL

Are there any howtos out there on sectorizing some CM9's on a MT, basically I've got 2 routers, both routers have 2 wireless cards in them, 1 is for a backhaul the others are just CM9's for the sector, basically if someone could help me figure out how I can bridge them together on for example a 10.0...

ceL · I'm running 2.9.18 if that makes a difference.. any help would be appreciative.

I'm running 2.9.18 if that makes a difference.. any help would be appreciative.

ceL

I'm having a strange problem with my bridge I believe but what it's doing is at random times it will not let me winbox to my router but I can still ping the router perfectly, I tried to open winbox and do a mac scan to find the router but I don't see it, I have another mikrotik hooked up and I do a ...

ceL

Could we get an option to reverse dns source or destination addresses in the torch dialog, I guess it would kind of be like a 'netstat' except in realtime and I could tell some of the sites and things people are accessing quicker than dns'ing the ip addresses myself or stopping the torch to grab a s...

ceL

Torch suggestion: Could we get an option to reverse dns source or destination addresses in the torch dialog, I guess it would kind of be like a 'netstat' except in realtime and I could tell some of the sites and things people are accessing quicker than dns'ing the ip addresses myself or stopping the...

ceL

Sorry posted in wrong place...

ceL

Also maybe a way to do logging to a specific file like you can with the packet sniffer, I'd love to be able to do that with some firewall rules that I have in place instead of them just going to the memory or ramdisk whatever you want to call it and the logs getting lost on a reboot or what not.

ceL

I wish we could get an option to reverse dns source or destination addresses in the torch dialog or in terminal, I guess it would kind of be like a netstat except I would be able to tell some of the sites and things people are accessing quicker than dns'ing them myself, would this be a good suggesti...

ceL

I backed up a router we were using previously and it recently died and I can't remember what exactly the version of mikrotik os was running on the old one but I think it's close to the one we are running now which is 2.9.23, I know the winbox interface was the same so I didn't know if it would screw...

ceL

I backed up a router we were using previously and it recently died and I can't remember what exactly the version of mikrotik os was running on the old one but I think it's close to the one we are running now which is 2.9.23, I know the winbox interface was the same so I didn't know if it would screw...

ceL

Is this encrypted torrent traffic detection in the latest version or which versions did it start at so I can start upgrading.

ceL

Lets say I have a network that consists of 5 computers, on a 192.168.1.x network (class c/24 bit), I have 3megabit of bandwidth from my provider and I want to be able to share the bandwidth like when there is no traffic except from one ip/person on the network they can use all 3megabit, but when som...

ceL

So I wonder if the traffic will be invisible to a torch? I don't know if it's a totally different protocol I guess I'll have to play with it myself, if anyone else has anything on it let me know.

ceL

Not good :/ http://torrentfreak.com/encrypting-bitt ... c-shapers/

ceL

How's the latest bittorrent protocol stand up to the mikrotik? I know that they've been working on a new protocol to encrypt it I guess sort of like ipsec so that the traffic can't be shaped.

ceL

I have an ip pool setup 192.168.1.2-192.168.1.254 and the dhcp server is setup right at least I think it is, well my clients are getting leased backwards i guess, first person gets .254 second gets .253, is there a way to reverse that I guess? I tried making the pool backwards but that didn't fix it...

ceL

i guess no one knows a good way to do this?

ceL

Trying to figure out the best way to handle my e-mail server router as far as bandwidth, I need some sort of connection queuing like to allow maybe 100k/sec to each connection in or out, and a global maximum for those queues like 3meg total. Is this possible, if so can someone explain how to do this...

ceL

anyone else have this issue?

ceL

well seems like its just the wireless interfaces that will do it :/

ceL

could someone else try opening the winbox and going to the wireless button on the left then double clicking on your wireless interface, then hit 'cancel' or 'ok' then close that wireless window, everytime i do it it just crashes winbox and i can reopen it with no problem, just does that everytime

ceL

sorry, don't run MS, i run slackware :/ and i wine the winbox but i guess it could be a compatability issue

ceL

I can get into my router just fine but when I click a menu like interfaces it will just lock up winbox and I can restart it fine but still the same over and over a lot of menus seem to cause my winbox to lock up, not sure if it's a problem that I'm the only one facing or if other people are having t...

ceL

I take it no one can?

ceL

We have some weird traffic that in torch comes up as the icmp protocol, I tried to drop in/out interfaces all icmp protocol and it still was there showing traffic and my interface traffic for my gateway had 800 rx packets but like 40 tx packets which is really weird and the fact I couldn't drop the ...

ceL

Tried blocking all icmp traffic, still really not helping, anyone have any suggestions on what to do?

ceL

We have about 900 rx packets a second but only about 70 tx packets, something is just killing the network, the torch shows icmp protocol with src address of 0.0.0.0 and dest address to whomevers ip and just constantly going 400kbps, can't figure it out, please help!

ceL

I've read over the butch whatever post on that site about bursting and still I am confused just need some conformation on some things, please help.. Max Limit: Once average speed hits B-threshold speed is controlled by M-limit as long as average is below B-threshold, then the speed limit is set by B...

ceL

I've read over the butchwhatever post on that site about bursting and still I am confused just need some conformation on some things, please help.. Max Limit: Once average speed hits B-threshold speed is controlled by M-limit as long as average is below B-threshold, then the speed limit is set by B-...

ceL

I'm curious what limit-at really does, the documentation I read and can't seem to interpret it correctly, but the other question is the burst-threshold, that is another thing I'm also a little fuzzy on, if anyone can just explain what it does and maybe an example of how it works I'd appreciate it gr...

ceL

i'm 2.8, that manual doesn't apply to me, kthx nice try though, hense why I said "older mikrotik", but anyways what would you use the limit-at feature for, as I read the documentation and understand it as when this is on if someone else with a higher priority needs more bandwidth it will l...

ceL

Don't think my older mikrotik supports "direction" but it looks like it's working when i set the tx/rx speeds for them

so i'm not complaining, but how does burst-threshold work? and burst-time, 60/60 would be 60 seconds for tx and 60 seconds for rx right?

ceL

You have been a HUGE help for me I really appreciate it and I would love to shake your hand hehe, this was so confusing for me, thanks again

ceL

One more thing, will I need need 2 simple queues per IP one for upload and one for download or not? I'm sort of confused and the documentation is a little hard to understand in some areas, but could I just change the Red queue type I had before to a "Kind: pfifo" and it should work right? ...

ceL

I've tried using Red and PCQ both to limit bandwidth down to 256k/128k only for specific IP addresses, actually we have 2 class c's I setup simple queues for each IP which was 2 simple queue rules per IP which in the end is around 400 simple queue rules, this caused the load on the router to go to 1...

ceL

I've tried using Red and PCQ both to limit bandwidth down to 256k/128k only for specific IP addresses, actually we have 2 class c's I setup simple queues for each IP which was 2 simple queue rules per IP which in the end is around 400 simple queue rules, this caused the load on the router to go to 1...

Search found 72 matches