MikroTik

heviejob

The issue is still persistent, which made me result to setting up an x86 boxes using Epyc CPUs. I can confirm the SNMP graphing gaps are gone. So it must be a CPU time prioritisation in ROS and SNMP is given a low priority.

heviejob

I have several routers (1036, 1072 and x86)on ROS V7.6 and I did notice since updating to v7.6 SNMP polling on Librenms and Cacti is no longer working or works intermittently on high CPU loaded router. Interface graphing is mostly affected where nothing gets graphed anymore. Has anyone experienced t...

heviejob

Is this x86 bare metal or CHR? I'm about to fire up some epyc CPUs

How did the epyc CPUs perform?

heviejob

The issues (random video playback lags -wirered- or loosing wireless connection) vanished with downgrade to 2.8 of my two rb260gsp. Before downgrading I looked for transmission errors, but none were shown. Ralf. I had the same issue after upgrading to 2.9. The experience was so bad It cost me, seve...

heviejob

Am also looking for this kind of a setup. My situation is similar but it's Google constantly flagging connections as suspicious since only one IP is NATTED.
I would want to have like 5 IPs natting in a round robin setup.

heviejob

I had the same issue between rb750GL and rb850Gx2. After update to 6.83 on both PPPoE connections over VLANS stopped working. I fiddled for about an hour trying to get the VLANs to work and had to roll back to restore service. I think the changelog needs to be more detailed when such far-reaching ch...

heviejob

I have ROS 4.5 and FreeRadius. I have successfully used the Mikrotik-Address-List attribute with Framed-Pool to create a dynamic entry in the address list. I cannot seem to be able to use Mikrotik-Address-List & Framed-IP-Address to assign a static ip and create an entry in the address-list. Is...

heviejob

Am also looking for this solution.

heviejob

Can someone assist me with the Radius attribute to dydnamically add PPPoE IPs to address lists using
free radius v2

heviejob

Thank you for your suggestion but I was hoping to do it on the routerboard without complicating the configuration.

heviejob

Am trying to identify downloads (on any port and protocol) greater than 10MB before they start to download. Then mark the connection and packets and assign a routing mark to route them to a specific WAN interface. I have tried connection byte 10000000-0 but this breaks connections as they are routed...

heviejob

RB1200 was going to 100% CPU as a result of a process "networking" and rebooting due to kernel crashing.
I rolled back to 6.12 and I can now breath.

heviejob

Hi.
I also have the same Ram issue and no solution yet.

heviejob

I was hoping to get an answer on the question since am trying to Have a customer VLAN at the core router and carry it to a tower and tag the interface where the AP is connected. That way the I run a PPPoE concentrator on the VLAN at the core router. Problem is PPPoE clients cannot connect but if I d...

heviejob

I upgraded a RB450G not its bricked. I can't access it via winbox nor reset the unit. How can I recover it. It had 5.23 the upgraded to v6rc7. connect serial console, and see what it says. netinstall will probably recover it: http://wiki.mikrotik.com/wiki/Manual:Netinstall Netinstall recovered it. ...

heviejob

How do I get a RB450g into netinstall mode if I don't have a serial
console cable?

heviejob

I upgraded a RB450G not its bricked. I can't access it via winbox
nor reset the unit. How can I recover it.
It had 5.23 the upgraded to v6rc7.

heviejob

Does setting the port to edge=yes-discover help?

Matt.

Where do I set that?
On the bridge or the ethernet ports.

heviejob

I have the same issue but with a RB450G. I have bridged two ethernet ports and I also run a PPPoE server on the bridge interface. Evertime one ethernet port gets disconnected the all PPPoE sessions drop and reconnect. I have seen it on v5.22 and also on v 5.23. Am yet to figure out what might be cau...

heviejob

Its just unbelievable the way this isssue isn't addressed. Does it mean I stop using the routerboard and gove the edgemax router a try. In an industry where time is money, it was more expensive for us to follow this through with Mikrotik support, than it was to replace all the mips-be devices with ...

heviejob

Its just unbelievable the way this isssue isn't addressed. Does it mean I stop
using the routerboard and gove the edgemax router a try.

heviejob

Here are my mangle rules /ip firewall mangle add action=mark-connection chain=input in-interface=ether2 new-connection-mark=jtl-E add action=mark-connection chain=input in-interface=ether3 new-connection-mark=jtl-J add action=mark-routing chain=output connection-mark=jtl-E new-routing-mark=to_jtl-E ...

heviejob

Have you configured the classifiers to send out traffic equally?

heviejob

I have two WANs each with a public address and using PCC to load balance as per the WIKI.
Am trying to port forward to a server on my LAN but fails unless I stop the load balancing.
How is is possible to achieve the two?

heviejob

Am experiencing the same with port 9 on an RB1200. The port is flapping and getting a 87%
at times 90% packet loss. Am seeing port flaps twice every minute. Is there a remedy to this?
The reason we got the 1200 is to get extra ports but this is a let down to us.

heviejob

What is he looking for? Statistics for what private or public

Sent from my HTC Glacier using Tapatalk

heviejob

Filters did the trick.

/routing filter add chain=ospf-out action=discard prefix=x.x.x.x/yy

heviejob

I will try it and report back.

Sent from my HTC Glacier using Tapatalk

heviejob

I have kept setup and working well on 5 routers. I have two routers connected to two upstream providers with static IPs on them. Ospf is advertising them to all other routers and I don't want that. I just want to advertise private IPs only not the public IPs. I have "redistribute connected rout...

heviejob

I have gone through this thread and only read keeping the MTU standard at 1492 bytes.
Whats wrong with setting it to 1500 on a network that you fully control from CPE to
the transport network?

heviejob

For us, we only have snmp enabled. We have swapped the troublesome devices to RB1200's for now. I will set up a few of the MIPS-BE devices next week and test disabling SNMP

Have you got a solution to this problem?

heviejob

I tried it it didn't work. I had to put an entry for each local interface.

heviejob

I have a RB1200 with RX drops and RX errors on ports 6,7,8. Its connected to a wireless link with 4 rocket M5 and a RB750UP
on the other end which has no error on its interfaces. Is this a driver issue with the RB1200?

heviejob

Am told its a driver issue being investigated.

Sent from my HTC Glacier

heviejob

In all PCC examples I see only one local interface and multiple WAN interfaces. In my case I have 4 local interfaces each with different subnets. Am wondering if its possible to just specify source private IP instead of the in-interface. From add chain=prerouting in-interface =LAN connection-mark=no...

heviejob

ROS is 5.14 We have several new versions with improvements. Try v5.20 or v5.21 to see if your problem is still there. If you reboot it anyway, why can't you upgrade? I have been on v5.20 on a RB750GL and RB1200 since release and the problem still exists. The older hardware is not affected like a 45...

heviejob

please make a support output file after reboot and then make another one when you see that lot of RAM is used. After that send both support output files to support@mikrotik.com

I sent the support output files. As requested but I haven't got any reply yet.

Sent from my GT-P7510 using Tapatalk

heviejob

I just checked, its at 65.2% and climbing Is that high enough so that I can produce the
support output files? Am afraid waiting for it to go any higher will lockup it up like it
has done twice before.

heviejob

I reboot it every other day to avoid lockup that happened over last weekend.
I had to drive there to power cycle it.

heviejob

I have two RB750GLs which are using up full memory the available in ust under a week. The cannot run for a week without going to 94-100% memory and access to them via ssh, telnet, mac or web is not possible.I have the older 750G and a 1200 running for days with out any ram or cpu issues as deplayed ...

heviejob

Can you try to disable some functionality and see if it helps? Disable SNMP, graphs, logging to disk

I tried disabling SNMP but it didn't help. I log to memory, do I need to disable that too?

heviejob

Sounds like the problem we are having on RB750GL, RB750UP and RB2011

We have a ticket open but response from Mikrotik is slow.

yep. I also had a RB750UP which I replaced thinking its caused by its low memory with a RB750GL.
Turned out is the replace ment has the same issue.

heviejob

We have had same issue with several of the linksys routers connecting to MT pppoe servers. We found that if chap was enabled on the server profile, the pppoe session would dial in but no traffic would pass - disabling chap forced the linksys to use PAP and they worked fine. I finally managed to get...

heviejob

Same Problem on RB1100AHx2. Management ~50%, total CPU utilization ~70%-90% Very slow response in Winbox (one minute until ip->address shows addresslist), websites slow, sometimes timeout etc. After i deleted the device from Dude, from one second to another, everything was fine. Management ~0.5%, v...

heviejob

I had a 750gl lockup on me again. This time its the ram going to
Above 90%. Just wondering if it takes a mass protest to get things
working fine.

Sent from my GT-P7510 using Tapatalk

heviejob

Switched to 750gl, cpu is still going to 100% but not as often though this flash issues needs to
get addressed.

Sent from my GT-P7510 using Tapatalk

heviejob

I have similar experience with 2 rb750gl. Every few days flash consumes 100% and only a reboot resolves it.
Am still looking for a solution.

Sent from my GT-P7510 using Tapatalk

heviejob

I don't mean to hijack but it would be nice to have a script reboot the router if CPU or RAM goes to over 80% - 100%
for 5 mins or so. I have a remote router that is at 90% ram from cacti but now I cannot ssh to it, web access
is failing so is the API.

heviejob

Same Problem on RB1100AHx2. Management ~50%, total CPU utilization ~70%-90% Very slow response in Winbox (one minute until ip->address shows addresslist), websites slow, sometimes timeout etc. After i deleted the device from Dude, from one second to another, everything was fine. Management ~0.5%, v...

heviejob

Try Tapatalk

Sent from my GT-P7510 using Tapatalk

heviejob

Having a similar issue but with a web server doing dst-nat to it. Using one connection I reach The server but doing PCC load balacing kills access to it remotely its like connections from the Internal web servers IP are being load balanced hence breaking connections. Sent from my GT-P7510 using Tapa...

heviejob

Two questions:

1) Are you injecting routes when the PPPoE session is established
2) Are you authenticating locally or via RADIUS

Dynamically added routes in PPPoE can cause a lot of problems if they aren't correct.

Am not injecting any routes just the default gateway.

Sent from my HTC Glacier

heviejob

We have had same issue with several of the linksys routers connecting to MT pppoe servers. We found that if chap was enabled on the server profile, the pppoe session would dial in but no traffic would pass - disabling chap forced the linksys to use PAP and they worked fine. I will have to try that ...

heviejob

I stopped using it just lots of headache for me.

heviejob

I have several routers running PPPoE servers to internet connections to ubiquiti radio and other home routers like TP-Link using the inbuilt PPPoE clients without any issues. Yesterday I was setting up a linksys wrt120N PPPoE client and it dails in fine but doesn't allow for internet to go through o...

heviejob

I have the same issue whin a RB750UP.
Flash is using up CPU time causing reboots.
This happens during the day when traffic
at night the routerboard runs smoothly.
Wny solution to this yet?
I cannot even create the Support_Output_File
since flash consumes any CPU time left and
reboots.

heviejob

1. Please Dude on linux............................................!!!!!!!!!!!!!!!!!!!!!!1

+1

Sent from my GT-P7510 using Tapatalk

heviejob

One with more ram in it.

Sent from my GT-P7510 using Tapatalk

heviejob

I suggest reading up more on mikrotik's rate limiting or bandwidth management. From what i understand you cannot control hierarch bandwidth users consume. As told start with simple queues and move on from there.

Sent from my HTC Glacier

heviejob

Thank you. it worked.

heviejob

I have two routers am trying to route subnets between them but on one of the routers interface i have hotspot server running and its blocking traffic through. If i disable the hotspot server i can reach the subnets from either routers. I know how to bypass individual hosts but who do i bypass subnet...

heviejob

I have two routers i want to link up over wireless links and i want sub-nets on each router accessible to each other. On one routers interface i have hotspot server running. I assigned IPs on same sub-nets between the routers and i can ping them ok but adding routes to other subnets on either router...

heviejob

There is nothing in the logs on both routers. This is happening to downloads and when loading large sites or playing videos online. At the moment the download or video stops other sites load as usual. What could cause dropping of the connection since connecting back to the 450g alone everything goes...

heviejob

In my current setup I have a 450g at the core doing hotspot /pppoe on its interfaces facing clients. I want to add a 750g to the network and have it connected to the 450g via a wireless backhaul on an interface running ppopoe/hotspot. I managed to bridge the two but when i start passing Internet tra...

heviejob

My RB450G just upgraded from 5.6 to 5.7 . It works fine, but the CPU usage get high in "dhcp" package. Anyone has this? We also have this problem. I already sent supout file to support but they say the cannot find anything ... I have that problem also :( This is on a 450G board: cpu-used:...

heviejob

Just as I thought of doing.
Thank you.

heviejob

I have 3 routers connected in a ring fashion with one (RB450G) connected to the internet and natted. The other are RB750G connected to the 450 on different ports with different subnets, I have ospf sharing routes between them and all IPs are private. The 750G s have hotspot and pppoe clients on othe...

heviejob

By multi-dwelling i mean http://en.wikipedia.org/wiki/Multi-family_residential.

What is the maximum number of home plug devices that can be interconnected?

heviejob

Am looking into ways of proving Internet to Multi dwelling units and wireless is proving to be a tough choice which brings me to using Broadband over power line (BPL). Which vendor or equipment will work well with Mikrotik routers. I want to create a bridge from the router to each unit.

heviejob

Thanks. I have marked packets and placed routing marks based on the packet marks
and things are all mixed up. Let me check out the PCC wiki

heviejob

Which is the best way, to mark connections or packets for using in policy based routing. I have two internet connections and I want to route some traffic through on connection and others through the other based on either connection marks or packets marks and to ensure each packets comes back through...

heviejob

I have the script running successfully with one Internet facing interface. I added a 2nd Internet link now the script picks the IP address second one instead of the first one. I checked in the script there is no where to specify the interface to check so how do i add it? # Set needed variables :loca...

heviejob

Do you have any firewall (NAT) rules that masquerade (srcnat) the local IP addresses?
It could be the problem.

heviejob

Hey. Thank you for the prompt response. It didn't hit me it was covered in the manual.
I need to get some sleep and work on it when fresh.

heviejob

I have RB750G in production and want to replace it with a RB450G.
Is it possible to import the configuration from one to the other.
If so how is it done? I was thinking of uploading the config
backups to the new router and hitting restore button in winbox !

heviejob

I managed to login by mac using winbox. I didn't know there was a safe mode though.
Thanks for the reply.

heviejob

Thanks fewi for your advice.
I had many heard Squid is the best. The problem (for me), I don't know how to configure Squid with multiple WAN

That is why, internal proxy from Mikrotik is in my plan.

Don't be afraid to Google and spend quite some time on it. You will get an answer somewhere.

heviejob

Hi guys, I was trying to increase security on my router and I locked myself out. The router Is working fine as before but I put a rule that drops input packets from any IP. Now Its not physically accessible at the moment. Any way to undo the changes or access the router without resetting it? If ther...

heviejob

Is anyone using a redundant PoE setup? I have two AC power sources that are far apart from each other. I would like to power a single routerboard with both power sources using POE. I am thinking of a 12-24v DC switch that I can inject 2 inputs and a single output. I know APC makes them for AC but n...

heviejob

Try Layer 7 marking to block torrents since using p2p alone wont do it.
Remember it will use more processing power.

heviejob

Hi. I use DMA's radius manger/ billing server for AAA my clients. I manage the Linux box at the office but lately the power outages are just too much that the UPS gives up before power is back. I am considering getting a VPS and have the server on it. Is this a wise Idea? They say I get full root ac...

heviejob

I setup pppoe server on the same interface running hotspot and they can coexist.
Users can opt to login in using pppoe or hotspot and once one authentication
is successful the user is not asked to login using the other.

heviejob

Check out http://tyconpower.com/products/POE.htm They have DC to DC POEs and they support two power inputs.

heviejob

please can you explain me exactly LOS and what is her importance?

It means there should be no obstacle between the omni and the client receiver (cpe or laptop).
I would suggest http://wndw.net/ for starters. It has lots of info on RF

heviejob

Under simple queues the login hotspot users appear with their respective limit assigned dynamically by radius manager. I have noticed if I select global-out instead of global-in the simple queues work as expected but the traffic prioritizing is showing the aggregate speeds (RX and TX).

heviejob

Attaching the queue trees on global-total is now working. I can't see bytes and packets counting up.

heviejob

Am running a hotspot service and manage client login and speeds using radius manager. The radius manager automatically creates simple queues on mikrotik for a user when they login and the router then limits the upload and download. I later thought of prioritizing traffic using http://wiki.mikrotik.c...

heviejob

Thanks for clearing that up. In the mean time i will use http-pap as i acquire a signed certificate..

heviejob

I will have a look at it. The reason I stopped to use https since the cert was self signed and it threw the untrusted error. Where can I purchase a signed cert for use for my hotspot for use with private IP addresses?

heviejob

Am also having the same issue on on of my 3 interfaces running hotspot I had turned on https and I had a cert but i want to revert to http-chap but I get "login failed: password is not chap encrypted" What could be wrong since the other two interfaces running hotspot are working fine and h...

heviejob

I had a hotspot with multiple ethernet ports bridged together for a while, had constant problems, especially with Vista users. Never could figure out what the issue was, but I finally did as you and made each port separate ip/pool/hotspot server. Fixed most of the issues I was having. I don't know ...

heviejob

aren't 192.168.N.0/24 for etherN similar? =)

They are similar. I was hoping if I could do away with many IP-pools.
Thanks for pointing that out.

heviejob

so why do you need the same IP pool?..

I wanted all hotspot users to get the similar IP addresses regardless where they connect from.

heviejob

When it hangs, does the power go away or does the router stop responding? Also have you noticed if the lights on the ethernet ports still blink or do they stop? It should be possible to create a small circuit that will interrupt power for 10 seconds when it detects no activity for so many minutes. ...

heviejob

If i bridge them or add them to switch, I cannot use the individual hotspot login html files since they are all different since each Ethernet port has a hotspot running and each hotspot has different information on the login page.

heviejob

I have a RB750G with hotspot running on 3 Ethernet port each port has its own DHCP server and IP range. I want to move all the 3 Ethernet ports to use a single IP range (issue IPs from same IP pool. Is it possible and how do I do it?

heviejob

I will look at IPIP and see if it works since cellular carriers here just mess up pptp port until you pay to have vpn access.

heviejob

Just remembered something I wanted to ask (A little of topic). I want to create a pptp link to a mikrotik at the office but am using a gsm modem remotely and the provider has blocked vpn traffic. I use a linux box so which is the best way to do it. If there is a thread on this just refer me.

heviejob

We have a couple places where we run PPPoE server and hotspot on the same interface at the same time, and it works.

Just the confirmation I wanted. So when the PPPoE user authenticates the don't get the hotspot login in page right?

heviejob

Thats better. All my installs are on top of storey buildings and really use any RF cables unless its totally necessary. Powering the devices has always been my biggest challenge.

heviejob

I finally managed to resolve the issue. I had to remove all the nat rules applying to affected ips and reconfigured them. I learnt something while at it. Thank you for the advice it worked.

heviejob

The best you can do is flush all active connections via "/ip firewall connection remove [/ip firewall connection find]". That will affect people's ongoing connections, so it is interruptive. One more question. Is it possible for natting (src or dst) to stop just like that. And if I have m...

heviejob

Still nothing. Even a reboot is not solving anything. It nothing works I will just reset and do a full reconfigure. Thanks anyway.

heviejob

Ipbindings is ok and has been. I woke up today and I couldn't access the main server remotely but I can within the networks. The second one stopped working yesterday from the blue. Am thinking its a software issue/bug to the level that the router stops forwarding ports. Is there something like a flu...

heviejob

Well I know I will be in that situation in a few months. Am planning ahead so I will invest in extra gear to move clients to pppoe and have a mix of both hotspot and pppoe but on different interfaces. Thanks

heviejob

This is an overview. Ether1-wan --> connects to isp Ether2-hotspot1 --> connects hotspot clients network 192.168.16.0/24 and 192.168.1.0/24 for management Ether5-hotspot2 --> connects to other hotspot network 192.168.9.0/24 and 192.168.200.0/24 for management The first main server (192.168.1.159) is...

heviejob

I don't understand why you'd want to mix them in the first place. Both are methods to force users to authenticate before being allowed to use the network. I understand that perfectly but I have this scenario. I have customers on hotspot and I have got to a point I want to migrate them to pppoe and ...

heviejob

I have been using dsnat to access my linux box at my office from home using RB750G running ROS v4.11. I later added another server on the same router but on a different network. The setup worked great for over 2 months until i reinstalled the 2nd server (from fedora to ubuntu). That was yesterday. F...

heviejob

You run 240v up the tower via Cat5 cable? I find that dangerous. Why not just run actual power cables with protective padding. Thanks for the clarification. I was thinking in the same line just wasn't sure of it.

heviejob

Can you login via pppoe via that same interface running hotspot? I think one way you can get the hotspot login page is first not to login via pppoe. That way you get redirected to the hotspot login page. I never used these setup but I always wonder if both pppoe server and hotspot is enabled on the ...

heviejob

Just to reopen this. How do I calculate the amount of watts going out each port. What kind of power supply rating do i use say I want 8 watts out each port at 15v?

heviejob

Well from this part of the world am in copyright laws are non existent so not a big worry for me. By the way can squid block torrents o\if i force transparent proxy?

heviejob

I came to learn that customers will always complain even when its their fault. I have some who keep seeding torrents through out exhausting their uplink and they complain the connection is bad. If I block it they complain now am thinking of setting up a torrent server for my users where they queue t...

heviejob

Trying to block p2p is really a waste of time. Best thing it prioritize traffic this way you can throttle any traffic you don't want through.

heviejob

Well concerning the logs is it possible to save logs and retrieve then after rebooting since once I reboot it they disappear. One of the reason am asking for such a solution is because it has just happened twice in 6 months and it happens at the wrong time and the downtime could be solved by a reboo...

heviejob

I have a RB750G and once in a while it hangs on me and I cant get to it at night and users get really mad. What is the best approach I can take to even power cycle it remotely. Any solution/idea is welcome.

heviejob

Hi. I don't use userman but if you want https to work for hotspot u have to upload a valid ssl cert to mikrotik and check https login under server profile. I think using the same procedure you can force ssl login. If you use an external radius server its easy to force https redirect using apache web...

heviejob

Thanks for the heads. I will give it a shot so i know how it performs.

heviejob

I have been observing logs and i noticed this warning comes up if a user is logged on but communication between MT and the user is lost or your radius server is not responding to accounting packets sent to it. Check for both causes and try to solve them and you will not get the warning.

heviejob

Sure I will be doing that too.

heviejob

I have a router board RB750G v 4.10. Will the dude work on it and which version should i go for?

heviejob

I found a power solution, i will move it to a building with 24hr generator backup next week. I will revisit radius failover after moving the radius manager.

heviejob

I have upwards of 200 mikrotik + other devices accessing the same 3 Radius servers with no perceiveable problem. However, i do not use Radius for ppp authentication, so maybe that's enough of a difference. I *never* set Accounting-Backup because it seemed to break things early in testing, so i neve...

heviejob

I have upwards of 200 mikrotik + other devices accessing the same 3 Radius servers with no perceiveable problem. However, i do not use Radius for ppp authentication, so maybe that's enough of a difference. I *never* set Accounting-Backup because it seemed to break things early in testing, so i neve...

heviejob

I use 4.10 and I have timeouts on the secondary radius status when i set it to accounting-backup but nothing when i disable accounting-backup. I have run out of ideas now since it even stopped working and i havent changed anything.

heviejob

I Set as you explained but for some reason failover is not working. What version are you using? Am using 4.1 on a RB750G could it be a bug in my version?

heviejob

I tend to list the primary and secondary radius servers as alternate entries under Radius in winbox, with a timeout of 500ms. They are also listed 3 times, so the MT gets 6 goes in 3 seconds to hit either remote Radius server. The last entry on the MT is a third Local Radius server that has a 24-ho...

heviejob

Then why was it not working before I set different timeouts?

heviejob

I set time out on both servers at different times and disabled accounting-backup. Is that better?

heviejob

It worked after changing the time out to different values on both radius client entries. I noticed they need to be well spaced to allow for failover.
Now mysql master-master replication takes care of syncing th databases

heviejob

I have solved that using mysql replication on both servers but the underlying problem is switching over in case the main radius server stops working. is it master/master replication?.. then set "accounting-backup: no" on both servers - in that case you should get authentication failover, ...

heviejob

I have tried that a couple of times and I noticed from logs that if the main server is off customers get RADIUS server not responding when trying to login and those already logged I get RADIUS accounting request not sent: no response.
Is it a bug in the radius package or what could be wrong? Anyone ?

heviejob

so, accounting-backup RADIUS is not used for authentication?.. anyway, you will need some tool to synchronize your accounting data on both servers in case of failure of one of them I have solved that using mysql replication on both servers but the underlying problem is switching over in case the ma...

heviejob

/radius print value-list 1. service: ppp login hotspot wireless called-id: domain: address: 192.168.1.159 secret: xxxxxxxx authentication-port: 1812 accounting-port: 1813 timeout: 1s accounting-backup: yes realm: 2. service: ppp login hotspot wireless called-id: domain: address: 192.168.200.159 secr...

heviejob

I would like to try that but am not good in writing scripts so if u can point me to a script which i can edit to suite my need I would appreciate.

heviejob

I have done exactly as u advised but if am not on the watch out customers will not be authenticated in case the main radius server fails mainly due to power failure. If i could get a solution to handle failover between the two radius servers i can have sleep at night.

heviejob

I have tried that setup and i get "RADIUS server not responding" when they are both have accounting backup enabled. If I just enable one to Accounting-backup they both get accounting packet but only the main one authenticates users. In case i switch off main radius server the backup server...

heviejob

I have two Identical freeradius servers and i want to recieve accounting information (one as backup) But if the main one fails the 2nd one to take over automatically. Which is the best approach?

heviejob

I noticed one server has to be marked accounting backup but if the first radius server fails the second one doesn't automatically take over (failover) I have to do it manually. Is there a way to automate the failover solution?

heviejob

I just checked one and it works like a charm now i have to test when one is off

heviejob

I have done as u said and immediately i get RADIUS accounting request not sent but if i uncheck accounting backup from the main server but leave the other checked it stops. So do i check one or both?

heviejob

I want to add a second radius server (freeradius) to handle requests when the main one is experiencing problems.
What is the best approach to this. Do i enable accounting backup on the main radius server and add the ip to the backup radius server?

heviejob

It was html error. I fixed it. Thanks!

heviejob

I am running a hotspot on rb750g on 3 of the 5 interfaces. 2 use the same hotspot directory while the third uses a different one with more infomation on the html code. The login page on the 3rd interface loads half way not bringing up the login form and all code below the form. I have gone through t...

heviejob

I also have the same issue with. AM using RB750G and radiusmanager 3.7.1 I cant seem to figure out whats going on.

heviejob

Here are firewall rules. /ip route> print detail Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit 0 ADS dst-address=0.0.0.0/0 gateway=41.212.11.1 interface=ether1-wan gateway-state=reachable dista...

heviejob

I have not configured any proxy server. this is what i get when fetching gmail wget gmail.com --2010-05-13 00:21:11-- http://gmail.com/ Resolving gmail.com... 209.85.227.17, 209.85.227.83, 209.85.227.18, ... Connecting to gmail.com|209.85.227.17|:80... failed: Connection timed out. Connecting to gma...

heviejob

Am having an isolated case where a single comp stopped browsing but nslookup works fine. I have enabled masquerading on the subnet which the comp belongs. What could be the issue?

heviejob

You are saying i have two subnets running on the same interface one for the APs and the other for the clients? Is that correct.

heviejob

I tried putting entries to ip-binding now i cannot browse from the webserver but i can ping. WHat could have gone wrong?

heviejob

Yes I want to bypass the AP subnet in this case 192.168.1.0/24 so that i can access it without hopstop authentication.
Am having issues when connecting using the above setup, the connection gets too slow.

heviejob

I want to have two different subnets on an interface running a hotspot. One subnet 192.168.1.0/24 for management (server and ips for access points)
the other is 192.168.16.0/21 for hotspot clients. How do i achieve this.

heviejob

Am using a RB750G router and i have access points on 3 of the Ethernet interfaces. I want to have the access points on 192.168.1.0/24 network and they are spread out between the 3 Ethernet interfaces while clients are on 192.168.8.0/21 network. How can i achieve this using VLANS ? I want to isolate ...

heviejob

I think i get your idea. I will work on it. Thank you.

heviejob

Am using ubiquiti gear and they support vlans. At one point i notices the AP was on a different network from the hotstop and clients still connected. Is there another way other than using vlans? If you don't mind can u give me a sample config or point me to one.

heviejob

Generally speaking it would be good practice to not put management IP addresses on the same network customers are on. Nice you pointed that out. is it possible to have the access points on a different ip range from the customers and it serves ips from a different ip range. This is what i mean: hots...

heviejob

I have a RB750G and i have setup a hotspot server ip 192.168.1.0/21 on one interface. On the same interface i have an Access point (a nanostation M2) i have assigned a static ip 192.168.1.2/21 to it and clients connect through it. I cannot ping the the AP(192.168.1.2) or even ping any connected clie...

heviejob

Thanks again.It works.

heviejob

I exclude it from the dst-nat rule that forwards connection to internal server?

heviejob

Thanks, its working like a charm but now i cant access mikrotik router via the public ip. Only from inside the lan. what do i add?

heviejob

I have a similar setup but my public ip is dynamic so i cannot specify any ip for dst-address. Can i specify the getaway interface receiving the dynamic ip instead? How do I do it?

/ip firewall nat add chain=dstnat dst-address=10.5.8.200 action=dst-nat \
to-addresses=192.168.0.109

heviejob

Thanks, Am using freeradius and authenticate against a radius manager which stores information of the users, So i guess that will work.

heviejob

Ok then let me try it and i will give my feedback.

heviejob

Thanks, i have read the posts but i would like to know the harm in having both in on one interface.

heviejob

Whats the harm in having both on the same interface?

heviejob

Is it possible to have both a hotspot and pppoe server on the same interface and use the same ip pool to assign addresses?

heviejob

Thanks. That solves my problem.

heviejob

I currently have one mikrotik router and a radius manager and all is ok. I want to add two remote sites and have clients at each so i will have 3 sites all with wireless backhauls to each from the internet gateway where I want to have a RB750 (at the gateway) and have pppoe and hotspot running on al...

heviejob

Hi. I have a mikrotik router os v2.9 running and have two nanostation2s to connect clients to. I realized clients on windows have an issue using the network. They get an ip and dns but cannot get the login page nor ping the gateway despite having very good signal strength. I have cabled clients and ...

heviejob

Hi. Am experiencing the same problem with my router version 2.9.27. I want my hotspot users to access the billing engine to reload their accounts. So i added the ip of my webserver on the lan hosting the billing engine to walled garden / ip entry, but still user have to authenticate to gain access t...

heviejob

Hi.I want hotspot users to gain access to the user control panel but all the entries I enter are not working in the walled garden area. For example my webserver with radius manager is 192.168.1.159 and the hotspot iprange is 192.168.10.1- 254 [admin@MikroTik] > ip hotspot walled-garden ip print Flag...

Search found 171 matches