MikroTik

vmiro

This is the most important info: "It is cosmetical bug and does not influence OSPF working." Only if you like your log to be clear, than I understand you concern

vmiro

Great, thanks for the info

vmiro

Bumpbump, on between any 7.11.2. default-v2 { version: 2 router-id: x.x.x.13 } backbone { 0.0.0.0 } interface { p2p x.x.x.13%l2tp-x} neighbor { router-id: x.x.x.254 state: Full } received wrong LS Ack for router x.x.x.13 x.x.x.13 0x80000382 expected 0x80000383 (the so called +1 , 2 -> 3) Responding...

vmiro

Hi,
actually I just managed to install MT CHR v7. Before, I tried with v 6.48.6 and as an extra step now I zeroized sda device before copying image file:

dd if=/dev/zero of=/dev/sda bs=512 count=1

MT runs as expected

mIRO

vmiro

Consider using below code in Rescue Mode to resolve the problem: wget -O- https://download.mikrotik.com/routeros/6.48.1/chr-6.48.1.img.zip | funzip | dd of=/dev/sda bs=1M (replace the disk image link with the newest available version on the download page ) and then reboot finally open your IP in an...

vmiro

I use to have problems with TLS like you do and I had to disable "Require Client Certificate" option. The problem I got now with OVPN seems like a MT bug. No matter what I do in the configuration only reboot helps. Changing to some other VPN protocol is not an option, because I have hundre...

vmiro

Hi, yesterday one of our client router stuck again, after 21 days. Log is full of ovpn and l2tp entries: May/04/2020 22:48:53 ovpn,info TCP connection established from 95.156.170.96 May/04/2020 22:48:53 ovpn,info TCP connection established from 46.239.53.103 May/04/2020 22:48:53 ovpn,info TCP connec...

vmiro

Hi, last few months we are experiencing a quite strange problem with OpenVPN connections on MT with several non related companies. Remote locations (with MT) and users (OpenVPN client for Win) are using OpenVPN to connect to HQ. Problem happens when client aren't able to connect with OVPN or some of...

vmiro

Hi,
I got this situation on my router with ROS 6.43.14 (long-term)

vmiro

Hi, is this feature now available with the new version of Dude ??

Thanks
mIRO

vmiro

We moved all VPN connections to OpenVPN.

vmiro

if you'd have SOCKS server accessible from outside, proxied connections would look like coming from your router. That is the problem! IP socks service is enabled and default port is changed to 4145. I got incoming connections to this port and MT is acting as a relay for spam messages. I suppose SOC...

vmiro

Even with all the local interfaces disabled the emails are being sent. How is that possible?
SYN packets with TCP 25 port are visible only coming out from my public interface. I have set several mangle rules and nothing comes to the router on this port, just goes out...

vmiro

No. The version is the latest for x86 platform, 6.42.6 version.

vmiro

Hi, last few days we are receiving abuse messages for our two MT routers. We have checked all of our servers behind router but we found nothing sending spam messages. Today during a checkout of the configuration, I noticed on one of the router SMTP traffic from public interface. https://www.dropbox....

vmiro

It seems like a bug, and there is still no response from MikroTik support stuff...

vmiro

I have noted the same issue with 2.4GHz radio using CAPsMAN on a 6.38.5 RB3011 controlling a pair of wAP-AC Using "auto" channel, (or better not defining any channel on manager) at every AP reboot or radio interface restart, 2.4GHz radios place ALWAYS at 2412 , while 5GHz radios frequency...

vmiro

!) bridge - fixed BPDU rx/tx when protocol-mode=none can we have more information on this? thanks I had a problem on one of my WAP ac where the wlan interfaces are not added to the bridge. Clients can connect but there is no communication with the router. And the protocol mode was set to none... WA...

vmiro

Hi, I got the same problem here. I've installed dude on CCR to get Dude closer to monitored devices, and to replace current Dude server which is in Cloud on some Windows computer... Pinging device through Dude is terrible, even to the devices in LAN. I tried to ping the same device from CCR console ...

vmiro

+1 This is a absolutely necessary for use in enterprise environment. I got several installation with two CCRs, configured with VRRP and is quite hard to maintain this installation. Every change in configuration has to be done on both routers. I'm using Fortinet FortiGate in my company which supports...

vmiro

Hi, I have about 80 remote location in hub and spoke topology connected to central MikroTik router via L2TP tunnel. I experience periodical Internet disconnection which last for less than one minute in all of these location. I don't know why they (Internet provider) are doing this but it doesn't dis...

vmiro

Hi, we are planning hardware upgrade of the core router RB1100 to CCR1009. I take the backup file from RB1100 and did a restore on CCR1009, and it went ok, but I got invalid switch on CCR. I know the reason...RB1100 got two switch chip and CCR1009 just one, but how to remove the one that is invalid?...

vmiro

Hi,
Addind tls-cipher DEFAULT solved the problem to me but in the log I've found this message>

Deprecated TLS cipher name 'DEFAULT', please use IANA name 'DEFAULT'

DEFAULT instead of DEFAULT, interesting.

mIRO

vmiro

I will generalize my question: How to change some option (property) for CAP wireless interface that isn't supported by CAPsMAN ?

Thanks

vmiro

Hi, I need to change some property of the wireless interface on CAP which is controlled by CAPsMAN. For example, hw-retries, wireless protocol, datarate...properties that are not available to configure through CAPsMAN. I can disable CAP protocol on CAP router, change the necessary property values an...

vmiro

have you solved the problem? i'm about to deploy 17 units of this on a hotel, i need to make sure this thing works 24/7 without any problem.

Winet, have you finished your hotel project? If yes, how does the Cap2n APs behaves, are you satisfied?

Thanks

vmiro

Passive POE needs injector and splitter, right ? It needs only injector which is included in the package. Like ronniee said, 802.3af is not supported. The entry level Unifi is 2x more powerfull, it has 20dBm(100mW) Tx Power instead of cAP's 17dBm(50mW), and 300Mbps instead of 150Mbps. What about so...

vmiro

Passive POE needs injector and splitter, right ?

vmiro

Hi, after an upgrade in "ip ipsec policy" there is a default policy which is disabled:

0 T * group=default src-address=::/0 dst-address=::/0 protocol=all
proposal=default template=yes

Enable it and try to connect with remote router. It worked for me

mIRO

vmiro

You're welcome Tom. Note that the solution is for the Tile architecture based devices (as stated in the changelog).

mIRO

vmiro

The problem with 1Gb autonegotiation for CCR has been SOLVED in the new RouterOS version: What's new in 6.28rc20 (2015-Apr-02 14:56): *) tile - rare situation when CCR devices failed to auto-negotiate ethernet link (introduced in v6.25); Router updated and now it auto-negotiate 1Gbps on the problema...

vmiro

Thanks for reply Tom. I think I got here just one port with this problem, ie. broken device. I have two CCR router, no matter of configuration (factory or custom) CCR1-ether3 is not working at 1Gbps. Here is not just problem Mikrotik-eth3 - Cisco, the problem is Mikrotik-CCR1 -eth3 - anything (Cisco...

vmiro

Hi guys, did anyone found a solution to this problem? We bought two CCR-1009-8g-1S-1S+ for setup in a "cluster" and during a configuration with two Cisco 3560X switches we got to this problem. On one CCR ether3 port negotiates 100M, which is the max. speed no matter of the configuration. W...

vmiro

You are right. With vsftp the transffered files are complete.
vsftp is a lot simplier FTP server than ProFTP and Win FTP. These two have a lot more options that probably needs fine tuning to get it work...

All in all, the solution is vsftp

Thanks nevimjmeno

vmiro

The files are incomplete with Windows 2003 Server, FTP Server also...

Try sending several times...somethimes I got file with correct size, but mostly it's incomplete...generally, we can't rely on this 100%...

mIRO

vmiro

You're right.
On traffic flow diagram I've mixed "INPUT INTERFACE" with Input chain

INPUT INTERFACE -> no bridge -> Prerouting (Mangle, Dst. NAT) -> Routing Decision -> Input (Mangle Input, Filter Input)

Thanks Sob

vmiro

Is there any chance that this problem could be solved in next 5.x or 6.x release ?

The "fetch upload" option is very useful for automated backup or storing log files in remote location...

mIRO

vmiro

I got one situation that makes me confused. I'm using RouterOS 5.24 According to Traffic flow diagram on Mikrotik Wiki packet destined to MT goes first into INPUT chain (Mangle Input -> Filter Input) then into Prerouting chain if interface is not bridged. Here is the simplified example of the confli...

vmiro

I tried with 4.17, and it seems everything is ok...
Any solution? How to automate configuration backup to remote FTP server...with "RoS > 5.11"?

mIRO

vmiro

I'm using fetch command to upload MT configuration every 15 days on more than thirty routers. I wrote a script for creating a backup file, set up the scheduler...so, everything is automated. The problem is that the backup file isn't transferred in whole. I tried several times to upload backup file t...

vmiro

You're right nest. Roaming for voip users is useless, but for network application it did the job. I put the same SSID on all of the RB's, configure the non-ovelapping channels, all RB's are working in bridge mode (wlan0 and eth0 bridged) and one of them is DHCP server, so every wifi device get the s...

vmiro

I will simplify my problem. Let's say I got two offices with RB433 configured in AP-bridge mode in each office. RBs are conected with UTP cable (shown in attached image). I got handheld devices and I need them to roam between these two APs. I wouldn't use WDS because I got APs bonded with UTP cable....

vmiro

You're right...I did a test with Dude v4.0beta2 and it works...

Thanks

vmiro

Any solution until now ? How to set a RDP probe?

Thanks

vmiro

I'm using NAT, proxy...

vmiro

Hi,
how can I block flash animation with MT firewall? I'm using RB1000 with 3.30 ROS version.
I tried to find regexp for flash to make the layer7 rule...
Any suggestion?

mIRO

vmiro

Hm, probably it wasn't supported...8GB Transcend 133x...

vmiro

It was easier than I tought. I installed ROS with netinstall and the licence key was recovered too... :) Thanks ;) One more question. I bought CompactFlash 8GB card with RB1000 for additional capacity, but when I put it in the CF slot, RB1000 won't start at all. Simply, there is no output on serial ...

vmiro

Now I'm in deep trouble !!! :( My RB1000 is dead! I tried to downgrade ROS to 3.30 hoping I'll remove problem described in my previous post, but the result was the same. Then I tried to downgrade to 3.20 and there starts the trouble. After restarting RB, in winbox I'm getting the message that I don'...

vmiro

After upgrading to 4.2 I'm having problem with loading certain websites, like gmail.com on my ADSL connection...I had similiar problems with 3.30 version. Then I rollback to 3.18 version of ROS and then everything worked like it should...
Should I downgrade to 3.18 again or...?

Thanks
mIRO

vmiro

Hmm, when I start script again without erasing the file (test.txt), it writes the content 'lala' in the text !
The problem exist only when creating the file first time.
I'll try with newest ver.

One more question, why "/file add" command don't work ?

Thanks

vmiro

Copy-Pasted your example...there is file created but the content is not 'lala' !!!
ROS 3.22

vmiro

Try /file print file=usersperhourreport.txt count-only This should create a file you can edit! :wink: It doesn't work, it just prints all the files on RB! Obviously there is a problem with "/file set" command when running it inside scripts. When I create script file with something like th...

vmiro

Use connection bytes option when mangle packets...0-500000 for browsing, >500000 for HTTP download (rapidshare)...it works for me...

vmiro

No I didn't

Who are YOU?
I don't know where I pick it up, but it was few years ago, certainly. Did I violate your rights

vmiro

Excellent script danz9370 !

vmiro

I have 2.9.27. version, and it acts strange like I posted, but on 2.9.34 everythink is ok

Thanks!

vmiro

Anyone?
This is serious bug, at least for me, because it was cost me about 500$ on the telephone bill

vmiro

> :put [:totime [/system clock get time]] 13:42:06 > :put [:totime [/system clock get time]] 13:42:07 > :put [:totime [/system clock get time]] > :put [:totime [/system clock get time]] > :put [:totime [/system clock get time]] 13:42:10 > :put [:totime [/system clock get time]] 13:42:11 > :put [:tot...

vmiro

As far as I know Windows sharing is based on NetBIOS and use broadcast packets unless you have WINS server...

vmiro

The signal is important, but -75dBm with ~80ccq is better to me than -60dBm with ~20ccq. You're right! In environment with lots of interference, the signal quality will be low. You can receive signal with high amplitude (strong signal) but it can be distorted due to interference, multipath...and th...

vmiro

It doesn't work, I'm getting the same message but this...

:if ([:totime [/system clock get time]] < 15:00:00) do={:put true} else={:put false}

...WORKS!

Thanks!

vmiro

Somethimes I'm getting afore mentioned message, somethimes it goes as 'false' no matter what time is it!
Am I doing something wrong?!

vmiro

When I want to compare two time values like this:

:if ([/system clock get time] < 15:00:00) do={:put true} else={:put false}

I'm getting following error:

cannot compare if string is less than time interval

vmiro

I have found two HFC-based ISDN cards. ISDN client and ISDN server works perfectly and...they are 60% cheaper than Fritz!

Thanks

vmiro

so i guess the best solution would be for vmiro to get a card like christian's

You're right! I'll try to find one.
Thanks.

vmiro

i'm sorry but we don't even have an isdn provider to test this with (who has one these days?) Lucky you! :) I need this option just for backup. For instance, to connect on remote network where internet connection is down. But I don't have AVM FritzCards - I usually use HFC based ISDN cards... ...an...

vmiro

isdn info: isdn incoming call: 123456 -> 987654 si 1=7, si2=0
isdn info: isdn incoming call ignored

This is from MT log with ISDN server running. What's this means: si1=7, si2=0 ?? I supose si1 and si2 are ISDN channels...!

vmiro

No one uses AVM Fritz ??
I just need to know do you have same problems like I do!

vmiro

I've tried several AVM Fritz card but problem still persist. When I remove ISDN card from computer there is no 'modprobe...' error. Obviously there is some problem with AVM drivers for MikroTik

Is there any solution, except buying some other ISDN card?

vmiro

I'm getting the folowing message when starting Mikrotik: modprobe: failed to load module isdn modprobe: failed to load module isa-pnp I think, the first message is a reason why I can't connect to ISDN server running on that computer. I'm using a demo version of MikroTik 2.9.34 for testing purposes, ...

vmiro

You're thinking in my way. There are same SNMP tables for every device, I don't need 'wireless stations' table for windows computer. Instead, I need for example list of installed programs and running processes... Can I somehow put my own table in the list? Also, it would be nice to be able to add mo...

vmiro

When I add some device, the device performace like cpu, hdd and memory is shown on the label, by default. I want also to add the bitrate (Rx, Tx) for the network interface on the same place, but I can't find adequate OID for the rate. I can add downloaded and uploaded bytes (Octets Rx, Octets Tx), c...

vmiro

Hi, i'm having a trouble about setting some kind of QoS in my network :). This is the configuration of the network: MikroTik AP1: ether1 - local network - 192.168.1.0 sector1 - wireless interface - 192.168.11.0 sector2 - wireless iface - 192.168.111.0 bacbone - wireless iface, link to the AP2 192.16...

vmiro

For exemple here is the list of MIME types:

http://www.w3schools.com/media/media_mimeref.asp

vmiro

54kb *1024 = 55296

55296/55296

vmiro

Don't change MTU. Mangle MSS instead. Also you'll probably need to go a lot smaller than 1480. 1360 is usually a good starting point.

I've tried with MTU 1360, it doesn't help.

Can you explain me what and how to mangle?
Thanks!

vmiro

I've changed MTU from 1500 to 1480....guess what...doesn't work!

a lot of akamai sites wont ping - they block ICMP for a good reason

I can't access http://www.microsoft.com via http also.

vmiro

cabana: ...it still doesn't work :( valens: I can't ping...Request timed out....but, when I tracert look what's happening: C:\>tracert http://www.microsoft.com Tracing route to lb1.www.ms.akadns.net [207.46.198.30] over a maximum of 30 hops: 1 1 ms <1 ms <1 ms 192.168.1.1 2 1 ms 2 ms 2 ms 10.1.30.1 ...

vmiro

Hi, I'm using a NAT to hide my private network on Internet and I set it up like this (user manual :) ): /ip firewall nat add chain=srcnat action=masquerade out-interface=isdn-out1 Internet works fine except some websites like: http://www.microsoft.com, http://www.xbitlabs.com, http://www.anandtech.c...

Search found 80 matches