MikroTik

shadowskippie

Perfect
Thank you very much

shadowskippie

Good Morning

Is there anyone who can give me an export of the default config of the Audience?
I'm interested to see what it's default config looks like.

shadowskippie

I use this, It's not perfect. add action=jump chain=Input comment="Syn Attack Protection" connection-state=new jump-target=Syn_Protection protocol=tcp src-address-list=\ High_Connections tcp-flags=syn add action=accept chain=Syn_Protection limit=1k,10 protocol=tcp add action=drop chain=Syn...

shadowskippie

Morning Glad to see you got it working. When i made the suggestion i didn't see ether1 in your bridge. good chance i missed it. I checked several times but it seems i can miss the obvious. I see you are attaching the Wlan interfaces. if you have the CAP setup correctly then you don't need to do that...

shadowskippie

When an AP is connected to capsman. where is the WPA 4-way handshake done.
Is it now done by the capsman controller?
or is it done on the AP.

shadowskippie

the local bridge on the AP. it needs to attach the the ether port so that the untagged and tagged frames can pass through onto your network. Edit: I will also added that if you do add the ether 1 port into the bridge, that vlan interface is going to give you problems. the system will start picking u...

shadowskippie

Afternoon

I need a little help here.
When looking at the antenna brochures I see the antenna patterns on there but is there anywhere that i can get a detailed numbers of that.
I want to properly load those antennas into my simulation software

shadowskippie

What check boxes do you have tagged

shadowskippie

I have never come across this in any coarse material nor have I have had a question that poked a stick at this. I can't remember what it was but something prompted me to look into this, now I'm glad it did. There is a lot of material out there that says setup a loopback for the ospf to auto select (...

shadowskippie

So, I can't remember what prompted me to test this but I came across an interesting issue. we are pretty much taught that when you setup an OSPF instance you should set the router ID to an ip that exist on a loopback interface (in Mtik, that means using a bridge). We are taught to do this because th...

shadowskippie

there isn't simply a tutorial for mikrotik. its an indepth routing platform. The best option here is to give us an in depth explanation of what you need done and we'll tell you what to do. We're not going to ask you to go figure it out on your own as it sounds like the kind of thing you need done wi...

shadowskippie

sorry, i was looking for an actually print so that i could see what the router was looking like. ip address print, ip route print, interface print. if you can copy what it shows here. just want to make sure of some things. One other thing. lets take the esxi host out of the equation, makes sure the ...

shadowskippie

Okay. First, putting the IPs onto the bridge is the proper way of doing this. Moving beyond this lets checks some stuff. First, stupid question but did you set the machines gateway to their respective ips on the switch. Next, do you have any firewall filter rules. Can you send me a print of your ip ...

shadowskippie

/ip address add address=192.168.11.133/27 interface=br-vlan-11 network=192.168.11.128 add address=192.168.33.1/24 interface=br-vlan-33 network=192.168.33.0 add address=192.168.44.1/24 interface=br-vlan-44 network=192.168.44.0 I hope you see what i did. I'm having lunch right now and hammered this ou...

shadowskippie

not sure if this will do anything the IPs onto the bridge instead.

shadowskippie

If you could post your filter rules here so that it can be seen that would help us better explain what is going on (removing comprising information of coarse first

)

shadowskippie

What you just described is the way this kind of connection is normally setup (well normal for me and everyone I've met so far). the problem though is that client wants to pool to exist on the windows DHCP server it think. To be honest I think the OP should go to the client and rather request a slice...

shadowskippie

The thing about Mtik (and I often tell this to clients who ask about the Hardware) is that "it's all about the CPU". Mtik is one of those special kinds of hardware platform which plays the jack of all trades. Just because it can do everything doesn't mean it should. If you find you are usi...

shadowskippie

So, i followed the setups to the letter, multiple times. when using the cloud and configuring the Loopback interface i come across this problem when i try to connect the loopback to the Mtik. => Server error from 127.0.0.1:8000: Mikrotik-1: NIO of type nio_generic_ethernet is not supported if i inst...

shadowskippie

Good morning. Before i start, please point out if anything i'm about to ask is actually in the app and i'm just missing it. I'm really liking the app. this will allow me to check my routers from my tablet without having to use an ssh client, fantastic. :D Within 5 mins of test though i came across s...

shadowskippie

Following downware's comment it would seem to fix that problem would be to bring the port going to the ISP into the bridge.

My question is what is your reason for not doing that.
(yes, i am waiting for someone to tell me why this wouldn't work, i'm curious)

shadowskippie

the static routes pose a problem as the network is much of a spiders web. after lots of testing i found a solution to the whole thing its quite the mission but it keeps the network going so first thing, this network was not setup all that well. ospf networks are set to 0.0.0.0/0 the first thing i ne...

shadowskippie

Thanks

That a good idea. I'll try test it first

shadowskippie

I need some help with understanding this. There is a network that i'm busy doing ip modifercations on. the modifercations are being done in preperations for something else down the line. One of the things i have to do is change the ip the the OSPF is using. this is a small problem as changing the IP...

shadowskippie

I'm looking for a little help. I need to turn on and off a simple queue based on whether a connection mark is active. I've been trying but with my limited knowledge scripting is not helping This is what I've tried: :if ([ip firewall connection find connection-mark]="Glvl1") do={ /queue sim...

shadowskippie

I can't find that default name, just took a look

Where do you find it

shadowskippie

you have to do a config export in the terminal run the export command this will get you close, sometimes all the way. what it does its export the configs and readable terminal commands. when you import into the other router, if there is an issue it'll tell you at which line the problem exist so you ...

shadowskippie

Why are you specifically using GRE

why don't you just use L2TP with IPSEC over that.

shadowskippie

when you rename the interface make sure to try and retain the ether number for admin purposes

eg "ThisPortIsStupid(ether1)"

now, take a closer look at the Mac address of the interface, you'll notice an incline on the last hex. that should help

shadowskippie

unless i'm not understanding what you are saying you'll need to port forward on the Mtik to that the 192.168.1.x subnet can talk past the nat to the 192.168.88.x subnet

shadowskippie

Check your private mails. I'm going to move this conversation there as I'm not sure if its a qos convo or not

shadowskippie

The problem may not be your qos. When you run the speed check your cpu. Lets start by making sure you're not maxing it out

shadowskippie

first thing you need to know is Mikrotik doesn't check its configs in the same way as cisco. There is no running config that is separate from the from a startup config, there is just the config. When you change something on an Mtik you change it for good, there is no oops i screwed up let me restart...

shadowskippie

Just remember that it exports from where you are sitting.

If you export from the root you'll get everything
if you export from say IP> Firewall you only get the firewall

shadowskippie

Fuck This always happens, i struggle for a while, ask for help and the very next thing i do is figure it out. Okay, i'm going to explain what i did for others asking this question who stumble onto this. In the action remote you should see a tag "BSD Syslog" tag that. Then all i did was cho...

shadowskippie

I need some help So i got a little bored and built an linux machine running Rsyslog and Log analyzer. Now when i send the remote logs to this device it comes threw like this: Feb 11 23:14:47 router pptp,ppp,info KnySkippieVpn: authenticated Take note of that "router" bit there. now when i ...

shadowskippie

If i setup two PPPoE servers on the same interface, how do i know which one will be the default server.

I'm asking this because i'm experimenting with using the "Service" field in the client interface.

shadowskippie

0.o

Wow, that simple
Sorry for being a noob then

shadowskippie

I'm having problems with my v6 routers

the priority in the policies defaults as -1 which it doesn't like, infact it does like anything i put in there.

shadowskippie

Is it possible to setup a mesh environment via ethernet connections.

I ask this because I have an interesting build that i need to do and before getting the actual wireless devices i want to test the design using virtual machines.

shadowskippie

Okay, i may need some help with this from someone who is more proficient at scripting than I.

I have tried that script and despite not seeing any syntax errors it will not work and i don't know why.

shadowskippie

okay, a bit of testing later and i hit the wall i thought i would. I was trying to see if i could get round it but no luck. The way i see it, if you want to do what you're asking you're going to need two routers, each one handling each network. either you could get the two routers or just visualise ...

shadowskippie

*Update*

I haven't fully read into this but this could be the solution.
http://wiki.mikrotik.com/wiki/Using_Fet ... ress_Lists

shadowskippie

hmmm, that seems like the best way and i've thought a long those lines. Some servers of game have their port hard coded, those games i can isolate via the port used. Other games allow you to specify your server port so i can't use the same method an will either have to keep tracking down a servers p...

shadowskippie

it is a gaming cafe so mostly gaming traffic.
I'm hoping to hit it with a fine tooth comb, pt things like COD and other FPS games a head of things like minecraft.

shadowskippie

found a bug with similar graphics issues to the one above.

If i modify the name of winbox i get that graphical issue. fix the name and i fix the graphics

shadowskippie

Okay, i'm not sure i'll be able to help you here but first lets clarify the question. so you have a /29 network that has been given to you by your ISP with a gateway of 10.10.10.1 Can i assume that gateway is a router provided from the ISP? Now you say you've added all five IPs to the wan port, port...

shadowskippie

I'm wanting to start a discussing here. I have a client who wants me to setup QOS for his gaming cafe which means applying QOS for the individual games. I have seen many methods on how to do this but I'm now looking for the best method to go about this, so i come to you guys. All suggestions are app...

shadowskippie

Because this time I went straight to the point. Normally I try to explain what I'm doing and still confuse ppl so I tried something different.

Eitherway I open my mouth and ppl get confused

shadowskippie

This is what I'm trying to do. My ucapped adsl gets throttled if abused too much but that throttle is based on a 10 day rolling window. So I have 2 of these account and roll them every 10 days. Basically I was going to have both the accounts dialed and have the script change the 0 routes dst every 1...

shadowskippie

actually scratch my last request, it may be too complicated. i'm thinking of a far simpler idea but its going o require a less variable volatile system.
Is there a way to get a script to read and write a variable to a txt file

shadowskippie

I need help with something

I need a script that will identify the 0.0.0.0/0 route that all the default traffic is going out on, read the route and see what interface it is using and then be able to change that to a different interface depending on what it finds

shadowskippie

Good Afternoon So, I've done quite a bit of testing with this problem and from what i can see it happens when you add the Wlan to the bridge int. not sure as to why it does this but when i remove the Wlan from the bridge and run it in a routed setup it functions better. So, this is kind of where a l...

shadowskippie

Is there anyway to get this working. I think the problem is the special characters that come along with the date and time :log info "Starting Backup" :local id [/system identity get name] :local time [/system clock get time] :local date [/system clock get date] :local file "$id$date$t...

shadowskippie

Ah thanks. I've been trying to figure out how to bind the variables together

shadowskippie

I need i little help here

When the script runs and creates a backup on my router i need it generate the name as the Router ID + the date + the time.

How do i go about this

shadowskippie

I just wanted to confirm this but is there anyways that a router can receive emails
From a look at the system i think the answer is no but i wanted to make sure of that.

shadowskippie

Morning I need some help. i have read several articles on IPsec trying to understand it. Now i understand the theory behind it but i cannot get the practical working. Using the manuals in the wiki i have tried to setup IPsec over my L2TP connection i have between my two residential networks but i ju...

shadowskippie

my apologies, it seems that its not a 250, its a 750.

Okay, it appears what i need is to mirror one port out another. I need a little help on this as i'm not understanding the wiki correctly

shadowskippie

i have an old RB250

how can i "sniff" the traffic that is flowing from a specific port that is either slaved to a bridge or slaved to the switch chip

shadowskippie

How can i stop the router from responding to ping dst to itself

shadowskippie

Morning

I have a setup with a couple ADSL lines bonded together using a RB1200

If i wanted to force mail (preferably outgoing but incomming is fine too) out only one of those lines, how would i go about it

shadowskippie

We have a Rb1000 router and attached to it we have 2 adsl modems we have setup the interfaces ip ranges and nat, we can ping the modems but cannot pass internet through. Ip ranges used are 192.168.15.1/24 and 192.168.14.1/24. Have also setup all the routes but no luck. your help would be appreciated...

shadowskippie

that is for the action passthough....what about the check box one.....surely there has to be more to that

shadowskippie

Morning I need some help understanding something In the mangle rules, under action, there is a check box for passthrough What is its purpose, i know what the action passthrough is and i think i have an idea then what this check box is then suppose to do but i'm not sure Could someone please enlighte...

shadowskippie

this i like....can't wait to see it in action

shadowskippie

thanks, i have a basic understanding now of how it should work. at least now i can begin to compared it back to how cisco works. I do believe i'm going to need to get me a few devices though to test to concept out so i properly understand it, too bad there isn't a packet tracer like program for mikr...

shadowskippie

i've been reading a wiki on vlans but i have some questions how do i set an interface to either trunk, access or hybrid how do i make sure an interface assigns a Vlan tag to data as it flows through (i see you just add a Vlan interface to the int but will that do what i want or is there something mi...

shadowskippie

well dyndns needs to be done using a script, the nice thing is someone has already put that script online. http://wiki.mikrotik.com/wiki/Dynamic_DNS_Update_Script_for_dynDNS as for the policies. when it comes to the scripts, its basically saying that this script is giving these permissions to perfor...

shadowskippie

well i suppose it depends where you are.

i would look at a software called radiusmanager, see if it'll offer the right billing options that you need.

if it does then it is as simple as using the hot spot system with mikrotik and have it authenticate through the radius box

shadowskippie

that is because you haven't forwarded the other ports.

when a packet comes in with port 80 the router will forward that packet onto the machine you specified as the rules dictated, but if anything <80 or >80 comes in it'll think its for itself as there are no rules telling it other wise.

shadowskippie

HI I am trying to do the same thing. Now, adding a 2nd pppoe session changes the routing table and no websites work behind the switch. I need 2 sessions because my ISP has 2 separate dedicated logins, one for internet service, one for IPTV How can I make it so Mikrotik is setup like this: Port 1- W...

shadowskippie

look them up individually if the telnet is ticked it means the user that is using that profile can access the router via telnet of SSH the same goes for FTP and local (console) basically having those ticked doesn't grant you those services whilst you are in the router, they grant you access to the r...

shadowskippie

first off, and this is probably a very stupid question, but have you made sure it isn't an outside person doing this. Have you setup your firewall, access lists and other secure things that my brain can't think of right now One thing i would suggest is limiting access to your Mtik router to within y...

shadowskippie

howzit

Just thought i'd mention, the problem was sitting on the old radius server.

The new one does not appear to be having the same issue

thanks for the help

shadowskippie

well i'm guessing the groove just plugs into the edge of the already existing network just give the ether port an IP address on the lan setup the 0.0.0.0/0 route to point to the ADSL. use a different address scheme on the antenna, say 192.168.2.1/24 setup a DHCP server on that antenna remember to tu...

shadowskippie

I'll do so, when i can. i am one man in my office and i'm constantly being shuffled from one problem to the next, currently i have taken those users off the radius and put the problem on the back burner till i can get back to the issue. i'm marking this thread so that when i can i'll go over what yo...

shadowskippie

sorry, i was referring to the radiusmanager. even though these clients from the problem tower are no longer authenticating from the radius, the radius still says they are connected through itself

shadowskippie

yes, i have noticed that i left the timeout to 1 sec however this may have been part of the problem but i don't think it is the actual one. I have now moved those clients off of the radius and onto the tower until i can fix this issue but even though the clients are no longer connecting to the radiu...

shadowskippie

I need a little help here I want to implement this firewall rule add chain=forward action=accept connection-state=new protocol=tcp connection-limit=!30,32 comment="Allow up to 30 connections" disabled=no add chain=forward action=log connection-state=new protocol=tcp log-prefix=""...

shadowskippie

thanks

I'll look into that but first it seems i need the guys for radius manager to sort out my radius, there appears to be a few problem s with it. once those issue are sorted i'll come back to this problem, at least then i won't have that nagging voice in the back of my head

shadowskippie

Morning I was hoping someone could help me with something. From one of my towers, and only one, i seem to have an issue with my radiusmanager machine. with this particular tower i have an issue that the radius is not releasing the previous IPs for the client, in effect i thinks the clients that come...

shadowskippie

Just double checked it, yes i was playing with the Trial system within the server profile

shadowskippie

is there anyone who can help me with this

Why is the trial system not working

shadowskippie

right, it doesn't seem to be working. I believe the trial is suppose to give me access to the internet for the amount of time that i have stipulated and then when that time has expired throw up the HS page, However this does not seem to be working. every time i try the HS page gets thrown up instead...

shadowskippie

I don't want to go get the files from the towers, i want the files to come to me as part of a script. I want the tower to send the files straight to my FTP server instead of emailing it to me and then i have to move the file to the server Edit: sorry, i glanced right over the post with the wiki page...

shadowskippie

that sounds like what i'm looking for

Thanks

shadowskippie

is there any form of support for TFTP in mikrotik

I have a script run every 30 days on my tower that backups the tower and then emails the Backup to me but what i'd really like is to have the tower email me telling me it has done the backup and rather send the file itself to my FTP server.

shadowskippie

That is true but the problem is the owner then needs a list of users to give out those that want, what i need is something that will allow access to a point then throw up the HS page request payment for further use

shadowskippie

Howzit I need a little help with something. I have had a request to setup a HS for a client. I'm planning on using radiusmanager to handle the netcash transactions for the credit card. The part i need help with is he want to be able to offer Some Free data and then after that has be exceeded have th...

shadowskippie

at a regular time and daily? I have never known the sun to be that specific with it schedules. Anyways, it may be something else, but i doubt it is the sun. One question though, I'd like to know if those sextants work better then the UBNTs, i'm trying to get my boss to use the Mtik equipment over th...

shadowskippie

Morning

I have two clients on my network that would like to have their networks connected.
I've been reading up on PPTP and OpenVPN connections but what is the best that i should for this

shadowskippie

ooooo, cables.....

Right, how much to rent that corner, I'll setup my tent there

shadowskippie

hmm...okay, right all i need now is to learn how to write the script. could you link me to where i can learn this. or just tell me what i'm looking for and I'll find it myself

Ps. Thanks for all the help

shadowskippie

netinstall will be tricky as some CPE's I work with do not as a serial port, I guess this means I will not be able to use a script. Is it then possible to say jot down all the commands onto a text doc and then just copy/paste them into the terminal from within winbox or even through putty. Will that...

shadowskippie

i need some help with this I want to right out a small script that i can throw into a CPE, reset the board and it programs up all the basics for me, all the standard stuff. the question is how do i go about doing this, how should it be written out and then where in the routerOS must i stick it so th...

shadowskippie

i kind of just looked over it while I was looking for the policy info, i'll take another look at it.

Thanks

shadowskippie

Howzit

i need a little help understanding something.
in the scripts for mikrotik, what exactly are the policies and how do they work

shadowskippie

Someone smarter then I may come along and provide a better idea but here is mine not sure why you want to force the cards to do that, as far as I know you'd need Nstreme. Now here is an option that may work, I have not tested it before but maybe it will work. Let the cards do there own thing, let th...

shadowskippie

does anyone know of any good software i can use to accept and compile my webproxy logs into something easily readable

shadowskippie

is there a way to log all traffic that come through a interface

shadowskippie

okay, just a quick understanding on something. I'm gonna redirect all port 80 traffic from the incoming int to port 8080 which the proxy server is listening to ont he same router. that proxy server will connect to the parent proxy which is a dedi machine on a different int. now if i understand all t...

shadowskippie

i think i like the first one better. as the RB1100 is still giving the internet connection the second feels like i have to tell the x86 proxy how to connect to the net and not get caught up in its own firewall rule. i was thinking about using the first idea myself but having never done this before i...

shadowskippie

i want to setup a proxy server using the X86 RouterOS software on a machine

currently all our traffic flows out an RB1100.
I want to plaug this proxy into that router and have all the relevant data be diverted to the proxy

how would i go about setting up this and the divert

shadowskippie

i need the grab a unit at some point and take it home, i can see said tower from my house so i can try test the changes then

shadowskippie

You currently have your wireless profile unspecified. Set it to 802.11 or if you are using other profiles set it accordingly.

as far as i understand if i run in "unspecified" it was suppose to default to 802.11, however i will give that a go

shadowskippie

I need a little help i have a tower with a RB435, one of the interfaces is running an R52Hn card. name="AP5" mtu=1500 mac-address=00:0C:42:66:94:31 arp=enabled disable-running-check=no interface-type=Atheros 11N radio-name="000C42669431" mode=ap-bridge ssid="Sea11" area...

shadowskippie

anyways, thanks [all] for all the help
i'll drive into this slowly to make sure i don't break a system that at least appears to be working

shadowskippie

Just create a bridge interface with zero member ports. The interface will always be active and thus will function as a regular loopback interface. This is the only way to emulate a loopback using RouterOS. /interface bridge add name=loopback0 thanks. i'll try that Good morning How do i go about set...

shadowskippie

/interface wireless> edit AP5 bridge-mode

i can see in the the winbox but above is the easiest way to explain it

shadowskippie

i see that this state is enabled
what does it do cause i cannot find any information on it and it seems to have just popped up in the menu since i got a board with v5.0+ on it

shadowskippie

Good morning

How do i go about setting up a loopback interface in the board for use of the OSPF

shadowskippie

is it possible to have a Mtik board use one radius server and then if something happens, be it the first one falls over or is taken down for maint, use a second one

shadowskippie

i like this, i'm subscribing to this thread in case there are any updates

shadowskippie

so that's it, nothing else to it except that they liked the number at the time

shadowskippie

a little help here please, I'm curious as to how this works

Rb435G ; Rb 750

now i know that the 'G' means it have gigabit ether interfaces
i know what the '35' and the '50' means (3 ether, 5 MPci);(5 Ether, 0 Mpci)
but what does the '7' and the '4' represent

shadowskippie

okay, it seems i need a little help my RB750 is in a bridged setup, i have setup the three of the rules and find they are not working correctly Flags: X - disabled, I - invalid, D - dynamic 1 ;;; Time critical traffic chain=postrouting action=mark-packet new-packet-mark=time_critical passthrough=no ...

shadowskippie

bit of help here. in that presentation he spoke of another presentation where the packet flow diagram was talked about. was that presentation recorded? i really watch to see what he spoke of as i need a little help understanding it fully

shadowskippie

okay, in my head all that means yes i can do it. however, to be smart i'll need to test it somehow before applying it to the main tower. thanks for the help

shadowskippie

you say look into the virtual-AP, will that work because i have no problem leaving the main interface in a blocked state and running two V-Aps for the guest to use (one being for the pppoe clients and one for the hotspot)

shadowskippie

i have running on an RB800 a virtual routerOS. I want to have that virtual device handle the physical antenna that the clients connect to on this tower, basically i want to off load the clients from the physical board to the virtual one. i need to do this due to some complications from my radius ser...

shadowskippie

I love this, when i can i want to try it out at home where i have one ADSL connection Now i also want to implement it at my work where we have four ADSL connections and a default route point to all of them, how would i got about using you QoS design where i have four possible ADSL connections to wor...

shadowskippie

na, i'm just checking out the scripts, i want to play with them at home

shadowskippie

Just need some help finding some

at the top of this page,
http://l7-filter.sourceforge.net/
it says that the page is out of date and that i should go to another that is link but when i go there i can't find any scripts

is there another place that has a similar collection of L7 scripts

shadowskippie

okay, see where you are going, torrent QoS is a pain in the arse. however i'm still gonna try and tackle little by little. nothing like a good challange :) Coming back though to my local network, if i said i could control everything on my network, including what program they use and how they use it,...

shadowskippie

RB750 does not have any ADSL interface, make sure you are connecting it to Ethernet interface. Perhaps you need to run, - DHCP client on Ether1 (interface connected to ADSL interface); - PPPoE client on Ether1. It depends on your ISP used settings. i try setting the ADSL to bridge but it doesn't al...

shadowskippie

Morning I need some help as the title says. In my little network at home a have a few people connect to the internet and i have a small issue with p2p. now i'm not asking how to find and mark the p2p traffic, all i want to know is how do i make it a lower priority then the rest of the traffic so tha...

shadowskippie

okay, i just wanna check, i reset the router to something i could recognize, removed the master slave stuff and bridged three ports together now the mac-server you talk of, that is the ARP, think i'll disable it again in ether 1. another thought came up with that, i'm trying to get the router to dia...

shadowskippie

Morning

I'm a little curious about something with the RB750

when i got the device i could not login through Eth1, why was that
I also notice that port 3-5 were slaves of port 2, what does that mean
and i see that ports 2-5 are part of the 'switch' but port 1 isn't, what is the significance of this.

shadowskippie

When I was learning PCQ and QoS, Janis's QoS talks from the MUM really helped a lot. Video: http://www.tiktube.com/index.php?video=JpcD3eCChqGnDlJFJEEsCvExClIoEKDH= Slides: http://mum.mikrotik.com/presentations/US09/megis_qos.pdf Something to be aware of that catches a lot of people, if you are per...

shadowskippie

thanks, that helps

it may not be a detailed howto (but from what you say that would be impossible) but i now know where to look, thank you

shadowskippie

Good morning I need a little help here I have looked around for this but either i can't find what i'm looking for or i did find, didn't fully understand it, and thought it was not what i'm looking for. Either way i need a little help. right first one, How do i go about creating a throttle on a port,...

shadowskippie

hmm, okay, i'm gonna go about based on what i understand first off you'll need to tell me what PCC is, i never come across that term before, i apologize about that, and i try looking it up but could not find it. anyways moving along so all your clients are in a L2 bridged environment within the same...

shadowskippie

right, i need a bit more info your physical setup. >how far away is your furthest client. >I've the term hotspot thrown around for a lot these days, are your clients actually using the hotspot system on the mikrotik boards o are they dialing in with PPPoe >where in relation to your antenna location ...

shadowskippie

if i understand that properly, you are gonna want to read up on either OSPF or EIGRP.
your internet connection are separate so a dynamic routing protocol will be needed

shadowskippie

it all depends really

everything you want to do can be handled from one board, logically that is

truth be told, we don't know enough of what you want to do to tell you how to go about it

shadowskippie

thank you

shadowskippie

hello guys, i have a good one for you help with :) I have a virtual ubuntu radius server setup (running on virtualbox), it is connected to a virual cisco router running in a program called GNS3. I have a three cisco router network within this program running OSPF on the other side of the network i c...

shadowskippie

and this would be a 0.0.0.0/0 point to say 192.168.100.1, and this would be sitting in the ip routes table, correct?

shadowskippie

morning I need some help with this problem I want to build a network consisting of a ring of routers that use OSPF to interconnect them. Now one of those routers hooks to the gateway router that connects to the net, how do i tell the OSPf network how to connect to the internet and still retain its r...

shadowskippie

sorry, could you tell me what the problem was that you can across, i seem to be having the same issue but i have no idea as to why it is happening

shadowskippie

Morning I've having a small issue when it comes to the N type cards First off on my AP, i have had to set the AP frequency to 5GHZ, it is the only one that will work, everytime i set it to any other 5Ghz frequency in this (5Ghz only N being the one i'm after) nothing will pick up the antenna The oth...

shadowskippie

hmmm great, back to square one The server is running ubuntu and from what i could see the firewall wasn't even running. as for the default gateway it have it pointed at that networks wan port, 192.168.253.1 i think i need to find someone who can have a look at the system because the more i'm looking...

shadowskippie

sorry about that, i wasn't really sure what it was you were looking for I've taken these out of one router over /routing ospf lsa print detail where id=192.168.100.126 instance=default area=backbone type=router id=192.168.100.126 originator=192.16 flags=EXTERNAL link-type=Stub id=192.168.104.165 dat...

shadowskippie

i am trying to learn but the books i have on the subject talk about the protocol, its theory but when i try take that to the practical stage it just doesn't want to work right :( I have some virtual machines at home (i'd have them here at work if the machine i worked on was powerful enough to run mu...

shadowskippie

right. been doing a little testing. it turns out the reason the ping test on the connected router could ping the Radius server was because it was performing pings out of the connected interface. if i tried to from from a different network which is sitting on a different interface the ping fails 192....

shadowskippie

I never setup this OSPF, it was done by our previous network admin. when he left i was forced to have to fill his shoes which is not easy. I have a book called basic routing with seems to cover the theory of OSPF but it does help me with the practical use and my CCNA coarse hardly even goes over it....

shadowskippie

sorry, i'm not very clued up with OSPF

Could you explain to me how to go about that please

shadowskippie

Afternoon i need a little help trying to peer into a network that is attached to an ospf network without using masquerade. I'll first start by giving you some exports of router that this all needs to take place from. Flags: D - dynamic, X - disabled, R - running, S - slave # NAME TYPE MTU L2MTU 0 R ...

shadowskippie

howzit I need help with something on our network that i'm struggling and I've got to the point where it is taking too long for me to figure it out. Is there anyone here who could, for a fee, log in to the network and help me sort this out Ask for South Africans because then i can give you my cell nu...

shadowskippie

right I did the change last night for a test (took me a while to nail down some other issues) and found that despite all the towers, when pinging the domain, ping the external IP my machine still pings the internal :? very strange. but i'm gonna skip this issue for now. All i know is that the net st...

shadowskippie

sorry, i got distracted by a new problem, after looking over a few things i realise that i'll have to completely break the network apart and rebuild it :( something that i really don't feel like doing, not with the kinds of clients i have to deal with if anything you have helped me to understand OSP...

shadowskippie

the only thing that worries me is the mail server, i've had some client have their systems hook to its internal address instead of its external, even through the DNS should be pointing them to the external. sigh, well one step at a time i always says, other i would not be where i am no.......you sho...

shadowskippie

okay, i see now
i'll run some tests from my house late tonight, at least then all the people who can phone and blow my ear drums out will be asleep

thanks for the help

shadowskippie

sorry, could you explain what that will do.

your see ether 1 goes to the source of the net and ether 2 goes to the office where our mail server and radius server are sitting.

again, very scared of playing with this stuff as every time i mess with that i break the net

shadowskippie

Flags: X - disabled, I - invalid, D - dynamic 
 0   chain=srcnat action=masquerade

not really much there, i'm too scared to play with that as that little piece there is needed to keep everything going

shadowskippie

I need a little help with a radius server the base problem is that when a request comes in from another router on the network it comes through the interface that the radius hooks to. the problem comes that the radius thinks its the interface that is generating the request and so send the reply back ...

shadowskippie

afternoon We have a client on our network running on a 192.168.0.0 non routable IP. a connection needs to be made by someone outside our network to this client now we have a live ip that is not being used, how can i set it up that when you guy outside our network tries to make a connection to this e...

shadowskippie

wow, just read my reply up above and man my English becomes bad when i'm tired :P First router Routing ospf neighbor routing ospf neighbor print 0 router-id=192.168.100.202 address=192.168.100.202 interface=Stadium priority=1 dr-address=192.168.100.202 backup-dr-address=192.168.100.201 state="F...

shadowskippie

just one question, i'm time to sit down and work on anything at the moment tricky.
Before i got an tackle everest, baring in mind there are eight towers in the core plus the core router (make nine)

do you want those print outs for every router in the ring?

shadowskippie

hmm, i thought that was the case, well for some reason it isn't working.
maybe it has something to do with the virtual environment

shadowskippie

ya, the title seems odd but let me explain lets start with a picture http://i151.photobucket.com/albums/s135/shadowskippie/virtual.jpg now the three router you see there are virtual devices running on virtual box, each router has two interfaces Router 1 ether 1: 192.168.0.1/24 (the computer would po...

shadowskippie

okay, there are actually eight routers, the image i made was a quick slap together explaining the topology as for get all the details to you it will have to wait. there is a massive power outage in an area that has killed the one linking tower and i have no good batteries to replace the current one ...

shadowskippie

Tower 1 # /routing ospf area add area-id=0.0.0.0 authentication=none disabled=no name=backbone type=\ default /routing ospf set distribute-default=never metric-bgp=20 metric-connected=20 \ metric-default=1 metric-rip=20 metric-static=20 mpls-te-area=unspecified \ mpls-te-router-id=unspecified redist...

shadowskippie

ya, i just realised that i hadn't given you everything
Our previous network admin set it up like this

default routes: never
connected routes : no
static routes: type 2
rip routes: no
BGP routes: no

shadowskippie

damn, my brain went squige half way through that. it will take me a while to fully understand it, will also need to talk with some people. Thanks for the help one question though, from what is have told you, why does my network fall apart when bring the link between tower one and the core router int...

shadowskippie

shadowskippie

okay, it'll take me a while to do so.

shadowskippie

right, as the title says, i need a little help. we have a network that was setup in a very interesting way Every tower connects to each other through wireless interfaces that are on a /30 network. Within the tower OSPF is running but how the towers transport traffic is not how you would expect, each...

shadowskippie

morning

I want to export the syslog log of one of our towers to a log on my dude running on my machine in the office.

How do i do this

shadowskippie

I need some help A while ago i read of a piece of wireless equipment on this forum but now for the life of me i can't remember what it was called or where it was that i read about it. going with my crude analogy of it, its basically like putting horse blinders on the frequency you are using cutting ...

shadowskippie

Those plants look a lot like fynbos.
It is
Where in the beautiful Western Cape is that?

In a place called knysna, where the 2.4 frequency is noisy and i single handedly keep this network from imploding

shadowskippie

Well it seems my problem is back. It must have disappeared during the time i was working. I have changed everything on the tower now, i have the checked the noise but it never goes over -90 now I am now moving clients off that tower as i currently cannot figure out what is going on, that goodness th...

shadowskippie

Those plants look a lot like fynbos.

It is

shadowskippie

I didn't have time to install this guys unit before the weekend so i had to setup something temp

I call it the "Mikrotikis Flowes"

shadowskippie

Well i went and changed the routerboard in the tower (rb 433) and this seemed to fix the issue the question i now have is how. I think i have a small idea but i was hoping someone could give me a more detailed info as to why a currupt board could cause this and would i be able to rescue the old boar...

shadowskippie

Okay.
I have completely done away with all the G rates and left only the 1; 2; and 5.5 on the B rates.
Things look to bea bit more stable even under the noise situation.

Time will tell if there are any other issues

shadowskippie

both actually they seem to go hand in hand here. the thing though is we are running with all data rates, our previous network admin never locked the aps down to more stable data rates and i have been a little afraid of playing with the aps with active clients. tonight though nice and late i'll be br...

shadowskippie

sorry I upgraded the routerOS to 4.17 last night but that did sweet bugger all, also it is 2.4 Ghz Did a bit of playing around last night and i think i found the problem, the solution on the other hand is not gonna be as easy. It turns out i'm up noise. The noise floor jumps to -71 and then back dow...

shadowskippie

Evening I'm having an issue with one of our towers I have changed the omni, the LMR cable even the card inside the box but no mater what i try the RX from all clients connecting to that tower will not improve. i have some clients with the RX ccq sitting up at 60% and then we have clients that are at...

shadowskippie

i see i see,
i was under the impression it would help with the timing for nv2 but if all it does is correct the NTP then just setting that to look at the ntp server is all that is needed.

thanks

shadowskippie

http://www.mikrotik.com/testdocs/ros/2.9/system/gps.pdf

here it is, not sure what forum post i saw though about a guy using it for his aps.......i think it could have been in that 20km link one though

shadowskippie

really ?

i thought it did as some people say they are using it and i found some wiki docs on it, little confused

shadowskippie

does no one have any info on this for me

shadowskippie

first, if i was to consider using GPS sync on our towers how would it benefit our network (consider this, we are going to be adding 5ghz Aps to our towers as the 2.4 is getting very noisy and any new client would be connecting with that ap using nv2) next, where could i get the required equipment fo...

shadowskippie

Ya ill tell you how it works when i get to it right now i have few other pressing issues that need to be attendedto before i can start experimenting and even then ill need to wait a bit till after i have fixed things and the waters have calmed :lol: other wise the client will skin me for the fun of it

shadowskippie

Hi changeip, which software is it? that graphs the signal from RB's... I am starting to think its freznel zone effects as well, but really can't figure out why it would increase tremendously every once in a while: http://h1x.com/jing/2009-08-03_1118.png If it was the roof reflecting would it do wha...

shadowskippie

Ya, found the manual

for our network, station is perfect

thanks for the help

shadowskippie

okay i'm interested setting our system to nv2 so this info helps As for QOS skype, i'm not sure how to go about that. the QOS stuff i've read either requires me to know the destination IP (which with skype at any one time can be any IP) or know how it tells itself it is a voip packet (i think that w...

shadowskippie

well we have some towers where it is a PtP connection but then we also have some towers that sat within a 3-4 degree separation and we gridded them into the same grid so in that case one AP two stations.

I will have a look at those manuals

shadowskippie

Our network backbones are currently running in a Ap-bridge - station configuration.

would they benefit from me setting them to an AP-bridge - station-bridge configuration

shadowskippie

it's sorted. I was reading it wrong, i thought i saw SA but i was mistaken. I've been slowly moving our towers into their proper frequencies. it's a big tricky doing over a remote link when i have no way of getting into the tower from the back if needed, short of driving up there at 11:00 at night :...

shadowskippie

just need a little help with understanding something

I read up that NV2 is is a time based system.
How does this effect something like skype that is tossing out packings and cannot afford to wait

shadowskippie

thanks, i didn't know if OSPF would be able to do this (although after thinking about it that was a stupid assumption :lol: ) and i thought i was gonna need to learn mpls (not sure if this is right but i'm under the impression mpls can be used for creating redundant links). anyways, our network has ...

shadowskippie

Right this one will be a very tricky one On our network everything is setup like a tree, branches going off in all directions, the problem though is when one of the links goes down everything after that cannot connect back to the office. I've been linking of ways to create a redundant link system fo...

shadowskippie

okay, it is odd, two of our towers are set to SA but i don't see those frequencies, i just did a test with some equipment at home and setting to SA does give me those frequencies. it looks like the SA thing is the solution as to why those other two towers are not show is beyond me, still. Thanks for...

shadowskippie

If you don't know what i'm talking about have a look at this forum

http://forum.mikrotik.com/viewtopic.php ... =20km+link

shadowskippie

Morning Right, it think the term was attenuation. well basically i'm looking the be able to record one of our towers signal attenuations on one of its links. the signal varies from time to time and i want to graph it so that i can have a look at it over a period of time and see if i can find a patte...

shadowskippie

I will give that a look but not on our active towers, will need to get some other hardware together for that test, however i did also think it was that but our towers are not reflecting that to be the case.

I will though consider it anyways and try that. thanks

shadowskippie

howzit I need some help with something in one of our towers (RB800) we have four card in it. three of them are R52 cards and one is a R52Hn Now three of these cards run with these frquencies 5180-5240 5260-5320 5745-5825 but now while i was going over all our links i found that one of those cards (R...

Search found 213 matches