MikroTik

arthurmitch

Hi can anyone tell me how to mirror a port on my rb1100x2 i have an sip server on ether7 and would like to mirror all the traffic that is going throw there to ether6 the reason being is it is for a company that does sip voice recordings. any help on this will be deeply appreciated!

arthurmitch

ok if i try connecting a single pc to my proxy and specify internet explorer to connect directly to it it works if i enable my rule taht redirects all tcp 80 traffic to port 8080 on the same mikrotik box it does not work it just stoped working without any reason??? how the hell does that happen with...

arthurmitch

Ok that is a good tip but mine is different i clean installed the routerboard boot firmware and the whole new os to my routerboard and i am unable to downgrade so far back as v3 is there a diffrent way like asking mikrotik for my licence?

arthurmitch

Ok i have a rb411 an verry old one and i hade to completly format and reload the nand and now it tells me i need a licence before my one expires after 24 hours i had a level 4 on it but dont need it just need my standard level 3 back

arthurmitch

but i need to add it to my mangle i tryed my best but failed here is how my mangel are looking now! , I - invalid, D - dynamic 0 chain=input action=mark-connection new-connection-mark=wan1_conn passthrough=no in-interface=ether3-NEOTEL 1 chain=input action=mark-connection new-connection-mark=wan2_co...

arthurmitch

/ip route print detail Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit 0 A S dst-address=0.0.0.0/0 gateway=41.134.110.9 gateway-status=41.134.110.9 reachable via ether1-mweb check-gateway=ping di...

arthurmitch

ok sorry my config has changed a bit but it still does not route all my outgoing mail via my ppp interface. mangel: Flags: X - disabled, I - invalid, D - dynamic 0 chain=input action=mark-connection new-connection-mark=wan1_conn passthrough=no in-interface=ether1-mweb 1 chain=input action=mark-conne...

arthurmitch

ok so if my rules in my mangle looks like this where do i put it? Mangel: Flags: X - disabled, I - invalid, D - dynamic 0 chain=input action=mark-connection new-connection-mark=wan1_conn passthrough=no in-interface=ether1-mweb 1 I chain=input action=mark-connection new-connection-mark=wan2_conn pass...

arthurmitch

ok my pcc module is working fine but when i try to log into my internet banking using https://ib.absa.co.za/ib/ib.jsp i log in and as-soon as i am loged in it logs me off telling me i logged off but i didnt log off it logged me off by itself before i can make any choices and if i disable my second w...

arthurmitch

ok im a bit of a newb too this type of thing is there a how to or a exsample or somthing?

arthurmitch

is there a way i can foward all traffic coming from port 25 to leave via a specific interface because i have three wan interfaces and one lan and i only wish to use my one wan for emailing

arthurmitch

ok iv got a pcc topology configured on my rb750gl ether1-lan and ether5-wan1 and ether4-wan2 and they have static ipadress assinged by our isp but one of our pc's on-site cought a virus and sended spam and caused havoc now i am batteling to get that ip unlisted so i want to setup my secondary ip and...

arthurmitch

yes that would be the case but im running load balancing pcc with three wan connections and if the cost changes it keeps on working it only stops working when the route is disabled

arthurmitch

found my trouble and sortede it out thanx in anyway!

arthurmitch

can some one plz send me an example on how to do a script that changes the route cost when there is no wan connection avalible on a certain interface so the other one will take over and be used until the primary is back online

arthurmitch

ok here is my main router: rout print # DST-ADDRESS PREF-SRC GATEWAY DISTANCE 0 A S 0.0.0.0/0 41.134.110.9 1 1 A S 10.0.0.0/24 192.168.45.3 110 2 A S 10.1.1.0/24 192.168.45.3 110 3 ADC 41.134.110.0/28 41.134.110.10 ether1 0 4 A S 192.168.11.0/24 192.168.45.3 110 5 ADC 192.168.13.0/24 192.168.13.1 br...

arthurmitch

ok i already did that thought it was something else i will build a diagram and paste it now

arthurmitch

where do i disable nat helper?

arthurmitch

ok i have the following problem on my network i cannot connect to my ftp using my command prompt but i can connect using my gui windows based internet explorer,if got ospf setted up on all 7 of my routers,i can connect and enter username and password but the error i get when connecting throw my comm...

arthurmitch

ok im really dumb concerning scripting can u help me to do the presses like i don't know how long or when where to make it run repeatedly?

arthurmitch

ok is there a way i can make a script to change cost if it does not reach a certain destination like www.google.co.za then it should use my other gateway?

arthurmitch

is there a way of forwarding all mail port 25, to use a specific interface to go out with because i have two wan interfaces and i would only like it to use the one

arthurmitch

ok i have two wan connections that i setted up as pppoe on both of my mikrotik routers, the one is at my work site and the other at home but what i want is if the one connection goes down the other must keep on working but it doesn’t work, both of the accounts are with the same isp and have the sam ...

arthurmitch

cool thanx here is my home scenario that is different from my work scenario i have two wan connections on two different sites what i want to do is setup ospf so if the one pppoe connection goes down the other goes back up again but both of my wan connections come from the same service provider wich ...

arthurmitch

hey ok so far i have expanded my network and serving all of my family all 20 of us so far now there is a new dilemma i have 2 adsl lines at two different places the one is at my fathers place and the other is at my place so what i want is fail over if the on line goes down it will go over to the nex...

arthurmitch

is there a script example i can use?

arthurmitch

Hi ok so far iv been using the pcc examples but still hungry for more so we have experienced cable theft and had no internet running but i went and bought some mikrotik sxt5n units 4 to be exact so i have 3 internet connections now 2 adsl lines and one diginet one so the sxt i setted up using ospf a...

arthurmitch

ok under my rules i have rule number 12 and 13 that states it but still doing the same problem, Flags: X - disabled, I - invalid, D - dynamic 0 chain=input action=mark-connection new-connection-mark=wan1_conn passthrough=no in-interface=ether1-mweb 1 chain=input action=mark-connection new-connection...

arthurmitch

hu ? ppc qualifier to src address what rule is that in the list?

arthurmitch

ok so far i have established everything works good but now and then something goes wrong like for instance iv i watch a youtube video it work and cashes faster than ever but suddenly it stops playing, after inspection it revealed it changed ip adresses like it does the loadbalancing between my two r...

arthurmitch

ok cool but backu to my question how do i configure my rb750g to do my 1gb upstream and downstream?

arthurmitch

is there a way of getting my wireless signal better on my wirless?

arthurmitch

yes that is what i would like to do?

arthurmitch

ok what i thought it will do is give me 1gb upstream and 1 gb downstream?

arthurmitch

is there a way i can make ether1 receve data and ether2 send data on subnet 192.168.1.0/24 and on ether4 tx and ether5 rx on 10.10.41.0/24??

arthurmitch

nope non manageable switches

arthurmitch

Ok my next interesting problem is the following i have two network switches one on subnet 192.168.1.0/24 and the other switch 10.10.41.0/24 they are both working fine except i want 192.168.1.2 to access 10.10.41.3 and i have a rb750g and alot of traffic that will go throw so is there a way of bondin...

arthurmitch

ok well new problem just stuck it's head up onto my table when i remove my mt rb750 and im using my normal clearos firewall and just forwarded port 21 to my ftp server ftp still works and lftp works when downloading file ELITE GRP_MR1_PROCESSING_201103180900985.csv but when i put my rb750 back all m...

arthurmitch

can u pleas post code?

arthurmitch

ok how would i accomplish that?

arthurmitch

ok the other stuff works now the only problem i have now left is when my accountant logs on my internet banking www.absa.co.za and enters credentials usernam pass ect... and enters it logs him out automatically and tells us we changed ip addresses between auth and login? so i know pcc splits traffic...

arthurmitch

ok the two routers i have comes from two different isp's will that have any affect?

arthurmitch

ok here is a delemma how do i bond two adsl routers 4mbps/512kbps + 4mbps/512kbps to=8mbps/1024kbps ? aney idea? i know mikrotik can do that keep in mind that i need port fowading to work aswell! for some apps and games i got running!

arthurmitch

ok so far i have everything working fine but no luck with lftp my normal ftp server i got running behind my rb750 is working fine when using normal ftp and using windows ftp clients but when i use lftp it hangs when doing nlist! my firewall rules are working fine and there is no problem whatsoever w...

arthurmitch

ok so far i have everything working fine but no luck with lftp my normal ftp server i got running behind my rb750 is working fine when using normal ftp and using windows ftp clients but when i use lftp it hangs when doing nlist! my firewall rules are working fine and there is no problem whatsoever w...

arthurmitch

well it works beautifully! now all the forwarding is working good thanx hey this is awsome!

arthurmitch

its this like right? http://forum.mikrotik.com/viewtopic.php?f=2&t=49581 theis part im missing= # don't mark traffic going to directly connected WAN networks add chain=prerouting dst-address=10.111.0.0/24 action=accept in-interface=Local add chain=prerouting dst-address=10.112.0.0/24 action=acce...

arthurmitch

ok but why firewall filter do i really need it? or is there a simpler way? like just add the mangel and nat rules?

arthurmitch

ok i did take a look and tryed to configure it but no luck? what is spiciffically missing in my config?

arthurmitch

ok got konfuzed with the two closed the one window and accidently posted it on both! ok my problem is when i enable my second interface i.s one then all my portforading rules stop working on my mweb interface and all my portfowading rules only works on my second out interface my i.s one and all my i...

arthurmitch

ok have the same problem i am strggeling to understad what needs to be added and what goes where can somone plz help me with my portfowading it seems to go out the other interfsce that it came in from! here is my conf: mangel: 0 chain=input action=mark-connection new-connection-mark=wan1_conn passth...

arthurmitch

ok have the same problem i am strggeling to understad what needs to be added and what goes where can somone plz help me with my portfowading it seems to go out the other interfsce that it came in from! here is my conf: mangel: 0 chain=input action=mark-connection new-connection-mark=wan1_conn passth...

arthurmitch

ok one thing u may give me a cal on 0725734126 or i can briefly explain this there is one rule that i managed to mess up u go ti /ip firewall and edit rule 6 and 7 and go to extra and select dst adress type make the option local and tick invert and remove the option on general tab that states dst ad...

arthurmitch

ok well iv setted up my pcc just as cording to the manual but here is what boters me if someone tyes to access my one public ip 41.134.110.10 it times out but using my other one 196.212.100.148 it works but if i disabel 196.212.100.148 ip 41.134.110.10 starts working in its place wich is correct in ...

arthurmitch

so how would i go about hairpin nat with pcc?

arthurmitch

ok but im using two routers that is using module pcc, hairpin nat is exactingly what i want.

arthurmitch

ok try removing the bridge you added and setup a simple route

arthurmitch

ok if i understand correctly u bridged the eth0 and eth1 adapters and it is bypassing the mikrotik rb?

arthurmitch

ok i thought u bridged the two interfaces and jacked the cable into both, but that aside what is the ip adresses on both ends?

arthurmitch

0 A S dst-address=0.0.0.0/0 gateway=41.134.110.9 gateway-status=41.134.110.9 reachable ether1-Mweb-Router check-gateway=ping distance=1 scope=30 target-scope=10 routing-mark=to_wan1 1 A S dst-address=0.0.0.0/0 gateway=196.212.100.145 gateway-status=196.212.100.145 reachable ether3-I.S-Router check-g...

arthurmitch

ok that works now placed my routes in the right place but still stuck at this one problem user1 ftp:41.134.110.10 on my local subnet 192.168.88.0/24 and gets timed out, so he types in the public ip adresss to access the ftp server, is there a way i can fix that the one method i used was : 0 ;;; Loop...

arthurmitch

pleas clarify if the lan is added on the bridge as-well if it is then it will eco back and thats why your rb1000 goes up to 100% cpu usage, if i can explain it this way its like holding a microphone against a speaker and it is making that shrieking sound, that's why it is doing that!

arthurmitch

ok now im having the following problem port forwarding is working on my router but only from my on public ip address 196.212.100.148 and cannot access it via 41.134.110.10 but if i dissable interface 196.212.100.148 ,41.134.110.10 starts working! here is my nat print: 0 ;;; Loopback-Connection 1 cha...

arthurmitch

ok now im having the following problem port forwarding is working on my router but only from my on public ip address 196.212.100.148 and cannot access it via 41.134.110.10 but if i dissable interface 196.212.100.148 ,41.134.110.10 starts working! here is my nat print: 0 ;;; Loopback-Connection 1 cha...

arthurmitch

now another thing is, is there a way to ping a certain ip adress on my public domain and if it cannot be reached it emails me and tells me router 1 down or do i need to write a script for that?

arthurmitch

ok cool thank you it seems to be working for now! lol

arthurmitch

ok like the hair pin nat rule will work but is there a way so if the incert a ip like 41.134.110.11 it wil revert back to 192.168.88.2 ?

arthurmitch

oh forgot im using a module called pcc on my rb750 cuz im using 2 dsl routers for outgoing traffic. i have setted up a pcc based setup all my rules are working right but the mikrotik does not redirect a public ip adress back to the user using ex: ftp connection on the same subnet like: wan1:41.134.1...

arthurmitch

oh forgot im using a module called pcc on my rb750 cuz im using 2 dsl routers for outgoing traffic. i have setted up a pcc based setup all my rules are working right but the mikrotik does not redirect a public ip adress back to the user using ex: ftp connection on the same subnet like: wan1:41.134.1...

arthurmitch

my ip firewall mangel looks like this now 0 chain=input action=mark-connection new-connection-mark=wan1_conn passthrough=no in-interface=ether1-Mweb-Router 1 chain=input action=mark-connection new-connection-mark=wan2_conn passthrough=no in-interface=ether3-I.S-Router 2 chain=output action=mark-rout...

arthurmitch

ok i keepon getting this erro when pasting it in expected end of command (line 1 collum35)

arthurmitch

my programmer harcoded the program to use ex: ftp://41.134.110.11 in the program and it works fine outside but not on my local subnet. is there a rule or a loopback i need to enter somwhere?

arthurmitch

ok one problem i have connections outside like from my house to my office it works but when im at my office and they use my public ip on my private ip to acsess my ftp server and the connection is timing out then

arthurmitch

well ok if you want you can limit his subnet using a queues and limiting the amout of bandwith he uses up and down stream also u have extra features like liniting p2p connection and al lot of othe stuff! take a look at a module on mikritik called pcc if u have two dsl routers running!

arthurmitch

hey ok i have a big problem got my whole setup working but the programmer hardcoded the public ip adresses on my programs that he wrote and the programs are running on my local private network and i cannot get it to revert back to my public network without the connection going out, is there a loopba...

arthurmitch

thank you very much Sariman it is work beautifully!!!!!

arthurmitch

ok sorry didn't check if the server was on ok but what i did was i added this rule in my nat 2 chain=dstnat action=dst-nat to-addresses=192.168.88.2 to-ports=20-21 protocol=tcp dst-port=20-21 and in my service ports in my firewall i activated ftp helper and my ftp seems it is working! but now anothe...

arthurmitch

ok did it but no luck with my ftp should i do a nat rule aswell?

arthurmitch

mangle: 0 chain=input action=mark-connection new-connection-mark=wan1_conn passthrough=no in-interface=ether1-Mweb-Router 1 chain=input action=mark-connection new-connection-mark=wan2_conn passthrough=no in-interface=ether3-I.S-Router 2 chain=output action=mark-routing new-routing-mark=to_wan1 passt...

arthurmitch

ok nope then i need to make them work from both routers wan1 and wan2! if possible

arthurmitch

ok how do i mark it or bypass it what would be the best?

arthurmitch

Hey ok i have my port forwarding setup like this chain=dstnat action=dst-nat to-addresses=192.168.88.254 to-ports=20-21 protocol=tcp dst-port=20-21 and well i have the pcc module that i setted up to use my two adsl routers as fail over and to split traffic but if i want to foward ftp traffic to my f...

Search found 82 matches