Community discussions

MikroTik App

Search found 333 matches

  • 1
  • 2
by edzix
Thu Oct 21, 2010 4:17 pm
Forum: General
Topic: PCI-E 3G + RouterOS
Replies: 2
Views: 1128

Re: PCI-E 3G + RouterOS

anybody?
Maybe comments and suggestions on most optimal 3G USB cards?


Edgars
by edzix
Tue Oct 19, 2010 3:24 pm
Forum: General
Topic: PCI-E 3G + RouterOS
Replies: 2
Views: 1128

PCI-E 3G + RouterOS

Hi everyone,

can someone, please, share with experience on using RouterOS + PCI-E 3G cards?

- which models from supported device list work without problem?
- suggest most optimal modem (price/quality)

Thanks,
Edgars
by edzix
Fri Jul 20, 2007 5:04 pm
Forum: Scripting
Topic: per IP bandwidth log
Replies: 1
Views: 1489

Re: per IP bandwidth log

use RADIUS authentication to achieve this, the data is stored on the server in a very obvious form (DB), so there wouldn't be any problems to do graphs.. Otherwise you should make magle rules for each IP, SSH to the router from some Linux based machine, read the counter for each rule etc. But there ...
by edzix
Fri Jul 20, 2007 4:55 pm
Forum: Scripting
Topic: move a firewall rule from a script on a HotSpot
Replies: 2
Views: 1803

Re: move a firewall rule from a script on a HotSpot

instead of /ip firewall filter move [/ip firewall filter find comment="prueba"] 0 try something like /ip firewall filter move [/ip firewall filter find comment="prueba"] [/ip firewall filter find comment="comment_0_rule"]

Edgars
by edzix
Tue Oct 04, 2005 5:59 pm
Forum: General
Topic: Radius Recv-Limit Question
Replies: 3
Views: 1794

you should run some 3rd party script on each user 'foo' login which calculates how much does this user have additional MBs left and send this number back to the MT as Recv-Limit/Xmit-Limit.

Edgars
by edzix
Tue Oct 04, 2005 5:56 pm
Forum: Scripting
Topic: != Bug?
Replies: 4
Views: 2481

maybe try to left one space between 'comment' and "!=".

Edgars
by edzix
Tue Oct 04, 2005 5:51 pm
Forum: Scripting
Topic: How to put comments into scripts
Replies: 2
Views: 1777

use "#" symbol at the very left of the line.

Edgars
by edzix
Tue Sep 20, 2005 9:40 am
Forum: General
Topic: Nothing ever works with MT Manuals!!! I hate it!!
Replies: 7
Views: 2783

of course it will not work because the syntax has changed. If you would look at the firewall examples in the new manual, you will see that there is no such 'rule forward' submenu. So the example would look as follows:

"/ip firewall filter { disable [find comment=p2p]}"
by edzix
Fri Sep 09, 2005 4:12 pm
Forum: General
Topic: Duplicate MAC Addresses
Replies: 5
Views: 4771

see if there is such an option 'set # mac-address', IMHO there was no cuh possibility in v2.8. Use v2.9 for this purpse.

Edgars
by edzix
Fri Sep 09, 2005 3:56 pm
Forum: Scripting
Topic: Logging visited urls
Replies: 7
Views: 5330

IMHO there were a post in this forum some time ago describing one utility doing this job. Try to search for one!

Edgars
by edzix
Wed Jul 27, 2005 3:40 pm
Forum: General
Topic: Login authentication
Replies: 1
Views: 1224

tahe a look at server setting more carefully, there is such settings to change the mentioned.

Edgars
by edzix
Tue Jul 12, 2005 11:09 am
Forum: Scripting
Topic: Import username and password from text file?
Replies: 2
Views: 2652

you can import if the file is in the correct form (/import file_name.rsc) e.i. something like this:

/ip hotspot user
add name=edgars password=edgars
add name=e password=e
...


Edgars
by edzix
Thu Jun 30, 2005 2:55 pm
Forum: General
Topic: Hotspot Manager randomly disables users
Replies: 5
Views: 2023

we have fixed one bug. It should be okey now.

Edgars
by edzix
Mon Jun 27, 2005 3:31 pm
Forum: General
Topic: disabling rules by comment beginnings
Replies: 4
Views: 2202

/ip firewall src-nat {:for i from 1 to 5 do [disable [find comment=("preport-name" . $i)]]}
Edgars
by edzix
Mon Jun 27, 2005 3:02 pm
Forum: Scripting
Topic: scripting in the void
Replies: 2
Views: 1999

in v2.9 there won't be any errors, in v2.8 there is.
Use temp variables along with :log command to find out the problem.

Edgars
by edzix
Wed Jun 22, 2005 3:13 pm
Forum: General
Topic: Mode station and arp-proxy?
Replies: 3
Views: 3027

IPs from the same subnet cannot be used on two different router's interfaces. Use bridging in this situation (or routing if you prefer). You have to bridge wireless and ethernet interfaces both on MikroTik and other vendor routers. Keep on mind that station wireless interface couldn't be bridged, th...
by edzix
Wed Jun 22, 2005 2:38 pm
Forum: Scripting
Topic: P2P script
Replies: 16
Views: 8476

If you want these connection to be dropped/limited/whatever_else at certain hours you should follow the following example (will drop the connection): /ip firewall mangle add p2p=all-p2p mark-connection=p2p-con disabled=no /ip firewall filter add connection=p2p-con action=drop disabled=yes comment=&q...
by edzix
Wed Jun 22, 2005 2:26 pm
Forum: Scripting
Topic: P2P script
Replies: 16
Views: 8476

and after scheduler successfully enable rule for P2P lock, hotspot user's still to conitinue p2p-download. How to block this? I want to kill all estabilisced connection with p2p IP because filter rule: chain=forward p2p=all-p2p action=drop not work! Is possible? 10x not possible. There shoud be a n...
by edzix
Wed Jun 22, 2005 1:04 pm
Forum: Scripting
Topic: P2P script
Replies: 16
Views: 8476

The command < ip firewall filter {enable [find comment="a b"]} > works fine. You can give us printout of '/sys sched' and '/sys script' menus.

Edgars
by edzix
Tue Jun 21, 2005 7:01 pm
Forum: General
Topic: rc5 scheduler problem?
Replies: 1
Views: 1466

Please upgrade to the latest release and if the problem appears, send more detailed description along with the supoutput file to support@mikrotik.com

Edgars
by edzix
Tue Jun 21, 2005 6:59 pm
Forum: General
Topic: Rate-Limit ppp Bug?
Replies: 3
Views: 1703

I'm just thinking how could it work for HotSpot users without quotes..

Edgars
by edzix
Tue Jun 21, 2005 2:25 pm
Forum: General
Topic: Rate-Limit ppp Bug?
Replies: 3
Views: 1703

just tested on v 2.9rc6+FreeRADIUS - your configuration works ok for PPPoE. The following queue rule is appearing: 1 D name="<pppoe-edgars>" dst-address=0.0.0.0/0 interface=<pppoe-edgars> parent=none priority=8 queue=default/default limit-at=36000/56000 max-limit=36000/56000 burst-limit=12...
by edzix
Tue Jun 21, 2005 11:52 am
Forum: General
Topic: Need help with bandwidth priority
Replies: 6
Views: 2167

if you are not limiting your clients than you have to made one parent queue with max-limit=the_total_available_bandwidth. Afterwards, when adding those queues with 'flow' parameter specify the previous as parent.

Edgars
by edzix
Mon Jun 20, 2005 2:16 pm
Forum: General
Topic: Need help with bandwidth priority
Replies: 6
Views: 2167

use '/ip firewall mangle' to mark packets coming from those VIP ports and mark all other traffic with some other flow. The use these flows in '/queue tree' to give them appropriate priorities ('priority' parameter).

Edgars
by edzix
Fri Jun 17, 2005 2:52 pm
Forum: General
Topic: RADIUS accounting request not sent:no response???
Replies: 2
Views: 3938

there is no need to worry about that error, the RADIUS is simply to busy to accept the packet you sent to it and rejects it. This date which was rejected is added to the next accounting packet, it's not lost. Don't know for sure about SBR, but probably you should specify the path to where mikrotik.d...
by edzix
Fri Jun 17, 2005 2:49 pm
Forum: General
Topic: P2P redirection
Replies: 1
Views: 1311

Re: P2P redirection

by edzix
Fri Jun 17, 2005 2:47 pm
Forum: Scripting
Topic: Refreshing an interface.
Replies: 3
Views: 2408

aah you mean in v2.8, that is only for status refreshing, no enable/diisable is made. Such script is useless you are willing to write.

Edgars
by edzix
Thu Jun 16, 2005 3:42 pm
Forum: General
Topic: ARP filter
Replies: 1
Views: 2228

set default-forwarding=no on the AP.

Edgars
by edzix
Thu Jun 16, 2005 3:38 pm
Forum: General
Topic: Initial Page Don't Appears
Replies: 1
Views: 2070

you should probably upgrade to the latest release candidate (RC5).

Edgars
by edzix
Thu Jun 16, 2005 3:35 pm
Forum: General
Topic: Hotspot Manager randomly disables users
Replies: 5
Views: 2023

this should be fixed in a short time.

Edgars
by edzix
Thu Jun 16, 2005 3:33 pm
Forum: General
Topic: virus port list
Replies: 18
Views: 11539

copy/paste from the terminal.

Edgars
by edzix
Thu Jun 16, 2005 3:25 pm
Forum: Scripting
Topic: Refreshing an interface.
Replies: 3
Views: 2408

whre do you see this Refresh?

Edgars
by edzix
Tue Jun 14, 2005 1:53 pm
Forum: General
Topic: Framed-ip-address question
Replies: 6
Views: 3226

in v2.9 there is possibility to wach athe content of packet sent from RADIUS to MikroTik. Do as follows:

/system logging add topics=debug,packet,radius
Edgars
by edzix
Tue Jun 14, 2005 1:49 pm
Forum: General
Topic: very simple question easy i think
Replies: 3
Views: 1239

try to read firewall manual:
http://www.mikrotik.com/docs/ros/2.8/

Edgars
by edzix
Wed Jun 08, 2005 2:39 pm
Forum: General
Topic: Radius server MAC authentication
Replies: 1
Views: 1103

there is no password sent when using RADIUS MAC authentication.
Try to upgrade to the latest RC.

Edgars
by edzix
Tue Jun 07, 2005 5:31 pm
Forum: General
Topic: snmp mib's
Replies: 1
Views: 1054

you can get only the statistics showed in 'print oid'.

Edgars
by edzix
Tue Jun 07, 2005 2:35 pm
Forum: General
Topic: PPPOE timout problem
Replies: 1
Views: 1003

on the HotSpot Session Timeout works the same manner. You can use, for example, RADIUS server to do this - on each user access request count how much time he/she is allowed to use and send it back as Sessio-Timeout attribute. If the max allowed time is reached disable this user in the configuration ...
by edzix
Tue Jun 07, 2005 2:32 pm
Forum: General
Topic: Firewall - established connections - how to kill?
Replies: 4
Views: 3549

yes, you can do this.

Edgars
by edzix
Mon Jun 06, 2005 7:17 pm
Forum: Wireless Networking
Topic: Hotspot configuration
Replies: 5
Views: 2960

I personally sugest FreeRADIUS.

You could put the server in the place which is visible from your HS gateway.

Edgars
by edzix
Mon Jun 06, 2005 7:13 pm
Forum: General
Topic: UPS Support in 2.9
Replies: 6
Views: 2454

you mean '/system ups'?

Edgars
by edzix
Mon Jun 06, 2005 6:42 pm
Forum: General
Topic: Radius Incoming
Replies: 6
Views: 5071

Eric,

follow this scenario:
echo "User-Name := test" | radclient <router-ip-addr> disconnect <secret>
[/code]
by edzix
Mon Jun 06, 2005 6:37 pm
Forum: General
Topic: Hotspot Manager session log / time-left is empty
Replies: 6
Views: 3010

Question 1: If a host is on DMZ, is the IP still NATed to the internet? Question 2: Can I do port forwarding (RADIUS ports) on my modem/router and get a one-to-one connection to the Hotspot Manager? doesn't matter whther you are forwarding any ports or whatever. If there are al least two machines a...
by edzix
Thu Jun 02, 2005 3:53 pm
Forum: General
Topic: Hotspot Manager time is advanced by 1 hr.
Replies: 3
Views: 1888

works in +2.
try to set +7 or +9 and see how it's reacting.

Edgars
by edzix
Thu Jun 02, 2005 3:45 pm
Forum: General
Topic: Hotspot Manager session log / time-left is empty
Replies: 6
Views: 3010

you are probably doing some NAT before your HotSpot gateway. Try to add the public IP of your HS gateway to Hotspot Manager Hosts tab, that should fix the problem.

Edgars
by edzix
Thu Jun 02, 2005 3:43 pm
Forum: General
Topic: Radius Incoming
Replies: 6
Views: 5071

the port should be opened by default, double check your firewall filters.

The /incoming feature works fine. Refer to 'man radclient' for more instructions.

Edgars
by edzix
Thu Jun 02, 2005 3:35 pm
Forum: Scripting
Topic: TORCH SCRIPTING for Transmitted rate [SOLVED]
Replies: 3
Views: 3996

there should be do before {...} sections. But as this is not implemented, there is no possibility to do this.

Try '/interface monitor-traffic xxx do={..}" instead.

Edgars
by edzix
Fri May 20, 2005 4:18 pm
Forum: General
Topic: monitor nodes inside MT
Replies: 2
Views: 1215

by edzix
Fri May 20, 2005 4:16 pm
Forum: General
Topic: spam relay - urgents
Replies: 4
Views: 2041

by edzix
Fri May 20, 2005 11:40 am
Forum: General
Topic: 2.9 and radius
Replies: 1
Views: 1503

yes, you can refer to the old AAA documentation. There are some new features added, but that should not affect to the proper work of the protocol.

Edgars
by edzix
Fri May 20, 2005 11:36 am
Forum: General
Topic: Mikrotik Hotspot Manager [beta]
Replies: 44
Views: 26610

already there - called "Prepaid Time".

Edgars
by edzix
Fri May 20, 2005 11:34 am
Forum: Scripting
Topic: load balancing
Replies: 2
Views: 2351

the load is already balanced between to gateways. You just have to add a script which will change the 'gateway' value if one of them crashes (check Scripting examples for detailed information).

Edgars
by edzix
Thu May 19, 2005 5:13 pm
Forum: General
Topic: DialIn Caller ID log?
Replies: 2
Views: 1709

use RADIUS server.
The name of the respective attribute is Caller-Id.

See more here:
http://www.mikrotik.com/docs/ros/2.8/gu ... 2908452606

Edgars
by edzix
Mon May 16, 2005 9:58 am
Forum: Scripting
Topic: remove all queue/firewall rules
Replies: 1
Views: 8916

/queue tree remove [/queue tree find]

Edgars
by edzix
Fri May 13, 2005 11:51 am
Forum: General
Topic: pcq help
Replies: 2
Views: 1605

why no body is providing help. is it soo silly and i am dumped that i am unable to configure it the right way. or there is a problem in what i am asking because there are so much rules... You should use the followinf three parameter in '/queue tree' for bursting: burst-limit, burst-threshold, burst...
by edzix
Fri May 13, 2005 11:43 am
Forum: General
Topic: Using Hotspot with Traffic Shaping
Replies: 1
Views: 1975

You have to check '/ip firewall' submenus and introduce some new flows. Then, yes, they could be used for traffic shaping requirements.

Edgars
by edzix
Fri May 13, 2005 11:38 am
Forum: General
Topic: Mikrotik Hotspot Manager [beta]
Replies: 44
Views: 26610

yes, there is such an idea some time in the future but not now

Edgars
by edzix
Fri May 13, 2005 11:37 am
Forum: Scripting
Topic: please help with [simple queue] based traffic counter
Replies: 6
Views: 3474

probably the upgrade to the newest 2.8 RouterOS version would help.

Edgars
by edzix
Fri May 13, 2005 11:35 am
Forum: Scripting
Topic: P2P script
Replies: 16
Views: 8476

yes, but there should be such entry with comment 'p2p'.

Edgars
by edzix
Thu May 12, 2005 11:55 am
Forum: General
Topic: Mikrotik Hotspot Manager [beta]
Replies: 44
Views: 26610

can't tell you this, really.

Edgars
by edzix
Wed May 11, 2005 3:25 pm
Forum: General
Topic: action=log
Replies: 4
Views: 2906

you should add separate rule with an action=log.

Edgars
by edzix
Wed May 11, 2005 3:22 pm
Forum: General
Topic: Mikrotik Hotspot Manager [beta]
Replies: 44
Views: 26610

the Backup server is almost ready. When we will put it online and I will post here the IP for it.

Edgars
by edzix
Mon May 09, 2005 4:53 pm
Forum: General
Topic: new feature plz - CHAT between admins logged on
Replies: 3
Views: 1867

already implemented in v2.9. Use # symbol to send some message to the persons who are logged in with the same username.

Edgars
by edzix
Mon May 09, 2005 3:38 pm
Forum: General
Topic: hotspot session timeout limits?
Replies: 1
Views: 1990

Session-timeout certainly will work till 8 months (5965hours). Above 16 (11930h) months it will certainly not. But from 8-16 months theoretically it should work, but something may go wrong.

Edgars
by edzix
Mon May 09, 2005 2:24 pm
Forum: General
Topic: make ROUTES with IPs been valid
Replies: 1
Views: 928

please, either be more detailed about your problem or RTM:
http://www.mikrotik.com/docs/ros/2.8/

Edgars
by edzix
Mon May 09, 2005 2:19 pm
Forum: General
Topic: PPPoE burst
Replies: 1
Views: 1409

using Rate-Limit attribute from RADIUS server:
http://www.mikrotik.com/docs/ros/2.8/gu ... 5922084829

Edgars
by edzix
Mon May 09, 2005 2:16 pm
Forum: General
Topic: p2p redirection
Replies: 1
Views: 1025

by edzix
Mon May 09, 2005 2:08 pm
Forum: Scripting
Topic: P2P script
Replies: 16
Views: 8476

/system scheduler add name=enable interval=24h start-date=8/05/2004 disabled=no on-event=en /system script add name=ed source={ /ip firewall rule forward enable [/ip firewall rule forward find comment=p2p] } /system scheduler add name=disable interval=24h start-date=9/05/2004 disabled=no on-event=d...
by edzix
Mon May 09, 2005 2:02 pm
Forum: Scripting
Topic: record traffic script not working
Replies: 8
Views: 3608

you can use ':log' command after each step. In the '/log' then see whether every :log is executed correctly.

Edgars
by edzix
Tue May 03, 2005 5:04 pm
Forum: General
Topic: Feature wish: TACACS support
Replies: 2
Views: 2666

currently there are no plans. TACACS ir very similar to RADIUS. Why not to give a try for the last?

Edgars
by edzix
Thu Apr 28, 2005 6:00 pm
Forum: General
Topic: HotSpot Question
Replies: 2
Views: 1589

Re: HotSpot Question

1. It can limit the Tx/Rx bitrate and byte. Question : If I use FreeRadius for the AAA , what Reply-Atribute di I have to add to that freeradius ? Ascend-Date-Rate and/or Ascend-Xmit-Rate 2. "Universal Client feature may be used with HotSpot enabled-address method to provide IP network service...
by edzix
Wed Apr 27, 2005 5:59 pm
Forum: General
Topic: Limit hotspot user time and refresh
Replies: 2
Views: 1195

seems that RADIUS server will help with this.

Edgars
by edzix
Tue Apr 12, 2005 11:02 am
Forum: Scripting
Topic: Script for hotspot users creation
Replies: 5
Views: 7814

:for i from 1 to 100 do={/ip hotspot user add name=("user" . $i) ...}
instead of ... specify all other necessary parameters.
No, there aren't random number generation in scripts. But you can use some formula including $i value to generate such number.

Edgars
by edzix
Fri Apr 08, 2005 2:32 pm
Forum: General
Topic: Kill PPPoE session with SNMP
Replies: 7
Views: 3389

in v2.9 you can disconnect PPP kind users from the RADIUS server. To accomplish this, do as follows: /radius incoming set accept=yes Then using, for examples, radclient disconnect the user in the following way: echo "User-Name := test" | radclient <router-ip-addr> disconnect <secret> For m...
by edzix
Fri Apr 08, 2005 2:25 pm
Forum: Scripting
Topic: about if
Replies: 3
Views: 2248

by edzix
Tue Apr 05, 2005 2:28 pm
Forum: General
Topic: [Changed] Policy routing with dynamic IP's
Replies: 2
Views: 1810

you should make a scrit to change the gateways correctly. Assuming that the first pppoe-client is named 'pppoe1' and the second one - 'pppoe2' the script will look as follows (named 'check'): :global gw1;:global gw2;:global tgw1;:global tgw2 :if ([/system scheduler get routing run-count]<=1) do={ :s...
by edzix
Tue Apr 05, 2005 1:54 pm
Forum: General
Topic: I lost tools->netwatch after upgrade to 2.8.26
Replies: 2
Views: 1004

you probably haven't installed advanced-tools package, have you?

Edgars
by edzix
Wed Mar 30, 2005 2:56 pm
Forum: General
Topic: NetFlow
Replies: 2
Views: 1429

yes, NetFlow is proprietary to Cisco.
RouterOS has similar feature called Traffic-Flow (v2.9)

Edgars
by edzix
Wed Mar 30, 2005 2:41 pm
Forum: General
Topic: Manager traffic
Replies: 2
Views: 1558

browse the forum. A month or two ago Viktorija posted this policy routing example.

Edgars
by edzix
Thu Mar 24, 2005 10:40 am
Forum: Scripting
Topic: MRTG Grapher
Replies: 3
Views: 2853

in MT you just have to enable SNMP service:
http://www.mikrotik.com/docs/ros/2.8/root/snmp

Edgars
by edzix
Wed Mar 23, 2005 6:35 pm
Forum: General
Topic: No login screen, free access
Replies: 5
Views: 1663

seems that firewall configuration is faulty. You are probably accepting all requests without requiring the login information.

Edgars
by edzix
Wed Mar 23, 2005 3:00 pm
Forum: General
Topic: Configuring a PC Router
Replies: 10
Views: 2702

IMHO 217.194.157.77/29 should be set on the ether2 interface.

Edgars
by edzix
Wed Mar 23, 2005 12:21 pm
Forum: General
Topic: how to configure hotspot manager
Replies: 6
Views: 2457

with user profiles, if you mean that users will be able to browse the HM and see how much did yhey spend online or how much traffic did they download/upload then this is not possible.
In the Demo mode you can add only one user/profile/host.

Edgars
by edzix
Tue Mar 22, 2005 10:18 am
Forum: General
Topic: Print OID in nstreme-dual
Replies: 1
Views: 943

at the moment you cannot monitor values from that submenu using SNMP.

Edgars
by edzix
Tue Mar 22, 2005 10:15 am
Forum: General
Topic: how to configure hotspot manager
Replies: 6
Views: 2457

MHM IP address is 159.148.147.194, and this should be added under '/radius' menu in your RouterOS box, like:
/radius add service=hotspot address=159.148.147.194 secret=mhm timeout=2s
Edgars
by edzix
Tue Mar 22, 2005 10:09 am
Forum: General
Topic: Mikrotik Hotspot Manager [beta]
Replies: 44
Views: 26610

Okay, I can live with that... but still, what URL do I point my MT at for the MHM radius server? And, isn't there a signup page somewhere for end users? no, there isn't. I might have missed something, but I can't seem to find the instructions for MHM, just hotspots in general. try to read the first...
by edzix
Mon Mar 21, 2005 10:10 am
Forum: General
Topic: Mikrotik Hotspot Manager [beta]
Replies: 44
Views: 26610

changeip,

sorry, but billing currently is not possible in MHM.

Edgars
by edzix
Mon Mar 21, 2005 10:00 am
Forum: Scripting
Topic: Scripting Policy Based Routing
Replies: 3
Views: 2543

use the name of the entry or comment to change the status of this entry.
You can post your script, will check where exactly could be the mistake.

Edgars
by edzix
Fri Mar 18, 2005 5:55 pm
Forum: General
Topic: Atheros AR5212 doesnt show 5ghz in wireless info print
Replies: 5
Views: 3348

you has probably set the frequency-mode to regulatory-domain and the country, you've specified under your wireless configuration, does not allow 5GHz frequencies.

Edgars
by edzix
Fri Mar 18, 2005 5:47 pm
Forum: General
Topic: Bonding in v2.9
Replies: 1
Views: 1741

if you will make EoIP tunnel between both sides then yes, you can use bonding specifying the names of EoIP interfaces as 'slaves' values.

Edgars
by edzix
Thu Mar 17, 2005 6:40 pm
Forum: General
Topic: Mikrotik Hotspot Manager [beta]
Replies: 44
Views: 26610

Is there an estimate on how much the service will cost ?
some 50$ a month but not concretized yet.

Edgars
by edzix
Thu Mar 17, 2005 11:59 am
Forum: General
Topic: Mikrotik Hotspot Manager [beta]
Replies: 44
Views: 26610

niall, 1. Will this come with routeros or will there be subscription service. at the moment it is subscribtion based system. 2. Can data be passed into the manager via http requests / ssl / email / etc ... as to allows paypal or on the fly user addition to the service. currently no. 3. Where does th...
by edzix
Tue Mar 15, 2005 4:46 pm
Forum: General
Topic: PPPoE
Replies: 2
Views: 1240

by edzix
Tue Mar 15, 2005 11:25 am
Forum: General
Topic: Bridging Problem
Replies: 3
Views: 1304

actually all IPs previously belonging to bridge interfaces would be as bridge IPs (you can assure yourself by taking a look at actual-interface under '/ip address print detail'). After the interfaces are put into the bridge there is some time needed (~30sec) for it to "learn" the network. ...
by edzix
Tue Mar 15, 2005 11:16 am
Forum: General
Topic: New to Nat [SOLVED]
Replies: 1
Views: 995

dst-address will be the new IP given to your router by ISP, to-dst-address will be equeal to 10.100.0.11.

Edgars
by edzix
Tue Mar 15, 2005 11:12 am
Forum: Scripting
Topic: bandwidth tests script
Replies: 2
Views: 2303

Here you go: /system script add name=bandtest source={ :global i /tool bandwidth-test 1.1.1.1 \ direction=transmit duration=4s protocol=tcp do={ :set i $tx-current } :set i ($i/1048576) :if ($i<2) do={/queue tree....} } /system scheduler add name=check on-event=bandtest interval=30min disabled=no
by edzix
Fri Mar 11, 2005 3:13 pm
Forum: Scripting
Topic: What is the correct syntax?
Replies: 2
Views: 1970

/ip firewall mangle print bytes from=0

Edgars
by edzix
Fri Mar 11, 2005 12:31 pm
Forum: General
Topic: Mikrotik Hotspot Manager [beta]
Replies: 44
Views: 26610

while we are working on the backup server, the sytem will still be in beta stage.

Edgars
by edzix
Thu Mar 10, 2005 4:38 pm
Forum: General
Topic: Log errors ?
Replies: 5
Views: 1845

try to insert '\' characher after 'subject="192.168.3.2 is down" '

Edgars
by edzix
Thu Mar 10, 2005 11:41 am
Forum: General
Topic: No login screen, free access
Replies: 5
Views: 1663

these actually are setting in the router.
http://www.mikrotik.com/docs/ros/2.8/ip ... ent#7.41.9

Edgars
by edzix
Thu Mar 10, 2005 11:39 am
Forum: General
Topic: mac authentication
Replies: 1
Views: 917

refer to the following link:
http://www.mikrotik.com/docs/ros/2.8/in ... ent#4.13.6

Edgars
by edzix
Wed Mar 09, 2005 4:33 pm
Forum: General
Topic: p2p and connection limits
Replies: 3
Views: 1488

if you want to mark each IP with separete flow then mark connections first and remark them with mark-flow. If you want to mark all masqueraded LAN you can use in-interface parameter and use mark-flow at one go.

Edgars
by edzix
Mon Mar 07, 2005 12:03 pm
Forum: Scripting
Topic: reboot automatic 2.7.14 [SOLVED]
Replies: 2
Views: 2931

upgrade to the v2.8.x to get the script to work:)
Search for the 2.7 system scheduler doc to find out how that on-event parameter was named before.

Edgars
by edzix
Mon Mar 07, 2005 11:57 am
Forum: General
Topic: how to configure hotspot manager
Replies: 6
Views: 2457

here's documentation (an example's included):
http://www.mikrotik.com/hotspot.html

Edgars
by edzix
Fri Mar 04, 2005 10:48 am
Forum: General
Topic: Hospot Radius Login
Replies: 2
Views: 1294

Add the following in your radreply table:
 id   | username |  attribute      | op | value   
 3    | edgars   | Session-Timeout | =  |  60 
Edgars
by edzix
Wed Mar 02, 2005 2:49 pm
Forum: General
Topic: Whats up with the Hotspot Radius
Replies: 6
Views: 1945

Nobbe,

please send to support@mikrotik.com a list of some usernames which can't connect, also supoutput.rif file from the NAS should be attached.

Edgars
by edzix
Mon Feb 28, 2005 7:23 pm
Forum: General
Topic: Radius Redundancy
Replies: 1
Views: 1230

yes, if there will be no response from the first one, the authentication data will be sent to the 2nd, 3rd etc.

Edgars
by edzix
Fri Feb 25, 2005 2:58 pm
Forum: General
Topic: Help!! Change MAC address?? [SOLVED]
Replies: 3
Views: 1881

will be possible in RouterOS v2.9.

Edgars
by edzix
Fri Feb 25, 2005 12:49 pm
Forum: General
Topic: Blocking icmp ping
Replies: 4
Views: 3301

add those address ranges to the rule msolis provided with.
src-address=10.5.50.0/24 dst-address=192.168.0.0/24

Edgars
by edzix
Fri Feb 25, 2005 12:47 pm
Forum: General
Topic: RADIUS Interim-Update and External RADIUS Servers.
Replies: 1
Views: 3206

it will do that:
/ppp aaa set interim-update=1m

So, the accounting packets will be sent each minute and the whole accounting information will be sent at the end of the session too.

Edgars
by edzix
Fri Feb 25, 2005 12:42 pm
Forum: Scripting
Topic: pppoe and internet sharing
Replies: 4
Views: 2711

this is called PCQ queuing. Mark download and upload with different flows, add two new queue types, add two queue tree rules: one with flow=download, parent=global-in, queue=<the one you created under '/queue type' with pcq-classifier=dst-address> and another one with flow=upload, parent=global-out,...
by edzix
Thu Feb 24, 2005 1:02 pm
Forum: Scripting
Topic: pppoe and internet sharing
Replies: 4
Views: 2711

so, where is the problem to limit the speed for each client?Please see the link below:
http://www.mikrotik.com/docs/ros/2.8/gu ... ent#13.4.7

Edgars
by edzix
Tue Feb 22, 2005 7:55 pm
Forum: General
Topic: queues impact on CPU
Replies: 1
Views: 1029

by edzix
Tue Feb 22, 2005 7:52 pm
Forum: General
Topic: are usb pendrives supported
Replies: 1
Views: 944

no.

Edgars
by edzix
Tue Feb 22, 2005 7:48 pm
Forum: General
Topic: Production Release for HotSpot Manager
Replies: 16
Views: 4763

by edzix
Mon Feb 21, 2005 2:32 pm
Forum: General
Topic: copy configuration
Replies: 7
Views: 2440

use /export and /import commands:
http://www.mikrotik.com/docs/ros/2.8/sy ... t.frameset

Edgars
by edzix
Mon Feb 21, 2005 1:10 pm
Forum: General
Topic: MAC Authentication (Radius)
Replies: 2
Views: 1355

wireless MAC authentication via RADIUS stands as wireless access list replacement tool. So the RADIUS can accept or decline specific user. The following attributes could be sent back to MT: # Wireless-Forward - not forward the client's frames back to the wireless infrastructure if this attribute is ...
by edzix
Thu Feb 10, 2005 5:46 pm
Forum: Scripting
Topic: creating e-mail every 1st of month with amount of each user
Replies: 17
Views: 6258

1.there is an idea to implement also MB based cost table;
2.you can see it in the reports if are choosing to show the report for some specific day.

Edgars
by edzix
Wed Feb 09, 2005 3:17 pm
Forum: Scripting
Topic: Firewall Scripting Question
Replies: 3
Views: 3088

semms to be correct. What error messages are you receiving?

Edgars
by edzix
Mon Feb 07, 2005 1:07 pm
Forum: Scripting
Topic: New router, transfer queue info
Replies: 3
Views: 2504

by edzix
Fri Feb 04, 2005 5:22 pm
Forum: Scripting
Topic: New router, transfer queue info
Replies: 3
Views: 2504

/import file_name.src

Edgars
by edzix
Mon Jan 31, 2005 10:49 am
Forum: General
Topic: Radius Reply
Replies: 3
Views: 1469

what version are you using?I mean RouterOS..In the older versions there was a bug related to Group attribute. Please, make an upgrade to the newest version!

Edgars
by edzix
Mon Jan 31, 2005 10:40 am
Forum: General
Topic: Radius Reply
Replies: 3
Views: 1469

if the RADIUS server accepts the login request then try to increase the 'timeout' valur under '/radius' menu.

Edgars
by edzix
Fri Jan 28, 2005 11:00 am
Forum: General
Topic: EoIP over unsecure tunnel - how?
Replies: 5
Views: 2358

You can bridge your wlan interfaces with ethernet interfaces on the same unit just fine.
Note! ...wlan if it's in AP or bridge mode

Edgars
by edzix
Thu Jan 27, 2005 5:33 pm
Forum: Scripting
Topic: How to create a script from a txt file on MT Router
Replies: 2
Views: 2505

you can make that with a *.rsc extension file where the script should be written. The system scheduler wil just run a script which will perform 'import file_name.rsc' command and that's it. You can also run another script (after some seconds) which will delete this newely created script.

Edgars
by edzix
Thu Jan 27, 2005 1:53 pm
Forum: Scripting
Topic: MAC-PING
Replies: 7
Views: 16274

yes, it will work like an IP pinging. For example, we will write in logs "Down" when MAC=00:00:B4:C6:7D:C6 is down:
if ([/ping 00:00:B4:C6:7D:C6 count=5]=0) do={:log message= down}
Edgars
by edzix
Thu Jan 27, 2005 1:44 pm
Forum: Scripting
Topic: Execute two scripts
Replies: 1
Views: 1911

execute the second script from the first one, like:
/system script add name=run2nd source={/system script run script1}
Edgars
by edzix
Thu Jan 27, 2005 1:42 pm
Forum: Scripting
Topic: reboot script
Replies: 4
Views: 3907

try this:
/system scheduler add name=reboot interval=24h start-time=11:59:00 on-event={/system reboot} disabled=no
Edgars
by edzix
Wed Jan 26, 2005 6:10 pm
Forum: Scripting
Topic: creating e-mail every 1st of month with amount of each user
Replies: 17
Views: 6258

ok, added!
It's placed right there when you will click Print Logs button. In the next window check advanced logs check-box and you will see selected users' logs during specified time period.

Edgars
by edzix
Wed Jan 26, 2005 4:45 pm
Forum: Scripting
Topic: Scripting w/ frequency monitor?
Replies: 25
Views: 7316

yeah, seems that i was not present when this feature was given out :)
[admin@pptp_client] interface wireless> frequency-monitor wlan1

<number> -- item number
freeze-frame-interval --

[admin@pptp_client] interface wireless> frequency-monitor wlan1
the newest beta.

Edgars
by edzix
Wed Jan 26, 2005 4:29 pm
Forum: Scripting
Topic: creating e-mail every 1st of month with amount of each user
Replies: 17
Views: 6258

we will add a new field where you will be able to choose time period when exporting logs to the PDF.

Edgars
by edzix
Wed Jan 26, 2005 3:46 pm
Forum: Scripting
Topic: creating e-mail every 1st of month with amount of each user
Replies: 17
Views: 6258

bluenobbe,

you are wrong! HS Manager supports such a feature. Select necessary users, click on the Sessions button. Then press Print Logs, make sure that Download and Upload are checked and you will be able to the to total count of TX and RX traffic at the bottom of the table.

Edgars
by edzix
Wed Jan 26, 2005 3:14 pm
Forum: Scripting
Topic: Scripting w/ frequency monitor?
Replies: 25
Views: 7316

there is no such a parameter 'do' for this command!

Edgars
by edzix
Wed Jan 26, 2005 1:24 pm
Forum: Scripting
Topic: creating e-mail every 1st of month with amount of each user
Replies: 17
Views: 6258

i woul suggest you to use some accounting software to accomplish this. You are welcome to take a look at our application called HotSpot Manager:
http://www.mikrotik.com/download.html#hotspot

Edgars
by edzix
Wed Jan 26, 2005 1:22 pm
Forum: Scripting
Topic: Scripting w/ frequency monitor?
Replies: 25
Views: 7316

currently it's impossible to store frequency-monitor output in a file, so this will not be possible to be done.

Edgars
by edzix
Tue Jan 25, 2005 7:07 pm
Forum: General
Topic: Peer to Peer Traffic Control
Replies: 2
Views: 1280

each of the users will get the speed specified in those two queue tree rules.

Edgars
by edzix
Mon Jan 24, 2005 11:27 am
Forum: General
Topic: Winbox adding users locally instead of into radius ?
Replies: 20
Views: 5716

seems to be Exec-Program-Wait issue. If you're using one check whether the script you are running during authorization process is returning valid values.

Edgars
by edzix
Mon Jan 24, 2005 11:21 am
Forum: General
Topic: Port priority
Replies: 2
Views: 1280

you can mark packets coming to/from the port 6699. And mark everything other with different mark-floe. Then use these flow under '/queue tree' to give priorities - 1 is the highest, 8 - the lowest.

Edgars
by edzix
Fri Jan 21, 2005 9:20 am
Forum: General
Topic: Queue Statistics
Replies: 2
Views: 1360

those limitation values are in form in/out id est we are looking from the side of the router. It means if you set 66kbps as 'in', IMHO it would be the upload traffic fot the client.

Edgars
by edzix
Fri Jan 21, 2005 9:13 am
Forum: General
Topic: can't seem to figure this out...
Replies: 2
Views: 1291

I think one of following ways should meet your needs: 1. You can remove IPs on the wireless interfaces and bridge them with your NICs (or bridge WDS with your NICs). Then you can assign IP's to the bridge instead. there is actual-interface parameter under '/ip address' menu. So, there is no need ac...
by edzix
Thu Jan 20, 2005 2:49 pm
Forum: General
Topic: Price and sale
Replies: 15
Views: 5708

HotSpot Manager will be subscribtion based application. It will be located on our server. The monthly cost is not know yet, but it will be very low in comparision with similar products.

Edgars
by edzix
Thu Jan 20, 2005 2:47 pm
Forum: General
Topic: Hotspot Manager Comments
Replies: 26
Views: 9528

Bill,

this option is already available if you are using AddBatch and the table with usernames and passwords appears when clicking on ViewBatch button.
Have you tried to get login parameters from the *.xls file? Th bug you reported is already fixed, so, maybe try again.

Edgars
by edzix
Thu Jan 20, 2005 10:18 am
Forum: General
Topic: Hotspot Manager Comments
Replies: 26
Views: 9528

PrintUsers button is placed under Users tab. Select users you want to export to PDF and click the button. It's available also when you are adding a batch of users (AddBatch-->ViewBatch-->PrintUsers).

That error will be fixed. Thank's for the report!

Edgars
by edzix
Thu Jan 20, 2005 9:38 am
Forum: General
Topic: Hotspot Manager Comments
Replies: 26
Views: 9528

have you tried PrintTicket feature. It exports user's lofin parameters and the cost of the service to the PDF file. You can also use BackupData button to send all your configuration to your e-mail. It will be stored in the *.xls file, so you will be able to copy only Username and Password if it is a...
by edzix
Wed Jan 19, 2005 3:21 pm
Forum: General
Topic: Hotspot Manager Comments
Replies: 26
Views: 9528

spaces and underscores are allowed now.

Edgars
by edzix
Wed Jan 19, 2005 2:12 pm
Forum: General
Topic: Hotspot Manager Comments
Replies: 26
Views: 9528

since yesterday only letters and digits are allowed to enter inthe Profile name field. It's for security reasons.

Edgars
by edzix
Wed Jan 19, 2005 1:04 pm
Forum: Scripting
Topic: n00b
Replies: 3
Views: 2773

try

/tool e-mail send to=mt.wsmd-core@cenergynetworks.com subject=("IP Update:wsmd-core:National Gateway: " . $b)

Edgars
by edzix
Tue Jan 18, 2005 4:22 pm
Forum: General
Topic: Division of the local and international traffic
Replies: 6
Views: 2151

by edzix
Tue Jan 18, 2005 1:01 pm
Forum: Scripting
Topic: Help me for scripting mikrotik
Replies: 5
Views: 6205

upgrade to the newest RouterOS version!

Edgars
by edzix
Thu Jan 13, 2005 4:34 pm
Forum: General
Topic: Initial page after correct validation
Replies: 2
Views: 1359

you cannot do it from the RADIUS server but you can try to look in status.html file, which will do some redirect when the user logs in.

Edgars
by edzix
Thu Jan 13, 2005 11:24 am
Forum: General
Topic: Possible Bug!
Replies: 1
Views: 1057

please, make a support output file after this happens and send to support@mikrotik.com.

Edgars
by edzix
Thu Jan 13, 2005 10:53 am
Forum: General
Topic: How to: limit traffic in hotspot
Replies: 1
Views: 1125

use '/ip hotspot profile' parameters tx-bit-rate and rx-bit-rate.

Edgars
by edzix
Mon Jan 10, 2005 5:21 pm
Forum: General
Topic: Hotspot DHCP says I for invalid.. wont change.
Replies: 1
Views: 1335

if you've put the interface into the bridge then you should manually change DHCP server settings according the previous changes i.e. set interface=bridge_interf_where_ether_is_put

Edgars
by edzix
Wed Jan 05, 2005 11:14 pm
Forum: Scripting
Topic: Help me for scripting mikrotik
Replies: 5
Views: 6205

please, see the second example (just change the actions you want to perform i.e. enable/disable IP):
http://www.mikrotik.com/docs/ros/2.8/sy ... #2.70.14.5

Edgars
by edzix
Wed Dec 29, 2004 4:34 pm
Forum: General
Topic: Multiple Hotspot Login Pages
Replies: 3
Views: 1731

in v2.9 this will be available.

Edgars
by edzix
Mon Dec 27, 2004 12:56 pm
Forum: General
Topic: rename remote mac authorisation attribute
Replies: 7
Views: 2710

seems to be FreeRadius configuration mistake. Maybe try to post the problem in theirs list!

Edgars
by edzix
Fri Dec 24, 2004 12:01 pm
Forum: General
Topic: rename remote mac authorisation attribute
Replies: 7
Views: 2710

sorry, but i really didn't get what do you want to achieve. So you will put those MACs in another DB table. What are the users connecting to your host? HotSpot? If yes, then you can set auth-mac parameter to yes under hotspot menu and then the mac addresses of the users will be sent as a UserName fi...
by edzix
Fri Dec 24, 2004 11:53 am
Forum: General
Topic: Radius (IAS) to limit users access
Replies: 3
Views: 1821

i'm storing all the data in the data base. On each authentication request i'm executing one attribute which counts from this DB how much MB(GB)are left for the user who is authenticating.

Edgars
by edzix
Thu Dec 23, 2004 3:59 pm
Forum: General
Topic: How To get Radius "Rate-Limit" working on Microsof
Replies: 8
Views: 2572

this will be available in v2.9 under '/ppp profile' as rate-limit parameter. Here are some rate-limit examples: * 128k - rx-rate=128000, tx-rate=128000 (no bursts) * 64k/128M - rx-rate=64000, tx-rate=128000000 * 64k 256k - rx/tx-rate=64000, rx/tx-burst-rate=256000, rx/tx-burst-threshold=64000, rx/tx...
by edzix
Thu Dec 23, 2004 12:45 pm
Forum: General
Topic: Mail server in ver 2.9
Replies: 11
Views: 4159

ftp server is already available:)

Edgars
by edzix
Thu Dec 23, 2004 12:43 pm
Forum: General
Topic: How To get Radius "Rate-Limit" working on Microsof
Replies: 8
Views: 2572

Rate-Limit - Datarate limitation for clients (PPPs only). Format is: rx-rate[/tx-rate] [rx-burst-rate[/tx-burst-rate] [rx-burst-threshold[/tx-burst-threshold] [rx-burst-time[/tx-burst-time]]]]. All rates should be numbers with optional 'k' (1,000s) or 'M' (1,000,000s). If tx-rate is not specified, r...
by edzix
Thu Dec 23, 2004 11:09 am
Forum: General
Topic: rename remote mac authorisation attribute
Replies: 7
Views: 2710

you cannot change the names of attributes,this is coded in.

Edgars
by edzix
Wed Dec 22, 2004 7:57 pm
Forum: Scripting
Topic: ===ERROR: invalid item number===
Replies: 8
Views: 4221

yes, there should be a static gateway before you run this script.

Edgars
by edzix
Wed Dec 22, 2004 7:55 pm
Forum: General
Topic: New trafr
Replies: 8
Views: 4847

[ASM],

the docs are not ready yet, but we are working on this.

Edgars
by edzix
Wed Dec 22, 2004 7:50 pm
Forum: General
Topic: How To get Radius "Rate-Limit" working on Microsof
Replies: 8
Views: 2572

while ago i was playing with this attribute, and worked fine for me. But it was on Freeradius server. In which form are you entering it on the RADIUS server? Hav you added it to dictionary file?

Edgars
by edzix
Wed Dec 22, 2004 7:36 pm
Forum: General
Topic: Radius (IAS) to limit users access
Replies: 3
Views: 1821

you have to write you own script which on each authorization request will count how much traffic they could still download. If it's reached reject the user. I don't know how to do this on Miscrosoft IAS. But on Freeradius this can be done.

Edgars
by edzix
Wed Dec 22, 2004 7:32 pm
Forum: Scripting
Topic: global-in & global-out
Replies: 4
Views: 4040

yes.

Edgars
by edzix
Tue Dec 21, 2004 2:58 pm
Forum: General
Topic: Limit
Replies: 11
Views: 3305

by edzix
Tue Dec 21, 2004 2:56 pm
Forum: General
Topic: Mikrotik and Microsoft ISA Server
Replies: 1
Views: 1207

you probably meant Microsoft IAS?

yes, you can do that. Some of forum users are successully using it as a RADIUS server. See:
http://www.mikrotik.com/forum/viewtopic ... =microsoft
http://www.mikrotik.com/forum/viewtopic ... 66%2520%5d

Edgars
by edzix
Mon Dec 20, 2004 5:47 pm
Forum: General
Topic: wireless interface bonding
Replies: 19
Views: 7210

depends on which mode you will set for bonding interface. Mode which supports failover will guarantee you that if one line goes down, all the traffic will be passed through the second one.

Edgars
by edzix
Mon Dec 20, 2004 5:42 pm
Forum: General
Topic: PPTP Server Without Proxy-ARP
Replies: 3
Views: 3052

proxy-arp is used in situations when there are more IPs from the same subnet on one interface, so - if you are using for your VPN connection the same IPs as the real interface has then enable this arp mode.

Edgars
by edzix
Mon Dec 20, 2004 5:38 pm
Forum: General
Topic: How to: Allow Computer Unrestricted Access In Hospot Setup
Replies: 8
Views: 3954

under '/ip firewall mangle' add such a rule: /ip firewall mangle add src-mac-address=<MAC here> disabled=no and move it above the HotSpot service rule with 'move' command. You can use also cookies to accomplish this. See: http://www.mikrotik.com/docs/ros/2.8/ip/hotspot.content#7.41.9 Edgars[/code]
by edzix
Fri Dec 17, 2004 4:14 pm
Forum: General
Topic: PPTP Server help
Replies: 9
Views: 2830

please, make a support output file (right after you are were trying to connect some pptp man) and send it to support@mikrotik.com

Edgars
by edzix
Fri Dec 17, 2004 11:40 am
Forum: General
Topic: PPTP Server help
Replies: 9
Views: 2830

make sure that IP of the RADIUS server is 205.162.25.85 and the secrets should also be equal.

Edgars
by edzix
Thu Dec 16, 2004 6:25 pm
Forum: General
Topic: PPTP Server help
Replies: 9
Views: 2830

and '/ppp profile print'? Maybe take a look in the RADIUS server's logs. Try to run it also in debugging mode and see what kind of information is sent to the RADIUS server in the moment of authentication.

Edgars
by edzix
Thu Dec 16, 2004 6:22 pm
Forum: Scripting
Topic: P2P script
Replies: 16
Views: 8476

so where is a problem? add two scheduler tasks - one will call a script which will disable the rule, the second one will enable that rule. Each task will have separet start-time values, but with interval=24h

Edgars
by edzix
Thu Dec 16, 2004 5:50 pm
Forum: General
Topic: PPTP Server help
Replies: 9
Views: 2830

they are all in one (ppp-kind). The same like you are using '/ppp' menu in the router. Use the same RADIUS server as for pppoe. If the same problem appears, post the following printouts - '/inter pptp-ser serv pr','/ppp aaa pr', '/ppp prof pr','/radius pr'.

Edgars
by edzix
Thu Dec 16, 2004 10:44 am
Forum: General
Topic: PPTP Server help
Replies: 9
Views: 2830

the same way as pppoe. As 'service' value you should specify ppp.

Edgars
by edzix
Thu Dec 16, 2004 10:41 am
Forum: General
Topic: Controlling Radius IPs
Replies: 2
Views: 1308

but which address you are using while talking to other world from your router? Maybe try this route:

/ip route add prefered-source=x.x.x.x

where x.x.x.x is an IP you will use to make outside connections.

Edgars
by edzix
Wed Dec 15, 2004 5:42 pm
Forum: General
Topic: VoIP
Replies: 4
Views: 2234

try to enable upnp feature on the RouterOS.

Edgars
by edzix
Wed Dec 15, 2004 4:27 pm
Forum: Scripting
Topic: Autoexec
Replies: 5
Views: 4207

sure, try the following: /system script add name=bootup source={ :local upt; :set upt [/system resource get uptime] :local runc; :set runc [/system scheduler get run run-count] :if (($upt<61s)&&($runc<=1)) do={ /tool send to=name@domain.com subject="Router has rebooted!" } } /syste...
by edzix
Wed Dec 15, 2004 3:14 pm
Forum: General
Topic: Internal & external
Replies: 1
Views: 936

maybe you can start with this:
http://www.mikrotik.com/docs/ros/2.8/gu ... c.frameset

Edgars
by edzix
Wed Dec 15, 2004 3:08 pm
Forum: General
Topic: RADIUS MAC AUTHENTICATION
Replies: 2
Views: 2184

if you are using HotSpot, then you can set auth-mac=yes (under '/ip hotspot'). Then the authentication scenarion will be done in this sequence: 1. When the user is trying to authenticate, he becomes temporary IP address and Mikrotik sends RADIUS authentication request with MAC address of unauthentic...
by edzix
Tue Dec 14, 2004 1:36 pm
Forum: General
Topic: traffic accounting
Replies: 6
Views: 3593

actually, this is not in the competense of the HS Manager. It's because of the fact that RADIUS request is being made only after the user fills the login information and press accepting button.
This could manually done, like wildbill442 described.

Edgars
by edzix
Mon Dec 13, 2004 2:29 pm
Forum: General
Topic: traffic accounting
Replies: 6
Views: 3593

actually, with MikroTik HotSpot Manager you can set this easy up (RADIUS based product):
http://www.mikrotik.com/download.html#hotspot

Edgars
by edzix
Mon Dec 13, 2004 1:35 pm
Forum: General
Topic: feature request: dns-names instead of ip-addresses
Replies: 28
Views: 10808

Mag, how did you try it with Tab button? Maybe DND settings are incorrect in your router. Try, for example: /ip address add address=www.example.com<press Tab now> the line will be substituded with: /ip address add address=1.1.1.1/ where 1.1.1.1 is IP of http://www.example.com in this example. Edgars
by edzix
Fri Dec 10, 2004 2:04 pm
Forum: General
Topic: Hotspot Manager Comments
Replies: 26
Views: 9528

it's english 5.0.5 version. Just tested also on 4.0 version. No problems.

Have you any other problems or uncertanties with HS Manager?

Edgars
by edzix
Thu Dec 09, 2004 10:57 am
Forum: General
Topic: VoIP
Replies: 3
Views: 1621

by edzix
Tue Dec 07, 2004 7:13 pm
Forum: General
Topic: VoIP QoS
Replies: 1
Views: 1281

mangle VoiP traffic with one flow, everything other - with another. And set priority to 1 for 1st ones under queue menu.
You can change also TOS value for these packets using set-tos parameter. It could be max-reliability in this case.

Edgars
by edzix
Mon Dec 06, 2004 2:45 pm
Forum: General
Topic: load balancing
Replies: 6
Views: 3876

/ip route add gateway=1.1.1.1,2.2.2.1

Edgars
by edzix
Mon Dec 06, 2004 2:39 pm
Forum: General
Topic: Hotspot Manager Comments
Replies: 26
Views: 9528

can you describe step-by-step what are you doing? Works here by us on random browsers and PCs:)

Edgars
by edzix
Fri Dec 03, 2004 4:29 pm
Forum: General
Topic: Radius with 2/more servers defined...
Replies: 12
Views: 3779

from MikroTik side - no, but from RADIUS server side probably possible (at least in Freeradius there is such a feature).

Edgars
by edzix
Fri Dec 03, 2004 3:25 pm
Forum: Scripting
Topic: Adding hotspot users with a script. Automating a hotel hots
Replies: 21
Views: 9915

sorry, i have no rights to do that!

I can tell you that you have to use DB for this. When the user is trying to authenticate, call that script eith radius attribute. And there do the necessary collations with current time.

Edgars
by edzix
Fri Dec 03, 2004 3:21 pm
Forum: General
Topic: Radius with 2/more servers defined...
Replies: 12
Views: 3779

exactly!

Edgars
by edzix
Fri Dec 03, 2004 2:21 pm
Forum: Scripting
Topic: Adding hotspot users with a script. Automating a hotel hots
Replies: 21
Views: 9915

Sarky, you can wite some script to make this work a bit different. Have you tried Mikrotik HotSpot Manager. We have, for example, timeout that starts decreasing stage only after the first login and sets immediately a deadline for the user. And it doesn't matter wheter the user is online or not after...
by edzix
Fri Dec 03, 2004 2:15 pm
Forum: General
Topic: Radius with 2/more servers defined...
Replies: 12
Views: 3779

radius clients have priorities in order they are listed. And if one of them accepts the user, no authentication will be done to another RADIUS server. Only if the first RADIUS server is down, the 2nd one will be asked to help.

Edgars
by edzix
Thu Dec 02, 2004 1:06 pm
Forum: General
Topic: Hotspot Manager Comments
Replies: 26
Views: 9528

Re: Hotspot Manager Comments

But from what I could see its not a rolling date. ie if I set it as 3/12/2005, it wont automatically be 4/12/2005 tommorow. wait. If you set 3/12/2005 it means that this username will be disabled at the 3rd of December 23:59:59 o'clock if the user is online, otherwise his username will be locked in...
by edzix
Thu Dec 02, 2004 11:35 am
Forum: General
Topic: Hotspot Manager Comments
Replies: 26
Views: 9528

Re: Hotspot Manager Comments

Yes I could set that parameter, but I'm looking to make it easy for the dumb guy/girl who is creating users. So within the profile having an expiry date for the account, so any accounts created using that profile will autmatically get disabled after x months. From my point of view, I need a system ...
by edzix
Thu Dec 02, 2004 11:12 am
Forum: General
Topic: RADIUS accounting request not sent: no response
Replies: 1
Views: 1950

this error may appear if the accounting server (RADIUS server) is no responding within 10 seconds.

Edgars
by edzix
Thu Dec 02, 2004 10:59 am
Forum: General
Topic: Radius Problems
Replies: 7
Views: 2910

Are you using default Freeradius dictionary files?

Edgars
by edzix
Wed Dec 01, 2004 7:00 pm
Forum: General
Topic: feature request: dns-names instead of ip-addresses
Replies: 28
Views: 10808

have you tried to enter a DNS name and, before accepting this, press Tab button? Maybe this is what you're looking and waiting for.

Edgars
by edzix
Wed Dec 01, 2004 4:59 pm
Forum: General
Topic: Hotspot Manager Comments
Replies: 26
Views: 9528

Re: Hotspot Manager Comments

What do the different Permissions give to a user? ok found that one, looks like I could do with an option to allow admins to just add users... - Read-Only -- possibility to see all the account information, import logs, reports to PDF, but without permissions to add, change or remove somthing on the...
by edzix
Tue Nov 30, 2004 5:14 pm
Forum: General
Topic: linux equivalent for winbox?
Replies: 1
Views: 2361

you can run WinBox from Wine under Linux system.

Edgars
by edzix
Tue Nov 30, 2004 2:45 pm
Forum: General
Topic: hotspot user profiles
Replies: 3
Views: 1258

ok, what is the printout of '/ip hotspot profile' and '/ip hotspot user'?

Edgars
by edzix
Tue Nov 30, 2004 2:37 pm
Forum: Scripting
Topic: adding multiple queues with a script
Replies: 12
Views: 10997

so, explain a bit further - what kind of script did you try? Where and what do you want to add?

Edgars
by edzix
Mon Nov 29, 2004 7:57 pm
Forum: Scripting
Topic: 'Smart' FailOver
Replies: 14
Views: 6112

i meant fail over example. There is shown how to accomplish the task you have doubts about.

Edgars
by edzix
Mon Nov 29, 2004 5:28 pm
Forum: General
Topic: PPPoE Rate-Limit
Replies: 3
Views: 1805

have you tried with MikroTik reference dictionary? You can download it here: http://www.mikrotik.com/Documentation/manual_2.8/dictionary Then specify it in your RADIUS server's config file. See whether dynamic queues are created when the client is connected. In v 2.9beta under log menu it's possible...
by edzix
Mon Nov 29, 2004 5:23 pm
Forum: General
Topic: hotspot user profiles
Replies: 3
Views: 1258

have you specified that newly created profile's name for the user under '/ip hotspot user'?

Edgars
by edzix
Mon Nov 29, 2004 5:20 pm
Forum: Scripting
Topic: 'Smart' FailOver
Replies: 14
Views: 6112

by edzix
Mon Nov 29, 2004 5:19 pm
Forum: General
Topic: Mikrotik Hotspot manager
Replies: 7
Views: 3791

Jarosoup, can you please describe further what exactly you want to see in this manager? What kind of billing?

Edgars
by edzix
Thu Nov 25, 2004 12:42 pm
Forum: General
Topic: how to disconnect user
Replies: 7
Views: 10449

no, for HotSpot user disconnectinf there isn't such a feature implemented yet. You can use some scripting language and write a script which will connect to the router via SSH and perform some action there (for example, remove some user).

Edgars
by edzix
Thu Nov 25, 2004 11:30 am
Forum: General
Topic: how to disconnect user
Replies: 7
Views: 10449

starting from 2.9 beta5 there is a new submenu available under '/radius' section, called 'incoming'. If it's enabled you can disconnect PPP-kind connection from RADIUS server using 'radclient'. You can find more about how to do it in 'man radclient'.

Edgars
by edzix
Tue Nov 23, 2004 2:38 pm
Forum: General
Topic: MikroTik RADIUS Attribute 9
Replies: 3
Views: 1700

add the following line in your dictionary file:

ATTRIBUTE Framed-IP-Netmask 9 ipaddr

Edgars
by edzix
Tue Nov 23, 2004 2:36 pm
Forum: General
Topic: Selecting records
Replies: 6
Views: 2640

no, it's not possible. Maybe in v2.9, but it will be very complex script.

Edgars
by edzix
Mon Nov 22, 2004 5:28 pm
Forum: General
Topic: New trafr
Replies: 8
Views: 4847

yes, they should be completely compatible.

Edgars
by edzix
Mon Nov 22, 2004 2:12 pm
Forum: General
Topic: Selecting records
Replies: 6
Views: 2640

maybe you can write what exactly is the aim you want to reach? What would you like to do with those queues which are found?

Edgars
by edzix
Mon Nov 22, 2004 2:04 pm
Forum: General
Topic: newbie firewalling [SOLVED]
Replies: 3
Views: 2003

maybe the following will help:
http://www.mikrotik.com/docs/ros/2.8/ho ... ent#12.2.1

Edgars
by edzix
Mon Nov 22, 2004 11:57 am
Forum: General
Topic: Netwatch Feature Request
Replies: 5
Views: 2529

you can use netwatch to ping some host three times and then after all fails, run some down-script which will do the rest count you want and after also those fails perform some action. The script could look as follows: /system script add name=pinging source={ :if ([/ping 1.1.1.1 count=7] = 0) do={ /t...
by edzix
Mon Nov 22, 2004 11:53 am
Forum: General
Topic: New trafr
Replies: 8
Views: 4847

in v2.9 (already available in beta 8) we will have something similar to Ciscos' NetFlow called TrafficFlow.

Edgars
by edzix
Mon Nov 22, 2004 11:43 am
Forum: General
Topic: Selecting records
Replies: 6
Views: 2640

use :for to accomplish this, but in this case those 20 IP should be with the same step. For example, if you have IPs from 192.168.15.10 to 192.168.15.20 then:

/queue simple {:for i from 10 to 20 do=[:put [find target-address=("192.168.15." . $i)]}

Edgars
by edzix
Mon Nov 22, 2004 11:39 am
Forum: General
Topic: Dual radio link automatic failover
Replies: 1
Views: 1376

Note that you will be able to bond only ethernet and EoIP interfaces not wireless. Use Nstream protocol for wireless interfaces. The script itself will look very simple, you just have to know what youa are willing to change when the first link goes down. And from the script just chanage the necessar...
by edzix
Wed Nov 17, 2004 5:42 pm
Forum: General
Topic: Block wireless MAC when using Radius Auth
Replies: 6
Views: 2231

you brought me in confuse - in the subject said that you want use radius to accomplish this, in the post itself that don't. You can do it also using radius server. Under '/int wir sec'menu enable radius-mac-authentication parameter and under '/radius' menu add a radius server specifying that it will...
by edzix
Wed Nov 17, 2004 5:31 pm
Forum: General
Topic: Block wireless MAC when using Radius Auth
Replies: 6
Views: 2231

use '/interface wireless access-list' in case you don't want to use radius server:
http://www.mikrotik.com/docs/ros/2.8/in ... ent#4.13.6

Edgars
by edzix
Wed Nov 17, 2004 12:57 pm
Forum: General
Topic: Separate gateway for some PPPoE users needed
Replies: 1
Views: 1190

from the AAA manual pages:
routes (text) - routes that appear on the server when the client is connected. The route format is: dst-address gateway metric (for example, 10.1.0.0/ 24 10.0.0.1 1). Several routes may be specified separated with commas
Edgars
by edzix
Tue Nov 16, 2004 5:25 pm
Forum: General
Topic: How do I tell if my wireless Interface has been disabled?
Replies: 2
Views: 1310

there is a bug and we will try to fix it.

Edgars
by edzix
Mon Nov 15, 2004 3:30 pm
Forum: General
Topic: load balancing
Replies: 6
Views: 3876

maybe try this:
http://www.mikrotik.com/docs/ros/2.8/ap ... t#11.2.4.3

in 2.9 beta version interface bonding is available with load balancing and link monitoring possibilities.

Edgars
by edzix
Mon Nov 15, 2004 3:27 pm
Forum: General
Topic: Radius 'Reply-Message' attribute support?
Replies: 1
Views: 1716

I think it's already implemented. Search the login.html file for %error%

Edgars
by edzix
Mon Nov 15, 2004 2:57 pm
Forum: General
Topic: how to access to https server without login to hotspot
Replies: 9
Views: 4840

with this rule you are just marking packets going to that host. You should add that IP in walled garden configuration.

Edgars
by edzix
Mon Nov 15, 2004 11:42 am
Forum: General
Topic: PPPoE Termination - administrator request
Replies: 2
Views: 2612

no, Xmit-Limit works for all kind of connections.

Edgars
by edzix
Mon Nov 15, 2004 11:38 am
Forum: General
Topic: how to access to https server without login to hotspot
Replies: 9
Views: 4840

can you post what walled-garden rule did tou try?

Edgars
by edzix
Mon Nov 15, 2004 11:29 am
Forum: General
Topic: P2P Ares blocking?
Replies: 11
Views: 3972

Also, will the drop all p2p line work?
p2p=all-p2p action=drop log=yes

Or do I have to put in a line for p2p=warez explicitly?

Mike
if you want to drop all P2P programms which i mentioned above then use 'all-p2p', if only ARES - then use 'warez' as p2p value.

Edgars
by edzix
Fri Nov 12, 2004 5:42 pm
Forum: General
Topic: P2P Ares blocking?
Replies: 11
Views: 3972

first upgrade to 2.8.18.

as p2p value use 'warez'. As i said, both of these programs use the same protocol and action=drop.

Edgars
by edzix
Fri Nov 12, 2004 5:18 pm
Forum: General
Topic: P2P Ares blocking?
Replies: 11
Views: 3972

you can actually already do that. But you can't limit the bandwidth for this program, just filter it (drop). The same as with Warez.

Edgars
by edzix
Fri Nov 12, 2004 3:21 pm
Forum: General
Topic: How to access the Mikrotik with winbox from internet side?
Replies: 10
Views: 5013

seems ok. What do you see under '/log pr ' when trying access the router?

Edgars
by edzix
Fri Nov 12, 2004 2:23 pm
Forum: General
Topic: How to access the Mikrotik with winbox from internet side?
Replies: 10
Views: 5013

what did logs say about this?
can you put here a printout of firewall input chain?

Edgars
by edzix
Fri Nov 12, 2004 12:43 pm
Forum: General
Topic: How to access the Mikrotik with winbox from internet side?
Replies: 10
Views: 5013

make sure that www has 8081 port under '/ip service' and you can ping that router from the PC.

Edgars
by edzix
Fri Nov 12, 2004 11:33 am
Forum: General
Topic: /ppp profile local-address?
Replies: 1
Views: 1971

quoting the manual: "local-address (IP address | name; default: 0.0.0.0) - either address or pool name of the PPP server" so, it's an IP address used for your PPP connections. It could be blank under profile submenu, but then you will have to set it under secret submenu up. Read more on th...
by edzix
Wed Nov 10, 2004 3:12 pm
Forum: General
Topic: Transparent proxy
Replies: 5
Views: 2401

by edzix
Wed Nov 10, 2004 2:47 pm
Forum: General
Topic: P2P Ares blocking?
Replies: 11
Views: 3972

RouterOS can match one of the following P2P programms' traffic:

-bit-torrent
-direct-connect
-fasttrack
-soulseek
-blubster
-edonkey
-gnutella
-warez

Edgars
by edzix
Tue Nov 09, 2004 1:37 pm
Forum: General
Topic: PPPOE Radius - "No Password"
Replies: 2
Views: 1667

it's because you are using MSCHAP authenitcation. If you would use PAP then you would be able to see the password as it's sent in plaintext to the radius server.

Edgars
by edzix
Mon Nov 08, 2004 4:29 pm
Forum: General
Topic: scheduler can't work properly...
Replies: 2
Views: 1244

what RouterOS version are you using?

Edgars
by edzix
Mon Nov 08, 2004 12:38 pm
Forum: General
Topic: Radius Rate-Limit for hostpot service?
Replies: 3
Views: 1657

will be available in v2.9

Edgars
by edzix
Mon Nov 08, 2004 12:37 pm
Forum: General
Topic: Limit the timeout on a connection?
Replies: 1
Views: 1164

maybe under '/ip firewall connection tracking'

Edgars
by edzix
Mon Nov 08, 2004 12:35 pm
Forum: General
Topic: Need to add Ports
Replies: 6
Views: 1976

they should be enabled by default if you haven't disabled them under firewall section.

Edgars
by edzix
Fri Nov 05, 2004 12:03 pm
Forum: General
Topic: Network Connection Limiting
Replies: 6
Views: 2472

there is connection-limit parameter in the firewall. Use it to accomplish what you have planned.

Edgars
by edzix
Mon Nov 01, 2004 2:42 pm
Forum: General
Topic: Subnet Burstable Bandwidth Howto
Replies: 9
Views: 3560

you're right, you have to use PCQ. Have you seen examples available in the documentation:
http://www.mikrotik.com/docs/ros/2.8/ro ... t#6.54.7.5
http://www.mikrotik.com/docs/ros/2.8/ho ... nt#12.2.13

Edgars
by edzix
Mon Nov 01, 2004 2:38 pm
Forum: General
Topic: marking traffic by users - is it possible?
Replies: 3
Views: 1635

are you masquerading that client? i think you should mark the connection first coming from scpecific IP and going to another IP. After this is done remark these packets with some flow-mark. Now you can use this flow in queues if that was an aim.

Edgars
by edzix
Mon Nov 01, 2004 10:35 am
Forum: General
Topic: Get device status
Replies: 9
Views: 4633

if i look at the latest script2 (previosu post) then i can't see where are you setting some value to 'temp1' variable. What king of errors are appearing when you run the script?

Edgars
by edzix
Fri Oct 29, 2004 5:18 pm
Forum: General
Topic: Get device status
Replies: 9
Views: 4633

here is an example how to monitor the interface status: :global u /interface ethernet monitor ether1 once do={ :set u $status } :if ($u != "link-ok") do={ /tool e-mail send to=someone@somewhere.com subject="Ether1 link down!" } configure also e-mail client settings in this case. ...
by edzix
Fri Oct 29, 2004 11:54 am
Forum: General
Topic: Get device status
Replies: 9
Views: 4633

please describe more specific what do you want to achieve? What interface do you want to be monitored and where do you want to put this status of interface?

Edgars
by edzix
Wed Oct 27, 2004 3:31 pm
Forum: General
Topic: MAC Addresses in RADIUS requests have colons in them
Replies: 8
Views: 2323

in the MT box it couldn't be changed. Why can't you elongate this username to 16 digits (with colons)?

Edgars
  • 1
  • 2