MikroTik

ktw-matt

I've got an interesting idea on one way to use the RB250GS. We might use it as an inexpensive "4-port ethernet card" in an x86 MikroTik. Essentially, we would use VLANs between the RB250GS and a VLAN-capable single-port NIC. Obviously this wouldn't be a bright idea if we were pushing a hea...

ktw-matt

I hate to say it, but I had a similar issue... Disabling this custom NAT rule fixed it for me: action=src-nat chain=srcnat comment="Junk SRCNAT" disabled=yes src-address=x.x.x.x/N to-addresses=127.0.0.1 I won't go into great detail about the above rule, except to say that I use it to preve...

ktw-matt

For what it's worth, I'm having the same issue, but on a RB532 (older model RouterBOARD) running RouterOS 3.30.

I've tried a handful of ways to get it to work, but even still, my PlayStation 3 isn't seeing the router's UPnP.

ktw-matt

Nevermind. I got it working, but not with RouterOS. I read on TheWan (Google: thewan mikrotik ipv6) that as late as RouterOS v3.0rc13 (?), 6in4 tunnels are still not supported. The change log does not seem to indicate any 6in4 updates either. (Is this why the ROS 'sit' interface does not allow you t...

ktw-matt

andrewluck / timoid, Currently I have a Linux virtual server in Dallas providing an IPIP tunnel to my LAN. Also on my Dallas VServer, I have a 6in4 (sit) tunnel to SixXS, which works fine (eg, ping6 www.kame.net). I recently got a /48 subnet routed to my Dallas v6 endpoint, and I'd like to route a s...

ktw-matt

FYI, ThreatFire is one such 'antivirus' that can cause this and missing menu items to occur.

ktw-matt

Hi guys, I was wanting to use a RouterBoard for some basic queueing (probably PCQ or RED) on a 12Mbit pipe, and I was needing to know if an RB532 would be suitable, or if I should go with an RB333? It's all ethernet, one in, one out. Now thinking about scalability, if I hook up more than one interne...

ktw-matt

I thought I'd post here first since it's the weekend.. I'm getting fed up with this; my RB112 still does not power on. I sent it to MikroTik to have them fix it, but they said there was nothing wrong with it. MikroTik originally sent me an 18V DC 1.0A adapter and PoE injector. I've tried other adapt...

ktw-matt

Yeah, it's not the Mikrotik. I tried srcnat'ing the mail server at x.x.20.75 to an available IP from the x.x.96.x subnet and without any other changes, the mail server connects to AOL's MX server. I turn the srcnat off, and it goes back to timing out. Needless to say, I'm talking with AOL again. :ro...

ktw-matt

AOL says they do not have our mail server's IP/subnet blocked. I've checked all my firewalls and I still can't figure this out. First, our network layout: [ISP-GW:x.x.96.33]---[SWITCH "A"]---[MIKROTIK:x.x.96.36||x.x.20.1]---[SWITCH "B"]---[MAILSERVER:x.x.20.75] So far, it appears...

ktw-matt

Is there any chance my RB/112 isn't DOA? I just assumed it was pre-configured and tested before they shipped it. (RB/2018 CPE package w/ SR2)

ktw-matt

This is alot like my problem. I hooked up the PoE splitter and connected the other end up to my switch, for initial configuration. After waiting a few minutes, the link light on my switch still did not light up. I tried a few different cables (all straight). Finally, I poped the lid off and could se...

ktw-matt

If you can physically identify which ethernet card is not being recognized, you might swap it into one of the PCI slots that is known to work, just to test that you don't have a bad network card. (You can verify this by checking if you have a different MAC address for one of the NICs.) Otherwise, if...

ktw-matt

I've asked about this kind of thing before, and the obvious solution is to use DHCP and give out static leases, but this seems a bit unnatural. However, by doing so, it would simplify IP assignment and configuration... not to mention the ability to automatically Rate-Limit static IP customers. Curre...

ktw-matt

Hi all, We're already using RADIUS and the MikroTik-Rate-Limit attribute for DHCP customers, but I'm curious if you can rig up RouterOS to do this with static IP customers.. something like this: Packet comes in on wlan1 (for instance) on the forward chain. The MAC address associated with this packet...

ktw-matt

Just to confirm sergejs, I e-mailed GateWorks and asked if they could verify (in)compatibility with the GW2201 and MikroTik's RouterOS + RB532, and he said basically what sergejs has said.

ktw-matt

ktw-matt,

Have you solved your problem?

I believe so. What we ended up doing was trying out the SL/NL-2511MP PLUS card. It seems to be much better than the CM9, atleast for AP use.

ktw-matt

normis, I understand where you're coming from, but.. there's a big difference between typing out the shutdown command and clicking a button in a GUI. Adding a bit of security to the GUI, such as this, could not hurt, could it? However, I guess I could see someone quickly selecting 'yes' and clicking...

ktw-matt

I have a great idea for the shutdown and reboot buttons in winbox. Instead of its current format: Do you want to shutdown? [Yes] [No] Do something like this: Do you want to SHUTDOWN? ( ) yes (*) no [Continue] Where 'yes' and 'no' are radio buttons, and no is selected by default. This way, the functi...

ktw-matt

Has the static routing bug been fixed?

ktw-matt

Do you think this would work in an RB532? I'm hoping to connect my ISDN modem up to it. (RS232)
http://www.gateworks.com/avila_gw2201.htm

ktw-matt

Heh, that did it! I didn't think to purchase it as a new key, like you would with a new install.

ktw-matt

Oops, hang on a second...

ERROR: Key for specified software ID is expired. You can purchase new key at http://www.mikrotik.com website! - you may not update an expired key to the version 2.9, you must purchase a new one

ktw-matt

Hey guys, I've got a little bit of a problem. I've installed 2.9.27 onto a HDD that had 2.8.26 with a valid key on it, told it to not keep the old configuration. After logging in on the console, it says: ROUTER HAS NEW SOFTWARE KEY ---------------------------- Your router has a valid key, but it wil...

ktw-matt

Hey Zorker, check out Josh Kuo's perl script here:
http://forum.mikrotik.com//viewtopic.php?t=4444

I was looking for help on something else and came across this.. thought it might be handy.

ktw-matt

If you know how to write shell scripts for Linux, BSD, etc, or write PHP scripts, you could script it to login to each mikrotik (with a provided list of IP addresses) and run a specified list of commands on each one. Basically, you would need a list of IP Addresses and username/passwords that corres...

ktw-matt

You cannot control it by file extension. Instead, try using Tools->Torch from Winbox, putting in his IP as the source address, and watch to see which port(s) he's using the most bandwidth on. Once you do that, you might even be able to search Google for that port number and find out what program it ...

ktw-matt

Hmm.. HellBound, is this you?

ktw-matt

I know this isn't the right forum for this, but since there is no General Discussion forum...

Last week, we had someone from "Basseterre, KA" call us twice.
I can only figure this was someone from the MikroTik forums...

Who are you?

ktw-matt

It would appear that our trouble was either because of the way I set something up, or because our ISP was routing our new block of public IPs to another one of our IPs, instead of the main IP we were using for our router. We're currently using a slightly older 2.9 version for the temporary router. I...

ktw-matt

LDAP shouldn't have anything to do with it, I wouldn't think. Are you essentially trying to give out static IP addresses via DHCP (Framed-IP-Address)? The Value for Password we're using is just empty, its *not* set to NULL. The only other thing I can think of, is to check that you're using the corre...

ktw-matt

Hmm.. kind of off-topic perhaps, but we're using a Senao NL-2511MP PLUS 2.4GHz 802.11b card, and lately I don't know if its my antenna at home, or perhaps this card at the tower but I've been seeing relatively high, sometimes outrageous ping times to the AP, and occasionally, I'll have to power cycl...

ktw-matt

Hi gog, We run a similar configuration with FreeRADIUS and MySQL. We use only the nas, radgroupcheck, radgroupreply, and usergroup tables. Our radgroupcheck table might look like: id, GroupName, Attribute, op, Value 1, default, Auth-Type, :=, Local 2, default, Password, ==, (blank) 3, bizpackage2, A...

ktw-matt

If you want to roll with the Secure FTP idea, I think the FileZilla project has an SFTP server for Windows, and then you can use the FileZilla (S)FTP client to connect to it.

http://filezilla.sf.net/ - check the downloads

ktw-matt

On the OS, it sees it as one card. Then you can plug any device into any of the four ports, like its a switch. In other words, think of it as a five port switch, with one of the five ports being hidden, because it's wired up to the network chip.. if that makes more sense. Kind of a weird device, but...

ktw-matt

If you have a Windows PC, get R1CH's ftrace and run it with -u to use UDP instead of ICMP.

ktw-matt

I have two of those Asound cards. I used them in a Pentium 166 running NetBSD for my home router one time. I currently use an RB532 with RouterOS.

ktw-matt

Apparently, there are a few viruses/worms that use the same port range as SMB. Unless those ports are blocked somewhere between the two computers, it should work. However, if you have the Windows firewall enabled, you can set an IP range that's allowed for File and Printer Sharing, under Exceptions....

ktw-matt

As for the preferred source, you can't change it for DAC routes - on the command line, it says "can change only static routes" and remains unchanged. The way I managed to change it, was to disable all other IP addresses for a particular subnet/route, so it would select the only IP left for...

ktw-matt

Hellbound, I wonder if this bug is similar to what I'm seeing. Some routes work, but our public IP's couldn't make it out to the default gateway. We were trying to replace an old 2.8.26 with a slower box running 2.9.31, and then later upgrade the box that was running 2.8.26, once we knew the new Mik...

ktw-matt

Hi guys, On our main router, we have several public IP addresses. Most of them are for dst-nat to private addresses. We're using a few of these public addresses to act as the gateway for our other routers with customers that have public IP's. |ISP[xx.xx.96.33/27]|---|[xx.xx.96.36/27]Main MikroTik[xx...

ktw-matt

Hi Tom, thanks for replying. We're not using anything on top of the wireless connection like PPPoE. I thought about doing that at first, but my boss didn't want to do it that way.. which is all well and good.. I mean, we have RADIUS authentication setup in a decent manner. I understand what you're s...

ktw-matt

Anyone?

Our AP-2000s can do this (per port).. how is it done on MikroTik?

ktw-matt

Ok, we're already doing routing. I just meant that the radio is in AP mode (ap-bridge).

ktw-matt

Yes, but doesn't that stop all communications between wireless clients? I only want to filter a few ports, in order to maintain some sanity while keeping things more or less 'open'. (In case I need to diagnose a customer's connection on the same AP as me, or if someone wants to run a small web serve...

ktw-matt

R1CH, from r1ch.net? Hey man.. it's majik.

ktw-matt

I don't want to turn off default forwarding, but I do want to filter things like File and Printer sharing between the wireless clients. Currently I'm dropping ports 137-139 tcp/udp on the forward chain with no src/dst address specified. But this does not catch stuff on the wireless ap-bridge. Is thi...

ktw-matt

Anything suggested, has probably already been tried. The current exact configuration is above.

ktw-matt

I've messed around with the settings when I had it on both computers, still no luck. I was pinging the AP (my computer[usb adapter] ~~~ mikrotik pc[rb14/cm9]) and it'll ping about 60 times at 1 to 3ms and then jump to 1,000ms or higher (give or take about 300ms) and go back to pinging another 60 tim...

ktw-matt

I'm sorry, I forgot to mention, we're running the CM9 in B-only mode.

ktw-matt

Right now I have a CM9 in an RB14, with a pigtail and small antenna connected to it. I'm using a Belkin 802.11b/g usb adapter on my desktop. I'm getting an excellent signal (48 SNR). (We're doing this indoors while we test.) Ping times are great. We're seeing 1 to 3ms...and out of no where, 1,000ms ...

ktw-matt

I haven't tried nano-itx either, but as far the mini-itx comments - as long as you pick some decent memory (I think I used a Kingston ValueRAM stick) the system is pretty stable. I haven't had one problem with my 1GHz (Nehemiah) mini-itx development server.

ktw-matt

Yeah, I was just looking at that card the other day. It looks like a good card..just no support for it on MT yet.

ktw-matt

So, I did get it working.. but now I'm having another problem: pings to the MT spike to 1,000ms or higher. Pings are normally 1-4ms. I've tried moving the pigtail to the other connector, change antenna-mode between ant-a/b, moving the RB14 between two PCI slots, used another RB14, and switched betwe...

ktw-matt

Other than the RB14, I have just one Realtek 8139D Ethernet card.

I think I've got it working now.. and it could've been a simple configuration error on my wireless USB client.

I'll let you know.

ktw-matt

Bump My question is, does the RB14 figure it out and adjust accordingly, or do I need to get 3.3v-only version of the RB14? I'll try another RB14 and if it comes down to it, I'll reinstall MT. (I figure maybe, just maybe, the /system reset didn't clear it all out a while ago.) If all else fails, I'l...

ktw-matt

Hi all. I've come to two possibilities to our issues with this setup, one of which I can test for, and the other I'm not sure about: We have an RB14 that's configured for a 5 volt bus -- the machine we're trying to use it in is PCI version 2.1, and most likely just 3.3 volts on the PCI bus. (not an ...

ktw-matt

We just use Cacti (SNMP graphs), ntop (bandwidth graphs, stats, and reports), Ethereal (network analyzer), and Nagios (network/service status).

ktw-matt

I just read back over that part of the manual and it does make sense. Let me see if I've got it right this time: / ip firewall mangle add chain=forward out-interface=ether1 action=mark-packet \ new-packet-mark=ether1 passthrough=yes comment="" disabled=no add chain=forward out-interface=et...

ktw-matt

Ok, when I set the parents of my queue trees to their interface, only the "out" trees work. Here's a setup on one of our routers. Mangle Rules: / ip firewall mangle add chain=prerouting in-interface=ether1 action=mark-packet \ new-packet-mark=in-ether1 passthrough=no comment="" d...

ktw-matt

Oh.. yeah, we're using global-in and global-out.

So would I be able to specify the actual interface for my in and out mangle/queue trees? If I understood you right.

Edit: Because my queue trees didn't seem to work when I placed them on the interface. Well, I'll try it out.

ktw-matt

Hey guys.

I have some mangle rules + queue trees setup so that I can equalize traffic, in both directions, with a max-limit of something like 11M.

It works... but this stops my dynamic (radius-added) and static simple queues from working.

Is there a way to have both?

ktw-matt

Ok, fire's out. :) Turns out, it was a configuration thing on my CPE (an EtherAnt II Long Range). I reset it to factory defaults and reconfigured it completely; works like a charm now with the new 2511MP card at the AP. Everyone else is working good too, unless we get a call in the near future, in w...

ktw-matt

So, we downgraded back to 2.9.18 - still happens -- atleast for me and maybe a few others. So far we've only heard good reports except for at my home. I got to thinking and it hit me. This sounds like a low TTL value somewhere. On the AP perhaps? Nothing has changed except for the AP, when we change...

ktw-matt

Ok, so I went home to see first hand what was going on. Most things seem to work - just not web traffic. DNS, IRC, E-mail, and Quake2 worked fine, pings and signals looked great. Web surfing though: connected, waiting for reply... sits there. (using Firefox 1.5.0.5) While using Internet Explorer, I ...

ktw-matt

Hey guys, I've just swapped out a wireless card in an RB532 AP, from a CM9 (Atheros, 65mW) to an NL-2511MP (Prism 1, 200mW) card. Signals have improved, pings go thru, but thats about it. Going to web sites on the wireless hardly works, and I can't fully login to another RB532 I'm using at home on t...

ktw-matt

Thanks for the reply! I can't remember exactly why I wanted the bridge.. unless for things like the DHCP server. One "interface", one IP Pool, etc. (actually, I could use the same pool, if I'm thinking right) Would it be wise to do away with the bridge and put a DHCP server on each wireles...

ktw-matt

Thanks for the answers! This clears things up.

That'll be it for now, but if I have any other questions, you'll probably hear from me again. Thanks!

ktw-matt

Hi everyone, I'm setting up a new MT box for a tower site that has 3 sectors. I asked these questions on bridging in the general networking forum and then I discovered WDS. Let me explain my setup. Currently, we're running two Proxim AP-2000 boxes at the tower site. One of these has one wireless PCM...

ktw-matt

Right. For that we're considering using two connections at once via BGP multihoming, with independent public address space. Then if one provider fails, we're down to about half our speed, but the network is still functioning normally.

ktw-matt

Hi everyone, I have some questions about bridging interfaces.. I can't seem to find the answer or am still unsure of the answers. 1a) I have 3 wireless interfaces bridged, and I want them set to arp=reply-only, do I: set this on all three interfaces and / or the bridge? 1b) If I make a bridge, shoul...

ktw-matt

Where is this info coming from?

http://www.mikrotik.com/software.php - says RIP, OSPF, BGP won't be available for < level 5 in version 2.10

I have a question tho - what does RIP have to do with bridges, how are they similar?

ktw-matt

I have a slight interest in this too, however, I don't forsee this becoming a real function within RouterOS, but perhaps a user script that someone can make and distribute?

ktw-matt

It might show up in the log.
/log print on the console (I'm pretty sure), or the Log button on the main bar in winbox.

If you need it e-mailed to you, I believe the log system can do this too.

ktw-matt

You can already do something similar to this.

For instance, in the firewall rules (and others), just set the action=jump and give the new chain a name.

ktw-matt

I agree. It'd be nice to have a comment column, with the possibility perhaps of having a wireless registration comment put in dynamically as the result of a successful RADIUS authentication. (Do the same for dynamic simple queues added by radius; the name field under simple queues is fine for this, ...

ktw-matt

We've been thinking about this feature as well. I agree with freethought on its redundancy. Imagine: One physical PC, loaded with network cards, running several instances of MikroTik. You could combine several different function routers into one PC, and/or use one instance as a primary router and an...

ktw-matt

I'd also like to see IPv6 support in MikroTik. Most useful to me, would be a feature or method that would allow a MT router to act as a v4 to v6 gateway (via a v6 tunnel broker or similar). Then, clients sitting behind the router could use both public IPv4 and public IPv6 (via v6 tunnel) resources [...

ktw-matt

Oh yeah, that's right. Basically, just leave the IP address field blank, and then go back to the General tab where you can select the in/out interface. For your src-nat rule, you'd want to select your public interface for the "Out. Interface" field (and leave the "In. Interface" ...

ktw-matt

Hmm.. this thread is stuck in a rut. As far as I know, ethernet/static IP does not automatically try to authenticate via RADIUS. If it does, I'd like to find out which router service it does this under. (I thought maybe 'login' would get it, but seeing actual results and looking back over the inform...

ktw-matt

service (multiple choice: hotspot | login | ppp | telephony | wireless | dhcp; default: "") - router services that will use this RADIUS server hotspot - HotSpot authentication service login - router's local user authentication ppp - Point-to-Point clients authentication telephony - IP tel...

ktw-matt

We also have a mikrotik thats been pegged at 100% CPU since a few hours after turning it on. Even at this moment its pegged at 100%. We have two 4-port ethernet cards in it, one port of which is dead, and one is plugged into our switch. So 6 of the eight ports from the 4-port cards plus the onboard ...

ktw-matt

Remove the public IP address from the src-nat and dst-nat rules; instead, specify the public interface. This should work fine.

ktw-matt

Of course, we can always do it by a static DHCP lease. That would get it through RADIUS like I want. I was just curious if this could be accomplished by static IP alone.

Matt

ktw-matt

Hey guys. Is there a way to authenticate someone who's using a static IP, through RADIUS by their MAC address? We're doing this for DHCP (for dynamic IP customers + bandwidth limiting) and wireless (wireless access control). But for static IP customers, we have to manually put in a static ARP entry ...

ktw-matt

Is it slow and/or with high ping times?
I'm experiencing this after putting an RB532 and CM9 card out there.

ktw-matt

wildbill442, Yeah, it creates simple queues for it. :) We're currently running an RB532 box at a tower site that's doing exactly this. We took it a step further by setting ARP on the wireless interface to reply-only, and then in the DHCP server, checked off Add ARP entry. (Then for customer CPE's, w...

ktw-matt

There's two parts to this: 1) ping spikes (150 - 200ms) from me to the AP (from a normal 4 - 6ms); occurs atleast once every minute. 2) difficulty sending but no problem recieving, accompanied by outrageous 1000ms pings; occurs atleast twice an hour and lasts for several minutes. Last night, I had i...

ktw-matt

The software ID, best as I know, is a unique identifer code per machine and/or hard drive, and is used on the MikroTik website to generate a license file for your MikroTik, when you purchase a license (by entering that code). Take a good look at each Level of license you can buy as some have more fe...

ktw-matt

It appears to be a problem with one of the backhauls - from the router I get a consistent 3 - 7ms to one of them, but the other one - when its acting up, soars to nearly 1000ms, and often hits 256ms on up to 500ms. Geez, this was the last thing I would have considered. :oops: Especially since everyt...

ktw-matt

It's not my linksys router. I'm wired up outside of my router and it still does it. This time when it happened, I went back to that website where I ran ping and traceroute tests to the MT router. Thing showed pings of 250ms up to 1150ms. (Pings were fine up until it pinged the MT router). That tells...

ktw-matt

Well, that didn't do it either. I managed to run a traceroute from a website while this was happening one time, and from those results, it appears to be a problem with either the backhauls or the MT router. I had a friend traceroute me another time it happened, and he said it was just on the last ho...

ktw-matt

I turned on the extra Basic B rates, after the fact, in hopes of it improving. It has atleast made the connection seem a lot quicker. What can I say, I was desperate.

I'll try turning it back down though.. Thanks.

ktw-matt

Err.. Let me clarify how the ping spikes are acting. From a command prompt, pinging the MikroTik Router/AP you simply see anywheres from 60ms on up to atleast 120ms in every 1 of say 20 ping replies. The other 19 of 20 ping replies are all comfortably at 3 - 7ms. It doesn't look like such a big deal...

ktw-matt

After reading thru some of the recent posts here, I've tried the following: * Set my EtherAnt II-LR to 'Automatic' (only other options are 2 and 1Mb). * Disabling the QoS feature on my Linksys WRT54G router (home router). * Upgraded the RB532 Router/AP combo, 2.9.12 => 2.9.13 * Disabled wireless pac...

ktw-matt

I realized earlier that I didn't have frequency-mode=manual-tx-power, when I had already configured tx-power-mode=card-rates and tx-power=18 (that of the 65mW CM9 card in 2.4GHz).. so I set that to manual-tx-power, and then attempted to lower on-fail-retry-time to something lower than 100ms, thinkin...

ktw-matt

Hi everyone. We were running an AP-2000 access point and seperate x86 MikroTik router at this one tower site, and it worked good. We're now trying out the RB532+CM9 MikroTik Router/AP combo box at that site, and, while I'm impressed at how much snappier my connection at home feels while connected to...

Search found 97 matches

RB250GS - Use Ideas

Re: XBOX Live and ROS 3.0RC13

Re: uPNP + NAT = help ?

Re: Ipv6

Re: Ipv6

Re: WinBox error

Basic Queueing for 12Mbit pipe - RB532 or RB333?

Can't send/recv AOL e-mails

RB/2018 (RB/112 CPE with SR2) - DOA or...?

RADIUS MikroTik-Rate-Limit and Static IP Addressing

MiniPCI Serial card

Update 2.8 license key to 2.9 (how?)

St. Kitts and Nevis

Dynamic Routes and Preferred Source

(How?) Drop packets between wireless clients

RB14, high pings

RB14 + 2511 issues

Queue Tree & Simple Queues (How?)

Help! No/Hardly any Web Traffic

Wireless Sectors: Bridged APs or WDS?

Bridging questions

RADIUS Auth. with Static IP

RB532, CM9, and high pings