MikroTik

in4ni

I have a nat rule for a PPTP vpn however when the vpn goes down and gets re-established the interface in the rule is invalid. currently I have a schedule running every few minutes to fix the rule, there must be a better way besides running a schedule, any suggestions?

Thank you

in4ni

Thanx Sob, working perfect

in4ni

I have multiple public IP address on my WAN interface, How do i create a NAT rule to change to outgoing IP address from specific internal private IP

Thank you

in4ni

That sounds like what i am looking for so i called iparchitechs and the sales person quoted me $2,500.00 - $5,000.00 to configure 5 routers! I think that is a little steep. The sales person also said i should use "Unicorn" switches instead of CC routers, I have searched the internet for them to no a...

in4ni

I have a client that has approx 7 locations currently using a Metro Ethernet at all locations. The setup is simple and has been working for years. Now my client has dedicated fiber between the sites in a "Ring" configuration. What is the best way to network all the sites together using only Mikrotik...

in4ni

I have a client that has approx 7 locations currently using a Metro Ethernet at all locations. The setup is simple and has been working for years. Now my client has dedicated fiber between the sites in a "Ring" configuration. What is the best way to network all the sites together using only Mikrotik...

in4ni

Option A did the trick, Thank you

in4ni

I have a remote location using a security DVR. The internet access is being provided via a Verizon jetpack that i have associated using station pseudobridge. I have established a PPTP VPN connection that works great. I can view the DVR through the VPN from the other end without issue. Now i cant fig...

in4ni

where can The Dude server for windows be found? I cant seem to find it under downloads

Thank you

in4ni

My residential ISP connection does not allow port 25 traffic in or out, i have a PPTP tunnel from my residence to my Office My office ISP allows port 25 traffic to pass through. How can i create a rule that will divert outgoing port 25 traffic from my residence through the VPN out to the internet ? ...

in4ni

I just purchased a RB2011il and there is no PPP section, What is up what that? Where is the VPN stuff?

Thank you

in4ni

No takers?

in4ni

I am looking to use Mikrotik router OS for my Hosted phone installs and need help setting up Queueing I want to give priority to the Hosted phones, what is the best way to do this? Internet is attached to Ether 1 Data Vlan is attached to Ether 2 with a 192.168.50.0/24 network The Voice Vlan is attac...

in4ni

That is a good Idea, Ill give it a try

Thank you

in4ni

here is the rule
chain=dstnat action=dst-nat to-addresses=192.168.2.60 to-ports=80-81
protocol=tcp in-interface=ether1 dst-port=80-81

in4ni

I have a simple NAT rule to redirect port 80 to my DVR (see below) ether 1 is my WAN interface ;;; DVR chain=dstnat action=dst-nat to-addresses=192.168.2.60 to-ports=8866 protocol=tcp in-interface=ether1 dst-port=8866 Today I established a IPsec tunnel however ALL port 80 requests (no matter the IP)...

in4ni

rextended, your suggestion did the trick

Thank you

in4ni

Today I installed an IP PBX at a clients location and estableshed a PPTP VPN tunnel at the remote location, Data flows perfect however the phones dont work properly. For some reason the PBX thinks that all the phones connected through the VPN are coming from the same IP address. The PBX Shows all th...

in4ni

Im looking for detailed instructions on how to setup a Mikrotik to Sonicwall VPN, at one time there was a Wiki for that however that article is not posted any longer

Done anyone have any instruction for this setup

Thank you

in4ni

I have never used the output chain. what should the rule look iike so I can winbox into the interface that has the routing mark

Thank you

in4ni

After configuring my Router OS 5.5 with a second internet connection and started using router marks to route traffic I am no longer able to connect from the outside in with winbox, i cant even get a ping reply, What type of rule do i need to make this happen?

Thank you

in4ni

I have a RB 711 that i am trying to connect as a station to a Motorola access point using a WPA passphrase. I cannot get an association to save my life. I tried setting up a security profile using the passphrase to no avail, I also converted the passphrase to hex to no avail. What am i doing wrong? ...

in4ni

What is the most efficient way to guranantee 1meg of bandwidth to my VOIP PBX IP interface? My Lan IP is 192.168.2.0/24, The PBX is 192.168.2.252. I need to gurarantee the my users cannot rob the necessary bandwidth from my PBX to operate properly. Do i make a simple queue for .252 and give it a hig...

in4ni

I recently attempted to replace 2 netgear VPN routers with Mikrotik. Each site has a Mikrotik box using a simple PPTP clinet and server, nothing fancy, I also tried l2TP to no avail Everything such as SMB filesharing, WEB, FTP and several other apps work great across the VPN tunnel however the custo...

in4ni

I juat setup a routerboard where 5 companies are sharing 1 internet connection. I have created each business a Vlan interface with there own network (natted).

What is the best way to create a firewall rule so each network is protected from each other?

Thank you

in4ni

Is there any routerboard hardware that is 802.11af poe compliant?

Thank you

in4ni

Yes Netgear uses IPSEC however the Mikrotik documentation is useless in the situation

I was wondering of anyone has ever successfully connected top a Netgear IPSEC VPN

in4ni

Is any one aware of any examples or Wiki on how to establish a VPN connection between a Mikrotik box and a Netgear Prosafe VPN router?

Thank you

in4ni

A single file name works perfectly

My client is a Polycom SIP phone, Every time the phone gets turned on it downloads a few *.cfg files

Thank you for your efforts thus far

in4ni

Thank you for the reply

the wildcard is not working for me all of my files have an cfg extension so i entered *.cfg to no avail

im currently ruinning Router os 4.0

in4ni

Im attempting to use the TFTP service in the Router OS however it appears that i need to enter each and every file name that needs to be served up in the config. Is there a wildcard i can use for the REQ & Real file name ? so i dont have to make an entry for every file that needs to be server up? I ...

in4ni

RoadRacer, Interested in helping me out with this $

shoot me an email hs at jaxitsdotcom

in4ni

I have a small restaurant who wants to do the following: Please let me know if Mikrotik Hotspot service will work with the proper setup and config force users to fill out a contact form and email the results before Internet access is granted Allow a max of 2 hours of internet access per computer per...

in4ni

very frustrating for me as i like MT products. I had to use another product for this project as Mikrotik couldnt cut it. I just cant use Mikrotik with my hi-end customers as the lack of support in a situation like this would get me in a lot of trouble.

Just my 2 cents

in4ni

No Queues

no firewall rulz

Tried Nstream and that didnt seem to help much

Just turned off connection tracking to no avail

Thank you for the suggestions!!

Have a great weekend

in4ni

# jan/02/1970 00:03:00 by RouterOS 3.28 # software id = 016T-GT92 # /interface bridge add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes \ comment="" disabled=no forward-delay=15s l2mtu=2304 max-message-age=20s \ mtu=1500 name=bridge1 priority=0x8000 protocol-mode=rstp \ transmi...

in4ni

Thank you for the reply

I have tried different channels and i have lots of seperation between channels (wds1 and wds2)

thank you

in4ni

I have a confusing bandwidth issue. All APs are RB433's with R52H's, Fileserver - AP1 - AP2 - AP3 AP 2 has 2 radios and is acting as my repeater Bandwidth between AP1 and fileserver is geat (hard wired) Bandwidth between AP1 and AP2 is ok (15mbs) bandwidth between AP2 and Server is ok (15mbs) WDS li...

in4ni

i sure would like to get some comments on how i should configure the system

in4ni

i have been tasked to temporally network together a few meeting rooms at a convention center. One of the meeting spaces is on the second floor kinda far away. I was wondering can I pre configure serveral Mikrotik RB433's and start from the "gateway" and start walking down the hall and when the signa...

in4ni

I have a small business server and i am getting Exchange errors relating to Windows Mobile direct push. According the MS Knowledge base it appears to be a http timeout. "issue may occur if the firewall has not been configured to let HTTP(S) requests live longer than the minimum heartbeat interval th...

in4ni

Thank you Craig, that was the answer i was looking for

Have a great day

in4ni

Thank you

The interface name is "vlan-hotspot"

Thank you very very much

have a great weekend

in4ni

I have tried to create the scrips to no avail, thats why I posted in the forum.

Evidently creating the script isnt that easy or someone probably would have posted the code.

in4ni

Im looking for the proper script code

in4ni

all i want to do is disable the wifi vlan inteface on the router

Thank you

in4ni

Im looking for a script example

in4ni

How can i create a schedule to disable Wifi Access at 8:00pm and enable Access at 6:00am?

What i would like to is shutdown the Wifi Vlan interface on my router. How would i use the system scheduler to do this?

Thank you

in4ni

Sounds likea great suggestion, Ill have to get the Usermanager running on the RB450.

Thank you

in4ni

I have a doctors office waiting room that has free wifi however all their neighbors are leaching off the free wifi and my client wants to put a stop to it. Im looking for some simple hotspot solution so the receptionist can generate a new password everyday and post it in the waiting room. Can i crea...

in4ni

i made the post for suggestions, however what i have done is use WDS and Vlans. working great!

Thank you for your reply

in4ni

What I want to achieve is a 5.8 GHz point to multi point configuration. This is going to be a 16 location wireless IP camera system using Mikrotik Gear,The camera will be plugged into a routerboard via ethernet cable. Also I want to make the camera locations a 2.4 Gig Wifi Access Point using a secon...

in4ni

i have a ROS 4.13 router plugged into a Metro Ethernet circuit i are having strainge bandwidth readings. When i perform a bandwidth using the Mikrotik tool the reading form the tool says 700k however the interface bandwidth is telling me 2.7Meg I get the same readings if i perform the bandwidth on a...

in4ni

i am having a problem with very slow uploads from a ROS3.14 router through a Metro Ethernet circuit, Downloads are good. That circuit is being shared with another company by using vlans. The other company is using Cisco Gear and thery were having weird problem until they adjusted their TCP MSS. How ...

in4ni

For some strainge reason im not having that problem any more, Cant figure that on out

Thank you for yuor replies

in4ni

ROS 3.10

i cannot paste commands in winbox. It seems like there is some auto correct or something is changing the syntax . This is very annoying how do i turn this feature off?

Thank you

in4ni

Bad Link

Got it

http://wiki.mikrotik.com/wiki/Bruteforc ... %26_SSH%29

http://wiki.mikrotik.com/wiki/Bruteforc ... TP_%26_SSH)

in4ni

Is it possible to detect failed logins and add the IP address to a list?

Thank you

in4ni

Great suggestion. Ill have to look into how to write a script that i can run on the Mikrotik DHCP box. Got any tips?

Thank you

in4ni

It it possible to block an iphone DHCP request (00:1F:F3) ?

Thank you

in4ni

Thank you for the replies.

Guess ill have to go with the 433, I need 2 Ethernet and 1 mini pci. The exta $$ is gonna hurt because i need about 50 of them.

in4ni

I was wondering what happened to the RB133 that had 3 ethernet ports and 3 mini pci. I noticed that the RB133c was listed on routerboard.com however the RB133 wasnt. Is the RB133 gone fpr good ?

thank you

in4ni

Are there any docs available for setting up user manager to accept Autorize.net and or Paypal

I looked through the WiKi and couldnt find much

Thank you

in4ni

Dear Mikrotik Users, Please help me understand this response from Mikrotik Thank you > I am unable to connect a windows xp sp2 laptop to a mikrotik AP using a > 64 character WPA key. I can connect using shorter keys but not 64 > characters. My radio is a CM9 > I have tried 2.9.46 and 3.0rc4 __Respon...

in4ni

I have tried a 64 character WPA key on server routerboards and a few different RouterOS versions with CM9's to no avail Has anyone got a 64 character WPA key to work with router OS? Thank you Here is my log echo: wireless,debug wlan1: 00:90:4B:71:54:94 attempts to connect echo: wireless,debug wlan1:...

in4ni

I am having a hard time getting WPA (tkip) to work using a 64 Char hex key Does MT support 256 Bit WPA? MY log error is "unicast key exchange timeout" If is use a shorter key (13 char) all is well At this point all im trying to connect from is a Windows XP sp2 notebook. Please take a look at my conf...

in4ni

Hey Pete, Who the heck are you talking to? Are you sure you posted in the correct thread?

Butch, Thank you for the suggestion. I will give it a try later in the week.

in4ni

should i try changing the PPPOE MTU or the PPTP MTU? or both

Thank you

in4ni

The Home office endpoint has an ethernet connection from the building with a static IP address. The Branch office is connecting through a DSL using the PPPOE client. The home office lan ip address is 10.0.0.0/24 and the Branch office network address is 10.0.10.0/24. I am Establishing the connection ...

in4ni

I have the same issue, so why should I create a new thread?

How do you figure that you have the same issue? Are you Illiterate

in4ni

Since Some asshole hijacked my thread im starting a new one I eastablished a PPTP tunnel between to MiKrotik devices and my tunnel was working for the most part until i disabled the Nat masquerade rule. MY question is why did i need the nat rule for the tunnel to work? It seems i may have a problem ...

in4ni

Whats up dude? Your Hijacking my thread.

in4ni

I eastablished a PPTP tunnel between to MiKrotik devices and my tunnel was working for the most part until i disabled the Nat masquerade rule. MY question is why did i need the nat rule for the tunnel to work? It seems i may have a problem with my config.

Thank you

in4ni

this is kinda hard to explain we have True Private Network (TPN) connecting 8 offices together. The aggrigation point got moved from our home office to the ISP's NOC. The home office no longer has a leg of the TPN entering the office, instead we are connecting to the NOC VIA IPSEC. I have establishe...

in4ni

i just replaced a netgear box with an RB532. Is is being used as a broadband router with PPPOE client. As soon as i replaced the firewall my customer started having outgoing SMTP connections dropped just to a select few email domains. The mail server is Masquareded behind the public ip. SMTP nat con...

in4ni

Thank you, I cant beleive how blind one can be at times

in4ni

Router OS 2.9.8

How do i change the DHCP lease time without deleting the DHCP server and starting over?

Thank you

in4ni

I have establiched a PPTP tunnell between to mikrotik devices. I can map network drives and do just about anything but i cannot get a new workstation to join and active directory domain through the tunnel. I have turned off all firewall rules to no avail. I have set the workstations DNS setting to p...

in4ni

allow related connections did it!!

Thank you

in4ni

yes, i did try seperate rules to no avail. Thank you for the reply

are both ports 20 and 21 TCP ports ?

Thank you

in4ni

someone please chime in. This little problem is annoying

in4ni

i am using RB532 as a broadband router and i am kinda doing my firewall ruls in reverse order by dropping everything and allowing just the services i want. all my rules work great except my allow FTP rule. seems like the firewall is allowing port 21 but not 20. Any suggestions Thank you # / ip firew...

in4ni

If you set up everything correctly then my best guess is the ARP table on the default gw..

/Henrik[/quote]

I will take a look at the ARP table

Thank you

in4ni

Changeip, I thought the same thing but the ISP said to use the same /30 that my original 64.XXX.XXX.XXX/28 used. As i stated i addressed my notebook that sam as router B and all was well. Ill will be bat at that site in a few days and see what i can find.

Thank you for the reply

in4ni

i just get a new /25 assigned to me by my provider (174.XXX.50.128/25) i was told to use my existing default route (64.XXX.133.XXX) Router A: i added 174.XXX.50.129/25 to ether3, plugged my laptop into ether3 addressed my laptop to 174.XXX.50.150/25 and could surf fine. Router B:now I plugged a mikr...

in4ni

i have 1 windows box that looses communication to the internet every 4 or 5 hours. This started happening after i replaced a cisco 1900 with mikrotik router OS 2.9.42. after communication is lost (cannot collect mail or RDP in) i can ping the IP of the box but cannot access services from the interne...

in4ni

when performing a ping from the terminal is it possible to specify the interface for the ping request ?

Thank you

in4ni

how much bandwidth should i expect between to RB532's with cm9 radios
a distance of about 500ft. Is this enough info?

Thank you

in4ni

Net install didnt show the key.
After running net install i got a lot of errors on the next boot.
I feel that the onboard nand is messed up. My vendor is going to replace the unit.

Thank you

in4ni

Captured from the serial port How can i fix this? outerBOOT booter 1.13 RouterBoard 532 CPU frequency: 264 MHz Memory size: 32 MB Press any key within 1 seconds to enter setup. loading kernel from nand... OK setting up elf image... OK jumping to kernel code Starting... insmod: init_module: flash: Op...

in4ni

yelkoury, Did you ever resolve this? I have the exact same problem?

thank you

in4ni

I have an RB532 2.9.38 with a cm9 radio and a few IBM notebooks with an Intel 3945 A/B/G Wireless card that cannot even see the access points.
I tried adjusting the propority extensions to no avail.
Is there any known Incompatibilitys?

Thank you

in4ni

It sure would be nice to be able to use MikroTik for a ethernet to wireless bridge. Where mikrotik can connect to an ordinary AP (without wds)

in4ni

Yes, i know But im looking for a reliable device to act as an access point client for and ordinary old ass AP that doesnt support WDS etc... Such as the Linksys WET54G.

in4ni

Is there any plans for MiktoTik to implement any type of Access Point client bridge function?

in4ni

Thank you Nathan, IT shouldnt have to be that difficult. It amazes me i can get a $70.00 linksys and flash it with some DDWRT and i have a working bridge in minutes.

Just my 2cents

in4ni

I dont think the instructions talk about using mikrotik as a an ethernet to wireless bridge.

in4ni

Directwireless- Did you ever figure out if there is a way to do this bridge with mikrotik?

Thank you

in4ni

What is the proper configuration to bridge a ethernet port on a pc to a wireless network using a RB532. I tried a simple wlan1 to ether1 bridge to no avail. the pc pulled an ip from the wireless but will not ping.

Thank you

in4ni

I am trying to use an RB532 (2.9.26) as a client device to connect to a WEP enabled WiFi network. I have wlan 1 connected to the network in station mode with the proper static keys and the bottom of the window "connected to ess". I created a bridge and added ether1 and wlan 1 to the bridge and thats...

in4ni

Wrong forum ? I dont think so, what other forum do you reccommend?

the way i see it is that no one wants to attempt to answer a difficult question. LOL

in4ni

Is it possible to configure a single pc with a public ip that is connected to an interface that has nat'ed 172. address on it? the public ip side lan is a /28 but i would like to use on of those /28 public addresses on a pc. I realize i could use a 1 to 1 nat but this pc is going to be making an ips...

in4ni

humm, I wonder the term "BETA" means ?[/quote]

in4ni

Thank you for the suggestions. thats kinda what i thought. Sure would be a nice feature to have. When the PSD option came along i was hoping for some type of incorrect password rule.

Thank you

in4ni

is there any possibility of adding someone who is trying to guess passwords to the mikrotik router to an address list so they can be dropped. I am getting a lot of people trying to guess ssh and ftp passwords and its filling up my log and annoying me.

Thank you

in4ni

Maybee you should leave the client id alone. Why are you changing it?

in4ni

i reccommend let mikrotik asign the lease and then go into winbox ip/dhcp server / leases and click the "make static" button. That has been working for me

in4ni

sounds like he hotspot needs to be on its own interface with a different subnet the other interfaces.

Just my 2cents

in4ni

Dam, i thought someone would at least point a reference to the manual. LOL

in4ni

RE: Router OS 2.9.8 I am trying to establish a PPTP connection to a hotspot router and communicate with devices on the hotspot interface. I have established to tunnel to the router and can ping address on the non hotspot interface but am unable to ping addresses on the hotspot interface. What do i n...

in4ni

Wondering if there is a way for an hotspot login name to be bound to a mac address dynamically. Here is my scenario. a person pays for hotspot access and logs in for a few hours then logs out and gives his username and password to a buddy to use for the rest of the day. Is there any way to prevent t...

in4ni

Where is this setting. I cant seem to find it

Thank you

in4ni

Is there any way to limit the number of wireless connection per radio to say 50 to prevent a single access point from getting overloaded?

thank you

in4ni

might want to check your subnet mask on the notebook a /23 should be 255.255.254.0

in4ni

You might want to consider upgrading to 2.9. I am not familiar with 2.7 configurations

in4ni

in winbox IP/hotspot click the "hosts" tab and find your pc's mac address and double click it then click "make binding" and set the type to bypssed.

or click the bindings tab and add your mac address manually

hope this helps

in4ni

i have MT setup as my border router with 1 public IP address. attached to my border router i have 8 MT Boxes used for AP's that are masqueraded behind my border router. When i establish a PPTP connection from the outside into my gateway router i can ping my AP's and connect to them with winbox but t...

in4ni

PPTP shouldnt be a problem but, ipsec might have some problems. in my experience i have not had much success establishing an ipsec tunnel through any natted or masqueraded network.

in4ni

Personally I have come to love using MikroTik as a border firewall. For years I have been selling and configuring watchguard products and needed a less expensive solution for my smaller clients and i started using MT, Now i mostly use MT as my border router/firewallsolutions. I dont think you can be...

in4ni

Is there any way to delete the hotspot files so that they dont re-appear after reboot?

in4ni

Shutting down is not an option. I am looking for an answer to my question.

in4ni

will frequent power cycles cause any problems with a routerboard 532? This router board will probably get unplugged and moved about 2 to 6 times a day. Will this damage the filesystem or configuration in any way?

Thank you

in4ni

Im kinda unclear on what interface to apply to my foward rules in interface ? out interface ? my interfaces ether1=attached to my DSL pppoe1=atteched to ether1 ether2= my internal masqueraded network ether3=hotspot

in4ni

That was it, I should have known better

good advice on the interface

Thank you

in4ni

Yes

My drop rule is working on the foward chain so i assumed i am placing my rules in the correct chain

/ ip firewall nat 
add chain=srcnat src-address=192.168.2.0/24 action=masquerade comment="" \
    disabled=no

Thank you

in4ni

My drop rule is the last rule (its disabled so i can surf). What else could it be ? 1 chain=input in-interface=Bellsouth action=drop 2 ;;; Accept established connections chain=input connection-state=established action=accept 3 ;;; Accept related connections chain=input connection-state=related actio...

in4ni

I have a Mikrotik box i am using as a DSL router and want very limited access in and out. Im trying the reverse approach to firewall ruls by dropping everything and adding accespt rules for the few services that i wont to allow out on the net, but my rules arent working and im wondering what im doin...

in4ni

even easier

login with winbox, open files window and drag the *.npk file into the window and reboot

in4ni

please delete

in4ni

Radius is your only option. You should try mikrotik's radius service

http://www.mikrotik.com/download.html#hotspot

http://moon.mt.lv/radius/

in4ni

Yes it is with lots of tweeking and patience. I have been playing around with IAS but good luck finding any help in this forum. Your kinda on yourr own.

I have got some basic authenication working but no accounting. Im having trouble figuring out how to use Mikrotiks attributes with IAS

Good luck

in4ni

Have you tried clicking on the ... just to the right of the "connect to" window in winbox? Also make sure you only have one network interface enabled on your windows machine. Hope this helps

in4ni

Thank you for the info Normis and great suggestion Cmit

Thank you

in4ni

i currently have an RB532 with routerOS level 5 and i want to expirment with other operating systems. Is the any way to preserve my RouterOS license for later re-install?

thank you

in4ni

You the man! Thank you.

Now whats the deal with the "service ports" settings? Why isnt that handled by firewall rules?

Again, Thank you

in4ni

I am unable to establish a VPN (PPTP) connection from a windows xp workstation to the outside world. I have removed all firewall rules to no avail
my internal network is masqueraded.

Any ideas?

Thank you

in4ni

I have been using the Atheros AR5213 without any known problems. I dont use Prism because of no support for WEP or WPA.

Jusy my 2Cents

in4ni

I am currently running WDS and would like to add another WDS for Hotspot access. Is this possible? I created a Virtual AP and added another wds and bridged to no avail. What is the proper config ?

Thank you

in4ni

There are several ways to do this. I would start here
http://www.mikrotik.com/docs/ros/2.9/interface/wireless

in4ni

The PPTP is working great! Im mad at myself for not thinking of that myself.

Thank you

in4ni

Are all the boxes connected on the sam network? if so setup PPtP on the first box you can access and VPN into the network to connect to the rest

Excellent Suggestion, I should have thought of that. Thank you Beccara

in4ni

Im looking for some suggestions for accessing about 12 MT boxes behind NAT. The First Mikrotik box has 1 public IP so acccessing that is no problem. From there i have been telneting into the other mt boxes with no problem. But i would like to access all the mt boxes with winbox. Is this possible wit...

in4ni

Does anyone know of Mikrotik's WDS is compatible with any other produts such as Buffalo etc...

Thank you

in4ni

I dont think prizm card support WEP, I reccommend using an access list

http://www.mikrotik.com/docs/ros/2.9/in ... #4.13.16.4

in4ni

COMON somebody chime in

All these gurus in here and no opinion !

in4ni

Is this possible: Heres the scenaro Merchandise company setting up for 1 day at an arena that has a DSL or cable connection. The company has 40 WIFI credit card machines that will be spread out all over the place. Is it possible to pre configure several (about 16) WRAPS or router boards with WDS and...

in4ni

ever since i upgraded to 2.9.8 from 2.8.x i am getting some log entrys that i cant figure out. Hotspot debug: hs-ether2 new host detected 00:83:da:34:78/172.20.0.10 Hotspot debug: dynamic host added (mac address) (ip address) Hotspot debug: dynamic host removed Lots of stuff like that. Why is this h...

in4ni

Right now all im trying to do is authenicate hotspot users. Later i want to get mysql going and dialupadmin.

thank you

PS anybody want to send me there conf files ?

in4ni

one would think this would be the correct forum since freeradius worked before i installed the Mikrotrik dictionary.

in4ni

Just a thought: IS your adsl modem firewalled in any way ?

does your adsl require pppoe? if so is mikrotik doing the pppoe login ? or the adsl modem

HUMM

in4ni

Im am very new to freeradius and am needing some help.

After i replaced the freeradius dictionary file with the mikrotik i cannot get radiusd to start. What modifications are necessary to radiusd.conf (or any other files) to get the service to start?

Thank you

in4ni

I have came to the conclusion that Prism card dont support any type of encryption. Switch to Atheros and all will be well

in4ni

Looking for some guidence for Windows IAS Radius .Trying to figure out how to setup Mikrotik attributes etc.. Any hints, tips or tricks would be appreciated.

Thank you

in4ni

Is there any support in mikrotik for WPA keys to be stored on a radius server?

in4ni

Mikrotik routerboard 532 2.9.6

I have a Prizm card and a Atheros card in the same router but I connot get any kind of encryption to work on the prism card. If i use the same security profile on the atheros card i get WEP to work. Any idea way i cannot get WEP to work on the Prism ?

Thank you

in4ni

I beleive you can setup multiple hotspots with 2.9 as long they are on seperate interfaces. I have never done this but i think you can with 2.9 only

in4ni

the only thing i know to do is connect with serial cable and configure interface. Having a serial cable when working with any router is a bare essential.

in4ni

Browse to the ip of the router and download it.

in4ni

I use winbox from 2.9 you click on the dot-dot-dot next to the "connect to" box.

in4ni

Im my limited hotspot experience each shared user will have his own dynamic simple Queue created. So shared users do not share bandwidth.

in4ni

I have a strange problem (Typical for me) I cannot mac telnet with winbox from 1 pc. I can MAC Telnet to routers from others but not my notebook, so that eliminates any issuse with mikrotik. On the notebook i have all interfaces disabled but the one im using to connect to the router with. I can see ...

in4ni

I got it, forgot to add a Nat rule to masquerade

in4ni

i have my mikrotik 2.9 box attached (ether1) to a Bellsouth adsl modem (bridged mode) and using the mikrotik pppoe client to connect to the bellsouth internet service. I am getting a successful connection to the internet and can ping internet addresses from a mikrotik terminal. but i cannot ping the...

in4ni

I dont understand your question. Are you trying to "load balance" with the 2 connections? exmaple :plug internet connection 1 into ether1 and plug internet connection into ether2 and plug ether3 into your network switch. add 2 default routes (one for each inet connection) put a check in the "ping ga...

in4ni

safe mode works great . I always use when doing remote config changes. Also MAC Telnet works great if you are on the same network segment

in4ni

You folks just dont get it. Start from the first thread and read very carefully. I cant be any more clear on what i am trying to accomplish.

in4ni

All i want to do is replace the login and password fields with a "login" button. Plain and simple

in4ni

some business owners want tp provide free internet access but want them to read a disclamer before browsing

in4ni

I am trying to create a hotspot login page that doesnt need a user name and password. All i want is a "login" button. I have tried to use the example in the docs to no avail. To provide predefined value as password, in login.html change: <input type="password"> to this line: <input type="hidden" nam...

in4ni

just received my new RB532 with mikroTik 2.9 and for some reason i am not able to connect winbox to the router from the hotspot interface. I can connect winbox from the public side but not from the hotspot side, I am logged in and i have tried ports 8081 and 8291 to no avail. Any Ideas?

Thank you

in4ni

Why am i gettting this error in my mikrotik 2.8.22 log:

"Hotspot: AA:BB:CC:11:22:22: LOGIN FAILED INVALID USERNAME OR PASSWORD"

The mac address is a linksys WAP11 access point connected to the hotspot side of the router. This error seems to occur every 8-12 minutes

Any ideas?

Thank you

in4ni

Thank you normis! That looks like the answer i was looking for

in4ni

i am in nedd of proper html code to replace the username and password box with a "login" button. All i want is for the hotspot users read the login.html page, agree to the terms , and click the login button

in4ni

couldnt find much help in the user manual. (big surprise)

in4ni

Anyway to replace the username and password field with a login Button that is on the hotspot login page? If so Got Code or html file

Thank you

in4ni

After adding the following mangle rule:
add src-mac-address=00:0A:0A:0A:0A:0A action=passthrough mark-flow=hs-auth disabled=no

Everything works (email, telnet, RDP etc..) without browser login except the browser! When i launch my browser i still get the login page. Whats up?

Thank you

in4ni

Wildbill, i think you have the DST and SRC rules correct but i think my problem is with the mangle rules for the hotspot authenication.

in4ni

Hey Hotspotsolutions did you get that mangle rule to work? I have tried several mangle rules to do an automatic pass-thru to no avail It has been my experience that most of the documentation examples dont work. I have yet to figure out how to do a simple one-to-one full nat so a hotspot client with ...

in4ni

trying to do a simple one to one nat from a public ip to a hotspot nat 'ed ip

plain and simple

dam even a linksys router will do that!

the 192 addess is my public address for my testing/demo situation

in4ni

Please someone give me the step by step command to do a one to one nat from public address 192.168.1.60 to hotspot client 10.10.10.1
The documentation example DOES NOT WORK. This shouldnt be this hard to do.

Thank you

in4ni

i cannot figure out how to do a simple one to one nat for a hotspot client. The documentation example is not working. I added the public ip address 192.168.2.60/24 to ether1 i want all public traffic directed to 192.168.2.60 to be fowarded to hotspot client 10.10.10.1/16 . When i follow the example ...

in4ni

How bout SMTP service

in4ni

got it, didnt have "mark flow" set

in4ni

when i assign a profile to a user and try a hotspot login i get the error message "ERROR: no DHCP lease and no flow" If i remove the profile from the user everything works fine. Any ideas??

Thank you

in4ni

Im going to have a T-3 (about 45mbs) and as many as 700 users at any givin time

in4ni

What is the max hardware requirements for the router OS.
Im sure something like a P4 2.8ghz is a waste of money.
Just want to get max performance for best $$$

Thank you

in4ni

I want hardware reccomendations for the mikrotik box itsself. My internet connection is a T-3 with about 1100 connected users.

in4ni

Here is my scenario: 1100 users with pre assigned username and password arrive at convention center with ther notebook, sit down and plug in to the LAN open their browsers and get re-directed to a login page before internet access is granted sessions will need time out limits etc. Also i need to lim...

Search found 188 matches