Community discussions

Search found 200 matches

by awacenter
Mon Sep 30, 2019 10:41 am
Forum: General
Topic: HW Offload AES-CBC IPSEC in CHR
Replies: 1
Views: 339

Re: HW Offload AES-CBC IPSEC in CHR

I found this post and I just read other post in MikroTik forum. I usually use a OpenVPN server in LINUX to set up my VPN because OVPN server in MikroTik doesnot support push-route option. So I have a OpenVPN server working fine. From this initial point, now I want to hardening my cipher comunication...
by awacenter
Mon Sep 30, 2019 10:40 am
Forum: General
Topic: IKEv2 SA wrong cipher in outbound proposal
Replies: 1
Views: 344

Re: IKEv2 SA wrong cipher in outbound proposal

I found this post and I just read other post in MikroTik forum. I usually use a OpenVPN server in LINUX to set up my VPN because OVPN server in MikroTik doesnot support push-route option. So I have a OpenVPN server working fine. From this initial point, now I want to hardening my cipher comunication...
by awacenter
Wed Apr 17, 2019 11:31 am
Forum: General
Topic: Feature Request: OpenVPN [ovpn] udp tunnels
Replies: 250
Views: 90489

Re: Feature Request: OpenVPN [ovpn] udp tunnels

So, In that case we have to wait until v7 es stable.

Can I know if route-push feature will be implementrd in OVPN in v7?
by awacenter
Mon Mar 18, 2019 2:04 pm
Forum: RouterBOARD hardware
Topic: RouterOS x86 Max Memory
Replies: 9
Views: 4032

Re: RouterOS x86 Max Memory

There were several years since last post. I have a GOOD SERVER to use as BGP peer gateway (lot of Intel cores and about 32-64GB RAM).My problem is I use a CCR1072 and my customers spend more the 6 GB de traffic and CCR hat 10GB Interfaces. I read old posts. I read there is a restriction un x86_64 vi...
by awacenter
Mon Feb 25, 2019 4:28 pm
Forum: General
Topic: Feature Request: 802.1X over ethernet
Replies: 39
Views: 9696

Re: Feature Request: 802.1X over ethernet

I am very interested too
by awacenter
Fri Dec 21, 2018 4:51 pm
Forum: Announcements
Topic: v6.43.8 [stable] is released!
Replies: 169
Views: 33649

Re: v6.43.8 [stable] is released!

I have just update a RB951Ui from 6.42.1 to last ros version 6.43.8 and there is a little bug
because the log function dissapear.

I execute / log print and nothing appears.
by awacenter
Fri Nov 30, 2018 4:57 pm
Forum: General
Topic: Feature Request: 802.1X over ethernet
Replies: 39
Views: 9696

Re: Feature Request: 802.1X over ethernet

+1.
by awacenter
Fri Nov 30, 2018 4:47 pm
Forum: General
Topic: Crowd Funding of v7
Replies: 32
Views: 5362

Re: Crowd Funding of v7

We need a update of routerOS kernel because we need a faster BGP routing.
Mikrotik should let a multithreading feature in the kernel.
by awacenter
Mon Aug 06, 2018 5:52 pm
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 329
Views: 88700

Re: Winbox vulnerability: please upgrade

We detect these issues and we try to update and upgrade all mikrotik devices.
Besid of this, we block all source IP via BGP when we can inform to our ISP.
by awacenter
Fri Jun 15, 2018 5:40 pm
Forum: Forwarding Protocols
Topic: OSPF - How large can a flat network grow?
Replies: 8
Views: 1064

Re: OSPF - How large can a flat network grow?

Hi!! the craziest network that I've seen is about 700subs in a flat bridged/switched one... but we really recommend to everyone move into a routed network instead of a switched one, by using OSPF with BGP, you can configure OSPF as an IGP which can handle everything related to convergence, load bal...
by awacenter
Thu Jun 14, 2018 2:12 pm
Forum: Forwarding Protocols
Topic: IP protocol options [SOLVED]
Replies: 1
Views: 574

IP protocol options [SOLVED]

Hi everybody, I have a doubt abot IP protocol. My scenary is we have AS number in a datacenter and I have several providers: Huurricane, Collent, Orange, Movista, DEcix... I stablish tunnel with my user management located in some cities in Spain. However, I detect that the major part of user managem...
by awacenter
Thu May 04, 2017 10:03 am
Forum: The Dude
Topic: SVG device for the dude
Replies: 5
Views: 8241

Re: SVG device for the dude

Thanks
by awacenter
Wed Oct 05, 2016 10:33 am
Forum: Wireless Networking
Topic: mANTBox 19s and SXT Lite5 very poor Tx/RX CCQ
Replies: 20
Views: 5170

Re: mANTBox 19s and SXT Lite5 very poor Tx/RX CCQ

I think you are confused.
The best perfonmance is not more than 25 wireless client.
Otherwire, the performance is very bad.
by awacenter
Mon Jan 25, 2016 10:02 am
Forum: General
Topic: Feature Request: IPv6 Hotspot support
Replies: 95
Views: 21721

Re: Feature Request: IPv6 Hotspot support

I am with you. There is a way to implement a hotspot service in IPv6.
Yes, it is correct that there is free IPv4 pools, but we have to find a IPv6 solution quickly.

In my networks and user managers are only MT.

+1 IPv6 Hotspot support.
by awacenter
Mon Jan 25, 2016 9:51 am
Forum: General
Topic: Hotspot Feature: Social Networks
Replies: 20
Views: 12524

Re: Hotspot Feature: Social Networks

+1 social networks.
by awacenter
Wed Sep 30, 2015 11:12 am
Forum: General
Topic: [Feature Request] HTTPS Hotspot
Replies: 8
Views: 1763

Re: [Feature Request] HTTPS Hotspot

It is easy, but you need some money. *You have to create a private key in a Linux system. *Create a CSR for one of domains you control. Buy one for some €. This domain will be used by all your hotspots. *The CA send you the Signed Certificate. *UPload the private key, the signed certificate and the ...
by awacenter
Wed Sep 09, 2015 10:18 am
Forum: General
Topic: GPS sync
Replies: 6
Views: 2610

Re: GPS sync

+1 to GPS sync.
by awacenter
Wed Sep 09, 2015 10:16 am
Forum: General
Topic: Add VoIP Support
Replies: 11
Views: 5632

Re: Add VoIP Support

I am VoIP engineer and agree with you. It is bad idea.
It is unnecessary to add VoIP services in MT, except to improve this traffic.

VoIP service for one way, and routing/filtering on another way.
by awacenter
Thu Aug 27, 2015 1:27 pm
Forum: General
Topic: Hotspot, HTTPS and CPU performance
Replies: 14
Views: 3978

Re: Hotspot, HTTPS and CPU performance

Any news about why CPU usage arise to 100% when hotspot authenticacion is https?
by awacenter
Thu Aug 06, 2015 1:59 pm
Forum: General
Topic: HTTPS Redirect - Feature Request? Bug Fix?
Replies: 12
Views: 3172

Re: HTTPS Redirect - Feature Request? Bug Fix?

Sob and Cha0s , you guys posted while I wrote my update. Seems like I so got used to ignore https warnings in local network that forgot about it. :D I share the same opinion as you about TLS/SSL authentication in https. I know all SSL theory and I have a SSL certificate in all my hotspots (hotspot ...
by awacenter
Wed Aug 05, 2015 2:55 pm
Forum: General
Topic: HTTPS Redirect - Feature Request? Bug Fix?
Replies: 12
Views: 3172

Re: HTTPS Redirect - Feature Request? Bug Fix?

Hi Sob,
I undertand the main idea about https and everything is encrypted, but as kimdobranski said, it is possible to capture the traffic to tcp/443 and to show a login page.
And, of course, it is the behaviour of a MitM attack. And it is not so easy.

Thanks.
by awacenter
Tue Aug 04, 2015 3:45 pm
Forum: General
Topic: Hotspot, HTTPS and CPU performance
Replies: 14
Views: 3978

Re: Hotspot, HTTPS and CPU performance

Potentially Final Update for this one - if anyone gives a Toss Now :) 25 Days uptime (see a log for a while back that it got rebooted - unsure as to why - could be power outage) Zero Support Calls since upgrade (was getting 3+ a week) Just Logged in to check him before this update. As per what i ha...
by awacenter
Tue Aug 04, 2015 3:23 pm
Forum: General
Topic: HTTPS Redirect - Feature Request? Bug Fix?
Replies: 12
Views: 3172

Re: HTTPS Redirect - Feature Request? Bug Fix?

I agree with you
I have the same problem in my hotspots. Lots of Android users have as a home page https://www.google.com.
The result is the login page does not appear.

I think it si a bug and it has to be solved.
by awacenter
Mon May 11, 2015 3:47 pm
Forum: Beginner Basics
Topic: SIP ALG vs SIP Helper
Replies: 20
Views: 48625

Re: SIP ALG vs SIP Helper

Vey useful.
I do not know about this SIP feature en MT config.
by awacenter
Mon Apr 27, 2015 11:26 am
Forum: General
Topic: Feature request: DHCP accounting through Radius
Replies: 24
Views: 5853

Re: Feature request: DHCP accounting through Radius

+1 to implementation of DHCP accounting requests
by awacenter
Mon Apr 27, 2015 11:10 am
Forum: General
Topic: PPPoE service duplicate customer IP
Replies: 9
Views: 3259

Re: PPPoE service duplicate customer IP

What I want to remark is when a static IP is current ly assigned and with traffic in PPP, for example: 10.2.0.30, the PPPoE server assign this same IP to one dynamic client. PPPeE server should know that IP 10.2.0.30 is been used by a client. The others issues are opened to disccuss the best strategy.
by awacenter
Mon Apr 27, 2015 10:55 am
Forum: General
Topic: how to get current active ip&mac list?
Replies: 4
Views: 900

Re: how to get current active ip&mac list?

You can try to put together the exit of theses commands:
* / ip arp print
* / ip dhcp-server lease print
by awacenter
Tue Feb 24, 2015 10:07 am
Forum: General
Topic: Hotspot, HTTPS and CPU performance
Replies: 14
Views: 3978

Re: Hotspot, HTTPS and CPU performance

You post was very helpfull, gammy69er.
I notice this behaviour in several times in mu devices.
May it be that we do not put the correct (or powerfull enough) device for our needs?
by awacenter
Tue Feb 17, 2015 9:35 am
Forum: General
Topic: PPPoE service duplicate customer IP
Replies: 9
Views: 3259

Re: PPPoE service duplicate customer IP

The answer by MikroTik Team was: Unfortunately you have to remove this address form pool manually. Client also might configure static addresses on client and they also will not be removed from pool so address assignation from pool only check if address has been assigned from itself. So, I ask for an...
by awacenter
Thu Feb 12, 2015 1:31 pm
Forum: General
Topic: PPPoE service duplicate customer IP
Replies: 9
Views: 3259

Re: PPPoE service duplicate customer IP

Very gratefully, MikroTik Support team caught my question.
Let's inform you the final solution.
by awacenter
Wed Feb 11, 2015 11:42 am
Forum: General
Topic: PPPoE service duplicate customer IP
Replies: 9
Views: 3259

PPPoE service duplicate customer IP

Hi everyone, In my networks I have configured PPPoE service for my Wireless customers. I have Public addressing and each customer has a public IP. To give a public IP to customer I use a pool called 'public-pool'. This pool is enough large for all my customers and more. On the another hand, I use RA...
by awacenter
Thu Jan 22, 2015 12:48 pm
Forum: General
Topic: [FEATURE REQUEST] Two Factor Authentication
Replies: 22
Views: 13845

Re: [FEATURE REQUEST] Two Factor Authentication

You realise that most sites are getting serious about this sort of security... Currently you could do this through an external Radius solution... But Mikrotik should really take notice as many others have started offering it.. I'm having trouble selling Mikrotik to Enterprises because of security p...
by awacenter
Thu Jan 22, 2015 12:44 pm
Forum: General
Topic: Feature Request: IPerf
Replies: 50
Views: 10987

Re: Feature Request: IPerf

+1. It is a good idea.
by awacenter
Thu Jan 22, 2015 12:43 pm
Forum: General
Topic: Feature request: WPS wi-fi connection
Replies: 11
Views: 8864

Re: Feature request: WPS wi-fi connection

WPS is insecure. I donot recommend its use.
It is a special case of WPA,
by awacenter
Thu Jan 15, 2015 1:04 pm
Forum: General
Topic: Feature request - Expand IPv6 Features
Replies: 16
Views: 3471

Re: Feature request - Expand IPv6 Features

+1 for

- IPv6 firewall Layer7
- Feature like hotspot in IPv6
by awacenter
Thu Jan 15, 2015 1:03 pm
Forum: General
Topic: Report "Delegated-IPv6-Prefix" attribute for PPPoE
Replies: 200
Views: 39388

Re: Report "Delegated-IPv6-Prefix" attribute for PPPoE

+1 PPPoE IPv6 accounting
by awacenter
Mon Dec 22, 2014 3:40 pm
Forum: Scripting
Topic: API SSL
Replies: 1
Views: 722

API SSL

Hi people,

We wrote several PHP scripts with API. It wonderfull because you can do everything.
However, I have just tried to add a SSL certificate. I does not work.

Is there any special issue or CS sign to work with a SSL certificate in API -SSL?

Thanks,

Santiago
by awacenter
Tue Dec 09, 2014 6:24 pm
Forum: General
Topic: Feature Request TR-069 CPE
Replies: 80
Views: 24798

Re: Feature Request TR-069 CPE

????
In some scenarios, I donot know how useful is this protocol.
For a WISP, I doubt it.
by awacenter
Tue Dec 09, 2014 5:55 pm
Forum: General
Topic: Support for 802.1x auth on ethernet ports
Replies: 4
Views: 2747

Re: Support for 802.1x auth on ethernet ports

I ask if there is some aim to implement this feature.
It is useful in several scenarios.
by awacenter
Thu Nov 13, 2014 12:29 pm
Forum: General
Topic: Feature request: SNMP v3 AES encryption
Replies: 6
Views: 2422

Re: Feature request: SNMP v3 AES encryption

Using 6.18 with snmpv3 and aes for some weeks now ... no problems. it is stable even if queried a lot.
robertpenz, thanks for the feedback.
I check the same with same results.
by awacenter
Thu Nov 13, 2014 12:24 pm
Forum: Forwarding Protocols
Topic: Web TV: QoS
Replies: 0
Views: 918

Web TV: QoS

Hi people, Recently I realised that there is an increase of web tv devices. I know applications of the web tv use streaming method. Streaming uses 80 and 443 ports, very normal ones and I do not know to differenciate this traffic and the browser one. Any idea which can help me to improve to watching...
by awacenter
Tue Oct 14, 2014 10:59 am
Forum: General
Topic: Possible bug in login pages attributes using https
Replies: 0
Views: 610

Possible bug in login pages attributes using https

Hi guys, I have several years using hotspots in MT with SSL certificates in hotspot service. However, now I realised that the following attributes donot have https link-logout link-status But link-login-only attribute has the correct prefix https. Of course, I can detect if there is a SSL certificat...
by awacenter
Fri Sep 05, 2014 11:23 am
Forum: General
Topic: Support for 802.1x auth on ethernet ports
Replies: 4
Views: 2747

Re: Support for 802.1x auth on ethernet ports

I am very keen on this topic too.

HaPe, did you realize the issue we are discussing in thread http://forum.mikrotik.com/viewtopic.php?f=1&t=88687?
by awacenter
Tue Sep 02, 2014 11:27 am
Forum: Scripting
Topic: Script or MT configuracion
Replies: 0
Views: 475

Script or MT configuracion

Hi everyone, I think it is the correct forum instead of http://forum.mikrotik.com/viewforum.php?f=14 . My scenario is I have several PPPoE servers in several Datacenters and I have a unique RADIUS server to authenticate the pppoe clients. It works fine. As in all networks, there are some pppoe clien...
by awacenter
Mon Sep 01, 2014 2:25 pm
Forum: General
Topic: Feature Request: adding RADIUS atributtes in 802.1x
Replies: 2
Views: 1874

Feature Request: adding RADIUS atributtes in 802.1x

Hi everybody, We have just finish the testing with 802.1x via AAA server in one of my hotspots (ROS 6.18) two week ago and realized that the authenticacion was correct, but the accounting packet does not have the Calling-Station-Id attribute and Called-Station-Id attribute *Acct-Request Example **:*...
by awacenter
Thu Aug 14, 2014 10:13 am
Forum: RouterBOARD hardware
Topic: Building design: insufficient signal
Replies: 5
Views: 1214

Re: Building design: insufficient signal

Thanks for the answer.
The low-power mode has to be in our ming when design camping areas or hotels. Customer have to listen the nearest AP, not all.
by awacenter
Wed Aug 13, 2014 11:25 am
Forum: Wireless Networking
Topic: https redirect issue
Replies: 12
Views: 15376

Re: https redirect issue

This is a money issue. For my experience in MikroTik hotspot service, not all SSL certificates works fine. it depends of the Certificate Authoroty. There ara Level 1 to Level 3 or more. CA Level 1 (wellknown companies such as verysign, GeoTrust...) certificates are in almost all user devices. There ...
by awacenter
Wed Aug 13, 2014 11:13 am
Forum: Wireless Networking
Topic: Wireless AP RADIUS problem
Replies: 5
Views: 2037

802.1x accounting problem. Lack of data in Acct-Request inRA

Hi, I test repeatly the authentication of my tablet and in my freeradius DB does not appear the MAC addresd of my tablet. In the previous post, we attach one Accounting packet for the wireless accounting. I think it is necessary to depuerate the accouting request that MT device sends to RADIUS serve...
by awacenter
Wed Aug 13, 2014 11:02 am
Forum: RouterBOARD hardware
Topic: Building design: insufficient signal
Replies: 5
Views: 1214

Re: Building design: insufficient signal

Hi rextended, Is it a good solution install a flat panel inside of a building to give coberage to the rooms? I was thinking about installing GrooveA 52HPn with and 5-10 dB anthen. However, this is ugly for a hotel. My goal is use the CAP manager, so I want all devives have ROS. Thanks, Santiago
by awacenter
Tue Aug 12, 2014 12:34 pm
Forum: RouterBOARD hardware
Topic: Building design: insufficient signal
Replies: 5
Views: 1214

Building design: insufficient signal

Hi, I am looking for a good ROS device with a good wireless power. My goal is install these devices inside the several floors of a building. I want a solution based in Mikrotik. In the past, I used to use a RB532 with a extern 5dB anthen. Now I tried the RB951Ui-2HnD and other products, but the sign...
by awacenter
Mon Aug 11, 2014 3:15 pm
Forum: Wireless Networking
Topic: Wireless AP RADIUS problem
Replies: 5
Views: 2037

Re: Wireless AP RADIUS problem

Support Mikrotik said: Called-station-id and calling-station-id are used only in access-request attributes. This is not really true because in MT hotspot service, the accounting works fine. Called-station-id and calling-station-id attributes are normally stored in the database using Accounting Reque...
by awacenter
Thu Aug 07, 2014 11:39 am
Forum: Wireless Networking
Topic: Wireless AP RADIUS problem
Replies: 5
Views: 2037

Re: Wireless AP RADIUS problem

Cleaver, I sent an email to support@mikrotik.com.
We wait their response. :)
by awacenter
Thu Aug 07, 2014 10:49 am
Forum: Wireless Networking
Topic: Poll: Wireless network in a Camping. Same or diferent SSID?
Replies: 1
Views: 577

Poll: Wireless network in a Camping. Same or diferent SSID?

Hi everyone, We have developing wireless networks from several years, but my partners and I never arrivives a final decision about if it is better that all AP's in a camping AREA have the same SSID or if each one has a different one. If SAME SSID, then all customer know which is your company SSID, s...
by awacenter
Tue Jul 29, 2014 1:32 pm
Forum: Wireless Networking
Topic: Wireless AP RADIUS problem
Replies: 5
Views: 2037

Re: Wireless AP RADIUS problem

Hi cleaver In the wireless authenticacion you are working in layer 2 of OSI model http://en.wikipedia.org/wiki/OSI_model . In this layer, there is no IP address but It is suppossed that there is a MAC address. And the accounting request has to represent which MAC produced the successfull authenticat...
by awacenter
Fri Jul 18, 2014 12:52 pm
Forum: General
Topic: Feature request: IPv6 hotspot
Replies: 2
Views: 1514

Re: Feature request: IPv6 hotspot

Actually it is the same. I supposed that I have to provide an IP address to a client or an IP based in his MAC address.
Depends on the Mikrotik team implement the hotspot service in IPv6.
I want that the user authenticates in a web login page in order to have full access to Internet.
by awacenter
Thu Jul 17, 2014 2:31 pm
Forum: General
Topic: Feature request: IPv6 hotspot
Replies: 2
Views: 1514

Feature request: IPv6 hotspot

Hi everybody,

A simple question; is it planed to implement the hotspot service for the IPv6 module?
My question follows the idea of / ip hotspot service. Instead of a hotspot service gives ipv4 addresses, the customer address is a IPv6 prefix. Is it possible?
Thanks,
Santiago
by awacenter
Thu Jul 10, 2014 10:24 am
Forum: The Dude
Topic: The Dude is dead. Move on.
Replies: 106
Views: 36454

Re: The Dude is dead. Move on.

To have a proffesional licence as you said it is a good option.
by awacenter
Thu Jul 10, 2014 9:44 am
Forum: General
Topic: Feature request: SNMP v3 AES encryption
Replies: 6
Views: 2422

Re: Feature request: SNMP v3 AES encryption

Thanks, I will test.
by awacenter
Fri Jul 04, 2014 11:19 am
Forum: General
Topic: Feature request: SNMP v3 AES encryption
Replies: 6
Views: 2422

Re: Feature request: SNMP v3 AES encryption

That's right.
If I update all my devices (>1000) into SNMPv3 with DES, it would wonderfull. However, it is a hard task, but necessary.
by awacenter
Thu Jul 03, 2014 3:35 pm
Forum: General
Topic: Feature request: SNMP v3 AES encryption
Replies: 6
Views: 2422

Feature request: SNMP v3 AES encryption

Hi guys, I am developing a web-based tool in PHP to ask information to MT. We have several Nagios server checking my ISP network. We usually set SNMP version 1, which is very unsecure. In this new application I realize that PHP support AES encryption in the snmpget request. Is is posible that ros le...
by awacenter
Thu Jul 03, 2014 2:29 pm
Forum: General
Topic: SSL certificates in 6.13 and higher
Replies: 0
Views: 836

SSL certificates in 6.13 and higher

Hi guys, WE are used to have a SSL certificate in the hotspot service in order to comply with WISPr with my WISP roaming pathners. Recently my team configure a RB951 with ros6.13 and the certificate configuration got more complex. In prior versions, the process was click import button in the certifi...
by awacenter
Mon Jun 30, 2014 1:46 pm
Forum: General
Topic: PPPoE server with RADIUS, how to add IPv6
Replies: 11
Views: 4936

Re: PPPoE server with RADIUS, how to add IPv6

Hi, All my customers have a CPE with PPPoE client in IPv4. Months ago I test vary carefully with a IPv6 addressing in order to asign IPv6 address to my CPE. Tests works fine if all devices talk IPv6. In some cases, I have seen that some router clients have to sever IPv4 DHCP. However, I donot know h...
by awacenter
Fri Jun 27, 2014 1:28 pm
Forum: Forwarding Protocols
Topic: WE NEED EIGRP
Replies: 21
Views: 9438

Re: WE NEED EIGRP

I think EIGRP is old-fashioned routing protocol.
OSPF scales better and has more posibilities.

I am CCNA and CCNP, I and I work currenly woth Cisco products.
by awacenter
Fri Jun 20, 2014 10:41 am
Forum: General
Topic: WAN in IPv6 and hotspot users in IPv4
Replies: 1
Views: 550

WAN in IPv6 and hotspot users in IPv4

Good morning, After reading the topic http://forum.mikrotik.com/viewtopic.php?f=2&t=86204 , I have one doubt. I know and I verify that MT works fine with IPv6 (I have some servers with IPv6 addressing), but I cannot achive a correct configuration in a hotspot when I would have an IPv6 address in WAN...
by awacenter
Fri Jun 20, 2014 10:30 am
Forum: General
Topic: VoIP/SIP help with QoS
Replies: 5
Views: 2202

Re: VoIP/SIP help with QoS

Yuo have to use firewall mangle rules and queues. First of all, identify the type of traffic using magle. but import the SSL7 signs fromhttp://www.mikrotik.com/download/l7-protos.rsc In this example, My output interface is WLAN and my LAN is in interface ether1. /ip firewall mangle add action=mark-c...
by awacenter
Mon May 19, 2014 9:55 am
Forum: General
Topic: NTP: time between ntp requests
Replies: 3
Views: 623

Re: NTP: time between ntp requests

Hello, not possible unless scripts are used to turn on/off ntp client. If these routers on which you want to minimize traffic are in your local network why use a local ntp server that is set up on one of your routers? Then only this one router will request time from ntp servers on wan side and all ...
by awacenter
Fri May 16, 2014 10:50 am
Forum: General
Topic: ipv6 nat in routeros
Replies: 6
Views: 4515

Re: ipv6 nat in routeros

Mikrotik uses kernel 3.3.5

I seriously doubt they will update that kernel version significantly until they release mikrotik 7.x
Do you think this feature will be implementing the next MikroTik release 7.x ?
by awacenter
Fri May 16, 2014 10:46 am
Forum: General
Topic: NTP: time between ntp requests
Replies: 3
Views: 623

Re: NTP: time between ntp requests

Actually is not possible to change the default embedded value of 3600 seconds (if I remember well).

Ask support@mikrotik.com for that features.
I sent my question to Mikrotik support.
I would like not to use scripting, otherwise I am complicating the configuration.
by awacenter
Thu May 15, 2014 3:15 pm
Forum: General
Topic: Freeradius Session-Timeout
Replies: 11
Views: 6937

Re: Freeradius Session-Timeout

Be aware with radius attributes! Not all radius attributes are supported by MikroçTik. Check the attributes in the wiki in Radius client. Verify in PPP connections the 'Idle-Timeout' is supported. I think that it is not supported. I am sure that 'Session-Timeout' attribute works. You can use check a...
by awacenter
Tue May 13, 2014 1:28 pm
Forum: General
Topic: NTP: time between ntp requests
Replies: 3
Views: 623

NTP: time between ntp requests

Hi, I read the WIKI documentacion and I do not find any way to know when a ntp client launches a ntp request. Yes, it is true that the SNTP option shows when it is the time when this device is going to request to NTP server. What I want is control the time when a ntp client launches a ntp request. F...
by awacenter
Tue May 13, 2014 12:34 pm
Forum: General
Topic: Disconnected HotSpot Users
Replies: 6
Views: 1263

Re: Disconnected HotSpot Users

May be your problem was the Idle-Timeout attribute in the user profile. There is a default value. I recommend you to increase this value.

In hotpost instance there is a attrubute keep-alive. It triggers when a username is disconnected from your networks. Play with this value too.
by awacenter
Tue May 13, 2014 12:29 pm
Forum: General
Topic: Protecting against public IP abuse
Replies: 5
Views: 853

Re: Protecting against public IP abuse

Hi lz1dsb,
The things are easier! Get up a PPPoE server and it provides a IP from a ip pool. Let's chek the WIKI.

Santiago
by awacenter
Mon Nov 25, 2013 3:10 pm
Forum: Wireless Networking
Topic: Hotspot Lan bypass
Replies: 4
Views: 3244

Re: Hotspot Lan bypass

So, In that case you can use a walled garden ip.
I understand you hotspot users have to access to a server 192.168.20.112/113.

From the hotspot side try: ping 192.168.20.112. There is no problem to access.
by awacenter
Mon Nov 25, 2013 12:29 pm
Forum: Wireless Networking
Topic: Hotspot Lan bypass
Replies: 4
Views: 3244

Re: Hotspot Lan bypass

Try /ip hotspot ip-bindings
by awacenter
Mon Nov 25, 2013 9:24 am
Forum: Wireless Networking
Topic: IPv6 in WAN interface and IPv4 in LAN interface
Replies: 3
Views: 2317

Re: IPv6 in WAN interface and IPv4 in LAN interface

Can I have a WAN interfaz in IPv6 mode and LAN interface in IPv4 mode?
IT is suppossed there is a masquerade action for LAN ineterface 192.168.2.0/24.
by awacenter
Thu Nov 21, 2013 10:41 am
Forum: Wireless Networking
Topic: IPv6 in WAN interface and IPv4 in LAN interface
Replies: 3
Views: 2317

IPv6 in WAN interface and IPv4 in LAN interface

Hi everyone, All my customers have public IPv4 address. They have a router with: * a public IPv4 in WAN interface via PPPoE (1.2.3.0/24) * a ipv4 DHCP server in LAN interface (192.168.2.0/24) I have an IPv6 prefix assigned by my wholesale provider. Can I change my PPPoE pool in the PPPoE server from...
by awacenter
Tue Nov 05, 2013 11:09 am
Forum: General
Topic: ipv6 nat in routeros
Replies: 6
Views: 4515

Re: ipv6 nat in routeros

I think Ipv6 NAT is necessary for activate the hotspot service using IPv6 addresses.
Moreover, it some networks it is userfull to net map an IPv4 LAN address to IPv6 address (in SOHO).
by awacenter
Thu Oct 31, 2013 9:56 am
Forum: General
Topic: Problems with CRL
Replies: 0
Views: 490

Problems with CRL

Hi everybody,

Since I upgraded my RB532 to ROS 6.4 I have the following error messages in the log.
In previous versions there wasnot any message when I import SSL certificates.

Sincerely,
Santiago
by awacenter
Wed Aug 28, 2013 10:21 am
Forum: General
Topic: IPv6 protocol in hotspot service
Replies: 0
Views: 682

IPv6 protocol in hotspot service

Good afternoon, One of my main bussinnes is install and mantain the WIFI Zones in the East Coast of Spain and we had install lot of hotels and campings using MikroTik OS as user manager. It is well known the problem of lack of IPv6 addresses. Now I have a several IPv6 ranges and I want to implent fo...
by awacenter
Tue Aug 27, 2013 9:29 am
Forum: General
Topic: HotSpot Vs PPPoE using Prepaid Cards
Replies: 2
Views: 1395

Re: HotSpot Vs PPPoE using Prepaid Cards

There is no problem becuase you can have service hotspot and a PPPoE server in the same interface.
You can use the same user accounts adding the necesary PPP attributes.

I have several user manager working with this configurartion and it works fine.

Santiago
by awacenter
Thu Aug 22, 2013 7:49 pm
Forum: General
Topic: IPv6 protocol in hotspot service
Replies: 0
Views: 381

IPv6 protocol in hotspot service

Good afternoon, One of my main bussinnes is install and mantain the WIFI Zones in the East Coast of Spain and we had install lot of hotels and campings using MikroTik OS as user manager. It is well known the problem of lack of IPv6 addresses. Now I have a several IPv6 ranges and I want to implent fo...
by awacenter
Fri May 31, 2013 3:01 pm
Forum: General
Topic: PPPoE encryption via RADIUS
Replies: 2
Views: 853

Re: PPPoE encryption via RADIUS

I do not use the default-encryption because I have to differenciate user types. some of my customers have an old-fashioned device which not support encryption. all my PPPoE users are in a RADIUS server accounts. So I can distinguish if I use or not use encryption in the RADIUS account. Can I configu...
by awacenter
Wed May 29, 2013 1:43 pm
Forum: General
Topic: PPPoE encryption via RADIUS
Replies: 2
Views: 853

PPPoE encryption via RADIUS

Hi, My pppoe server service uses default profile (at the moment I do NOT want to use default-encryption profile). AAA server is actived. In the client side, my pppoe client has user/pass and default profile. this scenario without encryption works fine. I am trying to encrypt my PPPoE Sessions using ...
by awacenter
Wed May 23, 2012 2:43 pm
Forum: Wireless Networking
Topic: MTU on PPP-EoIP-PPPoE setup
Replies: 1
Views: 2765

MTU on PPP-EoIP-PPPoE setup

Hi forum! I come to you 'cause I'm trying to figure out what the mtu on a super-tunnelized setup should be. MTU between brackets: - ENCAPSULATION LEVEL RouterBoard1 -------------------- RouterBoard2 Ethernet (1500) ------------------- Ethernet (1500) PPP (1460) ------------------------ PPP (1460) Eo...
by awacenter
Thu Mar 29, 2012 3:00 pm
Forum: The Dude
Topic: Change the logo on the web werver
Replies: 0
Views: 1214

Change the logo on the web werver

I have a Dude server using the web access, but I want to change the logo in the login page: http://img18.imageshack.us/img18/396/toplogoasdasd.jpg The name of the image is "toplogo.jpg", but when I search for it in my server (Win XP), I can't find anything related. Anybody know where to find this fi...
by awacenter
Thu Mar 29, 2012 2:29 pm
Forum: General
Topic: Question regarding branding
Replies: 2
Views: 1562

Re: Question regarding branding

2) What does the toplogo.jpg in the webcfg folder actually change. In the poor describtion it says the web-config logo. The only web-config logo I know is the one in webfig (top right corner), but that doesn't get changed. This file changes the logo that appears in the web acces of the Dude: http:/...
by awacenter
Wed Dec 21, 2011 9:39 am
Forum: General
Topic: WISPr implementation in Mikrotik doesnot work in Nintendo3DS
Replies: 3
Views: 957

Re: WISPr implementation in Mikrotik doesnot work in Nintend

I did it.
But thanks for the advice.
by awacenter
Tue Dec 20, 2011 1:31 pm
Forum: General
Topic: WISPr implementation in Mikrotik doesnot work in Nintendo3DS
Replies: 3
Views: 957

WISPr implementation in Mikrotik doesnot work in Nintendo3DS

Hi, I am doing the integration with Nintendo in order to all his Nintendo3DS can authenticate in my MikroTik hotspots. The new Nintendo 3DS firmware implements a WISPr client to connect to Internet. However, it fails. Nintendo people and we analyse the problem and we realize that Mikrotik access poi...
by awacenter
Wed Sep 28, 2011 9:45 am
Forum: General
Topic: Multicast strikes back
Replies: 5
Views: 840

Re: Multicast strikes back

It finally worked!! The problem was the TTL of the VLC Server which was set up to -1 so it takes the SO default, probably 1, teherfore the packets were being discarded on the router.

Regards and thanks for your help.
Nando.
by awacenter
Sun Sep 25, 2011 12:28 pm
Forum: General
Topic: Multicast strikes back
Replies: 5
Views: 840

Re: Multicast strikes back

Hi again!

I just replaced routerosv3.30 by a new routerosv5.7 and happens exactly the same. I attached a shot.

Thanks!

Image
by awacenter
Sun Sep 25, 2011 10:44 am
Forum: General
Topic: Multicast strikes back
Replies: 5
Views: 840

Re: Multicast strikes back

Thanks for answering!!

Sorry I sais v3.3 but I meant 3.30. I'll try to upgrade to v5 though. So, do you think my configuration is fine?

Thanks again!
by awacenter
Sat Sep 24, 2011 1:04 pm
Forum: General
Topic: Multicast strikes back
Replies: 5
Views: 840

Multicast strikes back

Hi forum! I just get into multicasting on routeros so I have limited knowledge. I am trying to set up such simple network: VLC SERVER (rtp://224.0.1.20:5004) ----- VLC CLIENT [Works fine!!] VLC SERVER (rtp://224.0.1.20:5004) ----- [ether1]ROUTEROSv3.3[ether2] ----- VLC CLIENT [BADDD!!!] VLC SERVER I...
by awacenter
Thu Sep 22, 2011 11:26 am
Forum: General
Topic: Release a IP from PPPoE server pool
Replies: 1
Views: 461

Release a IP from PPPoE server pool

Hi , I have a problem with some of my PPPoE servers. The pppoe server profile has a ip pool in the <remote address> attribute in the profile. This IP pool has several public IP's. It happens the PPPoE server works fine until the ip pool is run out. I check the PPP active connections and the number o...
by awacenter
Fri Aug 26, 2011 10:09 am
Forum: General
Topic: Identifying 'bridge port' in hotspot service
Replies: 4
Views: 750

Re: Identifying 'bridge port' in hotspot service

From the beggining I am using ros5.6. I have spent almost a week with the tests and I have some conclusions. First of all, in my topology I create two ( or more) VLAN's over a ether2. Each VLAN has a tag (numeric value) that the CISCO switch and MT shared. So the main problem is one VLAN can be in a...
by awacenter
Thu Aug 25, 2011 1:15 pm
Forum: General
Topic: Identifying 'bridge port' in hotspot service
Replies: 4
Views: 750

Identifying 'bridge port' in hotspot service

Hi everybody, It is long time I work with MT, but I have a question. My case I have the folowing devices: 1) a CISCO Catalyst SWITCH 2) a MT with hotspot service connected to the CISCO switch. 3) TwoTP-LINK AP connected to the CISCO switch called AP1 and AP2 My MT has a wireless card, so I configure...
by awacenter
Thu Jun 09, 2011 3:25 pm
Forum: General
Topic: L2TP Tunel through specific interface
Replies: 18
Views: 5609

L2TP Tunel through specific interface

Hi forum! I have a routerOS running on x86. This router has 3 ethernet interfaces each of them connected to its own dsl multiport router. I want to set up 3 different l2tp/pptp tunnels but I want each of them to be routed through each different interface. The problem is that the remote pptp/l2tp ser...
by awacenter
Fri Apr 29, 2011 12:18 pm
Forum: General
Topic: 3G USB problems RB433UAH
Replies: 6
Views: 1230

Re: 3G USB problems RB433UAH

By the way,
[admin@MikroTik] /system resource usb> power-reset
ERROR: USB power reset not implemented on this hardware
I send the support.rif to be analysed.
by awacenter
Fri Apr 29, 2011 11:35 am
Forum: General
Topic: 3G USB problems RB433UAH
Replies: 6
Views: 1230

Re: 3G USB problems RB433UAH

I have the same issue with this routerboard : rb433UAH.

I tried with several Huaway 3G modems and ZTE modem. All hardware supported, I specifically checked.
I tried with routeros 4.17, later with 5.2 and 4.13. No successfully results.

Is it posible that rb433UAH routerboad has any issue?
by awacenter
Mon Mar 14, 2011 10:49 am
Forum: General
Topic: SFTP Problem with ros5
Replies: 1
Views: 1169

SFTP Problem with ros5

Hi, I have almost all my MK devices in ros4.x, and only one with ros5.rc11. I can upload files via SFTP in ros4.x, bot I can upload rsc file in MK with ros5.rc11. In the log the following error message appears: ssh error expected: 50 got:90 I do not understand the error. Can you give me more informa...
by awacenter
Fri Mar 11, 2011 2:20 pm
Forum: General
Topic: 5.0rc7 ssh crashes on RB433 - bugreport?
Replies: 14
Views: 2732

Re: 5.0rc7 ssh crashes on RB433 - bugreport?

I detect the same error in one of my Mikrotik's.
I can not transfer files via SFTP.
by awacenter
Fri Jan 21, 2011 12:35 pm
Forum: RouterBOARD hardware
Topic: how to downgrade from 3.10 to 2.9.51 on 133
Replies: 17
Views: 6549

Re: how to downgrade from 3.10 to 2.9.51 on 133

Today I did some more exhaustive test with rb112. Originaly rb100 had ros2.9.51. Later I was upgrading to several versions of ros3.x and test the CPU usage. ros3.24 and ros3.25 are unstable and the upper ROS versions are too heavy for the rb100. Finally I decided to use ros3.23, it is cheaper in CPU...
by awacenter
Thu Jan 20, 2011 12:58 pm
Forum: RouterBOARD hardware
Topic: how to downgrade from 3.10 to 2.9.51 on 133
Replies: 17
Views: 6549

Re: how to downgrade from 3.10 to 2.9.51 on 133

I have a lots of RB100 series and when I upgrade from 2.9.x --> 3.30 -> 4.16, I have CPU 100%.
So my rb133 will always stay in 2.9.51.
I realize that routerboad 100 series are old-fashioned devices.
by awacenter
Wed Jan 05, 2011 11:37 am
Forum: General
Topic: Is it necessary disable pppoe-client in client Device?
Replies: 1
Views: 450

Is it necessary disable pppoe-client in client Device?

Hi everybody, We offer Internet service using a wireless AP. I have a central Mikrotik with a PPPoE-server. My clients have its own Mikrotik CPE with a pppoe-client. If a client does not pay the Internet service, we disable his pppoe account in my central server. In one PPPoE-server I can have 150-2...
by awacenter
Mon Sep 06, 2010 7:56 pm
Forum: Wireless Networking
Topic: 802.11n
Replies: 939
Views: 287007

Re: 802.11n

Sorry I didn't mention we have 18 meters towers at both places. My email: ingenieria@grupoawa.es Tons of thanks. Hey Newbie, Thanks for your quick response. The antennas might not be well-aligned but still I think bandwidth is too poor for the signal got. Anyhow we'll be pleased you could send those...
by awacenter
Mon Sep 06, 2010 7:27 pm
Forum: Wireless Networking
Topic: 802.11n
Replies: 939
Views: 287007

Re: 802.11n

Hey Newbie, Thanks for your quick response. The antennas might not be well-aligned but still I think bandwidth is too poor for the signal got. Anyhow we'll be pleased you could send those info to us. Link placemarks below: BASE-Lat: 39.519716° BASE-Long: -0.466781° STATION-Lat: 39.381389° STATION-Lo...
by awacenter
Mon Sep 06, 2010 6:04 pm
Forum: Wireless Networking
Topic: 802.11n
Replies: 939
Views: 287007

Re: 802.11n

Hi forum! We have been performing some tests with 802.11n+R52n cards and although we got excelent results when short distances and good (very good) signals, as the link gets longer and poorer N behaves quite worse than simple A (at least on 5GHz). This is the scenario: 17km link BASE: RB433 (v4.10) ...
by awacenter
Mon May 17, 2010 3:07 pm
Forum: Wireless Networking
Topic: VTUN & RouterOS
Replies: 0
Views: 678

VTUN & RouterOS

Hey forum!! I have certain VTUN Server and I have certain RouterOS board. I wonder how to build up a tunnel between them, no matter the protocol. VTUN supports ppp an so RouterOS but I have not been able of making them understand each other. Don't even know if that is possible. Any help is welcome. ...
by awacenter
Thu Dec 11, 2008 1:43 pm
Forum: General
Topic: accounting bug in Mikrotik‏
Replies: 2
Views: 644

Re: accounting bug in Mikrotik‏

What I detect is sometimes the NAS (mikrotik device) sends a incorrect Stop packet (with a stop time and with a void terminate cause) instead of a ALIVE packet.
Someone more detect this behaviour in a Mikrotik?
by awacenter
Thu Dec 11, 2008 10:41 am
Forum: General
Topic: accounting bug in Mikrotik‏
Replies: 2
Views: 644

accounting bug in Mikrotik‏

Hi, I am working with freeradius and mikrotik gateway for a long time, but recently I detect in my PostgreSQL database, in radacct table some inconsistencies. First af all, I say that I have the standard configuration file (postgres.sql) for accounting queries. My problem is sometimes the field acct...
by awacenter
Thu Dec 11, 2008 10:29 am
Forum: General
Topic: Error 619, connecting VPN PPTP
Replies: 3
Views: 7902

Re: Error 619, connecting VPN PPTP

Please, verify that your Internet router supports PPTP connection passthrough or your router does not have any filter for PPTP connections.
by awacenter
Mon Aug 11, 2008 1:47 pm
Forum: The User Manager
Topic: Web site login page
Replies: 0
Views: 1168

Web site login page

Hi, I use for showing login page an external web server. it normally works fine. I have an issue because after a user write his username/password in login page and he clicks in submit button, appears a NOT FOUNT page (error 404), instead of the alogin.html page. However, the user is authenticated, a...
by awacenter
Fri May 30, 2008 11:50 am
Forum: Wireless Networking
Topic: Possible Wireless Frecuencies
Replies: 3
Views: 1305

Re: Possible Wireless Frecuencies

I did a mistype. I mean bands.
I want to if MT OS can broadcasts 2.1 GHz. and 2.5 GHz. bands.
by awacenter
Thu May 29, 2008 8:46 pm
Forum: Wireless Networking
Topic: Possible Wireless Frecuencies
Replies: 3
Views: 1305

Possible Wireless Frecuencies

Hi,

I am coniguring my mikrotik for broadcast my signal in the 2.1 GHz and 2.5 GHz. band.
Is it possible to set up my wireless interface in 2.1 GHz. band or 2.5GHz. band ?

Thank you!
by awacenter
Fri Apr 25, 2008 11:09 am
Forum: Wireless Networking
Topic: how to identify the SSID in a MT with several virtuap AP's
Replies: 1
Views: 871

how to identify the SSID in a MT with several virtuap AP's

Hi, I used to use MT 2.9.x for my old hotspots, but now RB133 have instaled MT v3.x. I put all my virtual AP in the same bridge called HOTSPOT. So I configure the hotspot service by HOTSPOT interface. With the MT firmware version 2.9.x I can identify the SSID[virtual AP] by the interface-name attrib...
by awacenter
Mon Mar 10, 2008 1:47 pm
Forum: Scripting
Topic: special RADIUS hotspot accounts blocking URL
Replies: 0
Views: 967

special RADIUS hotspot accounts blocking URL

Hi, I am using RADIUS accounts in my hotspot service since three years ago. All these account have a free navigation after a successfull log in. However, my company wants to offer in the same hotspots a type of user who only connects to one specific URL. For instance, vocento1 user only can navigate...
by awacenter
Mon Mar 10, 2008 11:43 am
Forum: Scripting
Topic: backup a PPP client connection
Replies: 2
Views: 1010

Re: backup a PPP client connection

OK. I understand.
I write a script to control the VPN fall and to restore the primary VPN when primary IP answers.
Thanks!
by awacenter
Fri Mar 07, 2008 12:07 pm
Forum: Scripting
Topic: backup a PPP client connection
Replies: 2
Views: 1010

backup a PPP client connection

Hi, I have several Mikrotik PPTP/L2TP server installed in several locations. All these servers have different public IP and in different networks. I normally configure my MT devices point to one PPTP/L2TP server to stablish a VPN with a PPTP/L2TP client. I want to find a crash PPTP/L2TP server plan....
by awacenter
Thu Mar 06, 2008 11:51 am
Forum: General
Topic: PPP services backup
Replies: 1
Views: 589

PPP services backup

Hi, I have several Mikrotik PPTP/L2TP server installed in several locations. All these servers have different public IP and in different networks. I normally configure my MT devices point to one PPTP/L2TP server to stablish a VPN with a PPTP/L2TP client. I want to find a crash PPTP/L2TP server plan....
by awacenter
Thu Feb 07, 2008 11:27 am
Forum: The Dude
Topic: Showing SSID on DUDE
Replies: 0
Views: 1213

Showing SSID on DUDE

Hi everybody, i got a little problem with DUDE... i´m monitoring a wireless network and need to see the SSID of each device. At this moment i´m able to do it with links, but not with AP. For links i´m using the snmp_wireless_info() function, but it doesn´t work with AP...¿any idea? Thanks for help. ...
by awacenter
Fri Dec 14, 2007 11:57 am
Forum: General
Topic: Centralized Wall Garden
Replies: 3
Views: 915

Re: Centralized Wall Garden

FTP client is implemented in RouterOS 3.0 versions.
It is available from 'tool fetch'.
by awacenter
Fri Dec 14, 2007 11:57 am
Forum: General
Topic: Centralized Wall Garden
Replies: 3
Views: 915

Re: Centralized Wall Garden

Thanks for your quick answer. We normally launch a script from a > server for update the MT configuration in all our devices. Currently > we use rsc file to do it. > > However, I want an automatic update from mikrotik hotspot and I > explain that. > My goal is a MT device is able to change its confi...
by awacenter
Fri Dec 14, 2007 11:56 am
Forum: General
Topic: Centralized Wall Garden
Replies: 3
Views: 915

Re: Centralized Wall Garden

Unfortunately it is not possible to send these attributes via RADIUS server. > > So, you need to consider different approach for walled-garden rules. > > Probably you can create .rsc file or rules, that will match exact > > syntax for example. > > / ip hotspot walled-garden > > add dst-host=www.1.co...
by awacenter
Fri Dec 14, 2007 10:18 am
Forum: General
Topic: Centralized Wall Garden
Replies: 3
Views: 915

Centralized Wall Garden

Hi people, After installing lot of MT hotspots, now I need how to have a centraliced walled garden for 100 MT hotspots. It is because I want to have a list of forbidden URL (Parental control for children: no porno, no gambling) and I want that this list is comoon for the 100 hotspots. I can configur...
by awacenter
Mon Nov 26, 2007 3:08 pm
Forum: Scripting
Topic: Execute commands from one MT to another automatically
Replies: 0
Views: 786

Execute commands from one MT to another automatically

Hi, I have lot of MT's installed in hotels as access points and, beside of this, there is a another MT as user management in the same hotel. I have VPN to each user managemet of each hotel. Each hotspot network is a LAN. What I want is to create a script to update automaticaly my APs. It means to ac...
by awacenter
Sun Nov 11, 2007 7:31 pm
Forum: General
Topic: what is that?
Replies: 2
Views: 608

Re: what is that?

Hello,

Somebody try to connet to your MT via B-test.

You can disable this option, you can disable this option hear:
tool -> Btest Server -> settings

"tool bandwidth-server set enabled=no"

Regards
by awacenter
Tue Sep 11, 2007 3:00 pm
Forum: General
Topic: Certificates: why I need to reboot after a cert file upload
Replies: 2
Views: 501

Re: Certificates: why I need to reboot after a cert file upload

I will do.
But I advance for version prvious to 2.9.39 you have to reboot to load the certificate successfully.
by awacenter
Thu Sep 06, 2007 10:47 am
Forum: General
Topic: Certificates: why I need to reboot after a cert file upload
Replies: 2
Views: 501

Certificates: why I need to reboot after a cert file upload

Hi, I try the following feature in all MT versions. I need to have certificates for the https in hotspot service. So, I have SSL certificates (signed by a Certificate Authorizy). However, I have a problem: I upload the certificate files to MT, and I can not decrypt the certificates if previously I d...
by awacenter
Thu Sep 06, 2007 10:39 am
Forum: General
Topic: How To Create VLAN ( TAG ) ??
Replies: 2
Views: 697

Re: How To Create VLAN ( TAG ) ??

Hi,
first you have to create a bridge between wlan1 and the ether. and later you create the VLAN in this bridge.
by awacenter
Tue Jul 10, 2007 11:03 am
Forum: General
Topic: PPTP + RADIUS: Framed-Route ignored
Replies: 5
Views: 1961

Re: PPTP + RADIUS: Framed-Route ignored

Yes, of course it's supported. See the RouterOS manual at http://www.mikrotik.com/testdocs/ros/2.9/guide/aaa_radius.php For the correct format of the Framed-Route attribute see http://www.ietf.org/rfc/rfc2865.txt (Chapter 5.22) --Tom I try lot of configurations for this attribute: "22110";"Framed-R...
by awacenter
Mon Jul 09, 2007 1:45 pm
Forum: General
Topic: PPTP + RADIUS: Framed-Route ignored
Replies: 5
Views: 1961

Re: PPTP + RADIUS: Framed-Route ignored

But, what I wnat to know is if Framed-Route is supported by mikrotik. Yes or no??

If it is yes, could you give me an example? Thanks
by awacenter
Mon Jul 09, 2007 1:38 pm
Forum: General
Topic: HotSpot as Bridge
Replies: 11
Views: 1636

Re: HotSpot as Bridge

It is perfectly possible.

You have to configure hotspot service by bridge1, but be sure that DHCP server works for bridge1 too.
by awacenter
Fri Jul 06, 2007 12:11 pm
Forum: General
Topic: PPTP + RADIUS: Framed-Route ignored
Replies: 5
Views: 1961

PPTP + RADIUS: Framed-Route ignored

Hi, I achieved that my MT PPTP server autheticates a PPTP client via RADIUS. radreply table for the user 22110. "22110";Framed-Protocol";":=";"PPP" "22110";"Service-Type";":=";"Framed-User" "22110";"admin";"Framed-Compression";":=";"Van-Jacobson-TCP-IP" "22110";"Framed-IP-Address";":=";"10.200.200.2...
by awacenter
Wed Jul 04, 2007 4:56 pm
Forum: General
Topic: USB Ethernet adapters with Mikrotik???
Replies: 22
Views: 3531

Re: USB Ethernet adapters with Mikrotik???

Or use VLANs and one of these: http://www.hp.com/rnd/images/large/2524_lg.jpg (managed ethernet switch) to get you to 25 ports. I completely disagree with this solution because this kind of routers are too expensive (>400 euros) and one of VLAN problem is exactly the use of a switch. Only a few swi...
by awacenter
Tue Jul 03, 2007 6:07 pm
Forum: General
Topic: inverted RADIUS attribute [Acct-Input-Octets,Acct-Output-Oct
Replies: 1
Views: 2141

inverted RADIUS attribute [Acct-Input-Octets,Acct-Output-Oct

Hi, I use the same AAA server for all my hotspots (freeradius 1.1.6). however I have to different Acct-Output-Octets and Acct-Input-Octets values for my two types of hotspot: Mikrotik and Nomadix. I detect this isues because a roaming partner told me. I supposed: Acct-Input-Octets - bytes received f...
by awacenter
Tue Jun 19, 2007 11:32 am
Forum: General
Topic: Interesting problem with Vlan...
Replies: 3
Views: 738

Re: Interesting problem with Vlan...

I confirm this VLAN problem. I work with lot of devices and with cheap switches I had some problem to manage VLAN's
by awacenter
Mon Jun 11, 2007 2:42 pm
Forum: General
Topic: Procurve swtich and VLAN
Replies: 3
Views: 2565

Re: Procurve swtich and VLAN

In the following case: Three MT's connected to a switch (H1, AP1, AP2). Mt called H1 is a hotspot manager and in its ether1 has Internet Conection and in ether2 gives hotspot service. AP1 and AP2 are to MT with Wireless interface active to give wireless covering. AP1 and AP2 are connected to the swi...
by awacenter
Mon Jun 11, 2007 2:31 pm
Forum: General
Topic: interface spreading
Replies: 1
Views: 842

Re: interface spreading

Now I attach a network schema to clarify my problem.
Any propoursal?
by awacenter
Wed Jun 06, 2007 12:03 pm
Forum: General
Topic: interface spreading
Replies: 1
Views: 842

interface spreading

Hi, I have several hotspots installed in Spain. Lots of them are MT’s with a wireless interface, so I put hotspot service in this interface. My MT hotspot broadcasts multiSSID using VirtualAP feature. In this HOTSPOT I want to show a different login page to a user depending on which ESSID this user ...
by awacenter
Tue May 22, 2007 6:14 pm
Forum: General
Topic: Page not found after authentication
Replies: 1
Views: 509

Page not found after authentication

Hi, I normally use MT devices for all my user managers. I use weblogin page for user authenticacion and Intenetnet access. It normally works fine, however sometimes my users watch a page not found. The process is the following: - login page appears. user writes his username and password. - alogin pa...
by awacenter
Tue May 22, 2007 6:14 pm
Forum: The User Manager
Topic: Error after authentication
Replies: 1
Views: 1222

Re: Error after authentication

I think I have a mistake. This is not the correct forum.
Sorry. :roll:
by awacenter
Tue May 22, 2007 6:06 pm
Forum: The User Manager
Topic: Error after authentication
Replies: 1
Views: 1222

Error after authentication

Hi, I normally use MT devices for all my user managers. I use weblogin page for user authenticacion and Intenetnet access. It normally works fine, however sometimes my users watch a page not found. The process is the following: - login page appears. user writes his username and password. - alogin pa...
by awacenter
Mon Apr 23, 2007 11:50 am
Forum: General
Topic: Freeradius/mysql question
Replies: 2
Views: 742

Yes, it is not a MT question.

If you are newbie in freerius, forst of all, read all the documentation /doc.

And later, try in the forum: freeradius.org
by awacenter
Mon Apr 23, 2007 11:48 am
Forum: General
Topic: Web Server Problem
Replies: 5
Views: 1204

Try this where IP x.x.x.x is your public IP and ether1 is the public interface
add chain=dstnat in-interface=ether1 dst-address=x.x.x.x protocol=tcp \
dst-port=80 action=dst-nat to-addresses=192.168.0.4 to-ports=80 \
comment="Redireccion http" disabled=no
by awacenter
Mon Apr 23, 2007 11:41 am
Forum: General
Topic: RADIUS: how to send a error message from RADIUS to MT
Replies: 4
Views: 1006

has No one customize the login page froma a Centralized web server?
by awacenter
Mon Apr 16, 2007 4:30 pm
Forum: General
Topic: RADIUS: how to send a error message from RADIUS to MT
Replies: 4
Views: 1006

RADIUS: how to send a error message from RADIUS to MT

Hi people,
I use MT's and FreeRadius Server form my hotspots. How can I send a error message from my RADIUS server to my MT hotspot ?
For instance, uptime-limit message when my account has Session-Timeout = 0 (I know MT shows this message for local accounts.)

Thanks!!
by awacenter
Wed Apr 04, 2007 11:13 am
Forum: Wireless Networking
Topic: connnectors crash by water condensation
Replies: 2
Views: 732

connnectors crash by water condensation

Hi everyone, We are having such an annoying problem since a coupple of months ago. Especially it comes up in rainy regions when using outdoor boxes and routerBoard 532: enviroment humidity comes in through condensation holes, it becomes water that rustes connectors and make them unusefull. Support h...
by awacenter
Mon Feb 19, 2007 11:02 am
Forum: General
Topic: error codes from login page
Replies: 1
Views: 624

error codes from login page

Hi,
I created a MT local account and I test when this account do not have time, Mt shown an error message.

I have the login pages in my website because I do a redirection in MT login page. How can I shown this MT error message? What codes my website has to send to MT?
Thanks.
by awacenter
Tue Feb 13, 2007 6:14 pm
Forum: The User Manager
Topic: loading time of login page
Replies: 2
Views: 1536

loading time of login page

I am testing the loading time of MT login pages. I use a PIII (1GHz) and bandwidth 128/128 Kbps. I use this old-fashioned laptop because it is the worst case. Obviously, you get lower time with a PIV (3Hz). :wink: How many seconds do your browser need to load these pages in LOCAL? How many seconds d...
by awacenter
Tue Feb 13, 2007 4:00 pm
Forum: General
Topic: RADIUS timeout version 2.9.36 and upper
Replies: 8
Views: 1419

well its not about having a dedicated radius for each MT, its about having a radus for a group of MT or for a specific area.. This is the specific problem because there are topology differences. moreover, when an aacount actives the roaming service, it is necessary to add to the time to access to m...
by awacenter
Mon Feb 12, 2007 10:41 am
Forum: General
Topic: RADIUS timeout version 2.9.36 and upper
Replies: 8
Views: 1419

I have hundred ofm MT devices and I think this last solucion about having several RADIUS entries is a botch-up. Increasing radius timeout value is cleaner.
by awacenter
Mon Feb 12, 2007 10:36 am
Forum: General
Topic: RADIUS timeout version 2.9.36 and upper
Replies: 8
Views: 1419

Each one set the radius timeout as he wants, and I configure my hotspots with a hight timeout vale because I have several roaming partners who do not sometimes have a very good response in time. Moreover, for this ans other reasons a set a high timeout response in my freeradius servers. So it is not...
by awacenter
Wed Feb 07, 2007 12:59 pm
Forum: General
Topic: RADIUS timeout version 2.9.36 and upper
Replies: 8
Views: 1419

RADIUS timeout version 2.9.36 and upper

Hi,
we have lot of hotspots and I continually update them. However, I am careful since v2.9.36 because of the limit of timeout in /radius.

Now the maximum value is 3000 while in previous versions this value could be bigger (I need almost 8000).

Does someone know when this bug was repaired?
by awacenter
Thu Dec 14, 2006 12:12 pm
Forum: Scripting
Topic: SSL certificate automatization
Replies: 0
Views: 1160

SSL certificate automatization

Hi people, I am creating script to update all my MT. I export all MT configuration and I create a rsc file. Obviously, I must modify this file before executing in another MT because some command lines do not work too much fine. So, now I hava the following problem to insert my SSL certificates. Afte...
by awacenter
Mon Dec 04, 2006 10:57 am
Forum: General
Topic: GIS/WISPr xml pages for hotspot smart client support 2.9.36
Replies: 4
Views: 2382

I work with BOINGO and this week I am goning to integrate with iPass. But, how did you solve the problem of SSL support? How did you put in all your hotspot a SSL certificate? I solve this problem because I configure all my mt with the same domain in the hotspot interface. So I bought the SSL cert f...
by awacenter
Mon Dec 04, 2006 10:31 am
Forum: General
Topic: Radius Timeout
Replies: 10
Views: 2854

I test lot of cases about a slow conexion (because of weather conditions, latency, ...), but I remark if you use a DB attached to radius server, this DB can be very slow, too. It happens because the DB has a hight load or a lack of memory of the machine. Obviously, the unique solucion to mt is to wa...
by awacenter
Mon Nov 20, 2006 12:15 pm
Forum: General
Topic: FQDN support
Replies: 1
Views: 828

FQDN support

Hi,
Does Mt support FQDN in the wall garden??
I have to autenticate all the domains and IP under a roaming partner FQDN pass.car.boingo.com.
Obvously, I did the test and it failed.
Thanks!!!
by awacenter
Mon Nov 20, 2006 11:32 am
Forum: General
Topic: Each realm has its own RADIUS server
Replies: 6
Views: 3346

You best and easiest to manage solution here is your own radius server, and proxy the various realms to the client's radius server. This also means you have SOME form of control over what they can/cannot configure via the means of Attributes on your network (which can be very serious stuff)... I do...
by awacenter
Thu Nov 16, 2006 2:18 pm
Forum: General
Topic: Each realm has its own RADIUS server
Replies: 6
Views: 3346

Each realm has its own RADIUS server

Hi, I have lot of MT in Europe. I do roaming with others roaming partners since more than 2 years ago. Now, I have a Virtual Operator who will have its own SSID in my MTs. This Virtual Oper. has its own RADIUS. I do not want to use my own RADIUS. I identied this operator with its domain and I put th...
by awacenter
Tue Oct 31, 2006 5:53 pm
Forum: General
Topic: RADIUS attributes: Tunneling
Replies: 0
Views: 701

RADIUS attributes: Tunneling

Hi,

I have in my hand the last list fo RADIUS attributes supported by MT.
I can not see Tunnel Protocol Support attributes (http://www.freeradius.org/rfc/rfc2867.html).
Well, but my quiestion is if the MT can stablish a tunnel automatically with a user connect to the hotspot?
Thanks.
by awacenter
Mon Oct 16, 2006 12:51 pm
Forum: Wireless Networking
Topic: Wireless encription
Replies: 2
Views: 808

It will encrypt client authentication in HotSpot (RADIUS).
What I want to know if there is any method to cypher all comunicactions between Mt and the client using a RADIUS attribute. IF it so, what is the name of this attribute?
by awacenter
Wed Oct 11, 2006 1:43 pm
Forum: Wireless Networking
Topic: Wireless encription
Replies: 2
Views: 808

Wireless encription

Hi people, If I put the hotspot DN loginuser.akiwifi.es in all my hotspots (>500) and buy a SSL certificate for this domain. And later I install it in my hotspots and I configure the hotspots profile to be secured via https. Do I cipher all communications between the AP MT and a client or only ciphe...
by awacenter
Wed Oct 11, 2006 1:41 pm
Forum: Wireless Networking
Topic: Wireless Key
Replies: 0
Views: 561

Wireless Key

Hi people, I use several years using your devices and I am very gratefull with us. I installed lot of hotspots in Span and in all hotspots I configure the wireless interface as an open system. Obviously, I install a SSL certificate for my login page because I redirect to my login web server to inser...
by awacenter
Mon Sep 25, 2006 10:13 am
Forum: General
Topic: Wall Garden under request
Replies: 3
Views: 1128

Re: export

set it up on one system then export walled gardern to a file then importit on the others
I know I can update my MT wall garden via SSH. But I want to find another solution. :cry:
by awacenter
Fri Sep 22, 2006 10:19 am
Forum: General
Topic: Wall Garden under request
Replies: 3
Views: 1128

Wall Garden under request

Hi people, I use MT for serveral years and I have lot of hotspots installed. I put advertisement in my login page and I let a user visit the web page of those companies before this user authenticates with an account. As I have lot of hotspots, it is a tedious task to enter a new domain in <b>hotspot...
by awacenter
Fri Sep 01, 2006 11:09 am
Forum: General
Topic: RADIUS accounts in a MT reboot
Replies: 1
Views: 1002

RADIUS accounts in a MT reboot

Hi people, My question is the following: I have a MT with several connected users using RADIUS authentication. I do accounting of users using a DBMS. This day I have to reboot this MT owing to maintenance. What does it happens with these RADIUS users? Obviously the user are disconnected, but Does MT...
by awacenter
Mon Jul 31, 2006 10:27 am
Forum: General
Topic: Disconnections do not registered in DB
Replies: 0
Views: 690

Disconnections do not registered in DB

Hi people, We use your products from more than one year and I think I have a little problem. I use MT and a freeradius server with a Postgres DB. Monthly I check my radacct table, I realized I have many entries with acctstoptime in NULL value. It is normal in connected users, however when I have fou...
by awacenter
Tue Jun 27, 2006 9:18 am
Forum: General
Topic: Forgotten RADIUS attributes
Replies: 3
Views: 983

I received the following notification from MT support
WIPSr-Location-ID, WISPr-Location-Name attributes support will be added to the next MikroTik RouterOS version.
by awacenter
Thu Jun 22, 2006 9:19 am
Forum: General
Topic: Forgotten RADIUS attributes
Replies: 3
Views: 983

I did it. I sent an email to Mikrotik company asking for theses attributes. Actually, these sttribute are necesary for IRAP standards, so I don't undertand why the do not implemente yet.
by awacenter
Wed Jun 21, 2006 6:18 pm
Forum: General
Topic: Forgotten RADIUS attributes
Replies: 3
Views: 983

Forgotten RADIUS attributes

Well, we have a roaming agreement with a company. It happens they required me some RADIUS attributes, But, specifically, I need: + Location-ID + Location-Name I realized in your manual and MT dictionary file do not appear. What can I do?? Do you plan add then in some future version. As it is not my ...
by awacenter
Thu Apr 27, 2006 12:58 pm
Forum: Wireless Networking
Topic: Smart Client: user/passwd sent by GET
Replies: 0
Views: 641

Smart Client: user/passwd sent by GET

Hi people, Here I send us an example of a smart client, WeRoam one. A smart client sends the data via GET method instead of POST. Actually a smart client is installed in an user laptop as a resident program. So when the user switch on his laptop, this program scans the wireless networks with the goa...
by awacenter
Mon Apr 24, 2006 7:18 pm
Forum: Wireless Networking
Topic: Smart Client
Replies: 0
Views: 596

Smart Client

Hi people, I use MT for years, but now I did some roaming agreements and I have a configuration doubt. Does MT OS support smart client??? And if it is so, what do I must configure in my MT??? This problem suggested me when my roaming partner sent me a SW client to connect my laptop to my ESSID and t...
by awacenter
Mon Mar 27, 2006 11:17 am
Forum: General
Topic: Roamming and Proxy Radius
Replies: 0
Views: 546

Roamming and Proxy Radius

Dear Sir, I do roaming with several companies (WeRoam, Trustive…), however I have a doub. In my landing page, a user can choose the service provider (WeRoam, Trustive…) in a HTML select. So for the same domain (example: domain.com) and both companies have authenticate this realm, how can I distingui...
by awacenter
Mon Mar 06, 2006 7:18 pm
Forum: Wireless Networking
Topic: EAP-TTLS
Replies: 1
Views: 1046

EAP-TTLS

Hi people, I am trying to setup EAP protocols. Especifically, EAP-TTLS agains my RADIUS Server. Does MT support EAP protocols in its wireless interface? If I put a Orinoco AP-4000 which supports EAP protocols in suscriber interface of MT, how can my AP-4000 access to the radius servir located in Int...
by awacenter
Fri Feb 24, 2006 12:18 pm
Forum: General
Topic: Radius MAC Authentication
Replies: 2
Views: 621

The password of MAC auth accounts is blank.´

You must discober which is the real PUBLIC IP of your MT hotspot.
by awacenter
Tue Feb 21, 2006 4:55 pm
Forum: General
Topic: VirtualAPs and multiple servet pages: one for echa VirtualAP
Replies: 0
Views: 454

VirtualAPs and multiple servet pages: one for echa VirtualAP

Hi people, On one hand, I have several Mt v2.9.11 in Spain. In the another hand, I have mutiple Nomadix2100 hotspot-in-a-box. In both devices I can have multiple SSIDs by wireless interface. However, Nomadix can let me configure the login page easier then MT because it has the ESSID variable. It mea...
by awacenter
Thu Jan 05, 2006 1:33 pm
Forum: General
Topic: SNMP write mode
Replies: 1
Views: 926

SNMP write mode

Simple Question:
In MT version 2.9.10, is SNMP write mode support?

It is used for changing parameters such as adding a new ESSID or changing a wall garden entry.
by awacenter
Thu Jan 05, 2006 12:50 pm
Forum: Wireless Networking
Topic: wall garden limit
Replies: 0
Views: 880

wall garden limit

Hi people, I have a MT v2.9.10 device. My MT has a wireless interface with several Virtual APs. Well, I can have one hotspot for each VirtualAP and in each hotspot a defined wall garden. My question is: Is there any limitation in the number of IP/DNS of the wall garden (for example, each hotspot can...
by awacenter
Fri Nov 18, 2005 2:33 pm
Forum: General
Topic: Dynamic DNS
Replies: 1
Views: 1253

Dynamic DNS

I am configuring MT as a network of hotspots in a city. Each hotspot are been installed in a particular house to cover a zone. In each house there is a ADSL router or Cable Modem. The configurations for this pourpouse are clear. However, several of Cable Modem line have Dynamic IP. So I decided to u...
by awacenter
Thu Jul 14, 2005 7:30 pm
Forum: General
Topic: Access to a MT winbox behind another MT
Replies: 2
Views: 1243

Access to a MT winbox behind another MT

I have put a MT,called mt_slave , behind another MT, called mt_master . I have a ADSL router to exit to Internet. I redirecct 8081 and 3987 ports of the DSL router to access mt_master . My question is how can I access to the winbox of the MT mt_slave ?Because I can change 8081 hotspot port, but I ca...
by awacenter
Thu Jul 14, 2005 12:16 pm
Forum: General
Topic: SNMP write
Replies: 2
Views: 1166

SNMP write

Do you if MT supports SNMP mode write in the future?
by awacenter
Tue Jul 12, 2005 7:48 pm
Forum: General
Topic: login.html edit prevents user login
Replies: 7
Views: 1402

Are you putting the image file in the correct folder??

I customed my home pages sucessfully modifing the default pages. if you write the files and put in the correspondent directory, everything is OK.
by awacenter
Mon Jun 20, 2005 12:17 pm
Forum: General
Topic: Several initial pages depending on machine
Replies: 1
Views: 974

Several initial pages depending on machine

I made two types of initial pages: - one for the PDA (do not execute javascript and with a reduced resolution) named login.html - another for PC (moreover appears more or less adds depending the user resolution) named loginPC.html the initial page is login.html that depending on if user can execute ...
by awacenter
Mon Jun 20, 2005 12:04 pm
Forum: General
Topic: Possible navigation bug
Replies: 7
Views: 2419

I upgrade MT to MT2.9r5 and the problem goes on.
Do you have any idea why I can't navegate for this site ??
by awacenter
Thu Jun 16, 2005 12:34 pm
Forum: General
Topic: Initial Page Don't Appears
Replies: 1
Views: 1527

Initial Page Don't Appears

I am using MT v2.9r2 with hotspot mode. I customed splash pages (login, alogin, status, logout), after each modification of these files I reboot Mikrotik, else appears this page: Mikrotik HttpProxy -------------------------------------------------------------------------------- Error: 504 Gateway Ti...
by awacenter
Wed Jun 08, 2005 2:44 pm
Forum: General
Topic: Possible navigation bug
Replies: 7
Views: 2419

Possible bug

We have been testing different things but we never came across such a situation. hope there is no bug.

Gianluca
Well, I want to think that this problem will have a solution because the site: terra.es is the most famous site in Spain and this link is one of the left menu links.
by awacenter
Tue Jun 07, 2005 7:16 pm
Forum: General
Topic: Possible navigation bug
Replies: 7
Views: 2419

Possible navigation bug

HI,
I think when you are connected to your MT hotspot via RADIUS. You can navigate in some sites, however a URL of that site is three times nested, then NOT FOUNT page appears. For instance in terra.es:

http://rd.terra.es/r/http://inmobiliaria.terra.es//B10

May be it is a bug ??
by awacenter
Tue Jun 07, 2005 7:10 pm
Forum: General
Topic: RADIUS accounts by volumme
Replies: 2
Views: 1383

RADIUS accounts by volumme

Hi, I test the MT RADIUS attributes: Recv-Limit - total receive limit in bytes for the client Xmit-Limit - total transmit limit in bytes for the client and they don't work. Moreover, section AAA don't appear in the v2.9 manual. May it be possible ??? I want to create volumme prepaid accounts in RADI...
by awacenter
Wed May 25, 2005 1:43 pm
Forum: General
Topic: interim-update
Replies: 1
Views: 938

interim-update

I read carefully the manual, and even though I customized hotspot pages. But, could someone explain me what interim-update attribute updates?
I don't understand this attribute.
Does someone use this attribute?
by awacenter
Thu May 12, 2005 2:11 pm
Forum: General
Topic: Remote Configuration with a Linux program
Replies: 8
Views: 2304

ohh!! So, I have a BIG problem because I would like to use SSH tunnel with public keys to control and modify the configuration of 750 MT.
What can I do??
by awacenter
Wed May 11, 2005 5:44 pm
Forum: General
Topic: SSH doc in MT
Replies: 2
Views: 784

SSH doc in MT

I think the parameters and options about SSH are not enough docummentted in the manual. Above all how to stablish connections with out password in both direccions: MT -> machine or machine -> MT.

There would be information about SSH directories and files.
by awacenter
Wed May 11, 2005 3:08 pm
Forum: General
Topic: Remote Configuration with a Linux program
Replies: 8
Views: 2304

My problem is I can not execute the command ssh-keygen in MT since I want to access from a LINUX to MT.

I don't know where to save the file in the another case: MT access to my LINUX.

How can I generate keys in MT? the public one? And the ~/.ssh/authorized_keys file?
by awacenter
Fri May 06, 2005 1:31 pm
Forum: General
Topic: Remote Configuration with a Linux program
Replies: 8
Views: 2304

Remote Configuration with a Linux program

Hi people, I read the MT documentation carefully, above all the SNMP protocol and SSH server. I want my shell program in LINUX have access to configure MT, they are able to modify MT attributes. But I have several problems: in the first case, SNMP protocol can 'write' in MT configuration. It is only...
by awacenter
Tue Mar 01, 2005 12:34 pm
Forum: General
Topic: PHP server
Replies: 2
Views: 925

PHP server

I know MK OS is not usual suppots a PHP server because some web pages with PHP code can be too heavy. However, I want to include some PHP lines in order to improve the security.
Is there any solution to execute this PHP code in MT machine?
by awacenter
Tue Feb 22, 2005 6:31 pm
Forum: General
Topic: Howto Multissid
Replies: 1
Views: 716

Howto Multissid

I have the wireless integrated in Mikrotik Routerboard, it means, an Atheros AR5212 wireless card. How can I have MultiSSID in the same wireless card? MultiSSID is a wireless card send several ESSIDs.
by awacenter
Mon Jan 17, 2005 5:32 pm
Forum: General
Topic: Winbox user restriction
Replies: 3
Views: 1065

Winbox user restriction

No, what I am looking for is a solution for creating accounts locally, directly in mikrotik machine without the intervention of a RADIUS server. I see the user permision, but they are too general an d a user can modify everything.
by awacenter
Mon Jan 17, 2005 1:23 pm
Forum: General
Topic: Winbox user restriction
Replies: 3
Views: 1065

Winbox user restriction

Hi people, I am hotspot administrator and have several machines with Mikrotik OS. However, I have to delegate the user creation to another person. Exactaly this person only have to access to /ip/hotspot/users in order to create new accounts inside the machine. I read about the documentation of user ...
by awacenter
Thu Jan 13, 2005 7:23 pm
Forum: General
Topic: Initial page after correct validation
Replies: 2
Views: 815

Hi, I have all RADIUS attributes in a MySQL Database including the initial page. Amog my RADIUS attributes there is some to others NAS types such as Gemtek or ORINOCO. These hotstpots have a attribute for the initial page. So if I have to create a redirect page that calls to another PHP page to get ...
by awacenter
Thu Jan 13, 2005 12:24 pm
Forum: General
Topic: Initial page after correct validation
Replies: 2
Views: 815

Initial page after correct validation

Hi people, I read all documantation and manual about mikrotik system and I didn`'t find any attribute for giving to Mikrotik from Radius server which inform about initial page after validation; the first page that user watches after he introduces his user name and password. Santiago