MikroTik

awacenter

As other people before me said, I ask for a new MUM event in Europe.

awacenter

I have just tried to import l2tp client configuration with IPsec. I did: [admin@VPN-Infantas] /interface/l2tp-client> exp # mar/18/2022 15:27:44 by RouterOS 7.1.3 # software id = gjfgjkowegl # # model = RB5009UG+S+ # serial number = EC190F215E16 /interface l2tp-client add allow=mschap1,mschap2 conne...

awacenter

I found this post and I just read other post in MikroTik forum. I usually use a OpenVPN server in LINUX to set up my VPN because OVPN server in MikroTik doesnot support push-route option. So I have a OpenVPN server working fine. From this initial point, now I want to hardening my cipher comunication...

awacenter

I found this post and I just read other post in MikroTik forum. I usually use a OpenVPN server in LINUX to set up my VPN because OVPN server in MikroTik doesnot support push-route option. So I have a OpenVPN server working fine. From this initial point, now I want to hardening my cipher comunication...

awacenter

So, In that case we have to wait until v7 es stable.

Can I know if route-push feature will be implementrd in OVPN in v7?

awacenter

There were several years since last post. I have a GOOD SERVER to use as BGP peer gateway (lot of Intel cores and about 32-64GB RAM).My problem is I use a CCR1072 and my customers spend more the 6 GB de traffic and CCR hat 10GB Interfaces. I read old posts. I read there is a restriction un x86_64 vi...

awacenter

I am very interested too

awacenter

I have just update a RB951Ui from 6.42.1 to last ros version 6.43.8 and there is a little bug
because the log function dissapear.

I execute / log print and nothing appears.

awacenter

awacenter

We need a update of routerOS kernel because we need a faster BGP routing.
Mikrotik should let a multithreading feature in the kernel.

awacenter

We detect these issues and we try to update and upgrade all mikrotik devices.
Besid of this, we block all source IP via BGP when we can inform to our ISP.

awacenter

Hi!! the craziest network that I've seen is about 700subs in a flat bridged/switched one... but we really recommend to everyone move into a routed network instead of a switched one, by using OSPF with BGP, you can configure OSPF as an IGP which can handle everything related to convergence, load bal...

awacenter

Hi everybody, I have a doubt abot IP protocol. My scenary is we have AS number in a datacenter and I have several providers: Huurricane, Collent, Orange, Movista, DEcix... I stablish tunnel with my user management located in some cities in Spain. However, I detect that the major part of user managem...

awacenter

Thanks

awacenter

I think you are confused.
The best perfonmance is not more than 25 wireless client.
Otherwire, the performance is very bad.

awacenter

I am with you. There is a way to implement a hotspot service in IPv6.
Yes, it is correct that there is free IPv4 pools, but we have to find a IPv6 solution quickly.

In my networks and user managers are only MT.

+1 IPv6 Hotspot support.

awacenter

+1 social networks.

awacenter

It is easy, but you need some money. *You have to create a private key in a Linux system. *Create a CSR for one of domains you control. Buy one for some €. This domain will be used by all your hotspots. *The CA send you the Signed Certificate. *UPload the private key, the signed certificate and the ...

awacenter

+1 to GPS sync.

awacenter

I am VoIP engineer and agree with you. It is bad idea.
It is unnecessary to add VoIP services in MT, except to improve this traffic.

VoIP service for one way, and routing/filtering on another way.

awacenter

Any news about why CPU usage arise to 100% when hotspot authenticacion is https?

awacenter

Sob and Cha0s , you guys posted while I wrote my update. Seems like I so got used to ignore https warnings in local network that forgot about it. :D I share the same opinion as you about TLS/SSL authentication in https. I know all SSL theory and I have a SSL certificate in all my hotspots (hotspot ...

awacenter

Hi Sob,
I undertand the main idea about https and everything is encrypted, but as kimdobranski said, it is possible to capture the traffic to tcp/443 and to show a login page.
And, of course, it is the behaviour of a MitM attack. And it is not so easy.

Thanks.

awacenter

Potentially Final Update for this one - if anyone gives a Toss Now :) 25 Days uptime (see a log for a while back that it got rebooted - unsure as to why - could be power outage) Zero Support Calls since upgrade (was getting 3+ a week) Just Logged in to check him before this update. As per what i ha...

awacenter

I agree with you
I have the same problem in my hotspots. Lots of Android users have as a home page https://www.google.com.
The result is the login page does not appear.

I think it si a bug and it has to be solved.

awacenter

Vey useful.
I do not know about this SIP feature en MT config.

awacenter

+1 to implementation of DHCP accounting requests

awacenter

+1 to this feature

awacenter

What I want to remark is when a static IP is current ly assigned and with traffic in PPP, for example: 10.2.0.30, the PPPoE server assign this same IP to one dynamic client. PPPeE server should know that IP 10.2.0.30 is been used by a client. The others issues are opened to disccuss the best strategy.

awacenter

You can try to put together the exit of theses commands:
* / ip arp print
* / ip dhcp-server lease print

awacenter

+1 for this improvement.

awacenter

You post was very helpfull, gammy69er.
I notice this behaviour in several times in mu devices.
May it be that we do not put the correct (or powerfull enough) device for our needs?

awacenter

The answer by MikroTik Team was: Unfortunately you have to remove this address form pool manually. Client also might configure static addresses on client and they also will not be removed from pool so address assignation from pool only check if address has been assigned from itself. So, I ask for an...

awacenter

Very gratefully, MikroTik Support team caught my question.
Let's inform you the final solution.

awacenter

Hi everyone, In my networks I have configured PPPoE service for my Wireless customers. I have Public addressing and each customer has a public IP. To give a public IP to customer I use a pool called 'public-pool'. This pool is enough large for all my customers and more. On the another hand, I use RA...

awacenter

You realise that most sites are getting serious about this sort of security... Currently you could do this through an external Radius solution... But Mikrotik should really take notice as many others have started offering it.. I'm having trouble selling Mikrotik to Enterprises because of security p...

awacenter

+1. It is a good idea.

awacenter

WPS is insecure. I donot recommend its use.
It is a special case of WPA,

awacenter

+1 for

- IPv6 firewall Layer7
- Feature like hotspot in IPv6

awacenter

+1 PPPoE IPv6 accounting

awacenter

Hi people,

We wrote several PHP scripts with API. It wonderfull because you can do everything.
However, I have just tried to add a SSL certificate. I does not work.

Is there any special issue or CS sign to work with a SSL certificate in API -SSL?

Thanks,

Santiago

awacenter

????
In some scenarios, I donot know how useful is this protocol.
For a WISP, I doubt it.

awacenter

I ask if there is some aim to implement this feature.
It is useful in several scenarios.

awacenter

Using 6.18 with snmpv3 and aes for some weeks now ... no problems. it is stable even if queried a lot.

robertpenz, thanks for the feedback.
I check the same with same results.

awacenter

Hi people, Recently I realised that there is an increase of web tv devices. I know applications of the web tv use streaming method. Streaming uses 80 and 443 ports, very normal ones and I do not know to differenciate this traffic and the browser one. Any idea which can help me to improve to watching...

awacenter

Hi guys, I have several years using hotspots in MT with SSL certificates in hotspot service. However, now I realised that the following attributes donot have https link-logout link-status But link-login-only attribute has the correct prefix https. Of course, I can detect if there is a SSL certificat...

awacenter

I am very keen on this topic too.

HaPe, did you realize the issue we are discussing in thread http://forum.mikrotik.com/viewtopic.php?f=1&t=88687?

awacenter

Hi everyone, I think it is the correct forum instead of http://forum.mikrotik.com/viewforum.php?f=14 . My scenario is I have several PPPoE servers in several Datacenters and I have a unique RADIUS server to authenticate the pppoe clients. It works fine. As in all networks, there are some pppoe clien...

awacenter

Hi everybody, We have just finish the testing with 802.1x via AAA server in one of my hotspots (ROS 6.18) two week ago and realized that the authenticacion was correct, but the accounting packet does not have the Calling-Station-Id attribute and Called-Station-Id attribute *Acct-Request Example **:*...

awacenter

Thanks for the answer.
The low-power mode has to be in our ming when design camping areas or hotels. Customer have to listen the nearest AP, not all.

awacenter

This is a money issue. For my experience in MikroTik hotspot service, not all SSL certificates works fine. it depends of the Certificate Authoroty. There ara Level 1 to Level 3 or more. CA Level 1 (wellknown companies such as verysign, GeoTrust...) certificates are in almost all user devices. There ...

awacenter

Hi, I test repeatly the authentication of my tablet and in my freeradius DB does not appear the MAC addresd of my tablet. In the previous post, we attach one Accounting packet for the wireless accounting. I think it is necessary to depuerate the accouting request that MT device sends to RADIUS serve...

awacenter

Hi rextended, Is it a good solution install a flat panel inside of a building to give coberage to the rooms? I was thinking about installing GrooveA 52HPn with and 5-10 dB anthen. However, this is ugly for a hotel. My goal is use the CAP manager, so I want all devives have ROS. Thanks, Santiago

awacenter

Hi, I am looking for a good ROS device with a good wireless power. My goal is install these devices inside the several floors of a building. I want a solution based in Mikrotik. In the past, I used to use a RB532 with a extern 5dB anthen. Now I tried the RB951Ui-2HnD and other products, but the sign...

awacenter

Support Mikrotik said: Called-station-id and calling-station-id are used only in access-request attributes. This is not really true because in MT hotspot service, the accounting works fine. Called-station-id and calling-station-id attributes are normally stored in the database using Accounting Reque...

awacenter

Cleaver, I sent an email to support@mikrotik.com.
We wait their response.

awacenter

Hi everyone, We have developing wireless networks from several years, but my partners and I never arrivives a final decision about if it is better that all AP's in a camping AREA have the same SSID or if each one has a different one. If SAME SSID, then all customer know which is your company SSID, s...

awacenter

Hi cleaver In the wireless authenticacion you are working in layer 2 of OSI model http://en.wikipedia.org/wiki/OSI_model . In this layer, there is no IP address but It is suppossed that there is a MAC address. And the accounting request has to represent which MAC produced the successfull authenticat...

awacenter

Actually it is the same. I supposed that I have to provide an IP address to a client or an IP based in his MAC address.
Depends on the Mikrotik team implement the hotspot service in IPv6.
I want that the user authenticates in a web login page in order to have full access to Internet.

awacenter

Hi everybody,

A simple question; is it planed to implement the hotspot service for the IPv6 module?
My question follows the idea of / ip hotspot service. Instead of a hotspot service gives ipv4 addresses, the customer address is a IPv6 prefix. Is it possible?
Thanks,
Santiago

awacenter

To have a proffesional licence as you said it is a good option.

awacenter

Thanks, I will test.

awacenter

That's right.
If I update all my devices (>1000) into SNMPv3 with DES, it would wonderfull. However, it is a hard task, but necessary.

awacenter

Hi guys, I am developing a web-based tool in PHP to ask information to MT. We have several Nagios server checking my ISP network. We usually set SNMP version 1, which is very unsecure. In this new application I realize that PHP support AES encryption in the snmpget request. Is is posible that ros le...

awacenter

Hi guys, WE are used to have a SSL certificate in the hotspot service in order to comply with WISPr with my WISP roaming pathners. Recently my team configure a RB951 with ros6.13 and the certificate configuration got more complex. In prior versions, the process was click import button in the certifi...

awacenter

Hi, All my customers have a CPE with PPPoE client in IPv4. Months ago I test vary carefully with a IPv6 addressing in order to asign IPv6 address to my CPE. Tests works fine if all devices talk IPv6. In some cases, I have seen that some router clients have to sever IPv4 DHCP. However, I donot know h...

awacenter

I think EIGRP is old-fashioned routing protocol.
OSPF scales better and has more posibilities.

I am CCNA and CCNP, I and I work currenly woth Cisco products.

awacenter

Good morning, After reading the topic http://forum.mikrotik.com/viewtopic.php?f=2&t=86204 , I have one doubt. I know and I verify that MT works fine with IPv6 (I have some servers with IPv6 addressing), but I cannot achive a correct configuration in a hotspot when I would have an IPv6 address in...

awacenter

Yuo have to use firewall mangle rules and queues. First of all, identify the type of traffic using magle. but import the SSL7 signs fromhttp://www.mikrotik.com/download/l7-protos.rsc In this example, My output interface is WLAN and my LAN is in interface ether1. /ip firewall mangle add action=mark-c...

awacenter

Hello, not possible unless scripts are used to turn on/off ntp client. If these routers on which you want to minimize traffic are in your local network why use a local ntp server that is set up on one of your routers? Then only this one router will request time from ntp servers on wan side and all ...

awacenter

Mikrotik uses kernel 3.3.5

I seriously doubt they will update that kernel version significantly until they release mikrotik 7.x

Do you think this feature will be implementing the next MikroTik release 7.x ?

awacenter

Actually is not possible to change the default embedded value of 3600 seconds (if I remember well).

Ask support@mikrotik.com for that features.

I sent my question to Mikrotik support.
I would like not to use scripting, otherwise I am complicating the configuration.

awacenter

Be aware with radius attributes! Not all radius attributes are supported by MikroçTik. Check the attributes in the wiki in Radius client. Verify in PPP connections the 'Idle-Timeout' is supported. I think that it is not supported. I am sure that 'Session-Timeout' attribute works. You can use check a...

awacenter

Hi, I read the WIKI documentacion and I do not find any way to know when a ntp client launches a ntp request. Yes, it is true that the SNTP option shows when it is the time when this device is going to request to NTP server. What I want is control the time when a ntp client launches a ntp request. F...

awacenter

May be your problem was the Idle-Timeout attribute in the user profile. There is a default value. I recommend you to increase this value.

In hotpost instance there is a attrubute keep-alive. It triggers when a username is disconnected from your networks. Play with this value too.

awacenter

Hi lz1dsb,
The things are easier! Get up a PPPoE server and it provides a IP from a ip pool. Let's chek the WIKI.

Santiago

awacenter

So, In that case you can use a walled garden ip.
I understand you hotspot users have to access to a server 192.168.20.112/113.

From the hotspot side try: ping 192.168.20.112. There is no problem to access.

awacenter

Try /ip hotspot ip-bindings

awacenter

Can I have a WAN interfaz in IPv6 mode and LAN interface in IPv4 mode?
IT is suppossed there is a masquerade action for LAN ineterface 192.168.2.0/24.

awacenter

Hi everyone, All my customers have public IPv4 address. They have a router with: * a public IPv4 in WAN interface via PPPoE (1.2.3.0/24) * a ipv4 DHCP server in LAN interface (192.168.2.0/24) I have an IPv6 prefix assigned by my wholesale provider. Can I change my PPPoE pool in the PPPoE server from...

awacenter

I think Ipv6 NAT is necessary for activate the hotspot service using IPv6 addresses.
Moreover, it some networks it is userfull to net map an IPv4 LAN address to IPv6 address (in SOHO).

awacenter

Hi everybody,

Since I upgraded my RB532 to ROS 6.4 I have the following error messages in the log.
In previous versions there wasnot any message when I import SSL certificates.

Sincerely,
Santiago

awacenter

Good afternoon, One of my main bussinnes is install and mantain the WIFI Zones in the East Coast of Spain and we had install lot of hotels and campings using MikroTik OS as user manager. It is well known the problem of lack of IPv6 addresses. Now I have a several IPv6 ranges and I want to implent fo...

awacenter

There is no problem becuase you can have service hotspot and a PPPoE server in the same interface.
You can use the same user accounts adding the necesary PPP attributes.

I have several user manager working with this configurartion and it works fine.

Santiago

awacenter

Good afternoon, One of my main bussinnes is install and mantain the WIFI Zones in the East Coast of Spain and we had install lot of hotels and campings using MikroTik OS as user manager. It is well known the problem of lack of IPv6 addresses. Now I have a several IPv6 ranges and I want to implent fo...

awacenter

I do not use the default-encryption because I have to differenciate user types. some of my customers have an old-fashioned device which not support encryption. all my PPPoE users are in a RADIUS server accounts. So I can distinguish if I use or not use encryption in the RADIUS account. Can I configu...

awacenter

Hi, My pppoe server service uses default profile (at the moment I do NOT want to use default-encryption profile). AAA server is actived. In the client side, my pppoe client has user/pass and default profile. this scenario without encryption works fine. I am trying to encrypt my PPPoE Sessions using ...

awacenter

Hi forum! I come to you 'cause I'm trying to figure out what the mtu on a super-tunnelized setup should be. MTU between brackets: - ENCAPSULATION LEVEL RouterBoard1 -------------------- RouterBoard2 Ethernet (1500) ------------------- Ethernet (1500) PPP (1460) ------------------------ PPP (1460) Eo...

awacenter

I have a Dude server using the web access, but I want to change the logo in the login page: http://img18.imageshack.us/img18/396/toplogoasdasd.jpg The name of the image is "toplogo.jpg", but when I search for it in my server (Win XP), I can't find anything related. Anybody know where to fi...

awacenter

2) What does the toplogo.jpg in the webcfg folder actually change. In the poor describtion it says the web-config logo. The only web-config logo I know is the one in webfig (top right corner), but that doesn't get changed. This file changes the logo that appears in the web acces of the Dude: http:/...

awacenter

I did it.
But thanks for the advice.

awacenter

Hi, I am doing the integration with Nintendo in order to all his Nintendo3DS can authenticate in my MikroTik hotspots. The new Nintendo 3DS firmware implements a WISPr client to connect to Internet. However, it fails. Nintendo people and we analyse the problem and we realize that Mikrotik access poi...

awacenter

It finally worked!! The problem was the TTL of the VLC Server which was set up to -1 so it takes the SO default, probably 1, teherfore the packets were being discarded on the router.

Regards and thanks for your help.
Nando.

awacenter

Hi again!

I just replaced routerosv3.30 by a new routerosv5.7 and happens exactly the same. I attached a shot.

Thanks!

awacenter

Thanks for answering!!

Sorry I sais v3.3 but I meant 3.30. I'll try to upgrade to v5 though. So, do you think my configuration is fine?

Thanks again!

awacenter

Hi forum! I just get into multicasting on routeros so I have limited knowledge. I am trying to set up such simple network: VLC SERVER (rtp://224.0.1.20:5004) ----- VLC CLIENT [Works fine!!] VLC SERVER (rtp://224.0.1.20:5004) ----- [ether1]ROUTEROSv3.3[ether2] ----- VLC CLIENT [BADDD!!!] VLC SERVER I...

awacenter

Hi , I have a problem with some of my PPPoE servers. The pppoe server profile has a ip pool in the <remote address> attribute in the profile. This IP pool has several public IP's. It happens the PPPoE server works fine until the ip pool is run out. I check the PPP active connections and the number o...

awacenter

From the beggining I am using ros5.6. I have spent almost a week with the tests and I have some conclusions. First of all, in my topology I create two ( or more) VLAN's over a ether2. Each VLAN has a tag (numeric value) that the CISCO switch and MT shared. So the main problem is one VLAN can be in a...

awacenter

Hi everybody, It is long time I work with MT, but I have a question. My case I have the folowing devices: 1) a CISCO Catalyst SWITCH 2) a MT with hotspot service connected to the CISCO switch. 3) TwoTP-LINK AP connected to the CISCO switch called AP1 and AP2 My MT has a wireless card, so I configure...

awacenter

Hi forum! I have a routerOS running on x86. This router has 3 ethernet interfaces each of them connected to its own dsl multiport router. I want to set up 3 different l2tp/pptp tunnels but I want each of them to be routed through each different interface. The problem is that the remote pptp/l2tp ser...

awacenter

By the way,

[admin@MikroTik] /system resource usb> power-reset
ERROR: USB power reset not implemented on this hardware

I send the support.rif to be analysed.

awacenter

I have the same issue with this routerboard : rb433UAH.

I tried with several Huaway 3G modems and ZTE modem. All hardware supported, I specifically checked.
I tried with routeros 4.17, later with 5.2 and 4.13. No successfully results.

Is it posible that rb433UAH routerboad has any issue?

awacenter

Hi, I have almost all my MK devices in ros4.x, and only one with ros5.rc11. I can upload files via SFTP in ros4.x, bot I can upload rsc file in MK with ros5.rc11. In the log the following error message appears: ssh error expected: 50 got:90 I do not understand the error. Can you give me more informa...

awacenter

I detect the same error in one of my Mikrotik's.
I can not transfer files via SFTP.

awacenter

Today I did some more exhaustive test with rb112. Originaly rb100 had ros2.9.51. Later I was upgrading to several versions of ros3.x and test the CPU usage. ros3.24 and ros3.25 are unstable and the upper ROS versions are too heavy for the rb100. Finally I decided to use ros3.23, it is cheaper in CPU...

awacenter

I have a lots of RB100 series and when I upgrade from 2.9.x --> 3.30 -> 4.16, I have CPU 100%.
So my rb133 will always stay in 2.9.51.
I realize that routerboad 100 series are old-fashioned devices.

awacenter

Hi everybody, We offer Internet service using a wireless AP. I have a central Mikrotik with a PPPoE-server. My clients have its own Mikrotik CPE with a pppoe-client. If a client does not pay the Internet service, we disable his pppoe account in my central server. In one PPPoE-server I can have 150-2...

awacenter

Sorry I didn't mention we have 18 meters towers at both places. My email: ingenieria@grupoawa.es Tons of thanks. Hey Newbie, Thanks for your quick response. The antennas might not be well-aligned but still I think bandwidth is too poor for the signal got. Anyhow we'll be pleased you could send those...

awacenter

Hey Newbie, Thanks for your quick response. The antennas might not be well-aligned but still I think bandwidth is too poor for the signal got. Anyhow we'll be pleased you could send those info to us. Link placemarks below: BASE-Lat: 39.519716° BASE-Long: -0.466781° STATION-Lat: 39.381389° STATION-Lo...

awacenter

Hi forum! We have been performing some tests with 802.11n+R52n cards and although we got excelent results when short distances and good (very good) signals, as the link gets longer and poorer N behaves quite worse than simple A (at least on 5GHz). This is the scenario: 17km link BASE: RB433 (v4.10) ...

awacenter

Hey forum!! I have certain VTUN Server and I have certain RouterOS board. I wonder how to build up a tunnel between them, no matter the protocol. VTUN supports ppp an so RouterOS but I have not been able of making them understand each other. Don't even know if that is possible. Any help is welcome. ...

awacenter

What I detect is sometimes the NAS (mikrotik device) sends a incorrect Stop packet (with a stop time and with a void terminate cause) instead of a ALIVE packet.
Someone more detect this behaviour in a Mikrotik?

awacenter

Hi, I am working with freeradius and mikrotik gateway for a long time, but recently I detect in my PostgreSQL database, in radacct table some inconsistencies. First af all, I say that I have the standard configuration file (postgres.sql) for accounting queries. My problem is sometimes the field acct...

awacenter

Please, verify that your Internet router supports PPTP connection passthrough or your router does not have any filter for PPTP connections.

awacenter

Hi, I use for showing login page an external web server. it normally works fine. I have an issue because after a user write his username/password in login page and he clicks in submit button, appears a NOT FOUNT page (error 404), instead of the alogin.html page. However, the user is authenticated, a...

awacenter

I did a mistype. I mean bands.
I want to if MT OS can broadcasts 2.1 GHz. and 2.5 GHz. bands.

awacenter

Hi,

I am coniguring my mikrotik for broadcast my signal in the 2.1 GHz and 2.5 GHz. band.
Is it possible to set up my wireless interface in 2.1 GHz. band or 2.5GHz. band ?

Thank you!

awacenter

Hi, I used to use MT 2.9.x for my old hotspots, but now RB133 have instaled MT v3.x. I put all my virtual AP in the same bridge called HOTSPOT. So I configure the hotspot service by HOTSPOT interface. With the MT firmware version 2.9.x I can identify the SSID[virtual AP] by the interface-name attrib...

awacenter

Hi, I am using RADIUS accounts in my hotspot service since three years ago. All these account have a free navigation after a successfull log in. However, my company wants to offer in the same hotspots a type of user who only connects to one specific URL. For instance, vocento1 user only can navigate...

awacenter

OK. I understand.
I write a script to control the VPN fall and to restore the primary VPN when primary IP answers.
Thanks!

awacenter

Hi, I have several Mikrotik PPTP/L2TP server installed in several locations. All these servers have different public IP and in different networks. I normally configure my MT devices point to one PPTP/L2TP server to stablish a VPN with a PPTP/L2TP client. I want to find a crash PPTP/L2TP server plan....

awacenter

Hi, I have several Mikrotik PPTP/L2TP server installed in several locations. All these servers have different public IP and in different networks. I normally configure my MT devices point to one PPTP/L2TP server to stablish a VPN with a PPTP/L2TP client. I want to find a crash PPTP/L2TP server plan....

awacenter

Hi everybody, i got a little problem with DUDE... i´m monitoring a wireless network and need to see the SSID of each device. At this moment i´m able to do it with links, but not with AP. For links i´m using the snmp_wireless_info() function, but it doesn´t work with AP...¿any idea? Thanks for help. ...

awacenter

FTP client is implemented in RouterOS 3.0 versions.
It is available from 'tool fetch'.

awacenter

Thanks for your quick answer. We normally launch a script from a > server for update the MT configuration in all our devices. Currently > we use rsc file to do it. > > However, I want an automatic update from mikrotik hotspot and I > explain that. > My goal is a MT device is able to change its confi...

awacenter

Unfortunately it is not possible to send these attributes via RADIUS server. > > So, you need to consider different approach for walled-garden rules. > > Probably you can create .rsc file or rules, that will match exact > > syntax for example. > > / ip hotspot walled-garden > > add dst-host=www.1.co...

awacenter

Hi people, After installing lot of MT hotspots, now I need how to have a centraliced walled garden for 100 MT hotspots. It is because I want to have a list of forbidden URL (Parental control for children: no porno, no gambling) and I want that this list is comoon for the 100 hotspots. I can configur...

awacenter

Hi, I have lot of MT's installed in hotels as access points and, beside of this, there is a another MT as user management in the same hotel. I have VPN to each user managemet of each hotel. Each hotspot network is a LAN. What I want is to create a script to update automaticaly my APs. It means to ac...

awacenter

Hello,

Somebody try to connet to your MT via B-test.

You can disable this option, you can disable this option hear:
tool -> Btest Server -> settings

"tool bandwidth-server set enabled=no"

Regards

awacenter

I will do.
But I advance for version prvious to 2.9.39 you have to reboot to load the certificate successfully.

awacenter

Hi, I try the following feature in all MT versions. I need to have certificates for the https in hotspot service. So, I have SSL certificates (signed by a Certificate Authorizy). However, I have a problem: I upload the certificate files to MT, and I can not decrypt the certificates if previously I d...

awacenter

Hi,
first you have to create a bridge between wlan1 and the ether. and later you create the VLAN in this bridge.

awacenter

Yes, of course it's supported. See the RouterOS manual at http://www.mikrotik.com/testdocs/ros/2.9/guide/aaa_radius.php For the correct format of the Framed-Route attribute see http://www.ietf.org/rfc/rfc2865.txt (Chapter 5.22) --Tom I try lot of configurations for this attribute: "22110"...

awacenter

But, what I wnat to know is if Framed-Route is supported by mikrotik. Yes or no??

If it is yes, could you give me an example? Thanks

awacenter

It is perfectly possible.

You have to configure hotspot service by bridge1, but be sure that DHCP server works for bridge1 too.

awacenter

Hi, I achieved that my MT PPTP server autheticates a PPTP client via RADIUS. radreply table for the user 22110. "22110";Framed-Protocol";":=";"PPP" "22110";"Service-Type";":=";"Framed-User" "22110";"admin"...

awacenter

Or use VLANs and one of these: http://www.hp.com/rnd/images/large/2524_lg.jpg (managed ethernet switch) to get you to 25 ports. I completely disagree with this solution because this kind of routers are too expensive (>400 euros) and one of VLAN problem is exactly the use of a switch. Only a few swi...

awacenter

Hi, I use the same AAA server for all my hotspots (freeradius 1.1.6). however I have to different Acct-Output-Octets and Acct-Input-Octets values for my two types of hotspot: Mikrotik and Nomadix. I detect this isues because a roaming partner told me. I supposed: Acct-Input-Octets - bytes received f...

awacenter

I confirm this VLAN problem. I work with lot of devices and with cheap switches I had some problem to manage VLAN's

awacenter

In the following case: Three MT's connected to a switch (H1, AP1, AP2). Mt called H1 is a hotspot manager and in its ether1 has Internet Conection and in ether2 gives hotspot service. AP1 and AP2 are to MT with Wireless interface active to give wireless covering. AP1 and AP2 are connected to the swi...

awacenter

Now I attach a network schema to clarify my problem.
Any propoursal?

awacenter

Hi, I have several hotspots installed in Spain. Lots of them are MT’s with a wireless interface, so I put hotspot service in this interface. My MT hotspot broadcasts multiSSID using VirtualAP feature. In this HOTSPOT I want to show a different login page to a user depending on which ESSID this user ...

awacenter

Hi, I normally use MT devices for all my user managers. I use weblogin page for user authenticacion and Intenetnet access. It normally works fine, however sometimes my users watch a page not found. The process is the following: - login page appears. user writes his username and password. - alogin pa...

awacenter

I think I have a mistake. This is not the correct forum.
Sorry.

awacenter

Hi, I normally use MT devices for all my user managers. I use weblogin page for user authenticacion and Intenetnet access. It normally works fine, however sometimes my users watch a page not found. The process is the following: - login page appears. user writes his username and password. - alogin pa...

awacenter

Yes, it is not a MT question.

If you are newbie in freerius, forst of all, read all the documentation /doc.

And later, try in the forum: freeradius.org

awacenter

Try this where IP x.x.x.x is your public IP and ether1 is the public interface

add chain=dstnat in-interface=ether1 dst-address=x.x.x.x protocol=tcp \
dst-port=80 action=dst-nat to-addresses=192.168.0.4 to-ports=80 \
comment="Redireccion http" disabled=no

awacenter

has No one customize the login page froma a Centralized web server?

awacenter

Hi people,
I use MT's and FreeRadius Server form my hotspots. How can I send a error message from my RADIUS server to my MT hotspot ?
For instance, uptime-limit message when my account has Session-Timeout = 0 (I know MT shows this message for local accounts.)

Thanks!!

awacenter

Hi everyone, We are having such an annoying problem since a coupple of months ago. Especially it comes up in rainy regions when using outdoor boxes and routerBoard 532: enviroment humidity comes in through condensation holes, it becomes water that rustes connectors and make them unusefull. Support h...

awacenter

Hi,
I created a MT local account and I test when this account do not have time, Mt shown an error message.

I have the login pages in my website because I do a redirection in MT login page. How can I shown this MT error message? What codes my website has to send to MT?
Thanks.

awacenter

I am testing the loading time of MT login pages. I use a PIII (1GHz) and bandwidth 128/128 Kbps. I use this old-fashioned laptop because it is the worst case. Obviously, you get lower time with a PIV (3Hz). :wink: How many seconds do your browser need to load these pages in LOCAL? How many seconds d...

awacenter

well its not about having a dedicated radius for each MT, its about having a radus for a group of MT or for a specific area.. This is the specific problem because there are topology differences. moreover, when an aacount actives the roaming service, it is necessary to add to the time to access to m...

awacenter

I have hundred ofm MT devices and I think this last solucion about having several RADIUS entries is a botch-up. Increasing radius timeout value is cleaner.

awacenter

Each one set the radius timeout as he wants, and I configure my hotspots with a hight timeout vale because I have several roaming partners who do not sometimes have a very good response in time. Moreover, for this ans other reasons a set a high timeout response in my freeradius servers. So it is not...

awacenter

Hi,
we have lot of hotspots and I continually update them. However, I am careful since v2.9.36 because of the limit of timeout in /radius.

Now the maximum value is 3000 while in previous versions this value could be bigger (I need almost 8000).

Does someone know when this bug was repaired?

awacenter

Hi people, I am creating script to update all my MT. I export all MT configuration and I create a rsc file. Obviously, I must modify this file before executing in another MT because some command lines do not work too much fine. So, now I hava the following problem to insert my SSL certificates. Afte...

awacenter

I work with BOINGO and this week I am goning to integrate with iPass. But, how did you solve the problem of SSL support? How did you put in all your hotspot a SSL certificate? I solve this problem because I configure all my mt with the same domain in the hotspot interface. So I bought the SSL cert f...

awacenter

I test lot of cases about a slow conexion (because of weather conditions, latency, ...), but I remark if you use a DB attached to radius server, this DB can be very slow, too. It happens because the DB has a hight load or a lack of memory of the machine. Obviously, the unique solucion to mt is to wa...

awacenter

Hi,
Does Mt support FQDN in the wall garden??
I have to autenticate all the domains and IP under a roaming partner FQDN pass.car.boingo.com.
Obvously, I did the test and it failed.
Thanks!!!

awacenter

You best and easiest to manage solution here is your own radius server, and proxy the various realms to the client's radius server. This also means you have SOME form of control over what they can/cannot configure via the means of Attributes on your network (which can be very serious stuff)... I do...

awacenter

Hi, I have lot of MT in Europe. I do roaming with others roaming partners since more than 2 years ago. Now, I have a Virtual Operator who will have its own SSID in my MTs. This Virtual Oper. has its own RADIUS. I do not want to use my own RADIUS. I identied this operator with its domain and I put th...

awacenter

Hi,

I have in my hand the last list fo RADIUS attributes supported by MT.
I can not see Tunnel Protocol Support attributes (http://www.freeradius.org/rfc/rfc2867.html).
Well, but my quiestion is if the MT can stablish a tunnel automatically with a user connect to the hotspot?
Thanks.

awacenter

It will encrypt client authentication in HotSpot (RADIUS).

What I want to know if there is any method to cypher all comunicactions between Mt and the client using a RADIUS attribute. IF it so, what is the name of this attribute?

awacenter

Hi people, If I put the hotspot DN loginuser.akiwifi.es in all my hotspots (>500) and buy a SSL certificate for this domain. And later I install it in my hotspots and I configure the hotspots profile to be secured via https. Do I cipher all communications between the AP MT and a client or only ciphe...

awacenter

Hi people, I use several years using your devices and I am very gratefull with us. I installed lot of hotspots in Span and in all hotspots I configure the wireless interface as an open system. Obviously, I install a SSL certificate for my login page because I redirect to my login web server to inser...

awacenter

set it up on one system then export walled gardern to a file then importit on the others

I know I can update my MT wall garden via SSH. But I want to find another solution.

awacenter

Hi people, I use MT for serveral years and I have lot of hotspots installed. I put advertisement in my login page and I let a user visit the web page of those companies before this user authenticates with an account. As I have lot of hotspots, it is a tedious task to enter a new domain in <b>hotspot...

awacenter

Hi people, My question is the following: I have a MT with several connected users using RADIUS authentication. I do accounting of users using a DBMS. This day I have to reboot this MT owing to maintenance. What does it happens with these RADIUS users? Obviously the user are disconnected, but Does MT...

awacenter

Hi people, We use your products from more than one year and I think I have a little problem. I use MT and a freeradius server with a Postgres DB. Monthly I check my radacct table, I realized I have many entries with acctstoptime in NULL value. It is normal in connected users, however when I have fou...

awacenter

I received the following notification from MT support

WIPSr-Location-ID, WISPr-Location-Name attributes support will be added to the next MikroTik RouterOS version.

awacenter

I did it. I sent an email to Mikrotik company asking for theses attributes. Actually, these sttribute are necesary for IRAP standards, so I don't undertand why the do not implemente yet.

awacenter

Well, we have a roaming agreement with a company. It happens they required me some RADIUS attributes, But, specifically, I need: + Location-ID + Location-Name I realized in your manual and MT dictionary file do not appear. What can I do?? Do you plan add then in some future version. As it is not my ...

awacenter

Hi people, Here I send us an example of a smart client, WeRoam one. A smart client sends the data via GET method instead of POST. Actually a smart client is installed in an user laptop as a resident program. So when the user switch on his laptop, this program scans the wireless networks with the goa...

awacenter

Hi people, I use MT for years, but now I did some roaming agreements and I have a configuration doubt. Does MT OS support smart client??? And if it is so, what do I must configure in my MT??? This problem suggested me when my roaming partner sent me a SW client to connect my laptop to my ESSID and t...

awacenter

Dear Sir, I do roaming with several companies (WeRoam, Trustive…), however I have a doub. In my landing page, a user can choose the service provider (WeRoam, Trustive…) in a HTML select. So for the same domain (example: domain.com) and both companies have authenticate this realm, how can I distingui...

awacenter

Hi people, I am trying to setup EAP protocols. Especifically, EAP-TTLS agains my RADIUS Server. Does MT support EAP protocols in its wireless interface? If I put a Orinoco AP-4000 which supports EAP protocols in suscriber interface of MT, how can my AP-4000 access to the radius servir located in Int...

awacenter

The password of MAC auth accounts is blank.´

You must discober which is the real PUBLIC IP of your MT hotspot.

awacenter

Hi people, On one hand, I have several Mt v2.9.11 in Spain. In the another hand, I have mutiple Nomadix2100 hotspot-in-a-box. In both devices I can have multiple SSIDs by wireless interface. However, Nomadix can let me configure the login page easier then MT because it has the ESSID variable. It mea...

awacenter

Simple Question:
In MT version 2.9.10, is SNMP write mode support?

It is used for changing parameters such as adding a new ESSID or changing a wall garden entry.

awacenter

Hi people, I have a MT v2.9.10 device. My MT has a wireless interface with several Virtual APs. Well, I can have one hotspot for each VirtualAP and in each hotspot a defined wall garden. My question is: Is there any limitation in the number of IP/DNS of the wall garden (for example, each hotspot can...

awacenter

I am configuring MT as a network of hotspots in a city. Each hotspot are been installed in a particular house to cover a zone. In each house there is a ADSL router or Cable Modem. The configurations for this pourpouse are clear. However, several of Cable Modem line have Dynamic IP. So I decided to u...

awacenter

I have put a MT,called mt_slave , behind another MT, called mt_master . I have a ADSL router to exit to Internet. I redirecct 8081 and 3987 ports of the DSL router to access mt_master . My question is how can I access to the winbox of the MT mt_slave ?Because I can change 8081 hotspot port, but I ca...

awacenter

Do you if MT supports SNMP mode write in the future?

awacenter

Are you putting the image file in the correct folder??

I customed my home pages sucessfully modifing the default pages. if you write the files and put in the correspondent directory, everything is OK.

awacenter

I made two types of initial pages: - one for the PDA (do not execute javascript and with a reduced resolution) named login.html - another for PC (moreover appears more or less adds depending the user resolution) named loginPC.html the initial page is login.html that depending on if user can execute ...

awacenter

I upgrade MT to MT2.9r5 and the problem goes on.
Do you have any idea why I can't navegate for this site ??

awacenter

I am using MT v2.9r2 with hotspot mode. I customed splash pages (login, alogin, status, logout), after each modification of these files I reboot Mikrotik, else appears this page: Mikrotik HttpProxy -------------------------------------------------------------------------------- Error: 504 Gateway Ti...

awacenter

We have been testing different things but we never came across such a situation. hope there is no bug.

Gianluca

Well, I want to think that this problem will have a solution because the site: terra.es is the most famous site in Spain and this link is one of the left menu links.

awacenter

HI,
I think when you are connected to your MT hotspot via RADIUS. You can navigate in some sites, however a URL of that site is three times nested, then NOT FOUNT page appears. For instance in terra.es:

http://rd.terra.es/r/http://inmobiliaria.terra.es//B10

May be it is a bug ??

awacenter

Hi, I test the MT RADIUS attributes: Recv-Limit - total receive limit in bytes for the client Xmit-Limit - total transmit limit in bytes for the client and they don't work. Moreover, section AAA don't appear in the v2.9 manual. May it be possible ??? I want to create volumme prepaid accounts in RADI...

awacenter

I read carefully the manual, and even though I customized hotspot pages. But, could someone explain me what interim-update attribute updates?
I don't understand this attribute.
Does someone use this attribute?

awacenter

ohh!! So, I have a BIG problem because I would like to use SSH tunnel with public keys to control and modify the configuration of 750 MT.
What can I do??

awacenter

I think the parameters and options about SSH are not enough docummentted in the manual. Above all how to stablish connections with out password in both direccions: MT -> machine or machine -> MT.

There would be information about SSH directories and files.

awacenter

My problem is I can not execute the command ssh-keygen in MT since I want to access from a LINUX to MT.

I don't know where to save the file in the another case: MT access to my LINUX.

How can I generate keys in MT? the public one? And the ~/.ssh/authorized_keys file?

awacenter

Hi people, I read the MT documentation carefully, above all the SNMP protocol and SSH server. I want my shell program in LINUX have access to configure MT, they are able to modify MT attributes. But I have several problems: in the first case, SNMP protocol can 'write' in MT configuration. It is only...

awacenter

I know MK OS is not usual suppots a PHP server because some web pages with PHP code can be too heavy. However, I want to include some PHP lines in order to improve the security.
Is there any solution to execute this PHP code in MT machine?

awacenter

I have the wireless integrated in Mikrotik Routerboard, it means, an Atheros AR5212 wireless card. How can I have MultiSSID in the same wireless card? MultiSSID is a wireless card send several ESSIDs.

awacenter

No, what I am looking for is a solution for creating accounts locally, directly in mikrotik machine without the intervention of a RADIUS server. I see the user permision, but they are too general an d a user can modify everything.

awacenter

Hi people, I am hotspot administrator and have several machines with Mikrotik OS. However, I have to delegate the user creation to another person. Exactaly this person only have to access to /ip/hotspot/users in order to create new accounts inside the machine. I read about the documentation of user ...

Search found 202 matches