MikroTik

mankomal

Was wondering if you were able to get this done as I am also struck in the same thing.

mankomal

broadcast?

not exactly so what happens is that all clients start to transmit on dst-port 23(telnet) and just freeze the network for 2~5 seconds
although we have firewall rule that they cannot do this but still they generate traffic

mankomal

Hey everyone I have got a peculiar problem where the users on routers like Tp-Link, D-link etc are randomly uploading and causing CCR1036 CPU usage to go upto 100% causing packet loss we have filtered lot of garbage: 1. any unknown traffic generated from the network 2. any spoof traffic coming into ...

mankomal

When I tried via the API it didn't ask for a confirmation. The router reset it's config and rebooted immediately.

<<< /system/reset-configuration
<<< =no-defaults=yes
<<< =skip-backup=yes
<<<
>>> !done

in my case its not doing anything could it be that i am executing a script ?

mankomal

hello, Our clinet usually from not-IT background need help in resetting the router but the issue is that they are not able to put IP address or gateway once they reset as they dont know how to use winbox, webfig etc, so I thought we will give them a URL to reset the router and in that we will implan...

mankomal

@Jarda Its totally possible. You look in the frame of the wireless packet and you will see MAC addresses. Devices are constantly looking for known SSIDs to connect to and send out Probe requests to determine if those SSIDS are nearby. You can capture those and get the required information. You can ...

mankomal

Hello I am running hotspot where I want the same user to have multiple-session but the problem is whenever user tries to create a second session I get an error "no more session allowed for the user" 2 MACs per user enabled in hotspot and Simultaneous-Use:=2 in Radius still this error is coming, any ...

mankomal

Hi, I have CCR MT 6.35rc33 users have ip and rate limit from radius I need to change rate limit speed I try: # echo "Framed-IP-Address=192.168.101.5,Mikrotik-Rate-Limit=128k/750k" | radclient -x 10.5.5.xxx:3799 coa xoxoxox Sending CoA-Request of id 177 to 10.5.5.xxx port 3799 Framed-IP-Address = 19...

mankomal

That's it, that could be a way.

thanks for your help pukkita
But the problem is I dont have a known distinguisher for the users

mankomal

No. On ROS you can define more than one radius, but 2nd, 3d only will get used if previous one doesn't respond. You can however setup proxying on your radius and "route" from there. in that case username or realm or something have to be known. right? So like @abc.com go to one server and @def.com g...

mankomal

Hello

Is it possible to create two or more Virtual APs and point each of their respective security profiles(using EAP) to two separate RADIUS??

mankomal

I am trying to do this but have been unable to...

Can you share a conf of this working?

ok, I dont have a running configuration anywhere but I can guide you, follow the process:
1. Set up BCP, to bridge the tunnel,
2. Run hotspot on this bridge interface

Let me know if you run into any problem

mankomal

Why not use pppoe server ppp > profile > Queue tab for that?

but when doing from FreeRadius, how is that possible?

mankomal

This is relevant to my interest. Seems jst like introducing a new radius attribute into the MikroTik dictionary and sending that back in an access-accept's would work. new Radius attribute should be understandable to Mikrotik also, not only to FR, right? so how to achieve the same if MT will not un...

mankomal

Did you find a solution I am also looking for something similar

mankomal

Sorry to rake up an old post This is possible tested and working Currently only tested on MT AP, but we are increasing AP and following APs will be tested in next 2 days: 1. BelAir Ericsson 2. Aruba 3. Cambium 4. UniFi UAPs in case you need some radio to test we can setup a test environment for your...

mankomal

Then it definitely looks like a bug. Make supout and send it to support.

Done doing it now

mankomal

add the vlan to your in interface - and bridge them. This is correct for this. From what I understand this is what we did in interface is SFP and out interface is ether4 VLAN on both and bridged them THIS causes whole traffic on the interfaces to STOP i.e. all layer-2 connectivity is lost (to other...

mankomal

Well put the two vlans under the same bridge, and ip/dhcp server on that bridge? I tried that but all the other VLANs on the interface stop working, No DHCP on the bridge No IP also as want to create a seamless Layer-2 for customer Customer end point 1 <--(VLAN10)--> Mikrotik CCR ether 4 Mikrotik C...

mankomal

Having little to no luck on BGP communities from Upstream so I started with Prepending the lesser preferred path now what happens is that this path still receives inbound traffic to my network for specified pools but no traffic of the pools is going thru it though. Its downloading around 100M and u...

mankomal

Hello I have a VLAN on ether4 and another VLAN on SFP, I need to bridge these 2 to make a Layer-2 network for the customer, problem is as soon as I bridge these two all other VLANs on these interfaces go down i.e. traffic stops to flow and these 2 VLANs still don't come on the same Layer-2 How can I...

mankomal

Hello
Over last 2-3 weeks I am seeing several random Cisco IP addresses attacking Mikrotik routers via port 1025,1028 and 1030 UDP packets all packets of 10030 length
Anyone else also facing this issue??
Does any one know what is this and how to stop this

mankomal

You should also find out whether your ISPs have their own looking glasses as well. (or public route servers you can access) Obviously this is the best way to see what your advertisements look like to your ISPs themselves, because looking at LGs further away from you is useful too, but many networks...

mankomal

Alright - one thing I noticed upon re-reading my post - the looking glass you're showing is obviously not in your ISPs network, so take my actual local_pref recommended values as only examples - not sure what Vodafone is using, but certainly they can give you their published BGP policy. Zerobyte T...

mankomal

In your posted output from the looking glass - the second path has local_pref of 90. Local pref is more important than as-path length, so the first path having local_pref 100 will win every single time. You need to ask the ISP what communities you may send to them to modify local_pref on their sid...

mankomal

so basically we discussed with registrar and found that it could be done with AS-SET route set which they created for our customer and now its working

Also in India the restriction of 2 ASNs is there we just have to give undertaking to them for paperwork not actually be linked to them,

mankomal

Hello Trying to do BGP multihoming facing a few challenges, We have 2 ISPs we have total of 3x /22 pools , we want to broadcast 2x /22 pools out of ISP1 and 1x/22 out of ISP2 In simple scenario i.e. we broadcast only the pools that need to broadcast everything works good but when we try to cross...

mankomal

There are lot of wiki pages available please go thru
wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter
wiki.mikrotik.com/wiki/DoS_attack_protection
wiki.mikrotik.com/wiki/Basic_universal_firewall_script
wiki.mikrotik.com/wiki/Securing_New_RouterOs_Router

mankomal

Any reason why you are marking route when there is only one single line on your router as per your configuration. Also the NAT rule states everything is going out via eoip tunnel ?

mankomal

Hello , One of our customers wants to advertise their own IPv4 and ASN we are the only upstream provider that they have, want to know how can we advertise their subnet and ASN, our upstream provider asked us to register our ASN as AS-SET in the whois database and the same is done, what do we need t...

mankomal

Well I found the problem it was related to a third party firewall in the network which was causing some issues and its now resolved. Apparently it was blocking all traffic to Port 89, as soon as I had put an exception everything started working normally

mankomal

Hello We are trying to set OSPF in our network for backbone, on the edge router we had enabled option REDISTRIBUTE DEFAULT as always(type 1) in all remote routers we can see this route coming in ospf routing route print , but when we do ip route print the route is not reflecting there. What could be...

mankomal

ok it works once the interface is bridged and VLAN is created on the bridge . Dnt know why it cant work directly but only on a bridged interface thou

mankomal

thanks for your reply zerobyte,

currently not doing NATting or Route to PCs just checking from router to router

mankomal

so the setup is :
PC <---> CCR1009(Vlan 3521) <--->ERLite (Vlan 3521) <---> PC
IP on CCR is 192.168.48.1/30
IP or ER Lite is 192.168.48.2/30
both routers are not able to ping each other.

there is no switch in between

mankomal

no that's the problem the basic of the basic even ping doesn't works, I tried configuring IP directly on the interfaces it works. But once put on VLAN they don't work

mankomal

yes tried that also
infact just made a setup in office with following setup with UBNT EdgeRouter- Lite
its not working here also
please see pics:
VLAN of main Router:

VLAN.PNG

IP Address of Main Router:

ipadd_main.PNG

Vlan and IP Address of ER-LITE:

vlan_er.PNG

mankomal

I am assigning IPs to VLAN interfaces
192.168.48.0/30

mankomal

So we are trying to configure a VLAN connection for one of the clients thru our distribution port the devce on client side is a cyberoam router/firewall, but VLAN doesnt seems to work can any one suggest some tips on this ? USING CCR1009-8G-1S-1S+ on service provider side VLAN.PNG on other end we ar...

mankomal

In a server with IP address 103.43.xx.x , I am assigning Public IPs to customers and also giving out Public dynamic IPs defined in IP pool all are in the subnet of 103.43.xx.0/24 The curious case is that the customers who are assigned IPs in RM-ACP are able to ping RM-server but all other customers ...

mankomal

Hello

I dont know if this is a bug or a normal practice but PPPoE users always get the same IP address from IP->pool no matter how many times they logoff and logon for the same calender date

In any case can this be undone i.e. user always get a fresh available IP from pool.

Cheers

mankomal

In webfig

There is End USER License, the Webfig logo, the MANUAL link, the System->Routerboard, system-> resources link good enough to identify the product is there any way to block these

mankomal

Syed
With hotspot we can even create custom page but custom PPPoE dialer if possible will be awesome.

mankomal

Hi
I am using Windows 7 and facing problem with Netsinstall for last 2 months now, I am getting following error :
bind bootp failed: An attempt was made to access a socket in a way
forbidden by its access permissions.
(10013)
(See pic)

Please help me resolve this

mankomal

Is there any way to advertise a webpage on PPPoE, such as everytime a customer logs in (a fresh PPP connection is established) a pop-up advertisement comes ?

mankomal

yea thats easy but everytime router restarts the Static rule(transparent proxy) goes above the hotspot dynamic rules so people are not able to see the login page After we drag the rule below the dynamic rules then everything works fine, It would be great if there is no human intervention required af...

mankomal

really want this .. can somebody not help
or is it not possible in MT

mankomal

Hello I have a HotSpot running for my clients and have transparent web-proxy running to log URLs, Problem is everytime I restart my router the NAT settings for transparent proxy become rule 0 in Firewall Nat and all dynamic hotspot rules come below it so user is not able to see the hotspot login pag...

mankomal

hello I have been trying to search for this and was not able to find any topic so far. Is it possible to log URL traffic hotspot username based instead of their IP addresses 14:07:16 web-proxy,account 192.168.200.102 GET http://bg2.v4.a.dl.ws.microsoft.com/dl/content/a/6/updt/2013/03/00443bbd-67d2-4...

mankomal

Hello everyone, Is there a way to set up some kind of a reminder so that I remind users their account will expire in 3 days, 2 days and finally 1 day? I use user manager and RB750 V. 5.20 Maybe redirect them to a page that will tell them: YOUR ACCOUNT WILL EXPIRE IN 3 DAYS. PLEASE RENEW TO STAY CON...

mankomal

Spike,

I am trying to replicate your problem at my end ... you can add me on skype my id is singh.mankomal
I got this working 3 days back only on one of my servers with similar problems

mankomal

No no spike15mk I wrote install on USB not from USB Sorry my mistake. Well I will wrote an email to support, and tomorrow I will remove one hdd and install MikroTik on desktop PC, then I will put it back in server(hopefully it will work). But I will not have raid this way...I am out of options Spik...

mankomal

hello, I was trying UM to make my clients authenticate thru it. But some how its not working MY network is like this: ADSL Router connected to RB433GL(r52H 5GHz link) RB433GL(r52H 5Ghz link) TRANSPARENT BRIDGE (2nd R52H distributing thru 2.4GHz link) my UM is on 1st router IP address 192.168.1.200 c...

mankomal

hello, I was trying UM to make my clients authenticate thru it. But some how its not working MY network is like this: ADSL Router connected to RB433GL(r52H 5GHz link) RB433GL(r52H 5Ghz link) TRANSPARENT BRIDGE (2nd R52H distributing thru 2.4GHz link) my UM is on 1st router IP address 192.168.1.200 c...

mankomal

so your devices are damaged by high voltage? use grounding and you will not have such problems No Normis our boards were not damaged by high voltage, we use 12v adapters on a line conditioner specifically for the reason that in case there is a high voltage the line conditioner trips and power is cu...

mankomal

Normis, Please dont close this thread for sometime as I need others o report on this problem also... http://forum.mikrotik.com/viewtopic.php?f=3&t=59203&p=302904&hilit=711#p302904 http://forum.mikrotik.com/viewtopic.php?t=56747 1. The Connector falling off is a real problem and needs to be fixed as ...

mankomal

HI, can anyone help me with setting up of hotspot wherein the username and password comes via SMS. I guess you must have all been to airport and all and if you have to use the wireless service you just give money via credit card or any other online banking service and the username and password comes...

mankomal

normis,
there are many cards which are not even detected by RBs any specific reason ???

rgds/MS

mankomal

any one knows of any mini-pci cards or are there only express cards
if some one has tried can they share their experience and results
also if someone could please let me know any reseller from where I can buy these cards

rgds/MS

mankomal

Hi,

I used 8GB sandisk extreme II. I think 16 GB will be ok too.

I read from Normis that sandisk it's fully compatible, kingston have some problems.

regards,

can we put 16gb X 2 cards
any suggestion on what card to use ?

mankomal

can anyone tell me what is the maximum CF card we can put in 1000U and if anyone had tried it with some particular make of CF card please share...

regards
Mankomal Singh

mankomal

it would be awesome something like rb 2000 or 10000 with some asics do hardware routing and other hardware based features like allot cisco and others, coz its incredible the allot netenforcer (slackware) can do 1gbit of traffic shaping ( layer7 ) with a 300mhz cpu. it would be great if we could hav...

mankomal

approximately what thru put you get machine to machine at both ends as we have a similar requirement where in we have to transport 50mbps full-duplex to a Sub-ISP from the main Hub .

regards

Mankomal Singh

mankomal

Hi,

I just did a similar link in India, let me know the exact distance and all other relvant details I might be able to help you in this. Where are you located?

regards

Mankomal Singh
mankomal [at] gmail [dot] com

mankomal

you check the cards and ask your sales team to quote me the price i will buy 4-5 units

thanks

mankomal

dude i will be placing an order in next week let me know what will be the price of TESTED cf cards because this time you'll be sending me the cards. I have tested A-data Speedy also it is not working

thanks

mankomal

ok i just posted this on one more thread that the ether3 light starts to blink and the board doesnt boots when we insert the 8gb CF card ( transcend x133)...

anything we are doing wrong or do we have to do something in the hyperterminal at boot-up

thanks

mankomal

hi,
I just tried Transcend x133 speed Cf card 8gb on RB600 but, there seem to be some problem the board doesnot detects it... That is the Ether 3 light starts to blink and there is no booting action on the board... ANY SUGGESTIONS ANYOONE??

Thanks

Search found 68 matches