Community discussions

Search found 946 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 19
by Anumrak
Thu May 30, 2019 5:39 pm
Forum: General
Topic: Zen Internet IPv6 example?
Replies: 1
Views: 145

Re: Zen Internet IPv6 example?

Hey. Have you seen info on Mikrotik wiki?
by Anumrak
Wed May 29, 2019 5:36 pm
Forum: Beginner Basics
Topic: Blocking a mac address from getting internet [SOLVED]
Replies: 4
Views: 283

Re: Blocking a mac address from getting internet [SOLVED]

IP > Firewall uses IP addresses, not MAC addresses. If you want to block a MAC address the interface will have to be in a bridge, then use Bridge > Filter The ! means NOT - for example !192.168.1.42 means 'any address except 192.168.1.42' Actually, IP - Firewall - Filter can block mac addresses, al...
by Anumrak
Wed May 15, 2019 2:01 pm
Forum: Beginner Basics
Topic: Direct specific content through VPN
Replies: 4
Views: 217

Re: Direct specific content through VPN

Hey. It is better by IP addresses, because you deal with a router, not specific hardware. Content is a layer 7, so it can be done, but it's very hard to do on a CPU. You should google for topics "layer 7 filtering/marking on mikrotik".
by Anumrak
Wed May 15, 2019 1:58 pm
Forum: Beginner Basics
Topic: Bruteforce login prevention doesn't work
Replies: 1
Views: 159

Re: Bruteforce login prevention doesn't work

Hey. Are you sure that all 5 rules added to your firewall section in right order? Like drop, blcklst, s3,2,1. Drop on the top and the stage 1 on the bottom.
by Anumrak
Wed May 15, 2019 11:38 am
Forum: Beginner Basics
Topic: A little help to configure a NAT
Replies: 3
Views: 248

Re: A little help to configure a NAT

Why just don't use VRRP or VRRP+OSPF?
by Anumrak
Wed May 15, 2019 11:29 am
Forum: Beginner Basics
Topic: VPN PPTP Passthrough Problem
Replies: 4
Views: 231

Re: VPN PPTP Passthrough Problem

Hello, i have a rather simple setup here with a Mikrotik router, and a SBS 2008 with a PPTP vpn server. I'm trying to get pptp vpn passthrough to work, but it doesn't seem to work. Port 1723 forwarding seems to work, but data doesn't seem to pass through. I've seen many references to a PPTP helper,...
by Anumrak
Wed May 15, 2019 11:26 am
Forum: General
Topic: facebook and instagram problem..
Replies: 1
Views: 101

Re: facebook and instagram problem..

Aaaand...a tech diag?
by Anumrak
Wed May 15, 2019 11:18 am
Forum: General
Topic: dst-nat with changing port
Replies: 20
Views: 753

Re: dst-nat with changing port

We're all here to help ;)
by Anumrak
Wed May 15, 2019 11:12 am
Forum: Beginner Basics
Topic: Open all ports on all devises [SOLVED]
Replies: 6
Views: 340

Re: Open all ports on all devises [SOLVED]

It does not work that way. A NAT forwards to a target IP. However in most situations, if the game is talking to a server somewhere else, the client initiates the connection and the router will forward responses to the IP that originated the request. No special setup is normally required. If you are...
by Anumrak
Wed May 15, 2019 10:48 am
Forum: General
Topic: dst-nat with changing port
Replies: 20
Views: 753

Re: dst-nat with changing port

You should check availability of your changed port from outside, for example, on some web site that can check it. If it closed then your ISP just filtering unknown ports. Also you have to have a global unique IP address, not from private range.
by Anumrak
Wed May 15, 2019 10:08 am
Forum: Beginner Basics
Topic: [solved] VLAN-subnet over 3 devices / routing? switching?
Replies: 3
Views: 217

Re: VLAN-subnet over 3 devices / routing? switching?

Hey. If your routers are far from each other, then maybe you will need EoIP + OSPF. You can use iBGP too, but you really need to think first, why do you need that. In order to reach other host on layer 2, all you need is create vlan interface and tag it with appropriate vlan, also choose correct eth...
by Anumrak
Wed May 15, 2019 10:00 am
Forum: General
Topic: RB750GR3 for a 30 PCs Gaming event?
Replies: 10
Views: 403

Re: RB750GR3 for a 30 PCs Gaming event?

Nope, Gr3 won't do. Since you want ot balance, you'll need to skip FastTrack. Without it gr3 won't be able to cope with bandwidth.

You need more power. 4011 will do for example
I don't get why you think hEX won't handle it.
by Anumrak
Tue Apr 30, 2019 2:00 pm
Forum: Beginner Basics
Topic: Gateway Issue
Replies: 1
Views: 117

Re: Gateway Issue

by Anumrak
Fri Apr 26, 2019 5:02 pm
Forum: Forwarding Protocols
Topic: MPLS does not mark anything in the table
Replies: 3
Views: 238

Re: MPLS does not mark anything in the table

Did you enable mpls on interfaces?
by Anumrak
Fri Apr 26, 2019 4:27 pm
Forum: Beginner Basics
Topic: Forward traffic to another router
Replies: 4
Views: 243

Re: Forward traffic to another router

I don't understand how you directly connect 1.10 and 1."something" on server second interface. Because your router doesn't have any 1.0 ip address on ether4 interface. And second note - server from 2.0 network can not interact with 1.0 without a route(specific or default one). You need fix this thing.
by Anumrak
Fri Apr 26, 2019 3:53 pm
Forum: Beginner Basics
Topic: Forward traffic to another router
Replies: 4
Views: 243

Re: Forward traffic to another router

Hey. Paste your ipv4 route list here pls :)

Does your pfSense server have a default route?
by Anumrak
Fri Apr 26, 2019 3:49 pm
Forum: General
Topic: WinBox memory consumption
Replies: 1
Views: 147

Re: WinBox memory consumption

:O have to check out my consumption :)
by Anumrak
Tue Apr 23, 2019 3:46 pm
Forum: General
Topic: Ping IPSEC host from router
Replies: 20
Views: 676

Re: Ping IPSEC host from router

What about accept nat rule for your host in the tunnel before main src-nat rule? That would be one way to solve it; the other one, consistent with the approach already used, is to add an action=notrack dst-address-list=corp_nets rule also to chain=output of /ip firewall raw . The explanation is tha...
by Anumrak
Tue Apr 23, 2019 1:59 pm
Forum: General
Topic: Ping IPSEC host from router
Replies: 20
Views: 676

Re: Ping IPSEC host from router

Hey. What about accept nat rule for your host in the tunnel before main src-nat rule? You are nating your requests into global IP address.
by Anumrak
Tue Apr 23, 2019 1:29 pm
Forum: General
Topic: Ping Loss at line 9
Replies: 6
Views: 482

Re: Ping Loss at line 9

Thank you for your reply. However you say that data flows much faster through them than in them, does this include pings that are passed through the routers to later routers but with higher latencies that persist to the end of the traceroute. Are real packets suffering the same latency? Gamers are ...
by Anumrak
Tue Apr 23, 2019 9:40 am
Forum: Beginner Basics
Topic: IPSec tunnel failing
Replies: 7
Views: 391

Re: IPSec tunnel failing

What IP address do you get from your ISP? Is it from private range or global? Or from 100.64.0.0/12? And yeah can you simply ping another router? Or can you ping yourself from other side?
by Anumrak
Fri Apr 19, 2019 11:33 am
Forum: Beginner Basics
Topic: IPSec tunnel failing
Replies: 7
Views: 391

Re: IPSec tunnel failing

Hello group! I am a new RouterOS user, and I’ve inherented a mess that I am unable to resolve. I have two routers that are unable to establish a connection: 6.44(Mauá) and 6.43(ceclim). I’ve successfully created vpn tunnels between Maua and Draytek routers at three other sites. Can someone help me ...
by Anumrak
Fri Apr 19, 2019 11:31 am
Forum: General
Topic: RB750gr3 rebooting
Replies: 1
Views: 180

Re: RB750gr3 rebooting

This is not normal behavior. Change it back for a new one.
by Anumrak
Fri Apr 12, 2019 2:00 pm
Forum: Beginner Basics
Topic: Share interent connection
Replies: 6
Views: 325

Re: Share interent connection

Thank you, yes my ISP is ok with that, I need to know how to set up the RB750, in order to achieve this.
Google for "mikrotik bridge configuration with vlans".
by Anumrak
Thu Apr 11, 2019 5:14 pm
Forum: General
Topic: How to manual set IPv6 link-local address on interface?
Replies: 4
Views: 282

Re: How to manual set IPv6 link-local address on interface?

Hello, my ISP assigned me an IPv6 /48 prefix. For routing the ISP instructed me to assign the link-local address "fe80::<prefix>" to my wan interface and to setup default route to "fe80::1" through wan interface. My problem: I cannot set the link-local address on my wan interface, i always get the ...
by Anumrak
Thu Apr 11, 2019 5:02 pm
Forum: General
Topic: Why can my /30 subnet can talk to other subnets?
Replies: 5
Views: 392

Re: /30 subnet can talk to other subnets

You have to set up /ip firewall filter rules which will block unwanted connections. By default your router is happily routing packets according to it's configuration. Other than that, your setup is flawed on L2 (ethernet) level. Right now your subnets are not physically separated. If you really wan...
by Anumrak
Thu Apr 11, 2019 3:25 pm
Forum: Beginner Basics
Topic: Share interent connection
Replies: 6
Views: 325

Re: Share interent connection

Thank you for the reply. I am however a newby, and do not follow. Please help in easy terms to accomplish. Thank you. Hennie If your goal is to provide 2 different accounts from your internet provider, then you can use bridge function to make traffic flow to your tenant. You will have first account...
by Anumrak
Thu Apr 11, 2019 3:23 pm
Forum: Beginner Basics
Topic: Router for my new home!
Replies: 14
Views: 874

Re: Router for my new home!

by Anumrak
Thu Apr 11, 2019 3:14 pm
Forum: Beginner Basics
Topic: Share interent connection
Replies: 6
Views: 325

Re: Share interent connection

Hey. You can't share one PPPoE session between people inside LAN. Way you can do is to bridge PPPoE traffic of second account with different VLANs from your ISP switch through your first router to another one and terminate VLAN tag on it and then, terminate PPPoE traffic. Or you can terminate only V...
by Anumrak
Fri Apr 05, 2019 9:59 am
Forum: Beginner Basics
Topic: Can't access Internet from LAN devices
Replies: 4
Views: 270

Re: Can't access Internet from LAN devices

I'm working of our first all MikroTik network deployment and went with a CCR1016-12S-1S+ software v6.44.2 for the router I'm having trouble with gaining access to the internet from the LAN connected devices The Router is connected to the ISP and can ping 8.8.8.8 LAN devices are receiving IP from th...
by Anumrak
Wed Feb 27, 2019 10:32 am
Forum: General
Topic: pppoe falls constantly
Replies: 2
Views: 429

Re: pppoe falls constantly

Make sure that compression is off in your ppp profile you using for your customers.
by Anumrak
Thu Jan 17, 2019 9:09 am
Forum: General
Topic: RB951G-2HnD MTU problem [SOLVED]
Replies: 14
Views: 723

Re: RB951G-2HnD MTU problem [SOLVED]

There is also L2 MTU on interfaces. You should try to change this one.
by Anumrak
Mon Jan 14, 2019 3:23 pm
Forum: General
Topic: Change C
Replies: 1
Views: 166

Re: Change C

Of course. Just read more about filtering

https://wiki.mikrotik.com/wiki/Manual:S ... ng_Filters
by Anumrak
Mon Jan 14, 2019 3:13 pm
Forum: General
Topic: Cisco + Mikrotik + QinQ
Replies: 2
Views: 262

Re: Cisco + Mikrotik + QinQ

just google it.
by Anumrak
Mon Jan 14, 2019 12:13 pm
Forum: Forwarding Protocols
Topic: pppoe with ospf [SOLVED]
Replies: 4
Views: 512

Re: pppoe with ospf [SOLVED]

You shouldn't route your customers services via ospf. Use iBGP.
by Anumrak
Mon Jan 14, 2019 12:12 pm
Forum: Forwarding Protocols
Topic: Change default OSPF area
Replies: 5
Views: 424

Re: Change default OSPF area

You wanted to have 2 instances running in the same area? Or you wanted the same area id used for different instances? Basically, the named area "backbone" is more like an alias, the cli does not check to ensure that there is instance separation for the alias. You can use area 0 (0.0.0.0) and call i...
by Anumrak
Thu Jan 10, 2019 12:10 pm
Forum: Forwarding Protocols
Topic: Change default OSPF area
Replies: 5
Views: 424

Re: Change default OSPF area

You can edit instance with decimal values. And you can set area name with letters and area-id with decimal values in IP address form Example: routing ospf instance set 0 router-id=3.3.3.3 routing ospf network add network=10.0.0.4/30 area=backbone routing ospf network add network=10.0.0.8/30 area=bac...
by Anumrak
Thu Jan 10, 2019 11:59 am
Forum: Forwarding Protocols
Topic: OSPF load balancing
Replies: 8
Views: 805

Re: OSPF load balancing

Hi Ape, I also have pppoe server running on each routers interfaces except the ether 1 is it gonna effect that pppoe and do i have to add those pppoe(public ips) to the networks for ospf too? thanks It depends entirely on your architectural solution. I would not drive client services through ospf. ...
by Anumrak
Thu Jan 10, 2019 11:38 am
Forum: General
Topic: IPV6 to remote site over IPV4 VPN
Replies: 4
Views: 560

Re: IPV6 to remote site over IPV4 VPN

Just wanted to bump this. I have been playing around on and off as I have time but still have not figured out how to get this configured. Cheers! It's all about simple routing. Set /126 or /64 net between offices through the tunnel from /48 prefix for example. Then, through that small ptp prefix yo...
by Anumrak
Thu Jan 10, 2019 11:34 am
Forum: General
Topic: Hairpin NAT not working on RouterOS 6 line WAN load balancing
Replies: 8
Views: 515

Re: Hairpin NAT not working on RouterOS 6 line WAN load balancing

Can anyone support me this problem. Thank you! For me doesnt work without this rule also add action=masquerade chain=srcnat comment=HAIRPIN dst-address=192.168.1.0/24 out-interface=LAN src-address=192.168.1.0/24 Change ips and out interface to match your network. He have this rule already add actio...
by Anumrak
Thu Jan 10, 2019 11:07 am
Forum: General
Topic: Hairpin NAT not working on RouterOS 6 line WAN load balancing
Replies: 8
Views: 515

Re: Hairpin NAT not working on RouterOS 6 line WAN load balancing

Can anyone support me this problem. Thank you! For me doesnt work without this rule also add action=masquerade chain=srcnat comment=HAIRPIN dst-address=192.168.1.0/24 out-interface=LAN src-address=192.168.1.0/24 Change ips and out interface to match your network. He have this rule already add actio...
by Anumrak
Thu Jan 10, 2019 11:05 am
Forum: General
Topic: Hairpin NAT not working on RouterOS 6 line WAN load balancing
Replies: 8
Views: 515

Re: Hairpin NAT not working on RouterOS 6 line WAN load balancing

Hey. If all your rules are identical, maybe your PCs has some firewall rules that blocking your traffic? Like CHAM CONG T2 and CHAM CONG T3.
by Anumrak
Wed Dec 26, 2018 8:34 am
Forum: General
Topic: Two Networks, one gateway
Replies: 7
Views: 402

Re: Two Networks, one gateway

Do you realize that default route should be found at the host in broadcast domain?
by Anumrak
Fri Dec 07, 2018 12:09 pm
Forum: General
Topic: how ros work with multi cores
Replies: 1
Views: 195

Re: how ros work with multi cores

1 task per core. That's how.
by Anumrak
Tue Dec 04, 2018 1:17 pm
Forum: General
Topic: IPV6 IP Dinamic Link Deleted
Replies: 1
Views: 198

Re: IPV6 IP Dinamic Link Deleted

Try to disable and enable that interface.
by Anumrak
Mon Dec 03, 2018 4:05 pm
Forum: Forwarding Protocols
Topic: MPLS-TE traffic don't flow over TE
Replies: 2
Views: 398

Re: MPLS-TE traffic don't flow over TE

Hey. Try to check your timeout of switching between primary and secondary. And second one: do you have full LDP connectivity via both paths?
by Anumrak
Mon Dec 03, 2018 3:57 pm
Forum: General
Topic: Static route not working
Replies: 8
Views: 445

Re: Static route not working

Hi,

Can you please specify how. It will be really helpful.
via your script. Netwatch can't select an interface.
by Anumrak
Mon Dec 03, 2018 3:05 pm
Forum: General
Topic: Static route not working
Replies: 8
Views: 445

Re: Static route not working

That happens because of default route of gateway2ip I suppose. In order to force ping your host through gateway1ip, assign an interface option from which you ping.

For example, ping 8.8.8.8 interface=gateway1ip
by Anumrak
Fri Nov 30, 2018 3:02 pm
Forum: Wireless Networking
Topic: WAP with IPv6
Replies: 8
Views: 651

Re: WAP with IPv6

Try to ping closest host from server with ICMPv6.
  • 1
  • 2
  • 3
  • 4
  • 5
  • 19