Community discussions

MUM Europe 2020

Search found 245 matches

by UniKyrn
Fri Mar 14, 2008 7:17 pm
Forum: General
Topic: block communication between hotspot users
Replies: 13
Views: 2995

Re: block communication between hotspot users

Yes, that rule would kill Internet connectivity. If you're going to do this by IP address, then you need two rules, in the following order. 1) Allow anything from 192.168.16.0/20 to 192.168.16.1, so that they can talk to the gateway address. 2) Drop anything from 192.168.16.0/20 to 192.168.16.0/20 s...
by UniKyrn
Thu Mar 13, 2008 9:54 pm
Forum: General
Topic: block communication between hotspot users
Replies: 13
Views: 2995

Re: block communication between hotspot users

At least using the winbox interface, there is a little checkbox next to the Dst. Address field that is the "not" option. Simply check that box and enter your gateway address, then it'll match on anything that is "not" the gateway address. You could also do it by the src and dst interfaces, which mig...
by UniKyrn
Tue Jan 22, 2008 5:01 pm
Forum: Beginner Basics
Topic: heavy letancy frm my coustomers.plz help me its urgnet..
Replies: 9
Views: 2795

Re: heavy letancy frm my coustomers.plz help me its urgnet..

well thx mr unikyrn..but i cnat change the coustomers CPE.. i just need a solution on my tower only....could mikrotik can be treated as a hardware firewall....
Then why are you asking for recommendations for a better CPE, since you can't use them?
by UniKyrn
Sat Jan 19, 2008 9:15 pm
Forum: RouterBOARD hardware
Topic: Urgent, recover damaged bios on RB230
Replies: 3
Views: 1027

Re: Urgent, recover damaged bios on RB230

Buy another one and have it shipped next day delivery to you.
by UniKyrn
Sat Jan 19, 2008 7:54 pm
Forum: Beginner Basics
Topic: heavy letancy frm my coustomers.plz help me its urgnet..
Replies: 9
Views: 2795

Re: heavy letancy frm my coustomers.plz help me its urgnet..

You need to control the traffic from the customer before it uses your AP's bandwidth, not afterwards, so the control has to occur at the customer side. A MikroTik would be a good station machine that could also handle the traffic shaping.
by UniKyrn
Sat Jan 19, 2008 7:47 pm
Forum: RouterBOARD hardware
Topic: Urgent, recover damaged bios on RB230
Replies: 3
Views: 1027

Re: Urgent, recover damaged bios on RB230

If you lost the bios, about all you're going to do with that board is return it to the factory for repair.
by UniKyrn
Mon Dec 24, 2007 11:50 pm
Forum: General
Topic: IDE Flash stop!! and lose my License!!
Replies: 5
Views: 866

Re: IDE Flash stop!! and lose my License!!

If that flash is having problems with the first few sectors, it's not worth fighting with because even if you fix it now, you'll be doing it again and again and ... As for the license, that depends on who you bought it from. If you bought it from a reseller, then all they can do is sell you a new li...
by UniKyrn
Mon Dec 24, 2007 11:38 pm
Forum: Wireless Networking
Topic: Backhaul Hardware & Limitations
Replies: 5
Views: 1166

Re: Backhaul Hardware & Limitations

I've some experience with links handling about half that number of users. It isn't really the number of users you should worry about because as a backhaul link, you're already going to be turning off connection tracking and anything else that would slow down the CPU. What you should be focusing on i...
by UniKyrn
Tue Nov 27, 2007 11:37 am
Forum: Wireless Networking
Topic: unbeleivable loss !!
Replies: 8
Views: 1060

Re: unbeleivable loss !!

An amp will make things worse than they already are, and depending on where you are, would be illegal as well. Use the sectors and tilt them down so that the radiation pattern is aimed at your intended area of coverage. If you can, go with one radio per antenna. That allows for more customers and if...
by UniKyrn
Tue Nov 27, 2007 11:07 am
Forum: Wireless Networking
Topic: unbeleivable loss !!
Replies: 8
Views: 1060

Re: unbeleivable loss !!

A 15db omni has a very flat radiation pattern, it's hearing every noise source for a long distance away and every one of those sources can cause the radio to wait for a clear channel before transmitting a frame. In addition, because of that radiation pattern, close in sources are going to be underne...
by UniKyrn
Wed Nov 21, 2007 9:36 pm
Forum: General
Topic: PPPoE Flooding
Replies: 9
Views: 3070

Re: PPPoE Flooding

Why not add a firewall rule to throw away the PPPoE frames from his routers MAC address?
by UniKyrn
Fri Nov 16, 2007 9:43 pm
Forum: Wireless Networking
Topic: Deauth bringing performance down on AP's
Replies: 6
Views: 1040

Re: Deauth bringing performance down on AP's

When you allow them to connect, what kind of signal strengths to you get from them? I don't see that many unique MAC's in your posting so this appears to be just a small number of stations running unconfigured. If they connect, what's the reason given for their disconnection?
by UniKyrn
Fri Nov 16, 2007 9:14 pm
Forum: Wireless Networking
Topic: Deauth bringing performance down on AP's
Replies: 6
Views: 1040

Re: Deauth bringing performance down on AP's

My guess would be that you've got non-customers who haven't configured their computers to attach to a specific SSID, so they're trying to attach to the strongest signal they hear, which is you. There aren't many ways to fix that, if the owners of those computers won't fix their config. You could alw...
by UniKyrn
Fri Nov 16, 2007 8:36 pm
Forum: Wireless Networking
Topic: Deauth bringing performance down on AP's
Replies: 6
Views: 1040

Re: Deauth bringing performance down on AP's

Does the log specify the reason for the deauth?

If you've got customers with poor connections, the AP has to spend more time trying to exchange packets with those customers, to the exclusion of better connections. That drops the throughput pretty rapidly.
by UniKyrn
Tue Nov 13, 2007 9:17 pm
Forum: General
Topic: PPPoE and blocking customer
Replies: 7
Views: 1247

Re: PPPoE and blocking customer

I have to suspect that if they can't login to your network, they'll call and you can tell them the reason they're blocked that way. :) If you let them on your network, I'd recommend that you at least assign them an IP that you don't route to the Internet. Then route all traffic from that IP network ...
by UniKyrn
Tue Nov 13, 2007 5:43 pm
Forum: General
Topic: PPPoE and blocking customer
Replies: 7
Views: 1247

Re: PPPoE and blocking customer

If they're authenticating to your network via PPPoE, why don't you simply change their password to block them?
by UniKyrn
Sat Nov 10, 2007 12:45 am
Forum: General
Topic: Packet loss
Replies: 4
Views: 1208

Re: Packet loss

And why are you using an RB112 as an AP when MikroTik explicitly tells you it's designed for use as a CPE device because of it's low horsepower?
by UniKyrn
Fri Oct 26, 2007 9:35 pm
Forum: Wireless Networking
Topic: block residents of the building
Replies: 4
Views: 678

Re: block residents of the building

Yes, managed switches can be a bit expensive, you might check out surplus sites for older models that have been discontinued and are available cheaper. Without buying new equipment, I can't think of any way to remotely deal with problem customers. The NAT server at their end does a pretty good job o...
by UniKyrn
Fri Oct 26, 2007 8:15 pm
Forum: Wireless Networking
Topic: block residents of the building
Replies: 4
Views: 678

Re: block residents of the building

I'm assuming that the client radios in the various builds are connected to a switch that then fans out to each customer in the building that has signed up for service. Either start using managed switches so you can remotely disable specific ethernet ports with clients haven't paid, or send out a tec...
by UniKyrn
Fri Oct 26, 2007 8:10 pm
Forum: General
Topic: strange ips in connections
Replies: 6
Views: 998

Re: strange ips in connections

Is your NAT rule written so that it only NAT's your 172.16 source address, or is it NAT'ing anything on your internal interface that goes out your external interface? That 192.168 address is obviously being NAT'd or it wouldn't be talking to anybody. That's a pretty odd source and destination port c...
by UniKyrn
Tue Oct 16, 2007 7:53 am
Forum: General
Topic: [HELP!!] Bruceforce ATTACKS!
Replies: 3
Views: 781

Re: [HELP!!] Bruceforce ATTACKS!

China, why am I NOT surprised. You might consider input rules that drop any traffic from outside your network, except for protocols you actually need the router to respond to. Otherwise every worm, compromised PC and idiot on the planet is going to try and break into your router.
by UniKyrn
Mon Oct 08, 2007 11:16 pm
Forum: RouterBOARD hardware
Topic: RouterBoard 230 - FATAL: IDE drive not found
Replies: 7
Views: 1988

Re: RouterBoard 230 - FATAL: IDE drive not found

Yup, IDE gone bad on Board. Kind sucks since it was only 2 years old. It's out of warranty then so you'd have to pay shipping and the cost to repair it. Unless you really need those PCMCIA ports, replacing it with a newer model should be cheaper than repairing it or buying a new one, unless you get...
by UniKyrn
Sat Oct 06, 2007 7:06 pm
Forum: General
Topic: Failed POE port
Replies: 6
Views: 905

Re: Failed POE port

What kind of diagnostic work have you done to determine where the problem is? I can think of at least five different ways to have a POE powered router fail, most of them do not involve the router itself.
by UniKyrn
Fri Oct 05, 2007 6:48 pm
Forum: General
Topic: Problem : restart by itself and config back to default
Replies: 4
Views: 711

Re: Problem : restart by itself and config back to default

How does RouterO/S respond to a bad block in the filesystem that happens to be within the config file? Does it perhaps delete the config because it's unusable? Does it run a chkdsk on the filesystem at mount time that might delete the config file because the FAT is damaged?
by UniKyrn
Sat Sep 29, 2007 7:34 pm
Forum: Wireless Networking
Topic: XR5 - system reboots spontaneously - RB11 issue?
Replies: 6
Views: 1179

Re: XR5 - system reboots spontaneously - RB11 issue?

Unless they've redesigned the RB11, the onboard 3.3V regulator can not supply enough current to power an XR5 at full output. That's why it works when you lower the power.
by UniKyrn
Sat Sep 22, 2007 8:08 am
Forum: Wireless Networking
Topic: How to connect MikroTik to another AP without WDS
Replies: 3
Views: 734

Re: How to connect MikroTik to another AP without WDS

What interface is the IP on the MikroTik assigned to?
by UniKyrn
Fri Sep 21, 2007 6:16 pm
Forum: Wireless Networking
Topic: How to connect MikroTik to another AP without WDS
Replies: 3
Views: 734

Re: How to connect MikroTik to another AP without WDS

Put the MikroTik in station mode and have it associate to the SSID of the other AP.
by UniKyrn
Fri Sep 07, 2007 11:24 pm
Forum: General
Topic: Setting up single ip address users?
Replies: 6
Views: 851

Re: Setting up single ip address users?

i wondered about this also, the downside is that they have a smaller MTU now when using PPPOE?
Yes, there will be a performance loss and since it was specified that these were colo and dedicated servers, they might not even have PPPOE available.
by UniKyrn
Fri Sep 07, 2007 9:11 pm
Forum: General
Topic: Setting up single ip address users?
Replies: 6
Views: 851

Re: Setting up single ip address users?

It would be a pain to maintain, especially if your customers tend to swap equipment often at their end of the wire, but you could build firewall rules that allowed incoming packets from them that met specific MAC/IP combinations, and dropped anything else.
by UniKyrn
Fri Sep 07, 2007 9:05 pm
Forum: General
Topic: Layer 3 switch
Replies: 2
Views: 817

Re: Layer 3 switch

I've worked with several rackmount RouterOS systems that had multiple 4 port ethernet cards in them. Each port had different IP networks configured on it and the box routed traffic between the interfaces and our upstream links. Unless you're doing something exotic like multicast/IGMP, a RouterOS sys...
by UniKyrn
Fri Sep 07, 2007 8:54 pm
Forum: Wireless Networking
Topic: dead eth on POE?
Replies: 1
Views: 560

Re: dead eth on POE?

Over the years there have been reports that the POE port on a RB5xx is a little more sensitive to static or electrical surges than the old RB2xx series was. I remember taking a lot more calls to RMA a 5xx for blown POE ports than I did for 2xx boards. Ground everything, use lightning/surge protector...
by UniKyrn
Thu Sep 06, 2007 8:50 pm
Forum: RouterBOARD hardware
Topic: Optiomizing Bittorrent by dropping resets
Replies: 1
Views: 934

Re: Optiomizing Bittorrent by dropping resets

It's certainly possible to drop TCP packets that have the RST flag set, using the RouterOS firewall, so you should be able to do what you're asking with a single rule. Using WinBox and adding a rule to the input firewall table: Specify an input interface of your (Comcast Cable Modem? :), protocol TC...
by UniKyrn
Mon Sep 03, 2007 8:11 am
Forum: General
Topic: Blocking roug DHCP server
Replies: 4
Views: 1045

Re: Blocking roug DHCP server

You can also use the forward firewall rules to block DHCP requests headed TO a wireless client and replies coming FROM wireless clients.
by UniKyrn
Sun Aug 26, 2007 11:33 pm
Forum: General
Topic: what to do when found infected user?
Replies: 10
Views: 1308

Re: what to do when found infected user?

Disable their authentication and bounce their connection so they are thrown off your network. Then wait for them to call, explain they get their connection back when they certify their PC has been cleaned up. Also explain that if they lie about their PC being cleaned up, the account is canceled perm...
by UniKyrn
Wed Aug 22, 2007 8:01 am
Forum: General
Topic: MT Hotspot and Rouge Routers
Replies: 8
Views: 1720

Re: MT Hotspot and Rouge Routers

Out of curiosity, when you find one of these routers providing free access to your service, do you leave the cat5 to that apartment connected or do you disconnect that customer and wait for them to call you?
by UniKyrn
Mon Aug 13, 2007 5:13 pm
Forum: Scripting
Topic: ISP address problems X.X.X.0 or X.X.X.255
Replies: 2
Views: 1399

Re: ISP address problems X.X.X.0 or X.X.X.255

What is the netmask that goes with those IP's? Are you assuming it's /24 or is the ISP telling you it's a /24?
by UniKyrn
Wed Aug 08, 2007 8:50 pm
Forum: General
Topic: Problems with DHCP Server owned by suscribers
Replies: 5
Views: 906

Re: Problems with DHCP Server owned by suscribers

You're going to have to put a smarter switch there then, one that can do packet filtering. You could probably build one yourself using RouterO/S, some 4 port ethernet cards and a small PC, or check places like D-Link/NetGear and see if their smart switches have that ability.
by UniKyrn
Tue Aug 07, 2007 5:24 pm
Forum: General
Topic: Problems with DHCP Server owned by suscribers
Replies: 5
Views: 906

Re: Problems with DHCP Server owned by suscribers

It's been awhile since I played with Canopy gear, but I think I remember them having the ability to filter packets. You might be able to filter DHCP requests headed towards your customers and DHCP replies coming from them.
by UniKyrn
Sat Aug 04, 2007 7:54 pm
Forum: Scripting
Topic: How to detect when a MAC address changes to a different IP
Replies: 3
Views: 1545

Re: How to detect when a MAC address changes to a different IP

That is why PPPoE connections are preferable, where clients are assigned IP addresses by your system, and authentication occurs on USERNAME PASSWORD Basis. With PPPoE, clients cannot connect to your system unless they have a USERNAME PASSWORD. The downside to PPPoE is the RSS/MTU change that's requ...
by UniKyrn
Sat Aug 04, 2007 8:30 am
Forum: Scripting
Topic: How to detect when a MAC address changes to a different IP
Replies: 3
Views: 1545

Re: How to detect when a MAC address changes to a different IP

Add a firewall rule(s) that blocks all packets from unallocated IP's.

When you catch somebody screwing with your network infrastructure, terminate their account. Somebody who will screw your network over should be doing it to your competitors network, not yours.
by UniKyrn
Sat Aug 04, 2007 8:23 am
Forum: Wireless Networking
Topic: 300 Clients 1 Ap, its possible?
Replies: 13
Views: 2081

Re: 300 Clients 1 Ap, its possible?

I've babysat a number of 532 based AP's, and while they did better than the 230's, they still didn't have the power to keep up with more than 50 users, roughly. Even then I disabled things like connection tracking, we used /26 real IP on the wireless side so I didn't need CT for NAT. No firewall rul...
by UniKyrn
Wed Jul 18, 2007 7:42 am
Forum: General
Topic: DSL in USA, PPPoA, PPPoE, and RouterOS
Replies: 3
Views: 1233

Re: DSL in USA, PPPoA, PPPoE, and RouterOS

One other difference between PPPoE and PPPoA is the frame size, ATM has a larger MTU than Ethernet. In practice though, since everything on your internal network is probably Ethernet, you wouldn't notice the difference.
by UniKyrn
Sat Jul 14, 2007 9:12 pm
Forum: General
Topic: Recovery of Mikrotik configuration - hard disk failure
Replies: 1
Views: 685

Re: Recovery of Mikrotik configuration - hard disk failure

You might mount the drive in a computer and try a netinstall of a new O/S, and select the save config option. That would get the drive bootable again and you could then export the config.
by UniKyrn
Fri Jul 13, 2007 5:47 am
Forum: General
Topic: Is this P2P BANDWIDTH LIMITING OK?
Replies: 6
Views: 1207

Re: Is this P2P BANDWIDTH LIMITING OK?

Trying to limit it creates the same arms race, based on what I saw while I ran an ISP. Example, we're on the MT forum and an MT can block, but not limit all forms of P2P. Add to that the problem of legit uses of P2P becoming more common. I quit counting the calls we got about World of Warcraft updat...
by UniKyrn
Fri Jul 13, 2007 3:04 am
Forum: General
Topic: Is this P2P BANDWIDTH LIMITING OK?
Replies: 6
Views: 1207

Re: Is this P2P BANDWIDTH LIMITING OK?

Nothing like passing the buck. lol Do you really want a customer that trashes an AP without regard for anybody but himself to be your problem, or would you rather it was your local competitor who's support phone was ringing off the hook with customers threatening to leave because their service wasn...
by UniKyrn
Mon Jul 09, 2007 6:13 pm
Forum: General
Topic: Is this P2P BANDWIDTH LIMITING OK?
Replies: 6
Views: 1207

Re: Is this P2P BANDWIDTH LIMITING OK?

Don't bother trying to limit P2P traffic, it doesn't work against some P2P clients and it just gets you involved in an arms race you're always behind in. You'd be better off making sure your Terms of Service included clauses forbidding interfering with the access of other customers or running servic...
by UniKyrn
Thu Jun 21, 2007 8:12 am
Forum: Beginner Basics
Topic: Problem with Backup/Restore ?
Replies: 9
Views: 6446

Re: Problem with Backup/Restore ?

While you can reduce your downtime by mirroring drives and keeping hot spares for hardware failures, the unfortunate truth is that Router O/S is not designed with enterprise level recovery in mind. In the best of cases you're going to have to swap in a mirrored drive, but in the case of a hardware f...
by UniKyrn
Mon Jun 18, 2007 5:41 pm
Forum: General
Topic: how to detect virused users
Replies: 2
Views: 817

Re: how to detect virused users

If they are supposed to use your mail server for outgoing email, block port 25 outbound to anything except your servers IP and turn on logging for the forwarding rule that does the blocking. If they are free to use any mail server they wish, you'll find out they're virused when your network gets bla...
by UniKyrn
Fri Jun 01, 2007 8:24 am
Forum: General
Topic: Customer DHCP Interference
Replies: 1
Views: 514

Re: Customer DHCP Interference

Block UDP port 67 as a destination to and source from your customer networks.
by UniKyrn
Tue May 29, 2007 8:40 am
Forum: Wireless Networking
Topic: Router has been disconnected (WinBox)
Replies: 5
Views: 4439

Re: Router has been disconnected (WinBox)

Start with figuring out what device has that MAC address shown in the error message. That error is usually warning you that the radio received a packet with a source MAC that wasn't authorized to talk to it.
by UniKyrn
Mon May 28, 2007 9:04 pm
Forum: RouterBOARD hardware
Topic: Ethernet Failure on RB532
Replies: 8
Views: 1983

Re: Ethernet Failure on RB532

Did the boards fail while in service? If so, the ether port has probably taken a static zap and it's been fried.
by UniKyrn
Sun May 27, 2007 4:08 am
Forum: General
Topic: Forward SMTP Traffic 2 Smtp Servers
Replies: 4
Views: 1077

Re: Forward SMTP Traffic 2 Smtp Servers

That's the basic idea, yep. :)
by UniKyrn
Sat May 26, 2007 9:41 pm
Forum: General
Topic: Forward SMTP Traffic 2 Smtp Servers
Replies: 4
Views: 1077

Re: Forward SMTP Traffic 2 Smtp Servers

Have you tried modifying that dst-nat rule's input settings so your own customers are excluded from matching it? IP range would be a good way, though if you have several internal ranges you'd need multiple exclusions.
by UniKyrn
Sat May 26, 2007 9:28 pm
Forum: Wireless Networking
Topic: How to block other routers?
Replies: 9
Views: 1289

Re: How to block other routers?

Stopping the radio from forwarding packets is only half the problem, the AP has to be told to block that kind of traffic also. In your firewall "forwarding" tables, you'd want a rule that blocked any packet that ingressed via a wireless port and that tried to egress via a wireless port. After all, t...
by UniKyrn
Sat Apr 14, 2007 8:41 am
Forum: Wireless Networking
Topic: EoIP or WDS
Replies: 2
Views: 1054

If you can use WDS, do so. It doesn't require that you change the MTU so you don't wind up fragmenting ethernet frames into two wireless frames as they go across the EoIP tunnel.
by UniKyrn
Tue Mar 27, 2007 9:50 pm
Forum: General
Topic: Maximum number of clients on a single AP
Replies: 12
Views: 2282

Having spent three years running a WISP, I do know a bit about this stuff and we're drifting from the original question. The number of clients an AP can support is not strictly related to the horsepower of the AP. You have to have a fast enough machine to push the packets around at the speed the rad...
by UniKyrn
Tue Mar 27, 2007 8:22 pm
Forum: General
Topic: Maximum number of clients on a single AP
Replies: 12
Views: 2282

What does your plan say to do when there are no interference free channels? :)
by UniKyrn
Tue Mar 27, 2007 6:09 pm
Forum: General
Topic: Maximum number of clients on a single AP
Replies: 12
Views: 2282

It depends where the interference is. If it's close to one of your clients, just clients in that area are likely to have problems. It's more likely though that the interference is close to your AP, after all, you mounted it someplace where it could see everything for a long distance, which means it ...
by UniKyrn
Sat Mar 24, 2007 10:21 am
Forum: RouterBOARD hardware
Topic: Ethernet errors on RB532a
Replies: 3
Views: 1395

Get in line with the rest of us, my request to make those error counters visible is over three years old now.
by UniKyrn
Sun Mar 18, 2007 12:07 am
Forum: RouterBOARD hardware
Topic: RouterBoard 230 - FATAL: IDE drive not found
Replies: 7
Views: 1988

And the flash had a bootable copy of RouterOS on it already? Did the board take a static or electrical hit of somekind? If the flash had a bootable image on it, then it's sounding like the IDE interface on the RB230 has gone bad. Those boards were becoming special order items on their way to being d...
by UniKyrn
Sat Mar 17, 2007 8:39 pm
Forum: General
Topic: Two PCRouters in same Public networks, Big problem
Replies: 5
Views: 1121

Re: Two PCRouters in same Public networks, Big problem

traffic is growing a lot when they are connected
What kind of traffic? Are you looking at an ARP or Broadcast storm between the two routers? Maybe you've got a device inside the network that's connected to both the A and B networks and you've got a loop that is causing problems.
by UniKyrn
Sat Mar 17, 2007 8:33 pm
Forum: Wireless Networking
Topic: Customer IP 255.255.255.255
Replies: 2
Views: 1064

Do you recognize the MAC's as belonging to a valid customer of yours? That IP is an "all nets" broadcast IP, but only MT could tell you if the router really received a packet with that IP in it, or if you're looking at an entry where the IP defaulted to -1 as an uninitilized value. Maybe the link is...
by UniKyrn
Sat Mar 17, 2007 8:28 pm
Forum: RouterBOARD hardware
Topic: RouterBoard 230 - FATAL: IDE drive not found
Replies: 7
Views: 1988

Make sure the flash module hasn't worked free of the socket far enough to not make a connection. If that isn't it, then it sounds like the flash has gone bad. You'll have to buy a new flash and relicense the board.
by UniKyrn
Sat Mar 17, 2007 8:25 pm
Forum: RouterBOARD hardware
Topic: Rb112 lost its license
Replies: 3
Views: 1605

RB112's are typically licensed by MT at the factory, and then the license is transfered to the control of the reseller that buys the boards for resale. If you have the serial number of the board, then the records should exist showing when it was sold and which license scheme was in effect at the tim...
by UniKyrn
Fri Mar 09, 2007 4:55 pm
Forum: General
Topic: block communication between hotspot users
Replies: 13
Views: 2995

You add a firewall rule that drops packets that enter via the hotspot interface and that want to exit via the same interface. Or you add a firewall rule that drops packets where the source IP is your hotspot network and the destination isn't your hotspot gateway address. Add them at the MT that is a...
by UniKyrn
Tue Mar 06, 2007 8:40 pm
Forum: General
Topic: block communication between hotspot users
Replies: 13
Views: 2995

The idea is still the same. The hotspot users are probably talking to the gateway IP which is assigned to the local ethernet port. You want to drop packets which ingress on that port and want to egress on that same port back to a different hotspot user. Valid packets would ingress on the local port ...
by UniKyrn
Mon Mar 05, 2007 5:02 pm
Forum: General
Topic: block communication between hotspot users
Replies: 13
Views: 2995

Drop any packet that ingresses from a non-ethernet port that tries to egress from a non-ethernet port.
by UniKyrn
Tue Feb 13, 2007 11:53 pm
Forum: Wireless Networking
Topic: Remote solar powered AP - UPS suggestions?
Replies: 18
Views: 3408

It's not documented in the PDF I have, but if you open a terminal window to your AP, look at the "special-logon" command. Basically you create a special user on the AP that links a telnet session directly to a serial port.
by UniKyrn
Tue Feb 13, 2007 10:40 pm
Forum: Wireless Networking
Topic: Remote solar powered AP - UPS suggestions?
Replies: 18
Views: 3408

I Googled for "solar charge controller rs232" and got a lot of hits for controllers that could be remotely monitored. You'd have to write some scripts or have a central system poll/monitor each AP. With the central approach, you'd probably be able to graph the data using MRTG and have a history of y...
by UniKyrn
Tue Feb 13, 2007 9:22 pm
Forum: Wireless Networking
Topic: Remote solar powered AP - UPS suggestions?
Replies: 18
Views: 3408

Almost any of the APC SmartUPS's would probably work, if you can figure out how to remove the electronics and attach them to your solar array. You'd have to find the 117V sensing stuff and disable it since you won't have line voltage, and you might have to disable the charging circuit so it doesn't ...
by UniKyrn
Tue Feb 13, 2007 1:11 pm
Forum: Wireless Networking
Topic: Remote solar powered AP - UPS suggestions?
Replies: 18
Views: 3408

A UPS implies that you'd be charging batteries, to power an inverter, to power the UPS full of batteries, to power a wall wart, to power the RB. That's a lot of conversions and associated efficiency losses. You might be better off running straight from the batteries, and using the Serial Port Monito...
by UniKyrn
Mon Feb 12, 2007 1:44 am
Forum: General
Topic: oops Did I do that!
Replies: 7
Views: 1602

They will not give you a new key. Even at a lower price. Nobody except MikroTik can "give" you a new key unless they want to pay for one out of their own pocket and not charge you for it. When you buy a licensed flash from a retailer, they don't generate a key for it themselves, they go buy a key f...
by UniKyrn
Wed Jan 17, 2007 6:13 pm
Forum: Wireless Networking
Topic: Using SIP phones on mikrotik hotspot
Replies: 3
Views: 892

The hotspot will have to be assigning real/routable IP to hotspot users, or SIP/RTP won't work.
by UniKyrn
Sun Jan 14, 2007 10:59 pm
Forum: Wireless Networking
Topic: Max Distance using an omni directional antenna
Replies: 4
Views: 1730

If your omni is already mounted in its final location and you only hear a couple of residential AP's on a scan, yep, that's a quiet area. I've seen one up high on a hilltop come back with several screens of other AP's, the site was pretty much unusable.
by UniKyrn
Sun Jan 14, 2007 3:24 am
Forum: Wireless Networking
Topic: Max Distance using an omni directional antenna
Replies: 4
Views: 1730

You don't mention whether you're using B or G, so I'll assume B since it's longer range. With that kind of gear, in a quiet rural setting, I'd bet on 10 miles or more. Swap that CM9 for an SR2 or similar card and you might push out to 15, figure 10 with a solid 11Mbit link and falling off to 1Mbit a...
by UniKyrn
Thu Dec 28, 2006 5:14 pm
Forum: Wireless Networking
Topic: a/b/g mode
Replies: 38
Views: 7966

If i have offended youo so or anyone else
Nope, not offended.
by UniKyrn
Tue Dec 26, 2006 8:58 pm
Forum: Wireless Networking
Topic: a/b/g mode
Replies: 38
Views: 7966

no this is not what I'm talking about. The device you pointed us to is not a single card that does all three bands, it's an AP with two seperate wireless cards in it, one for each band. WX-7800A contains two separate wireless connectivity radio transceivers, which support all three popular wireless...
by UniKyrn
Mon Dec 25, 2006 9:52 am
Forum: Wireless Networking
Topic: a/b/g mode
Replies: 38
Views: 7966

No, I don't think anybody makes a card that can do 2.4G and 5G at the same time, and I'm hoping that wasn't what hellbound was actually asking about.
by UniKyrn
Sun Dec 24, 2006 9:13 pm
Forum: Wireless Networking
Topic: a/b/g mode
Replies: 38
Views: 7966

You're talking about two radio cards, merging the antenna's into one tower cable, and then splitting them apart at the top, right? Two of those duplexers costs less than just putting a second run of LMR up the tower? You're going to be introducing signal loss with each additional connection point al...
by UniKyrn
Mon Dec 18, 2006 12:35 am
Forum: General
Topic: WDS-bridge or EoIP tunnel, which is the best solution?
Replies: 4
Views: 1337

Use WDS where possible, because it allows bridging of the 1500 byte frames without having to split them into two smaller frames the way EoIP has to.
by UniKyrn
Mon Dec 11, 2006 2:49 am
Forum: Wireless Networking
Topic: High Ping times when one person donwloads a big file
Replies: 11
Views: 2137

If you're using 802.11B, then you've only got about 3.3Mbits of usable bandwidth, so 2.5Mbit is a sizable piece of that. Depending on how many other customers you have connected, it's probably just keeping the radio busy with that one heavy data stream and polling everybody else duing the poll loop.
by UniKyrn
Thu Dec 07, 2006 5:25 pm
Forum: Wireless Networking
Topic: Small MTU better with interference?
Replies: 5
Views: 3169

Dropping the MTU will help to a certain extent, the packet has less air time so the chances of it being interfered with are smaller. While it might seem odd, you can also dial down the speed of the link and while the packets spend more time "in the air", the slower speeds are more resistant to inter...
by UniKyrn
Thu Oct 12, 2006 5:09 pm
Forum: Wireless Networking
Topic: Blown Ethernet Ports During Thunder Storm
Replies: 3
Views: 1083

What brand lightning arrestors were you using on the Cat5?
by UniKyrn
Fri Sep 29, 2006 6:42 am
Forum: RouterBOARD hardware
Topic: terrible tx/rx speeds
Replies: 9
Views: 3332

I've seen the same thing. Starting with 2.9 roughly, the link speed will drop back to the basic level if it's not being used. That change played hell with the customer graphs we kept because we couldn't tell any more if a slow speed was because the link was having problems or if was just idle.
by UniKyrn
Wed Sep 27, 2006 7:06 am
Forum: General
Topic: BGP and Two Full Routes
Replies: 3
Views: 1048

If you're taking routes from two peers and only seeing one set used, my guess would be that the peer in question is artificially setting the weight of their routes lower. I've seen that happen with XO here in the US. If that's what's happening, then you're screwed, at least with the basic BGP module...
by UniKyrn
Tue Sep 26, 2006 10:42 pm
Forum: RouterBOARD hardware
Topic: Unresponsive RB112s and RB532s
Replies: 3
Views: 1602

I'd expect a brownout to lockup the machine or completely reboot it though, not just make it act a little weird. A memory corruption from a brownout should crash the machine rather quickly if it occurs in code that's being used.
by UniKyrn
Tue Sep 26, 2006 10:19 pm
Forum: General
Topic: Massive amount of connections
Replies: 2
Views: 1131

Do you have a bridged interface on that router? Connection tracking is probably tracking the state of all the traffic it hears, not just traffic specific to that router. In a routed network, that's traffic to the router or that passes through it, but in a bridged network it starts watching just abou...
by UniKyrn
Tue Sep 26, 2006 10:12 pm
Forum: RouterBOARD hardware
Topic: Unresponsive RB112s and RB532s
Replies: 3
Views: 1602

Memory leaks in the code? How long do these systems have to be running before you start seeing the problem? I've seen 230's and 532's go a little weird like that after being up for months without a reboot.
by UniKyrn
Tue Sep 26, 2006 3:05 am
Forum: General
Topic: sharing experiences with RouterOS/DS3/BGP
Replies: 23
Views: 3403

Have you ACTUALLY ever delt with cisco or juniper with their releases? your luckey if they even load it on a router before releasing it. I worked for Alcatel for three years and we weren't allowed to release anything without the QA group doing a complete regression test, no exceptions. If we change...
by UniKyrn
Mon Sep 25, 2006 8:43 pm
Forum: General
Topic: sharing experiences with RouterOS/DS3/BGP
Replies: 23
Views: 3403

How many small ISP's do you know of that have a test lab all? no I'm warning people that MT's implementation is not feature rich, how can you say that, if you have not even used it for more than a year? since 2.8 almost everything has changed And we'd know this how? The 2.9 PDF manual doesn't even ...
by UniKyrn
Mon Sep 25, 2006 8:27 pm
Forum: General
Topic: sharing experiences with RouterOS/DS3/BGP
Replies: 23
Views: 3403

Not in 2.8, and we stopped doing automatic upgrades after the 2.8 fiasco where they didn't regression test changes to BGP and broke routing for anybody who upgraded. That was about 2.8.24 or 2.8.26 I believe. Taking your border router down for an upgrade is enough trouble for an ISP, taking it down...
by UniKyrn
Mon Sep 25, 2006 5:07 am
Forum: General
Topic: sharing experiences with RouterOS/DS3/BGP
Replies: 23
Views: 3403

How many small ISP's do you know of that have a test lab with a duplicate border router sitting there for the occasional test? And for the record, I'm not saying don't use BGP, I'm warning people that MT's implementation is not feature rich, nor do they have a good track record for regression testin...
by UniKyrn
Mon Sep 25, 2006 4:49 am
Forum: General
Topic: sharing experiences with RouterOS/DS3/BGP
Replies: 23
Views: 3403

Not in 2.8, and we stopped doing automatic upgrades after the 2.8 fiasco where they didn't regression test changes to BGP and broke routing for anybody who upgraded. That was about 2.8.24 or 2.8.26 I believe. Taking your border router down for an upgrade is enough trouble for an ISP, taking it down ...
by UniKyrn
Mon Sep 25, 2006 4:26 am
Forum: General
Topic: sharing experiences with RouterOS/DS3/BGP
Replies: 23
Views: 3403

You can't disable a peer using WinBox, only delete them. I assume you're talking about a disable option that's only available from the command prompt.
by UniKyrn
Mon Sep 25, 2006 4:02 am
Forum: General
Topic: sharing experiences with RouterOS/DS3/BGP
Replies: 23
Views: 3403

Be aware that you'll lose a lot of the ability to configure your BGP sessions if you move to ROS. The last place I worked, our border router was a ROS box after the ancient Cisco box we had couldn't handle the full routing table any more. We were dual homed, full tables from each provider. Something...
by UniKyrn
Wed Sep 20, 2006 8:55 pm
Forum: Wireless Networking
Topic: 18km link CM9 ws SR5, 40Mbit, but some packet loss.
Replies: 23
Views: 4485

Yes, I'm serious, loosing an occasional packet is normal, these aren't perfect systems.
by UniKyrn
Wed Sep 20, 2006 7:13 am
Forum: Wireless Networking
Topic: 18km link CM9 ws SR5, 40Mbit, but some packet loss.
Replies: 23
Views: 4485

You're pushing a link 18KM, getting a packet dropped every 15-20 minutes and you think you've got a problem? I suspect most WISP's pray to have as few problems as that. :) You get packet losses even on hardwire, don't be surprised when an 18KM RF link looses packets also. That's why TCP had retries....
by UniKyrn
Wed Sep 20, 2006 7:06 am
Forum: Wireless Networking
Topic: disconnects w/ good signal?
Replies: 36
Views: 5695

rb532's work with 8602's a lot better than a rb112 will. Go read the specs for the power available on each RB, then read the specs for the max power required for a single 8602. You're lucky you haven't burned out the voltage regulater on that rb112, and it sure isn't going to be stable. You can have...
by UniKyrn
Mon Sep 18, 2006 9:33 pm
Forum: Wireless Networking
Topic: disconnects w/ good signal?
Replies: 36
Views: 5695

Replace that RB112 with an RB532 and try again.
by UniKyrn
Fri Sep 15, 2006 11:28 pm
Forum: Wireless Networking
Topic: HELP! Ubiquiti SR2 slow on 11b and fast on 11g
Replies: 12
Views: 1822

You go into the properties for the wireless interface and set TX Power to something besides "default", which is max output normally. I believe 400mw is 26db, so try setting it to 22 or 23 and see if it becomes more stable. Also, be aware that you can't get 400mw out of that card when using 802.11g a...
by UniKyrn
Thu Sep 14, 2006 11:05 pm
Forum: Wireless Networking
Topic: newb configuring RB112 and RB132 for simple bridging
Replies: 8
Views: 1261

With those trees in the way like that, you're definitly going to want a directional high gain antenna. Every db is going to count. aviper brings up an interesting question, you're using 900Mhz specific antenna's, right?
by UniKyrn
Thu Sep 14, 2006 9:30 pm
Forum: Wireless Networking
Topic: HELP! Ubiquiti SR2 slow on 11b and fast on 11g
Replies: 12
Views: 1822

Are you running that SR2 at max output? It's current requirements and the available current on the miniPCI slot of a 230 are right at the edge. Try backing the power off to 200 or 300mw as a test and see if performance improves. There is probably more current available to the PCMCIA slots which is w...
by UniKyrn
Thu Sep 14, 2006 9:25 pm
Forum: Wireless Networking
Topic: newb configuring RB112 and RB132 for simple bridging
Replies: 8
Views: 1261

A 6db Omni at the AP isn't going to get you far, especially with that mag-mount on the car. Those gains aren't much above what you'd get just sticking an cheap residential AP up there instead of a MikroTik. You're not saying just what cards you were using with what antennas during your tests, I'm ho...
by UniKyrn
Wed Sep 13, 2006 8:59 pm
Forum: Wireless Networking
Topic: Routerboard 11 PCI adapter with SR5 or Senao NMP-8602
Replies: 4
Views: 1163

Can I Power a 802.11a/b/g 400mW Senao NMP-8602 with a RB11? Do not use that combination at full power output. The specs for the 8602 list it's possible maximum current draw at more than the RB11 voltage regulator is spec'd to provide. You'll need to set the output power to less than 400mw to be safe.
by UniKyrn
Wed Sep 06, 2006 5:26 am
Forum: General
Topic: STOP THE ARES VER 1.8
Replies: 5
Views: 2458

Like I said, identify those customers, throw them off your network, let them trash somebody elses network instead of yours. Your competition will be crippled and you'll pick up customers because your network is actually usable.
by UniKyrn
Tue Sep 05, 2006 8:04 pm
Forum: General
Topic: STOP THE ARES VER 1.8
Replies: 5
Views: 2458

If you're using routerboards as your AP's though, and you've got connection tracking turned on, you've still got a vested interest in keeping P2P traffic away from those machines. There is a noticable performance hit when the AP has to track thousands of attempted connections instead of a hundred or...
by UniKyrn
Mon Sep 04, 2006 7:08 am
Forum: General
Topic: STOP THE ARES VER 1.8
Replies: 5
Views: 2458

Look, stop hoping MikroTik can solve all your P2P problems, they're always going to be a step behind the latest software. If you're an ISP, make sure your terms of service forbid P2P traffic and then start monitoring your customers. When you catch them, and P2P traffic leaves a very obvious trail in...
by UniKyrn
Mon Sep 04, 2006 7:01 am
Forum: Wireless Networking
Topic: Starting a WISP - How to configure?
Replies: 23
Views: 4747

I'd normally recommend you go buy a hell of a lot of books about network design, but since you're already in motion, it's too late for that. Now you need to find somebody that can get your network working, and it may be harsh, but you pay them what they ask. Starting a WISP is not just buying the ha...
by UniKyrn
Fri Sep 01, 2006 7:31 am
Forum: Wireless Networking
Topic: Starting a WISP - How to configure?
Replies: 23
Views: 4747

I don't believe you understand just how big the task you've just taken on is going to be. I second the suggestion that you find a qualified network and systems admin to help you.
by UniKyrn
Thu Aug 17, 2006 7:57 pm
Forum: Wireless Networking
Topic: repeatable bug- crashes: wrap 2c, RB 112 w/ 8602
Replies: 5
Views: 1048

Are you sure the unit is crashing? I saw this kind of behaviour when disabling interfaces that were part of bridge groups and with a serial console, traced it back to the bridge not cleaning up the MAC correctly. The unit continued to run, but wouldn't communicate over any of the interfaces that rem...
by UniKyrn
Sat Aug 05, 2006 7:55 am
Forum: General
Topic: P2P the battle for control
Replies: 29
Views: 7381

Idealy you'd want blocking at both ends of your network. Blocking at your border router would prevent all the incoming connection attempts from messing with your network and that machine probably has more horsepower than your AP's. Blocking at the AP would prevent the user from hogging the AP. And f...
by UniKyrn
Fri Aug 04, 2006 11:26 pm
Forum: General
Topic: P2P the battle for control
Replies: 29
Views: 7381

Have you ever thought about the resources it takes for control attempts? Given we're in the MikriTik Forum, it's reasonable to believe we're talking about P2P traffic over wireless. Ok, think about what that traffic looks like compared to normal residential traffic. Your normal user is going to esta...
by UniKyrn
Fri Aug 04, 2006 10:11 pm
Forum: General
Topic: P2P the battle for control
Replies: 29
Views: 7381

If you seriously want to ban P2P traffic on your network, then the best tool you've got is your own eyes and brain. Graph the traffic for each of your customers and then do periodic spot checks of those graphs. P2P traffic leaves patterns you'll learn to recognize and if you've got connection tracki...
by UniKyrn
Mon Jul 24, 2006 9:48 pm
Forum: General
Topic: Multiple DHCP Servers on same subnet
Replies: 2
Views: 1263

Make sure "forwarding" is turned of on that interface, or your customers will continue talking directly to each other through the radio and any filtering you try to do in the router won't be very effective. You can then put firewall rules in the forwarding table of the router that block the DHCP por...
by UniKyrn
Wed Jul 19, 2006 9:25 pm
Forum: General
Topic: Road to recovery
Replies: 2
Views: 739

In the case of a config problem, you can simply implement a backup schedule for the config of the machine, make sure you keep an exact copy of the OS version you're using also. This would cover you in cases of operator error or drive failure. You'd have to relicense the new drive, but you'd be able ...
by UniKyrn
Mon Jul 10, 2006 7:49 pm
Forum: Wireless Networking
Topic: Bad signal/interference?
Replies: 14
Views: 2738

Cell towers can and do cause problems with 802.11b stuff. The problem appears to be the RF plasma "cloud" surrounding their antennas because of their much higher power output. You wouldn't think this was true just looking the the frequencies in use and their harmonics, but I've seen it happen in rea...
by UniKyrn
Sat Jul 08, 2006 8:09 pm
Forum: Wireless Networking
Topic: Large & a lot packets passing
Replies: 1
Views: 563

Yes, you're CPU bound. I believe MT posted something about 700Mhz or better being the lower limit for the CPU if you wanted to run nstreme at full speed. This effectivly eliminates any of the single board systems normally discussed around here for wi-fi use and moves you into the PC with miniPCI ada...
by UniKyrn
Sun May 28, 2006 3:28 am
Forum: General
Topic: Ethernet Port Perminatly Dieing
Replies: 8
Views: 1688

Are you running in-line lightning arrestors on the Cat5? Lightning season is starting where I am and we've already had a few failures. The most common failure is the ethernet port, that long length of Cat5 going up to the radio makes a wonderful antenna all on it's own and a good static zap from a n...
by UniKyrn
Sun May 28, 2006 3:20 am
Forum: General
Topic: Routerboard needing reboots
Replies: 7
Views: 1714

Out of curiosity, are you running those 532's with two SR cards at their full output? How long is the cable from the power injector to the AP? Theory claims that a 532 can power two 400mw cards. In practice, I've seen a 50% success rate, one of the failures actually blew up the 532. I've also seen r...
by UniKyrn
Sun May 28, 2006 3:13 am
Forum: General
Topic: Routerboard needing reboots
Replies: 7
Views: 1714

After climing down the tower my wife noticed the connectiong start/stoping. Going back up the tower and wiggling the connectors I found one of the u.ul connectors to be faulty. quest is if this connector was shorting out the radio could this cause the mikrotik unit to basicly go dead until a power ...
by UniKyrn
Fri May 26, 2006 6:36 am
Forum: Wireless Networking
Topic: User set himself router's IP (not MT router, the other one)
Replies: 14
Views: 1388

How is it that your customer keeps changing his IP address?
And why is he still a customer after the first time you catch him screwing with your network ...
by UniKyrn
Tue May 02, 2006 10:54 pm
Forum: Wireless Networking
Topic: Assistance with 5G link
Replies: 14
Views: 2081

It came up to 36Meg link for a while but now it's jumping up and down and falling all the way back to 6Meg. Is the speed falling when the link is idle, or when you're pumping traffic through it? For what ever reason, it's normal for those cards to drop the speed when they aren't doing anything. Pri...
by UniKyrn
Sat Apr 08, 2006 8:38 pm
Forum: Wireless Networking
Topic: RB112 - no PPP menu? (and other questions)
Replies: 5
Views: 1258

You better keep a close eye on memory usage. I bet those packages were disabled by default because you're trying to run in only 16Meg of memory instead of the larger memory available on the RB532's.
by UniKyrn
Wed Mar 29, 2006 6:48 pm
Forum: General
Topic: Unauth or missing data sender
Replies: 2
Views: 620

One possibility is that you've got a customer with a CPE that's registering with it's own MAC, but passing LAN traffic through with the original source MAC instead of its MAC. I've had customers using Linksys Bridges with custom firmware show this kind of nonsense. While the flood is occuring, disco...
by UniKyrn
Wed Mar 22, 2006 7:33 pm
Forum: General
Topic: :( ICMP Destination Unreachable Storms Killing Me!
Replies: 8
Views: 2042

I like your fake DHCP for 127.0.0.0! LOL I thought about putting a rule in for the 192.168.0.0/24 network, but even though it's listing that as a source, these are broadcast ICMP packets. So I don't think an IP rule is going to catch that. You can also put an ICMP specific rule in the firewall forw...
by UniKyrn
Wed Mar 22, 2006 6:18 pm
Forum: General
Topic: :( ICMP Destination Unreachable Storms Killing Me!
Replies: 8
Views: 2042

We don't have 192.168.0.0/24 on our own network or on any of our routers. Then put a firewall rule at the router the customers are talking to that drops all 192.168.0.0/16 (fakenet) traffic. That's one of the first things I do on a new AP, just to keep stupid customer routers from flooding our netw...
by UniKyrn
Sat Mar 04, 2006 8:29 am
Forum: Wireless Networking
Topic: Senao NMP-8602 Plus 400mw a/b/g Support
Replies: 2
Views: 1371

I've noticed that problem on 11b also, only one client could connect at a -95db, which appears to be the same default value for 2.9.14 that the old -100db used to be. That's what you see for a strength before packets flow and you get a real reading. I've had better luck on 11a with them, at least at...
by UniKyrn
Sat Mar 04, 2006 2:02 am
Forum: Wireless Networking
Topic: Senao NMP-8602 Plus 400mw a/b/g Support
Replies: 2
Views: 1371

Senao NMP-8602 Plus 400mw a/b/g Support

The card is recognized as an Atheros AR5413 card and it works, mostly. One of the things that doesn't appear to be correct though is the power versus speed table. I'm assuming the driver is simply defaulting to some safe table because it hasn't been taught about this card yet. Any idea when official...
by UniKyrn
Mon Feb 27, 2006 9:03 am
Forum: Wireless Networking
Topic: Mysteries of the night
Replies: 10
Views: 2076

Sorry, I thought you were using the MT as the AP.
by UniKyrn
Mon Feb 27, 2006 6:35 am
Forum: Wireless Networking
Topic: Mysteries of the night
Replies: 10
Views: 2076

If you've got a machine that can do it, I highly recomment graphing the signal strength and speed of your customer connections. It gives you the history of their connection and when something like this starts to occur, you can look at those graphs and have a good idea if the problem is local to the ...
by UniKyrn
Thu Feb 09, 2006 5:53 pm
Forum: Wireless Networking
Topic: Routerboard 500 Client can't connect to hidden SSID
Replies: 5
Views: 1184

Ok, so it's a documented bug, but it's still a bug. When will it be fixed?
by UniKyrn
Wed Feb 08, 2006 6:48 pm
Forum: RouterBOARD hardware
Topic: Upgrade from 2.9.8 to 2.9.12 breaks configured bridges
Replies: 6
Views: 1741

I'd have to agree, it'll probably be fracked royally by the upgrade. I'd probably build a replacement radio that was programmed correctly and swap it with the existing unit, rather than try to upgrade the existing one in place, if I had the hardware available.
by UniKyrn
Wed Feb 08, 2006 6:25 pm
Forum: RouterBOARD hardware
Topic: Upgrade from 2.9.8 to 2.9.12 breaks configured bridges
Replies: 6
Views: 1741

No, the correct answer is "fix the config conversion so that it doesn't break things". I got lucky with the unit I was working on, there was a secondary way to access it remotely that I could use to get into it and fix things. Most people would end up climbing the tower to swap the radio or reprogra...
by UniKyrn
Wed Feb 08, 2006 5:53 pm
Forum: RouterBOARD hardware
Topic: Upgrade from 2.9.8 to 2.9.12 breaks configured bridges
Replies: 6
Views: 1741

Upgrade from 2.9.8 to 2.9.12 breaks configured bridges

I thought I'd read a note that they'd gotten the upgrade problem fixed, but it's still causing problems. I took a router with a very basic config, it's a backhaul link. There is one bridge with one ethernet and one wds interface in it. After upgrading to 2.9.12 as a test, I managed to get back into ...
by UniKyrn
Fri Jan 20, 2006 8:10 am
Forum: Wireless Networking
Topic: SR5 setup
Replies: 11
Views: 3048

Do a web search for SR5 cards and look at the specs. As the speed of the link is increased above 24Mbit, the power output of the card is reduced. 24Mbit is the highest rated speed that still produces 400mw output. By the time you get to 54Mbit, the output drops to 100mw. Then do a search for the 802...
by UniKyrn
Tue Jan 10, 2006 5:38 pm
Forum: Wireless Networking
Topic: SR5 setup
Replies: 11
Views: 3048

Then, if you're going for range instead of speed, lock the speed of each end of the link to 24Mbit, which gets you the 400mw the card can produce. If you let the speed go higher than 24Mbit, the card starts reducing the power output.
by UniKyrn
Sun Jan 08, 2006 2:41 am
Forum: Wireless Networking
Topic: Problem with Prism cards
Replies: 7
Views: 1913

You can't, the RB532 can't run the 2.8 OS.
by UniKyrn
Fri Dec 23, 2005 8:52 pm
Forum: RouterBOARD hardware
Topic: 3 x SR5 cards on RouterBOARD 532
Replies: 9
Views: 2541

That's your warrantee you heard scream. :)
by UniKyrn
Fri Dec 23, 2005 5:26 pm
Forum: RouterBOARD hardware
Topic: 3 x SR5 cards on RouterBOARD 532
Replies: 9
Views: 2541

Not if you run them at maximum output.
by UniKyrn
Wed Sep 14, 2005 5:37 pm
Forum: RouterBOARD hardware
Topic: RB500 with PoE problems
Replies: 7
Views: 2540

Yeah, I've been getting reports from customers that the POE port in the 532's they have are failing. Most of the failures I've heard of, just the ethernet part dies, you can still use the port to power the unit. I'm wondering if that new chip they used might not be more sensitive to static than the ...
by UniKyrn
Tue Aug 30, 2005 4:59 pm
Forum: Wireless Networking
Topic: Association drops on heavy upload traffic
Replies: 7
Views: 2314

Yep, now what you've given us a better picture of the setup, it doesn't sound like a power issue so I'll let somebody else make suggestions now.
by UniKyrn
Tue Aug 30, 2005 7:07 am
Forum: Wireless Networking
Topic: Association drops on heavy upload traffic
Replies: 7
Views: 2314

Ok, that answer tells me you didn't understand the question. An SR5 card can draw slightly more than 5W of power at 3.3V from the miniPCI slot it is plugged into, worst case. A lot of systems can't supply that much power and what you'll see is the card go unstable under heavy xmit, which is the time...
by UniKyrn
Mon Aug 29, 2005 10:09 am
Forum: Wireless Networking
Topic: Association drops on heavy upload traffic
Replies: 7
Views: 2314

If you're running an SR5 at 24Mbits, are you sure it's getting its full 5W of power?
by UniKyrn
Wed Aug 24, 2005 9:07 pm
Forum: General
Topic: HELP ! Upgraded to v2.9 and broke it
Replies: 12
Views: 2109

I couldn't tell you, you'd have to try it and see. I don't know if the config was modified by the upgrade process. You might have to downgrade to 2.8, restore the config, then upgrade to 2.9 again with individual packages to get everything right.
by UniKyrn
Wed Aug 24, 2005 5:30 pm
Forum: General
Topic: HELP ! Upgraded to v2.9 and broke it
Replies: 12
Views: 2109

When upgrading from 2.8 to 2.9, do NOT use the all in one package. The first time it boots as the version upgrade occurs, it ONLY installs the system package from the all in one package, nothing else. If you can get access to the unit again, install the all in one package a second time and it will t...
by UniKyrn
Fri Aug 19, 2005 6:25 am
Forum: General
Topic: Eoip's questions
Replies: 7
Views: 1752

It it's an isolated tunnel between two offices of the same client, I'd agree and I add special rules ahead of my general blocks just for that tunnel. If it's for general wireless clients and the tunnel is just the backhaul to the core of the network, block'em and forget'em. That crap has no business...
by UniKyrn
Fri Aug 19, 2005 5:46 am
Forum: General
Topic: Eoip's questions
Replies: 7
Views: 1752

One of the first sets of rules I add to any forwarding fire table is a block of the Netbios ports 135-139. It's a defense against customers who can't keep their local networks from leaking that junk out into ours.
by UniKyrn
Fri Aug 12, 2005 1:49 am
Forum: General
Topic: Ethernet errors
Replies: 3
Views: 971

It's been requested, it just doesn't appear to be a high priority.
by UniKyrn
Tue Aug 09, 2005 11:10 pm
Forum: General
Topic: Throttling Bit-Torrent
Replies: 10
Views: 3350

Are you throttling both directions? Keep in mind that there are going to be hundreds of incoming connections attempts from people trying to get file segments from your customer and connection tracking is going to have to deal with them as well.
by UniKyrn
Tue Aug 09, 2005 1:44 am
Forum: Wireless Networking
Topic: Bandwidth server question
Replies: 12
Views: 3909

One experimental backhaul we're testing uses a pair of 532's bumped to 333Mhz, SR5's and Nstreme. One end is configured for bridge with WDS and the other end is configured for station-wds. At twenty miles we're getting signal strengths of -72db to -75db when the link speed is manually limited to 24m...
by UniKyrn
Tue Aug 02, 2005 6:12 pm
Forum: General
Topic: Multiple PPPoe clients behind one Client Radio
Replies: 13
Views: 2132

Max Segment Size. A normal Ethernet Frame is 1500 bytes, but with the PPPoE header added, you have to change that to 1492. That option quietly turns on a mangling rule to modify TCP headers to adjust the MSS on connections as they are created.
by UniKyrn
Tue Aug 02, 2005 5:50 pm
Forum: General
Topic: Multiple PPPoe clients behind one Client Radio
Replies: 13
Views: 2132

Did you catch the place in the PPP profile labled "Only One" also? I'm not sure what that's doing, but it might also limit you to one pppoe session per mac address. We run with one session limit turned on and your description matches what we see pretty closely.
by UniKyrn
Tue Aug 02, 2005 5:22 pm
Forum: General
Topic: Multiple PPPoe clients behind one Client Radio
Replies: 13
Views: 2132

Did you happen to turn on the "One Session per Host" setting on the PPPoE server?
by UniKyrn
Thu Jul 28, 2005 5:31 pm
Forum: General
Topic: routing 2 public networks
Replies: 7
Views: 1613

Does your ISP know you've got both IP blocks? Who's announcing the routing for them to the rest of the Internet? You? Your ISP? If you've done the routing right, with the gateway for the netblock on the second interface being the IP address of the first interface, everything will simply work.
by UniKyrn
Wed Jul 27, 2005 1:41 am
Forum: General
Topic: Mangler
Replies: 7
Views: 1480

One firewall forwarding rule; all-p2p->drop
by UniKyrn
Tue Jul 26, 2005 4:09 pm
Forum: General
Topic: New Routerboard - Can I use two 5.8 cards and one 2.4 card?
Replies: 11
Views: 2018

14W I believe, according to the specs for the board, and the board itself uses 2-3W without any cards installed. The specs are available at routerboard.com the last time I checked.
by UniKyrn
Sat Jul 23, 2005 7:31 pm
Forum: General
Topic: Ares P2P not being blocked in 2.9rc7
Replies: 9
Views: 4793

It's unfortunate, but sometimes it does come down to disconnecting the customer, especially if they've already been warned to stop what they're doing. Your AP is YOUR shared resource, not their private one.
by UniKyrn
Thu Jul 21, 2005 5:49 pm
Forum: General
Topic: configure hotspot mail relay for Gmail SSL SMPT/POP3
Replies: 4
Views: 1780

The hotspot-temp rules in the firewall define what's allowed by unauthenticated users, so whether it's port 25 or any other port, adding an accept rule to that ruleset should be enough to let users through without logging in. You might consider limiting the bandwidth or the rate of SYN packets throu...
by UniKyrn
Thu Jul 21, 2005 5:00 pm
Forum: General
Topic: configure hotspot mail relay for Gmail SSL SMPT/POP3
Replies: 4
Views: 1780

Are you really sure you want to open port 25 for just anybody who walks by?
by UniKyrn
Tue Jul 12, 2005 6:04 am
Forum: RouterBOARD hardware
Topic: UPS monitoring via USB port on RB2XX?
Replies: 9
Views: 3043

by UniKyrn
Tue Jul 12, 2005 5:58 am
Forum: RouterBOARD hardware
Topic: UPS monitoring via USB port on RB2XX?
Replies: 9
Views: 3043

It could also be that they'll have less interest since they dropped the USB port from the 5XX series. Unless they plan on dropping support for PCMCIA radios though, the RB230 should be around for awhile and it's got two USB ports.
by UniKyrn
Tue Jul 12, 2005 4:16 am
Forum: RouterBOARD hardware
Topic: UPS monitoring via USB port on RB2XX?
Replies: 9
Views: 3043

I've never researched the protocol(s), I don't know.
by UniKyrn
Tue Jul 12, 2005 1:34 am
Forum: RouterBOARD hardware
Topic: UPS monitoring via USB port on RB2XX?
Replies: 9
Views: 3043

UPS monitoring via USB port on RB2XX?

Quite a lot of the UPS's now come with USB cables for monitoring. Any chance we could get a driver in the RouterOS to allow monitoring a UPS plugged into the USB port? Something we could script against so that we could have a MT at a remote site send us email when the UPS reports a power failure, or...
by UniKyrn
Sat Jul 02, 2005 11:00 am
Forum: RouterBOARD hardware
Topic: 73 Billion Degrees F
Replies: 5
Views: 2088

As best I recall from a conversation last year with MT, the bug is actually in hardware also, something about the wrong resistors being put on the board, or something like that. That's why it hasn't simply been fixed in software by now I suspect.
by UniKyrn
Mon Jun 06, 2005 5:14 pm
Forum: General
Topic: unauth data sender?
Replies: 4
Views: 1487

This is a change from 2.8 behaviour, right? I've had a couple of users connect to us using Linksys Ethernet Bridges that appear to send using the MAC of the source computer, not the MAC of the radio card. Under 2.8 these show up as multiple entries in the wireless association table. I assume in 2.9 ...
by UniKyrn
Mon Jun 06, 2005 6:54 am
Forum: General
Topic: Mikrotik and Wireless Clients
Replies: 2
Views: 1142

Is the AP using a Prism or Atheros card? We've got one 13.3 mile link using a Tranzeo client to a prism AP, but I've seen longer links exhibit that associate/disconnect sequence and I believe the AP was simply deciding the ACK time was too great and so it wouldn't let the client stay associated. Ath...
by UniKyrn
Wed Jun 01, 2005 7:08 pm
Forum: General
Topic: AP-bridge problem
Replies: 10
Views: 1660

Oh, sorry, I thought I remembered you saying you could pick it up from a laptop close by, but not further away. Even without a pigtail at all you should be able to hear the AP on a laptop next to it so as long as you've configured it for AP-Bridge instead of the default Station mode, then I'd have t...
by UniKyrn
Wed Jun 01, 2005 6:30 am
Forum: General
Topic: AP-bridge problem
Replies: 10
Views: 1660

If you can pick it up at all from a laptop or something, then the card is working. If you do a scan, can you hear any of the other AP's in the area? This still sounds like a shorted pigtail or something.
by UniKyrn
Wed Jun 01, 2005 5:02 am
Forum: General
Topic: AP-bridge problem
Replies: 10
Views: 1660

Or possibly you've got the pigtail on the wrong connector. Try switching the antenna config and see if it gets better.
by UniKyrn
Wed Jun 01, 2005 4:20 am
Forum: General
Topic: AP-bridge problem
Replies: 10
Views: 1660

An AP interface won't show as Running unless at least one radio has associated with it, I believe.
by UniKyrn
Tue May 31, 2005 9:36 pm
Forum: Scripting
Topic: mrtg
Replies: 1
Views: 1488

Are you using PPPoE to authenticate your client connections? If so, run cfgmaker with the option to configure interfaces by name and you'll get a list that includes each individual client. Then just edit out anything you didn't want, like the ethernet or raw wireless interfaces. As the clients come ...
by UniKyrn
Tue May 31, 2005 9:29 pm
Forum: General
Topic: WDS Setup on MT 2.8.26
Replies: 5
Views: 1458

With or without WDS, 802.11b's throughput isn't going to be much more than 3Mbps, that I've ever seen on any of our customer links. If you're trying to bridge traffic between a couple of radios though, WDS is more efficient on an MT than anything else I've tried and MT recommends WDS itself.
by UniKyrn
Thu May 19, 2005 8:40 am
Forum: General
Topic: NTP question
Replies: 3
Views: 919

If you end up with fewer rules, it's worth it.
by UniKyrn
Thu May 19, 2005 8:08 am
Forum: General
Topic: NTP question
Replies: 3
Views: 919

If your clients come through internal interfaces, it would probably be easier to drop requests from the external interface instead of adding all those other rules.
by UniKyrn
Tue May 17, 2005 11:57 pm
Forum: General
Topic: Multiple IP's over one PPPoE session
Replies: 4
Views: 1456

And if you route them at least a /29, they can have up to five public systems.
by UniKyrn
Tue May 17, 2005 11:41 pm
Forum: General
Topic: Multiple IP's over one PPPoE session
Replies: 4
Views: 1456

I've done it by assigning the customer a fixed IP for their PPPoE session, then routing a subnet to that fixed IP, works fairly well. You do need more than a toy router at the other end though.
by UniKyrn
Tue May 17, 2005 11:37 pm
Forum: Scripting
Topic: Virus Attack
Replies: 21
Views: 17459

They have the problem also, they just have more of a bandwidth buffer to absorb it usually.
by UniKyrn
Tue May 17, 2005 5:13 pm
Forum: Scripting
Topic: Virus Attack
Replies: 21
Views: 17459

If it's a wireless client, it's still going to be having a serious effect on the AP they are connected to because it's going to consume valuable bandwidth before the router gets a chance to drop the packets. Virus's, ping floods, those kinds of things can quickly cripple an AP. At least in our case,...
by UniKyrn
Tue May 17, 2005 1:26 am
Forum: General
Topic: Antenna and distance to clients
Replies: 31
Views: 5581

Hummm, I thought I remembered reading it was a polling protocol, sorry.
by UniKyrn
Sun May 15, 2005 10:26 pm
Forum: General
Topic: Antenna and distance to clients
Replies: 31
Views: 5581

There is another limitation that come in for 802.11b, it's a polling protocol and the more radios that are registered, the more polling that gets done. Past a certain point the radio is so busy polling that it can't pass traffic efficiently and still poll everybody. As a general rule, I don't put mo...
by UniKyrn
Sun May 15, 2005 3:11 am
Forum: General
Topic: Single wireless card as AP and client??
Replies: 3
Views: 1002

If that third party AP doesn't support WDS, then station-WDS mode isn't going to help you. As best I can tell that simply allows you to use WDS while in station mode instead of you're being an AP. So you're going to need to be in station mode for the link to the other AP for a start. Now I've never ...
by UniKyrn
Sun May 15, 2005 3:03 am
Forum: General
Topic: Antenna and distance to clients
Replies: 31
Views: 5581

If everybody is in that 120-180 degree arc, I'd put a good waveguide antenna up there. I've seen problems with omni's up high like that, while they can see for miles, the problem is "they can see for miles", they get to hear all the noise from every source imaginable. Add to the fact they are lower ...
by UniKyrn
Tue May 10, 2005 10:17 pm
Forum: General
Topic: MT admin requests
Replies: 11
Views: 2472

Put an accept rule in the "input" rules with the source address being the ones you want to allow and set the interface to your external interface, then after them, put in a drop rule that covers everything else from the external interface. Make sure you also accept input from your peers if you're do...
by UniKyrn
Tue May 10, 2005 6:52 pm
Forum: General
Topic: MT admin requests
Replies: 11
Views: 2472

I think I'd consider putting in rules to allow routing protocols to work with your upstream providers, maybe allowing pings of the router itself, but blocking everything else. As long as you put it in the "input" chain, is should only effect traffic that terminates at the router, and won't touch tra...
by UniKyrn
Tue May 10, 2005 4:18 pm
Forum: General
Topic: MT admin requests
Replies: 11
Views: 2472

Have you considered firewall rules in the "input" table to limit access to your own network?
by UniKyrn
Tue May 10, 2005 8:56 am
Forum: General
Topic: MT admin requests
Replies: 11
Views: 2472

Are those IP's from inside or outside your network?
by UniKyrn
Mon May 09, 2005 10:30 pm
Forum: General
Topic: WDS Setup on MT 2.8.26
Replies: 5
Views: 1458

I can try. I've setup WDS between pairs of MT's for some of backhauls.
by UniKyrn
Mon May 09, 2005 5:16 am
Forum: General
Topic: WDS Setup on MT 2.8.26
Replies: 5
Views: 1458

If you're simply routing traffic from the D-Link's to the MT, then yes, WDS would give you a bit higher performance. Is the RV Park generating the kinds of loads where you think you need to squeeze every drop of performance out of the MT? :) If the D-Link's do WDS, then you'll need to read up on how...
by UniKyrn
Sat Apr 23, 2005 9:47 pm
Forum: General
Topic: Dial IN Modem for remote setup
Replies: 1
Views: 611

External modem set to auto-answer, serial cable to MT, you're in business.
by UniKyrn
Sat Apr 16, 2005 9:42 am
Forum: General
Topic: BGP - Default route
Replies: 2
Views: 904

Probably not, BGP in the MT is not very configurable.
by UniKyrn
Fri Apr 15, 2005 7:29 pm
Forum: General
Topic: Dual Homed BGP Strangeness
Replies: 1
Views: 853

Dual Homed BGP Strangeness

As our border router we use a 1.7Ghz P4 machine with two upstream links, each with a BGP feed from the provider. For a year now that machine has been running pretty much without a problem, it's been running 2.8.10 for quite awhile now. Yesterday, after being up for about 2800 hours without a reboot,...
by UniKyrn
Wed Apr 13, 2005 10:57 pm
Forum: General
Topic: Dont start HS RB532
Replies: 4
Views: 1795

Sounds like somebody installed some package files for the wrong version of the O/S on there. If it boots, go into the files area and remove them.
by UniKyrn
Wed Apr 13, 2005 7:09 am
Forum: General
Topic: How to prevent wireless client connect each other
Replies: 5
Views: 1082

Sorry, I don't know.
by UniKyrn
Tue Apr 12, 2005 9:29 pm
Forum: General
Topic: How to prevent wireless client connect each other
Replies: 5
Views: 1082

The quickest way would probably be with a firewall rule in the "forwarding" table that blocked any packet that came in from a wireless interface and didn't exit on the ethernet interface.
by UniKyrn
Tue Apr 12, 2005 8:25 pm
Forum: General
Topic: How to prevent wireless client connect each other
Replies: 5
Views: 1082

That only prevents the radio card from directly forward packets from one wireless client to the other. The packets can still pass from client to client through the router itself if you don't block them.
by UniKyrn
Tue Apr 12, 2005 8:52 am
Forum: General
Topic: Mikrotik support contract
Replies: 3
Views: 1609

Yeah, I've notice that a lot of introductory questions go unanswered also, and I've even skipped a few of them myself. If I had to guess at why that happens, my guess would be that MT expects people to have a good fundimental knowledge of networking and to have read the manual. Questions that demons...
by UniKyrn
Tue Apr 12, 2005 8:35 am
Forum: General
Topic: EoIP bridge trouble
Replies: 2
Views: 845

Pinging anything other than itself or the other router would be a function of your routing table, not the EoIP tunnel. It sounds like you were missing a route someplace. FYI, between two wireless systems like that, you'll find that WDS works better (high bandwidth) than an EoIP tunnel between them. ...
by UniKyrn
Mon Apr 11, 2005 5:50 pm
Forum: General
Topic: WDS and bridging
Replies: 3
Views: 1026

I believe you only need to add the WDS interfaces to the bridge if you're trying to create something like a P2P transparent link. If all you're doing is linking the AP's together and letting normal routing handle traffic to the external net, you probably don't need them in the bridge. Since I use th...
by UniKyrn
Fri Apr 01, 2005 9:44 pm
Forum: General
Topic: Why would I use the new Routerboard?
Replies: 9
Views: 1814

I should also note that if I use an EoIP tunnel between the two p2p boxes instead of WDS, the speed drops to about 12Mbit. The L3 routing of that traffic really does drag the box down instead of leaving it as L2 bridging with WDS.
by UniKyrn
Fri Apr 01, 2005 6:24 pm
Forum: General
Topic: Why would I use the new Routerboard?
Replies: 9
Views: 1814

Using the bandwidth test tool built into the O/S. The station doing the testing is an external 1.8Ghz machine and the station being tested is the far end of the p2p link, the near end is wired to 100Mbit lan containing the testing machine. I usually do a UDP receive, then a send, and get roughly the...
by UniKyrn
Fri Apr 01, 2005 6:08 pm
Forum: General
Topic: Why would I use the new Routerboard?
Replies: 9
Views: 1814

A pair of 220's in a p2p link using WDS over a 802.11a link can handle about 23Mbit in a bandwidth test on my desk. I've seen one report so far that said a pair of 532's (333Mhz) increased that to the low 30Mbit range, but it didn't specify the type of link.
by UniKyrn
Thu Mar 31, 2005 4:17 am
Forum: General
Topic: Why would I use the new Routerboard?
Replies: 9
Views: 1814

Higher maximum throughput, you can push more packets through it.
by UniKyrn
Thu Mar 31, 2005 3:15 am
Forum: General
Topic: /system backup
Replies: 3
Views: 812

It doesn't save the license as best I can tell, you need to deal with that seperatly.
by UniKyrn
Wed Mar 30, 2005 8:22 pm
Forum: General
Topic: Point to Point links
Replies: 5
Views: 1534

It also depends on the hardware used for the P2P.
by UniKyrn
Fri Mar 25, 2005 7:38 pm
Forum: General
Topic: emule ports
Replies: 10
Views: 3659

Go into your firewall rules and add an explicit accept rule for that computers IP, right before the P2P rules you're already using.
by UniKyrn
Tue Mar 22, 2005 12:51 am
Forum: General
Topic: Nstreme2 question
Replies: 4
Views: 1438

We'll find out shortly. We've got a small number of them on order for evaluation and part of that will be my nstream2 testbed. :)
by UniKyrn
Fri Mar 18, 2005 2:16 am
Forum: General
Topic: i can t to make ping from pc to radio
Replies: 11
Views: 2285

Ether you're neglecting to mention the bridges between ethernet and wlan, or that's part of your problem. You've got the same subnet on each ethernet so those have to be bridged together somehow through the wireless link.
by UniKyrn
Wed Mar 16, 2005 11:29 pm
Forum: General
Topic: Nstreme2 question
Replies: 4
Views: 1438

Nstreme2 question

Ok, I've puzzled through the docs and gotten a pair of systems working with nstreme2, but there are a couple of questions remaining. It's never mentioned in the docs, but I'm assuming that the ssid shown in the wireless interfaces isn't actually used for anything, the MAC address of the Nstreme Dual...
by UniKyrn
Wed Mar 16, 2005 11:21 pm
Forum: General
Topic: Nstreme help...
Replies: 1
Views: 734

I just went through this setting up a pair of boards in a test bed for nstreme2. Start with the pair of wireless interfaces exactly as they first default to, set the mode to "nstreme dual slave" and then don't touch them again. Now, from the Interface List display, create an "Nstreme Dual" interface...
by UniKyrn
Fri Mar 04, 2005 2:02 am
Forum: General
Topic: Wireless performance in bad weather
Replies: 10
Views: 2372

Maybe luck, maybe design of the panel. I've noticed that the new radios we get from Tranzeo have smooth surfaces, the older ones have a mottled surface that may have iced up easier in freezing rain.
by UniKyrn
Wed Mar 02, 2005 3:19 am
Forum: General
Topic: Wireless performance in bad weather
Replies: 10
Views: 2372

Our AP's are a mixture of stick omnis, grids, dishes and sectors, it was the grids and dishes that appeared to be effected by the ice because of the exposed feedhorn. The customers are pretty much all flat panels with that nice flat surface for the ice to build up on if it was facing the right direc...
by UniKyrn
Tue Mar 01, 2005 8:23 pm
Forum: General
Topic: Wireless performance in bad weather
Replies: 10
Views: 2372

Having been graphing signal strength for awhile now, we see small daily variations do to, I expect, the sun. We also see small variations do to fog. The one freezing rain storm we had last winter though, over the course of an hour, we could see AP's getting covered in ice and every customer slowly d...
by UniKyrn
Mon Feb 14, 2005 10:05 am
Forum: General
Topic: Prism xmit speed criteria
Replies: 2
Views: 793

But a complete lack of information gives an admin no idea what kinds of things might be going wrong that he could possibly fix. Some of us have engineering backgrounds and aren't afraid of technical answers, or of pointers to technical references.
by UniKyrn
Sat Feb 12, 2005 8:58 pm
Forum: General
Topic: Prism xmit speed criteria
Replies: 2
Views: 793

Prism xmit speed criteria

Is it documented anyplace as to what the criteria are for setting the Xmit speed on a prism interface? By this I mean, how does an AP using a prism card decide that it is only going to xmit to a client at 1Mbit instead of 11Mbit. I'm watching a new AP we just deployed ramp customers up and down in s...
by UniKyrn
Sat Feb 12, 2005 8:50 pm
Forum: General
Topic: Invalid Packets
Replies: 1
Views: 847

I'd bet that it's dropping packets that are invalid for the state of connections it is tracking, example, getting a SYN-ACK or a RST for a connection that doesn't exist at all.
by UniKyrn
Fri Feb 11, 2005 7:40 am
Forum: General
Topic: For those people graphing signal strength
Replies: 6
Views: 1158

Looking at what I wrote earlier, I think I should mention one last thing. These are INCREASES in signal strength, not decreases. A link that's run for weeks at -72db will suddently increase in strength to -56db for a few hours, then drop back. I do see customer radios drop to weaker signals in the m...
by UniKyrn
Fri Feb 11, 2005 7:34 am
Forum: General
Topic: For those people graphing signal strength
Replies: 6
Views: 1158

No, the two backhaul links that show this behaviour are already throttled to 24Mbit, and they're locked at that rate according to my graphs. I actually graph speed and signal strength on the same graph for each link.

There is certainly something odd going on, but I'm out of ideas to explain it.
by UniKyrn
Fri Feb 11, 2005 5:08 am
Forum: General
Topic: For those people graphing signal strength
Replies: 6
Views: 1158

Oh yeah, I should probably mention that the 2.4 links are all prism based, the 5G links are all atheros based a/b cards. If it's a driver problem, it's common to both then.
by UniKyrn
Fri Feb 11, 2005 5:07 am
Forum: General
Topic: For those people graphing signal strength
Replies: 6
Views: 1158

It's rather a jury-rig. I've got a tcl/expect script that pulls the wireless stats from each radio and stuffs it into a file. Then I run mrtg with each graph configured to call an external program I wrote that pulls the stats for the link in question from the file the expect script left behind.
by UniKyrn
Fri Feb 11, 2005 4:08 am
Forum: General
Topic: For those people graphing signal strength
Replies: 6
Views: 1158

For those people graphing signal strength

I'm using mrtg to keep an eye on our backhauls and customers, to watch for signal strength changes that might be a radio, cable, antenna, etc going bad. As I'd expect, I see daily variation in the signals based on sunrise/sunset, nice sinewaves for a few db change throughout the day. However, I've a...
by UniKyrn
Sat Feb 05, 2005 6:05 pm
Forum: General
Topic: Packet Loss to Ethernet Interface
Replies: 4
Views: 1664

Disabling auto negotiate and forcing the mode corrects the issue, the bug is that the forced mode won't initialize that way if you reboot the router. That's why I have to remember to go in and manually force the mode ever time we reboot it, at least using one of the four port ethernet cards. Maybe t...
by UniKyrn
Sat Feb 05, 2005 2:37 am
Forum: General
Topic: Packet Loss to Ethernet Interface
Replies: 4
Views: 1664

Make sure the duplex setting for the port is correct. We discovered the hard way with our upstream link that even though we force the config to 100/full, every time we reboot the router we have to login, switch it to half and then switch it back to full duplex to actually get it set to that mode. Wh...
by UniKyrn
Wed Jan 26, 2005 4:55 pm
Forum: General
Topic: hot to forbid Windows file sharing in wireless ???
Replies: 11
Views: 5044

I doubt what goes throught the VPN is a problem anyway, the goal is to keep windows users off the same AP from doing something stupid like leaving their file shares available to every other user of the AP I believe. :)
by UniKyrn
Tue Jan 25, 2005 8:31 pm
Forum: General
Topic: Peer to Peer Traffic Control
Replies: 2
Views: 879

Playing around with that example though, could you leave out the part about qualifying the queues by source or destination address and have them become cumulative for all users, not per user? Or maybe qualify them as source and destination network?
by UniKyrn
Sat Jan 22, 2005 1:59 am
Forum: General
Topic: Blocking rogue DHCP servers
Replies: 4
Views: 1557

Block replies from their interface for port 67, the server port?
by UniKyrn
Thu Jan 20, 2005 10:17 pm
Forum: General
Topic: hot to forbid Windows file sharing in wireless ???
Replies: 11
Views: 5044

And is one of the most abused ports by internet worms as well.
by UniKyrn
Thu Jan 20, 2005 6:56 pm
Forum: General
Topic: hot to forbid Windows file sharing in wireless ???
Replies: 11
Views: 5044

And then block ports 135-139 tcp/udp in the forwarding firewall table, which will kill windows networking between users.
by UniKyrn
Wed Jan 19, 2005 12:17 am
Forum: General
Topic: Multiple CPU Support
Replies: 2
Views: 764

Multiple CPU Support

Does the Router OS support multiple CPU's?
by UniKyrn
Fri Jan 14, 2005 8:52 pm
Forum: General
Topic: MAC Auth. problem
Replies: 4
Views: 1220

What mode is the CPE in, bridged or routed? We use Tranzeo CPE's all over our network and all I see in the Wireless Tables on the MT is the mac address as printed on the label on the CPE, I don't remember ever seeing the mac address of the users computer.
by UniKyrn
Tue Jan 11, 2005 2:50 am
Forum: RouterBOARD hardware
Topic: Temperature sensors reading surface of the Sun temps
Replies: 4
Views: 7065

I'm seeing the same thing on a bunch of RB230's I'm graphing the temp of. Within a few days of any reboot, the LM87's start returning what looks a lot like 0xFFFFFFFF (-1) both in winbox and SNMP. They're all running the 1.3.3 firmware and 2.8.22 OS.
by UniKyrn
Fri Jan 07, 2005 7:39 am
Forum: General
Topic: MT - BGP - Border Router
Replies: 32
Views: 7230

1.7Gig P4 with 512Meg of ram. It normally runs about 10% utilization and about 400Meg free ram. When it has to start cleaning up or merging routes in BGP though, it seems to eat the processor completely.
by UniKyrn
Thu Jan 06, 2005 6:50 pm
Forum: General
Topic: MT - BGP - Border Router
Replies: 32
Views: 7230

One of the things to watch for will be the load on the router when one of those sessions drops for some reason. I graph my cpu average with mrtg and it hits 100% for quite awhile as the router works to clean up the table after loosing a peer, and during that time the routes for outbound traffic are ...
by UniKyrn
Mon Jan 03, 2005 8:20 pm
Forum: General
Topic: Bridge & Bandwidth limiter problem
Replies: 1
Views: 749

You've limited the customer to dialup modem rates and the speed seems slow? Well, yeah, 50Kbps is slow given the number of huge images and flash based ads sites insist on using these days.

Or did you mean to type something besides 50Kbps?
by UniKyrn
Fri Dec 31, 2004 5:55 pm
Forum: General
Topic: Connection Limiting, etc...
Replies: 3
Views: 1338

I can't provide examples, but I can give you a general idea of how I'd try to implement it and you can experiment. To rate limit outbound SMTP connections on port 25, create a mangle rule that watches for SYN packets outbound to port 25. Then create a queue that limits how many of those can occur in...
by UniKyrn
Thu Dec 30, 2004 10:40 pm
Forum: General
Topic: Connection Limiting, etc...
Replies: 3
Views: 1338

At least for port 25 outbound you could probably rate limit them to some small number of syn packets per minute, which wouldn't effect normal users but would put a limit on a spammer. If they are exploiting external webservers to relay spam through them using the CONNECT command, you could probably ...
by UniKyrn
Thu Dec 30, 2004 5:18 pm
Forum: General
Topic: MT - BGP - Border Router
Replies: 32
Views: 7230

Ok, I didn't read your last message clearly, I thought you were asking if you should get an AS number. Whether you join some other organization also is up to you, ask your peer why they think you need to join one. You might as well take the full feed instead of a truncated one, it allows you to make...
by UniKyrn
Thu Dec 30, 2004 4:55 pm
Forum: General
Topic: MT - BGP - Border Router
Replies: 32
Views: 7230

If you don't have an AS number, you're wasting time with BGP because the point of using it is to advertise your own routes. If your peers are doing the annoucing for you, then if you go down they still announce and traffic to you gets thrown away, you get blackholed on the network. If you announce, ...
by UniKyrn
Thu Dec 30, 2004 6:30 am
Forum: General
Topic: MT - BGP - Border Router
Replies: 32
Views: 7230

Oh it works alright, we're taking dual full feeds.
by UniKyrn
Thu Dec 30, 2004 5:37 am
Forum: General
Topic: MT - BGP - Border Router
Replies: 32
Views: 7230

Nope, and that's another problem report I sent in last summer. Even if you close that window in winbox, look at the yellow activity dot in the upper right corner, it's still solid yellow. Closing the box early doesn't stop the download process, it simply means it hasn't got a place to be displayed. ...
by UniKyrn
Wed Dec 29, 2004 6:56 pm
Forum: General
Topic: MT - BGP - Border Router
Replies: 32
Views: 7230

One other thing you're going to want to watch out for is accidently re-announcing routes from one peer through the other. When I added our networks to the bgp config to announce them, I quickly discovered that those were in addition to all the routes I was learning via bgp through each peer. I wasn'...
by UniKyrn
Wed Dec 29, 2004 5:36 pm
Forum: General
Topic: MT - BGP - Border Router
Replies: 32
Views: 7230

Re: bgp

Just wondering how this would be done . Also wondering are we the only 2 people here concerned with multihomed bgp for seamless failover? The second peer is very underutilized, yes. My guess is that it's the weighting causing it, and the fact I can't verify that because MT provides no way to see th...
by UniKyrn
Tue Dec 28, 2004 5:32 pm
Forum: General
Topic: MT - BGP - Border Router
Replies: 32
Views: 7230

Re: bgp

anybody worked with mikrotik and multihoming bgp through 2 providers for seamless failover ? Make sure neither peer is sending you a default route unless you like seeing all your outbound traffic go through only one of them instead of through the interface that is the shortest path. I need to clari...
by UniKyrn
Mon Dec 27, 2004 8:58 pm
Forum: General
Topic: MT - BGP - Border Router
Replies: 32
Views: 7230

The router in question is running a 1.7Ghz CPU and has 512Meg of ram. It normally averages under 10% utilization and roughly 400Meg free, so the box is probably way more than is actually needed. One note though, while this box does have firewall rules, the connection table tracking has been turned o...
by UniKyrn
Fri Dec 24, 2004 10:42 pm
Forum: Scripting
Topic: wireless signal strenght monitoring with mrtg
Replies: 19
Views: 11623

How did you match them up? I ended up throwing each radio into the access list and adding a comment to each entry that was the customers name. Made it easier to tell them apart when looking at the registration table, and allowed me to write an Expect script on our logging system that could log in, r...
by UniKyrn
Fri Dec 24, 2004 9:45 pm
Forum: General
Topic: MT - BGP - Border Router
Replies: 32
Views: 7230

Re: bgp

anybody worked with mikrotik and multihoming bgp through 2 providers for seamless failover ? Maybe I'm missing something, but we're using it with dual providers and I simply created two peers on the Routing->BGP selection via winbox. We're taking full tables from each peer, which does cause a bit o...