Community discussions

MikroTik App

Search found 32 matches

by julianov
Mon Nov 20, 2017 8:11 pm
Forum: General
Topic: Where to put the mark for voice QoS
Replies: 2
Views: 514

Where to put the mark for voice QoS

Hello All. Looking the package flow: https://wiki.mikrotik.com/images/thumb/2/24/Packetflowv6.png/700px-Packetflowv6.png I want to know what it's the best chains to set the mangle mark. For what I'm seeing the best is prerouting due to since the packages get in to the router is the first chains for ...
by julianov
Wed Nov 15, 2017 4:23 pm
Forum: General
Topic: Mark packages for VoIP and QoS
Replies: 1
Views: 1007

Mark packages for VoIP and QoS

Hello All. I need to implement QoS for voice packages in the mikrotik router. The next is the code that I have implemented but I don't see a package matches. /ip firewall mangle add action=mark-connection chain=prerouting new-connection-mark=VoIP packet-mark=VoIP passthrough=yes src-address=100.64.0...
by julianov
Tue Nov 14, 2017 2:42 am
Forum: Beginner Basics
Topic: IPsec exchange mode
Replies: 1
Views: 312

IPsec exchange mode

Hello.
If I configured an IPsec tunnel with PSK + Auth. Why I have to define the exchange-mode (main in this case) if there isn't a key flow in the network?

The tunnel works but the doubt that I have is conceptual.

BR
by julianov
Wed Nov 08, 2017 6:47 pm
Forum: General
Topic: L2tp/IPsec and windows 10 client
Replies: 1
Views: 11165

L2tp/IPsec and windows 10 client

Hello All. Due to I couldn't implement an IPsec tunnel I'll do with L2TP which Windows implements it as default. But I'm getting this error: https://i.imgur.com/iqkLHy7.png This is the code: /ip pool add name=poolIPv4 ranges=100.64.0.2-100.64.0.254 add name=poolIPv4-VPN ranges=100.64.1.2-100.64.1.25...
by julianov
Mon Nov 06, 2017 4:52 pm
Forum: Beginner Basics
Topic: IPsec tunnel and Shrew client
Replies: 0
Views: 874

IPsec tunnel and Shrew client

Hello All, this is the client output when I try to stablish the tunnel. config loaded for site '10.0.0.4' attached to key daemon ... peer configured iskamp proposal configured esp proposal configured client configured local id configured remote id configured pre-shared key configured bringing up tun...
by julianov
Mon Nov 06, 2017 12:10 am
Forum: General
Topic: IPsec Tunnel and Cisco VPN client on an external host
Replies: 1
Views: 661

Re: IPsec Tunnel and Cisco VPN client on an external host

Now, following Road Warrior description in the wiki documentation I made (watch that I don't know the client public IP because it can connect everwhere): /ip ipsec mode-config add address-pool=IPv4Poll name=RW-cfg system-dns=yes /ip ipsec policy group add name=RoadWarrior /ip ipsec policy add dst-ad...
by julianov
Sun Nov 05, 2017 9:58 pm
Forum: General
Topic: IPsec Tunnel and Cisco VPN client on an external host
Replies: 1
Views: 661

IPsec Tunnel and Cisco VPN client on an external host

Hello. I tried to establish an IPsec tunnel between a mikrotik rb2011 and a PC which it's running cisco vpn client. But without success! This is the configuration for the tunnel. /ip ipsec mode-config address-pool=IPv4Pool system-dns=yes IPv4Pool it's the private pool for the LAN's host and I want t...
by julianov
Thu Nov 02, 2017 4:42 pm
Forum: Beginner Basics
Topic: Tunnel broker provieder
Replies: 0
Views: 283

Tunnel broker provieder

hello All. Beside Hurricane Electric. What other tunnel broker provieder do you recomend me? The problem with Hurricane Electric is that at the moment to configure the tunnel the Hurricane system need a ping response from the public ip device which would be one tunnel endpoints. In my home I can sta...
by julianov
Thu Oct 26, 2017 9:47 pm
Forum: Beginner Basics
Topic: Allowing 100 sip connection to pbx
Replies: 5
Views: 1065

Re: Allowing 100 sip connection to pbx

And what about this next rule?
add action=drop chain=forward comment="Limit to 100 udp connections" connection-state=new disabled=no dst-port=5060,10000-65535 connection-limit=100,24 protocol=udp
by julianov
Thu Oct 26, 2017 5:15 am
Forum: Beginner Basics
Topic: Allowing 100 sip connection to pbx
Replies: 5
Views: 1065

Re: Allowing 100 sip connection to pbx

Thanks, both. The doubt regarding why is that lines at the beginning is over! Regarding the connection limit. What I want is just limit the maximum connection at one's time (not the total )that the PBX can handle. Becuase it depends on the ISP bandwidth connection, upstream connection because that a...
by julianov
Wed Oct 25, 2017 7:33 pm
Forum: Beginner Basics
Topic: Allowing 100 sip connection to pbx
Replies: 5
Views: 1065

Allowing 100 sip connection to pbx

Hello All. I hope you are doing fine What I want is enable just 100 sip connection to the PBX through mikrotik router. So, I think that the code in the mikrotik firewall filter should be: ip firewall filter add chain=forward dst-address=100.64.0.2 protocol=udp dst-port=5060 action=accept connection-...
by julianov
Fri Oct 20, 2017 6:38 pm
Forum: Beginner Basics
Topic: Hurricane Electric Tunnel Broker implementation help
Replies: 4
Views: 3120

Hurricane Electric Tunnel Broker implementation help

Hello. I'm need to implement a double stack IPv4-IPv6 for my LAN. ether2 - DHCP server for (IPv4 with 100.64.0.0/24 pool and IPv6 with the pools that deppends on Hurricane Electric) ether6 - DHCP client, it's the port connected to modem ADSL2+ which implements an dhcp server with a nat to a dinamic ...
by julianov
Wed Oct 18, 2017 10:49 pm
Forum: Beginner Basics
Topic: One way video - PBX [SOLVED]
Replies: 9
Views: 1292

Re: One way video - PBX [SOLVED]

Thanks, the problem was the src-ports. Can I make you a question k6ccc? Why it is? It supposed that the softphones must works in a fixed ranges of ports? I found in RFC 768 for udp "Source Port is an optional field, when meaningful, it indicates the port of the sending process, and may be assumed to...
by julianov
Wed Oct 18, 2017 7:04 pm
Forum: Beginner Basics
Topic: One way video - PBX [SOLVED]
Replies: 9
Views: 1292

Re: One way video - PBX [SOLVED]

Something that I've note is that when the softphone that is in the public network makes a voice call, the comunications is stablish but just for a seconds and then the call get off. That not happens when the softphone in the lan makes the call. There is any documentation about this? regarding the wi...
by julianov
Wed Oct 18, 2017 4:10 am
Forum: Beginner Basics
Topic: One way video - PBX [SOLVED]
Replies: 9
Views: 1292

Re: One way video - PBX [SOLVED]

Just a doubt that I have, define a port range like this
src-port=10000-20000

Is that sentence fine?
by julianov
Tue Oct 17, 2017 8:24 pm
Forum: Beginner Basics
Topic: One way video - PBX [SOLVED]
Replies: 9
Views: 1292

Re: One way video - PBX [SOLVED]

Thanks for the reply. Well first I tried with this rules: /ip firewall filter add action=accept chain=input port=22,8291,80,443 protocol=tcp add action=accept chain=input connection-state=established,related add action=drop chain=input in-interface=ether6 add action=fasttrack-connection chain=forwar...
by julianov
Tue Oct 17, 2017 5:16 pm
Forum: Beginner Basics
Topic: One way video - PBX [SOLVED]
Replies: 9
Views: 1292

One way video - PBX [SOLVED]

Hello All. How are you doing? I've implemented a PBX with asterisk in my LAN but the problem that I'm having is that when there is a video call between a softphone that is in the lan and one that is in an external network the mikrotik router RB2011 is filtering the incoming video, not the outcoming....
by julianov
Mon Oct 16, 2017 12:01 am
Forum: Beginner Basics
Topic: Do Nat or routing between private network [SOLVED]
Replies: 14
Views: 2494

Re: Do Nat or routing between private network [SOLVED]

thanks john. I will do that. Also regarding this firewall filter rules that you said before /ip firewall add chain=input protocol=tcp port=22,8291,80,443 add chain=input action=protocol=icmp add chain=input connection-state=established,related add chain=input action=drop in-interface=ether6 add chai...
by julianov
Sun Oct 15, 2017 7:57 pm
Forum: Beginner Basics
Topic: Do Nat or routing between private network [SOLVED]
Replies: 14
Views: 2494

Re: Do Nat or routing between private network [SOLVED]

It's works!!!!!! when I changed the /32 to /24. It needed just a minute to changes the configurations. Thank you very much John. You help me a lot. Right now I'm using the connection through RB2011. Also, I changed the IP pool to the grade nat 100.64.0.0/24 and it's working. Do you think that I can ...
by julianov
Sun Oct 15, 2017 7:53 pm
Forum: Beginner Basics
Topic: Do Nat or routing between private network [SOLVED]
Replies: 14
Views: 2494

Re: Do Nat or routing between private network [SOLVED]

[admin@MikroTik] > /ip dhcp-server network print # ADDRESS GATEWAY DNS-SERVER WINS-SERVER DOMAIN 0 172.16.0.0/32 172.16.0.1 [admin@MikroTik] > /ip dhcp-server lease print detail Flags: X - disabled, R - radius, D - dynamic, B - blocked 0 D address=172.16.0.100 mac-address=A0:8C:FD:1C:5A:61 client-i...
by julianov
Sun Oct 15, 2017 6:12 pm
Forum: Beginner Basics
Topic: Do Nat or routing between private network [SOLVED]
Replies: 14
Views: 2494

Re: Do Nat or routing between private network [SOLVED]

it keeping problem connection There is this tutorial https://wiki.mikrotik.com/wiki/NAT_Tutorial but there is a problem for my implementation. I don't know the Wlan ip pools and the gateway for this. So I can implement the nat using the masquerade but how can I make the route? I think now this is th...
by julianov
Sun Oct 15, 2017 6:48 am
Forum: Beginner Basics
Topic: Do Nat or routing between private network [SOLVED]
Replies: 14
Views: 2494

Re: Do Nat or routing between private network [SOLVED]

55 [admin@MikroTik] > ping 8.8.8.8 interface=ether6 SEQ HOST SIZE TTL TIME STATUS 0 8.8.8.8 56 55 38ms 1 8.8.8.8 56 55 36ms 2 8.8.8.8 56 55 36ms 3 8.8.8.8 56 55 35ms 4 8.8.8.8 56 55 36ms 5 8.8.8.8 56 55 36ms 6 8.8.8.8 56 55 37ms 7 8.8.8.8 56 55 36ms sent=8 received=8 packet-loss=0% min-rtt=35ms avg-...
by julianov
Sun Oct 15, 2017 6:19 am
Forum: Beginner Basics
Topic: Do Nat or routing between private network [SOLVED]
Replies: 14
Views: 2494

Re: Do Nat or routing between private network [SOLVED]

Pinging 8.8.8.8 with 32 bytes of data: Reply from 10.0.0.4: Destination host unreachable. Reply from 10.0.0.4: Destination host unreachable. Reply from 10.0.0.4: Destination host unreachable. Reply from 10.0.0.4: Destination host unreachable. Ping statistics for 8.8.8.8: Packets: Sent = 4, Received ...
by julianov
Sun Oct 15, 2017 1:51 am
Forum: Beginner Basics
Topic: Do Nat or routing between private network [SOLVED]
Replies: 14
Views: 2494

Re: Do Nat or routing between private network [SOLVED]

Thanks. I don't have access to second router, just the mikrotik router that i'm using to implement my lan. So I can't do the routing. It still keeps the problem. I add the line code you said: /interface ethernet set [ find default-name=ether3 ] master-port=ether2 set [ find default-name=ether4 ] mas...
by julianov
Sat Oct 14, 2017 11:42 pm
Forum: Beginner Basics
Topic: Do Nat or routing between private network [SOLVED]
Replies: 14
Views: 2494

Do Nat or routing between private network [SOLVED]

Hello All. Before I did a question related with the NAt but that don't fix the problem. Lets me explain what I need to do and maybe you can give me and advise. I've to implement a private network inside - connected to other private network which this last one is connected to the public network. Why ...
by julianov
Sat Oct 14, 2017 9:02 pm
Forum: Beginner Basics
Topic: Configured a NAT without know the destination address
Replies: 6
Views: 804

Re: Configured a NAT without know the destination address

Why should I use firewall rules? The only thing I want to do is a nat and the host OS take care of the firewall. Or it's necesary to make a nat?

I use rip because the router will learn the network. I can't make an static route because I don't know the public network. do I?
by julianov
Sat Oct 14, 2017 7:46 pm
Forum: Beginner Basics
Topic: Configured a NAT without know the destination address
Replies: 6
Views: 804

Re: Configured a NAT without know the destination address

Thanks very much John. But it's neccesary a route between the networks, right? this is the code: # oct/14/2017 13:43:07 by RouterOS 6.37.4 # software id = 818B-XRQ1 # /interface ethernet set [ find default-name=ether3 ] master-port=ether2 set [ find default-name=ether4 ] master-port=ether2 set [ fin...
by julianov
Sat Oct 14, 2017 6:01 pm
Forum: Beginner Basics
Topic: Configured a NAT without know the destination address
Replies: 6
Views: 804

Configured a NAT without know the destination address

Hello I've a LAN configured with a DHCP server set on ether2 and ports which goes to ether1 - ether5 set with ether2 as master-port. Also, I've configured ether6 with a DHCP client and it's the port which gets the public IPs. As I don't know what pulbic IP the ISP will give me and it allways changes...
by julianov
Tue Oct 10, 2017 5:32 pm
Forum: Beginner Basics
Topic: DHCP server with IPv6
Replies: 0
Views: 717

DHCP server with IPv6

Hello All. I hope you are doing well. I must to implement a LAN with IPv6 for a proyect. But as every ISP provides a IPv4 direction I must to implement a NAT an a route to that network. From LAN to WAN but that is another topic for the future. I'm having problem to get an IP from the DHCP server. Wh...
by julianov
Sun Oct 01, 2017 5:04 am
Forum: Beginner Basics
Topic: Router RB2011 as a swith with DHCP
Replies: 1
Views: 413

Router RB2011 as a swith with DHCP

Hello All. how are you doing? I a newbie with Mikrotik stuff and I need to implement a switch and a DHCP server. As I got a Router RB2011 to start with this Mikrotik world, I'm going to use it. I have to use 3 port as a switch, but really it can be a hub because I'm not going to implement any VLAN i...
by julianov
Wed Sep 06, 2017 4:56 pm
Forum: General
Topic: IPv6 support
Replies: 5
Views: 1297

Re: IPv6 support

Thanks for the quick response. But what happens with Ethernet's MTU. Must it increase? because now the IP headers increase from 8 bytes to 32 bytes so the payload size decrease if the MTU is 15000. Must I increase it? and more it will increase if I want to use GRE and IPsec
by julianov
Wed Sep 06, 2017 4:14 pm
Forum: General
Topic: IPv6 support
Replies: 5
Views: 1297

IPv6 support

Hello All. I hope you are doing fine. Just a question regards Router Mikrotik Rb2011il-rm. Do it support IPv6? I was looking this specification here: https://mikrotik.com/product/RB2011iL-RM But I couldn't find it. And by the way, what I have to do is a LAN (intranet) with IPv6 support and NAT to IP...