MikroTik

hendra

no answer at all team ?please help team

hendra

so team, what is the best setting for fq codel and cake?

what is best mikrotik OS version for fq codel and cake?

hendra

Hi, I think I have found something interesting here, a QoS script compatibel w Fasttrack: https://forum.mikrotik.com/viewtopic.php?t=113308 I tried it, by adding a new dedicated Internet bridge, but failed.... Time is over for my experiments, but I will try again next time. Edit: I tried adding a s...

hendra

"cake type with bandwidth setting detected configure traffic limits within queue itself" ? 1. can you team explaine to me what is the meaning of this? 2. how to prevent it ? or is my config is right? 3. what is the best setting for cake? 4. if I have 600 MB up dan down, with 300 client wha...

hendra

no answer at all?

hendra

I have 3 ISP
first isp for routing youtube
second isp for routing social media
third isp for routing port 443 tcp

i have 100 clients ppoe but i cant ping their router (tp link wr840),
my mikrotik is RB 1100.
now I need solution to ping router client and remote ppoe router.

big thanks

hendra

Step 1: Don't be creative. Step 1a: If it's WAN interface and address is dynamic (DHCP, PPPoE), don't touch anything. Step 1b: If it's WAN interface and manual config, enter exactly what you got from ISP. Step 1c: If it's LAN interface, use only private subnets (10.0.0.0/8, 172.16.0.0/12, 192.168.0...

hendra

Problem solved. I thought it was applying subnet mask automatically, but no, I had to set it from 255.0.0.0 to 255.255.255.0 on WAN and it works now.
Noob problems.

Can u explaine steps to do mask subnet?
I really cant watch iqiyi and twitch

hendra

You can test the server at: IP: 87.121.0.45 U: neterra P: neterra Special thanks to Neterra Telecommunications for sponsoring and providing the hardware and the connectivity for this btest server. 15min. testing time and 24h ban (this was their request). Please share results when you test. Cheers ;...

hendra

@mjsabri, thank you for your reply.

I have found out the solution of this problem. I have to set the routing table in the Ping tool to use the routing table of that WAN interface.
Case closed. Thank you for your help.

can you explaine more ? i cant ping my ppoe client from mikrotik

hendra

Update your RouterOS.

Regards.

what version should i update? i dont want to update my OS version to the latest version coz of bad or unstable of my mirkotik,

i think its better to just update it to exacly "LTE APN" feature as my case

hendra

/system scheduler add name=usb-reset start-date=jan/1/2021 start-time=03:27:19 interval=1d on-event={/system routerboard usb power-reset bus=0 duration=30s} On some Routerboard models, the bus parameter may be omitted, on others it is mandatory and has to identify the USB bus where the modem is, Fi...

hendra

I had the same problem. Turns out there is an option for the APN profile "use-network-apn", which is only accessible via CLI and default yes. Enabled, it ignores your APN settings and uses the APN provided by the network. Set this to no and it starts using your configured APN. can you exp...

hendra

Hello everyone i hope next year is better for all of us

Anyway, Iam looking for script for auto reboot/reset "USB Power Reset", or you guys have another idea, coz my lte1 connection WAN is getting better when I do USB power Reset once a day.

Big thanks,

hendra

Use a PC with ZeroTier or Tailscale.

Regards.

cool

hendra

Checking from my mobile, so a bit difficult... What I already see: - time/ date is very wrong on your device. Not necessarily a problem now, but can cause problems further on. Try to enable ntp client. Cloud ip using time sync or set date/time manually. - is there no other dns server then local ip ...

hendra

i am looking for this case too

hendra

Use different ports on the WAN site and forward them to port 443. I.e. port 50443 for download manager and 60443 for streaming service. Or is that to simple!?

thank you for your reply, can you explaine more specific ? may be step by step for doing that

hendra

Iam still learn and hope you can share your QOS about this case.

hendra

Well, you have port 443, so most likely encrypted https. Router can't tell what made the request, whether it was web browser, download manager, etc. If it would be different client devices, you could do something based on their addresses. But if it's same device, or multiple, but doing all things, ...

hendra

No answer at all team?

hendra

hello everyone, hows your day. Iam looking for configuration to separate between Internet download manager (IDM) and streaming movie which both of them using same port 443 TCP. Any advice from you guys ? If i can block IDM its better, so my plan is people can download while streaming movie Big thanks.

hendra

Do not use the mangle rules and the queue tree you had. Create a new SFQ queue type with a perturb time of 10. Then add a simple queue with your LAN as target, a max limit of 90M/45M and use the new SFQ queue type you created. This should stop any client from starving all others by sharing the band...

hendra

Both are working on Dynamic port so limiting bandwidth for both this is difficult & not available in mikrotik but you can try with adding some firewall rule but that will block it but not allowed to limit it

can u tell me how to block IDM and Torrent ?

hendra

You may want to incorporate some form at dst-limit in your match. If you want to ensure it is a download, you'll want to be certain to include a packet-size matcher. You can find documentation for dst-limit here: http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter (the others are there, too). d...

hendra

do you know how to block or making Iinternet download manager doesnt increase latency when i play game? i did QOS but still

hendra

No answer at all ? Need advice to solve this

hendra

The combination of a /0 CIDR mask and no gateway IP address makes a perfect sense - such a configuration results in adding a "connected" route to 0.0.0.0/0 via ether2 (as /ip route print can show you), so the router sends an ARP request for every IP it wants to send a packet to, except de...

hendra

/0 as IP address?
The network parameters from that DHCP server are absurd....

yeah idk why its /0, how to fix this?

hendra

I have 3 ISP

ISP 1 and 2 have gateway from dhcp client, but ether 2 doesnt have gateway

so my question is :
1. how to get dhcp client for ether 2 ?
2. whats problem with ether 2 ?
3. how to route connection game to ether 2 without gateway ?

Big thanks for the answer

hendra

i already use AWS CHR EC2 but mobile legend is still lagging, does anyone know ho to fix this?l

hendra

I monitored my qos setup over last week, what I noticed is that marking connections based on connection-bytes with connection-rate isn't good enough when connections are short lived - download manager opens dozens of connections for every file, and there are many of them (think 50-80 100M files in ...

hendra

i have VPS CHR, and i want to know, is there any domain which can block nslookup for our privacy?

or how to keep/hide our publick ip from ns look up

big thanks for any reply.

hendra

its fine, the only one i need is to block speedtest.net not another speedtester's web. so can u tell me how to do that ? i try so much way but it doesnt work for me

hendra

please how to block speedtest.net in mikrotik for :
1. website
2. app in android

thanks for your reply

hendra

Please provide some requirements....
What is the use case or use cases?
Also a network diagram will help understand if this is for a single WAN router with a single LAN or something different.
If you want specifics you need to provide specifics.

any suggestion sir ?

hendra

wlan1, wlan2, and ether2,3,4,5 are bridge-LAN.

ether 1 is wan to my ISP. dial up on ISP router not mikrotik. like that, is that enough information for you ?

hendra

for 3 years ive been looking for this. What is best chain for mangle games connection mark ? many people are using prerouting, but when i ask why, they dont know the reason. some people are using postrouting for it and forward for mark packet without any reason. and then few people are using forward...

hendra

i still cant find the way to hw the bridge lan, is that because of bridging wlan with ether 2 as "bridge-lan" ? as u said wlan uses CPU

so how to reduce cpu load for my bridge-lan expecially when someone is using IDM to download, or open many tabs chorme at the same time on my WLAN 1 ?

hendra

Only one bridge can be hw

so i need to use between bridge-wan or bridge lan right ?
which one os better ?

hendra

my hap ac lite is using 6.48 OS now. my bridge-wan is hardware offload (HW) now, but my bridge-lan (bridge wlan1, wlan2 and ether2) cant be HW. do dou have sugestion ?

I stop rstp, vlan filtering, igmp, and mstp but its still cant be HW. please help

hendra

Darnate, my hap ac lite is using 6.48 OS now. my bridge-wan is hardware offload (HW) now, but my bridge-lan (bridge wlan1, wlan2 and ether2) cant be HW. do dou have sugestion ?

I stop rstp, vlan filtering, igmp, and mstp but its still cant be HW. please help

hendra

this happen too, when someone on my clinet download using internet downloa dmanager the cpu is 100%

hendra

closing tab one by one is not good way i think, because CPU hogging only for 2 second when i open all 19 tabs.

well, i use post reply for next thanks for the advice

hendra

Go into Firewall -> Connections when you have a bunch of tabs (like 50) and see how many it lists. Also check if you have any firewall rules that have to do with "fast path" or "fast track" because that's the key to unlocking better CPU usage in routers. when i open 19 tabs (the...

hendra

The hAp ac lite has a slightly wimpy CPU, so having 100 tabs will easily bog it down. If you use a lot of internet-heavy sites then you might want to get a better router.

so even i disable all firewall rules (mangle, firewall filter, raw) its still get 100 cpu ?

how about buying hap ac 3 ?

hendra

But doesn't that just reduce the time Tik tracks the connection? What happends to connections that ARE still established, but are not currently active (for example somebody on p2p queue)?

can some one answer this question, i have same problem

hendra

What Mikrotik device are you using?

Hap Ac lite sir

hendra

hello no asnwer at all?

hendra

if i open 100 tabs chrome at same time my mikrotik CPU is 100 %, any solution for this?

hendra

so there is no way except change ISP ?
I hope i can use AWS VPN

hendra

or you have advices that makes my ping game stable ?

hendra

i want to buy/subs VPN AWS and set up on my mikrotik to play game mobile legend smoothly. (lower ping and stable)

pls i need info, thanks

I bought so many VPN L2TP/PPTP tunnel or game with various server especially Singapore. but the ping is not stable.
what do u mean? is there something wrong ?

hendra

i want to buy/subs VPN AWS and set up on my mikrotik to play game mobile legend smoothly. (lower ping and stable)

pls i need info, thanks

hendra

same question i want a vpn aws to play mobile legend, i want to set up on my mikrotik. please anyone help

hendra

can anyone tell me how to buy or subscribe AWS VPN for mikrotik ?

I need to get good and stable connection for my game "mobile legend"

Thanks

hendra

Depends on your ISP, ML IIRC uses AWS. Many ISPs aren't peered with AWS. A VPN provider may fix the latency, only if the latency from your ISP to said VPN is low + VPN host is peered with AWS via their own upstream provider. A lot of factors are involved. Just ask your ISP to peer with AWS instead....

hendra

I'm afraid a VPN tunnel won't solve any lag or high latency, it will most likely introduce more.

so do you have solution for this?

hendra

no answer at all ?

hendra

iam from indonesia, playing mobile legend is my hobby. sometimes its getting lag with my ISP. does anyone sell VPN mikrotik L2tp/pptp for mobile legend ?
for more information maybe i need VPN Tunnel dedicated 1:1 server singpore. its better if you have trial. Thanks

hendra

How to bypass a FUP from ISP on mikrotik ?

hendra

ok thank you for you guys advices

hendra

my wireless from mikrotik hap ac lite says no intenet when i see on my laptop, but i can internet
can anyone help me. see the pitcure please
I use VPN tunnel btw

hendra

I ditched ROS DoH completely and replaced it with Cloudflared binary + Pi-Hole now DoH works 100% of the time with zero errors. Zero problems whatsoever.

DoH on ROS was and still is broken.

can u tell me the step to do this?

hendra

whats the fuction of route cache ? should i enable it or no ?

hendra

can someone tell me the funtion of mangle set priority which 0-7 ?
is it good for QOS for game connection, mark packet game ?
which one is good ? prerouting or postrouting ?

hendra

i saw a post in this site that said we can use cloudflare IPv6 better then use DoH, but he didnt say how to setting it.

hendra

no answer at all ??

hendra

how to setting cloudflare IPv6 mikrotik ?

hendra

Anyone else getting this? Seems that if its time to get an updated cert file...it cant. Its a chicken/egg scenario where it cant get the info to do the fetch to update the cert. Easy fix is to just add in another dns entry like 1.1.1.1 and immediately DNS query works, it grabs does the fetch and th...

hendra

any clue for this "DoH Server connection error : ssl handshake timeout" ?

hendra

sometimes after a few hours i got this log " DoH server conncetion error iddle timeout" any clue for this ?

hendra

any clue ?? pls help

hendra

can you ping the DoH server? maybe this is the problem. or maybe my router is to old :D lol the cpu gets down when i disable the nat for transparent dns. and what is the meaning of this warning logs ? may/27 01:04:34 dns,warning DoH max concurrent queries reached, ignoring query dns,error DoH serve...

hendra

i cant find any clue on that topic that you share.

or u just can tell me how

hendra

dns,error DoH server connection error: remote disconnected while in HTTP exchange

any solution ?

hendra

It expires nov/10/2031 02:00:00, that's more than 595 weeks from now.

thank you sir

hendra

how about this error

dns,error DoH server connection error: remote disconnected while in HTTP exchange

any solution ?

hendra

how long we can use this certifcate ?

hendra

sometimes "DoH server connection error, idle time out - connecting" after a few hour so i cant connect internet for 1-3 seconds. how to solve this thanks

hendra

no one can help me? pls omg

hendra

yes sir I did it, but latency still high

hendra

I have two question sir, hopefully someone can help me 1. I do mark routing for traffic game into VPN using pptp client in mangle, now how to make that traffic into queue tree ? I want to do make PCQ for it. I use packet mark but it doesn't works 2. how to bridge VPN from PPTP client with other ethe...

hendra

can you explaine more about that ?
or give me link or website for me to learn about that,
I am still don't understand to use VPN on mikrotik

hendra

any help for ISP that throttle speed youTube ? Script or something ?

Big Thanks,

hendra

no answer at all ? omg please help

hendra

how to limit internet download manager (Idm) ? my isp has 4Mbps upload and 20Mbps download, qos works for lan cable , but not so good for wireless. when I playing a game, and my sister download a file using idm the latency (ping) of my game increase. i use wireless only, my mikrotik type is hap ac l...

hendra

thank you for your answer

all port that I know are 443 (http) 53 (dns), well if you know port that often to use than I can add in "dst addrs !"

so I don't need to change game port, because gaming port always change every maintenance.

hendra

I want to create mangle rule with port except gaming port,

so I can create QOS for gaming traffic and another traffic.

so what ports beside/except gaming ports ?

can anyone please help me ? thank you

hendra

can someone teach me how to make auto simple queue with format "<hotspot-MacAdress>", when people log in into my hotspot ty

hendra

I want to ask why on hotspot hosts, adress and dst adress is defferent, accually I want some device get static ip adress. Ive already done this in dhcp-make static. but my ip adress still change. pls help

hendra

thank you so much for your fast respon .

ok iam going to try it now, anyway what should I do if the game uses 2 port , its own port (10001-10
094) and http port (80) ? it confused me to use port 80

hendra

I have same proble, and I use your script. actually it said "failure: no chain specified" and "invalid value for max-limit, an integer required". what is this ? I really need some help here please [admin@MikroTik] > [admin@MikroTik] > :local outboundInterface "bridgegabung&q...

Search found 93 matches