MikroTik

pacmen

Amazing

pacmen

There are Mellanox Intel nics that offers hardware of loading.
mellanox is most of the time the best choice if it's supported by proxmox.

Intel like Cisco is almost all of the time have limit ions like only Intel brand sfp sfp+ support.

Check if the offloading features supported by proxmox.

pacmen

does Sonar implement the shaping on the CPE or on the core?

pacmen

This is more or less what i will do, if so you can just traffic shape on the termination CPE device, no?
You can also Monitor the CPE device and inform your client of any issue arise - and also automate the process by sending SMS to your clients.

pacmen

How do your clients going to connect to your network, with what cpe termination that you provide them or one the buy there own? Case You provide them mikrotik antenna you get full management and control so you can throttle from this termination device which is bridge to theire in home router. Case y...

pacmen

I want to share with you my Cent of wisdom.

VMware Esxi for some reason limiting the maximum amount of network interfaces to 10.

pacmen

what is your use case for running CHR on this cloud?

pacmen

So i've worked on it this morning and setup an CHR on proxmox to check your issue. And i found that if im adding the interfaces while the CHR is running i can't see my added interfaces, but if i reboot the CHR the interfaces are loaded correctly. Note that i was added 3 type of interfaces CHR-proxmo...

pacmen

It maybe related to the way you tried to attach your interafaces to the machine itself?
Can you also include a picture of the machine HW?.

you need to take in mind that not all of the network virtualization type is supported by the CHR.

personally i will try to do it myself.

pacmen

what is vlan translation, can you please referral to the wiki page please?

I assumes your need is simple but the way you wrote it doesn't let us to understand it

pacmen

Let me check if i got you right You want to connect between your RB4011 to CRS112 with a fiber connection via the SFP+ on the RB4011 and on some SFP cage on the CSR112? If thats the case I don't have straight and clear answer, and here's the reason, By the MSA regulation an SFP+ (10Gbit) cage shoul...

pacmen

I've answered you in the beginner forum

pacmen

First let me check if i got you right router 1 can talk with router 2 via pptp, router 2 (lets say) is connected to a server with openvpn and you correctly unable to reach the server from router 1. If you want to reach the server from router 1 you have 2 options. 1.easy - create static route on the...

pacmen

Does the lacp is configured on the vswitch or on the ros?

pacmen

Your understanding is wrong. src-nat is mangling the src-address and src-port ... while dst-nat is mangling dst-address and dst-port.

By that you mean ROS looking on the src part of the packet when using src-nat, and on the dst address when using dst-nat?

pacmen

Post your complete config as snippets never reveal the true picture....... /export hide-sensitive file=anynameyouwish also is your WANIP static or dynamic?? My ip is dynamic. <snip> 1 ;;; enable remote access to wordpress chain=dstnat action=dst-nat to-addresses=192.168.88.35 to-ports=8080 protocol...

pacmen

Hello everyone, At the last couple of weeks im working on wordpress site in my local lab, the site got to situation when i want to get others opinions so i had "port forward" any ingress traffic from WAN with dst-port 8080 using the following dstnat rule #masquerade is shown for your infor...

pacmen

try to locate rule 10 on the 2th place, then try to ping from your vpn.
the firewall is work like instruction sets, one by one and the first match is the one that catches.

if you can please share with us your mikrotick route list.

pacmen

i had some thing similar when the dns remote request was on my cpu ran crazy.

viewtopic.php?f=2&t=128925&p=633415#p633415

pacmen

So let me get that straight you just want to make a static ip on your lan in order to make firewall rules better. if so let your device lease an ip address from your dhcp server, then enter to the leased ip list and press on the ip you want to make static then press on make static (winbox) Capture.P...

pacmen

Can you please print by the following command

 ip firewall filter print

its let you better vision of how the rules are listed.

pacmen

you should have a bridge interface which connect to all your LAN interfaces.
then you should create a dhcp pool and dhcp server which its interface need to be this bridge interface.

or you can use the quick setup method by press on the quick set button,

pacmen

Hey, first share with us you router firewall configuration. second are you able to send and receive pings from windows 10 to windows 10 on your LAN? thrid windows 10 firewall is trying to be extensive one, and icmp replays is disabled, for example: winddow 10 pc -> router. will work but: router -> w...

pacmen

You right!
I removed them right away.
Many thanks again!

pacmen

i truly truly have no idea how to start to thank you, im breaking my mined so much time to make this work. the main issue here is that your establishment rule including connection state new. my rules 9 chain=input action=accept protocol=tcp dst-port=500 log=no log-prefix="" 10 chain=input ...

pacmen

It still doesn't work. I added the tunnel interface to the Lan list the rule logs looks like this. 06:25:36 firewall,info input: in:Port 1 - Wan out:(unknown 0), src-mac 00:00:00:02:02:01, proto UDP, 2.55.28.71:21815->141.226.254.92:500, len 472 06:25:39 firewall,info input: in:Port 1 - Wan out:(unk...

pacmen

I don't have any ssh service open, I want to know why this rule also block ssh attacks. Another thing is whenever I disable this rule and connect with the tunnel, and enable this rule again while I connected to with the tunnel this rule doesn't block the connection. It's block the connection only wh...

pacmen

hey to very one, ive update my router and a new default firewall filter was added, 13 chain=input action=drop in-interface-list=!LAN log=yes log-prefix="" This rule blocks my l2tp connection when im trying to dial-in, messages blocked even when i put it on the bottom of the filter list. wh...

pacmen

The FW doesn't should block\drop any not matched traffic?.

pacmen

Hello every one, for some reason which i don't know yet in the dns settings the allow remote request was on. when i connected today i was notice that the cpu usage is excessive, i start to check and found out that i have almost full usage of the TX stream about 8-12MByte on my wan connection. i snif...

pacmen

you are awesome thank you very much! i will try it.

pacmen

You may done that but since no one help here I'm trying to be for your help.
https://i.mt.lv/routerboard/files/Metal-qg.pdf

pacmen

this should be handy for you
https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT

in mikrotik its called nat firewalling, since you are tell the nat that he have those port on its local networks.

pacmen

What is event in log from topic l2tp and ipsec ?

There are no logs.
Ive added those in order to get information but no logs have been registered.

pacmen

# dec/14/2017 23:39:57 by RouterOS 6.40.5 # software id = 86MG-CGR4 # # model = 2011iL # serial number = 419C04352234 /interface bridge add admin-mac=4C:5E:0C:38:BC:77 arp=proxy-arp auto-mac=no fast-forward=no \ name=bridge-local /interface ethernet set [ find default-name=ether1 ] full-duplex=no n...

pacmen

hello everyone, I've trying to configure a vpn server for a while now and for some reason with no success. Im trying to configure vpn server to get access to my local network. since i use this vpn from my laptop and android i need to use a dial-up kind of method. i've looked in mikrotik wiki and fou...

Search found 36 matches

Re: Best Bandwidth Throttling Solution

Re: CHR on Proxmox optimization.

Re: Best Bandwidth Throttling Solution

Re: Best Bandwidth Throttling Solution

Re: Best Bandwidth Throttling Solution

Re: CHR on Supermicro E300-9D

Re: RouterOS CHR Scaleway

Re: Proxmox not interface

Re: Proxmox not interface

Re: CRS3xx flexible Vlan Translation

Re: RB4011 SFP+ to CRS112-8P-4S-IN SFP?

Re: OpenVpn To PPTP between 2 microtik

Re: OpenVpn To PPTP between 2 microtik

Re: CHR vSphere >10 gigabit of throughput

Re: dstnat rule executed on egress traffic [SOLVED]

Re: dstnat rule executed on egress traffic [SOLVED]

dstnat rule executed on egress traffic [SOLVED]

Re: Working L2TP iPsec VPN but no Ping to computer?

Re: Load CPU 100%

Re: Stuck and confused newbie

Re: Working L2TP iPsec VPN but no Ping to computer?

Re: Stuck and confused newbie

Re: Working L2TP iPsec VPN but no Ping to computer?

Re: Firewall filter after update blocks my l2tp [SOLVED]

Re: Firewall filter after update blocks my l2tp [SOLVED]

Re: Firewall filter after update blocks my l2tp [SOLVED]

Re: Firewall filter after update blocks my l2tp [SOLVED]

Firewall filter after update blocks my l2tp [SOLVED]

Re: question about DNS allow remote requests

question about DNS allow remote requests

Re: CloudFlare as dynamic DNS solution

Re: Can't access new Metal 52 ac

Re: Port forwarding

Re: L2TP server doesn't seems to be working

Re: L2TP server doesn't seems to be working

L2TP server doesn't seems to be working