MikroTik

BassTeQ

I've updated from 7.10.2 and now have an issue where the terminal window is just hanging since updating to this version, in both WinBox and WebFig. All of schedules and scripts have also disappeared :( Router: RB3011UiAS https://imgur.com/a/AWW6AqB https://imgur.com/a/AWW6AqB CPU and Memory usage ar...

BassTeQ

It functions properly, but it doesn't do what you think it does.

Ok, thanks, so is there a way to make it work as per my original post?

BassTeQ

No I didn't find a solution unfortunatley,
I ended up just creating a seperate Wifi Network only associated to the VLAN my CCTV was on, then connect to that network and run the SDAP software.
Would prefer if I could get the router to allow the multicast to function correctly.

BassTeQ

This can be shorten some, since you already specify the path in the outer command.
Code: Select all
/ip firewall nat set [find where comment="TEST RULE"] to-port=12345

Perfect thank you very much for your assistance!

BassTeQ

That is a strange request.
Are you using winbox??

No I'm using the command via SSH from another server to GET and SET a specific firewall rule

How would I edit the to-ports field for a given rule, eg

/ip firewall nat set to-ports="12345" where comment="TEST RULE"

Thanks

BassTeQ

/ip firewall nat print where dst-port="55882"

Thank you very much!

BassTeQ

Hello, from the command line I need to be able to find a specific nat rule, any ideas on what I may be doing wrong?

[admin@MikroTik] > /ip firewall nat print [/ip firewall nat find dst-port="55882"]
expected end of command (line 1 column 24)

Thanks

BassTeQ

Have the same issue with this dongle. Any help?

Have you checked that you can ping external sites via the LTE interface?

ping 8.8.8.8 interface=lte1

BassTeQ

viewtopic.php?f=9&t=147561

Thanks, that script looks good!
I see you have to hard code the gateway IP, my ISP provides dynamic information so it can change, is there any way to update the script to get the correct gateway from the DHCP client?

Cheers

BassTeQ

Anyone? Surely someone has done this before.

Thanks

BassTeQ

Hi, I have a failover gateway configured as per this example https://wiki.mikrotik.com/wiki/Two_gateways_failover
How can I trigger my dyndns update script to run when the gateways switch between primary and secondary?

Thanks

BassTeQ

I've verified LTE is now working by configuring fail over and removing my primary connection.

BassTeQ

Thanks very much!

BassTeQ

With the stick connected to the PC I can defiantly ping external sites, no problems there.
FYI, I've disabled the firewall in the HUAWEI E8372, and set the DMZ to 192.168.8.100 (which will be the mikrotik)

BassTeQ

Address 192.168.8.100, which returns pings, is router's own address. To check if LTE stick is responding you need to ping 192.168.8.1 ...

Thanks, 192.168.8.1 pings successfully. Is there a way I can ping an external address via lte interface, eg 8.8.8.8 ?

BassTeQ

Hello. I'm working on setting up LTE as a failover, I've noticed now that the quickset screen is showing only my LTE interface, and the primary interface isn't shown? Internet address shown 192.168.8.100 is from my LTE device, not my primary connection. Any ideas whats causing this? https://i34.phot...

BassTeQ

Here's what I see, so this this means its working? Any idea how I can test it? I've tried to ping google via the lte interface, to no avail. https://i34.photobucket.com/albums/d150/BassTeQ/route_zpsfyfh76t7.png https://i34.photobucket.com/albums/d150/BassTeQ/dhcp_zpslejpy3h4.png [admin@MikroTik] > p...

BassTeQ

My guess: the order of the following firewall rules is wrong:

Thank you very much!!!! That did the trick, ping and traceroute are now working correctly!

BassTeQ

Hi all, I'm having issues trying to get this device working, its on the supported peripheral list, it creates an LTE interface but it doesn't look like its connecting. NOTE: The device works fine when plugged into a PC, also it was local WIFI, if I plug the device into my RB 3011UiAS, I can connect ...

BassTeQ

Thanks, here's the details. # jan/30/2019 09:42:28 by RouterOS 6.43.8 # software id = UUZ2-Z8I4 # # model = RouterBOARD 3011UiAS btw, traceroute != ping, it's using different protocol, try actual ping as well Ping Results [admin@MikroTik] > ping google.com SEQ HOST SIZE TTL TIME STATUS 0 172.217.25....

BassTeQ

So where should I be looking to fix the local configuration?
Thanks

BassTeQ

Thanks, but whats would be the cause of the ping and traceroute failing?

Cheers

BassTeQ

I've disabled the "LTE" interface, the route has disappeared, and I'm still having issues with ping/traceroute.
So it "may" not be related to the LTE device, any ideas?

Thanks!

BassTeQ

Hi, I've added a 4G LTE USB to my router which I plan to use as a fail over. Since doing so I've noticed ping and tracerouter now timeout directly from the terminal, ping/trace works OK from PC's on the network. Here's the route list Flags: X - disabled, A - active, D - dynamic, C - connect, S - sta...

BassTeQ

*edit* I didn't realise using a 4G LTE stick it would auto create the "interface", so no need to manually create a PPP Client. *end edit* Hello, I'm trying to setup a PPP client using a 4G USB Modem, its on the supported hardware list, however when I try and create a new PPP Client interf...

BassTeQ

Hi, I've configured OpenVPN which is working well, however I've noticed the IP's are not listed in the DHCP server, as a remote client I'll get an IP 192.168.99.X range, just wondering why it's not showing as a "lease" under the DHCP server? From the same remote PC, if I disconnect from Op...

BassTeQ

Hey. It depends how you're going to manage this conenction: Do you have global IP from ISP? Do you using pure L2TP without IPsec? I have a dynamic DNS hostname and I'm using L2TP + IPSec *update* I just tested it again and its all working now from the WAN side as well. Not sure what happened. Cheers

BassTeQ

Hi, I've setup L2TP as a VPN server, I can connect via LAN and everything works well, however when connecting to WAN I can't connect. Am I missing a firewall rule? add action=drop chain=input comment="Drop Ping from WAN" in-interface=ether1-WAN protocol=icmp add action=accept chain=input c...

BassTeQ

Anyone?

BassTeQ

Hi all, I use a SADP tool to discover Hikvision CCTV cameras on my network, it operates using Multicast UDP. This application works fine if the PC is running from is on the same VLAN as the cameras, however if the PC is on a different VLAN it can't discover them. IP Camera is on VLAN 40 - 10.0.40.X ...

BassTeQ

look at the differences in the screenshots in your posts # 27 & 29, by adding the bridge as tagged, you have removed ether2 which broke the setup again, add ether2 back as tagged

Thank you very much for your assistance, it's now working as expected!!!!

BassTeQ

As per my post in this topic, post # 10, Bridge must also be tagged for Vlan id's 10, 20, 30, 40, this is to allow access to the CPU for DHCP from these Vlans Is this correct? With this setup like below, and VLAN Filtering enabled I still can't access the internet. http://i34.photobucket.com/albums...

BassTeQ

Add ether2 as tagged under Bridge Vlan for Vlan id 10 Done, and enabled VLAN Tagging on the bridge, still no connectivity. In fact I end up getting a 192.254.51.X IP address if connect a PC to Ether3 or connect to the Guest Wifi VLAN ID=10, when I should be seeing a 10.0.10.X address http://i34.pho...

BassTeQ

Personally I use interfaces for bridge filters and IP for firewall filters, another reason would be that you might have multiple interfaces as members of same vlan, the it makes more sense to use the subnet of the vlan, but it is just set a personal choice Did you tag the vlan on the unify AP's, if...

BassTeQ

Any particular reason why you avoid using the "interface" in those rules? Also I just noticed I'd left VLAN Filtering disabled on the Bridge, however everything seemed to be working ok, I can connect to the UniFi AP Wifi Network which has the VLAN ID set and get an IP in the 10.0.10.0 netw...

BassTeQ

Thanks very much, I've made your suggested changes (excluding the google dns ones, as I want to use the ISP DNS for default) and I now have connectivity!!!! Whats the best method to now block traffic on the Guest VLAN so it can't see the other network, and vise versa? I've added these rules and it s...

BassTeQ

provide output of "export hide-sensitive" # aug/04/2018 21:09:53 by RouterOS 6.42.6 # software id = UUZ2-Z8I4 # # model = RouterBOARD 3011UiAS # serial number = /interface bridge add admin-mac=CC:2D:E0:7B:34:9F auto-mac=no comment=defconf name=bridge /interface ethernet set [ find default...

BassTeQ

Getting closer, when I connect to PC to Eth3 I now get an IP in the 10.0.10.0 subnet, however it can't access the internet, or ping google dns 8.8.8.8. Am I missing something? I've not put in any firewall rules to block traffic, the same rules remain as before I started trying to add this VLAN. Traf...

BassTeQ

/interface vlan add interface=bridge1 name=vlan10 vlan-id=10 I already have this setup using a different name, will this be ok? [admin@MikroTik] /interface vlan> print Flags: X - disabled, R - running, S - slave # NAME MTU ARP VLAN-ID INTERFACE 0 R vlan10_Guest 1500 enabled 10 bridge

BassTeQ

Vlan10 must be on Bridge In Bridge-->Ports, change ether3 PVID from 1 to 10 In Bridge-->Vlan make Bridge as tagged and ether3 untagged for Vlan id 10 Thanks CZFan, Vlan10 must be on Bridge Is this correct? [admin@MikroTik] /interface bridge vlan> print Flags: X - disabled, D - dynamic # BRIDGE VLAN...

BassTeQ

I'm not sure why the majority of the suggestions are pre-6.41 since that hasn't been the case for almost a year now. You've got most of it right but here is what needs to happen. 1) Do not use the Switch setup. That's wrong, it's done via the Bridge now. 2) Under Bridge go to the VLAN tab, you'll w...

BassTeQ

I've made the suggested changes, does everything look ok? Any obvious mistakes? When I try connect to the UniFi wireless network, it has VLAN 10 set, it fails trying to obtain IP address. I think as a starting point I want to first take Unifi and the main switch connected on Eth2 out of the equation...

BassTeQ

Thanks for the tips, will try these suggestions shortly.

Is it best to tag traffic for my current 192.168.100.0 network as well, or leave this untagged as-is?

BassTeQ

Hi, I've recently setup my router using the default settings and latest OS version, things are working well. I'd now like to add a VLAN into the mix, the purpose of this VLAN is to create a separate network which will be utilised by Unifi Access Points Current configuration Eth1 = WAN Eth2 = LAN (19...

BassTeQ

Check if you can connect to 192.168.1.91:22 from inside your lan?
inside no problem

Disable any firewall rules that may be dropping packets.

BassTeQ

hi. how to forward port 22 i have a ubuntu server connect ssh 192.168.1.91:22 I'd first be checking to ensure the firewall isn't blocking connections on that port. Check if you can connect to 192.168.1.91:22 from inside your lan? Try changing your NAT rule, General > DST-PORT to 9022, and leave int...

BassTeQ

Hi Thanks for the reply, I've managed to get it working now. It was my fault, I was using the WAN gateway IP address, not the router WAN IP address, when trying to connect. I wanted to get this router all working and configured before I switch it out with my current router, so to this this I used a ...

BassTeQ

Hi all, I've just setup this router and used the quick settings to get it up and running, I have internet connectivity. ether1 is WAN and ether2 is LAN (192.168.100.X) I've attempted to setup a port forward, however it's not getting though, have I missed something? Appreciate any help. Thanks! [admi...

BassTeQ

Thanks!

BassTeQ

Sorry forgot to ask, can this rule also be applied to all devices on a VLAN, rather then setting it at a device level?

Thanks

BassTeQ

Thanks for confirming, will place an order for a Routerboard

BassTeQ

Hi all, I'm considering updating my exiting DDWRT to a routerboard, before I make a purchase I'd like to be sure that routerOS can definatly do the following. I use a dns proxy for some devices, I have IPTABLES rules to detect any dns requests from certain hosts and redirect them transparently via m...

Search found 52 matches