MikroTik

donsergio

I will avoid routes, IP addresses and so, because the issue is in wireguard I will post wireguard configuration and firewall configuration... I think it´s sufficient... The other configurations are routes that not affect to wireguard operations... As I often say to my mother: "Hoder you say th...

donsergio

I will avoid routes, IP addresses and so, because the issue is in wireguard I will post wireguard configuration and firewall configuration... I think it´s sufficient... # mar/25/2022 13:37:34 by RouterOS 7.1.3 # software id = xxxxxxxx # # model = RB1100Dx4 # serial number = xxxxxxxx /interface wireg...

donsergio

How did your device get to the current version ? Upgrade after upgrade and so on ? Long shot, if yes: Did you already try to clean install that device, taking over config from export right before reset ? I do the configuration from zero, upgraded Mikrotik to 7.x and reseted to factory defaults with...

donsergio

Do you mean two connections from the same Mikrotik Router/Device??

If so please post config
/export file=anynameyouwish

yes, I have established two wireguard connections from the Mikrotik to two VPS´s

donsergio

More or less... I think isn´t working well... I has enabled persistent keep alive in both sides (on the Mikrotik and on both VPS), keep in mind that I has two VPS with wireguard, one in Spain and one in Germany... fails connections in both VPS´s... but the connections on both server not fails at sam...

donsergio

In my case, no hostname... we connect through to the fixed IP address... before to do the scripts to down and up the interfaces, the wireguard connections drops down even without changing the dynamic address of the client... I don´t know where comes the issue, but with the netwatchs scripts it comes...

donsergio

Hi, I have a wireguard server in a datacenter (static IP) and a wireguard client on home with a CCR (dynamic IP and NAT)... I have enable persistent keepalive because I´m behind a NAT. As we know, wireguard is a stateless connection and I´m experiencing connections issues... maybe when my home ISP c...

donsergio

That´s is the main trouble, when you reset the device, it create a .backup with no password... and (as you saw), with no full encrypted file.... with sensitive information... maybe, tomorrow I´ll check about how sensitive information can we found in a .backup file with no password.... maybe email p...

donsergio

Hi!! This mean if... it the IP if not reachable for 6 times (in my case, the MK reboot 6 times, the 7th no reboot, keep online)... the RB not reboot anymore (until poweroff or reboot?) and it can be accessed? I have the old backup with the netwatch "issue".... tomorrow I will check for si...

donsergio

Anyway, if you want to reboot the device when a host is unreachable, use the watchdog function: https://wiki.mikrotik.com/wiki/Manual:System/Watchdog watch-address (IP; Default: none) The system will reboot, in case 6 sequential pings to the given IP address will fail. If set to none this feature i...

donsergio

That´s is the main trouble, when you reset the device, it create a .backup with no password... and (as you saw), with no full encrypted file.... with sensitive information... maybe, tomorrow I´ll check about how sensitive information can we found in a .backup file with no password.... maybe email pa...

donsergio

Oh this is subtle. Poked around more here. Apparently the CLI and winbox allow you create a backups with the "aes" or "rc4" encryption set, but the backup won't be encrypted unless a password is set. Without a password= being set, it ignore the encryption= part. i.e. So even if ...

donsergio

How are you able to open an encrypted backup file in hex editor, search and change specific values, save and use it? Is there no real encryption or where you able to decrypt and re encrypt the file? I think, some personalized commands like that you put in "on up" and "on down", ...

donsergio

Thinking... and thinking... and thinkg... I forgot I repair firmwares on Ubiquiti and sometimes on Mikrotik..... what I do? I open the .backup file (encrypted) to check if the commands on "at down" shows in plain text and..... BINGO!! Open the file with the HxD hex editor and search for th...

donsergio

I think netwatch do the job before mikrotik can identify that the interface goes up.... Another solution? Add those IP addresses netwatch is using to your PC (or something else), so they ping back to netwatch? Hi, tried to add on another mikrotik eth (with this IPs configured) and connect to an int...

donsergio

Well if yo have a other device, witch you can set the two IP-addresses on and connect to your Mikrotik so it could reach it (don't now your routing), you can perhaps get it done. I think of something like a second router as your simulated default ISP and fake hosts. If this doesn't work for you, re...

donsergio

Hi, I have a big problem, I have no backup (only before reset backup, but with the last config)... I thought that I has a rsc backup but no.... no has any backup... I have created two netwatch rules to restart mikrotik if two IPs are not reachables... but I configured bad... now, mikrotik poweron an...

donsergio

Hi, I was long time working this script until upgrade ROS version that stop working.... I´m in stable 6.48.3

Anyone has checked in this ROS version?

Regards!!

donsergio

But I think could be a "firmware corruption or firmware bug"... the three RBs are working fine.... but the backup2mail script and the LogFilter script https://forum.mikrotik.com/viewtopic.php?t=151953 stop working on all... and I don´t know why they works on other test RouterBoard and no i...

donsergio

I opened logs, no error... I create the backup in terminal and send with commands and no error on log, no error on terminal but not send, check my last message.... the auto-backup-after-reset.backup sent but the others backups no... Finally I create on one server that I has on datacenter a SFTP serv...

donsergio

I made some tests sending email from command line.... I tested if could be a file size trouble (the .backup files are 287Kb)... tried with autosupout.rif (620Kb) and I received well the .rif file... not file size trouble. Tried sending .txt files and received correct, tried .html file and received c...

donsergio

Nothing... same issue...

In another RB tested and working fine.... same ROS

In three production RBs working bad... or send .rsc or send .backup....

Could be another script interfering this? I think no....

donsergio

Sorry, I´ll use Post Reply always... I tried before my last answer to change .bak to .backup and trouble still, the script finish but on the email account not receive the .backup email..... I tried with three different emails accounts... one with own domain, with hotmail and gmail... no luck My scri...

donsergio

Hi, thanks a lot for your code, it´s a lot clean than mine, but... but... doesn´t work like mine.... send .rsc file only and "script stop"... not continue...

I copy paste and change only emailfrom and emailto

It could be a bug of this version??

donsergio

I tried with a hEXs with empty configuration and working fine.... who could be the trouble?

Failing in three devices, one RB1100-ahx2, one RB850G and one chr

donsergio

Hi, I have several scripts to automate some tasks such as backups... I updated to ROS v6.47.10 and lot of scripts stops working... here I put one of them... it make a .backup and .rsc files and send to email. The scripts create the two files, send only the .backup but no send .rsc file... (in others...

donsergio

Thanks, I´ll try marking packets.

Best regards!!

donsergio

my config is a bit... complicated and I´m marking packets and connections for another reasons and I think could be difficult implement this... is another way?

Thanks!

donsergio

Hi, I have a queue (to internet) on my local LAN and this queue affect to other computers in another subnet but I want to exclude some IP ranges, I tried the code below but doesn´t work... with my code the Mikrotik limit at 200Mbps (all devices are connected at 1G)... if disable the rule "add d...

donsergio

I do this in my network, L2TP tunnels for each IP and NAT 1:1... It works really well

donsergio

Hi, I bought a CHR license on 2018 and my hosting provider will change the server and we need to move the license to the new machine... When I go to my Mikrotik account and "All CHR keys section" not show any license... the only place where I can find the license is under "History of ...

donsergio

I assume you get a public IP from your ISP on ether1? The only action=dst-nat rule in your /ip firewall nat doesn't match on any protocol or port, which means that it redirects incoming connections on any protocol (TCP, UDP, ...) and towards any dst-port (where applicable) that arrive via ether1 to...

donsergio

Hi, I´m trying to access to an airfiber connected on ether2 but it´s impossible... the airfiber has an ip 172.16.126.51 and if I try to ping no ping... I need to enable: /ip address add address=172.16.126.52/23 disabled=no interface=ether2 network=172.16.126.0 And I got ping... How I can access to t...

donsergio

Hi, I want to reply for post results.... I don´t change anything... two clients with about -40 of signal... and nothing client call me for any complaint... then I decide to leave the configuration such as....

Thanks for the help!!

donsergio

Hi, thank you so much, I´ll test 802.11 WPA2, in the past I´ll using NV2 but some links when rain drops a lot the CCQ....

Thanks a lot!!

Not Nv2, however i would suggest you try it...
Else, 802.11 is the protocol you should use...

donsergio

Hi, yes, you’re right.... but who has better performance .... and with noisy environments ?

Thanks!!

NV2 is a wireless protocol and WPA2 is a security protocol...
You cant compare these too...
For more details about Nv2 read here https://wiki.mikrotik.com/wiki/Manual:Nv2

donsergio

Hi, I has several APs working with NV2 protocol....

Is a good idea use this protocol? I read that with interference enviroments it don´t work well... Is a better idea to change to WPA2 protocol?

Thanks!!

donsergio

hahahaahahaha I´ll wait for late night or dawn to prevent my (few) clients on this node call me for lost connections.... but, I told you tomorrow....

Thanks my friend!!

donsergio

Hi, the nearest clients are two.... 14 meters (45 feets) and 16 meters (52 feets)..... the farthest is at 310 meters (1017 feets) Then I has others at 100 meters, 130 meters and 180 meters.... I´ll try first.... to increase client antenna gain (on the SXT lite 5) and the same on the AP (only a littl...

donsergio

Hi, thanks for your help and your prompt reply... I think it´s better to increase the AP antenna gain... Am I right? Because to touch the TX power.... need to touch every rates... or "all rates fixed".... If I increase antenna gain (8dbi).... the all the power TX will be handled by the ope...

donsergio

But, if I reduce the power of the AP..... will reduce the signal and quality of the other clients that has the signal and CCQ good, Am I right?

donsergio

Hi, I have an Omnitik UPA-5HnD with a few clients (SXT Lite 5).... and 2 of them are so near (no more than 10 meters)... and signal are about -55/-35... The CCQ of one of them are 95/65 and the other one 95/90 I tried to increase by changing antenna gain to 30 but signal still too high.... How is th...

donsergio

Hi, sorry for my late response, lot of work.... Yeah it works.... Now I can redirect any connection by any wan.... I owe you lot of beers.... Thanks a lot my friend, now full working!! Best regards!! Your old rule forces everything from 192.168.0.0/24 to use wan1. So it directly conflicts with your ...

donsergio

Hi, yes, as I tell you... If I enable my old config.... I can open ports and works well... I mean my first config, after tryin to redirect by two wans by port.... My old rule only mark routing... /ip firewall mangle add action=mark-routing chain=prerouting new-routing-mark=to-wan-1 passthrough=yes s...

donsergio

Hi! Yes, you´re right, I has some rules to priorize traffic and disabling all, it works fine fine.... but now, I don´t have priorized traffic, I need to implement it now with this new rules... And the best trouble, I can´t open ports... with my old way the ports opening works well, now with the same...

donsergio

Hi, I´m testing this and doing a lot of tests / changes and I can´t do it work... I put the IPs of the gateway on the routes... if I "traceroute -p 80 8.8.8.8" and "traceroute -p 44444 8.8.8.8" the packets goes to each gateway, but can´t search on the web, can´t open webs... for ...

donsergio

Don't mark routing directly. Mark connections first and then mark routing based on connection marks. It will be less work for router and it won't break incoming forwarded ports, if you have any. And I don't know how much experience you have with multi-WAN configs, but ethernet interface as gateway ...

donsergio

Hi, who´s the best practice to balance the ports (protocol port) by wan´s depending of the port number? I tried this but I think it´s not right /ip firewall mangle add action=mark-routing chain=prerouting comment=\ "Redirect common ports TCP" dst-address-type="" dst-port=\ 0-1024...

donsergio

Upgrade your Winbox also

Hi, upgraded from 3.18 to 3.19 and still same issue.... can´t access

donsergio

Hi, I have an omnitik and today I upgrade from 6.44.3 to 6.45.2 and now I can´t access because it say wrong user and password.... anyone knows about that? Is a bug?

Minutes before to upgrade, I can login with anyone of two users created but after upgrade, can´t access.

Thanks!!

donsergio

Hi, it´s for about 500 meters and with 100 mbps aggregate it´s sufficient...

Finally.... lot of tests.... lot of configs, solved with a pair of nanobeam ac gen2

Thanks !!

donsergio

Hi, is a good choice to use an anti-noise shield for SXT CPEs?? To avoid interference....

I´m having several interference troubles in some SXT Lite 5 PtP links....

Thanks!!

donsergio

Hi, I´m trying to get best CCQ on a PtP with a pair of SXT Lite 5, but CCQ is not stable... is about 50-80 % on both rx/tx... I tried the solution of this post: https://forum.mikrotik.com/viewtopic.php?t=71564&sid=b1c1c348d2035bc6941a17ecf04b8a61 But when I do the changes CCQ rise up to 100% bot...

donsergio

Hi, I have two PtP with SXT Lite 5... one is working fine but the other PtP has micro disconnects (same config, different IP, SSID and channel).... it´s soo strange, I explain: Connect to RoMON and I can see all devices but all after this PtP dissapears on the showed RoMON devices in Winbox..... one...

donsergio

Hi, I have a omnitik connected to a PTP... I have connected a client through wire on port1 (PPPoE) but by this port can see and discover all devices on lan on winbox, how I can block all access to internal network but still working the PPPoE connection of this client? Block all except the PPPoE conn...

donsergio

If you're trying to connect to camera DVR in exactly the same way as from public internet (i.e. 4G), then you need to set up "Hair-pin NAT". Search around this forum and you'll find some good instructions. Hi, thanks for your prompt reply, I´ll check it and test. I told you when checked. ...

donsergio

Hi, I have a network with a Mikrotik RB450G with two remote sites (wireless transparent bridge) and a vide recorder on each site. Each site connect through pppoe to the main mikrotik and do masquerade. The trouble that I have is that I can´t access to the camera recorder through inside the lan.... I...

donsergio

Hi, I received an email because Spanish Government has retired Omnitik 5 from Spain for legals incumpliments.... I attach PDF in spanish.... We have 10 days to retire all Omnitiks 5.... Basically the document say: Group: Technicals requeriments: Type: radio Incumpliments: The equipment works in freq...

donsergio

Hi, this is my "basic" topology.... I tried to forward / input on both, client and NOC MK but no lock.....

donsergio

Firewall is under construction.... I added this firewall rules on before days.... then with netmap, it "redirect" all traffic to the internal device and this device is that need to response to ping and other services?

donsergio

Hi, I have a strange "problem", I have netmap my public IPs to route them through L2TP tunnel, but when I try to do ping to this IPs, ping is unreachable... if I disable netmap rules for any IP, this IP is ping reached from outside.... if enable rule ping unreachable. But my clients can us...

donsergio

email sent to support....

Lets wait to answer

donsergio

I make a test with this device, plug, enable ddns service... and now both domains xxxxxxx.sn.mynetname.net and CNAME point to new IP.... when I dissconect mikrotik device PING get "old" IP again....

donsergio

Oh, great, then this explain this case..... yes, my isp provide dynamic IP Address, then for this rule.... Mikrotik ddns server keeps old IP until I connect again device, and enable/disable ddns service AND this old IP is now assigned to another ISP client. Other strange thing are that to access to ...

donsergio

Hi, I am experiment a strange thing..... does de IP / Cloud of Mikrotik service has any cache? I´m pinging to an ip/cloud address of a Mikrotik device that I dissconnected last week and still have ping..... The device is formatted and stored on our wharehouse but I can PING to the device and the loc...

donsergio

Hi, I have some routerboards with Nand fails, I changed 3 and license was lost.... now working fine but at open Winbox say "ROUTER HAS NO SOFTWARE KEY"

Is any way to get again the license lost in Nand swap without pay the license?

Thanks!!

donsergio

Hi, I have a point to point, in one end has a mikrotik (RB450G) connected to a fiber and in the other end has other mikrotik (RB1100AHX2) to get connectivity from fiber side. MPLS+VPLS is the way that I use to transport internet. The trouble.... RB1100 can´t update cloud, I can´t access to this rout...

donsergio

Hi, I have bought the license of the picture... I bought for a server on a datacenter.... I stop used this server and no have access to them... Can I use this key for other server?

Thanks!!

donsergio

I have a free key for a MTCNA in my account... I can "Pay using balance key" and I get a non trial license??

Both say Trial. To pay for it, click Upgrade.
Trial will work, but will deny upgrading RouterOS in 60 days

donsergio

Hi, you mean this, right?

I reissue the license... the System ID changed.... the next month the bottom license I think will expire and still the upper license that has the actual System ID.

Thanks!!

donsergio

Normis, thank u!!

Looks fine.

It will periodically check your mikrotik.com account if the license hasn't been moved to another CHR, this is why you will always see those dates.

donsergio

Hi, I do the MTCNA and I got a free L4/P1 license... Now I get a CHR and I want to use this license... System/License - Renew license... enter my login info from mikrotik and I get this.... Attach image Say next renewal Aug/12/2018 22:59:59 and under this say: Deadline at: Sep/11/2018 22:59:59 On li...

donsergio

Hi, then the better way is?

How I can virtualize... I has a dedicated with centos 7

Has any tutorial to do it?

Thanks!!

donsergio

Hi, have Mikrotik any restriction of lan chipset to install it on a X86 server?

Can I install it on any server?

Thanks!!

donsergio

Hi, I have a Mantbox-15S with this wireless configuration, this will do by a friend that I have no contact with him.... with this config only can pass 30Mbps over wireless.... How I can modify HT-MCS to permit more traffic over wlan? Thanks!! /interface wireless security-profiles set [ find default=...

donsergio

Hi, 4% bad blocks is not important number.... maybe you have another trouble.

Have updated ROS and bios?

Regards!!

donsergio

Hi, Mikrotik routerboards has inside an e-jtag and serial port (3.3v, gnd, tx and rx)... As I understand this last (serial port) is used to recover MK boards (console mode) that can´t be recovered through netinstall... First I´m trying with a working board to find the way... of course How is the way...

donsergio

Hi, other way is use windows xp... I always get troubles with win7 64 bit but I have a notebook for that.

Regards!!

donsergio

Hi, have you opened ports on RB750 ??

Regards!!

donsergio

Hi, have you tried to upgrade to last ROS?

I tried and working

Regards!!

donsergio

You also can change ssh port at IP-Services and change for a random port... such as 2200 (anyone easy to remember)....

donsergio

Hi, your UPS is not supported

Only APC brand are supported and through serial port (not USB)

https://wiki.mikrotik.com/wiki/Manual:System/UPS

Regards!!

donsergio

Hi, your UPS is not supported, only APC are supported and through serial port (not USB).

Regards!!

donsergio

Hi Guys, Does anyone have a method to remotely configure a new, out the box unit directly. The device will be connected to a lan, not wan directly. I can think of using TeamViewer etc to get to a PC and do basic config, then remote to device directly. VPN to network and config from there Any other ...

donsergio

hello everybody! I am New here and my english is not so good. Maybe you can help me. I have a Mikrotik Router and a internet connection with fix ip address on wan Port In this Mikrotik Router i have a l2tp/ipsec Server Running and it Works because Connection over Mobile Phone is possible..... My Br...

Search found 85 matches