MikroTik

channingzou

i can connect to wireless N and good signal ,but drop connect no loger than 30 min. ,all i can say wireless N still unstable, still in beta.

channingzou

802.11n还都不支持，怎么支持wimax和LTE啊，Mikrotik的开发速度太慢了，主要还是因为这个公司太小了
we are working on 802.11n, please wait a few weeks for an announcement. We don't have any plans for WIMAX yet.

hi, few month passed ,still same no plans for wimax?

channingzou

Yes, language support is supported in Beta using translation files. However it is not documented yet. The manual, how to translate User Manager will be available in Wiki pages soon.

how soon ,6 months or 1year?

channingzou

is userman supported in other language? i m upgraded to 4.3 beta ,still only English .

channingzou

thanks, fixed!

channingzou

same problem here

channingzou

hi,all
i have generated certificate using OpenSSL and imported, but my browser get warning untrusted certificat. is there anything doing wrong ? thanks in advance!

channingzou

channingzou - First thing - local to local does NOT invole the MT box unless you are transferring to/from that box. Local to local would just connect to the boxes involved directly. That having been said, the MT box will not significantly reduce the transfer speed if it is the one the files are bei...

channingzou

one straight distance about 3 mile, the other one straight distance about 20 mile. is ptp signal go straightly or curved? can we make signal direct to sky and use GPS to verify location then to calculate right direction and elevation angle, let the signal matched in the sky. is this possible?

channingzou

HI, all is this possible?
i want make PTP for home and office ,but both site couldn't see each other , because there have piedmont between ,can i use directional antenna to make it work?

channingzou

i think VAP will work for. if under 10 people rb411a will work fine.

channingzou

hi, i m using ROS, i have setup wireless and local network with ip 192.168.0.1,192.168.1.1,and i have created bridge port: lan and wlan ,when i want to move file from local network to wireless network very slow ,but local to local fast ,anyone know why?

channingzou

hi, im use DSL modem and ROS,when i connect modem to PC working fine,but when i connect to router,my pc cant browse web and can use instant messager (like ICQ). I was ask ISP ,the answer is they wont let me use router, in case to prevent many PC behide router. is there anyway can rid of this restric...

channingzou

Queue Tree Example With Masquerading [admin@MikroTik] ip firewall mangle> add src-address=192.168.0.1/32 \ \... action=mark-connection new-connection-mark=server-con chain=prerouting [admin@MikroTik] ip firewall mangle> add connection-mark=server-con \ \... action=mark-packet new-packet-mark=server ...

channingzou

Believe someone posted that when you NAT it changes the TTL. So if your ISP is smart, even if you NAT it can be detected. that's right! im using ROS and have command added /ip firewall nat add chain=srcnat action=masquerade out-interface=Public but they still can detected. I believe you can get a b...

channingzou

run a shared network on your computer and hook your equipment up to your computer. -Jordan

Not a good idea it will much slower ..
how to nat network ,can you explain simply. thanks!

channingzou

HI,ALL couple days ago my ISP cut my network off, because they dont want user pay as one PC use, but connect many PC in there.when they detected more than one PC will stop my network service. I'm use DSL modem.Is there possible with ROS to make not detectable how many PC in my network. thanks!

channingzou

can you speak clear,which interface do I to bridge ? both?

channingzou

hi,
I want use same ip pool between local lan and wireless,and can communication to each other end,how to do?
thanks !

channingzou

well , long waiting.

channingzou

HI, will routerboard can support WIMAX device?

channingzou

my user mangager login address is 192.168.0.1/userman
I want use my hotspot gateway to login 192.168.8.1/userman is this possible?
thanks!

channingzou

thanks ,updated.

channingzou

if you doing right,DNS IP will get automatic, under IP DNS.

channingzou

it was RB ,HDD integrated ,do you have any idea?

channingzou

I guess you need higher license level for the current router. New license should be purchased for current software-id, if you need to use another license level.

after purchased for current software-id,what about old licence,can i use it to some where?

channingzou

do you have instruction for setup CA ? and what hardware do need.
thanks!

channingzou

Yes, logically there'd need to be two AP, one for unsecured connections (offering registration only) and one WPA protected for full network access, but you can use the virtual-AP feature of RouterOS so that you do not need to buy and install two AP devices - both AP can run on the same radios. Rega...

channingzou

are you use DSL modem? check article about setup DSL modem with PPPOE .I'm use cable, I don't need command:
interface pppoe-client add name=pppoe-user user=ali password=321 interface=public disabled=no
I don't have problem like you.

channingzou

ok i have done the basic setup in addition for what i did before : /interface pppoe-client add name=pppoe-user user=ali password=321 interface=public disabled=no /ip pool add name="pppoe-pool" ranges=10.1.1.62-10.1.1.72 /ppp profile add name="pppoe-profile" local-address=10.1.1....

channingzou

can DUDE detect MAC address whoever use MT ROUTER?

channingzou

here is basic setup [admin@MikroTik] ip address> add address 10.0.0.217/24 interface Public [admin@MikroTik] ip address> add address 192.168.0.254/24 interface Local [admin@MikroTik] ip address> print Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK BROADCAST INTERFACE 0 10.0.0.217/24...

channingzou

You could set up an open, unencrypted hotspot that allows only access to your user-registration page where you describe the services that you're offering to registered customers and allow potential customers to sign up for your services. Require them to identify themselves upon registration and to ...

channingzou

got the free licence key .thanks a lot!

channingzou

when WPA enable ,they cann't connect to AP,how to sign up by self ? HOTSPOT doing like temp internet access,so I need they can sign up by self.

channingzou

can you get link before PPPOE added?
it seems you miss basic router setup.

channingzou

For wireless HotSpot you may use WPA encryption protocol, it will protect from unauthorized access.

it isn't a good solution. is there option available protect netcut from unauthorized and authorized client.

channingzou

here is manual
https://www.mikrotik.com/testdocs/ros/2.9/
check Ebay there have cheaper ROS Price

channingzou

if you not require stable,you can ignored.

channingzou

You have to specify, do you use wireless or Ethernet network ?

I use both in one router wireless for hotspot ,Ethernet network for local

channingzou

please,everyone vote!

channingzou

wireless interface disable default forward

channingzou

hi, admins will consider translating winbox or webbox?
As you said it cann't translatable? but I saw some one done.

thanks!

channingzou

hi,normis here is Chinese(Traditional) Translating.will L6 licence ready giveaway? Please, everyone who speaking Chinese confirm my translating and post here. Chinese(Traditional) Appreciate! 哪位朋友請幫我核對一下我的翻譯，如果你覺得沒錯的話，請在下面跟帖。 Chinese(Traditional) 感激不盡！

channingzou

I think they want as more as possible with low cost.

channingzou

normis i would like to have the video i uploaded removed as im adding some more things with ros as well.

Regards

uploads MikroTik related videos to the http://www.TikTube.com video system.
you may go trainning class then make video , I think will do.

channingzou

I reverted back to v3 rc1 and the firewall rules seem to be working fine...
This makes me think twice to upgrade to the next release candidate

Robert

it just can run for few day then same broblem as RC2,so better go back 2.9.XX.

channingzou

finish it first.let they test it .

channingzou

just add battery backup like PC Motherboard do,it wasn't big deal.I don't know why they won't do that.

channingzou

You have to specify, do you use wireless or Ethernet network ?

I use both in one router wireless for hotspot ,Ethernet network for local .

channingzou

There are option always available, that can help you to protect the router from unauthorized clients.

can you speak more clear, take example or link here

channingzou

As there are not details included about the issue, for the wireless use samsoft08 provided advice for securing network with WPA, for Ethernet you may either use smart switches to ensure filtering by MAC-addresses or use PPPoE authentication server. go http://www.arcai.com donwload netcut install it...

channingzou

I'm getting calls from customers about this error when logging into hotspot: internal error: logion failed: failed to add queue: already have such name The queue did not go when the user logged out? and has to be removed manually, Why? this is running a rb112 and MT version 2.9.46 problem could be ...

channingzou

i only saw can do easily.
I don't see any article how can easily.
will put article link about how to ?

oh ,yes ,it can cut network ,but how to get internet access use choosing the victim mac address

channingzou

thank you for the replies. about 5% of the clients do not get redirected to the login page, others get the login page fine. Then enter and navigate well. why some clients do not get redirected to the login page? Is this a bug? In order to fix the problem, I have to reboot the router. which is not a...

channingzou

i only saw can do easily.
I don't see any article how can easily.
will put article link about how to ?

channingzou

send email to support@mikrotik.com, i have no idea with superchannel,because this feature I cann't use,no permit to L4.

channingzou

normis im already working on it, but when i download the empty file from wiki and enter the into it, save as utf8 format and replace it with the original txt file dude stops functioning. its gonna take some time but i just started the work on original one so far going so good. but any help about ab...

channingzou

I seem to remember a btty on some of the newer boards.... Or is is a fantacy.... Take a look at the "preview" section (postings) amd take a look at the photos..... A Battery would probably mean a clock device...... HMMMMM I don't see any newer board have battery on it .maybe on rb600 ,rb1...

channingzou

Is Version 3.0 Stable and ready for production environment ?

it just beta, wait for couple months will be ready .do you think IPV6 is now common? so we have time to try it.

channingzou

do you use radius? do you use USER MANAGER or third party?
check log here
http://wiki.mikrotik.com/wiki/Wireless_Debug_Logs

channingzou

you didnt heared about net-cut ?? the hacker is connecting yo unsecured hotspot network , getting an IP , making a scan for the network , choosing the victim mac address , cloning it in his PC , shut the victim OFF , get in as the real user (victim) , without any need for user name and password , i...

channingzou

ip,hotspot server profile,login uncheck cookie

channingzou

upgrade to 3.0 there have ipv6 supported

channingzou

HI
I have local network 192.168.0.0/24 and hotspot 192.168.9.0/24 in same router.
how disallow and allow when I have share file in one of PC?
THANKS IN ADVANCE!

channingzou

----
hai,
no, superchannel is feature from mikrotik. i have RB532A/L4 with extra-channels feature or better will send and ask to support[at]mikrotik.com about it.

regards
Hasbullah.com
----

hi,my friend you may be use outdate version. can you update to newer then comeback post?

channingzou

Newbie question, but as I'm also suffering short drop-outs as per above and this is a forum for newbies anyway I'll ask it: Running a card with an Atheros AR5212 chipset on an RB532. In the Winbox wireless tab it's set as: Band: 2.4GHz-only-G Frequency Mode: manual txpower Country: No_country set. ...

channingzou

i use ntp client time not auto adjust for me .

channingzou

can RB keep time running like PC when disconnect power ?
I'm weary of every time have to setup time.
THANKS!

channingzou

you may need tell more detail about your configration. here is basic configration [admin@WDS_AP] interface wireless> print Flags: X - disabled, R - running 0 name="wlan1" mtu=1500 mac-address=00:0C:42:05:00:22 arp=enabled disable-running-check=no interface-type=Atheros AR5413 radio-name=&q...

channingzou

I have an access point in a large network that is continually dropping data. I t runs couple of hours and outages for 20+ minutes. Then up and down. The transmitter reads a continuous 100% power. I believe the data flow is disrupted the best as I can tell. Any possible suggestions to check would be...

channingzou

Hey hey. I've not done specifically this - but you should probably be able to set this in the hotspot html files. In winbox, see "Files" then folder "Hotspot". Just drag and drop them to you desktop or where ever and figure out where this specific piece of code is.... Sorry I ca...

channingzou

hi,
i want hotspot user after successful login then redirect to website which i want, how
thanks!!

channingzou

got a free RouterOS license Level6 ,thanks! Normis :D I have a question ,have viewed file and got correct Chinese character? I asking because I was not saved as UTF-8 ,but I correct it and upload to wiki.mikrotik.com/dude. Do you need Chinese(Traditional) translation? will there another L6 giveaway?...

channingzou

hi, normis, I finished translation to Chinese(Simplified),and sent to support.is there need anything than I can get gift.
thanks!

channingzou

hi,normis

is ros arp same Router os arp?
and what is torch mean in here
after this will get done translation
thanks!

channingzou

hi,
how to disallows communication between clients connected to the same AP?(which command do i need added)
thanks!

channingzou

hi, Normis,i need you explain i will finish it in couple days delta (difference per period) des Big Column Size Big Row Size 'Large Column Size' '' 'Large Row Size' '' fwf 'Hop' 'Netbios' '' 'netmaps' '' 'netmask' '' 'Netmask' '' 'net unreachable' enchanced metafile Enums match regexp Eth. Protocol ...

channingzou

HI,NORMIS how do deny MAC login? i tried many way it not work for me.
thanks !

channingzou

Yes, it is possible with HotSpot server enabled (default configuration), add local subnet to the 'walled-garden ip' list (addresses that should be available without authentication).

confuse, if available without authentication there means connected to hotspot and got internet access

channingzou

I got a another strange problem.. channingzou

I drop everything but cannot login with MAC.

Rafiq...

i was drop everything before and i have noway to login to router but MAC

channingzou

Try with denying 67-68 port on TCP and UDP both chain.

Rafiq...

I drop udp and tcp dst-port 67-68 and 20561 ,mac address still can login ,it seem there have noway to stop MAC login

channingzou

Dear channingzou, I used a p-III with 3 lan card. Please discurd IP address 192.168.2.10.. and replace all other IP address as you need. I am not experience with HOTSPOT. Already a copy of this backup is sent to your ftp. This is for others. I think It will help you. Rafiq... hi,Rafiq I probably tr...

channingzou

Dear channingzou, I used a p-III with 3 lan card. Please discurd IP address 192.168.2.10.. and replace all other IP address as you need. I am not experience with HOTSPOT. Already a copy of this backup is sent to your ftp. This is for others. I think It will help you. Rafiq... hi,Rafiq I probably tr...

channingzou

Probably backup file will not be restored correctly. It is better to use export file.

hi,sergejs will make export file upload to your website let everyone download?

channingzou

Dear Sergejs, I have followed the step by step user signup configuration in mikrotik wiki. But the problem is I want, my user must be signup to be hotspot user, but i dont want to charge them. In mikrotik user manager for signup configuration, the subcriber must be have one payment method enable an...

channingzou

You may contact support with attached support output file and screenshots.

I contacted support but your didn't give me solve.
is there need wait ros 3.0 rc2?

channingzou

You can also post what type of router or service you want to provide? Just put the configuration of you router H/W, ( must after install the MK and if you don't want to setup a hotspot or wireless service) and send me a SMS to my cell phone at +8801716488912. I will make myself in my virtual server...

channingzou

nobody answer?
well ,can anybody tell me how to stop MAC login?
i tried drop port 20561, i still can login to router.
thanks!

channingzou

Well lets examine your code.... Code: /ip firewall filter> print customer Flags: X - disabled, I - invalid, D - dynamic 0 ;;; Drop invalid connection packets chain=customer action=drop connection-state=invalid <--- Drop invalid packets 1 ;;; Allow established connections chain=customer action=accep...

channingzou

I don't see any rule that allows for HTTP TCP traffic at all, plus how are they doing to query dns for an ip address.

Matt

you right ,that's why I'm confuse between two code above, if I add tcp port before drop everything it will work ,but why in first code do need tcp port to be added?

channingzou

HI,ALL
how do i setup mac login and use specify ip address?

channingzou

hi, all /ip firewall filter> print customer Flags: X - disabled, I - invalid, D - dynamic 0 ;;; Drop invalid connection packets chain=customer action=drop connection-state=invalid 1 ;;; Allow established connections chain=customer action=accept connection-state=established 2 ;;; Allow related connec...

channingzou

1) Have you modified HotSpot firewall rules ? 2) I do not have any problems with walled-garden. Do you have 'ip hotspot' at the console, do you have HotSpot package installed at all ? I don't modified HotSpot firewall rules ,but I do modified firewall rules , my hotspot was running couple day,are y...

channingzou

another question coming, I cann't use walled garden in winbox,I don't know why there have no selection available.
thanks

channingzou

[admin@MikroTik] > /system logging
[admin@MikroTik] system logging> add topics=wireless,debug action=memory
hi, can I log to disk?
system logging> add topics=wireless,debug action=disk

channingzou

why have these command in red color? under /ip firewall filter chain=hs-input action=jump jump target=pre-hs-input under /ip firewall nat chain=hotspot action=jump jump target=pre-hotspot chain=hs-unauth protocol=tcp dst-port=25 action=jump jump target=hs-smtp chain=hs-auth protocol=tcp dst-port=25 ...

channingzou

HI,NORMIS do you have time?
can you login my router see if my router setting was safe?
I'm headache with setting it up, if you can i send my login info to support.
thanks in advance.

channingzou

I have set up a RB532 as a hotspot on the wireless interface, but would like to secure it. I don't want users of the hotspot to be able to access the routerboard via Winbox. How would I go about doing this? Would I create a NAT rule? (the eth1 interface will have a separate network that will make u...

channingzou

In winbox goto IP -> Services. Select WWW and disable it.

-Louis

hi, not like demo.mt.lv do,when disable WWW you cann't login at all

channingzou

hi,all
how do i stop web login like http://demo.mt.lv
thanks

channingzou

hi,all,
I can login by winbox use Public IP, but I can't use it for webbox,why?
I don't know why my router automatic add bridge under Public interface,and connect to my PC ,is it seem someone login to my router make change ?

channingzou

DOH :shock: i wasn't talking about service ports. You must add firewall rule which accepts tcp port 80 /ip firewall filter add chain=forward protocol=tcp dst-port=80 action=accept or add rule to accept all tcp traffic, like you did with udp: /ip firewall filter add chain=forward protocol=tcp commen...

channingzou

hi, if you dont like this post or in worng place ,remove it please!
will you consider use user manager make billing gateway like wirelessorbit.com It's a 1 time charge of $20 and you can put as many hotspots as you want on the server,,I could pay $50 for 1 time charge.

channingzou

I want doing like that ,when I Enable rule, you can use Public IP :8080(OR any) then webbox will appear.and in winbox Public IP name & password can login.
thanks!

channingzou

you haven't added rule to allow TCP port 80 which is used for http browsing. here is list of some commonly used ports: http://www.mikrotik.com/testdocs/ros/2.9/ip/service.php [admin@MikroTik] ip service> print Flags: X - disabled, I - invalid # NAME PORT ADDRESS CERTIFICATE 0 telnet 23 0.0.0.0/0 1 ...

channingzou

Paypal I like it, when I use 2.9.44 user manage I use it pay to myself, it just testing if I can get paid.
Authorize.net I go verisign website try 14day free but I don't know how to setup,so not go thru.
google,don't care ,I have no time to try,may be later.

channingzou

how do I enable romote connection when I need someone login to my router and after that disable it?

channingzou

here is command I USED /ip firewall filter add chain=input connection-state=established action=accept comment="accept established connection packets" disabled=no add chain=input connection-state=related action=accept comment="accept related connection packets" disabled=no add cha...

channingzou

And make sure you are really transmitting out the right port. We recieved a batch of cards (these were Compex I think) with a "small" upgrade that swapped AUX with main. I got right port with main. may be I'm OK,because I'm using laptop to catch signal. but,I want to know someone maybe be...

channingzou

You have to type the command line all at once, it's not interactive, it won't prompt you for variables. I use this batch file for my system >>knock 172.125.3.203 45:tcp pause knock 172.125.3.203 46:tcp<< that way I have to hit the enter key, that helps me to know that the command has run correctly....

channingzou

Add firewall rules: / ip firewall filter add chain=input protocol=tcp dst-port=1337 action= add-src-to-address-list address-list=temp address-list-timeout=15s add chain=input protocol=tcp dst-port=7331 src-address-listddress-list=temp action= add-src-to-address-list address-list=safe address-list-t...

channingzou

I got 15db omni antenna,rb532a r5, rh52,put antenna 30feet high(in my roof) ,however lower than tree, I created as AP
unfortunately ,I lost connection about 300 feet.
Is anyone tested configuration above ,in place without interfering,how far will be?

channingzou

The signal received on both end was from -58dBm to -62dBm.
Is this legal?

channingzou

not only that site ,all site I visit ,so that command cann't be used?

channingzou

why when I enable command add chain=forward action=drop comment="drop everything else"
I browse web very slow and can't load page completely.
thanks!

channingzou

is pork knock only work for Public?
because I use local PC ,and I dont add any safe address list,I still can access to router
thanks!

channingzou

Make sure that subnet mask used on computer is equal to router subnet mask, check that masquerade rule has correct src-address specified (correct subnet mask). when I add netmask in DHCP Server 255.0.0.0 after Apply it become 8,is this correct? I only add 'ip firewall nat add action=masquerade chai...

channingzou

hi,all, When I using IP 10.10.10.0/24 for my local network ,I can't get internet access, is there need any configuration then I can using that Ip? add some detail when I using IP above with subnet mask 255.0.0.0 cann't access internet,but if I use subnet mask 255.255.255.0 can access internet,and i...

channingzou

hi,all,
When I using IP 10.10.10.0/24 for my local network ,I can't get internet access, is there need any configuration then I can using that Ip?

channingzou

----
Hai fren,
simple answer.
Don't put drop rule anything else, before you have accept or allow any rules.

regards
Hasbullah.com
----

thanks ! it work for me now ,but how do I move command down or up quicker,because I have to press on command then move down
thansk!

channingzou

hi,all
when I using command
/ip firewall filter add chain=input action=drop comment="Drop everything else"
I cann't using IP address login to Routeros via winbox,but I can use mac address login,
how do I setting make IP address work for me?
thanks!!!

channingzou

hi,all

when I using static keys,there only 40bit/104bit wep, Router os don't compatible 64/128 bit?

channingzou

hi,
When using outdoor case routerboard grounded, Is recommend or not?

I asking this question because I bought outdoor case for my RB532A ,but this case haven't Standoffs like indoor box ,then I bought Medium Plastic PCB Standoffs , it seem insulate between routerboard and box.

thanks!!!

channingzou

another question, how do I add people to safe list?

channingzou

I'm not doing any test ,I think I'm talking about signal strength

channingzou

I vote no,because not many (common)people using it.

channingzou

hi, is httP://wiki.mikrotik.com means anyone can change information there,so there may not be correct?

channingzou

i get command
http://wiki.mikrotik.com/wiki/Securing_ ... t_Knocking

channingzou

hi,all,
I use routerboard 532a r5 ,r52 ,one 15dBi Omni Antenna, outside box,configured as AP B/G ,I installed it at roof,my house is bungalow ,but I only got 18Mbs speed,I don't think so it will be such slow,
is any one known why?
thank!

channingzou

hi,all
how do i use port knocking?
I use command below in winbox terminal
/ip firewall filter
Knock.exe 192.168.0.2 1337:tcp 7331:tcp
it not work for me how do I make it correct?

channingzou

no matter if PUBLIC have same IP subnet like me?

channingzou

It make people more interesting with RouterOS ,but both sides at more than 800 meters above the sea level may not work any where,well unreasonable.

channingzou

hi,all
I'm new here and using RouterOS.
can I use A type IP address(10.9.9.0/24) instead of 192.168.0.0/24 for local network ?
is there need any configuration? how?
thanks! any one help!

channingzou

no, i will not translate BSSID.
what do you mean:
acked -> up, Is this up means direction?
All Up, what does this up means?
Childs, what does this means in here?
Completely Down, is this Down mean offline?
Crash Report, is this Crash mean failed?
Crypt Method , what is Crypt?

channingzou

hi, what is B means in BSSID?

channingzou

do you need Chinese Translating I can do it for you ,thanks!

Search found 137 matches