Community discussions

Search found 2633 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 53
by anav
Sat May 25, 2019 2:36 am
Forum: General
Topic: DHCP and VLAN's
Replies: 2
Views: 93

Re: DHCP and VLAN's

Also not recommended to use vlan1 for an actual vlan...............
by anav
Fri May 24, 2019 9:49 pm
Forum: Beginner Basics
Topic: Can WAN with multiple VLAN will work with trunked port for Internet and IPTV?
Replies: 13
Views: 453

Re: Can WAN with multiple VLAN will work with trunked port for Internet and IPTV?

Wow, so no other special requirements for the ISP IPTV other than VLAN tagging?
That is progressive thinking!! Bell Fibe and others in the US require special CoS type prioritization of the data at the initial handshake which is a killer requirement.
by anav
Fri May 24, 2019 4:02 pm
Forum: General
Topic: Configuring VLAN access port
Replies: 7
Views: 263

Re: Configuring VLAN access port

In other words a decent diagram will help and the config
/export hide-sensitive file=yourconfigmay24
by anav
Fri May 24, 2019 3:59 pm
Forum: General
Topic: Dual WAN with Vlan [SOLVED]
Replies: 5
Views: 161

Re: Dual WAN with Vlan [SOLVED]

From the magic book of Sindy Spells! Sindy floats, then he must be a witch. Burn the witch!! When I am awake I will have to revisit this thread to unpretzel my brain to figure it out. Perhaps I am never destined to see the Matrix. Sob does the same magic for ip route rules..............................
by anav
Thu May 23, 2019 10:39 pm
Forum: General
Topic: Mikrotik router with Windows Server DHCP Server?
Replies: 2
Views: 99

Re: Mikrotik router with Windows Server DHCP Server?

Seems overly complicated or at least disjointed.

Without a full understanding of the network an optimal design/setup is not possible by guessing.
Is the Sonicwall doing all the routing?
Is the MT simply a managed switch?
Have you thought of using VLANS?
by anav
Thu May 23, 2019 10:35 pm
Forum: General
Topic: Mikrotik hap ac doesn't see local network
Replies: 2
Views: 90

Re: Mikrotik hap ac doesn't see local network

is this a home network or a business setup??

Concur, draw/provide a diagram.
Then post both configs...........
/export hide-sensitive file=yourconfigmay23
by anav
Thu May 23, 2019 10:32 pm
Forum: Beginner Basics
Topic: Multiple WAN/ISP ip addressess to different ports
Replies: 4
Views: 151

Re: Multiple WAN/ISP ip addressess to different ports

Concur, the setup is basic and the IT admin is negligent. :-)
by anav
Thu May 23, 2019 8:13 pm
Forum: General
Topic: How to routing between two nat subnet?
Replies: 11
Views: 335

Re: Routing Whackamole between two Forum Gurus

Sob and pe1chi, SERIOUSLY, do you guys like torture and punishment? Simply ask for a DIAGRAM and both configs on the routers. (you know /export hide-sensitive file=yourconfig23may ) Your guessing game would be funny if it was intentional ;-PPPPP Changed the Title of the thread........ " Routing Whac...
by anav
Thu May 23, 2019 6:09 pm
Forum: General
Topic: Two connection and two gateway
Replies: 29
Views: 755

Re: Two connection and two gateway

Can I give Sindy a patience award. You continually impress me man!!
Somebody close to him buy him a good meal and a hearty beer! Assuming its a guy, if not, then an excellent meal and classy white wine.
by anav
Thu May 23, 2019 6:04 pm
Forum: Beginner Basics
Topic: Multiple WAN/ISP ip addressess to different ports
Replies: 4
Views: 151

Re: Multiple WAN/ISP ip addressess to different ports

Which MT unit and which firmware are you running?
by anav
Thu May 23, 2019 6:03 pm
Forum: Beginner Basics
Topic: 1 Bridge with VLAN vs multi bridge
Replies: 5
Views: 223

Re: 1 Bridge with VLAN vs multi bridge

I make the CPU do the work, call me a slave driver.
When the CPU starts complaining I threaten to get a newer CPU and throw the current one in the trash bin.
The CPU then stops complaining. :-)
by anav
Thu May 23, 2019 5:49 pm
Forum: Beginner Basics
Topic: hAP ac - How to configure?
Replies: 12
Views: 382

Re: hAP ac - How to configure?

First thing I would do is find out what is the wifi card in my PC and see if it has any known issues with the qualcomm wifi chip in the router. If there is nothing on the net, then chances are its probably wifi settings on the router that need adjusting. Unfortunately I am no guru............... Pro...
by anav
Thu May 23, 2019 5:41 pm
Forum: Beginner Basics
Topic: Ban IP's / Drop connections of RDP Brute forcers
Replies: 4
Views: 171

Re: Ban IP's / Drop connections of RDP Brute forcers

Hmmmm, there is no reason why the action drop rule should be in the RAW firewall filter and NOT the input chain. As the rhyme goes. I would like to slap the peepee of the person that wrote the wikee. Slow day. ;-) Highly recommend you read through this thread for some sage advice! https://forum.mikr...
by anav
Thu May 23, 2019 5:37 pm
Forum: Beginner Basics
Topic: hAP ac - How to configure?
Replies: 12
Views: 382

Re: hAP ac - How to configure?

Sounds like perhaps tweaking some wifi settings. If the computer is in the same room as the AP you should get close to same speeds as wired. Looking at the test results....... I would state you should be getting around 500-800 wired. (512K setting with 25 bridge- 25 filter rules) Seeing as your inte...
by anav
Wed May 22, 2019 9:49 pm
Forum: General
Topic: IKEv2 for Windows and iOS
Replies: 10
Views: 336

Re: IKEv2 for Windows and iOS

Hi Sindy, I know on my IOS IKEv2 setup I had to create a false or weird type of LAN subnet for the connection. I cannot seem to be able to identify an interface for this and there was not direction to create an address addition in the config. I believe I just created it in the IKEv2 setup (IPSEC are...
by anav
Wed May 22, 2019 9:45 pm
Forum: General
Topic: Configuring VLAN access port
Replies: 7
Views: 263

Re: Configuring VLAN access port

Have a slow long read of this excellent source which will help you clean up your config and provide all the answers you desire! https://forum.mikrotik.com/viewtopic.php?f=13&t=143620 After reading that you should be well on your way to success. The MT wiki resources have been playing catchup such th...
by anav
Wed May 22, 2019 9:41 pm
Forum: Beginner Basics
Topic: 1 Bridge with VLAN vs multi bridge
Replies: 5
Views: 223

Re: 1 Bridge with VLAN vs multi bridge

Having one Bridge for me simplifies the setup. Read through this source for the best approach Ive seen. https://forum.mikrotik.com/viewtopic.php?f=13&t=143620 I have multiple vlans, multiple managed and unmanaged switches and multiple APs (two cap acs and others). I use one bridge on any mikrotik de...
by anav
Tue May 21, 2019 4:53 pm
Forum: General
Topic: New Setup Advice
Replies: 4
Views: 245

Re: New Setup Advice

I personally use this device and am very happy with performance(no wifi). https://mikrotik.com/product/rb450gx4 However if you want to connect to the router with sfp ports, then have a look at............ https://mikrotik.com/product/RB953GS-5HnT-RP (has two SFP cages). This is the best price point ...
by anav
Tue May 21, 2019 4:36 pm
Forum: Beginner Basics
Topic: Plex Media Server Remote Access - Port Forwarding
Replies: 13
Views: 477

Re: Plex Media Server Remote Access - Port Forwarding

Why would you have a public IP on the plex??
by anav
Mon May 20, 2019 8:12 pm
Forum: General
Topic: firewall filter protocol 47 gre
Replies: 13
Views: 487

Re: firewall filter protocol 47 gre

Hi Sindy can you state in plane ingleesh, what the issue is here.
It seems that the router cannot see into encrypted traffic and how is this bad???
by anav
Mon May 20, 2019 5:25 pm
Forum: General
Topic: Route to multiple remote locations with same LAN subnet/network [SOLVED]
Replies: 6
Views: 250

Re: Route to multiple remote locations with same LAN subnet/network [SOLVED]

Sindy=genius!!!
You should write a routerOS book, I will pre-order buy it now!
by anav
Mon May 20, 2019 5:20 pm
Forum: Beginner Basics
Topic: Help with VLAN and separate WLAN's
Replies: 5
Views: 255

Re: Help with VLAN and separate WLAN's

Why did you buy Mikrotik with no networking experience or knowledge??
Do you have configs for the three units you can post to see what you have accomplished so far??
by anav
Mon May 20, 2019 5:17 pm
Forum: Beginner Basics
Topic: CAPsMAN, VLANs & multiple SSIDs headaches
Replies: 1
Views: 98

Re: CAPsMAN, VLANs & multiple SSIDs headaches

I would leave the capsman part out of it until you have configured the two capac unit and vlans by themselves. Your current config needs much work but suggestions will just confuse and not help at this point.... The capsman adds a third layer of unnecessary complexity which will get in the way of un...
by anav
Sun May 19, 2019 6:44 pm
Forum: General
Topic: f/w 6.44.1 problem
Replies: 6
Views: 283

Re: f/w 6.44.1 problem

So great for torrenting for a couple of hours at a time........... where is the problem?
It cannot be your config because it looks a lot like the Emperor's new clothes.
by anav
Sat May 18, 2019 7:27 pm
Forum: Beginner Basics
Topic: Getting to grips with port forwarding
Replies: 3
Views: 157

Re: Getting to grips with port forwarding

Easy Peasy..... Step One: Create the Destination Nat rule for the specific server. This is also where you apply limitations on the external allowed WANIP! /ip firewall nat add chain=dstnat action=dst-nat dst-port=[specific external port] protocol=tcp source-address-list=ServerPurpose1access to-addre...
by anav
Sat May 18, 2019 5:39 pm
Forum: General
Topic: Visio Stencils
Replies: 3
Views: 216

Re: Visio Stencils

Sounds like something MT should post as a link to their Support Tab at the website!!!
by anav
Sat May 18, 2019 5:36 pm
Forum: Beginner Basics
Topic: Help with VLAN and separate WLAN's
Replies: 5
Views: 255

Re: Help with VLAN and separate WLAN's

Is the first router(1) the only router and the others are acting as access points and switches??
by anav
Sat May 18, 2019 5:34 pm
Forum: Beginner Basics
Topic: Plex Media Server Remote Access - Port Forwarding
Replies: 13
Views: 477

Re: Plex Media Server Remote Access - Port Forwarding

Please post your config and then we can sort out (or isolate the router from being the problem) the issue.

/export hide-sensitive file=youconfigmay18
by anav
Fri May 17, 2019 10:27 pm
Forum: Beginner Basics
Topic: Stop forwarding from default Bridge to Interface "etherX" [SOLVED]
Replies: 2
Views: 109

Re: Stop forwarding from default Bridge to Interface "etherX" [SOLVED]

Simple, draw a diagram and post your config, then we will be able to give credible responses instead of guessing. /export hide-sensitive file=yourconfigmay17 No need to confine your port for admin control. Simply use firewall rules and winbox rules and you can limit it by IP without contorting your ...
by anav
Fri May 17, 2019 7:29 pm
Forum: Beginner Basics
Topic: Forward the port 80 to another port in mikrotik
Replies: 7
Views: 287

Re: Forward the port 80 to another port in mikrotik

Well without knowing his configuration, NO DIAGRAM, NO CONFIGURATION, what is the point of your postt?? If its two subnets on the same router one needs to ensure fw rules allows crosstalk vice routing solution in my limited experience. @source address, for security reasons I like to ensure always li...
by anav
Fri May 17, 2019 4:18 pm
Forum: Beginner Basics
Topic: Forward the port 80 to another port in mikrotik
Replies: 7
Views: 287

Re: Forward the port 80 to another port in mikrotik

You right are, me Phuck......
/ip firewall nat
chain=dstnat action=dst-nat source-address-list=zone1 dst address=192.168.192.10 dst-port=80 protocol=tcp/
to-addressess=192.168.192.10 to-ports=8080
by anav
Thu May 16, 2019 9:21 pm
Forum: General
Topic: Dual bridge / DHCP servers on 6.43.+
Replies: 1
Views: 114

Re: Dual bridge / DHCP servers on 6.43.+

Yes!
Although your first setup should work just fine as well.
Perhaps posting your config and a diagram will help point out any errors in the current configuration.
/export hide-sensitive file=yourconfig16May
by anav
Thu May 16, 2019 9:19 pm
Forum: General
Topic: NAt Configuration
Replies: 5
Views: 181

Re: NAt Configuration

More basic than than there is a flaw in your configuration........... add address=192.168.88.1/24 interface= ether2 network=192.168.88.0 This needs to change to........... add address=192.168.88.1/24 interface= bridge1 network=192.168.88.0 Also for your sourcenat rule, it can be simplified.............
by anav
Thu May 16, 2019 9:12 pm
Forum: Beginner Basics
Topic: vlan and guest in mode bridge ?
Replies: 5
Views: 217

Re: vlan and guest in mode bridge ?

Not sure what you mean but YES, all the settings are available. If you mean give out DHCPs, I believe it has to be in router mode.
by anav
Thu May 16, 2019 3:33 pm
Forum: General
Topic: dst-nat with changing port
Replies: 18
Views: 585

Re: dst-nat with changing port

Post your config
/export hide-sensitive file=yourconfigmay16
by anav
Wed May 15, 2019 6:12 pm
Forum: Beginner Basics
Topic: Forward the port 80 to another port in mikrotik
Replies: 7
Views: 287

Re: Forward the port 80 to another port in mikrotik

Thats right, the rule I made takes any request from zone one lan users that is headed for port 8080 and sends it to the specific zone 2 IP address and translated to port 80. I thought that would accomplish the aim LOL. Without seeing the OPs config...... /export hide-sensitive file=yourconfig15may W...
by anav
Wed May 15, 2019 6:08 pm
Forum: Beginner Basics
Topic: [solved] VLAN-subnet over 3 devices / routing? switching?
Replies: 3
Views: 187

Re: VLAN-subnet over 3 devices / routing? switching?

Better than google translate is a detailed diagram showing your setup.
by anav
Tue May 14, 2019 5:30 pm
Forum: Beginner Basics
Topic: Port still closed after forwarding
Replies: 4
Views: 227

Re: Port still closed after forwarding

Your are probably tentatively, said hesitantly, right. ;-P
My firewall rules have drop all at end of input and forward chains.
So I should caveat my response with those conditions.
by anav
Tue May 14, 2019 5:27 pm
Forum: Beginner Basics
Topic: Forward the port 80 to another port in mikrotik
Replies: 7
Views: 287

Re: Forward the port 80 to another port in mikrotik

/ip firewall nat
chain=dstnat action=dst-nat source-address-list=zone1 dst port=8080 protocol=tcp/
to-addressess=192.168.192.10 to-ports=80

* suggest you make a firewall address list for the range required
by anav
Tue May 14, 2019 5:19 pm
Forum: Beginner Basics
Topic: no internet access
Replies: 3
Views: 180

Re: no internet access

Use this reference for vlans..........
viewtopic.php?f=13&t=143620
by anav
Tue May 14, 2019 5:17 pm
Forum: Beginner Basics
Topic: If I use "src-nat" i can not ping external(internet) resources
Replies: 6
Views: 294

Re: If I use "src-nat" i can not ping external(internet) resources

Exactly what I was going to suggest. See great minds do think alike@! ;-)
by anav
Tue May 14, 2019 5:15 pm
Forum: Beginner Basics
Topic: Re-phrase o a warning on Wiki PCC page
Replies: 3
Views: 182

Re: Re-phrase o a warning on Wiki PCC page

Makes perfect sense I imagine to someone with networking experience. Its gibberish to me LOL.
by anav
Mon May 13, 2019 11:30 pm
Forum: General
Topic: LAN and WAN on One PHysical port
Replies: 7
Views: 358

Re: LAN and WAN on One PHysical port

As long as those square boxes with red arrows (assuming switches) are managed switches this should be doable.
by anav
Mon May 13, 2019 11:26 pm
Forum: Beginner Basics
Topic: Port still closed after forwarding
Replies: 4
Views: 227

Re: Port still closed after forwarding

My experience as to normal behaviour.
No ports forwarded: no port visible on scan
Port forwarded: port visible on scan but shown as closed
Port forwarded with an allowed firewall access list of wan ips on the dst nat rule: no port visible on scan.
by anav
Sun May 12, 2019 9:27 pm
Forum: General
Topic: VLAN over Bridge
Replies: 41
Views: 1233

Re: VLAN over Bridge

hey zigjack can you post a working config for us (slow me) to look at please!
CONGRATS!!!
by anav
Sun May 12, 2019 5:29 pm
Forum: General
Topic: LAN and WAN on One PHysical port
Replies: 7
Views: 358

Re: LAN and WAN on One PHysical port

Can you provide a diagram or at least explain what your situation is. Why would your wan port coming from the ISP be the same physical port to your LAN??? Perhaps you have a switch between your ISP modem and your router?? In that case assuming the switch is vlan capable, there should be no issue wit...
by anav
Sun May 12, 2019 5:06 pm
Forum: General
Topic: VLAN over Bridge
Replies: 41
Views: 1233

Re: VLAN over Bridge

As an aside this was the same result for my old zyxel router. The stupid router would not respond with the correct priority on the handshake and thus would never get a TV IP address. The CoS setting would work every other time/place except for the original handshake, most frustrating. Would love to ...
by anav
Sun May 12, 2019 5:35 am
Forum: General
Topic: VLAN over Bridge
Replies: 41
Views: 1233

Re: VLAN over Bridge

Thanks Sindy for the xplanation. No harm in a bridge for DHCP purposes (was hit over the head with a ruler I think by Sob, first time I questioned WAN and bridges LOL). It just is confusing for people when adding other bits of their network on the same bridge. So, assuming then that one can have a b...
by anav
Sat May 11, 2019 8:27 pm
Forum: General
Topic: VLAN over Bridge
Replies: 41
Views: 1233

Re: VLAN over Bridge

Seriously, how would one, for traffic coming from an ISP on vlan XX, also ensure that the router meets the necessary requirements of replying with handshakes/traffic with the correct DSCP (tos), CoS or QoS. So confusing.......... just how bout the right "priority" LOL I thought mangling was just for...
by anav
Sat May 11, 2019 8:22 pm
Forum: General
Topic: VLAN over Bridge
Replies: 41
Views: 1233

Re: VLAN over Bridge

  • 1
  • 2
  • 3
  • 4
  • 5
  • 53