Community discussions

Search found 2708 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 55
by anav
Sun Jun 16, 2019 6:09 pm
Forum: Beginner Basics
Topic: single IP constantly trying to log to my Mikrotik
Replies: 18
Views: 595

Re: single IP constantly trying to log to my Mikrotik

Useless ref in regard to the question posed........................... looking for a reference that the router processes filter rules of accepted/related more efficiently than other firewall filter rules in general and specifically better than raw rules. If it was so important and so clear, then it ...
by anav
Sun Jun 16, 2019 6:04 pm
Forum: Beginner Basics
Topic: dual wan with an hap ac2 ?
Replies: 2
Views: 113

Re: dual wan with an hap ac2 ?

RouterOS for the most part is RouterOS meaning you can do everything on most devices. So yes dual or triple or quadruple wan is possible. You need to state your requirements more clearly however. 1. Do you want failover ( a primary and if it fails then go to secondary) 2. Shared, load balance, make ...
by anav
Sat Jun 15, 2019 10:27 pm
Forum: Wireless Networking
Topic: IPTV over Wi-Fi
Replies: 4
Views: 222

Re: IPTV over Wi-Fi

First thing I would think is suspect that the throughput of your setup is not adequate. What speeds have you measured from the second MT after the repeating. Much better do use ethernet or a direct wifi link (not repeating) such as use a pair of wireless wire (LOS) to extend wifi over 60ghz for exam...
by anav
Sat Jun 15, 2019 10:22 pm
Forum: Beginner Basics
Topic: My first Mikrotik Router - Firewall Help
Replies: 16
Views: 641

Re: My first Mikrotik Router - Firewall Help

Yes. You just have to keep LAN interface list updated. Generally when constructing some rules one should use criteria which has least possibility of spoofing. Remote attacker can easily spoof src-address but can hardly spoof ingress interface. That is GOLD advice.......... IF only MT would put gems...
by anav
Sat Jun 15, 2019 10:16 pm
Forum: Beginner Basics
Topic: single IP constantly trying to log to my Mikrotik
Replies: 18
Views: 595

Re: single IP constantly trying to log to my Mikrotik

@pe1chl Don't get me wrong, in fact everytime MKX is wrong I do a happy dance and treat myself to a nice cold beer! BUT...... "Things like tracked connections (and also address lists) are stored in a clever way so the match can be made more quickly than by checking them all." Appears to be an assump...
by anav
Fri Jun 14, 2019 2:58 am
Forum: General
Topic: vlan bridge to port [SOLVED]
Replies: 10
Views: 379

Re: vlan bridge to port [SOLVED]

How do you bridge to another bridge???
Why not put all on same bridge LOL.
by anav
Thu Jun 13, 2019 12:04 am
Forum: General
Topic: Annoyed with Mikrotik 'Support'
Replies: 8
Views: 419

Re: Annoyed with Mikrotik 'Support'

There are also many consultants around the world that can help. Sometimes spending a bit on money relieves great stress and gets a solution working quickly. MT equipment is designed for people familiar with networking to a fairly high level. To be clear, just like 'Jon Snow' I know jack sheite (noth...
by anav
Thu Jun 13, 2019 12:01 am
Forum: Beginner Basics
Topic: i need to help
Replies: 2
Views: 146

Re: i need to help

You are asking very basic questions for someone starting a business that people will expect to be reliable and useful. For starters you should provide a diagram with the layout of the area you plan to cover. Where power can be supplied? where ethernet cabling can be provided? what line of sights you...
by anav
Wed Jun 12, 2019 11:54 pm
Forum: Beginner Basics
Topic: How to block access vlan from my local network?
Replies: 8
Views: 415

Re: How to block access vlan from my local network?

Looking at your filter rules..... For clarity you should separate INPUT CHAIN (first) and then FORWARD CHAIN. Far less confusing. /ip firewall filter add action=accept chain=input comment="Accept Related or Established Connections" connection-state=\ established,related MISSING add action=accept cha...
by anav
Wed Jun 12, 2019 11:30 pm
Forum: Beginner Basics
Topic: How to block access vlan from my local network?
Replies: 8
Views: 415

Re: How to block access vlan from my local network?

@anav The second routerboard used as access point From rb750 port 2 connect to my lan via unmanaged switch. And from switch connected to rb941 port 2 is bridge with ports(1,2,3,wlan1). From rb750 port3 assign vlan10 connected direct to rb941 bridge1 with (port4,wlan2) assigned vlan10. Is correct th...
by anav
Wed Jun 12, 2019 11:23 pm
Forum: Beginner Basics
Topic: Hacked recently
Replies: 7
Views: 610

Re: Hacked recently

Incorrect advice, first we dont know what firmware he had to begin with so its an assumption not fact if his firmware is or is not up to date. Secondly, if there is hacked firmware the only 'safe' method for an update or reset is to dowload a clean copy of the latest firmware and apply it via netins...
by anav
Tue Jun 11, 2019 6:21 pm
Forum: General
Topic: Issues with my setup
Replies: 11
Views: 406

Re: Issues with my setup

I dont see your vlans identified by any dhcp settings?
You seem to use eth ports on the router not identified on the drawing as well (nor indicate which ether port goes to the pfsense).
by anav
Tue Jun 11, 2019 6:15 pm
Forum: General
Topic: Organise MFM Lists
Replies: 0
Views: 70

Organise MFM Lists

https://mikrotik.com/mfm/software

Thanks for sending us down this link Normis. I didn't know it existed.
However there is no table of contents and the lists are not even alphabetical. Can you at least put some minimal effort into a searchable organized list.
Thanks!
by anav
Tue Jun 11, 2019 6:14 pm
Forum: General
Topic: Implementing a Blacklist [SOLVED]
Replies: 2
Views: 153

Re: Implementing a Blacklist [SOLVED]

The easiest solution.................. Thats easy..... Let someone else do all the work......... https://forum.mikrotik.com/viewtopic.php?f=2&t=137632 (for basically $10 a month, or 4 cups a coffee a month) I would be using that except I am using Axiom Shield (as I can claim it as a business expense).
by anav
Tue Jun 11, 2019 5:56 pm
Forum: Beginner Basics
Topic: Adding a non-Mikrotik Router to a Mikrotik router as a range extender.
Replies: 1
Views: 122

Re: Adding a non-Mikrotik Router to a Mikrotik router as a range extender.

What do you mean by extender? How will you connect the MT to the non-MT?
Will the non MT unit be acting as a router or simply an access point/switch etc..........
by anav
Tue Jun 11, 2019 5:45 pm
Forum: Beginner Basics
Topic: How to block access vlan from my local network?
Replies: 8
Views: 415

Re: How to block access vlan from my local network?

Quick question, it is not clear to me the purpose of the second routerboard? It would seem you are using it simply or mostly as an access point switch which is vlan aware?? If so how are you connecting the two devices together for the vlans? I am assuming LAN from the main router is coming out ether...
by anav
Mon Jun 10, 2019 8:22 pm
Forum: Beginner Basics
Topic: How to block access vlan from my local network?
Replies: 8
Views: 415

Re: How to block access vlan from my local network?

Post both configs

/export hide-sensitive file=myconfigs10jun
by anav
Mon Jun 10, 2019 4:38 am
Forum: Beginner Basics
Topic: Inter Vlan communication and inter network communication issue [SOLVED]
Replies: 10
Views: 554

Re: Inter Vlan communication and inter network communication issue [SOLVED]

@mkx thankyou for the help. It seems the problem in firewall. Firewall a mess. Have been able to solve the issue. Configuration good up and running. Now cleaning the firewall as recommended by @anav and to meet my requirements.
That is good news!!
by anav
Mon Jun 10, 2019 4:37 am
Forum: Beginner Basics
Topic: Wireless Wire (RBwAPG-60adkit) - Not working. Appreciate the help!
Replies: 7
Views: 350

Re: Wireless Wire (RBwAPG-60adkit) - Not working. Appreciate the help!

finally got them to work... honestly not sure what the deal was but happy to say they're up and running.

Thanks for the help!
Well glad you got them up and running but your feedback is not helpful. What did you do to get them to work?
We need to be able to help the next person!!!
by anav
Mon Jun 10, 2019 4:36 am
Forum: Beginner Basics
Topic: NAT problems - Xbox One and Nintendo Switch
Replies: 9
Views: 648

Re: NAT problems - Xbox One and Nintendo Switch

Hey Rodrigo,
This is a decent guide for adjusting the TP link.
https://www.dslreports.com/faq/11233

What I am not clear on is the logging in part of your users.
Do you mean to use the Access Point (radio part) of the TP links (ssid and password)?
by anav
Sat Jun 08, 2019 7:47 pm
Forum: General
Topic: Sofware VLAN/Bridge on RuterOS explained.
Replies: 52
Views: 10836

Re: Sofware VLAN/Bridge on RuterOS explained.

Suggest you have a good read (at least twice through this thread and examples to get a good understanding). https://forum.mikrotik.com/viewtopic.php?f=13&t=143620 Once you understand then the wiki here will be more useful and if you have a special case need for a hybrid port, then look at the fourth...
by anav
Sat Jun 08, 2019 7:43 pm
Forum: Beginner Basics
Topic: Help! -- Something is dropping All traffic
Replies: 2
Views: 148

Re: Help! -- Something is dropping All traffic

Without seeing any configurations on the routers, I would have to guess tiny Irish Gremlins live in your routers! ;-)
by anav
Sat Jun 08, 2019 4:13 am
Forum: Beginner Basics
Topic: 1 mikrotik, 2 ISPs, 2 LANs, can't make LANS see each other
Replies: 2
Views: 169

Re: 1 mikrotik, 2 ISPs, 2 LANs, can't make LANS see each other

You should reset to defaults and start new.
Dont add any firewall rules as the defaults work out of the box.
Then come back and post what you have.
It will be easier to discern when much cleaner.
Then after if you want to add all the xtra garbage in you can to a working config
by anav
Fri Jun 07, 2019 9:07 pm
Forum: Beginner Basics
Topic: Can't watch twitch live streams [SOLVED]
Replies: 2
Views: 159

Re: Can't watch twitch live streams [SOLVED]

I was going to say,m that one has to sit still to watch a twitch stream LOL............ Glad you found the error!
by anav
Fri Jun 07, 2019 9:06 pm
Forum: Beginner Basics
Topic: Using RouterOS to VLAN your network
Replies: 75
Views: 12332

Re: Using RouterOS to VLAN your network

@antech, this thread is to discuss the examples provided by the author. If you are having VLAN issues please start another thread. When you do I will point out the obvious error I spotted. :-) @mixig, please read through the reference from beginning to end, the answer you seek is answered within, hi...
by anav
Thu Jun 06, 2019 11:35 pm
Forum: Beginner Basics
Topic: Mark vlan on access port
Replies: 3
Views: 201

Re: Mark vlan on access port

Ahh okay so your config works you just need an explanation of the settings. I thought they were in the reference?
Well I am sure others will chime in with more detail.
by anav
Thu Jun 06, 2019 10:35 pm
Forum: Beginner Basics
Topic: Port forwarding
Replies: 2
Views: 178

Re: Port forwarding

Draw a diagram as the written explanation is very confusing.
by anav
Thu Jun 06, 2019 6:22 pm
Forum: General
Topic: hAP ac² as switch + ap
Replies: 9
Views: 482

Re: hAP ac² as switch + ap

You would probably create a bridge setup on the hapac and define your etherent interfaces and any vlans if any.
No need to create new subnets or anything else.
A diagram of what you are thinking would help that would show what subnets you wish to have and how they are distributed
by anav
Thu Jun 06, 2019 5:14 pm
Forum: Beginner Basics
Topic: guest wifi + VLAN confusion
Replies: 6
Views: 334

Re: guest wifi + VLAN confusion

Before looking at the configs........ Just to be clear on the diagrams. 1. DHCP/subnets and associated LANs/VLANs are created on the RB750. 2. The hapac is in WISP mode, if not what mode? 3. The hapac has its own LANIP on the main LAN provided by the RB750. 4. The only VLAN is 20 and its for a guest...
by anav
Thu Jun 06, 2019 5:08 pm
Forum: Beginner Basics
Topic: Wireless Wire (RBwAPG-60adkit) - Not working. Appreciate the help!
Replies: 7
Views: 350

Re: Wireless Wire (RBwAPG-60adkit) - Not working. Appreciate the help!

Hmm I don't have these units so cannot be of much help. Here is the wiki for manual setup but as warning states........ "Wireless Wire kit devices comes in pre-configured, connected pairs. Manual configuration is optional" https://wiki.mikrotik.com/wiki/Manual:Interface/W60G ON the product page, the...
by anav
Thu Jun 06, 2019 3:35 pm
Forum: Wireless Networking
Topic: RBwAPG-60adkit - no wireless multiple vlan trunk
Replies: 3
Views: 253

Re: RBwAPG-60adkit - no wireless multiple vlan trunk

Where are the addresses/subnets for all the other vlans (not vlan1)??
by anav
Thu Jun 06, 2019 3:33 pm
Forum: General
Topic: Traffic routing between isolated bridges/subnets
Replies: 3
Views: 182

Re: Traffic routing between isolated bridges/subnets

Without seeing your config I am loathe to play guessing games.
If subnets are on different bridges then they should be blocked at L2 and firewall rules should dictate access between them.
So it should work.
by anav
Thu Jun 06, 2019 3:31 pm
Forum: General
Topic: Load balancing?
Replies: 1
Views: 138

Re: Load balancing?

So conceptually speaking you want A. Use Primary Connection (not backups) as first vector (no load balancing). Failover! B. Upon failover USE Backups but in a load balance scenario between the five back up connections. Can you clarify (for backups) that you have 5 different ethernet connections from...
by anav
Thu Jun 06, 2019 3:27 pm
Forum: Beginner Basics
Topic: Mark vlan on access port
Replies: 3
Views: 201

Re: Mark vlan on access port

Your best bet is to read some decent resources....
First and foremost the best resource is this one.........
viewtopic.php?f=13&t=143620
by anav
Thu Jun 06, 2019 3:25 pm
Forum: Beginner Basics
Topic: Inter Vlan communication and inter network communication issue [SOLVED]
Replies: 10
Views: 554

Re: Inter Vlan communication and inter network communication issue [SOLVED]

I would add that most of what you have is not needed. Simply use firewall rules that state what is allowed and then at the end of the input chain and forward chain make drop all rules. Done............ Then monitor traffic and if there is a specific source or type of traffic that you feel is hamperi...
by anav
Thu Jun 06, 2019 3:22 pm
Forum: Beginner Basics
Topic: Port forwarding question
Replies: 4
Views: 243

Re: Port forwarding question

No worries, that dumb router would be a real pain for multiple IP blocks as well.
As Sob indicated if the DMZ+ simply forwards all ports, then the MT should work for you just fine.
by anav
Thu Jun 06, 2019 3:20 pm
Forum: Beginner Basics
Topic: Block IP adress trying to access RDP
Replies: 10
Views: 519

Re: Block IP adress trying to access RDP

you can count attempts in mangle prerouting chain. I do not think the Mangle section will be the right place for such a rule. I am suggesting to use firewall raw section with dst-limit parameters. In general its safer to capture in filter, but okay to drop in raw as raw is stateless and thus easier...
by anav
Wed Jun 05, 2019 5:55 pm
Forum: Beginner Basics
Topic: Port forwarding question
Replies: 4
Views: 243

Re: Port forwarding question

I dont know where to begin, (the fact that you are using some hacks from the internet for MT setup is alarming) First of all, the primary router should be placed in a passthrough mode, such that a public IP is passed to the MT router. (Change the Modem/Router from the ISP into acting solely as a mod...
by anav
Wed Jun 05, 2019 3:53 pm
Forum: Wireless Networking
Topic: Large Apartment, no Ethernet
Replies: 28
Views: 1283

Re: Large Apartment, no Ethernet

Good to know mkx, are the automatic fuses common in apartment building and the like? In vicinity of where I live (like 1000 km radius) automatic fuses somehow became standard for new wirings (either new buildings or adapted old flats/buildings). Only old people (like my parents who actually need po...
by anav
Wed Jun 05, 2019 3:42 pm
Forum: Beginner Basics
Topic: guest wifi + VLAN confusion
Replies: 6
Views: 334

Re: guest wifi + VLAN confusion

This is how I set vlan on my bridge (minus the dhcp and firewall rules, to keep it simple): /interface bridge add name=bridge1 protocol-mode=none vlan-filtering=yes /interface ethernet set [ find default-name=ether1 ] comment="UPLINK - TRUNK" set [ find default-name=ether2 ] comment="DOWNLINK - TRU...
by anav
Tue Jun 04, 2019 5:02 pm
Forum: General
Topic: Providing Internet access to VLANs
Replies: 21
Views: 805

Re: Providing Internet access to VLANs

Oopsy i see it now too LOL. Typically I look for a mis-match between what the interface setting is.......... not expecting a more basic operator error. However, my sympathy is low as the OP still is using vlan-id=1 and using the bridge for DHCP.......................... But if it works............. ...
by anav
Tue Jun 04, 2019 4:55 pm
Forum: Beginner Basics
Topic: how to make a geust network for dutch KPN config
Replies: 3
Views: 296

Re: how to make a geust network for dutch KPN config

Your setup to attach to your ISP provider is too complicated for my rudimentary level of understanding.
by anav
Tue Jun 04, 2019 2:30 pm
Forum: Wireless Networking
Topic: Large Apartment, no Ethernet
Replies: 28
Views: 1283

Re: Large Apartment, no Ethernet

anav, the original poster said they need 50Mbit total. When the time in future comes and his country can cheaply provide him 500Mbit or more, there will be options to upgrade. Why spend more now? Disagree, for a nominal few more bucks, one gets future growth capacity and better circuit technology. ...
by anav
Tue Jun 04, 2019 2:29 pm
Forum: Wireless Networking
Topic: Large Apartment, no Ethernet
Replies: 28
Views: 1283

Re: Large Apartment, no Ethernet

Good to know mkx, are the automatic fuses common in apartment building and the like?
The only technology I was aware of vis-a-vis fuses was the mind blowing stuff of digital fuses currently being funded by major fuse manufacturers.
by anav
Tue Jun 04, 2019 1:59 am
Forum: Wireless Networking
Topic: Large Apartment, no Ethernet
Replies: 28
Views: 1283

Re: Large Apartment, no Ethernet

Perhaps the rest of the world has no aspirations for faster ethernet? It keeps increasing where I am.... I always attempt to plan for a few years down the line which tends to stretch my dollar, euro, peso a bit farther. Sorry I cannot and will not condone a non gigabit ethernet device in this day an...
by anav
Tue Jun 04, 2019 1:53 am
Forum: Beginner Basics
Topic: Confused with PASSTHROUGH YES/NO in Mangle
Replies: 7
Views: 420

Re: Confused with PASSTHROUGH YES/NO in Mangle

^^^ You added question marks by mistake. ;)
They were rhetorical question marks!! ;-P
by anav
Mon Jun 03, 2019 7:16 pm
Forum: Beginner Basics
Topic: guest wifi + VLAN confusion
Replies: 6
Views: 334

Re: guest wifi + VLAN confusion

Suggest you ignore the second advice and go with the first one. Use bridge vlan filtering and use this resource!!
viewtopic.php?f=13&t=143620

(tis what I have done on similar devices)
by anav
Mon Jun 03, 2019 7:14 pm
Forum: Beginner Basics
Topic: Confused with PASSTHROUGH YES/NO in Mangle
Replies: 7
Views: 420

Re: Confused with PASSTHROUGH YES/NO in Mangle

So, if a packet matches a rule early on in the mangle rules BUT................ will also need to be processed again by lets say 10 mangle rules later, then the first rule that packet is involved in MUST have passthrough=yes??
by anav
Mon Jun 03, 2019 7:10 pm
Forum: Beginner Basics
Topic: VLAN Trunk and Access Ports on Same Device
Replies: 2
Views: 177

Re: VLAN Trunk and Access Ports on Same Device

Concur with MKX, that is the best reference for setting up VLANS. Take note that the author avoids using vlan1 for anything other than default settings for some devices. In other words do not use vlan1 as some sort of untagged entity and dont use it for an admin vlan. The one thing I am not sure the...
by anav
Mon Jun 03, 2019 7:03 pm
Forum: Beginner Basics
Topic: NAT problem?
Replies: 12
Views: 547

Re: NAT problem?

Perhaps there is a Router God, that can see configurations over long distances??
  • 1
  • 2
  • 3
  • 4
  • 5
  • 55