Community discussions

Search found 2724 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 55
by anav
Wed Jun 19, 2019 10:18 pm
Forum: Beginner Basics
Topic: single IP constantly trying to log to my Mikrotik
Replies: 33
Views: 1195

Re: single IP constantly trying to log to my Mikrotik

Very interesting update Sir. @vecernik87 can you boil that down into simple english. It seems to this poor befuddled brain that he is saying, it doesn't really matter which way the question is solved unless one is hitting 100% load. He seems to pass on that if load is an issue, then established rela...
by anav
Wed Jun 19, 2019 3:12 am
Forum: General
Topic: US ban on some products from China ( is there a possible effect to Mikrotik ?)
Replies: 4
Views: 395

Re: US ban on some products from China ( is there a possible effect to Mikrotik ?)

Why not whine about your impending inability to shop at the dollar store where all the products come from China. Every IT manufacturer from Cisco to no name iptv remote controls come from China. Get over yourselves. The supply of products will be sourced to an appropriate vendor of an appropriate co...
by anav
Tue Jun 18, 2019 5:45 pm
Forum: General
Topic: Problem forcing specific DNS server
Replies: 1
Views: 89

Re: Problem forcing specific DNS server

Would have to see the configs to pick out the source of the issue.
by anav
Tue Jun 18, 2019 5:43 pm
Forum: General
Topic: Linux vulnerabilities: CVE-2019-11477, CVE-2019-11478, CVE-2019-11479
Replies: 8
Views: 767

Re: Linux vulnerabilities: CVE-2019-11477, CVE-2019-11478, CVE-2019-11479

None of these CVE-s are noted in the MT Security Blog and thus they are not real! ;-) On the other hand Rich1 is not a Trump kinda guy and thus the concerns are probably on the up and up. Is the thinking that its not MT config that is vulnerable but the linux kernel and thus not their problem???? Ju...
by anav
Tue Jun 18, 2019 5:29 pm
Forum: General
Topic: No routing to external network
Replies: 8
Views: 314

Re: No routing to external network

Why people insist on not showing their firewall rules is beyond me as its often key as to why some items are blocked you know as in filter rules. Shall we assume you have no filter rules?? Can one assume ether ports 2,3,4,5 connect to ports on the Cisco??? I am assuming the bridg10 traffic works bec...
by anav
Tue Jun 18, 2019 5:13 pm
Forum: Beginner Basics
Topic: single IP constantly trying to log to my Mikrotik
Replies: 33
Views: 1195

Re: single IP constantly trying to log to my Mikrotik

@anav of course you do :wink: I didn't expect anything less.
What can I say, its a beautiful day here, went rowing this morning, and I have that rare urge to ride a pony! ;-)
by anav
Tue Jun 18, 2019 3:01 pm
Forum: Beginner Basics
Topic: dual wan with an hap ac2 ?
Replies: 5
Views: 231

Re: dual wan with an hap ac2 ?

newbie question here, why are you using things like googles DNS for check gateway and not getting the closest address to the device on the ISP side via a traceroute from the router?
It it more a case of using a known (robust) unlikely to be down source.
by anav
Tue Jun 18, 2019 2:52 pm
Forum: Beginner Basics
Topic: single IP constantly trying to log to my Mikrotik
Replies: 33
Views: 1195

Re: single IP constantly trying to log to my Mikrotik

That is awesome!! Luv it.
by anav
Mon Jun 17, 2019 10:19 pm
Forum: Beginner Basics
Topic: single IP constantly trying to log to my Mikrotik
Replies: 33
Views: 1195

Re: single IP constantly trying to log to my Mikrotik

The point was I understand about the order of firewall rules and efficiency of checking packets. What I was questioning and wanted to see a reference about was this line........... " Things like tracked connections (and also address lists) are stored in a clever way so the match can be made more qui...
by anav
Mon Jun 17, 2019 6:24 pm
Forum: General
Topic: No routing to external network
Replies: 8
Views: 314

Re: No routing to external network

Get rid of the Crisco device and get a real firewall.........
Seriously, without seeing the config on the MT its hard to guess.

/export hide-sensitive file=yourconfig17jun
by anav
Mon Jun 17, 2019 6:21 pm
Forum: Beginner Basics
Topic: Help with Firewall [SOLVED]
Replies: 5
Views: 250

Re: Help with Firewall [SOLVED]

There are many far wiser on this forum (at least for MT configs) that may chime in. Patience is your friend.
by anav
Mon Jun 17, 2019 6:19 pm
Forum: Beginner Basics
Topic: Redirect Port to specific WAN [SOLVED]
Replies: 5
Views: 194

Re: Redirect Port to specific WAN [SOLVED]

If WAN2 for whatever reason (ISP problems) goes down do you want everyone to go to WAN1 for backup purposes?

This assumes wan1 and wan2 are not from the same provider, if they are you can disregard this question as both would be not available in the case of ISP failure.
by anav
Mon Jun 17, 2019 6:11 pm
Forum: Beginner Basics
Topic: dual wan with an hap ac2 ?
Replies: 5
Views: 231

Re: dual wan with an hap ac2 ?

/ip route add check-gateway=ping distance=2 gateway=8.8.4.4 target-scope=30 add check-gateway=ping distance=3 gateway=208.67.220.220 target-scope=30 add distance=10 gateway=ispgateway(secondary) target-scope=30 add distance=2 dst-address=8.8.4.4/32 gateway=ispgateway(primary) add distance=3 dst-addr...
by anav
Mon Jun 17, 2019 4:22 pm
Forum: Beginner Basics
Topic: Help with Firewall [SOLVED]
Replies: 5
Views: 250

Re: Help with Firewall [SOLVED]

Yes, thats easy.
Attend some MT Academy training sessions, or get your company to hire a real IT person, or third, hire an MT consultant.
by anav
Mon Jun 17, 2019 1:38 pm
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 37
Views: 2206

Re: Radical change coming for home and small business networking

DOCSIS=DODO bird. If you are not using fibreop by now you must have a single eyebrow! ;-)
by anav
Mon Jun 17, 2019 1:34 pm
Forum: Beginner Basics
Topic: single IP constantly trying to log to my Mikrotik
Replies: 33
Views: 1195

Re: single IP constantly trying to log to my Mikrotik

Okay that makes more sense now.
by anav
Sun Jun 16, 2019 6:09 pm
Forum: Beginner Basics
Topic: single IP constantly trying to log to my Mikrotik
Replies: 33
Views: 1195

Re: single IP constantly trying to log to my Mikrotik

Useless ref in regard to the question posed........................... looking for a reference that the router processes filter rules of accepted/related more efficiently than other firewall filter rules in general and specifically better than raw rules. If it was so important and so clear, then it ...
by anav
Sun Jun 16, 2019 6:04 pm
Forum: Beginner Basics
Topic: dual wan with an hap ac2 ?
Replies: 5
Views: 231

Re: dual wan with an hap ac2 ?

RouterOS for the most part is RouterOS meaning you can do everything on most devices. So yes dual or triple or quadruple wan is possible. You need to state your requirements more clearly however. 1. Do you want failover ( a primary and if it fails then go to secondary) 2. Shared, load balance, make ...
by anav
Sat Jun 15, 2019 10:27 pm
Forum: Wireless Networking
Topic: IPTV over Wi-Fi
Replies: 4
Views: 241

Re: IPTV over Wi-Fi

First thing I would think is suspect that the throughput of your setup is not adequate. What speeds have you measured from the second MT after the repeating. Much better do use ethernet or a direct wifi link (not repeating) such as use a pair of wireless wire (LOS) to extend wifi over 60ghz for exam...
by anav
Sat Jun 15, 2019 10:22 pm
Forum: Beginner Basics
Topic: My first Mikrotik Router - Firewall Help
Replies: 16
Views: 682

Re: My first Mikrotik Router - Firewall Help

Yes. You just have to keep LAN interface list updated. Generally when constructing some rules one should use criteria which has least possibility of spoofing. Remote attacker can easily spoof src-address but can hardly spoof ingress interface. That is GOLD advice.......... IF only MT would put gems...
by anav
Sat Jun 15, 2019 10:16 pm
Forum: Beginner Basics
Topic: single IP constantly trying to log to my Mikrotik
Replies: 33
Views: 1195

Re: single IP constantly trying to log to my Mikrotik

@pe1chl Don't get me wrong, in fact everytime MKX is wrong I do a happy dance and treat myself to a nice cold beer! BUT...... "Things like tracked connections (and also address lists) are stored in a clever way so the match can be made more quickly than by checking them all." Appears to be an assump...
by anav
Fri Jun 14, 2019 2:58 am
Forum: General
Topic: vlan bridge to port [SOLVED]
Replies: 10
Views: 414

Re: vlan bridge to port [SOLVED]

How do you bridge to another bridge???
Why not put all on same bridge LOL.
by anav
Thu Jun 13, 2019 12:04 am
Forum: General
Topic: Annoyed with Mikrotik 'Support'
Replies: 8
Views: 438

Re: Annoyed with Mikrotik 'Support'

There are also many consultants around the world that can help. Sometimes spending a bit on money relieves great stress and gets a solution working quickly. MT equipment is designed for people familiar with networking to a fairly high level. To be clear, just like 'Jon Snow' I know jack sheite (noth...
by anav
Thu Jun 13, 2019 12:01 am
Forum: Beginner Basics
Topic: i need to help
Replies: 2
Views: 158

Re: i need to help

You are asking very basic questions for someone starting a business that people will expect to be reliable and useful. For starters you should provide a diagram with the layout of the area you plan to cover. Where power can be supplied? where ethernet cabling can be provided? what line of sights you...
by anav
Wed Jun 12, 2019 11:54 pm
Forum: Beginner Basics
Topic: How to block access vlan from my local network?
Replies: 9
Views: 483

Re: How to block access vlan from my local network?

Looking at your filter rules..... For clarity you should separate INPUT CHAIN (first) and then FORWARD CHAIN. Far less confusing. /ip firewall filter add action=accept chain=input comment="Accept Related or Established Connections" connection-state=\ established,related MISSING add action=accept cha...
by anav
Wed Jun 12, 2019 11:30 pm
Forum: Beginner Basics
Topic: How to block access vlan from my local network?
Replies: 9
Views: 483

Re: How to block access vlan from my local network?

@anav The second routerboard used as access point From rb750 port 2 connect to my lan via unmanaged switch. And from switch connected to rb941 port 2 is bridge with ports(1,2,3,wlan1). From rb750 port3 assign vlan10 connected direct to rb941 bridge1 with (port4,wlan2) assigned vlan10. Is correct th...
by anav
Wed Jun 12, 2019 11:23 pm
Forum: Beginner Basics
Topic: Hacked recently
Replies: 7
Views: 645

Re: Hacked recently

Incorrect advice, first we dont know what firmware he had to begin with so its an assumption not fact if his firmware is or is not up to date. Secondly, if there is hacked firmware the only 'safe' method for an update or reset is to dowload a clean copy of the latest firmware and apply it via netins...
by anav
Tue Jun 11, 2019 6:21 pm
Forum: General
Topic: Issues with my setup
Replies: 11
Views: 418

Re: Issues with my setup

I dont see your vlans identified by any dhcp settings?
You seem to use eth ports on the router not identified on the drawing as well (nor indicate which ether port goes to the pfsense).
by anav
Tue Jun 11, 2019 6:15 pm
Forum: General
Topic: Organise MFM Lists
Replies: 0
Views: 82

Organise MFM Lists

https://mikrotik.com/mfm/software

Thanks for sending us down this link Normis. I didn't know it existed.
However there is no table of contents and the lists are not even alphabetical. Can you at least put some minimal effort into a searchable organized list.
Thanks!
by anav
Tue Jun 11, 2019 6:14 pm
Forum: General
Topic: Implementing a Blacklist [SOLVED]
Replies: 2
Views: 168

Re: Implementing a Blacklist [SOLVED]

The easiest solution.................. Thats easy..... Let someone else do all the work......... https://forum.mikrotik.com/viewtopic.php?f=2&t=137632 (for basically $10 a month, or 4 cups a coffee a month) I would be using that except I am using Axiom Shield (as I can claim it as a business expense).
by anav
Tue Jun 11, 2019 5:56 pm
Forum: Beginner Basics
Topic: Adding a non-Mikrotik Router to a Mikrotik router as a range extender.
Replies: 1
Views: 130

Re: Adding a non-Mikrotik Router to a Mikrotik router as a range extender.

What do you mean by extender? How will you connect the MT to the non-MT?
Will the non MT unit be acting as a router or simply an access point/switch etc..........
by anav
Tue Jun 11, 2019 5:45 pm
Forum: Beginner Basics
Topic: How to block access vlan from my local network?
Replies: 9
Views: 483

Re: How to block access vlan from my local network?

Quick question, it is not clear to me the purpose of the second routerboard? It would seem you are using it simply or mostly as an access point switch which is vlan aware?? If so how are you connecting the two devices together for the vlans? I am assuming LAN from the main router is coming out ether...
by anav
Mon Jun 10, 2019 8:22 pm
Forum: Beginner Basics
Topic: How to block access vlan from my local network?
Replies: 9
Views: 483

Re: How to block access vlan from my local network?

Post both configs

/export hide-sensitive file=myconfigs10jun
by anav
Mon Jun 10, 2019 4:38 am
Forum: Beginner Basics
Topic: Inter Vlan communication and inter network communication issue [SOLVED]
Replies: 10
Views: 569

Re: Inter Vlan communication and inter network communication issue [SOLVED]

@mkx thankyou for the help. It seems the problem in firewall. Firewall a mess. Have been able to solve the issue. Configuration good up and running. Now cleaning the firewall as recommended by @anav and to meet my requirements.
That is good news!!
by anav
Mon Jun 10, 2019 4:37 am
Forum: Beginner Basics
Topic: Wireless Wire (RBwAPG-60adkit) - Not working. Appreciate the help!
Replies: 7
Views: 359

Re: Wireless Wire (RBwAPG-60adkit) - Not working. Appreciate the help!

finally got them to work... honestly not sure what the deal was but happy to say they're up and running.

Thanks for the help!
Well glad you got them up and running but your feedback is not helpful. What did you do to get them to work?
We need to be able to help the next person!!!
by anav
Mon Jun 10, 2019 4:36 am
Forum: Beginner Basics
Topic: NAT problems - Xbox One and Nintendo Switch
Replies: 9
Views: 672

Re: NAT problems - Xbox One and Nintendo Switch

Hey Rodrigo,
This is a decent guide for adjusting the TP link.
https://www.dslreports.com/faq/11233

What I am not clear on is the logging in part of your users.
Do you mean to use the Access Point (radio part) of the TP links (ssid and password)?
by anav
Sat Jun 08, 2019 7:47 pm
Forum: General
Topic: Sofware VLAN/Bridge on RuterOS explained.
Replies: 52
Views: 10952

Re: Sofware VLAN/Bridge on RuterOS explained.

Suggest you have a good read (at least twice through this thread and examples to get a good understanding). https://forum.mikrotik.com/viewtopic.php?f=13&t=143620 Once you understand then the wiki here will be more useful and if you have a special case need for a hybrid port, then look at the fourth...
by anav
Sat Jun 08, 2019 7:43 pm
Forum: Beginner Basics
Topic: Help! -- Something is dropping All traffic
Replies: 2
Views: 152

Re: Help! -- Something is dropping All traffic

Without seeing any configurations on the routers, I would have to guess tiny Irish Gremlins live in your routers! ;-)
by anav
Sat Jun 08, 2019 4:13 am
Forum: Beginner Basics
Topic: 1 mikrotik, 2 ISPs, 2 LANs, can't make LANS see each other
Replies: 2
Views: 179

Re: 1 mikrotik, 2 ISPs, 2 LANs, can't make LANS see each other

You should reset to defaults and start new.
Dont add any firewall rules as the defaults work out of the box.
Then come back and post what you have.
It will be easier to discern when much cleaner.
Then after if you want to add all the xtra garbage in you can to a working config
by anav
Fri Jun 07, 2019 9:07 pm
Forum: Beginner Basics
Topic: Can't watch twitch live streams [SOLVED]
Replies: 2
Views: 162

Re: Can't watch twitch live streams [SOLVED]

I was going to say,m that one has to sit still to watch a twitch stream LOL............ Glad you found the error!
by anav
Fri Jun 07, 2019 9:06 pm
Forum: Beginner Basics
Topic: Using RouterOS to VLAN your network
Replies: 75
Views: 12440

Re: Using RouterOS to VLAN your network

@antech, this thread is to discuss the examples provided by the author. If you are having VLAN issues please start another thread. When you do I will point out the obvious error I spotted. :-) @mixig, please read through the reference from beginning to end, the answer you seek is answered within, hi...
by anav
Thu Jun 06, 2019 11:35 pm
Forum: Beginner Basics
Topic: Mark vlan on access port
Replies: 3
Views: 203

Re: Mark vlan on access port

Ahh okay so your config works you just need an explanation of the settings. I thought they were in the reference?
Well I am sure others will chime in with more detail.
by anav
Thu Jun 06, 2019 10:35 pm
Forum: Beginner Basics
Topic: Port forwarding
Replies: 2
Views: 180

Re: Port forwarding

Draw a diagram as the written explanation is very confusing.
by anav
Thu Jun 06, 2019 6:22 pm
Forum: General
Topic: hAP ac² as switch + ap
Replies: 9
Views: 499

Re: hAP ac² as switch + ap

You would probably create a bridge setup on the hapac and define your etherent interfaces and any vlans if any.
No need to create new subnets or anything else.
A diagram of what you are thinking would help that would show what subnets you wish to have and how they are distributed
by anav
Thu Jun 06, 2019 5:14 pm
Forum: Beginner Basics
Topic: guest wifi + VLAN confusion
Replies: 6
Views: 344

Re: guest wifi + VLAN confusion

Before looking at the configs........ Just to be clear on the diagrams. 1. DHCP/subnets and associated LANs/VLANs are created on the RB750. 2. The hapac is in WISP mode, if not what mode? 3. The hapac has its own LANIP on the main LAN provided by the RB750. 4. The only VLAN is 20 and its for a guest...
by anav
Thu Jun 06, 2019 5:08 pm
Forum: Beginner Basics
Topic: Wireless Wire (RBwAPG-60adkit) - Not working. Appreciate the help!
Replies: 7
Views: 359

Re: Wireless Wire (RBwAPG-60adkit) - Not working. Appreciate the help!

Hmm I don't have these units so cannot be of much help. Here is the wiki for manual setup but as warning states........ "Wireless Wire kit devices comes in pre-configured, connected pairs. Manual configuration is optional" https://wiki.mikrotik.com/wiki/Manual:Interface/W60G ON the product page, the...
by anav
Thu Jun 06, 2019 3:35 pm
Forum: Wireless Networking
Topic: RBwAPG-60adkit - no wireless multiple vlan trunk
Replies: 3
Views: 258

Re: RBwAPG-60adkit - no wireless multiple vlan trunk

Where are the addresses/subnets for all the other vlans (not vlan1)??
by anav
Thu Jun 06, 2019 3:33 pm
Forum: General
Topic: Traffic routing between isolated bridges/subnets
Replies: 3
Views: 182

Re: Traffic routing between isolated bridges/subnets

Without seeing your config I am loathe to play guessing games.
If subnets are on different bridges then they should be blocked at L2 and firewall rules should dictate access between them.
So it should work.
by anav
Thu Jun 06, 2019 3:31 pm
Forum: General
Topic: Load balancing?
Replies: 1
Views: 140

Re: Load balancing?

So conceptually speaking you want A. Use Primary Connection (not backups) as first vector (no load balancing). Failover! B. Upon failover USE Backups but in a load balance scenario between the five back up connections. Can you clarify (for backups) that you have 5 different ethernet connections from...
by anav
Thu Jun 06, 2019 3:27 pm
Forum: Beginner Basics
Topic: Mark vlan on access port
Replies: 3
Views: 203

Re: Mark vlan on access port

Your best bet is to read some decent resources....
First and foremost the best resource is this one.........
viewtopic.php?f=13&t=143620
  • 1
  • 2
  • 3
  • 4
  • 5
  • 55