Community discussions

Search found 1295 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 26
by anav
Thu Jan 17, 2019 10:17 pm
Forum: Beginner Basics
Topic: What Type of WAN Connection Do I HAVE......
Replies: 0
Views: 14

What Type of WAN Connection Do I HAVE......

I have two wan connections a straightforward Cable connection where I can pull multiple dynamic IPs (but that dont change often). The router easily connects and pulls an IP, no fuss no muss putting 0.0.0.0/0 in for default gateway works etc...... The other connection is via Bell Fiber. The line come...
by anav
Thu Jan 17, 2019 10:09 pm
Forum: General
Topic: The time and date refuses to be set properly
Replies: 1
Views: 47

Re: The time and date refuses to be set properly

I had a similar occurrence with an RB450Gx4 unit a couple of weeks back.
I ended up resetting to defaults, reloading my rules and it worked.
by anav
Thu Jan 17, 2019 10:02 pm
Forum: Beginner Basics
Topic: How to shut down Router before Power Off?
Replies: 9
Views: 185

Re: How to shut down Router before Power Off?

I know why Sebastia, if the op shuts down power to the mikrotik every night, in about 300,000 years he/she will be able to afford to buy your used Alfa Romeo ;-)
by anav
Thu Jan 17, 2019 9:59 pm
Forum: Beginner Basics
Topic: How to forward ports to multiple WAN interfaces?
Replies: 3
Views: 78

Re: How to forward ports to multiple WAN interfaces?

Solar, that is premature as we do not know what kind of WAN scenario the OP is envisioning? If I told you it was 1 Main WAn with 5 for failover (unlikely) OR 1 Main WAn and 5 for direct public IPs to servers (could be) OR. etc..... You are probably right but it bugs me to know end when people much s...
by anav
Thu Jan 17, 2019 9:38 pm
Forum: Beginner Basics
Topic: How to completely separate two networks? [SOLVED]
Replies: 6
Views: 182

Re: How to completely separate two networks? [SOLVED]

Thanks, but thats because I know very little and thus can only keep it simple. If I knew any more I would probably give dangerous advice. :-)
by anav
Thu Jan 17, 2019 9:34 pm
Forum: Beginner Basics
Topic: Multiple networks over rb3011
Replies: 5
Views: 123

Re: Multiple networks over rb3011

Hmmm, Okay, then perhaps I suggest you don't need three network and vlans. You only need one network as the separate LANs and VLANs do not provide and extra value from a logical standpoint. In other words I don' understand, why you need to create such a setup unless you are doing for the learning fu...
by anav
Thu Jan 17, 2019 9:32 pm
Forum: Beginner Basics
Topic: How to shut down Router before Power Off?
Replies: 9
Views: 185

Re: How to shut down Router before Power Off?

Generally it doesn't hurt to simply cut the power. Log will show a warning about router being restarted without proper shutdown afterwards ... You can cleanly shutdown the router, there are actions in both GUI and CLI. My guess is that vast majority of RB owners don't bother switching them off regu...
by anav
Thu Jan 17, 2019 9:25 pm
Forum: Beginner Basics
Topic: Can ping router, but cannot ping or connect to WAN
Replies: 6
Views: 119

Re: Can ping router, but cannot ping or connect to WAN

What I dont see is on the
/ip dhcp server-network, a typical reference to dns???

I do not remember what the IP dhcp client shows for normal config export.
by anav
Thu Jan 17, 2019 9:22 pm
Forum: Beginner Basics
Topic: Multiple networks over rb3011
Replies: 5
Views: 123

Re: Multiple networks over rb3011

Hi @anav, thank you for your response. 1) Thank you, now I'm running RuterOS 6.43.8 :) 2) Yes, I have one LAN with private IPs and DHCP and two VLAN (VLAN200 and VLAN10) with static IPs. 2) All networks need to get to the gatway (Ethe1). 3) All to all, from LAN I should be able to get to the VLANs ...
by anav
Thu Jan 17, 2019 2:06 pm
Forum: Beginner Basics
Topic: How to completely separate two networks? [SOLVED]
Replies: 6
Views: 182

Re: How to completely separate two networks? [SOLVED]

Using two different bridges, One Lan on a bridge the other not on a bridge Using one bridge but two vlans Are some ways to avoid layer2 connectivity and thus the ROUTER can be firewalled at layer3 to block any traffic. Having a look at your config as mkx stated will show if there are firewall issues...
by anav
Wed Jan 16, 2019 6:34 pm
Forum: General
Topic: Router for a newbie
Replies: 4
Views: 173

Re: Router for a newbie

The RB4011 with wifi is a great all-in-one unit for testing, ethernet and wifi.
What I am not sure of however, is how mikrotik handles Open VPN.
by anav
Wed Jan 16, 2019 6:31 pm
Forum: General
Topic: Which Router should i buy for a small web hosting company?
Replies: 3
Views: 195

Re: Which Router should i buy for a small web hosting company?

I am just here to say that your requirements are not well defined or thorough enough for anyone to give an accurate answer, a rough swag yes. Just my opinion! Will any logging be required? Will any reporting be required? Will there be any fail over or power failure work arounds (transfer of traffic ...
by anav
Wed Jan 16, 2019 6:23 pm
Forum: General
Topic: Dual wan fail over, fail back not working
Replies: 8
Views: 267

Re: Dual wan fail over, fail back not working

My IPs are dynamic but really dont change unless I renew release or change routers etc............... So basically static for the most part. I imagine if they did a system change at their end that may also cause some IP modifications. I will change mine to src soon.
by anav
Wed Jan 16, 2019 6:12 pm
Forum: General
Topic: Anybody ues AT&T Gigabit Fiber with Mikrotik RouterOS?
Replies: 6
Views: 387

Re: Anybody ues AT&T Gigabit Fiber with Mikrotik RouterOS?

pcunite, I havent read the links but its highly likely that that authentication is strictly for the TV or perhaps TV, telephone services. I use VOIP for home phone and digital streaming so I dont care. I did have TV temporarily and when I did I used the modem gateway for the initial connection and t...
by anav
Wed Jan 16, 2019 6:08 pm
Forum: Beginner Basics
Topic: Two cAP , 1 hAP ac lite T
Replies: 1
Views: 34

Re: Two cAP , 1 hAP ac lite T

I have a hex router and 2 cap ACs. They are easy to configure out of the box as their default setup is excellent. When I get home I can post my config if that helps.......... In the meantime you have to figure out if you will need more than the two networks the cap provides (1x 2.4Ghz, and 1x5Ghz). ...
by anav
Wed Jan 16, 2019 6:01 pm
Forum: Beginner Basics
Topic: Home/office/guest with mikrotik, I'm not certain on how to set this
Replies: 4
Views: 144

Re: Home/office/guest with mikrotik, I'm not certain on how to set this

I personally think its much better security wise to have total control over what comes in and out of the router to devices behind the router. Double NAT means that the IP the modem/gateway gives you is a private IP already and thus if you want to have the ability for outside users to gain access to ...
by anav
Wed Jan 16, 2019 5:50 pm
Forum: Beginner Basics
Topic: Multiple networks over rb3011
Replies: 5
Views: 123

Re: Multiple networks over rb3011

Ensure you have latest firmware is a standard statement. :-) so basically you have a private LAN and you wish to have to other LANs via VLAN. One bridge is required. Do you require LAN to WAN traffic Do you require VLAN to WAN traffic Do you require any LANIPs to have access to any VLANs or VLANIPs?...
by anav
Wed Jan 16, 2019 5:29 pm
Forum: Beginner Basics
Topic: Recommended DNS Approach.
Replies: 4
Views: 179

Re: Recommended DNS Approach.

redirect - replaces destination port of an IP packet to one specified by to-ports parameter and destination address to one of the router's local addresses
I guess since I have destination port assigned but no TO-PORTs, the router as per other nat rules assumes the to-ports is the same.
by anav
Wed Jan 16, 2019 5:20 pm
Forum: Beginner Basics
Topic: Question on configuration of src-nat on bridge with trunk ports [SOLVED]
Replies: 9
Views: 192

Re: Question on configuration of src-nat on bridge with trunk ports [SOLVED]

Seems a tad complicated and a diagram would help but are you saying each linux computer/device has two ethernet cards and two ethernet jacks for traffic?
By the way, have you ensured you have the latest version of firmware?
by anav
Wed Jan 16, 2019 5:13 pm
Forum: Beginner Basics
Topic: Home/office/guest with mikrotik, I'm not certain on how to set this
Replies: 4
Views: 144

Re: Home/office/guest with mikrotik, I'm not certain on how to set this

Why would you use the ISPs modem and router for anything and you have given the ISP direct access to your traffic coming from wirelessly connected devices? In addition you will suffer from double nat. Can you put the gateway in bridge mode and thus give the Hex router a public IP and thus keep the I...
by anav
Wed Jan 16, 2019 5:09 pm
Forum: Beginner Basics
Topic: Block/Allow website for specific IP
Replies: 1
Views: 57

Re: Block/Allow website for specific IP

Not sure if this will work but create a firewall address list. add control.domain.com list=AccessToDomain Assuming you have two things a. LAN to WAN filter rule for all traffic (forward chain) b. Drop all else filter ruler for all traffic (forward chain) /ip firewall filter add chain=forward action=...
by anav
Tue Jan 15, 2019 9:52 pm
Forum: Beginner Basics
Topic: Recommended DNS Approach.
Replies: 4
Views: 179

Re: Recommended DNS Approach.

Well for internal clients all the DHCP servers and gateways are set such that they should all be pointed to theire respective gateway which then point to my set of IP DNS servers. If those can still be manually bypassed by someone manually setting up a proxy of some sort or perhaps their own DNS ser...
by anav
Tue Jan 15, 2019 9:42 pm
Forum: Beginner Basics
Topic: Guest VLAN help required
Replies: 24
Views: 728

Re: Guest VLAN help required

Thanks much!!! /interface bridge vlan add bridge=HomeBridge tagged=HomeBridge,ether3-WAP untagged=ether2-Guest vlan-ids=99 Perhaps it's not obvious, the config line is about vlan-id. But you can rewrite config to 3 commands, one per port/vlan and if you group commands by port, it'll become more appa...
by anav
Tue Jan 15, 2019 9:34 pm
Forum: General
Topic: Allow all traffic between one LAN and WAN interface
Replies: 2
Views: 86

Re: Allow all traffic between one LAN and WAN interface

No idea but you have to conduct 3 separate and sometimes related rules. a. NAT the traffic appropriately b. Route the traffic appropriately. c. If necessary apply firewall filter rules to allow traffic to flow Sometimes one has to use mangle type rules to correctly identify the traffic to be routed.
by anav
Tue Jan 15, 2019 9:27 pm
Forum: General
Topic: Anybody ues AT&T Gigabit Fiber with Mikrotik RouterOS?
Replies: 6
Views: 387

Re: Anybody ues AT&T Gigabit Fiber with Mikrotik RouterOS?

You dont need the att modem/gateway because its not really a modem at least for the internet, all it does is provide a ready made vlan setting for you. I have my mickrotik directly connected to the ONT, ONT to me means fiber to ethernet modem. Its this device that needs to be registered to your acco...
by anav
Tue Jan 15, 2019 9:08 pm
Forum: Beginner Basics
Topic: Performance issue with Bell FTTH 940mbps/940mbps internet on Mikrotik CRS328-24P-4S+ (Bell Home Hub bypass)
Replies: 8
Views: 230

Re: Performance issue with Bell FTTH 940mbps/940mbps internet on Mikrotik CRS328-24P-4S+ (Bell Home Hub bypass)

Good choice!! I think my ONTs old and new are of the lucent alcatel variety by the way. The Bell support should end at the ONT anyway so not a concern. The technician has to specially program the ONT to work for your particular account and ont device etc........ Once thats done what you do after is ...
by anav
Tue Jan 15, 2019 9:01 pm
Forum: Beginner Basics
Topic: Recommended DNS Approach.
Replies: 4
Views: 179

Recommended DNS Approach.

I was reading a link from a MUM that contained the following advice......... THIS PART WAS LABELLED WRONG! /ip dns set allow-remote-requests=yes servers=8.8.8.8 ● /ip firewall nat add action=masquerade chain=srcnat out-interface=Internet ● /ip firewall filters add action=fasttrack-connection chain=f...
by anav
Tue Jan 15, 2019 8:43 pm
Forum: Beginner Basics
Topic: Forcing single URL to use specific WAN
Replies: 8
Views: 247

Re: Forcing single URL to use specific WAN

Hmm okay, that elicited a response that was incomprehensible so I will rephrase the question LOL. Will the rule I created based on your example work? Which is more efficient. I have not setup any mangle rules by the way and your example shows no reference (preferred source etc) or link to any mangle...
by anav
Tue Jan 15, 2019 8:39 pm
Forum: General
Topic: Dual wan fail over, fail back not working
Replies: 8
Views: 267

Re: Dual wan fail over, fail back not working

So Sebastia, what do you recommend if the Authors Two WANIPs are dynamic/////////////?? typical recursive setup............. /ip route add check-gateway=ping distance=2 gateway=8.8.4.4 add distance=2 dst-address=8.8.4.4/32 gateway=DynamicFiberGateway scope=10 (primary) add distance=3 gateway=Dynamic...
by anav
Tue Jan 15, 2019 7:26 pm
Forum: General
Topic: Vlan Routing Problem
Replies: 12
Views: 679

Re: Vlan Routing Problem

Well we should be talking apples to apples. Suggest you update your router to 6.43.8 before continuing. Confirm following ether2 - connected to managed switch in your diagram, only need vlan5 traffic on this port ether3 - connected to what looks like an unmanaged switch to connect to PCs only runnin...
by anav
Tue Jan 15, 2019 7:20 pm
Forum: Beginner Basics
Topic: Guest VLAN help required
Replies: 24
Views: 728

Re: Guest VLAN help required

haha okay so no reason other that those are the only offered options LOL. So I understand why PVID=99 for ether2. It is to ensure all untagged packets coming from guest computers are tagged by the router when entering ether2 port. The ingress filtering ensures that no other vlan tagged traffic is al...
by anav
Tue Jan 15, 2019 7:12 pm
Forum: Beginner Basics
Topic: Forcing single URL to use specific WAN
Replies: 8
Views: 247

Re: Forcing single URL to use specific WAN

add action=lookup dst-address=<ip mail server> table=static-wan1 Can you break down how that works. I have a fail over dual WAN scenario and the mail server is on the secondary WAN, Thus i created a route rule so that this works in my case....... /ip route add check-gateway=ping distance=2 gateway=...
by anav
Tue Jan 15, 2019 7:00 pm
Forum: Beginner Basics
Topic: Performance issue with Bell FTTH 940mbps/940mbps internet on Mikrotik CRS328-24P-4S+ (Bell Home Hub bypass)
Replies: 8
Views: 230

Re: Performance issue with Bell FTTH 940mbps/940mbps internet on Mikrotik CRS328-24P-4S+ (Bell Home Hub bypass)

Just a heads up, when they upgraded me with the single unit (wifi, powersupply, ont), I asked can you put this thing in bridge modem as I want to get a public IP and run my own router, not be using Bells router. The tech said its possbily flaky when trying to do that. Luckily they have another basic...
by anav
Tue Jan 15, 2019 2:38 pm
Forum: Beginner Basics
Topic: Performance issue with Bell FTTH 940mbps/940mbps internet on Mikrotik CRS328-24P-4S+ (Bell Home Hub bypass)
Replies: 8
Views: 230

Re: Performance issue with Bell FTTH 940mbps/940mbps internet on Mikrotik CRS328-24P-4S+ (Bell Home Hub bypass)

Interesting discussion I recently got bell Fiber but not ppooee and yes using vlan35. 1. Create ethernet interface 2. Create vlan interface under the ethernet interface, 3. all other rules point to the vlan interface. With a hex router getting 400up 300 down (It maxes out for sure) With an rb450gx4 ...
by anav
Mon Jan 14, 2019 11:40 pm
Forum: Beginner Basics
Topic: Guest VLAN help required
Replies: 24
Views: 728

Re: Guest VLAN help required

What's intended purpose of ether2? Wired access port to GuestAccess? In that case it should be /interface bridge port add bridge=HomeBridge comment="Guest, wired" frame-types=admit-only-untagged-and-priority-tagged pvid=99 ingress-filtering=yes interface=ether2-Guest /interface bridge vlan add brid...
by anav
Mon Jan 14, 2019 10:31 pm
Forum: General
Topic: Firewall: dynamic ip lookup instead of static address list?
Replies: 20
Views: 498

Re: Firewall: dynamic ip lookup instead of static address list?

Great explanation Mozerd! Much thanks. I hope the dude that lives in the little red car is paying attention!!
by anav
Mon Jan 14, 2019 9:13 pm
Forum: Beginner Basics
Topic: Guest VLAN help required
Replies: 24
Views: 728

Re: Guest VLAN help required

So MKX....... /interface bridge port (dont add ports if not used in general) add bridge=homebridge comment=defconf interface=ether6 add bridge=homebridge comment=defconf interface=ether7 add bridge=homebridge comment=defconf interface=ether8 add bridge=homebridge comment=defconf interface=ether9 add...
by anav
Mon Jan 14, 2019 7:12 pm
Forum: General
Topic: Firewall: dynamic ip lookup instead of static address list?
Replies: 20
Views: 498

Re: Firewall: dynamic ip lookup instead of static address list?

None, sorry. I dont have time to play silly games with lists. I wasted lots of time looking at various lists and attempting smallish items and realized I was only fooling myself if I thought I was actually doing something productive LOL. Good luck though!
by anav
Mon Jan 14, 2019 7:11 pm
Forum: General
Topic: Whatsapp video being blocked
Replies: 2
Views: 163

Re: Whatsapp video being blocked

Wrong, I use whatsapp all the time behind my mikrotik. It has to be your ISP. Looking at your rules its hard to figure out what you are doing wrt to DNS but if it works for you great. :-) I didnt realize 208.67.222. 123 or 208.67.220. [flash=]123[/flash] were valid servers......... I thought they we...
by anav
Mon Jan 14, 2019 6:49 pm
Forum: General
Topic: Firewall: dynamic ip lookup instead of static address list?
Replies: 20
Views: 498

Re: Firewall: dynamic ip lookup instead of static address list?

There aint new fish in the pond, its fetch and script remove and add, and until known limitations are removed not sure more can be done. Mozerd has eked out performance optimums with his setup is my understanding. For a few pennies (or cups of coffee a month) the MOAB is excellent value for most of ...
by anav
Mon Jan 14, 2019 5:52 pm
Forum: Beginner Basics
Topic: Route vlans
Replies: 3
Views: 95

Re: Route vlans

Well, asking specific questions without providing your config is not all that helpful
If you want me to guess, then I suspect you need firewall rules allowing it (FORWARD CHAIN).

/export hide-sensitive file=mylatestconfig
by anav
Mon Jan 14, 2019 5:50 pm
Forum: Beginner Basics
Topic: Route vlans
Replies: 3
Views: 95

Re: Route vlans

Well, asking specific questions without providing your config is not all that helpful
If you want me to guess, then I suspect you need firewall rules allowing it (FORWARD CHAIN).
by anav
Mon Jan 14, 2019 5:41 pm
Forum: Beginner Basics
Topic: How to forward ports to multiple WAN interfaces?
Replies: 3
Views: 78

Re: How to forward ports to multiple WAN interfaces?

Hi there not sure what you mean but for example I have two dynamic WANIPs one cable and one bell fiber. I have a masquerade rule for both. Be aware these rules do no routing, it simply tells the router that if traffic goes out ISP one, it should be given the associated WANIP and similarly if it the ...
by anav
Mon Jan 14, 2019 5:23 pm
Forum: Beginner Basics
Topic: Guest VLAN help required
Replies: 24
Views: 728

Re: Guest VLAN help required

For the reported issue: Try setting VLAN=1 for the home regular users (not vlan=0) and see what happens. I just noticed something else. In that your ether2 interface may allow non vlan99 traffic ++++++++++++++++++++++++++ add bridge=homebridge comment=defconf interface=ether2 frame-types=admit-only-...
by anav
Sun Jan 13, 2019 5:52 pm
Forum: Beginner Basics
Topic: Priority-only VLAN tags (VLAN-ID 0)
Replies: 8
Views: 323

Re: Priority-only VLAN tags (VLAN-ID 0)

Hey Sebastia is it just me or is that a new avatar.................... I mean, why post here when you could be driving LOL.
by anav
Sun Jan 13, 2019 4:59 am
Forum: General
Topic: RB2011 configuration question
Replies: 4
Views: 239

Re: RB2011 configuration question

Yes, the glaring error is that you are using old firmware. Update to 6.43.8.
by anav
Sun Jan 13, 2019 4:54 am
Forum: Beginner Basics
Topic: Port forward
Replies: 2
Views: 165

Re: Port forward

From your code snippet is seems people are coming to your router on port 3333 and you wish to have it translated to 4444. What you need is a generic firewall filter rule that enables the router to pass through DSTNAT connections. /ip firewall filter add action=accept chain=forward comment=\ "Allow P...
by anav
Sat Jan 12, 2019 5:06 pm
Forum: General
Topic: Mark the traffic for YouTube, Facebook, etc.
Replies: 5
Views: 1107

Re: Mark the traffic for YouTube, Facebook, etc.

So the example catches google.video.com but what about all the ones we dont know?
by anav
Sat Jan 12, 2019 3:39 pm
Forum: Beginner Basics
Topic: Guest VLAN help required
Replies: 24
Views: 728

Re: Guest VLAN help required

True enough, but there is merit in understanding that the default route exists for a reason (checkbox) and what the route means and that its separate but required from NAT either way etc........... I was trying to find a post I think you had made in another thread but couldnt find it, showing differ...
by anav
Sat Jan 12, 2019 3:32 pm
Forum: Beginner Basics
Topic: cAP ac / v6.40.4 - frequent disconnects?
Replies: 10
Views: 545

Re: cAP ac / v6.40.4 - frequent disconnects?

Then we should talk more about physics LOL. One of my potential future son-in-laws is currently doing a masters in Physics and it makes for interesting dinner conversation.
  • 1
  • 2
  • 3
  • 4
  • 5
  • 26