MikroTik

jagowan

HI,

Mikrotik V 3.10 support Broadcom NetXtreme BCM5702X Gigabit Ethernet ?

jagowan

To all, I have strange situation with mikrotik as gateway. This is my ilustration [client PC] <----> [Mikrotik Gateway] <----> [Linux] 1. Client PC - ip 172.17.17.8 netmassk 255.255.255.240 - gateway 172.17.17.1 2. Mikrotik gateway - ip ether1 172.31.31.1 netmask 255.255.255.252 - ip ether2 172.17.1...

jagowan

to All, I have 2 Mikrotik Router installed in each x86 PC base. Router1 o/s v3rc09 with 4 vlan on ether0 (vlan-name= vlan1 until vlan4) Router2 o/s v2.9.46 with 4 vlan on ether0 (vlan-name= vlan1 until vlan4) I have different result for torch each master vlan interface (eth0) in both Router1 and Rou...

jagowan

Hi,
I've have Hotpost server with DOM o/s lv 4 mikrotik v.3.0RC11 installed on PC. I've found something wrong in capturing rx/tx rate in /ip hotspot. There are difference value with real trafic. Maybe some one can explain to me.
Here my capture :

Thanks

jagowan

using queue simple or tree

/queue simple add target-addresses=192.168.50.22 max-limit=256000/256000

jagowan

maybe you can try this example /tool user-manager credit add name=15m-unlimitedvoucer subscriber=admin time=1y full-price=1000 /tool user-manager user add name=bina password=bina uptime-limit= 15m add-credit= 15m-unlimitedvoucer subscriber=admin this configuration allow you to make user "bina&q...

jagowan

try to check DNS configuration and what kind of your WAN connection?

jagowan

web key?

jagowan

There's an example for PCQ used in wiki

http://wiki.mikrotik.com/wiki/PCQ_Examples

rgrds

jagowan

usually -95 shown if the link in idle state, please try send some trafic passtrough that wds.

jagowan

He5x, i think there're different wae

.. thanks anyway

jagowan

I've test to change ttl = 1, and seemly work to prevent my wireless router to share internet connections. The illustration is : Internet <----> MT Hotspot <----->AP <----> MT wireless client <---> my laptop on MT Hotspot i aplied rule : /ip firewall mangle add chain=postrouting out-interface=ether2-...

jagowan

Hmm... change TTL = 1, i' have never tried this option yet, but soon I'll try. So far as i explore this forum, i found some interesting topic that similiar problems.

http://forum.mikrotik.com/viewtopic.php ... change+TTL

rgrds

jagowan

userman installed on that RB112?

jagowan

maybe that is my stupid question, i'm sorry, "how to improve alignment"

jagowan

idle-timeout (time | none; default: none) - idle timeout (maximal period of inactivity) for authorized clients. It is used to detect, that client is not using outer networks (e.g. Internet), i.e., there is NO TRAFFIC coming from that client and going through the router. Reaching the timeout, user w...

jagowan

The problem::: All other users and/or computers/devices connecting to linksys router after the first client logs in can now get free internet, as they are not prompted with sign in page. Because they have internet sharing connections from the router (nat), so, everyone connected with that router ha...

jagowan

simple firewall configuration like this :

/ip firewall filter add chain=forward p2p=all-p2p action=drop time=00:00-00:00,sat,fri,thu,wed,tue,mon

put on top configuration.

rgrds

jagowan

Cmit, me to plz

dianseh[at]sixnezer[dot]com thanks

jagowan

what about your PC firewall? have you check firewall not installed on that PC? or have you check ping from PC to RB?

jagowan

I currently have a Mikrotik AP and I can get to my Wireless IP's of 192.168.8.0/24 and the Ethernet (dhcp, File server etc) on 10.50.0.0/24 network. But my station can talk to anything as well but I can't get a DHCP Server address from my 10.50.0.252 Windows 2003 server. Also I can't ping my laptop...

jagowan

who make vpn request? Client or Router ?

jagowan

hi all

Want to know if it is possible to route let say port 2000 to this gateway "y" and port 20001 to gateway "z"

without to change the gateway

thanks
vincent

Request from LAN or from Router ?

jagowan

it seems routing not bridge?

jagowan

if i'm not mistake, what do you want is transparent bridge where network A and network B have same subnet. This is done with WDS mode or eoip tunnel.

http://wiki.mikrotik.com/wiki/Transpare ... wo_Network

rgrds

jagowan

if only in rule above you mention I don't need to add anything else it will work find ,if i add rule 11 X ;;; drop everything else chain=forward action=drop because with rule 11 disable, your router firewall in state accepting all trafic that not filtered by your firewall list. then I have to add t...

jagowan

i think generate dynamic firewall bassed dhcp leased is not simple way, but if you only want to allow people who connected DHCP not static ip have internet connection, managing radius authentication and add arp leases and configure arp reply-only is enough.

rgrds

jagowan

Your cisco have to wds enable in configuration and accept interconnection with Your MT WDS.

jagowan

If I'm not mistake, enabling rule 11 make all trafic from your LAN can not passtrough Router BOX. You must add at least 1 rule to filter your LAN request. example : /ip firewall filter add chain=forward src-address=xxx.xxx.xxx.xxx in-interface=ether-LAN action=accept note : move this rule to number ...

jagowan

In the case it may be impossible to create working redundant link. You have to change routerA an Catalyst settings to use OSPF (different VLAns for main and bakup link and new interface on routerA) or for STP link you have to be sure the Catalysts ports 2 a 3 use STP (and you may require to define ...

jagowan

Use no bonding. Configure the devices so there will be 2 transparent links between the Catalyst and MT router B. Then try to use STP (Spanning Tree protocol). Better way is to change the topology to have a cisco switch on each side and use RSTP (Rapid STP - much faster convergence = few seconds ver...

jagowan

1) Bonding requires two device to work.
2) What is the problem with routing configuration for ether1-intel, ether2-onboard addresses ?

1) Yes I know
2) We just have single ip addres for WAN (directly to Router A) 192.168.0.2/30

jagowan

I'm not sure this is correct configuration or not, i'm just looking for failover with 2 lokal link shown in picture and i found "bonding" documentation in Google. So, i want to try "bonding" methode in my Mikrotik Router. As my subject, i want to know right configuration. Maybe i...

jagowan

No, I'm not asking about router interface, but I'm asking for the second device that terminates bonding interface on the other end (Is it switch ?).

Hmmm... i think switch

jagowan

What is your second device for the bonding ? [admin@MikroTik] > /interface bonding print Flags: X - disabled, R - running 0 R name="bonding1" mtu=1500 mac-address=00:04:AC:36:4B:5B arp=enabled slaves=ether1-intel,ether2-onboard mode=balance-xor primary=none link-monitoring=mii-type2 arp-i...

jagowan

Hmm, bonding can't used for this scenario ?

jagowan

How do you use bonding (together with the switch) ? very easy configuration is the following, main gateway to Ether2 and check-gateway=ping, secondary gateway to Ether1 address and distance=2. If I'm not mistaken switching should occur after 5/6 unsuccessfull pings (as main gateway will be disabled...

jagowan

we just want to use secondary link (wireless) in emergency only, not for balanced trafic, this day i have configure my Mikrotik Router B with bonding and fail over link can working properly, but.... i can't see the fix delay for switching from primary to secondary link, this is about 1sec until 40se...

jagowan

I think routing is goint to be more easy configuration scenario to accomplish, as router A is Cisco.

Admin of Router A just give me instruction about unplug and plug the ethernet connector from 2 my local link to their catalist port that have same vlan group.

jagowan

Could you give information about connection between RouterA (I assume MikroTik) and Switch. Router A is Cisco Router with 1 fastethernet that connected to catalyst cisco manageable switch. Router A To Router B have 2 local link which have same vlan id in catalyst (id=10). I'm not exactly known abou...

jagowan

I have 2 Router that connected with 2 local link. I want to make failover procedure using bonding methode on mikrotik Router B. My Question is : How to make this design working with using bonding methode. No routing. Secondary Link (wireless) used if Primary Link fail and back to Primary Link if Pri...

jagowan

if i'm not worng, maybe it's mean in terminal mode. The command is /system ssh xxx.xxx.xxx.xxx user=username

jagowan

i have same probelms

jagowan

what kind of game that have problem?

jagowan

have you check the mac address each EoIP ? maybe there're have the same one.

jagowan

I've VPN server at MT box and using local ip pool address for remote and never using proxy-arp. It work fine for me to make vpn access from out there to reach my private network.

jagowan

For basic blocking by name, use the OpenDNS dns service. For hotspot clients set it in the router's DNS client. For Std access, use it in DHCP (hand it out).. Place a block on remote DNS requests... This is an about 80% fix, as access by IP is still not blocked. A cool feature would be a reverse DN...

jagowan

use redirect port if your webserver using private ip, and it's normaly done without any advanced configuration if your webserver using public ip.

jagowan

make sure from MT have valid ip DNS where can resolve any domains on the world

jagowan

I have RB112 + CM9 with 15dbi Omni AP mode work on 2,4Ghz installed on my network. Everything functioned well, but one day a problem occured when one of my cutomers is doing/having a video teleconference by using H.323 protocol. The problem is that my MT is oftenly automatically restarting during ma...

Search found 50 matches