MikroTik

nitrium

Maybe if you separate the hotspot on another interface using VLAN, it should stop messing with your other devices. But I can be wrong about this!!!

nitrium

Yeah, you are right dude. Its working now. Thx very much!

nitrium

Hi again, as I could track here, the problem is that the pcq is getting the substreams by src-address, but if the client opens multiple connections for a download, even if the src-address is the same, the pcq queue will get one substream for every connection and give it the pcq-rate defined. Thats n...

nitrium

Hi there, Im having some problems with my queue trees. I mangled the packets from PPPoE and this is working fine. The problem is that even if I set a pcq tree with 512k rate, the client just dont get the limitation. It goes wild and starts getting all my bandwidth. Why is it happening? I will post m...

nitrium

Check your gateway and make sure it is reachable by the VLAN interface also. I mean, it looks like your VLAN is working fine but dont find a route to the outer world.

nitrium

Thx Rich, this make me feel more confortable since I know this setup is working for someone, Now I will just try some setups on the routers that are bridged since the problem probably is about tagging packets to the right VLAN so the PPPoE concentrator receives them!

Cya.

nitrium

Hi again, just passing by to see if anyone has a solution. I will try some options like virtualizing ROS and creating Virtual interfaces on the VM to act as the VLANS but without ID, the problem is that everytime I add a new interface I need to restart the VM to make the System recognize it. PPPoE o...

nitrium

hi there, Im showing the config Im using! 0 R WAN-20MB ether 1500 1 R InterServers ether 1500 2 R APs ether 1500 1600 1600 3 R LAN ether 1500 1600 1600 4 R RB-Wi vlan 1500 1596 5 R Clientes Wireless vlan 1500 1596 The Clientes Wireless is the interface I want to place PPPoE concentrator over. It don...

nitrium

Hi there, Im trying to make my PPPoE concentrator to work over a VLAN. Right now its directly on the interface but since Im starting to sell dedicated links its interesting to get all my PPPoE clientes on a VLAN and not directly on the ether interface because I wanna QoS and shape the bandwidth of m...

nitrium

You have to agree with me, I got some attention with that last reply of mine... Well, now I can dig up some solution based on your reply! Thx dude and I was really desperate!!!

nitrium

Really? No one ever had this problem? No one knows nothing about this? And for sure no one is willing to help!!!!!! At least if no one knows nothing, say so. This problem is really annoying and since Im using RADIUS, when it happens my users cant auth... What can it possibly be?????????????? Im tryi...

nitrium

Come on guys.... any suggestion so I can fix this? I tried to upgrade to version 4.17 stable... guess what.... same problem! This is complete nonsense. It just stop working on the IP its using and I have to change the IP so it can work nice again for some time!!!!!

nitrium

Any solution to this problem? I cant figure out what is the cause of this problem!!!

nitrium

Hi there, I have a problem that is really annoying. All my RB433 with ROS v 4.16 are acting the same way. Its working fine and suddenly the IP stops responding and I have to access it by MAC. Then when I try to ping from it to my other routers or any valid IP I get "net prohibited" error m...

nitrium

I think this topic shall continue because im pretty sure there is a lot more ppl with the same question unanswered!

nitrium

Hi there, Im wondering if when I have several clients on a interface wireless and some clients are at 54MB and others at 11MB, this mean all clients would be at 11MB or the hardware can simultaneously send data at 54MB to one client and at 11MB to another? Im asking because Im trying to stabilize al...

nitrium

Ok, but since I dont have that 4 interfaces in bridge, and I want a VLAN to me also so I can split 2MB from my 10MB link for the client, how can I set the 3 interfaces(LAN, APs and PROXY/RADIUS) to use the same VLAN(mine) and set the APs to use the clients VLAN also?

nitrium

So in practice, I have to route the block of IPs I want to the VLAN that will go to the client I want? And place the VLAN on the APs interface, since the client will connect on that interface. Is that right?

nitrium

Hi there. Im new on VLANs and would like some ideas!!! I have 4 eth interfaces not bridged and its like that: WAN LAN APs PROXY/RADIUS the WAN has my valid IP Blocks. I want to know how can I set a VLAN to separate my link(currently 10MB) into separate links. Lets say that I need to serve a client w...

nitrium

I experienced this problem some time ago, it has something to do with the global queue setting, since its a dinamic IP in the PPPoE interface it goes after the HTB and not before if Im not mistaken.

nitrium

Actually, two versions would be very interesting. One free of charge and another with more features with a small fee! Anyways Im almost ending my engineering course so I can use some help from my teachers to start the project!

nitrium

Actually the pppoe profile will be obeyed until the packets fall into the queue tree rule, then it will obey that rule instead of the pppoe profile. Anything that dont fit at queue tree rule will follow the rate setted at the pppoe profile. Any problem just post here again

Cya...

nitrium

Thx very much guys, I will see what solution I will use and consider your sugestions. In the meanwhile I will project my own system also to see if I can make something nice

Anyway I will post here any progress I have, Cya around ppl!

nitrium

I didnt liked the interface of dialupadmin... I was trying to use daloradius instead, but maybe I shall try something like MyAuth3, unfortunately its paid! Thx anyway guys!

nitrium

Hi again... Im not that good at queues too but I think if you just put max-limit at 20M and dot put a limit an user with PPPoE account limited to 512K can get no limit when it goes by the queue tree because it will be limited by 20M and for sure the client dont have a 20M interface beetween you and ...

nitrium

Im from Brazil, as I see you dont have to modify your profile at PPPoE since queue tree will be obeyed over simple queues when the packets are identified as being part of one q-tree. I used cache full for thundercache proxy here and when it passd over the q-tree, even if my profile gets 512k as down...

nitrium

Well actually there is a lot of places on earth that dont sell large links and dont have good coverage, so the solution is a WISP with this kind of link to supply the demand. I also sell 256k and 512k links to my clients and there is a lot of people seeking for the services! And about the topic, why...

nitrium

I already use it, I want a 3rd party program to use in a dedicated server, not inside my box!

nitrium

Hi there, I´m wondering if there is any good program opensource to manage all the stuff above with FreeRadius and integrate with Mikrotik. Something that manage my client data and all about authentication!

nitrium

Hi there, I have figured out the problem. Well, the actual problem was in the wireless interfaces bridged after the PPPoE concentrator, it was droping the clients and reconnecting after a while making the PPPoE drops also. Thats because of some misplaced configuration I did using HW retries and Fram...

nitrium

Hi again, I just wanna say that the problems with instability have been solved by using the default values of HW retries and Frame Lifetime, I played with those values and this wasnt a good idea. I also reduced the power rate of the cards to 15db and it proved to be very helpful increasing stability...

nitrium

Thank you very much!

nitrium

Hi there. I have an ISP with 212 clients right now but Im experiencing some trouble and its probably because of my design... so I wanna discuss it here and see if someone that passed by the same situation can enlight me on the right way. In the time beign I have 3 omnis Hyperlink 15DB each in difere...

nitrium

Hi there, Im experiencing some big problem here. My PPPoE clients randomly disconnect and after some seconds connects again. Some of my APs at clients dont connect again and I have to go to the client and power down the APs so they connect again. I also set the KeepAlive to 500 to see if it helps bu...

nitrium

I suspected I should use RADIUS instead, but with RADIUS should I enable One Session Per Host also to work?

nitrium

Hi there, there is a way to make One Session Per Host to be determined by username and not by MAC? It would be very nice because this way I dont need to use WDS on my entire structure to make the concentrator receive the client MAC behind other routers!

nitrium

Hi, so any ideas? Im still stuck!

nitrium

Hi there, Im still trying here but without success... any ideas so far?

nitrium

/radius add accounting-backup=no accounting-port=1813 address=192.168.1.2 \ authentication-port=1812 called-id="" comment="" disabled=no domain="" \ realm="" secret=xxxxxx service=wireless timeout=300ms /radius incoming set accept=yes port=1700 Sorry for the d...

nitrium

[xxxx@BrNet - POP Principal] /radius> print Flags: X - disabled # SERVICE CALLED-ID DOMAIN ADDRESS SECRET 0 wireless 192.168.1.2 idp4206 [xxxx@BrNet - POP Principal] /radius> Thats it, the IP is from an address I have in a interface connected directly with my radius server. This config above is from...

nitrium

As requested, Im sending the file with the logs. Just for the record, its telling that it got timeout but I checked the Server and its with radiusd running and also receiving the packets from my RouterOS! Any help would be great

log.1.txt

nitrium

Hi again, so.. any ideas? I dont think its a complicated thing to do because a lot of people already use this method, I just wanna know why my system isnt working right. When it goes to the RADIUS server it dont auth. Correct me if Im wrong. First, if I have a wlan interface without WPA2 active, i d...

nitrium

Hi there, Actually Im using for WPA and WPA2 but all my PSK are longer than 8 digits. The config you suggest is already done in my RouterOS, the problem isnt that... As I see, the RB refuses to authenticate when the reply comes from the RADIUS server. I run FreeRadius on debug mode and can see the r...

nitrium

Hi there! First of all, I know there are other posts about this problem but they didnt solve my issue, so Im posting here to see if we can make my config work :) Right now I have a FreeRadius daemon running on a CentOS distribution in a virtual machine on a XenServer. I have DaloRadius configured on...

nitrium

Thx very much for the reply guys, now Im starting to see a light on the end of the tunnel! I will try to implement this here and tell anything about the results. Cya around!!!

nitrium

OK, but i need to authenticate many clients behind the pop, and I want the central unit to get the mac address of the clients behind my pop without using WDS, there must be a way to route this information across the router so I dont get the router MAC for every PPPoE client behind it, but actually t...

nitrium

Any ideas?

nitrium

I got another Idea, If i centralize only autentication on the concentrator and decentralize tunneling... for example, I set a PPPoE server on my other pops but set the radius IP of the central unit with user manager... this should work right? The only problem is that after I did this(with diferent s...

nitrium

Hi there, Thx for the reply but I made a little research and found something about BCP bridging(PPP tunnel bridging). Am I right assuming this will work sending a MAC behind a router to the PPPoE concentrator using this? If im not, I will try to implement your option

!

nitrium

Trying to make me understand:
how do I centralize a PPPoE server and make One Session per User work behind other routers?

Any ideas??? I need to scale my network and this is important, how I do this?

nitrium

Come on, it has to be a way!

nitrium

Any ideas?

nitrium

I can be wrong since i dont have a lot of experience, but why you dont set a hotspot with no valid user at all just showing the page you want. If the client dont connect to PPPoE it will automatically go to hotspot login page. If you need more filters, just write a script in the primary router and p...

nitrium

Hi there, Im using PPPoE on my infra-structure, but the problem is: How can I set One session per Host in PPPoE and not use WDS so the limit and overheading wont be a problem? Since if you activate One session per host you cant connect two clients with the same MAC, how can i solve this problem with...

nitrium

Hi there. I actually configured my squid on a CentOS 5.3 and used RouterOS internal WebProxy to point to squid server. I placed nat rules to redirect to port 3128 on localhost and webproxy of routeros to redirect to my parent proxy. Its working fine but now my clients are with unlimited bandwidth. I...

nitrium

Actualy you need to set NAT in your clients, so if they want to use DHCP servers on the APs, there will be no problem since it will relay only in their local net(AP to PC, not AP to your net). You can try to get this DHCP config on a notebook and access the gateway it gives by browser to see what AP...

nitrium

I had some problem with HotSpot logging but not navigating. The solution was to set HTTP Proxy to a valid proxy of yours and set the right port as well... I dont know why this happened to me but it solved the problem. To see if you have the same problem as I do, check if https works. In my case Http...

nitrium

Hi there, I already checked those rules in My filter in firewall and its fine... 1812 and 1813 TCP and UDP has Accept rule!!!

nitrium

I dont know if its right but i typed "SELECT * FROM radacct;" and it shows empty. About the interim update I placed 30 seconds just to see if it would send acc packets to radacct but nothing showed up. Thats why Im a little confused about how accounting works. As it is configures it should...

nitrium

Hi, look, Im not very used to those configurations yet, but since I researched A LOT about RADIUS, UserManager and Hotspot those last days to make my system work here I bet your problem could be the router setting in UserManager. Do you set the bridge IP? I mean, your hotspot IP Interface and the ro...

nitrium

Hi there. How your clients connect to your infrastructure? I have both PPPoE and Hotspot here but it works this way: If the client isnt a fixed customer(who pays montlhy), he dosnt have a PPPoE config in his access and automaticaly it connects to the IP Pool of the HotSpot and fall on the login page...

nitrium

Hi there, I was asked to open a new post on this subject and here I am. Im actually researching on how to use Accounting correctly with the MySQL tables from FreeRadius and the Mikrotik RouterOS System. Well, first of all... I think we need to start on how to set limitations to a user basis in their...

nitrium

Hi again. I just found out the problem why My HotSpot returned the message "RADIUS server is not responding". Its because the address I placed on the RouterOS Radius config was an internal one in the second eth of the CentOS server of RADIUS, Dont know why it didnt worked because its linke...

nitrium

Hi again, I got the password problem working now, just had to modify the encription method from crypt to clear on admin.conf in dialup_admin configuration files, but the problem now is that even accepting the authentication right in freeradius, the HotSpot login page on my client shows "RADIUS ...

nitrium

Hi there, thx for your reply! Im using DialUP Admin to input user data on database, SQL isnt commented on radiusd.conf and the authenticate methods are set also. In the usr/local/etc isnt a raddb dir. Im using the CentOS 5.3 distro of Linux. The raddb dir is on /etc in my install setup! If you need ...

nitrium

Hi there, Im trying to configure a freeradius server on CentOS 5.3 and Im having some problems with the integration with Mikrotik and Auth methods on Freeradius. Im using RouterOS 3.26 license lvl6 and Im trying to use HotSpot and do the authentication on the external RADIUS server. I have two big p...

nitrium

This guy just wrote everything in portuguese and then used a translator program to do the translation to english and then pasted it here lol! Really hard to get the point he is trying to show hsuasuhsau!!!

nitrium

Well, for msn you can use mangle to mark connection of port 1863 and 6891-6901 both udp and tcp and later mark packet using the connection marked above like that: 95 ;;; MSN ######################################################################################################################### chai...

nitrium

Thx for all the replys guys, its good to know some options like these! I already have a radius server configured on a linux box but didnt make it work along with my RouterOS, just lack of info to configure it right but i will keep trying. I dont wanna use usermanager so im using FreeRadius on a Slac...

nitrium

Just make a policy based route marking packets separated by services. Mark http, msn, HTTPS, mail and stuff like that(important stuff) and send the fast gateway, everything else send to the slower gateway. I maded this here, so basically all p2p goes on the slower gateway not comprometing the web su...

nitrium

I think the connection mode isnt that important but about the ports, just torch the client while he is trying to connect to the game, so write down the utilized ports, and make that about 4 times to ensure that its not picking some random ports over a pool port. Then you mangle those packets and giv...

nitrium

I may be wrong, but try to see if your P2P traffic(if you have any) is going crazy. I had some problems with the number of connections maded by clients using Ares and that just cracked my network. I had to block p2p traffic to make things work normally again. Just torch your network and see what ip ...

nitrium

Thx for replying, well, if WPA2 dont make CPU overload on a routerboard 532 then its a good choice for sure. I will be trying to implement this in some of my network to see how it behave. Radius is more about control than security then? At least that was what i understood from some replys. And why i...

nitrium

hi, so any advices? Still waiting for some ideas, thx ppl!

nitrium

Hi, Im experiencing some problems with security in my wireless network. Could you guys tell me what are you using to make the best of wireless security? I have open signal(no encryption) with MAC Filter, and some firewall rules to drop packets that arent in the "valid IP" address-list. But...

nitrium

Thak you very much for this info dude, your explanation is very complete and i think now i can adapt your advices to my needs!!! I wil try that and if it works i post here again to close the topic. Cya around!

nitrium

Hi again... Im still with no sucess at all doing the load balance. The config i showed above are in the IP>Route menu not IP>Route>Rules, so i cant move them! I also wanna know if im marking right the packets. Im marking in prerouting chain and im trying to use routing mark on src-nat as well to see...

nitrium

Hi, well... the problem still goes! I tried some diferent aproachs like redirecting only some subnets to another link and it worked but not as i wish it has!!! When i mark packets that are port 80, 443, 21, 110, 25(important services) to go to the big link and all other packets to go to the small on...

nitrium

Hi, i apreciate you help very much, but still, What i want is to route using packet marks because i have a lot of subnets and diferente clients alike, so it will be much more balanced for me if i can get the policy routing rules to work! Any more advice guys??? Or maybe someone picked my mistake in ...

nitrium

Hi, well.. the problem is just that!!! It dont send any packets to other gateway if its not the main table! The packets only goes for the default gateway. Even if i src-nat to other gateway it wont go! Im going crazy with this allright because it worled really nice before and this thing is now just ...

nitrium

Hi, i think beetween 40-50 is a good number to connect, first you need to know if the number of aps are going to be connected 24hrs a day or some will connect on day and others on night! But simultaneously connected i think 40 to 50 aps is a good range to work wothout loss of quality. One more thing...

nitrium

Hi, i will try this aproach but what i exactly wanted to do was to make policy routing based on packet marks and making some programs and ports use 1 link while other stuff use another link! Since Ares dont have limitation, i wanna place it and other p2p software on 1 link while important stuff like...

nitrium

Pls guys, any help will be good... I need to make this work right as soon as possible! There is any problem with RouterOS 3.10 and multiple gateways? It dont work and I'm out of Ideas.... thx!!

nitrium

here is my route setup: Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit # DST-ADDRESS PREF-SRC GATEWAY-STATE GATEWAY DISTANCE INTERFACE 0 A S 0.0.0.0/0 200.163.176.237 reachable 200.163.176.233 1...

nitrium

Hi, Im experiencing some problem with 2 gateways! I cant make them to work together. One of the gateways just dont have any traffic. Only the main gateway works, even if i mangle the packets and policy route them correctly, the same problem works! The two gateways ping from routerOS but as i said be...

nitrium

Hi, I use RouterOS 2.9.51 and since i have 2 main gateways i got some problem with my public ips! For example, a client of mine with a real public ip netmapped to his natted ip wont have outside access anymore since i added policy routes for my two links! I know its probably a routing problem and i ...

nitrium

Any light on this subject yet? thx...

nitrium

Hi, im using RouterOS v2.4.49 License LvL4 and since i got two links now i made the routes based on policy management using mangle! Everything is working fine, but the ping dont work for nothing outside except my Valid range of IPS of both my links and between clients also! I looked on the firewall ...

nitrium

Hi guys, well.. I own an ISP and i have to deal with this stuff also! My workaround was inside the queues. I just made good use of Limit-at and Max-limit. Set Max-Limit of your client as the maximum bandwidth he can use, and Limit-at you can set at 15% or 30% of the maximum bandwidth. The most impor...

nitrium

I know how to do this... i suffered the same problem and finally i got a solution!!! In Mangle you need to mark "connection" and select P2P traffic and enable passtrough, then just after this rule you make another rule using the connection mark you created above and marking this one as &qu...

nitrium

Hi, im not sure about this but i have WDS working with queue trees.. Make a bridge and place as ports the WDS connection, the parent wireless interface of WDS and any other Ethernet you need to bridge, then make this bridge the default one in WDS config and not the WDS link itself! and make the WDS ...

nitrium

hi. try yto use packet-marks only on queue trees. On simple queue as you are using, on target-address dont place /32 at end of ip, and all should be fine!

nitrium

hi, well dude.. you can limit download and upload apart, but browsing normaly uses port 80, so the best you can do is limit download and upload over port 80 to see what happens! Of course it will count any http download you do also but i dont know another way to do this!

nitrium

Hi, im getting some strange problems with clients that use D-Link G520+ PCI Cards and connect to my Routerboard 502 with atheros AR5413 interfaces at 2.4GHz! I have 3 21dbi sectorial antennas. Well, the problem is that the client just connects and disconnects at randomic times during the day without...

Search found 94 matches