Community discussions

MUM Europe 2020

Search found 40 matches

by HWTest
Tue Nov 13, 2018 9:55 pm
Forum: Beginner Basics
Topic: RB2011 src-nat strange behaviour?
Replies: 20
Views: 1225

Re: RB2011 src-nat strange behaviour?

Well I cannot speak to your VDSL and webserver setup, suffice to say they are WAN client objects and not LAN objects. I have to disagree, the webserver has its own address, which I set up (192.168.240.253) and the PPPoE interface has an different address, which is obtained via DHCP from the ISP. An...
by HWTest
Tue Nov 13, 2018 6:17 pm
Forum: Beginner Basics
Topic: RB2011 src-nat strange behaviour?
Replies: 20
Views: 1225

Re: RB2011 src-nat strange behaviour?

Sorry for the delayed answer, I'm pretty busy ATM. I have to admit I'm a little confused - are you suggesting I should introduce VLANs in my setup? 1) I use BRiDGELIST for limiting MAC server ping and MAC Winbox to interfaces on the BRIDGE. I don't want to disable it completely and interface lists a...
by HWTest
Mon Nov 12, 2018 5:31 pm
Forum: Beginner Basics
Topic: RB2011 src-nat strange behaviour?
Replies: 20
Views: 1225

Re: RB2011 src-nat strange behaviour?

I'll try to explain it. Basically all interfaces (except ZYXEL) are bridged to act as a simple switch, including WLAN. The VWLAN (as Virtual WLAN of the WLAN interface) is my latest idea, not finished yet - an isolated wifi network for guests, with access only to the internet. The RB dials the PPoE ...
by HWTest
Mon Nov 12, 2018 11:17 am
Forum: Beginner Basics
Topic: RB2011 src-nat strange behaviour?
Replies: 20
Views: 1225

Re: RB2011 src-nat strange behaviour?

Here is the full config (sensitive parts deleted): # nov/11/2018 19:28:15 by RouterOS 6.43.4 # software id = # # model = 2011UiAS-2HnD # serial number = /interface bridge add fast-forward=no name=BRIDGE /interface ethernet set [ find default-name=ether5 ] name=Duo speed=100Mbps set [ find default-na...
by HWTest
Sun Nov 11, 2018 8:22 pm
Forum: Beginner Basics
Topic: RB2011 src-nat strange behaviour?
Replies: 20
Views: 1225

Re: RB2011 src-nat strange behaviour?

Post your config
/export hide-senstive file=mylatestconfignov11
/export hide-senstive file=mylatestconfignov11
expected end of command (line 1 column 9)
by HWTest
Sun Nov 11, 2018 8:15 pm
Forum: Beginner Basics
Topic: RB2011 src-nat strange behaviour?
Replies: 20
Views: 1225

Re: RB2011 src-nat strange behaviour?

The VDSL part works, the clock gets synchronized.
VDSL settings:
IP 192.168.240.253
Mask 255.255.255.0
GW 192.168.240.254
by HWTest
Sun Nov 11, 2018 7:29 pm
Forum: Beginner Basics
Topic: RB2011 src-nat strange behaviour?
Replies: 20
Views: 1225

Re: RB2011 src-nat strange behaviour?

Thank you.
My new src-nat rule:
chain=srcnat action=masquerade out-interface=WIA log=no log-prefix=""
I've disabled the two old ones but it still doesn't work ...

I don't have a drop all rule on the end of the firewall chains (yet), instead I have a log all rule there, until all is tuned.
by HWTest
Sun Nov 11, 2018 7:13 pm
Forum: Beginner Basics
Topic: RB2011 src-nat strange behaviour?
Replies: 20
Views: 1225

Re: RB2011 src-nat strange behaviour?

I'm afraid I wasn't clear enough in my original post. I try to make it as simple as possible: I have an internet connection called WIA and two local subnets. 192.168.242.0/24 which is connected to the BRIDGE 192.168.240.0/24 which is connected to ether10 I need that both subnets are connected to the...
by HWTest
Sun Nov 11, 2018 4:40 pm
Forum: Beginner Basics
Topic: RB2011 src-nat strange behaviour?
Replies: 20
Views: 1225

RB2011 src-nat strange behaviour?

I have a RB2011 (6.43.4) and a VDSL router in bridge mode connected to ether10 on the RB2011, the rest of the ports (including WLAN) is bridged The VDSL PPPoE connection is initiated from the RB2011.´and is called WIA 192.168.240.0/24 is the subnet of ether10 (192.168.240.254) and the VDSL router (1...
by HWTest
Sat Oct 24, 2015 6:25 pm
Forum: Beginner Basics
Topic: SSTP client not terminating
Replies: 0
Views: 408

SSTP client not terminating

I have a problem with the SSTP VPN client (dial on demand enabled), it's not terminating the connection after the idle timeout set in the ppp profile. To be more specific I have to go as low as 1-3 seconds with the idle timeout value, that it terminates the connection. 5 seconds and more is too much...
by HWTest
Fri Sep 04, 2015 1:38 pm
Forum: Beginner Basics
Topic: SSTP client dial on demand problem
Replies: 0
Views: 758

SSTP client dial on demand problem

I have a problem with the SSTP VPN client dial on demand. When dial on demand is switched off, it works normally but when I enable dial on demand and it should connect (dial), it connects and disconnects and so on... Tested on RB2011 and RB532 ROS 6.30.4 Config (RB532): /interface sstp-client add au...
by HWTest
Tue Sep 01, 2015 3:54 pm
Forum: Announcements
Topic: v6.30.4 bugfix release
Replies: 104
Views: 27678

Re: v6.30.4 bugfix release

My happiness was premature. The "CCP lost compression got out of sync" L2TP/IPSec VPN client bug is still present in this version, even when compression is disabled in the ppp profile. The "dial on demand" option in SSTP VPN client still acts strange - connects and disconnects in cca 1 second pace. ...
by HWTest
Fri Aug 28, 2015 2:40 pm
Forum: Announcements
Topic: v6.30.4 bugfix release
Replies: 104
Views: 27678

Re: v6.30.4 bugfix release

Working good so far - RB2011 and RB532.
by HWTest
Tue Aug 18, 2015 8:37 pm
Forum: Announcements
Topic: 6.31 released
Replies: 227
Views: 49597

Re: 6.31 released

The "CCP lost compression got out of sync" L2TP/IPSec VPN client bug is still present in this version, even when compression is disabled in the ppp profile.
The "dial on demand" option in SSTP VPN client still acts strange - connects and disconnects in cca 1 second pace.
Ticket #2015081866000551
by HWTest
Tue Aug 11, 2015 10:03 am
Forum: Announcements
Topic: v6.30.2 bugfix release
Replies: 148
Views: 39474

Re: v6.30.2 bugfix release

I just upgraded our company's CCR1036-8G from 6.3 to 6.30.2 and then upgraded the Firmware from 3.10 to 3.27. Since upgrading our PPTP VPN connections are dropping randomly with an error "CCP lost compression got our of sync: disabling compression" then the next message is "terminating... - Encrypt...
by HWTest
Thu Aug 06, 2015 1:06 pm
Forum: Announcements
Topic: v6.30.2 bugfix release
Replies: 148
Views: 39474

Re: v6.30.2 bugfix release

Today I tried to switch the SSTP VPN client to "Dial On Demand" but that acts strange and connects and disconnects in cca 1 second pace.
When I disable Dial On Demand the connection works normally.
No session timeout set, idle timeout set to 1 minute.
Tested on RB532 and RB2011UiAS.
by HWTest
Fri Dec 26, 2014 3:59 am
Forum: Beginner Basics
Topic: 2011UiAS-2HnD-IN
Replies: 2
Views: 963

Re: 2011UiAS-2HnD-IN

No, you need to set Fritz to bridge and dial the VDSL (PPoE if it is, what your DSL provider uses) from the Mikrotik.
by HWTest
Thu Oct 02, 2014 9:54 pm
Forum: Beginner Basics
Topic: How to set interface dependency?
Replies: 7
Views: 1622

Re: How to set interface dependency?

I don't see how it would help? The ADSL reconnection is very fast and if it (netwatch) misses it, then there are no more unsuccessful pings (to count) until the next reconnection. And in this case the VPN stays connected, but doesn't work. I can't ping the VPN because the addresses are dynamic. I co...
by HWTest
Thu Oct 02, 2014 4:23 pm
Forum: Beginner Basics
Topic: How to set interface dependency?
Replies: 7
Views: 1622

Re: How to set interface dependency?

So far I've set Netwatch to ping every second the internet gateway and disable the VPN interface if not successful, it works but it isn't 100% reliable.
by HWTest
Thu Oct 02, 2014 4:22 pm
Forum: Scripting
Topic: How to make one interface dependant on another?
Replies: 6
Views: 1323

Re: How to make one interface dependant on another?

So far I've set Netwatch to ping every second the internet gateway and disable the VPN interface if not successful, it works but it isn't 100% reliable.
by HWTest
Mon Sep 15, 2014 10:23 pm
Forum: Beginner Basics
Topic: How to set interface dependency?
Replies: 7
Views: 1622

Re: How to set interface dependency?

This might help. Put in script. Need to modify do a bit, to soot you.
Thank you, I'll test it out.

I was hoping, there is something without pinging.
The PPPoE interface reconnection is very fast (3 seconds max.), I have to ping every second to catch it.
by HWTest
Sun Sep 14, 2014 8:36 pm
Forum: Scripting
Topic: How to make one interface dependant on another?
Replies: 6
Views: 1323

Re: How to make one interface dependant on another?

Okay, new idea. If you know that the connection will drop every 24 hours, how about a script that runs at say 3am.. Have that script take down the VPN (Disable SSTP), Reset the ADSL, and clear all of the connections. If you preempt the ISP maybe that will help. So far I've used a workaround - I had...
by HWTest
Sun Sep 14, 2014 8:12 pm
Forum: Scripting
Topic: How to make one interface dependant on another?
Replies: 6
Views: 1323

Re: How to make one interface dependant on another?

Use the NetWatch on the Tools menu. You can have it watch the PPPoE interface, when the PPPoE goes down, use a script to reset both of them. I tested the idea. I watch the ADSL gateway address, I hope it doesn't change. On down I disable the VPN interface, on up I enable it. The ADSL reconnection i...
by HWTest
Sun Sep 14, 2014 5:03 pm
Forum: Beginner Basics
Topic: How to set interface dependency?
Replies: 7
Views: 1622

Re: How to set interface dependency?

Thank you for your suggestion.
I've googled a lot, also searched the forum and wiki.
The sad thing is, a lot of script examples I've found, don't work - probably some syntax changes in the latest ROS.
For now I'm using a workaround - I have set a session timeout in the PPP profile.
by HWTest
Sat Sep 13, 2014 7:26 pm
Forum: Scripting
Topic: How to make one interface dependant on another?
Replies: 6
Views: 1323

Re: How to make one interface dependant on another?

Thank you for the idea.
But the PPoE interface has a dynamic IP, so I have to watch an external address, which could lead to false alarms.
If I could watch the status of the interface directly, that would help.
by HWTest
Sat Sep 13, 2014 4:53 pm
Forum: Scripting
Topic: How to make one interface dependant on another?
Replies: 6
Views: 1323

How to make one interface dependant on another?

I have a PPoE connection to the internet called ADSL and a SSTP VPN client connection called VPN. My ISP disconnects me every 24h and RB automatically reconnects. The problem is, the VPN connection stays connected but doesn't work after the PPoE reconnection. I would like to create a script that whe...
by HWTest
Sat Sep 13, 2014 2:15 pm
Forum: Beginner Basics
Topic: How to set interface dependency?
Replies: 7
Views: 1622

How to set interface dependency?

I have a RB2011 which dials a PPoE connection and a VPN connection and I need to set it up so, that the VPN connection "depends" on the PPoE connection. In other words, when the PPoE goes down the VPN goes down, when the PPoE goes up the VPN goes up. I have tried "keepalive timeout=1" in the setting...
by HWTest
Mon Sep 01, 2014 8:14 pm
Forum: RouterBOARD hardware
Topic: RB532 loosing all virtual interfaces
Replies: 2
Views: 950

Re: RB532 loosing all virtual interfaces

After numerous netinstalls of ROS 6.18 and 6.19 I'm thinking, that the flash is really dying. The RB is still behaving strange: - I exported the config, that I imported after netinstall and compared the two - there are letters missing in the export file - the two mentioned static routes sometimes wo...
by HWTest
Sat Aug 30, 2014 11:18 pm
Forum: RouterBOARD hardware
Topic: RB532 loosing all virtual interfaces
Replies: 2
Views: 950

Re: RB532 loosing all virtual interfaces

I think I can rule out the PSU, changed for another one and the issue is still happening.

I found out I can provoke the issue by doing something in Winbox - opening windows, etc, no changing of any configuration.

One more thing - I noticed when it happens, the WLAN interface is gone too.
by HWTest
Sat Aug 30, 2014 6:43 pm
Forum: RouterBOARD hardware
Topic: RB532 loosing all virtual interfaces
Replies: 2
Views: 950

RB532 loosing all virtual interfaces

I'm running a RB532, ROS 6.18, FW 2.18 Today I suddenly lost all virtual interfaces (PPoE, VPN, Bridge) only the physical interfaces were there (LAN1, LAN2 ...). I found out, when I was trying to look at the graphs of my VPN interface and I got a message that the interface doesn't exist. After a reb...
by HWTest
Mon Sep 16, 2013 8:51 pm
Forum: General
Topic: graphs deleted after reboot on v.5.0 / slow NTP sync
Replies: 52
Views: 15334

Re: graphs deleted after reboot on v.5.0 / slow NTP sync

There are still problems with interface graphs in ROS 6.4 on my RB533.

Graphs for LAN1 LAN2 and WAN interfaces survive a reboot, but graphs for WLAN, Bridge and VPN interfaces are lost :-(
by HWTest
Mon Jul 08, 2013 8:14 pm
Forum: Wireless Networking
Topic: RB532 + AR9223 MiniPCI, LEDs not working
Replies: 0
Views: 492

RB532 + AR9223 MiniPCI, LEDs not working

I have a RB532 and recently I have put a noname AR9223 Mini PCI card in. All is working but not the MiniPCI LEDs on the RB532. I have tried both miniPCI slots. According to the RB532 manual: "2 pairs of MiniPCI LEDs are connected to MiniPCI slots (two LEDs per slot) according to standards." Does it ...
by HWTest
Sun Jul 07, 2013 2:19 pm
Forum: General
Topic: ROS 6.0, RB133 and message failed to enable watchdog timer
Replies: 4
Views: 1517

Re: ROS 6.0, RB133 and message failed to enable watchdog tim

In ROS 6.1 the problem is still present (RB532) ...
by HWTest
Wed May 02, 2007 1:22 pm
Forum: RouterBOARD hardware
Topic: RouterBOARD 133 freezes
Replies: 14
Views: 3867

Is there a switch in the system config?

Try another port or another switch..

Switch ports do go bad..

Craig
There is a CISCO 2611 router connected to one interface and a 3Com 4924 switch to the other, I've also tried to connect ordinary hubs between the RB and the CISCO and the 3Com - no change.
by HWTest
Mon Apr 30, 2007 2:23 pm
Forum: RouterBOARD hardware
Topic: RouterBOARD 133 freezes
Replies: 14
Views: 3867

I've tried 2 different power supplies, no (significant) voltage drop on load. I've also tried to connect the RB between two PC and made a 100% RB CPU load by file copying - the RB was stable, so I don't think it is a power supply problem. I've also tried several CAT5E cables and the RB still freezes...
by HWTest
Thu Apr 26, 2007 12:09 pm
Forum: RouterBOARD hardware
Topic: RouterBOARD 133 freezes
Replies: 14
Views: 3867

I tried the serial console (Watchdog ping disabled), when the RB freezes (after cca 30 min of uptime), the ethernet interfaces (/interface ethernet monitor) have no link and autonegotiation is disabled, the rest of the RB seems to work normally, nothing in the log. After a couple of minutes the link...
by HWTest
Mon Apr 23, 2007 11:28 am
Forum: RouterBOARD hardware
Topic: RouterBOARD 133 freezes
Replies: 14
Views: 3867

So, have you actually tried hooking a serial cable up to it when it is non-responsive on its ethernet port after turning the watchdog off to see what's going on?

-- Nathan
I didn't, it's a good idea :-) thanks
Now I have a working serial cable, what should I look for, when the RB freezes?
by HWTest
Wed Apr 18, 2007 8:36 am
Forum: RouterBOARD hardware
Topic: RouterBOARD 133 freezes
Replies: 14
Views: 3867

Seems not to be a bad Board, I have tried a second one with the same result :-( I have also tried the RB on a small LAN - 256k line, 6 users, no freeze till now. A bad config can cause freezes with higher loads? OK, I'll try to play with the config ... I've instaled RouterOS demo licence on a PC, lo...
by HWTest
Tue Apr 17, 2007 11:50 pm
Forum: RouterBOARD hardware
Topic: RouterBOARD 133 freezes
Replies: 14
Views: 3867

18V 1,33A 24W
by HWTest
Tue Apr 17, 2007 7:46 pm
Forum: RouterBOARD hardware
Topic: RouterBOARD 133 freezes
Replies: 14
Views: 3867

RouterBOARD 133 freezes

I have a RouterBOARD 133 with RouterOS 2.9.42, configured as a transparent traffic shaper (on LAN, no Wifi), shaping a 10MB line, about 200 users, CPU load about 20% with some spikes up to 40%. The RB freezes every couple of minutes, I had to set the Watchdog to ping (to the gateway), then it reboot...