MikroTik

gogotha

have several across the US down. My first detection was 15:46 CST, ETA would be nice. Also noticed the forum lagging and mikrotik.com reported offline from a down detector and down for me, china cut another cable?

gogotha

noticed I dropped a few ddns routers, is it down? I have been pushing the router alone for the ddns service and will need to stop if the service is getting terminated.

gogotha

Got a call from IT director stating Ring Central was wanting to open port inbound and outbound but would not specify an IP address they need pointed to. Since there no outbound restrictions I'm thinking this was set when turning on the router but a few of the ports are inbound from super subnets. Is...

gogotha

I know this is old will probably get in trouble but I thought I would share for others. Found the below on the internet , credit below. Worked on Zabbix Version: 6.4 with four Mikrotik CHR's Version: 6.49.10 and one 7.12.1 What to do is: A. Configure SNMP MikroTIk B. If Public allow Connection to SN...

gogotha

How would I connect 2 networks together with the same subnet in a IPsec tunnel? Apparently Mikrotik was smart enough to know it already had the subnet in it and would not let the IPsec tunnel start. My mind is telling netmapping but not sure where to start. This would be my IPsec path 172.16.6.0/24 ...

gogotha

when you say limiting it basically locks it down to the 10.10.10.0/23 network, why does the bytes counter increment lower than the other? Is that measuring everything on bridge?

gogotha

We have a question at the office about proper mangling VPN connections and the total "Bytes" that accumulate. Using this mangle everything works but the "Bytes" accumulate really fast. /ip firewall mangle add action=mark-routing chain=prerouting comment="VPN Mangle" new...

gogotha

We hired a 3rd party Network Engineer to see why incoming VPN traffic cannot complete connection to a Windows NLB with 2 balanced servers. We can see the traffic hit the MT router and just die there. The engineer stated it was because Mikrotik gets confused because IP 10.255.252.13's endpoint on 2 s...

gogotha

I am building a default import that our technicians can use on new installs and would like to add a rouge DHCP detection and alert when detected. I tried the code below from the website of a guy that trained me but its appears broken when I import via terminal. I tried to leave a post on his site to...

gogotha

Those look super! I'm curious, is there a way to encrypt backup data pre-upload via FTP or encrypt the scripts you pointed to me via email? Was speaking with one of our consultants and mentioned I was testing FTP upload and he cringed because of FTP. I checked the uploads and they are not encrypted....

gogotha

I know this is a little old, but WOW. Love it and thank you for sharing, works perfectly!!!!

gogotha

dalami, it might take a bit of time to test yours, my virus and other service protection are further down my rules. These are the top 20ish of 245 rules. Virus, RDP, VPN, DDos and other protection is down the list. Your rules do raise some questions if I'm placing them in the wrong portion. I apprec...

gogotha

dalami and anav, thank you for your replies. I will look and test both changes on 2 local yet remote routers and come back next week with what happens, again thank you for your time. anav, I like your signiture LOL

gogotha

So I have an issue with RDP being slow and sending video over VPN connections and traced it down to FastTrack, disabling would allow the videos to load, RDP and overall performance increased. From MT forum I created the rules below and at this point everything seems to work now. We want to use "...

gogotha

Discovered my ISP was in that range, not sure how I can even see them. Changed to /20 network and everything works, didn't really need that many IPs. Userman and RDP in tunnels from both side works flawlessly.

gogotha

whoops, looks like I can get to the first of my pool 172.16.0.10 but not at the endish 172.19.255.253 when using usermanager. IP Pool is 172.16.0.10-172.19.255.254 Route is 172.16.0.0/14 user1 Start & Interim 172.16.0.10 03/01/2020 17:22:43 03/01/2020 17:39:43 17m1s 254.8 KiB 75.4 KiB remote pub...

gogotha

When using Radius and Usermanager, my VPN connected tunnels ping but will not allow RDP sessions. When I disable "Use Radius" in "PPP Authentication&Accounting" and enable the accounts in the VPN server "Secrets" I am able to Ping and RDP. From my understanding Radi...

gogotha

I have seen in a few places that it is recommended turning off Hyper-threading. Is this a performance issue or to protect from the ZombieLoad or other "side Channel" attacks?

gogotha

Well, 4 days later and they are still bound. I was able to set the DHCP on those devices independently, nice Mikrotik!

Thank you Zacharias

gogotha

done, Ill give it a day and post back tommorrow. Thank you.

gogotha

1 minute. Bad habit, I program routers remotely with technicians and need faster response from DHCP.

gogotha

This is more of an annoyance and easily fixed by setting devices to static, however its much easier to move them around when they are bound in DHCP. DHCP works fine, devices are reachable by the assigned "waiting" IP. I can reboot devices and the status goes to "bound" state but ...

gogotha

Confirmed, thank you for response. It looks like pretty much anything that connects to Windows Server needs CAL. Did a little reading on Windows 10 EULA and discovered it might be illegal to use software and host programs on Windows X. c. Restrictions. The device manufacturer or installer and Micros...

gogotha

I am guessing a Mikrotik VPN remotely connected to a Windows RAS server a device cal will be needed, can anyone confirm?

gogotha

Has anyone ever ran a IPsec tunnel then drilled through with a PPTP, L2TP or SSTP tunnel? I know its not ideal and overhead would nasty but I am having issues with a CCR1009-7G-1C-1S+ and Sonicwall IPsec IKE tunnel. It works fine from the locally attached devices in the Mikrotik side (green lines) b...

gogotha

Administrators on other end clicked the Gremlin button and it worked mysteriously

gogotha

It turned out that the ports were getting sent to the wrong devices. PATTing ports in Firewall fixed issue. Inbound tunnel IP on router bridge. Since there were 48 cameras at each location and I needed 10.7.6.x:80 and :554 routed, building 96 rules in the firewall was not fun. Has to be a faster way...

gogotha

I am needing to get to 10.4.0.102:80 through IPsec tunnel from 10.10.10.0/24 network. We are not in charge of the tunnel nor the IPsec Policy. They stated they allowed 10.4.0.102 to be accessed in tunnel, however setting my policy rule to 10.4.0.0/24 breaks the tunnel. I'm not sure how to bridge thi...

gogotha

This is my config. /interface ethernet set [ find default-name=ether1 ] name=ETH1-LightWave speed=100Mbps set [ find default-name=ether2 ] name=ETH2-Comcast speed=100Mbps set [ find default-name=ether3 ] comment="VPN Server Switch" speed=100Mbps set [ find default-name=ether4 ] comment=&qu...

gogotha

Well to my disappointment, when we reboot our internet the remote routers would pick up a DHCP IP even if they are configured in Windows RRAS as a static connection. A band-aid was to reduce my DHCP range in my RAS to 2 IP addresses (since all our connections ping the vpns virtual IP to make sure th...

gogotha

Our Fortigate to Mikrotik IPsec tunnel works great and we can access devices in the tunnel on the other side from 10.10.10.0/24. However, we loose some outbound ETH01 and a few VPN connected connections to random systems from behind 10.10.10.1 which is our CCR1009-7G-1C-1S+ router. Our internet is 4...

gogotha

This seams to have done the trick for anybody else needing it constant static from a Windows RAS. What would be the benefit of using a "Remote Address", it was the only thing that never changed. https://seagulls.itcctv.cloud/img/mt-forum/staticIP.webp Curious why I didn't get help on this,...

gogotha

We just started implementing L2TP VPN connections into a Windows 2008 Server and it work superbly. After successfully getting my test environment up and going we started rolling them out in production server and shipping out to clients. We currently have 85 VPN connections and the Windows VPN connec...

Search found 33 matches

Re: mynetname is down ?

Re: MYNETNAME.NET is down. IP Cloud DDNS not working.

Rin Central

Re: Zabbix template for

IPsec Tunnel to Network with same subnet

Re: Correct Mangle Code

Correct Mangle Code

Mikrotik - Windows NLB - VPN traffic

Rouge DHCP Detection and Alert help

Re: Fully Working Mikrotik Router OS Backup Script on local storage and FTP Upload [SOLVED]

Re: Fully Working Mikrotik Router OS Backup Script on local storage and FTP Upload [SOLVED]

Re: Default Firewall Order

Re: Default Firewall Order

Default Firewall Order

Re: Radius Usermanager PPP Issue

Re: Radius Usermanager PPP Issue

Radius Usermanager PPP Issue

CHR Hyper-Threading [SOLVED]

Re: DHCP Bound but "waiting" [SOLVED]

Re: DHCP Bound but "waiting" [SOLVED]

Re: DHCP Bound but "waiting" [SOLVED]

DHCP Bound but "waiting" [SOLVED]

Re: Windows Device CAL for Mikrotik VPN [SOLVED]

Windows Device CAL for Mikrotik VPN [SOLVED]

PPTP in IPsec Tunnel

Re: Fortigate to Mikrotik IPsec Tunnel to Different Segment [SOLVED]

Re: IPsec Tunnel breaks Outbound Public and some Outbound VPN connections [SOLVED]

Fortigate to Mikrotik IPsec Tunnel to Different Segment [SOLVED]

Re: IPsec Tunnel breaks Outbound Public and some Outbound VPN connections [SOLVED]

Re: Static IP L2TP reverts to DHCP on reconnect

IPsec Tunnel breaks Outbound Public and some Outbound VPN connections [SOLVED]

Re: Static IP L2TP reverts to DHCP on reconnect

Static IP L2TP reverts to DHCP on reconnect