Community discussions

Search found 111 matches

by Cvan
Fri Nov 08, 2019 8:34 am
Forum: General
Topic: RB2011UiAS-2HnD-IN and Spectrum Cable Ultra (400Mbps)
Replies: 24
Views: 2173

Re: RB2011UiAS-2HnD-IN and Spectrum Cable Ultra (400Mbps)

I am going to add some more to this because of curiosity... I thought I would remote in and test Spectrum location again. So I remote into one WIndows 10 Pro PC (192.133.1.4) ; I check the NIC and states 1Gbps; I run speedtest and I get 150Mbps...\ Then... I remote into another different PC still wi...
by Cvan
Thu Nov 07, 2019 2:00 am
Forum: General
Topic: RB2011UiAS-2HnD-IN and Spectrum Cable Ultra (400Mbps)
Replies: 24
Views: 2173

Re: RB2011UiAS-2HnD-IN and Spectrum Cable Ultra (400Mbps)

I have queues but I still use a fasttrack connection fw rule. I queue the whole subnet and then fasttrack specific groups of ips by using address lists in the fw rule... Checklist... Are you testing from a 1Gbps NIC on your test PC Does your Spectrum modem support 1Gbps Are using a 1Gbps port on the...
by Cvan
Thu Nov 07, 2019 1:39 am
Forum: General
Topic: RB2011UiAS-2HnD-IN and Spectrum Cable Ultra (400Mbps)
Replies: 24
Views: 2173

Re: RB2011UiAS-2HnD-IN and Spectrum Cable Ultra (400Mbps)

Well.. after quick glance; does not look like you have any fasttrack rules in place in your firewall. For me this is critical for performance on the cpu.. This marks the packets so the cpu does not peg out.
by Cvan
Thu Nov 07, 2019 1:32 am
Forum: General
Topic: RB2011UiAS-2HnD-IN and Spectrum Cable Ultra (400Mbps)
Replies: 24
Views: 2173

Re: RB2011UiAS-2HnD-IN and Spectrum Cable Ultra (400Mbps)

I do not know what make or model of modem they installed, nor do I know what was there before. Only that the old one supported 300Mbps and the new supported 1Gbps which was all I really cared about.. This is a remote managed site with a six stack. I was not there during the upgrade/install. I will s...
by Cvan
Thu Nov 07, 2019 12:44 am
Forum: General
Topic: RB2011UiAS-2HnD-IN and Spectrum Cable Ultra (400Mbps)
Replies: 24
Views: 2173

Re: RB2011UiAS-2HnD-IN and Spectrum Cable Ultra (400Mbps)

Got the same exact board as you and same ISP in LA (Spectrum).. Was already upgraded to 6.45.7 ROS Looking at the config now and I don't even have ether1 on any bridge.. We had a Spectrum plan at 100Mbps plan and got some free upgrade to Spectrum business 400Mbps. On initial speed test was getting a...
by Cvan
Tue Oct 08, 2019 8:14 am
Forum: General
Topic: Multiple static public IPs through one interface
Replies: 26
Views: 6493

Re: Multiple static public IPs through one interface

Maybe its not this simple, but can you add block2 to MT1 and then pass all traffic for block2 straight over vlan interface to MT2 via filtering and NAT rules?
Then assign the block2/interface on MT2 so that MT2 routes out block2 for WAN? idk..?
by Cvan
Tue Oct 08, 2019 3:19 am
Forum: General
Topic: Extend dynamic VLANs to Wireless 802.1x
Replies: 5
Views: 1208

Re: Extend dynamic VLANs to Wireless 802.1x

Okay, the how... ROS (6.45.6) MT RB2011 (NO WIFI): MT RB2011 (WAN facing) is radius client for 'ppp (VPN)' and 'dot1x (Ether)' NPS (Windows 2012 Server) vlan trunk configured (vlan ids 7,8,9) MT RB2011 is the DHCP server for all. Bridge vlan filtering enabled - Yes.. Three dhcp servers running on RB...
by Cvan
Sat Oct 05, 2019 3:03 am
Forum: Wireless Networking
Topic: Get radio to Connect to closes MT AP
Replies: 2
Views: 756

Re: Get radio to Connect to closes MT AP

I am using the same SSID on all devices, they are all managed by capsman.. I need to decrease the signal strength for 2.4 so 5ghz is stronger and...; MT hAP ac^2 is the caps manager device and everyone seems to always connect to that MT no matter if another MT is closer like the RBcAPGi-5acD2nD OR T...
by Cvan
Sat Oct 05, 2019 2:56 am
Forum: General
Topic: Extend dynamic VLANs to Wireless 802.1x
Replies: 5
Views: 1208

Re: Extend dynamic VLANs to Wireless 802.1x

ehhh wrong!! NM all, I figured this one out surprisingly.. hit me up if you want to know my tricks! No, I did not use the DHCP server (service) to handle the Radius request.. cheers My Setup: Radius = Windows Server NPS+AD MT RB2011 (no wireless) (ROS 6.45.6) MT hAP ac^2 (ROS 6.45.6) MT RBcAPGi-5acD...
by Cvan
Fri Oct 04, 2019 9:41 am
Forum: General
Topic: Extend dynamic VLANs to Wireless 802.1x
Replies: 5
Views: 1208

Re: Extend dynamic VLANs to Wireless 802.1x

I can get wireless vlans working if I choose 'use tag' and add vlan id per wifi interface. But not able to get dynamic wireless vlans working from a singular SSID where the vlan id sent to the dhcp server in the response from radius server and then assigned IP by matching dhcp vlan server My Mikroti...
by Cvan
Fri Oct 04, 2019 2:13 am
Forum: Wireless Networking
Topic: Get radio to Connect to closes MT AP
Replies: 2
Views: 756

Get radio to Connect to closes MT AP

How to have any wireless devices to connect to the closest Mikrotik Wireless access point when roaming etc.. like laptops moving around..
How can I accomplish this with capsman configuration + 3 Mikrotik WAPs; and I want them to try the 5ghz first before 2.4ghz; 2.4ghz should be last resort...?
by Cvan
Thu Oct 03, 2019 3:55 am
Forum: General
Topic: Extend dynamic VLANs to Wireless 802.1x
Replies: 5
Views: 1208

Extend dynamic VLANs to Wireless 802.1x

Wired - MT RB2011 ( ROS 6.45.6 )with dynamic vlans (50,60,70) dot1x with Radius Auth Wireless - MT hAP ac^2 on Ether 5 of MT RB2011 as wireless capsman How can I extend my dynamic vlans to my wireless clients or can I through Radius Auth or can I? I have made some attempts with different configs but...
by Cvan
Thu Aug 29, 2019 4:20 am
Forum: General
Topic: Radius - wireless login - to Active Directory
Replies: 5
Views: 888

Re: Radius - wireless login - to Active Directory

Still works for me.. What is your issue? However, I never did get the Framed-Pool attribute to work for Radius Wifi connections. The attribute gets returned by NPS as I can see it in the log; but the client never gets assigned an IP address from the MT address pool that is referenced by framed-pool ...
by Cvan
Wed Jun 26, 2019 7:35 am
Forum: General
Topic: Framed-Pool NPS Radius Wireless
Replies: 0
Views: 223

Framed-Pool NPS Radius Wireless

So I am trying to get this Framed-Pool attribute working with MT router for wireless clients authenticating against AD/NPS. I have it configured in the NPS to return Framed-Pool="staging". On MT router I have pool setup called 'staging'. In IP Address I have address setup matching the pool 192.168.1...
by Cvan
Thu Jun 20, 2019 3:06 am
Forum: General
Topic: Firewall blocking Radius Authentication
Replies: 9
Views: 699

Re: Firewall blocking Radius Authentication

Add port 1700 and put these two rules before any input drop rules.. do not specify dst or src address.. or interface-in/out chain=input action=accept protocol=udp dst-port=1700,1812,1813 log=yes log-prefix="Radius UDP" chain=input action=accept protocol=tcp dst-port=1700,1812,1813 log=yes log-prefix...
by Cvan
Wed Jun 19, 2019 7:01 am
Forum: General
Topic: Firewall blocking Radius Authentication
Replies: 9
Views: 699

Re: Firewall blocking Radius Authentication

oh.. this rule you have... should be on the input not on the forward chain. input chain = MT router radius server = MT router forward chain = everything else connected to the MT router add chain=forward comment="Allow Radius Traffic" dst-address=192.168.88.2 \ dst-port=1812,1813 in-interface=bridge ...
by Cvan
Wed Jun 19, 2019 3:33 am
Forum: General
Topic: Firewall blocking Radius Authentication
Replies: 9
Views: 699

Re: Firewall blocking Radius Authentication

If you are saying that when you disable the drop-all firewall rule then the radius server authentication is working against your radius clients, then do; Add a firewall rule to accept input before your drop-all rule in the firewall chain for protocol UDP and ports 1812,1813; or whatever ports you ha...
by Cvan
Tue Jun 18, 2019 4:45 am
Forum: General
Topic: Firewall blocking Radius Authentication
Replies: 9
Views: 699

Re: Firewall blocking Radius Authentication

Turn on Radius debug on the MT Ros radius server to see more details about the radius 'client' timing out during authentication attempts to the radius server. Perhaps you are using the wrong auth protocols between client and server...? In PPP/Secrets/PPP Authentication&Accounting you have turned on ...
by Cvan
Tue Jun 18, 2019 12:31 am
Forum: General
Topic: Firewall blocking Radius Authentication
Replies: 9
Views: 699

Re: Firewall blocking Radius Authentication

Add ports 1812 and 1813?

Turn on radius logging?

Monitor log for firewall rule that is blocking radius coms?

Turn on verbose in win AD auth log?
by Cvan
Mon Jun 17, 2019 3:18 am
Forum: General
Topic: PPP + RADIUS + Win.ADDomain = Problem
Replies: 3
Views: 360

Re: PPP + RADIUS + Win.ADDomain = Problem

Your radius server is not found... start there. Your firewall is probably blocking somewhere. I have it setup with no issues on both ppp and wireless for radius accounting with win AD+domain. If radius server found it would look something like this in radius, debug, packet: new request 1b:00 code=Ac...
by Cvan
Wed Jun 12, 2019 3:37 am
Forum: General
Topic: Make Hotspot Usernames for different APs
Replies: 3
Views: 255

Re: Make Hotspot Usernames for different APs

I think you can achieve this through address pool assignment on hotspot server and user profiles. If ap3_user connects to ap3; will get only an IP from specified pool from the ap3_dhcp server. If ap3_user connects to ap2; then ap3_dhcp will give IP from ap3 pool to user ap3, you block/reject/control...
by Cvan
Mon Jun 10, 2019 2:31 am
Forum: General
Topic: CAPsMan Error
Replies: 4
Views: 428

Re: CAPsMan Error

Never mind... I figured this out. So for reference.. what happened was through CAPsMAN; a new virtual interface (wlan%) for virtual AP is auto-created; in my case I am up to wlan44... I had to add that interface to the correct bridge and now it gets an IP from the correct dhcp server on the virtual ...
by Cvan
Mon Jun 10, 2019 2:16 am
Forum: General
Topic: CAPsMan Error
Replies: 4
Views: 428

Re: CAPsMan Error

Your apology is accepted. So I figured out my error, was using the incorrect discovery interface; which caused this error to occur. Now I am trying to get my dhcp server for my virtual wireless AP guest interface to assign an IP to clients when using CAPsMAN. But it will not for some reason unbeknow...
by Cvan
Sat Jun 08, 2019 2:44 am
Forum: General
Topic: CAPsMan Error
Replies: 4
Views: 428

CAPsMan Error

MT hap ac2:
local radios on MT router (wlan1 and wlan2) keep disconnecting from capsman with error??
removing stale connection because of ident conflct with [[BA:55:F4:22:02:11]]
by Cvan
Wed May 29, 2019 7:56 am
Forum: General
Topic: NBN FTTC TPG NCD + MT
Replies: 2
Views: 381

Re: NBN FTTC TPG NCD + MT

Excellent, thanks for that response.
by Cvan
Wed May 29, 2019 2:34 am
Forum: General
Topic: NBN FTTC TPG NCD + MT
Replies: 2
Views: 381

NBN FTTC TPG NCD + MT

NBN... National Broadband Network (AUS) FTTC... Fiber to the Curb.. ridiculous.. NCD... Network Connection Device TPG... ??? So to get my MT working with this new NBN it was a bit of a headache. So posting this for reference and someone else can avoid the same headache. First off... TPG is the ISP o...
by Cvan
Tue May 21, 2019 3:42 am
Forum: General
Topic: Hotspot Apple CNA
Replies: 9
Views: 881

Re: Hotspot Apple CNA

That is a good idea, and should effectively do the same thing, but cleaner w/o having to muck around with markup. Just need to set the trial to the right time window for CNA completion.

Thanks for that, Normis.
by Cvan
Wed May 15, 2019 2:24 am
Forum: General
Topic: Hotspot Apple CNA
Replies: 9
Views: 881

Re: Hotspot Apple CNA

It is a BYOD (bring your own device) environment and we are not allowed to modify any of the BYOD devices; we have virtually no control over them, so unfortunately we can not setup iOS profiles. Otherwise, yes that would be a great solution.
by Cvan
Mon May 13, 2019 7:21 am
Forum: General
Topic: Hotspot Apple CNA
Replies: 9
Views: 881

Re: Hotspot Apple CNA

Some slight of hand so to speak. Let them login passively and allow the CNA to do its remediation; then force them off and redirect them to external auth page where they can complete the registration process. All is transparent to the user. Using CNA web browser detection as well to make logic decis...
by Cvan
Sat May 11, 2019 4:30 am
Forum: General
Topic: Hotspot Apple CNA
Replies: 9
Views: 881

Re: Hotspot Apple CNA

The CNA browser has limited functionality. For our external authentication process; we need the users to download and install a file. Unfortunately, the CNA browser can not download files. The CNA provides a nice seamless intuitive user experience that we want to keep, rather then adding captive.app...
by Cvan
Fri May 10, 2019 8:14 am
Forum: General
Topic: Hotspot Apple CNA
Replies: 9
Views: 881

Hotspot Apple CNA

I need to somehow get past the Apple CNA (Captive Network Assistant) for hotspot. The CNA still needs to popup w/o giving internet access. Need to trick the CNA to think its online but still be restricted so user authentication can be processed externally before given full access. Anyone got an idea...
by Cvan
Mon Feb 25, 2019 5:05 am
Forum: General
Topic: DHCP multiple search DNS domain (DNS suffix)
Replies: 3
Views: 6172

Re: DHCP multiple search DNS domain (DNS suffix)

winbox->IP->dhcp server->network tab->select designated network->under domain text field put: "domainA.domainB domainC.domainD" I tried this and it does not work... take example; network 192.168.1.0/24 IN 'Domain text field' I have "domainA domainB.com" domainA works when I ping subDomainA resolves...
by Cvan
Thu Feb 14, 2019 1:32 am
Forum: General
Topic: L2TP/IPSEC on MAC OS trouble
Replies: 4
Views: 1308

Re: L2TP/IPSEC on MAC OS trouble

Common missed setting for MAC OS VPN clients is the checkbox or radio button to 'SEND ALL TRAFFIC OVER VPN (This Connection)' in the VPN advanced configuration on the MAC client. You will be able to connect to the VPN but no access to the intranet w/o that flag checked off, so no email. Guy above al...
by Cvan
Tue Feb 12, 2019 4:27 am
Forum: General
Topic: [Lost Interface] IP->Routes
Replies: 8
Views: 880

Re: [Lost Interface] IP->Routes

Bravo! I knew the answer would eventually surface! You are exactly precisely correct, vecernik87 - Thanks for that I am more and more convinced that @JordanR and @Cvan are talking about dynamic interfaces. Not static ones which I earlier identified as most probable solution. In both cases (both dyna...
by Cvan
Mon Feb 11, 2019 2:07 am
Forum: General
Topic: [Lost Interface] IP->Routes
Replies: 8
Views: 880

Re: [Lost Interface] IP->Routes

Same issue here... with PPTP and L2TP; when the interface falls out due to loss of connectivity... It can not re-establish the correct interface and always resets back to an unused sfp interface in fw rules and unknown in routes.. have not searched extensively for a solution as it has not gotten ann...
by Cvan
Mon Feb 04, 2019 12:17 am
Forum: General
Topic: Authentication Methods RADIUS VPN WINDOWS SERVER
Replies: 9
Views: 1809

Re: Authentication Methods RADIUS VPN WINDOWS SERVER

And what does the event viewer say in the AD/NPS logs on the Windows Server?

Are you specifying the domain attribute on the RADIUS client?

NAS-Port-type should be 5 (Virtual)
by Cvan
Thu Jan 31, 2019 6:30 am
Forum: General
Topic: Authentication Methods RADIUS VPN WINDOWS SERVER
Replies: 9
Views: 1809

Re: Authentication Methods RADIUS VPN WINDOWS SERVER

@cvan : He clearly has working radius, if the "unencrypted authentication" is enabled in Windows Server Network Policy, therefore he must have this "use radius" setting enabled in ROS. @krsz : Hi, tried to replicate it and ended up with same situation - OVPN does not work without enabled "unencrypt...
by Cvan
Thu Jan 31, 2019 3:37 am
Forum: General
Topic: Authentication Methods RADIUS VPN WINDOWS SERVER
Replies: 9
Views: 1809

Re: Authentication Methods RADIUS VPN WINDOWS SERVER

Did you turn on 'use radius' in your MT router PPP / Secrets - PPP Authentication&Accounting ?

Good point... turn on radius logging
by Cvan
Thu Jan 31, 2019 12:47 am
Forum: General
Topic: Hotspot external captive portal with radius authentication - flow and authentication confusion!
Replies: 2
Views: 1509

Re: Hotspot external captive portal with radius authentication - flow and authentication confusion!

Set your MT as the radius client for the Radius server, and check hotspot and use passthrough method
by Cvan
Thu Jan 31, 2019 12:45 am
Forum: General
Topic: Authentication Methods RADIUS VPN WINDOWS SERVER
Replies: 9
Views: 1809

Re: Authentication Methods RADIUS VPN WINDOWS SERVER

Your RADIUS client is your Mikrotik router? And your RADIUS Server is?
by Cvan
Thu Jan 31, 2019 12:43 am
Forum: General
Topic: Upgrade to MS-CHAPv2 RADIUS for >6.43
Replies: 3
Views: 708

Re: Upgrade to MS-CHAPv2 RADIUS for >6.43

I am using Active directory RADIUS server and mAP lite as the radius client and it works fine with AD/Radius Authentication (MS-CHAPv2).
by Cvan
Fri Jan 25, 2019 4:32 am
Forum: General
Topic: Radius - wireless login - to Active Directory
Replies: 5
Views: 888

Re: Radius - wireless login - to Active Directory

Okay, I got this working with a bit more trial and error. If anyone wants the info let me know. Ta! MIKROTIK MAP LITE In wireless security profile: GENERAL tab WPA EAP / WPA2 EAP unicast/group ciphers aes ccm / tkip RADIUS tab nothing checked EAP tab EAP Methods = passthrough TLS Mdoe: dont verify ...
by Cvan
Fri Jan 25, 2019 1:25 am
Forum: General
Topic: Radius - wireless login - to Active Directory
Replies: 5
Views: 888

Re: Radius - wireless login - to Active Directory

Okay, I got this working with a bit more trial and error. If anyone wants the info let me know. Ta!
by Cvan
Thu Jan 24, 2019 1:51 am
Forum: General
Topic: Radius - wireless login - to Active Directory
Replies: 5
Views: 888

Radius - wireless login - to Active Directory

Has anyone had success using MT as a Radius client connecting to NPS (Radius Server) with Active Directory?? I think I am close to getting it working, just missing something.. I have radius ppp working with VPN, but not radius wireless. I have a network policy setup on Windows 2012 server for authen...
by Cvan
Tue Nov 13, 2018 2:03 am
Forum: General
Topic: Netinstall does'nt working(?)
Replies: 8
Views: 771

Re: Netinstall does'nt working(?)

I had the same issue. What worked for me was loading a fresh clean install of Windows XP on a laptop with no updates and plugged straight into the router RB2011. After trying Netinstall that way; the install button worked for me. Before that; it was doing the same thing you describe when clicking in...
by Cvan
Fri Nov 09, 2018 5:22 am
Forum: General
Topic: DNS high CPU usage
Replies: 11
Views: 1485

Re: DNS high CPU usage

So after capturing some DNS logging to file I was able to pinpoint what looks like a PC that is infected that is sending random DNS queries for non-existent internal hosts; example (jnyyhwarsradr.fic) what to make of this? dns,packet --- got query from 10.0.0.169:50391: Nov/09/2018 14:12:35 dns,pack...
by Cvan
Fri Nov 09, 2018 4:56 am
Forum: General
Topic: DNS high CPU usage
Replies: 11
Views: 1485

Re: DNS high CPU usage

Okay, so I enabled system logging for DNS and what I noticed was that DNS queries made by PCs on the internal domain 'host.mtdomain' are being sent out to the ISP's DNS servers for an Answer and getting a reply back from the ISP's DNS servers with 'name error' maybe that is where the 0.0.0.0 is gett...
by Cvan
Fri Nov 09, 2018 4:43 am
Forum: General
Topic: DNS high CPU usage
Replies: 11
Views: 1485

Re: DNS high CPU usage

Same here. I don't have high DNS CPU usage but I DO have the unknown TYPE DNS entries in cache all internal...
Don't know what is causing them. Infected PC on the intrAnet...? How can I debug this, how can I track to the root?
And what does the 'N' stand for in the first column of the DNS cache table
by Cvan
Fri Nov 09, 2018 4:38 am
Forum: General
Topic: Netinstall does'nt working(?)
Replies: 8
Views: 771

Re: Netinstall does'nt working(?)

Turn windows firewall off. Turn all network security stuff off. Run in Windows XP...reboot and Try that
by Cvan
Thu Nov 08, 2018 4:30 am
Forum: General
Topic: DNS high CPU usage
Replies: 11
Views: 1485

Re: DNS high CPU usage

I get the same unknown entries; except the entries are for internal nodes on intrAnet..
I already have the DNS firewall rules in place for WAN.. why do I get these UNKNOWN type entries in MT DNS cache??
by Cvan
Thu Nov 08, 2018 4:25 am
Forum: General
Topic: VPN with Linux
Replies: 4
Views: 1194

Re: VPN with Linux

I got this working today using openSuse 42.3 and network-manager-l2tp plugin + Mate desktop.

PPP settings:
MTU/MRU 1400
All Auth methods are checked

Also got PPTP working as well; had to modify default suse firewall rules to get it to work though.
by Cvan
Tue Nov 06, 2018 3:19 am
Forum: General
Topic: DNS query
Replies: 3
Views: 635

Re: DNS query

If I ping hotmail or outlook.com from the MT terminal, I get a reply MOST times w/o failure... Puzzled still. Then of course after that gets added to the DNS cache I can ping both from my computer and get a reply; no problem. Somewhere a bad DNS entry is getting added for both hotmail and outlook ra...
by Cvan
Tue Nov 06, 2018 3:15 am
Forum: General
Topic: DNS query
Replies: 3
Views: 635

Re: DNS query

[admin@***] /ip dns> print servers: dynamic-servers: 59.86.160.27,125.213.172.129 allow-remote-requests: yes max-udp-packet-size: 4096 query-server-timeout: 2s query-total-timeout: 10s max-concurrent-queries: 100 max-concurrent-tcp-sessions: 20 cache-size: 2048KiB cache-max-ttl: 10s cache-used: 295K...
by Cvan
Fri Nov 02, 2018 1:13 am
Forum: General
Topic: DNS query
Replies: 3
Views: 635

DNS query

ping hotmail.com 'Ping request could not find host hotmail.com. Please check the name and try again.' Mikrotik IP/DNS/flush cache.. ping hotmail.com... Reply from 204.79.197.212: bytes=32 time=6ms TTL=118' I have to do this everyday I come on otherwise endpoints connected to internet via Mikrotik ro...
by Cvan
Sun Oct 07, 2018 3:42 am
Forum: General
Topic: S+RJ10: RJ45 SFP+ 10/100/1000M/2.5G/5G/10G copper module
Replies: 14
Views: 1654

Re: S+RJ10: RJ45 SFP+ 10/100/1000M/2.5G/5G/10G copper module

I knew you were going to say that.
That is true; I posted wrong in the topic; as I have S-RJ01 SFP module.
by Cvan
Sat Oct 06, 2018 7:54 am
Forum: General
Topic: S+RJ10: RJ45 SFP+ 10/100/1000M/2.5G/5G/10G copper module
Replies: 14
Views: 1654

Re: S+RJ10: RJ45 SFP+ 10/100/1000M/2.5G/5G/10G copper module

Okay, so we have established the one I have (S-RJ01) is indeed compatible with RB2011..
So how do I make it work like another Gbit interface? I set auto-negotiation off and it shows link up but it will NOT take an IP from DHCP... and then?
by Cvan
Fri Oct 05, 2018 6:24 am
Forum: General
Topic: S+RJ10: RJ45 SFP+ 10/100/1000M/2.5G/5G/10G copper module
Replies: 14
Views: 1654

Re: S+RJ10: RJ45 SFP+ 10/100/1000M/2.5G/5G/10G copper module

I am confused then... This is the one I bought

Official MT document? Check this out:

http://shop.duxtel.com.au/pdf/sfp_modul ... 115330.pdf
by Cvan
Fri Oct 05, 2018 4:25 am
Forum: General
Topic: S+RJ10: RJ45 SFP+ 10/100/1000M/2.5G/5G/10G copper module
Replies: 14
Views: 1654

Re: S+RJ10: RJ45 SFP+ 10/100/1000M/2.5G/5G/10G copper module

Mikrotik says its tested and approved with RB2011
by Cvan
Fri Oct 05, 2018 2:20 am
Forum: General
Topic: S+RJ10: RJ45 SFP+ 10/100/1000M/2.5G/5G/10G copper module
Replies: 14
Views: 1654

Re: S+RJ10: RJ45 SFP+ 10/100/1000M/2.5G/5G/10G copper module

I was thinking I would be able to use it as another 1GB Lan port, but how? It will not get an IP from DHCP at the moment... And then?

RB2011 have a fan? Not sure.. But why do you ask?
by Cvan
Wed Oct 03, 2018 8:48 am
Forum: General
Topic: Mikrotik ADSL Mini
Replies: 4
Views: 498

Re: Mikrotik ADSL Mini

Maybe we can get a compatibility list of successful setups with MT (SFP Modules) for ADSL and providers...

AT&T?
Sprint?
Verizon?
Vodafone?
Telstra?
TPG?
by Cvan
Wed Oct 03, 2018 8:36 am
Forum: General
Topic: Multiple static public IPs through one interface
Replies: 26
Views: 6493

Re: Multiple static public IPs through one interface

BTW, this worked, and I was able to use the additional IP's with your changes, thanks many
by Cvan
Wed Oct 03, 2018 8:36 am
Forum: General
Topic: S+RJ10: RJ45 SFP+ 10/100/1000M/2.5G/5G/10G copper module
Replies: 14
Views: 1654

Re: S+RJ10: RJ45 SFP+ 10/100/1000M/2.5G/5G/10G copper module

So if I have another RB2011 and another SFP module same as first one I can link these two RB2011 through SFP... and then?
by Cvan
Thu Sep 27, 2018 3:19 am
Forum: General
Topic: VPN unknown Interface FW/Routes
Replies: 1
Views: 265

VPN unknown Interface FW/Routes

Whenever my VPN Interface loses connection then the FW and route rules switch to 'unknown' interface. I have to manually reset the rules to the correct interface (ex; lt2p-offsite). Is there way to have have the FW and Route automatically setup the correct interface after loss of connectivity from p...
by Cvan
Thu Sep 27, 2018 3:14 am
Forum: General
Topic: S+RJ10: RJ45 SFP+ 10/100/1000M/2.5G/5G/10G copper module
Replies: 14
Views: 1654

S+RJ10: RJ45 SFP+ 10/100/1000M/2.5G/5G/10G copper module

What can I do with this SFP module?
I plugged it into my RB2011 and I am thinking I can use it like another interface?

Pros?
by Cvan
Thu Sep 27, 2018 3:10 am
Forum: General
Topic: Multiple static public IPs through one interface
Replies: 26
Views: 6493

Re: Multiple static public IPs through one interface

Thanks for that, your way sounds like the correct way of doing it. I will try your configuration and see how it goes.
by Cvan
Mon Sep 24, 2018 9:26 am
Forum: General
Topic: Multiple static public IPs through one interface
Replies: 26
Views: 6493

Re: Multiple static public IPs through one interface

Status Update: I did get this working but only with the two IP's the ISP said were usable. 189/30 and 190/30. What I did was this - Added a new ppp profile with pool for 188/30 ( not sure if I necessary ) Assigned the ppp profile to the pppoe-out connection Created a bridge and put the pppoe-out con...
by Cvan
Fri Sep 21, 2018 2:39 am
Forum: General
Topic: RB2011UiAS-IN ether boot death loop after auto-upgrade
Replies: 4
Views: 638

Re: RB2011UiAS-IN ether boot death loop after auto-upgrade

Not true. Nearly the same exact situation happened to mine. RB2011UiAS. It was running an old ROS. I tried to update it online.., Once it was done it freaked out and went into a constant reboot and just said 'ether boot' on the led screen. Sent emails to support, they did reply but was not much help...
by Cvan
Thu Sep 20, 2018 3:35 am
Forum: General
Topic: mAP Lite DHCP client
Replies: 6
Views: 630

Re: mAP Lite DHCP client

Okay... final notes.. So backtracked my switch vlan stuff. Noticed that on switch2 vlan mode was enabled, even though I thought I had it disabled.. So through the ROS GUI I went into [Switch] and [Port] and reset [switch2 cpu] and in [vlan] removed port 9/10. Through the GUI these change did NOT sti...
by Cvan
Thu Sep 20, 2018 2:56 am
Forum: General
Topic: mAP Lite DHCP client
Replies: 6
Views: 630

Re: mAP Lite DHCP client

I plug the mAP-LiTe into vlan3 port (switch1 of RB2011) and gets an IP with no problem.....?
I plug the mAP-LiTe into port 9/10 (switch2 of RB2011) (no vlans) and it will not take the IP from DHCP server on RB2011....
by Cvan
Thu Sep 20, 2018 2:35 am
Forum: General
Topic: mAP Lite DHCP client
Replies: 6
Views: 630

Re: mAP Lite DHCP client

mAP lite firmware

[admin@maplite] /system routerboard> print
routerboard: yes
board-name: mAP lite
model: RouterBOARD mAP L-2nD
revision: r2
serial-number:
firmware-type: qca9531L
factory-firmware: 3.41
by Cvan
Thu Sep 20, 2018 2:32 am
Forum: General
Topic: mAP Lite DHCP client
Replies: 6
Views: 630

Re: mAP Lite DHCP client

I plug a windows laptop in and get an IP from DHCP server on RB2011 with no problems. I plug the mAP-LiTe in and it does not get an IP from the DHCP server on RB2011 mAP-LiTe config # sep/18/2018 11:26:56 by RouterOS 6.42.3 # software id = RGGA-3ASW # # model = RouterBOARD mAP L-2nD # serial number ...
by Cvan
Wed Sep 19, 2018 2:47 pm
Forum: General
Topic: RB2011 boot loop after reboot
Replies: 3
Views: 927

Re: RB2011 boot loop after reboot

Yes, same thing happened to me with an RB2011. I tried to upgrade to the latest ROS and when it rebooted it would just beep and reboot nonstop. Something about ether boot on the led screen.. Anyway, I had to use Netinstall to bring it back to life, and it took many attempts to get netinstall working...
by Cvan
Wed Sep 19, 2018 9:02 am
Forum: General
Topic: mAP Lite DHCP client
Replies: 6
Views: 630

Re: mAP Lite DHCP client

RB2011 = 6.42.6
mAP lite = 6.40.8

Tried different cables, tried different mAP lites..
Still no go
by Cvan
Wed Sep 19, 2018 4:45 am
Forum: General
Topic: mAP Lite DHCP client
Replies: 6
Views: 630

mAP Lite DHCP client

Spinning on this one for a while..

I plug a mAP lite in on eth1 to RB2011 eth10
and the lite will not bind to the IP offered to it from
the DHCP server on RB2011.. Just stays in lease offered state.

The mAP lite has been reset to fac default.

????
by Cvan
Wed Sep 12, 2018 9:51 am
Forum: General
Topic: Mikrotik ADSL Mini
Replies: 4
Views: 498

Re: Mikrotik ADSL Mini

I guess I will get this one, V5311 VDSL2 SFP Bridge (Telco Model), unless other suggestions..? Not having any experience with this, what is a good MT router to pair with this SFP module? Any compatibility issues to be aware of with SFP and MT routers? VPI/VCI - 8/35 Encap - VCMUX Service - PVC:8/35 ...
by Cvan
Wed Sep 12, 2018 7:57 am
Forum: General
Topic: Mikrotik ADSL Mini
Replies: 4
Views: 498

Re: Mikrotik ADSL Mini

Okay thanks
by Cvan
Wed Sep 12, 2018 6:05 am
Forum: General
Topic: Mikrotik ADSL Mini
Replies: 4
Views: 498

Mikrotik ADSL Mini

Any option available to use an ADSL connection straight from a Mikrotik Router? Mini PCI ADSL card?
by Cvan
Wed Sep 12, 2018 5:34 am
Forum: General
Topic: Multiple static public IPs through one interface
Replies: 26
Views: 6493

Re: Multiple static public IPs through one interface

That is exactly what I am wanting and intending to do... Route traffic to different vlans from these public IPs to vmware servers and keep one ip then for SMS maintenance stuff..
Can I do this without losing connectivity for any amount of time on the pppoe-out interface?
by Cvan
Wed Sep 12, 2018 3:46 am
Forum: General
Topic: Multiple static public IPs through one interface
Replies: 26
Views: 6493

Re: Multiple static public IPs through one interface

Those IPs both work as well for torch from my phone to pppoe-out1 via ICMP. Does this mean I can use those also?
by Cvan
Wed Sep 12, 2018 2:42 am
Forum: General
Topic: Multiple static public IPs through one interface
Replies: 26
Views: 6493

Re: Multiple static public IPs through one interface

I do see ICMP results in torch when I ping *.*.135.189 on pppoe-out1 interface from my iPhone on 4G. Same result with *.*.135.190. My current public static IP is same.same.209.206 So I am thinking I can use both *.*.135.189 & *.*.135.190 along with my current static of same.same.209.206; giving me t...
by Cvan
Tue Sep 11, 2018 3:30 am
Forum: General
Topic: Multiple static public IPs through one interface
Replies: 26
Views: 6493

Re: Multiple static public IPs through one interface

This was their response:

Network IP *.*.135.188/30
Subnet Mask *.*.255.252
Host IP's *.*.135.189 & *.*.135.190 (Usable IP's)
Broadcast *.*.135.191
by Cvan
Sat Sep 08, 2018 1:18 am
Forum: General
Topic: Multiple static public IPs through one interface
Replies: 26
Views: 6493

Re: Multiple static public IPs through one interface

The ISP gave out / 30, static IP assignment. Lets assume a clean situation, do I need to make another pppoe client connection to the ISP, one for each IP?
It sounds like NOT... Assign the additional static IP to the existing pppoe-client out connection on eth1 interface? Or how to?
by Cvan
Fri Sep 07, 2018 9:45 am
Forum: General
Topic: Multiple static public IPs through one interface
Replies: 26
Views: 6493

Re: Multiple static public IPs through one interface

And for public IP space?

ISP has provisioned two Static public IP addresses.
Is there a way to have both public IPs come through eth1 interface via pppoe client connection to ISP or how?
by Cvan
Fri Sep 07, 2018 5:01 am
Forum: General
Topic: Multiple static public IPs through one interface
Replies: 26
Views: 6493

Multiple static public IPs through one interface

Can you? and how can you connect multiple static IPs to one interface (eth1)
Is there a limit? Best way to do this in routerOS?
by Cvan
Tue Sep 04, 2018 11:40 am
Forum: General
Topic: pppoe-client multiple
Replies: 2
Views: 252

Re: pppoe-client multiple

Okay, Thanks for that bit of info. But before I get to that configuration part, I first need to setup the two pppoe client connections on ether1. I have read some posts and it sounds like I need to create a WAN bridge and assign it as the interface for pppoe-cl1 and pppoe-cl2 and assign each IP to t...
by Cvan
Tue Sep 04, 2018 6:16 am
Forum: General
Topic: pppoe-client multiple
Replies: 2
Views: 252

pppoe-client multiple

I have two static IPs from ISP - A and B Can I have them both public IPs connected at the same time via pppoe-client connection through a single interface (ether1)? Then can I separate the traffic; say for example have all IO traffic for vlan2 routed through IP (A) and all IO traffic for vlan3 route...
by Cvan
Fri Aug 31, 2018 12:28 am
Forum: General
Topic: VPN PPTP L2TP
Replies: 2
Views: 566

Re: VPN PPTP L2TP

With said device is this automatic or is additional configuration needed? RB2011?
by Cvan
Thu Aug 30, 2018 8:25 am
Forum: General
Topic: L2TP is disconnect after every 8 hours
Replies: 47
Views: 7475

Re: L2TP is disconnect after every 8 hours

No, between 2 MT routers works great and between my iPhone and MT router I have had it stay connected for a day w/o dropping
by Cvan
Thu Aug 30, 2018 3:59 am
Forum: Wireless Networking
Topic: 5G wireless
Replies: 1
Views: 750

5G wireless

Can I use a wireless repeater or extender for 5G? or what is the best way to strengthen 5G signal?
by Cvan
Thu Aug 30, 2018 3:56 am
Forum: General
Topic: L2TP is disconnect after every 8 hours
Replies: 47
Views: 7475

Re: L2TP is disconnect after every 8 hours

I have an L2TP connection between countries and it has been up steady for 6d 22:34:41 .. no issues.. the only problem it has is when the ISP connection on either side drops out, but then it re-connects as soon as the line is back. However, I do have to fix the fw rules to re-select the L2TP interfac...
by Cvan
Thu Aug 30, 2018 3:44 am
Forum: General
Topic: VPN PPTP L2TP
Replies: 2
Views: 566

VPN PPTP L2TP

So... I switched everyone over to L2TP VPN. Works great except slower then PPTP because less / no encryption I assume. L2TP is more consistent with a wide variety of connecting devices over 3G/4G , ADSL, Fiber, NBN etc... Android, iPhone, Mac, Windows... But some here still just stuck on PPTP and th...
by Cvan
Thu Aug 30, 2018 3:21 am
Forum: General
Topic: pppoe-out connection
Replies: 13
Views: 1007

Re: pppoe-out connection

Good answer!, thanks for that.
by Cvan
Sun Aug 26, 2018 9:32 am
Forum: General
Topic: pppoe-out connection
Replies: 13
Views: 1007

Re: pppoe-out connection

I am thinking more of a script that will send an email or SMS message to me when specific conditions are met.
Surely there is a way to send an HTTP request from router OS when a log event or fw event is triggered...?
by Cvan
Fri Aug 24, 2018 2:05 am
Forum: General
Topic: pppoe-out connection
Replies: 13
Views: 1007

Re: pppoe-out connection

Maybe, how can I log to file every time our connection drops out from the carrier/ISP??

We keep losing our L2TP tunnel as well and have to constantly rebuild the tunnel and reset the FW rules..
by Cvan
Thu Aug 23, 2018 7:11 am
Forum: General
Topic: pppoe-out connection
Replies: 13
Views: 1007

Re: pppoe-out connection

Fiber (FTTP)

Not really sure if it is carrier or not. So asking what tools available can I use to unveil such mysteries..?
by Cvan
Wed Aug 22, 2018 4:57 am
Forum: General
Topic: pppoe-out connection
Replies: 13
Views: 1007

Re: pppoe-out connection

Port based VLAN isolation setup. My concern is if this is an attack of some sort

ROS version stable 6.42.6
by Cvan
Tue Aug 21, 2018 9:10 am
Forum: General
Topic: pppoe-out connection
Replies: 13
Views: 1007

Re: pppoe-out connection

pppoe, ppp, info pppoe-out1:terminating... disconnected
pppoe, ppp, info pppoe-out1:disonnected
pppoe, ppp, info pppoe-out1:connecting
pppoe, ppp, info pppoe-out1:terminating...

etc; exact details in attached image
by Cvan
Tue Aug 21, 2018 8:31 am
Forum: General
Topic: pppoe-out connection
Replies: 13
Views: 1007

pppoe-out connection

Our pppoe-out internet connection has gone down twice now over the past two weeks.
Each time for nearly exactly 60 seconds. What red flags should be raised? What additional logging/actions should be taken?
Talked to the ISP and they said no known network outages during those times...
by Cvan
Sat Aug 18, 2018 1:47 pm
Forum: General
Topic: VPN (L2TP/IPsec) to VLAN
Replies: 8
Views: 2478

Re: VPN (L2TP/IPsec) to VLAN

Ahh, I see now where my failure is from your post. I totally missed it from my view. I do have DNS blocking rules in my firewall on the input chain. That seems like it would make sense. However, I have 3 ppp profiles for my vpn clients. One for admins allowing all access, which is on the same subnet...
by Cvan
Sat Aug 18, 2018 12:31 pm
Forum: General
Topic: VPN (L2TP/IPsec) to VLAN
Replies: 8
Views: 2478

Re: VPN (L2TP/IPsec) to VLAN

Should DNS resolution from the vpn client be working with this config? At the moment it is not, I can ping by IP but that’s it .?
by Cvan
Fri Aug 10, 2018 10:08 am
Forum: General
Topic: WLAN 5G speeds
Replies: 0
Views: 241

WLAN 5G speeds

I have an MT RB2011 and RBD52G-5HacD2HnD-TC: hAP ac² Dual-Concurrent 2.4/5GHz AP Port based vlans bridge vlan2 (ether2) 1Gbps vlan3 (ether 3/4) 1Gbps I have a ReadyNas media device connected on vlan3/ether3. on snet 192.168.5.3/24 bonded nics @ 1Gbps I have a MT hAP device connected to vlan3/ether4 ...
by Cvan
Fri Aug 10, 2018 4:03 am
Forum: General
Topic: VPN (L2TP/IPsec) to VLAN
Replies: 8
Views: 2478

Re: VPN (L2TP/IPsec) to VLAN

Great info, thanks for that
by Cvan
Thu Aug 09, 2018 9:55 am
Forum: General
Topic: IntraVLAN speeds
Replies: 12
Views: 734

Re: IntraVLAN speeds

Thanks for that added information. I will keep that in mind as I go forward with my configurations.
by Cvan
Thu Aug 09, 2018 9:23 am
Forum: General
Topic: L2TP-IPSec issues
Replies: 6
Views: 422

Re: L2TP-IPSec issues

User port strict and obey under Peers
by Cvan
Thu Aug 09, 2018 9:21 am
Forum: General
Topic: VPN (L2TP/IPsec) to VLAN
Replies: 8
Views: 2478

VPN (L2TP/IPsec) to VLAN

I have 3 vlans.
v1
v2
v3

I want certain PPP / secret (accounts) to only have access to certain vlans.
At the moment, any VPN user has access to all vlans.

For example:

VPN user1 can ONLY access v1
VPN user2 can ONLY access v2
VPN user3 can access both v1 and v2

Is this possible?
by Cvan
Thu Aug 09, 2018 1:58 am
Forum: General
Topic: IntraVLAN speeds
Replies: 12
Views: 734

Re: IntraVLAN speeds

Okay, the FastTrack connection made ALL the difference. On vlan3 Rx to vlan2 I went from 20 MB/s to 93 MB/s over the switch chip. Not quite as fast as the physical layer but that is well within acceptable ranges. Also - I did watch the CPU and it went from 100% before FastTrack to 92% after FastTrac...
by Cvan
Thu Aug 09, 2018 1:41 am
Forum: General
Topic: IntraVLAN speeds
Replies: 12
Views: 734

Re: IntraVLAN speeds

Thanks for all the responses. I will try the FastTrack and report back.
by Cvan
Wed Aug 08, 2018 11:14 am
Forum: General
Topic: IntraVLAN speeds
Replies: 12
Views: 734

Re: IntraVLAN speeds

port based vlan
RB2011U

Switch1 1Gbps
Bridge1
Vlan(1) 10.0.0.3/24 ether 3

Bridge2
Vlan(2) 192.168.2.0/24 ether 4/5
Vlan(3) 192.168.7.0/24 ether 2

Maybe I can use FastTrack to speed it up?
by Cvan
Wed Aug 08, 2018 10:02 am
Forum: General
Topic: IntraVLAN speeds
Replies: 12
Views: 734

IntraVLAN speeds

I have 3 vlans... v1 v2 v3 I have a storage ReadyNAS device on v2 I have a winbox on v2 that is Gigabit connected.. When I download a 6Gig ISO file from the ReadyNas device (SMB) to my winbox on v2 I get 110MB /sec (Nominal) Then when I take that same Winbox and connect it to v1 or v3 and download t...
by Cvan
Sat Jun 09, 2018 3:42 am
Forum: Wireless Networking
Topic: mAP lite wireless AP
Replies: 0
Views: 290

mAP lite wireless AP

Hello, My mAP Lite goals: 1: Connect mAP lite to Wireless AP to receive internet. RESULT=SUCCESS 2: Connect to mAP lite virtual Wireless AP bridge and get internet. RESULT=SUCCESS 3: Connect to mAP lite virtual Wireless AP bridge when mAP lite Wireless station can NOT connect to external AP for inte...