MikroTik

Sarel0092

If the router is your DNS server or if you have a DNS server in your network and you have access to it add a A record for the hostname/domain name that points to the internal IP address of the server. Alternatively you can try to add another port forwarding rule and set the In.Interface to your brid...

Sarel0092

hello, can anyone tell me how to enable discovery on only one interface in the new version if all interfaces are static? Create an interface list and add the interface you want to enable discovery on to the list. Then select the interface list under neighbor discovery. /interface list add name=exam...

Sarel0092

Do you want to block specific services or block Internet access for specific devices?

Sarel0092

I use the following to send notifications via Telegram in a script:

/tool fetch url="https://api.telegram.org/botxxxxxxxx/sendMessage\?chat_id=-xxxx&text=Test" keep-result=no;

Edit:
Used with version 6.46.6.

Sarel0092

It should look something like this: /ip firewall filter add chain=forward action=accept src-address=192.168.2.0/24 dst-address=192.168.4.0/24 add chain=forward action=accept src-address=192.168.4.0/24 dst-address=192.168.2.0/24 add chain=forward action=drop src-address=192.168.2.0/24 dst-address=192...

Sarel0092

Do the host names/website addresses show up in your DNS cache?

Sarel0092

Sarel0092

What exactly do you want to do?

Port forward to a specific private IP address?

Sarel0092

Is "allow remote requests" enabled under IP DNS?

Sarel0092

Keep getting the following error when trying to connect to any router:

"ERROR: no roteros.jg found"

Was working fine on version 3.19.

Routers are on version 6.45.6.

Any ideas of what it could be?

Sarel0092

Can you ping a PC on your local network from the VPN router?

Sarel0092

Can you ping the remote PC?

Sarel0092

Can you export the rest of your config?
/export hide-sensitive

Sarel0092

Can you access the FTP server in your local network?

Can you export your NAT config?
/ip firewall nat export file=ip-firewall-nat

Sarel0092

Is the port you want to see the arp records from in a bridge or is it standalone?

If its standalone you can use:
/ip arp print where interface=<interface name>

Sarel0092

What is the model number of the router you are using?

What is the license level on the router?

The below link show the limitations of each license level.
https://wiki.mikrotik.com/wiki/Manual:License

Sarel0092

Can you ping the PC you want to access from the MikroTik router on site A? If you can then you should just have to setup port forwarding as follow: /ip firewall nat add chain=dst-nat in-interface=<wan interface> protocol=<tcp or udp> dst-port=<port> action=dst-nat to-addresses=<remote pc> to-ports=<...

Sarel0092

Have to managed to resolve the problem?

If not can you export the config?
/export hide-sensitive

Sarel0092

Is the OpenVPN working?

Sarel0092

For this you most likely have to look at a RADIUS server.

You can look at the MikroTik user manager:
https://wiki.mikrotik.com/wiki/Manual:User_Manager
https://wiki.mikrotik.com/wiki/User_Manager/Limiting

Sarel0092

Do you use a domain/hostname in your mobile CCTV application to access your CCTV remotely?

Sarel0092

From my understanding you should just have to use a NAT rule to forward all traffic for the WAN to the IP of the pppoe client then a NAT rule to translate all traffic from pppoe client to the specific WAN IP. /ip firewall nat add chain=dstnat dst-address=45.45.45.2 action=dst-nat to-addresses=10.2.0...

Sarel0092

On your VPN router do you have any NAT rules specifying what IP ranges can be translated?

Sarel0092

I would suggest looking at the default profiles for your PPP connections.

By default the PPTP client connection will use the "default-encryption" profile.

You can use the following command or just go to PPP > Profiles
/ppp profile print

Sarel0092

Have you tried using a different IP range for the Ubuntu PC then blocking that range from accessing your local network?

Sarel0092

Has your problem been resolved?

If not can you export the config of your MikroTik router that's on 192.168.0.30?

Sarel0092

Thanks for the config. Try with the following changes: /ip pool set POOL-10.11.2 next-pool=POOL-10.11.5 set POOL-10.11.5 next-pool=none Are you linking each user to the "2M_Plan@10" or the "2M_NN_Plan@10" profile? Is there any specific reason why you are also running the followin...

Sarel0092

Can you export your config?

Sarel0092

It depends what you want to use the bridge for. If you just want a loopback interface you can create the bridge without any ports assigned to it, you'll just assign the bridge an IP address. For a normal setup where the router provides DHCP for all the LAN ports (except the port connected to the WAN...

Sarel0092

Your config should look something like this: Note: Before you can use this config you'll have to reset the router to factory default with no config. You can use the following command: system reset-configuration no-defaults=yes skip-backup=yes Config after resetting the router: /interface ethernet se...

Sarel0092

1. Listen on both IPv4 and IPv6 for incoming client connections; 2. Listen on both UDP 1194 and TCP 443 ports And push the following setup to clients: 1. Run in ethernet (tap) mode (layer 2); 2. Assign one static public IPv4 address per client (the server has its own /24 public IPv4 prefix); 3. Ass...

Sarel0092

For the L2TP server problem I found that simply disabling and re-enabling it resolved the problem.

/interface l2tp-server server set enabled=no
/interface l2tp-server server set enabled=yes

Sarel0092

It should be possible. You can look at the following link for the OpenVPN Client setup on a MikroTik router: https://wiki.mikrotik.com/wiki/Manual:Interface/OVPN

Sarel0092

I found that simply disabling and re-enabling the L2TP server resolved the problem.

/interface l2tp-server server set enabled=no
/interface l2tp-server server set enabled=yes

Sarel0092

You should be able to just bridge the ports and set queues with the bandwidth limits on each interface going to the customers router.

Sarel0092

Did you have a specific MikroTik router in mind?

Sarel0092

If you have assigned a static IP address for each PPTP connection then you can just use the following: :local IP1 "192.168.188.5" :local IP2 "192.168.188.6" :local IP3 "192.168.188.7" :if ([/ping $IP1 count=2]=0) do={/ppp active remove number=[/ppp active find where add...

Sarel0092

Can you export your routers PPP and Wireless configs? To export the PPP settings: ppp export hide-sensitive To export the Wireless settings: interface wireless export hide-sensitive You can also export the full configuration of your router: export hide-sensitive The "hide-sensitive" part w...

Sarel0092

Is your PPTP VPN using a different IP range as your local network?

If it is then you need to add a rule in NAT to translate that IP range to your public IP address for Internet access.

Sarel0092

I would suggest trying to login into your router remotely using the public IP address.

Go to https://www.whatsmyip.org/ to see what your current Public IP address is.

If you can log into the router remotely. Then you have to decide what VPN protocol your want to use.

Sarel0092

If you setup the VPN connection on your PC do you still get the 2MB?

Sarel0092

You can try the below code: import paramiko ssh = paramiko.SSHClient() ip_0 = 'router ip address' user_0 = 'username' pass_0 = 'password' com_0 = 'ip dhcp-server lease print' #com_0 = 'ip dhcp-server lease print where mac-address=XX:XX:XX:XX:XX:XX' # Add the MAC address of the device com_1 = 'ip arp...

Sarel0092

I use the below code, this works with special characters in the password: import paramiko ssh = paramiko.SSHClient() ip1 = 'X.X.X.X' u1 = 'user2' p1 = '#$!@%&' ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy()) ssh.connect(ip1, port=5252, username=u1, password=p1) stdin, stdout, stderr = ...

Sarel0092

Do you have any firewall rules in place for the VPN connection?

Sarel0092

Under "ip > firewall > service ports" is sip or siphelper enabled?

Sarel0092

DON'T buy any hardware from Mikotik, NO SUPPORT AT ALL. I agree, but only when it comes to their RBSXTLTE3-7 and RBwAPR-2nD&R11e-LTE. I've been talking to their support about the routers loosing LTE connection and can't reconnect. All their support stopped end of 2018. Makes me wonder if its th...

Sarel0092

I've been talking to MikroTik support since September last year. I'm currently on v6.43.8 and I've also tested v6.42.11, but still experience the same problem.

Now they aren't responding to email.

It doesn't seem like they will fix this problem.

Sarel0092

You can look at the following links:
https://www.marthur.com/networking/mikr ... ction/382/
https://wiki.mikrotik.com/wiki/Manual:S ... our_Router

Sarel0092

Hi All, Has anyone had the below problems with the SXT LTE? Can't automatically reconnect if connection is dropped. No traffic can passthrough the LTE connection then you have to disable the interface and enable it again. When this happens I can see the LTE interface got a IP address. Currently I'm ...

Search found 49 matches