Community discussions

Search found 25 matches

by Shefartech
Mon Aug 19, 2019 10:11 am
Forum: General
Topic: Access from the Internet
Replies: 23
Views: 1345

Re: Access from the Internet

Sindy Took a step back Sunday so I could try your suggestions this morning when I was fresh. Sadly the last recommendation you made to insert src-address =!192.168.0.0/16 instead of in-interface sadly did not work. On the positive side, I did however note that the counters on the slave did change wh...
by Shefartech
Mon Aug 19, 2019 9:38 am
Forum: Beginner Basics
Topic: Remote Access from the WAN
Replies: 12
Views: 805

Re: Remote Access from the WAN

TDW With your suggestions, I believe the routers are much better configured and secure now. Thank you I have two questions though: 1. Managed to update all the interface with the correct MAC address. However, the Admin MAC Address on the Bridge is still incorrect. Will it effect the network in any w...
by Shefartech
Sun Aug 18, 2019 1:46 pm
Forum: General
Topic: Access from the Internet
Replies: 23
Views: 1345

Re: Access from the Internet

Hello again Sindy
No, have not converted the slave (inner) router as yet to bridge.
When I tried to create rule, you just suggested, on the slave, I get the following error message:
Couldn't add New NAT Rule - incoming interface matching not possible in output and postrouting chains (6)
by Shefartech
Sun Aug 18, 2019 1:30 pm
Forum: Beginner Basics
Topic: Remote Access from the WAN
Replies: 12
Views: 805

Re: Remote Access from the WAN

Thank you for the feedback. I believe all are very appropriate. Router 1 1. Correct, I loaded a backup from another configuration. Have 5 similar sites, same router model, same ISP and configuration, only difference is the public IP and VLAN ID. Any suggestion to remove the MAC addresses? 2. Sock mu...
by Shefartech
Sun Aug 18, 2019 11:58 am
Forum: General
Topic: Access from the Internet
Replies: 23
Views: 1345

Re: Access from the Internet

Sindy, you are a star What you suggest makes a lot of sense. I will make the changes you suggested, though need one clarification: Why disable DHCP servers from both routers? Where will the clients obtain an IP address? Again, excuse my ignorance. On a negative note, I created a NAT rule for one AP,...
by Shefartech
Sun Aug 18, 2019 10:45 am
Forum: General
Topic: Access from the Internet
Replies: 23
Views: 1345

Re: Access from the Internet

So appreciate your feedback. Your comment about the dst-nat rule on the outer ("master") router, add action=dst-nat chain=dstnat comment="WiFI AP Access" dst-port=50021-50024 in-interface-list=WAN protocol=tcp to-addresses=192.168.2.1 was merely something I was trying. It did not work anyways. I agr...
by Shefartech
Sun Aug 18, 2019 8:20 am
Forum: General
Topic: Access from the Internet
Replies: 23
Views: 1345

Re: Access from the Internet

Herewith are the configuration files Router 1 # aug/18/2019 08:02:03 by RouterOS 6.45.3 # software id = VERF-DUV5 # # model = 2011UiAS-2HnD # serial number = B9070AA4FA9D /interface bridge add admin-mac=CC:2D:E0:39:D0:7E auto-mac=no name="Bridge Nyika Master" /interface ethernet set [ find default-n...
by Shefartech
Sun Aug 18, 2019 8:15 am
Forum: Beginner Basics
Topic: Remote Access from the WAN
Replies: 12
Views: 805

Re: Remote Access from the WAN

Herewith are the configuration files Router 1 # aug/18/2019 08:02:03 by RouterOS 6.45.3 # software id = VERF-DUV5 # # model = 2011UiAS-2HnD # serial number = B9070AA4FA9D /interface bridge add admin-mac=CC:2D:E0:39:D0:7E auto-mac=no name="Bridge Nyika Master" /interface ethernet set [ find default-n...
by Shefartech
Sun Aug 18, 2019 8:00 am
Forum: Beginner Basics
Topic: Remote Access from the WAN
Replies: 12
Views: 805

Re: Remote Access from the WAN

TDW
I am trying to accessing the AP's from outside the LAN1 and LAN2 networks.
And yes, the counters did change.
by Shefartech
Sat Aug 17, 2019 8:42 pm
Forum: General
Topic: Access from the Internet
Replies: 23
Views: 1345

Re: Access from the Internet

Let me re-state the network setup Internet ---> Router 1 (LAN=192.168.1.0/24) ---> Router 2 ---> (LAN2=192.168.2.0/24) --->PoE Switch ---> WiFi AP1 (192.168.2.21) Router 1 (LAN1) Ether1 connected to the ISP with a static IP 41.x.x.x Local network 192.168.1.0/24 Ether2 removed from LAN bridge and has...
by Shefartech
Sat Aug 17, 2019 8:39 pm
Forum: Beginner Basics
Topic: Remote Access from the WAN
Replies: 12
Views: 805

Re: Remote Access from the WAN

TDW When I first read and understood your suggestion, I was pretty sure that it would work. Sadly it did not. Question:In your suggestion for Router 1, was it intentional that you did not have a setting for To Ports? Let me re-state the network setup Internet ---> Router 1 (LAN=192.168.1.0/24) ---> ...
by Shefartech
Sat Aug 17, 2019 5:21 pm
Forum: General
Topic: Access from the Internet
Replies: 23
Views: 1345

Re: Access from the Internet

You want the full dump of both the routers?
by Shefartech
Sat Aug 17, 2019 5:17 pm
Forum: General
Topic: Winbox keeps disconnecting when accessing through the WAN
Replies: 4
Views: 1509

Re: Winbox keeps disconnecting when accessing through the WAN

Weird, when I connect through WebFig, I stay on without any disconnections
by Shefartech
Sat Aug 17, 2019 11:43 am
Forum: General
Topic: Access from the Internet
Replies: 23
Views: 1345

Re: Access from the Internet

The NAT rule I created was on Router 1 Does not give me access to the AP with the local address specified with 41.x.x.x:21443 The manufacturers of the AP suggested this: 1. First port forwarding needs to be done on Router2 for example to use tcp port 10 to access AP on tcp port 443 2. Second port fo...
by Shefartech
Sat Aug 17, 2019 11:09 am
Forum: General
Topic: Access from the Internet
Replies: 23
Views: 1345

Re: Access from the Internet

Created NAT rule as follows to test connectivity to one AP:
Chain dstnat
Dst. Address 41.XX.XXX.XXX
Protocol tcp
Dst. Port 21443
To Address 192.168.2.21
To Port 443
by Shefartech
Sat Aug 17, 2019 10:56 am
Forum: General
Topic: Access from the Internet
Replies: 23
Views: 1345

Re: Access from the Internet

Do I put in the NAT rules on both routers?
by Shefartech
Sat Aug 17, 2019 10:46 am
Forum: General
Topic: Access from the Internet
Replies: 23
Views: 1345

Re: Access from the Internet

Sindy
I kinda like your suggestion.
On which router should I put in the port forwarding rule?
Can you give me a simple example for one?
by Shefartech
Fri Aug 16, 2019 4:54 pm
Forum: General
Topic: Possible ICMP redirect bug / change in behavior?
Replies: 4
Views: 844

Re: Possible ICMP redirect bug / change in behavior?

My apologies for using this as a round-about way of sending you a message. Your solution for connecting two Mikrotik router worked like a dream, exactly what I was seeking. A God sent solution! I have some 10 wireless AP's connected to Router 2 via a POE switch and they have internet access via Rout...
by Shefartech
Fri Aug 16, 2019 4:23 pm
Forum: General
Topic: Router behind Router
Replies: 11
Views: 2712

Re: Router behind Router

The AP's have port 443
by Shefartech
Fri Aug 16, 2019 4:22 pm
Forum: General
Topic: Router behind Router
Replies: 11
Views: 2712

Re: Router behind Router

Were you able to solve the problems of accessing the camera?
I believe we have similar networks.
I want to be able to access the wireless AP's that are connected via a POE switch on Router 2
by Shefartech
Fri Aug 16, 2019 4:06 pm
Forum: General
Topic: Access from the Internet
Replies: 23
Views: 1345

Access from the Internet

This is how my network is setup Router 1--->Router 2--->POE Switch--->Wireless AP's Router 1 is connected to the ISP via a Static Public IP 41.XX.XXX.XXX on Port 1 Router 1 has a local network address of 192.168.1.0/24 Port 2 of Router 1 has an IP address 192.168.255.1/30 and is not part of the LAN ...
by Shefartech
Fri Aug 16, 2019 3:38 pm
Forum: Beginner Basics
Topic: Remote Access from the WAN
Replies: 12
Views: 805

Remote Access from the WAN

This is how my network is setup Router 1--->Router 2--->POE Switch--->Wireless AP's Router 1 is connected to the ISP via a Static Public IP 41.XX.XXX.XXX on Port 1 Router 1 has a local network address of 192.168.1.0/24 Port 2 of Router 1 has an IP address 192.168.255.1/30 and is not part of the LAN ...
by Shefartech
Sun Apr 28, 2019 1:30 pm
Forum: Beginner Basics
Topic: wAP ac as bridge mode [SOLVED]
Replies: 14
Views: 2288

Re: wAP ac as bridge mode [SOLVED]

xvo You are a star! The script will work perfectfly for me. I have a Mikrotik router connected to the internet with a static IP and is also a DHCP server. I want to set up 16 WAP ac around a large area. I want each WAP to have a static IP (easier to manage/maintain) I want the WAP clients to obtain ...
by Shefartech
Mon Oct 22, 2018 10:03 am
Forum: SwOS
Topic: Connecting to a switch behind a router from the Internet
Replies: 4
Views: 1932

Re: Connecting to a switch behind a router from the Internet

XVO, much appreciate you reply.
I will go with the "worse" option.
Please excuse my ignorance, could you advise how I could do that?
I cannot see the option to forward the port on the hEX router.
Port 5 on the hEX is connected to Port 1 of the switch.
by Shefartech
Sat Oct 20, 2018 9:39 am
Forum: SwOS
Topic: Connecting to a switch behind a router from the Internet
Replies: 4
Views: 1932

Connecting to a switch behind a router from the Internet

I have the following setup: Internet ---->hEX PoE (with a static Public IP) --->RB260G (with a static local IP) I am able to connect remotely via the Internet to the hEX PoE via Winbox. I also want to be able to connect to the RB260G from remotely via the Internet. Any solutions/suggestions will be ...