MikroTik

shielder

If you tried to build x86 solutio, the most importatnt thing to remember is to use a good lan card, preferable intel based chipset, it would help you goes to high traffic. But if you are looking for 1G connection, i don't think you will find any, because the best lan card would only be able to push ...

shielder

I think could be the tunneling header, try using mpls/vpls

shielder

Look out at routerboard.com for comparision

shielder

Better get a 433ah with 2cards as repeater

shielder

Hi all, i am using Mikrotik 4.16 as my "Bridged" bandwidth manager. I put on some config : 2 ;;; XXX Test chain=prerouting action=mark-connection new-connection-mark=con.XXX-Down passthrough=yes src-address-list=XXX 3 chain=prerouting action=mark-packet new-packet-mark=XXX-Down passthrough...

shielder

You are using radius for auth or local database?

shielder

Localpref is the way to control outound traffic.

If you need to control inound traffic, use route filter

shielder

As long as you could create 2 eoip between networks, you can do bonding to increate the troughtput

shielder

Does your pppoe works? The problem is pppoe or routing?

shielder

Check maybe theres a NAT that changes your pptp user ip address to something that the server deny

shielder

Hi, i have used the radius + userman and works on that. But is there a way to differentiate different user name with different policies? Like i wish to give out a read only access to certain users.

I couldn't found that on userman

Thx

shielder

hi all,

i have managed to use USERMAN to authenticate the login username for all my mikrotik (both router and wireless), but i wish to differentiate different user to different group. is there a way to do that? as different user is different policy?

thank you

shielder

Hi all, I have a MPLS network from my provider, with 172.16.0.2/30 (A site) --- 172.16.0.1 (provider) ----- 172.16.0.5 (provider) --- 172.16.0.6/30 (B site) between the provider, they are interconnected by provider MPLS. Currently between A and B site, i am using EoIP. Is there anyway to run VPLS be...

shielder

is there any built in tools for mikrotik that similar to TACACS?

we have more than 100 Mikrotik all over our network and we really wish to have a single management system for user login.

please anyone share your idea.

thank you

shielder

that's the setting on your bonding

http://wiki.mikrotik.com/wiki/Manual:In ... balance-rr

shielder

hi, thank you for your reply. here's the situation: Our wireless hotspot network are 172.16.0.0/24 and there's a customer trying to access our hotspot, but his laptop wireless interface have a preset ip of 192.168.1.100 now he needs to turn off the static ip on his wireless interface and turn it do ...

shielder

we trying to set zero config solution on hotspot. situation is some laptop are being set static ip on their interface, is it possible to have zero config? no matter how what ip address are set on their laptop?

we googled and found tcpip stack. please advice

thx

shielder

hi all,

i just upgraded my router using v4.11, suddenly i notice there a lot of warning :

radvd warning - received router advertisement packet with non-linklocal source address

anyone know what this means?

thx

shielder

true..

rb112 is very weak board. try changing to 433 or 411, much better.

if you insist to use 112, try ROS 2.9, don't use 3.0

shielder

for point to point, it's better to use eoip. much easier

for mesh network, try mpls.

shielder

for 1 : 1 NAT, use action="netmap"

shielder

put in-interface on your rule, only for the incoming traffic from outside to point to that web server not from inside of your network

shielder

mostly the antenna problem, 15 km you need point to point antenna. omni would be too much for that

shielder

you will cause self interference between your own sectoral antenna.

you need to use 2412, 2442 and 2472 as the channel of 3 antenna to minimize self interference, but i think it would be impossible as the air does not only belong to us.

shielder

i think you can use "out-filter" and on the filter 'matcher' you set the routing mark of the route list.

shielder

Hi all,

I believe most of us have encounter lightning strike problem. So let us share our experience for the best practice to avoid lightning problems.

Best regards,
Budiarto

shielder

Hi all, i believe many of us are buying MPLS service from our incumbent provider, so do i. Now all my router on provider MPLS network are connected using EoIP, i am thinking of using MPLS on my router to deliver the package. Is it possible to do MPLS on MPLS network? I only got ip address from my pr...

shielder

try simple queue if you don'tunderstand mangle. it would help you

shielder

this is how to disable con. tracking /ip firewall connection tracking set enabled=no it would help you better. If you turn off conn.trac everything that is included in /ip/firewall will be disable. you can't do nat, filter, mangle for board. i would suggest rb433ah, best price with the best performa...

shielder

Here's what we have captured from cisco router that connected to our mikrotik device MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec, reliability 255/255, txload 3/255, rxload 74/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 1000Mb/s input flow-control is off, output flow...

shielder

Hi everyone, I am using transparant bridge to become my bandwidth manager. I am using 2.9 version, everything works fine. I just create a bridge on and add 2 ports of the router to become a transparant bridge so i could do some mangle for my queue tree. Everything works fine. But later i update my n...

shielder

I tried to serve one of our operator using mikrotik. I setup a network using EOIP so that they have bridge connection. But they couldn't pass the MPLS traffic through EOIP. Only normal routed traffic could pass. Anyone ever tried MPLS through EoIP? Please share your experience.

Thank you

shielder

the reply-only should be set on the interface that are facing your customer (wlan) not ether

shielder

i think you could add cisco catalyst before the modem. the config would be :

mikrotik - catalyst - ADSL.

It should help.

shielder

yes.. make sure watchdog is off, and reconfigure would helps you. I have faced this problem before. and make sure latest bios.

shielder

1. if you wish to advertise route :

put you network (which is going to be advertise) on bgp/networks. then in routing filter, out-filter, add your network there.

2. routing-in filter:
means that the route you received from your upstream, and it would be shown as Rab on your ip/route menu.

shielder

just add another interface and NAT for the IP on that interfaces

shielder

static ARP should be good enough for you. try to set your interface ARP to "reply-only", that way, no more dynamic ARP, only allowed mac could ping your gateway,but you need to define each mac-address of your client to specific ip address (ip/arp).

shielder

you wish to map 128 ip to 128 client? i think you need to do 128 rules. if you do this config, the router would choose by itself and it's random

shielder

download *.npk, then copy paste to your mikrotik, reboot mikrotik. that all..

search in google, you will find the way

shielder

how can you know that's running 100m? using bandwidth test?

shielder

that's nightmare man..

my suggestion : don't connect more than 20 clients on 1 AP, specially omni antenna, you will be facing huge problem. try to use sectoral antena to split your clients.

shielder

nothing...

just some information for others...

I try other way, disable connection tracking (as this rb is used for wireless bridge using nstreme-dual, don't need any connection tracking), it really helps.. cpu load get down about 10-20%.. nice..

Maybe others could try this way..

shielder

received-packets-per-second: 7639 receive-drops-per-second: 0 received-bits-per-second: 11.7Mbps sent-packets-per-second: 7602 transmit-drops-per-second: 0 sent-bits-per-second: 12.7Mbps cpu-used: 81 free-memory: 45112 cpu-used: 75 free-memory: 45160 cpu-used: 74 free-memory: 45056 cpu-used: 76 free...

shielder

hi janisk,

yes, the switch support Power over data lines. but the problem is it only support 48v, and routerboard nowadays are 11-24v. so any suggestion?

shielder

Hi, I have a lot of routerboard on my tower, i am thinking of using some kind of inline POE switch to power up all my routerboard, but on normal switch they only provide 48v output. Anyone had experience of using any device to power up all the routerboard? Please share with me. Thank you Best regard...

shielder

GOT IT!!!!!

Upgrade to v.3, follow the wiki...

Nice version...

shielder

Hi, I have the following config : MainRouter ---- Bandwidth Manager (BM) ---- switch for distribution My BM have 2 ethernet (1 to main router, 1 to switch). My main router is connected to the rest of the network through BM (BM is configure bridging on 2 interface). I am using RouterOS 2.9.51 Everyth...

shielder

hi, anyone had documentation for router OS v.3 BGP feature?

shielder

Hi, I have peered with my local IX for all the address of my country ISP. I wish to use the dst-address that i got from BGP peers in firewall and so that i could mangle which traffic from my clients are going through local IX and which are going through International link. Anyone know how to do that...

shielder

hi all, recently i have tried to set up a bridge network using 3 routerboard A (AP) <----> (station pseudobridge) B (AP) <----> (station pseudobridge) C A : RB333 + 1 wlan card. Signal -53 with 54 Mbps transmit and received bandwidth B : RB333 + 2 wlan card. Signal -54 to A and -69 to C, both got 54...

shielder

mangle the traffic, if you wish to do it on simple queue, mark the connection and packet that you wish on the prerouting chain, then set the packet marks on simple queue with priority that you wish.

shielder

maybe because of the rain fade that makes your link unstable.

and i don't think 60 meter tower would be high enough for 60 km link. it would be some how unstable.

shielder

maybe because u are using RB133 + r52h.

try changing to RB333 or use a PC as your wireless device. it's all because of the processor power or the board.

shielder

interference is also a point that you should check, because indonesia has a lot of wireless player very interefered environment.. try to use smaller angle antenna (grid) and try changing the frequency to see whether it's the interference problem. my suggestion.. use 2 RB333 + 2wlan, do nstreme dual ...

shielder

as my experience, on the dude, i just enable the ping on each device that i wish to monitor, because if i enable all the protocol (dns, http etc), the traffic needed would be really high and i think that's what kills your network. Try to remove other protocol and just enable the ping because we just...

shielder

Hi, i have a situation... i wish to do a wireless for an indoor building. i use 10 pieces of RB133 and do a WDS system with dynamic WDS + rstp bridge, it works fine. But my client wish to add cable to every RB133 and use it as the backbone to connect to main router rather than using the WDS as the b...

shielder

for me, the easiest way is to enable the web proxy and parent the web proxy to another linux box (ipcop + urlfilter). try searching on google on these keywords.

but you need to add another computer as your proxy parent..

shielder

put a router behind your modem and before your main router. then you have 2 different ip from different subnet

shielder

Hi, anyone that had the expertise in Nth that could share some explanation about what is a Nth parameter and how it could help load balance...

shielder

yes motorola solution is really great for backhaul. On motorola canopy, it's DFS function works really great, it would automatically switch to clear frequency and retest the link every second to find the best frequency. If you use a mikrotik, i would suggest you to go to nstremedual or try to bond 2...

shielder

it's just because your SR4 keeps scanning the signal. set that command would force your card to scan only specific channel. that's the theory

shielder

normally is the problem with the interference, if you wish to serve point to point. try to use panel or grid antenna. if you wish to serve area, try to use sectoral. avoid using omni because it will receive interference from all direction

shielder

yes, normis is right. Radiomobile is your solution

shielder

try posting your configuration here.

and please remember, you need to enable nstreme on both AP and client

shielder

Try to put your antenna about 1,5-2 meter away from each other because it will self interfere.

shielder

Yes, surely it's working.. I have tried it before using a pci raiser card, i put 4 minipci on that board. The problem is don't use the heatsink that comes with the board or it will hang after 1-2 days of running, change the heatsink so that the processor is not overheat.

Have a nice try...

shielder

use nstreme dual (find it on wiki.mikrotik.com)

make sure you have a non interference environment, otherwise you wouldn't achieve big throughput.

shielder

Hi, i wonder if anyone had ever tried DFS from mikrotik? If we use motorola canopy, DFS is very useful because it could calculate and analise the quiet channel for us to achieve bigger throughput. Please anyone share your experience. Thank you

shielder

vista vista... seems like the built in firewall of vista that blocked the mac login, i have the same issued too.

change your computer to XP.

shielder

make sure your wlan is not station mode, you could not bridge station mode only AP

shielder

yes right, follow the wiki and it would solve your problem. just enable proxy and redirect all port 80 to your MT box

shielder

yes, only EOIP in 2.9

shielder

mark the connection and change TTL of the connection on Ip/firewall/mangle, action.

shielder

1. how to use bandwidth-test in mikrotik tool....? on winbox try to go to Tool/bandwidth test 2. i want to ask what is load-balancing....? i've been searching the internet for load-balancing in mikrotik and i found very diffrent info about load-balancing. is it like this = a. when router 1 down and ...

shielder

Znuff, yes we understand that hamachi is a proprietary client server application, we are just thinking of whether it's possible for mikrotik developer to develop mikrotik to have the same function as hamachi.

shielder

Actually i don't think it's the subnet that makes it become like this. It's the routing itself. we can also set a 255.0.0.0 on VPN, but still the connection goes from client-server-client

shielder

just add the ip that you want to route to gw2 on ip/route/rules

put the web you wish to go through gw2 on dst-address, the action is lookup, create table name as you wish, then add the 0.0.0.0/0 gateway to your gw2 on the table that you created.

shielder

normally it's because the power is not enough for the XR2, check using short UTP cable, maybe the cable is too long.

shielder

Dear Normis, yes, PPtP and L2TP is good enough for our router based but the hamachi has the ability to find the shortest path for the client. Here's the scenario : Client A and Client B are on the same network, they are configure to tunnel to PPTP server on the internet which has 200 ms round trip f...

shielder

hi,

anyone ever tried hamachi?

http://en.wikipedia.org/wiki/Hamachi
https://secure.logmein.com/products/ham ... sp?lang=en

Is it possible to set our MT become a hamachi center? It really help us to provide our customer with local gaming and local monitoring.

shielder

yes absolutely no problem.

Recommendation :

RB333
SR2/SR5 wifi card
24 dbi grid antenna
Good elevation (the higher the better)

That's what you need to have a 55 km link.

shielder

the script is for RB150. Script would automatically disable interface which links to your distribution router. Let's say you have 4 RB150 which local interface (connect to your distribution router) address is : Router A :192.168.1.1 Router B :192.168.2.1 Router C :192.168.3.1 Router D :192.168.4.1 Y...

shielder

/tool netwatch add host=10.1.1.10 timeout=1s interval=1m up-script=enable down-script=disable /system script add name="disable" source="/interface disable ether1" /system script add name="enable" source="/interface enable ether1" nb. Host is the ip address of ...

shielder

hi calrion,

i think it's better to get 4 modem and 4 ethernet interface on your Mikrotik. So it would dial from different interface to your ISP. Isn't better and solved all the problem?

Cheers..
Good luck

shielder

1. you can create a watchdog to keep watching your ISP gateway, if it's down, reboot the RB150 router 2. set a script on RB150 to automatically disabled ip address of your local ethernet (which is connected to your router) whenever you couldn't ping to ISP gateway. your distribution router would not...

shielder

It's better for you to add rb150 after your modem and before your distribution router.

shielder

Try this, Use 3 interface on your Mikrotik Router, 1 for LAN 1 for ISP A (faster upload) 1 for ISP B Set your mikrotik to gateway to ISP A in Ip/route Set on src-nat, action src-nat, to-address=(IP given from ISP B) so your traffic should goes like this : upload using ISP A, download using ISP B Try...

shielder

thank you everyone for your info.

Seems like the old fashioned way works the best. Add 1 cheap router after the modem and for another modem just plug to mikrotik. So there're 2 different ip address..

Thank you...

shielder

Hi, i am using ADSL connection now. 2 of my router got the ip address of the same block (/24) so that they have the same gateway. I with to do load balancing for my client so that both of the line are balancing. How to do that? Thank you. I have tried the way on wiki, it doesn't seems to work, only ...

shielder

address-list is your answer

/ip firewall nat add chain=srcnat src-address-list=enable action=masquerade

"enable" address-list you could add on /ip firewall address-list

Just add the ip address that could access internet.

shielder

HI, thank you. I have made it. Using netwatch + systemscript. I could set to the time that i wish for the fail over. Thank you.

shielder

hello... anyone could help me with this? Thank you

shielder

mangle 1st group of customer ip to 1st address-list to 1 rule using ip/firewall/mangle
mangle 2st group of customer ip to 2nd address-list... and so on

Use queue tree to set bandwidth for the group of people. try it.

shielder

if you want to block any sites, i suggest you using ipcop (http://www.ipcop.org). It provides some add on and update on websites that we normally wish to block depending on the category like, porn, abusive, gambling or anything. But of course, you need to add another computer as the proxy (ipcop) to...

shielder

try using addresslist

shielder

Hi, I have 2 gateway, 1 is through vsat (high ping time, about 600ms to gateway), 2 is fiber I use the vsat as my main route and failover using second gateway with the function of "check gateway" on ip/route. It works nicely until i notice a problem. The gateway keeps changing because of h...

shielder

Please do remember, interference is the "GHOST" for all of the WISP. So please consider it carefully when you are deploying a wireless network. Do not underestimate it, you would regret

shielder

No more headache, just change 2 of the NIC with supported version. Try some used-NIC, it's better supported rather than new one. If you want to use DLink, trys 538-tx or 530-tx both are good.

shielder

yeah i tried this before. Nice processor, expandable memory, that's what we are looking for. I tried putting 4 mini pci to it and it works fine, but after a few days, the machine hangs, i dunno what's happening, but after i restart the power it works again. and this problem keeps happening all the t...

shielder

do not try to forward https to proxy, you would have problems with signing in to email or bank account. But for FTP, you could try, but you need to increase the maximum cache size of your proxy

shielder

Hi, i am using a telnet and winbox solution from IP and no problem with the connection. But still, the winbox still closes when i tried to open files on mikrotik.

shielder

Hi, my router is weird, whenever i tried to open files folder in the winbox would quit. I could view the files when using telnet, but when i tried to open on winbox, the winbox would closed down without any notice. i am using 2.9.39, i have tried to upgrade the version, but the problem stills there....

shielder

My suggestion : don't use it for more than 35 clients. You would see quality dropping when more than that clients. And if you use more than that, you would have a big headache if you face interference, unless your location is free of interference.

shielder

I have asked the question before too, i found that web-proxy gets error after a few days of caching, and from what this forum suggested, proxy package is better and faster. Now i am using proxy package and it seems fine, no error so far. But i found a strange problem. my CPU load becomes 100 sometim...

shielder

Hi all, I tried using IPIP and EoIP for my tunneling from a local to a remote router. The tunnel are used for transfering internet data. It works fine. But sometimes it will be disconnected without any cause. And i could not re enable it, i need to use another tunneling to make the tunnel work. Expl...

shielder

Thank your for your replies bro. I tried to enable the webproxy-test package and after i reboot, i found that i have enabled the web proxy test and automatically disable web proxy, and the settings is more than what offered in web proxy. So should i use webproxy-test rather than webproxy? Will it gi...

shielder

Hi all, i installed Mikrotik 2.9.38 on my computer with 1 GB mem, 80 GB hardisk, 3200 intel processor. and i set web proxy with current setting : enabled: yes src-address: 0.0.0.0 port: 8888 hostname: "proxy" transparent-proxy: yes parent-proxy: 0.0.0.0:0 cache-administrator: "webmast...

shielder

1. mangle all the icmp port on forward chain
2. put it on the highest priority of your queue tree
3. sit down and smile...

shielder

Hi, have you tried nstreme dual? I think it will solve your problem by giving you a good throughput.

shielder

Hi, I have followed the instructions on http://wiki.mikrotik.com/wiki/Wireless_repeater But there's some problem with me. 1. On repeater side, i need to set the same frequency, default auth, default forward, AP bridge. I tried to set it to station wds so that my client could not connect to it and cl...

shielder

Hi, thank you for your reply. Yes i have made it using wds function, but i have another problem that needs help. side A, B and C is now connected through bridge. But when i want to configure side B through routed network, i met some problem. this is my traceroute to side B: 1 1 ms <1 ms <1 ms 192.16...

shielder

Hi, i need to do the following configuration : "A side" wlan1(ap) ---- wlan1 (station) "B side" wlan2 (ap) --- wlan1 (station) "C side" Ip address : A : 10.0.54.1/24 C : 10.0.54.4/24 B : any ip address, just has to bridge the connection from A to C Anyone know how to do...

shielder

Hi everyone, I think all of us here have problem with "INTERFERENCE" on our network. Mikrotik gave us so many parameter, like noise floor thereshold,calibration interval etc, so what is the best setting for an AP on a highly interfered environment? Maybe what kind of antenna and mini pci s...

shielder

I have 2 ISP on my network, let's say A and B both have public ip address. Now my config is the default route for all client goes to A (0.0.0.0/0 --> gateway A) and using policy routing to make some client goes to B. It works perfectly. The problem i am facing is my B public ip address couldn't be p...

shielder

Hi, i need to put my device in remote place where there are no power, so i need to put my device on batteries (serial 2x12v = 24v). I read on the manuals : IEEE802.3af Power over Ethernet: 12V or 48V DC (except power over datalines) Power jack: 11..60V DC I am going to use POE for my device, can i u...

shielder

Thank you for your advice. I have told my users that my internet line could not pass through P2P traffic (P2P really sucks)

and they could understand why i am doing so.

For Stryker777, thank you for your advice, i shall try that.

shielder

Hi, i have set these rules on my network 2 chain=forward p2p=all-p2p action=mark-connection new-connection-mark=P2P passthrough=yes 3 chain=forward connection-mark=P2P action=mark-packet new-packet-mark=Flow-P2P passthrough=no and filter 0 ;;; Blok P2P chain=forward packet-mark=Flow-P2P action=drop ...

shielder

Hi, i wish to set PCQ on my network to let my users shares a group of bandwidth let's say 256 for 10 users and i want them to have it equally, what is the best parameter based on mikrotik users experience that could share with me? the limit, rate or the classifiers.

Thank you.

shielder

As my suggestion i think you don't need to use dc-dc converter, u just need to run a small electric cable on + and - of your batteries that are serially connected to each other. As batteries are 12v and when u serial it would become 24v and just ask any of your local electrician to make a inverter t...

shielder

Seems like everyone are annoyed with torch function in 2.9 so isn't it better to goes back to torch function just like 2.8? How is that mikrotik developer?

shielder

i agree with Stryker777, solar energy would be a better option. u can buy it directly from hyperlink (http://www.hyperlinktech) directly. i have an experience to share with users, i have one tower set up like this : rb532 1 SR5 1 CM9 running 18v. for power, we have only 3 hours a day from a local vi...

shielder

So how is mikrotik technical going to change this feature? I think the torch feature in 2.8 is really good, why they changed it on 2.9?

shielder

Hi, i am a fanatic mikrotik users :D but i found that torch command of mikrotik is somehow incomplete. I have a user that keeps flooding my network and i found that on mrtg,but when i use torch command from mikrotik i couldn't detect the spamming traffic from the user. I could only see the traffic u...

shielder

Sorry maroon, i am just a beginner in squid and i just follow the how to on setting the squid and it's just some basic configuration. I am sorry i couldn't help you for this

shielder

u can try using 900mhz mini-pci card. It's NLOS. Ubiquiti is nice.

shielder

Thank you for your help

shielder

Hi, i have a proxy server running on linux squid, i wish to redirect all my client to that proxy server without going through web-proxy of mikrotik. Can anyone show me how to redirect all my clients to that squid? My squid is running on port 8080.
Thank you

shielder

Rather than using omni antenna, i would prefer to devide it to 3 sectors using 120 sectoral antenna. Omni couldn't serve too many people, besides the interference issues, the power of the antenna is also an issues. So i suggest to use no more than 20 users if you're on omni antenna.

shielder

Yes, hautespot is right. NOISE

is the main cause....

It's better for you to change antenna on the AP site or client site with bigger dbi or maybe you could try to change channel to see whether it helps or not.

shielder

HI, if i ping from my client (which has been policy routing to ISP B) everything is fine, the latency is normal and when i trace it goes through ISP B without any problem. But my eth2 (which connect directly to ISP B) still gets a heavy delay (because it goes through ISP A). Is there any configurati...

shielder

hello is there someone to help me? i have tried on another router that have2 ISP. isp A uses a satellite connection, isp B uses fiber. i sEt 0.0.0.0/0 to isp A and NAT. everything works. here's the prob, when i tried to ping ip on eth2 (which is Connected to isp B) on internet. seems like it goes th...

shielder

try not more than 40. if you use omni ant, not more than 20.

shielder

You just need to add EoIP Interface on your remote site tunneled to your base site. And set all the client ip address to the same /24 subnet and they could ping each other just like they are on the same subnet. It's rather easy.

shielder

Hi, i have tried using xx.xx.xx.xx/21 it couldn't work on address list. The most we could do using address list is only /24. Does anyone ever experience this?

shielder

Hi, i have 3 ISP on 1 MT Router : ISP A : 192.168.0.0/24 ISP B : 202.xx.xx.xx/29 ISP C : 202.xx.xx.xx/29 I set default route 0.0.0.0/0 to ISP A which is private IP and for ISP B and C i use policy routing for my client and it works. Now the problem is, i couldn't ping my public IP address (ISP B or ...

shielder

Hi, i wish to block traceroute on my network but still allowed the ping command. Is there anyway to do this? I tried blocking the ICMP packet but it also blocked the ping command. Does anyone know how to do this? Thank you

shielder

hi, i have 2 uplink on my network. one is on private ip (192.168.1.1) another is on public ip (202.xx.xx.xx). i point my router default gateway to the private ip. i found that my public ip coudln't be ping from internet, although i could ping and browse using the public ip connection. but if i point...

shielder

use netstat -a command on your computer to see where does your computer communicating with.
try ping using bigger size like 1000 maybe to check the connection.
try ping to ip and not site maybe you got problems on dns

shielder

I am thinking of using 4 wlan on RB532 (plus RB502 daughter board), but here's some issues that i am worried about : 1. Could the CPU on RB532 support so many wlan altogether? I have tried using RB532 with 2 wlan and put on a VPN tunnel on it to serve about 1 MB traffic on that tunnel (i am using Eo...

shielder

I feel the same way too, but i found out a very weird condition. Whenever the FM radio is not broadcasting, my client could get -70, but when the radio is broadcasting, my client signal would drop to -85 or more, but the latency is still good as i could ping my client on 2-5ms.

shielder

Has anyone ever tried putting AP on FM radio broadcasting tower? Will it interfere each other?

shielder

When i change the slot with another card, it works fine. So i have conclusion that the card is broken, although i just purchased it and it haven't been operating yet.

shielder

I have tried every ways i could to revive the card, but the last way to resolve the problem is to buy a new card

The card seems like broken because of some reason.

shielder

Yeah, some of the P2P program uses UDP port and my router couldn't drop the packet. Is there any ways to completely dropping all the P2P packet? Thank you

shielder

Hi, i have tried to mangle these rules : 0 p2p=all-p2p action=passthrough mark-connection=P2P 1 connection=P2P action=accept mark-flow=Flow-P2P and drop it using : 0 flow=Flow-P2P action=drop But my client still could get through on some P2P program (such as src.port udp 12005). Is there any other e...

shielder

Sorry there're some information that i want to add. From location A, i could ping to the address that are routed to 1st backbone. And the route that i get from traceroute, it's clear that i went to location B through 1st backbone before i reached the address, and i managed to patch some of my online...

shielder

Hi, currently i run a quite complicated network, here's my network config : Location A (10.254.3.2) < ---- VPN ---- > Location B (10.254.3.1) Location A want to go to internet backbone through location B to i routed all the trafic from location A and NATted the trafic as 10.254.3.2. On location B, t...

shielder

Hi, thank you for all your reply, i have tried it. If i use ICMP options type 11, the traceroute and ping still going through my router, but if i disable the ICMP options and block all the ICMP packet. no more ping or traceroute would go through my router. I think is the type problem. ICMP type 30 i...

shielder

Hi, i wish to block traceroute on my network but still allowing ping. I have searched on google and found ICMP type 30 as traceroute, but when i tried to set it on ICMP options found in firewall, there'e no type 30, just end up on type 18. So is there anyway to block traceroute just as i wanted? Tha...

shielder

Hi, i am having some logging on my log that shows some of my client would be disconnected for a few minutes because of the "extensive data loss" issue. What's the meaning of this and how to solve this problem? Thank you

shielder

Is there anyone ever had this experience? Some device seems like blocking 2.4 channel so we couldn't transmit on that channel. I have used channel 1 on one of my AP supporting 45 clients, it works for about 3 months without any problem, but these days, some device seems lilke locking some channel on...

shielder

Hi, recently i purchased a few RB532 with CM9 on it. But when i tried to set up the board, i found that the card couldn't be acknowledge by the RB532, on the system>resouce>pci i could see the vendor of chip set is Atheros known by routerOS but on the name segment, it shows "Unknown device"...

shielder

Hi, recently my mikrotik router has many undesired packet passing through. I have found that most of the are ICMP packet (between 2kbps - 12 kbps), so i decided to block the destination IP. Is there any way to protect our router from this kind of "attack". Or maybe someone would like to sh...

shielder

Have u torched the packet on your wireless link? Sometimes, it's because of some kind of broadcasting (ex. port 137-139 or 4133), this kinds of packet would kill your performance. Next u should check on the channel, try changing channel on your wireless link, will it do better? it's better to have y...

shielder

802.11b could only handle max 3-5 mbps bandwidth (real time traffic) for point to point. If you use it on point to multi point, the max bandwidth would drop depends on the range from AP to client, the noise level, the signal level, many problems would affect wireless. :D Try to give us more informat...

shielder

To server client on 1 km radius, u don't have to use any booster. u could just use a 65mw atheros card and everything is done. Try to do a freq scan and look out for the most quiet channel that u can use. If i could suggest, maybe u could use a sectoral antenna rather than using omni, because it's v...

shielder

Yes, i have change the channel and restart (soft restart from software) MT, but still no connection from my client. If i use another AP (smartbridges or alcon), it works fine on that channel. Do i need to restart the power of MT?

shielder

Hi, here's my configuration name="Radio" mtu=1500 mac-address=00:0C:42:05:01:53 arp=enabled disable-running-check=no interface-type=Atheros AR5413 radio-name="Solusindo Bintang Pratama" mode=ap-bridge ssid="Solusi" area="" frequency-mode=manual-txpower country...

shielder

Thank you everyone for all your suggestion. Here's my situation : Range : aprox.20 km (over sea). Both AP and Client are on the tower on a mountain. The AP and Client would be installed about 50-70 meters above sea level I am planning on using RB512 + Atheros card + 26 dbi 5.8 Ghz Semi parabolic ant...

shielder

I have tried to change the channel and i could get my clients back on channel 9 (but with 20% packet loss). I am curious if there's any device that could lock the channel as in my situation. Will it be a booster used by others in my environment?

shielder

Hi, i am Lim from Indonesia. I put 3 omni on my tower and i found a heavy interference issues (between the 3 AP), so i change my mind to use 3 piece of 120 degree sectoral antenna to serve my clients. I set their channel to 1,5,12 (that's the best i could get) and everything works fine until today a...

shielder

Hi, i am using RB 532 with atheros wifi card to deliver the service to my customer. There're about 30 clients associated to the card and the throughtput of it is about 500kbps-800kbps. The CPU load 10-30%, the firmware is 2.9.1. The card works perfect but there's a problem, when we are using it for ...

shielder

THANK YOU VERY MUCH.... IT WORKS!!!!

The problem goes with the masq. When i disabled the rule, my client traffic is shown in my main router, and the bridge works fine now. Thank you very much.

shielder

No, i am not running a hotspot. Can i just stop the masq rule? Will the bridge still work? I think the problem is the masq rule itself. The default gateway for 10.0.0.2 is 10.0.0.1 and is located on main mikrotik router. the 192.168.0.1 is a ip that i add on my RB532 so that when i have misconfigure...

shielder

It's the config on my RB500 (the outdoor AP)

Thank you

shielder

I have set the config as followed : IP 0 192.168.0.1/24 192.168.0.0 192.168.0.255 ether1 1 X 10.0.19.30/19 10.0.0.0 10.0.31.255 wlan1 2 192.168.1.1/24 192.168.1.0 192.168.1.255 ether3 3 10.0.19.30/19 10.0.0.0 10.0.31.255 ether1 4 10.0.19.29/19 10.0.0.0 10.0.31.255 bridge1 Bridge 0 ether1 bridge1 128...

shielder

Hi, i wish to set my RB532 (1 eth + 1 wlan) as an outdoor AP for my client. I have set it using bridge and it works, it could pass my client traffic to my mikrotik router (another mikrotik work as a main router). But when i use torch on my main router, what i see is the ip of my mikrotik AP, but not...

shielder

Hi, i just check for a few days on my AP, i found that the problem is not because of the traffic and there're no traffic passing by from client to client, it's because signal interference on area. I used omni 15dbi antenna on my mikrotik, i think it's the main cause for this problem, because it gain...

shielder

Hi, recently i change my AP to mikrotik to serve my client. I tried to add 2 clients (at first) to my mikrotik and they work fine, the ping is <10ms. When i tried to add another client who is a heavy downloader (100kbps persecond). The ping of my client suddenly become very high (200-300ms). My clie...

shielder

Hi, i have been using 802.11b for about 6 months everything work fine (although i need to keep changing the frequency every month because of interference). Recently very weird problem happens to my neighbourhood. I scan using snooper tools on mikrotik to find the usage of each channel on my environm...

shielder

Hi, i couldn't find your email on your profile, would you please email me? shielder_2000@yahoo.com is my email. Sorry everyone for posting something which is not related.

shielder

Thank you for your kind explanation, i have been thinking of using 802.11a as my ap but i am hard to find the CPE, i think i need to buy some wifi card from mikrotik for this :) Now i am using smartbridge as the AP, using directional 18dbi antenna, i could only serve 2 client (cybercafe for online g...

shielder

Hi, i am in a quite crowded environment for 2,4 Ghz. Lately i have a weird problem about my AP. When i tried to change channel, my client wouldn't associate with my AP, so i could just switch to a few channel (1,10,11,12) other than those channel, my client (4km away) wouldn't associate. And if i us...

shielder

I have client who is cyber cafe (about 20-30 computers behind each client). What should i do if i wish to deliver best performance for them? What i have seen in mikrotik is that each client would use up to 100-200 packet persecond, does it mean that i have to add another AP if 1 wish to server more ...

shielder

THank you for your reply, is there any calculating method about how many pps a device could handle? If i use mikrotik RB 500, does it have higher pps transfer rate? How can i know if a RB500 is overload? Is it from the CPU load?

shielder

I wish to know whether using mikrotik i could handle more client that has many computers behind the client, because that's what i wish to do with it. Any suggestion? I need more advice, thank you very much. The reason that i put 7 AP on 1 tower is that i couldn't deliver good performance to my clien...

shielder

Yes, all of my client use NAT on their router so that they appeared as 1 client on my AP. But i don't know why the Smartbridges AP couldn't handle more than 2 client of this kind. I have tried using Smartbridges AP of the same kind but it could handle about 20-30 client which has only 1 computer beh...

shielder

Thank you very much andrew, my main purpose with so many natting is that i wish different client would have different ip. such as 10.0.0.2 would go to xx.xx.xx.116, 10.0.0.3 would go to xx.xx.xx.118. That's my main purpose. What i see from the dns cache is that the dns of mikrotik is caching and doi...

shielder

Yeah that's what i think too, my AP is interfering one another. Currently i am using AP outdoor AP from smartbridges, but the problem is i could only add 2 client (which is internet cafe, with approx. 20-30 computer connected behind it) to the AP, when i tried to add another client to it, the perfor...

shielder

Hi i have see the mikrotik hotspot setup it needs eth0 to use a block ip(such as 192.168.0.1/24) and wlan1 to use another block ip (such as 10.0.0.1/24) but what i wish to do now is to set them as an interface with just 1 block ip (such as 10.0.0.1/24), just as other outdoor AP does, because i wish ...

shielder

yes, i have change every channel from channel 1 - 13. everything is the same. all my AP is about 3 meters away one from another so i think it's quite good distance that i wouldn't interfere the one another, correct me if i am wrong. My tower is 30 meters high on a mountain

shielder

Hi, i put my mikrotik AP (using atheros 65mW) on my tower using 18 dbi omni antenna. On my tower, there's another 2 AP (100mW with omni antenna) and 4 AP (100mW with directional antenna). I have tried to test mikrotik AP from a client. The rssi is -76 but when i ping from client to router, the ping ...

shielder

I have a similar problem. Here's my configuration : Router (Side A) <--> Mikrotik AP (side B) <--wirelessly--> Linksys WRT54g (side C) <--> Client (side D) My problem is side D could ping to side C and A but when i tried to ping to side B, it couldn't get through so i couldn't control my mikrotik AP...

shielder

Rule 14 is for natting my client to a range of ip to help them connect to irc server as irc server only allowed a few computer to connected to it so i have to give it a range of ip. Rule 22 is for masquerade my client of 10.0.0.0/19 to an ip. Here's my mikrotik setup : ISP <-> Mikrotik <--Wireless--...

shielder

I am sorry for troubling you all as my firewall explanation are using xxx.xxx, but please let me explain what have confused you : Rule 0 : It's for natting my client request to one of my server (126) which address is out of my ip pool. So all my client request dest to 126 would be nat as 125. And i ...

shielder

I used source-nat for all of my clients here's my config : 0 dst-address=202.78.xxx.xxx/32 action=nat to-src-address=202.78.xxx.xxx 1 out-interface=Internet flow=Flow-planet-http action=nat to-src-address=219.83.xxx.xxx 2 X out-interface=Internet flow=Flow-WR-Http action=nat to-src-address=219.83.xx...

shielder

All of my client are not using DHCP, they are all using static IP so i think the problem is not there. But thank you for your reply.

shielder

Thank you for your reply, i have change it to 202.43.160.50 as the primary dns, but the same things happens, it still couldn't resolve some websites, seems like my dns request couldn't forward it to my ISP dns. Anyone could help?

shielder

Hi here's my dns configuration primary-dns: 202.155.0.10 secondary-dns: 202.43.160.50 allow-remote-requests: yes cache-size: 2048 kB cache-max-ttl: 7d cache-used: 433 kB When i point my client dns using 10.0.0.1 (mikrotik ip) it could not resolve some websites, but when i point my client to ISP dns ...

shielder

Hi, thank you for your posting, i have read many article posted in this forum, 80% of people says "DO NOT TRY USING ANY AMPS", they says that it would cause great interference. Will you try using RB 220 with atheros or prism without using any amps? Please post me with the result. Regards, ...

shielder

Hi all, recently i just purchased routerboard + atheros wireless card. I wish to configure it similar to any outdoor wlan (like dlink or linksys). My lan ip is 10.0.0.0/19 and now i am using outdoor wlan (smartbridges) with ip 10.0.19.0/24. I wish to configure my mikrotik to work just like my smartb...

shielder

Thank you very much, i have solved the problem of non-existent domain. Will this solve my problem which could not resolve some websites that has not been cache on my side?

shielder

Hi, from my side i could reach both of the them very well. I have tried to use a computer without passing mikrotik and point the dns to these server and it works fine. Here's my nslookup result : *** Can't find server name for address 10.0.0.1: Non-existent domain *** Default servers are not availab...

shielder

Hi, recently i try to route my clients to ask dns request from my server whis is 10.0.0.1 and here's my configuration : [admin@Solusindo] ip dns> print primary-dns: 202.43.160.50 secondary-dns: 203.130.193.74 allow-remote-requests: yes cache-size: 2048 kB cache-max-ttl: 7d cache-used: 258 kB My dns ...

shielder

No, i haven't tried bridged the unit yet, because i am not really expert in that. If you could please give me detail instruction on how to setup it. Thank you very much

shielder

Hi, recently i purchased RB500 + atheros card and i wish to use that on the following scenario : RouterOS --> Rb500+Atheroes --> Client As i have already have a RouterOS with 1.8 Ghz as the basic router, i wish my RB500 to ack as a outdoor Wireless AP only, without any routing needed for it. I wish ...

shielder

Hi, i am currently planning on using routerboard as my outdoor AP. Because this is the first time i try to use routerboard as AP, i wish to know about the performance of rb 500. How many wireless clients could it support without degrading the performance? I am using other outdoor AP now, but it coul...

shielder

Hi, i still haven't figured out how to route the dns request. I tried to enable my dns server and my client pointed to mikrotik server as their primary dns, but i could not work. Have i done something wrong? For the route of upstream i configure like this : 0 src-address=10.10.0.0/19 action=nat to-s...

shielder

Hi, thanks to sergejs and jason for helping me to solve my problem. I have managed to route my clients to another upstream provider using the policy-routing rules. But when i tried to examine the route carefully, my route has gone to another provider but my dns is still using the previous provider. ...

Search found 221 matches