MikroTik

bholler

In folder (in linux)
Code: Select all
/opt/splunk/bin
run
Code: Select all
./splunk btool inputs list | grep udp
You should see:
Code: Select all
[monitor:///data/syslog/udp/.../*.log]
[udp]

Only saw [udp]

[monitor:///data/syslog/udp/.../*.log] isnt there.

Oops

bholler

Then you have skipped this part in rsyslog setup: To make Splunk read rsyslog data make this file: %SplunkHome%/etc/system/local/input.conf [monitor:///data/syslog/udp/.../*.log] sourcetype = rsyslog host_segment=4 [monitor:///data/syslog/tcp/.../*.log] sourcetype = rsyslog host_segment=4 NB Splunk...

bholler

It seems that rsyslog data looks fine. But to get the firewall data in firewall dashboard correctly, you should name the rule as in section. 2c In splunk go to this setting: Settings->Data Input->Files & Directories Do you see a line starting with? /data/syslog/udp/.../*.log NO. there is no lin...

bholler

Whats inn those files? paste some lines. See section 3b Debuging If syslog folder has data, it could be one of two. Not using MikroTik tag (Capital M and capital T) Splunk not reading data. What do search for index=* give See the line from the syslog file 2022-05-16T16:00:00.259726+00:00 <13>firewa...

bholler

Hey Guys, I need your help. My dashboard isnt reading data despite my router keeps loggin data to splunk. When I issued the command sudo vim /data/syslog/udp/41.X.X.193 (where 41.X.X.193) is my router's IP), see the output below " ================================================================...

bholler

I followed your instrction based on steps 1b and 1f.

I installed splunk as non root and deploy rsyslog.

1f required we specify dns/514 for syslog as the the sourcetype.

Are you trying to say 1f is not required?

please reply

bholler

I am having error is adding UDP/514 to Data Inputs in Splunk. See attached

bholler

I am getting error from splunk web interface...

The minimum free disk space (5000MB) reached for /opt/splunk/var/run/splunk/dispatch. What does this mean?

I am using AWS t2micro. It comes with 8GB storage

bholler

HI,

I just replied your email. BTW, thank you for the clarification. I am already on it. I will revert incase of any issue.

Thank you

Regards

bholler

Hi Guys, I have been able to launch an EC2 instance (on the free tier for testing purposes) on AWS and installed splunk successfully. However, I am having issues on the rsyslog section of the installation process. see my questions below: Where is /etc/rsyslog drirectory ? - in the root user account ...

bholler

Splunk can do all you ask about and more. Nearly unlimited possibility. It do cost allot of money if you put it inn to a large scale company, but may be the best and most flexible solution out there. For your IP address list, you can hav tem in a csv file that Splunk uses. This fil can be updated a...

bholler

HI Guys, Thank you for the brilliant response. I am a product manager and security expert. I love to deploy Mikrotik firewall and bandwidth management in the cooperate or enterprise environment, In most cases, some of our customers have replaced their Cisco ASA with our customized Mikrotik Security ...

bholler

Hi Guys, An interesting discussion is going on here. I have been looking for this type of solution for a while. However, I have few questions for @jotnet 1. Can a report be generated for the individual device? 2. Can the script log the address list so I can perform an audit on affected IPs. 3. I don...

bholler

Hi, devices are on, links are on but data are not transmitted Also, facing same direction with different frequency; 5550 & 5370 Radio1 /interface wireless set [ find default-name=wlan1 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-eCee \ disabled=no frequency=5370 frequency-mode=superchannel mode...

bholler

Hi Everyone, I have 2 boxes configured with Nstreme on the same mast. The boxes stopped pushing traffic whenever the 2 of them are powered on. They start to push traffic if either of them is powered off. What are the possible causes of this behaviour and how can it be solved? PS: The boxes are; Dyna...

bholler

HI Oxygeno20, Can you help me out on this script? It is not running on v6.42.7 :local SERVER “server250”; :local INTERFACEFILTER “combo1-core-switch”; # # AUTOR: NICOLAS DAITSCH # # www.tech-nico.com # # Modified by Oseni Abiola :foreach i in=[/ip dhcp-server lease find dynamic=yes active-server...

bholler

There is a script i got from this forum concerning dhcp lease. see below: :foreach dev in=[/ip dhcp-server lease print detail as-value where host-name~"android\\-"] do={ /log info ("Device with MAC address" . ($dev->"active-mac-address") . " has the hostname "...

bholler

That was a smart hack. But still trying to figure out why #1 step would be omitted in Cisco environment. Considering how hosts communicates in IP environment. These are: 1. A host makes a broadcast by asking....who is 192.168.2.10 2. Host with IP with 192.168.2.10 replies...this time it's MAC inclus...

bholler

That was a smart hack. But still trying to figure out why #1 step would be omitted in Cisco environment. Considering how hosts communicates in IP environment. These are: 1. A host makes a broadcast by asking....who is 192.168.2.10 2. Host with IP with 192.168.2.10 replies...this time it's MAC inclus...

bholler

NAT rules work with IF-THEN principle. In your case, you want to tell the router that IF dst-address is equal to 192.168.2.10, THEN the dst-address should be translated to 192.168.3.10. This you have configured with the rules above. But the sad news is that the rules would not work because all traff...

bholler

There are two things you can do. Firstly use routing mark to route all ip phones through the second WAN.

Secondly, you can configure class based QoS by prioritizing sip calls or IP addresses of IP phones.

Let's me know the route you would like to take before helping you with the configuration

bholler

/ip firewall filter add action=drop chain=Connection-State comment="Drop Invalid Connection" connection-state=invalid add chain=Connection-State comment="Allow Established Connection" connection-state=established add chain=Connection-State comment="Allow Related Connection&q...

bholler

Hi,
It works. Many thanks.

But the list could not update the address-list whenever scheduler runs the script. In the log, it reads "failure: already have such entry". Any modification to make update take effect.

Regards

bholler

Hi Boen Robot, Can you please help with a modification for active-address. and active-address to be populated in an address-list called mobile. i tried this but it did not work. :foreach dev in=[/ip dhcp-server lease print detail as-value where host-name~"android\\-"] do={ /ip firewall add...

bholler

@NHBFan, you can reverse the rule by creating a drop rule for 06:59:00 - 21:59:00. You are still doing the same thing. Thanks

bholler

The best bet is to use queue tree. Then, u hv the opportunity to clearly separate the download from upload using specific chain in mangle. However, if u must use simple queue, mark upload at prerouting so that it can be penalized at Global-in and ur download can be forward and output (incase u r usi...

bholler

thank you for the info.

bholler

That is awesome. whats the result with TCP. Both direction will be fine.

Regards

Abiola

bholler

Hi Cybertod,

Can you do a print screen of your result to us. I find hard to belief.

Also, whats the total throughput you achieved ?

Regards

bholler

Hello Forum Member I need your help urgently. I have 2 ISP link combined together with the use of PCC. The configuration is working fine. Bothe LB and FO are working fine. However I have a GRE tunnel setup to head office through a provider with Managed VPN service. The GRE tunnel was setup though a ...

bholler

hi hlekat, the best bet here is 900Mhz if you want a link that can make you sleep with all your eyes closed. However, consider increase in height and high gain antenna as wirelessrudy suggested. Changing to high powered radio wont improve your signal. i hope this will save your time. Regards Abiola

bholler

Hi Trollman
I noticed mismatch in your dns-server entries. also, can you tell us what you PPTP client is ? windows or routeros ? can you also post your pptp clients setting ?

waiting for your response.

Abiola

bholler

You are having a typical fresnel zone problem. we have 3 fresnel zones. These are 1st, 2nd and 3rd. if any obstruction encroaches into the 1st zone, you will be having signal with low SNR but the link will be working though this will have negative effect on the throughput of the link. however if the...

bholler

hello magnavox, the best bet is to use RADIUS and let all APs authenticate the MAC from the RADIUS server. With this, AP only allows the good MAC you know and drop everything else. Rule of thumb: deal with what you have under your control while you wait for others to come under your control. Finally...

bholler

Hello

SFQ algorithm must be able complex and requires lots of CPU load. Guess that is the reason for the latency.

I remember i was trying to experiment Vlan with RB 433 and CPU load was about 73%. I could not finish my test.

Please whats ur CPU load with BFIFO ?

ciao

bholler

Hello thavinci,

What part of SA are you, besides, whats the regulation on VSAT in ur country. are you covered with any licence to do this. If yes, you can contact me on the following: Skype: habholler YIM: oseniabiola@yahoo.com MSN: oseniabiola@hotmail.com

bholler

Hello Mangust, From the diagram, i would assume CPE has 2 interfaces; Backup, and 10Mbit link and SNAT`ed 80.220.220.100 is a static route. u may have to configure the CPE to redistribute-static either as-type1 or as-type2 . Nonetheless, i wonder why you wanted the IP to be redistibuted. it will mak...

bholler

Hello Mangust, well i am not to sure about what you want, but i feel i should interpret what i`ve been able to extract from this post. You have 2 routers. Main and CPE. Main router is cnnected to the internet while CPE router is connected to Main. All internet content delivery to the customers from ...

bholler

Hello Ram. Did you close your proxy, i guess thatwas what you did; you only allow ur LAN subnet and deny others. For you to make yahoo webcam to work, you have to allow TCP/5100 in your firewall and in ur webproxy access list. Please export you config in /ip web-proxy test this and give me a reply.

bholler

Hello All, please how do i know 5Mhz ,10 Mhz channels on SR2. i have RB532/SR2 with hyperlink HG2412U 12 dbi omni. my anntenna hieght is about 50 ft high. my laptop cannot pick in some areas and in the buildings. below is my config [admin@MikroTik] > /int wirel [admin@MikroTik] interface wireless> p...

bholler

Hello Jober, thank you so much for the reply. please advice what hieght i need to place the Omni antenna on he mast. The tallest buiding in the estate is 3 storey. Also, all the users are laptop users. i dont want any purchase of equipment but access to the network through the wifi card on the lapto...

bholler

hello Jober i have a setup i want to do in an estate of about 300m radius. All the users are laptop users. There is 80ft mast at the almost the center of the estate. please kindly recommend the RB??, radio card and antenna to use with correspoing height to use on the mast. thanking you ur much antic...

bholler

hello , why not brigde the wlan and ether interface together and ur AP in the same switch /subnet with the win 2003 server.

Also, please check wiki. looks like i`d seen such in there: see the link below

http://wiki.mikrotik.com/wiki/AAA_with_Active_Directory

i hope this helps

bholler

hello All,

pleease how does on determine the height to place an Omni antenna on a tower to coverage of about 2-3 km. also is thee any tool i can use to do this.

i appreiate your contribution to this.

thanks

bholler

hello, please assist me on thi issue: i have RB532/SR5 on point to point setup. it has been working fine for about a month now. but suddenly i cannot ping the two radios again. after so many hours of troubleshoting i noticed that RX/TX CCQ on both radios are not reading and mt signal to noise ratio ...

bholler

create user profile and specify the bandwith for the profile. then apply that profile with username and pasword that you create for your customer.

that will save you from the stress of queue tree and mangle.

bholler

hello hci, there are two thingsi fee u can do: 1 do static route on the cisco to the second interface of the MIkrotik, for example according to ur post: ip route 12.x.x.x y.y.y.y 172.16.10.2 2 u can do src-nat on the mikrotik to the ip subnet of ur 172* network of ur cisco.then make the ip of ur cis...

bholler

hello sergejs,

it worked, thanks so much. this has been a command i dont take into consideration before.

bholler

hello andrew
Are you blocking connections to the web proxy from the Internet. Possibly you're running an open proxy

what am i to do to not to make my web-proxy not ot be open. please i need your assistance

bholler

hello i have a peoblem that is not under control. i suddenly saw lots of connction on my connexction tracking in my MT box and the ystems became slow. then i looked through my web-proxy status and found out that i had almost 200 clients on a cybercfe that has only 19 computers working. i later forma...

bholler

hello sirs,

thanks for the responses, please what if i try to use 2x sr2 and 1 x cm9 to achieve 3 sectors at 120 degrees

has anyone tried it that way ?

bholler

can anyone assist me with how to lock the speed of each end of the link to 24Mbit.....i will love ur step by step config.

bholler

hello all, i have a new client that already is already WISP using 2.4 GHZ platform with YDI radios with this he has ydi CPE radios in stock.... but he want my me to build a back backhaul link for him on 5ghz and later distribute again with 2.4 ghz. so i want to use rb530/2x sr2. with 2x 180 degree s...

bholler

Please ciber, have u tried 2 SR2 on a RB500 before and did it ork perfectly.becuse this the main problem i have with a network design for a client of mine.

bholler

i have just setup hotspot on a MT box.....but i cannot login after the login page appeared: below is the exported info from the gateway: / ip hotspot add name="hs-hotspot1" interface=hotspot1 address-pool=hs-pool-3 \ profile=hsprof1 idle-timeout=5m keepalive-timeout=none addresses-per-mac=...

bholler

wildbill442 and canobi,

can ypu pls assist me on a step by step guide to set up the vpn

bholler

can you please state out the exact feature u are talking, and how it works

bholler

hello everybody,

why not use MS command prompt to telnet into the MT and copy and paste as much as u want into the console. That was what i used and i had no problem until i realised that the list cost me the CPU load and performance

bholler

Hello, Can anyone help me on how to configure the following configruration done in ver. 2.8, to configure in ver. 2.9: Bandwitdh limitaion for p2p trafic add src-address=10.84.0.0/16 mark-flow=p2p-out p2p=all-p2p action=accept add dst-address=10.84.0.0/16 mark-flow=p2p-in p2p=all-p2p action=accept a...

bholler

whike everybody confirms the perfection of the porn blocklist, it was a hell on my MT router.....my CPU load was 100% and customers were just complaining.

bholler

hello Everybody,

Please how do i make my DHCP server to give the same IP address to a host anytime it requests for IP?

bholler

corrction to my command line

/ip firewall rule forward add src-address=10.97.20.90/32 action=accept

ip firewall rule forward add src-address=10.97.20.0/24 action=drop

bholler

Hello Zong, There is no magic u can do about it....expect if there is a script (which i am yet to know about) that can do that for you automatically.If u want it to be automatic, then you will need a RADIUS which will specity the time range u want for a particular MAC address ( that is if u r doing ...

bholler

i am sure the whole world is interested....please kindly do us a favour by sending the list to this forum.

Thanks

bholler

i just got the link of the past thread on content filter

http://forum.mikrotik.com/viewtopic.php ... urfcontrol

bholler

please search this forum very well with keyword "surfcontrol"....such issue has been discussed b4

bholler

hello, the best advice i can give u is that u can create a test username and password which can be allowed to be used by multiple users,then enable authentication by cookies. this will make the user to be able to login automatically without dredirected hotspot page ...until the cookies expires, he w...

bholler

i am sure u wont loose the license if u re-install the MTOS with a bootable CD of any version u want. u can download the CD image from mikrotik site and install directly from CD

bholler

do u have some firewall rules in ur input chain ?
if part of the rule is to deny everything else after allowing some, u can disable it , also allow udp/53 in ur input chain.

it will be nice to see ur config...an export can help u

bholler

hello sonny,

i have tried it that way before and the only time i had a successful booting was whn i removed the entire RB 17 from the PCI slot. Please anyone with a solution cos i dont know what to do again.

bholler

hello, i have done the upgrade of the firmware and routerOS but i now realised that the routerboards hangs during bootup, and when i removed the RouterBouard 71 from the PCI slot of the R230, the routeboard boots successfully. i ready through the manual,and i could deduced that one should disable &q...

bholler

hello, i have done the upgrade of the firmware and routerOS but i now realised that the routerboards hangs during bootup, and when i removed the RouterBouard 71 from the PCI slot of the R230, the routeboard boots successfully. i ready through the manual,and i could deduced that one should disable &q...

bholler

hello Zee,

can you ple state your subnet mask in the addressing scheme of the network diagramme. u basically have a routing problem. the blockof IP between you ADSL and MT with that of MT and the rest of the LAN seems to be the same. unless u state the subnetmask we can think of what to do.

bholler

hello sir,

What do u advice i should do, and how do i get the latest BIOS and is it adviceable for me to upgrade to 2.8.28. or version 2.9?

bholler

hello Trisc, what kind of equipment is ur customer using? if he is using a CPE with routing and NAT feature (like MT outdoor client) and u can NAT block of ip, then u have no problem. just let him have the block of IPs on the home network PCs. all of them will have access so far one of the PCs is ab...

bholler

hello (RB/B2I) MikroTik 5GHz Access Point Package with Directional Antenna above is the acces point i use on my network, i have 2 ethernet cable down into the office inthe equipment room----one for ether1/poe (ip 10.1.0.1/24) and the second for ether2 (ip 10.2.0.1/24). the wireless interface has no ...

bholler

hello marron, what is thename ofthe surfcontrol u r using and is it free ?
i will appreciate the url of the particular one u r using... thanks.

bholler

=======MT1===========CYBERCAFE | FC2===| | =======MT2(HOTSPOT CONTROLLER)===APs that is my network setup. the sip fone did not work behind MT2 but worked behind MT1. i have source-nat and lots of firewall rules on MT1 than MT2. the only firewall rules on MT2 are the one of hotspot and the virus rule...

bholler

yes it is doing firelwalling. and the only firewall rule i applied wass the virus rules what i exported from demo.mt.lv. i palced it behing another MT router that is without HS but with firewall rule but there was no problem.

bholler

it feel it should be possible...if you add another network card to the router which is specifically meant for HS.

bholler

hello,

Can anyone assist me with the guide pf hoe to make SIP work behind HS. SIP phone did not work after i setup on the MT controller.

Thanks

bholler

hello sir,

You are perfectly right. but how do i go about the static route to the gateway cos i already specify the gateway in the /ip route add gateway=192.168.50.63.

Please i will love your assistance on that if there is something different.

bholler

Can anybody assist me on this problem. idont know if it is my NIC ..(but i doubt it cos i have used 2 diffrent ones).let me describe my network topology. i have have an hotspot controller with 2 NICs eth1 belong to the internet subnet (192.168.50.254/24) and eth2 belongs to the hotspot subnet(10.5.5...

bholler

i am from nigeria,i am strongly interested.... pls get me posted...cos it will be great to meet mikrotik guru

biola oseni

bholler

i am sorry if am wrong....i thought 2.9 is meant for RB 500 alone. can i upgrade my rb230 from version 2.8.26 to 2.9?

bholler

sorry can explain what u meant by dual gateways....i feel a small sketch of your network topology will make easier.i have a strong believe that dst-nat will do the work for u perfetly .the link below can help u greately.

http://www.mikrotik.com/docs/ros/2.8/howto/howto

bholler

hello taloot,

How do u mean by limit connection? is it Bandwidth limt in terms of simple queue or HTB using queue tree or Class Based Queue, limiting traffic like HTTP connection, ftp ,icmp ?...pls clarify yourself.

thanks

bholler

This is my first experience with mikrotik radios though i have quite a tangible knowlegde ablout it routing features and capabilities....also with other brands of wireless radios. My case scenario is the same.....as that of infomate but i want to use MT AP in this case.i would have set it up directl...

bholler

hello Sirs,

i really enjoyed this thread but what if am using mikrotik AP, what will happen to the IP address of the wireless interface ..... do think it is wise with mikrotik AP?

thanks

bholler

u must be doing something wrong. i will advice you to reconfigure the HS again and make sure you take note of the test user name and password....for you will use that to login to the hotspot.

U cannot get anything port 80,8081,433,icmp done without logging in.try again u will get it right.

bholler

i have just set up hotspot service on a PC which is going to act as access controller to all my APs.but i notice that my SIP phone did not work behind it. Can anyone assist me on what to do to make it work.i will appreciate your kind gestures

bholler

hello daiceman,

Why not try uPnP ? i would have suggested proxy-arp but it will be a problem cos u r running a dhcp.

http://www.mikrotik.com/docs/ros/2.8/ip/upnp.content

bholler

my little contribution is that u should note how to mark packets when being masqueraded and how to mark when not masqueraded.... i think that is the only confusing thing in the manual. if the wireless LAN is masqueraded on the access concentrator, mark the packets with connection mark and then u can...

bholler

what does the dst-nat meant for ?
and the second source nat. pls examing them very well. if they have no real intention pls diable them

bholler

can anyone assist me on how to block yahoo music launch on my network with MTOS? thanks

Search found 95 matches