MikroTik

3liswaid

About facebook and whatsapp, are shared, you have all the list on previous post. Also google share IP not only for youtube, but also for near all it's services Youtube address: https://bgp.he.net/AS36040#_prefixes THANK YOU FOR YOU REPLY MATE I HAVE FOUND THE PROBLEM THE REAL SCRIPT IS: # Use DNS E...

3liswaid

For me, on 6.46.8 is working Warning: some IP are SHARED with whatsapp... Update list witout waste time: https://bgp.he.net/AS32934#_prefixes Without waste time with scripting, all (actual at the moment I write) Facebook IPs are: /ip fire add add address=102.132.96.0/20 list=facebook add address=10...

3liswaid

hi i used to use this script to get the IPs of facebook whatsapp and youtube. but now is not working anymore , it's not getting any IP please check and feedback # Use DNS Entrys and add Address to the Firewall Address-list # :foreach i in=[/ip dns cache all find where (name~"facebook") &am...

3liswaid

it worked for me
all i did is doing NATing between the two mikrotik

3liswaid

no one knows the answer?

3liswaid

all i want to do that
hotspot on 3.3.3.3
and radius server on 2.2.2.2

3liswaid

Hi, i have the below Topology https://i.ibb.co/6g3GkfV/1.png when a mobile phone coming from access point trying to access. it gives a message Radius server is not responding. although i'm seeing the request at 2.2.2.2 https://i.ibb.co/mNGZMY2/2.png that's mean the request goes to 2.2.2.2 but never ...

3liswaid

Do you have some sort of pi-hole on your network? Data=0.0.0.0 looks like a pi-hole blocking access to that domain. (if type != unknown) yes i do have a pi-hole but even without using pi-hole MikroTik still adding 0.0.0.0 to address list under the name of whatsapp P.S=i am making the mikrotik is th...

3liswaid

Hi, I am using this address to capture Whatsapp IPs, but sometimes it captures 0.0.0.0 and add it to the list do you have any solution? # Use DNS Entrys and add Address to the Firewall Address-list # :foreach i in=[/ip dns cache all find where (name~"whatsapp") && (type="A&quo...

3liswaid

i will try what you suggest
but i expect stable connection with high speed 80 90 mbps
as i'm 2m far away from Wireless router

3liswaid

get rid of band=b. Channel-width=20/40mhz-XX depending of the distance

i did
it's not helping

3liswaid

any help please

3liswaid

in addition to the below problem 23:55:14 wireless,debug MikroTik: F8:59:71:43:2C:18 attempts to associate 23:55:14 wireless,info F8:59:71:43:2C:18@MikroTik: reassociating 23:55:14 wireless,info F8:59:71:43:2C:18@MikroTik: disconnected, ok 23:55:14 wireless,debug MikroTik: F8:59:71:43:2C:18 not in l...

3liswaid

kindly find my Wireless configuration 0 R name="MikroTik" mtu=1500 l2mtu=1600 mac-address=B8:69:F4:0B:4C:A9 arp=enabled interface-type=Atheros AR9300 mode=ap-bridge ssid="MikroTik" frequency=2447 band=2ghz-b/g/n channel-width=20/40mhz-XX secondary-channel="" scan-list=d...

3liswaid

The interface will be marked down when there are no clients connected.

thank you
it's clear now

3liswaid

Hi,
i see that my cap interface goes down and up.

3liswaid

https://wiki.mikrotik.com/wiki/Manual:C ... with_VLANs

3liswaid

Make this queue in subnet for employees or in bridge connected to datapath

i have done it using VLANs
but the ping between VLANs is 70ms !!

3liswaid

I have MikroTik Router (hEX S) running as CAPsMAN connected with Cap lite (CAP)
i have made two configuration files for two SSIDs [ Managers and Employee ]
My question is how to make queue on Employee SSID and limit upload and download ?

3liswaid

use your VDSL Router as bridge and configure the ppoe in Mikrotik and use whatever you want

3liswaid

ANY HELP?

3liswaid

No, since this model has SPI flash, MetaRouter is not supported.

it supports the Metarouter but i don't have enough space on local storage

3liswaid

Hi i have ,
951Ui-2nD
https://mikrotik.com/product/RB951Ui-2nD
and i can't install a VM due to low storage capacity.
is there any solution to expand it or delete unused packages?

3liswaid

i have the same problem
my router is hEX

Note that: my friend also has a hEX and the problem didn't appear for him..

i believe that that problem has appeared after i connect my phone to the router and enabled the Tethering.

3liswaid

you have the below scheme https://i.imgur.com/oMrDb02.png please apply the following [admin@R1] interface ipip> add local-address: 10.40.2.211 remote-address: 10.40.2.222 [admin@R1] interface ipip> print Flags: X - disabled, R - running # NAME MTU LOCAL-ADDRESS REMOTE-ADDRESS 0 X ipip1 1480 10.40.2....

3liswaid

There is no way to create a meta-address list aggregating several address lists (a list of lists). Closest to what you want is use of firewall filter chain, something like /ip firewall filter add chain=input action=accept connection-state=established,related ... add chain=input action=jump jump-tar...

3liswaid

+1
it's very helpful to find such a log

3liswaid

of course you can
it's simple just as you save backup to local storage
you can save on on USB
just connect the USB and format it and you will be able to see it in the files as a new disk

3liswaid

So you want to allow access to winbox from external sources by IP address?
What about vpn connection?

i will drop any new request which is not from France and Germany

only IPs from France and Germany are allowed to access win box

3liswaid

Hi, i have address lists in my MikroTik router, lets say that i have all the IP ranges of Germany 2.16.6.0/23 2.16.23.0/24 . . . and so on then i have address list for all IP ranges of France 192.168.15.0/24 192.168.20.0/24 . . i have applied rules for Germany and applied rules for France. now i nee...

3liswaid

thank you for your instruction. it was helpful

3liswaid

At first glance it looks like radio interference - connect using an Ethernet cable and use / interface wireless scan to see what other wireless networks at what frequencies (channels) exist around you. Google something about how WiFi actually works - in the 2.4 GHz band, only few channels (1,6,11 o...

3liswaid

Hi, i'm having an issue my laptop keeps disconnecting from MikroTik as below 21:04:35 wireless,debug MikroTik: F8:59:71:43:2C:18 attempts to associate 21:04:35 wireless,info F8:59:71:43:2C:18@MikroTik: reassociating 21:04:35 wireless,info F8:59:71:43:2C:18@MikroTik: disconnected, ok 21:04:35 wireles...

3liswaid

you are right, that is quite hard to do. maybe even impossible.

i'm intending to apply this configuration to allow users to browsers FB whatsapp.
cause i will use a 3G Modem with the Router.
i can't afford them to download torrent or browse videos
i just want to give them social media browsing

3liswaid

any idea?
i tried to block facebook and allow all
but the hard thing is to allow facebook and block all

3liswaid

Hi,
i'm trying to allow access only for Facebook for my users.
but i failed.
all i did is to mark Facebook connection and i succeeded. then i allowed this connection then i put a rule to drop others
can you help me?

3liswaid

This could work. Just need to change the limits pcq-rate to your liking. Setting total max for upload & download is advisable to provide overall QoS.

thank you

3liswaid

will this help? # Limit Bandwidth of each IP in an entire subnet: /queue type add kind=pcq name=pcq-upload-custom pcq-classifier=src-address pcq-rate=2M add kind=pcq name=pcq-download-custom pcq-classifier=dst-address pcq-rate=2M /queue simple add name=Throttle-Each queue=pcq-upload-custom/pcq-downl...

3liswaid

Hi,
i need to limit the speed Down=200 kbps Up=100 kbps for each new user got IP from DHCP server
please your support to do so
BR

3liswaid

Also what is the TCP connection established towards my router? These are connections to your PPTP server. 'TCP connection established' not necessarily means someone was able to get in, it means someone established connection and was able to begin the authentication process. The same for ipsec error...

3liswaid

Also what is the TCP connection established towards my router?

3liswaid

Dears, kindly your support to explain the below in the log 03:39:34 ipsec,info respond new phase 1 (Identity Protection): "MY IP"[500]<=>216.218.206.118[36735] 03:39:34 ipsec,error 216.218.206.118 failed to get valid proposal. 03:39:34 ipsec,error 216.218.206.118 failed to pre-process ph1 ...

3liswaid

viewtopic.php?t=49106#p249410

didn't understand

3liswaid

Hi,
i have a difference in the mangle rules statistics
what is wrong?
why the packets statistics are larger than the conn statistics?

3liswaid

The full ovpn file looks like: client dev tun proto tcp remote ca-van.prod.surfshark.com 1443 resolv-retry infinite remote-random nobind tun-mtu 1500 tun-mtu-extra 32 mssfix 1450 persist-key persist-tun ping 15 ping-restart 0 ping-timer-rem reneg-sec 0 remote-cert-tls server auth-user-pass #comp-lzo...

3liswaid

Option "tls-auth" is not supported by OpenVPN in RouterOS. If server requires that, you won't be able to connect.

this is what needed
#comp-lzo
verb 3
pull
fast-io
cipher AES-256-CBC

auth SHA512

3liswaid

i need to know how to configure my MikroTik openvpn client and make some local IPs go through this VPN tunnel

3liswaid

Hi, i have bought openvpn and i couldn't configure it on my Mikrotik router. there are certificate. <ca> -----BEGIN CERTIFICATE----- MIIFTTCCAzWgAwIBAgIJAMs9S3fqwv+mMA0GCSqGSIb3DQEBCwUAMD0xCzAJBgNV BAYTAlZHMRIwEAYDVQQKDAlTdXJmc2hhcmsxGjAYBgNVBAMMEVN1cmZzaGFyayBS b290IENBMB4XDTE4MDMxNDA4NTkyM1oXDTI4M...

3liswaid

1. This might be port flapping, that means not related to any attacks or vulnerabilities - you might want to disable hardware offloading and enable cpu offloading as I had this same issue with my RB951G. Seems related to a bad cable/layer1 with mixed ethernet negotiation speeds, where any renegotia...

3liswaid

Please /export hide-sensitive in terminal. # feb/26/2019 03:34:32 by RouterOS 6.43.12 # software id = 7AJ5-IU6H # # model = 951Ui-2nD # serial number = 925109E50438 /interface bridge add admin-mac=B8:69:F4:0B:4C:A4 auto-mac=no disabled=yes name=Bridge01 add disabled=yes mtu=1500 name=Bridge02 add d...

3liswaid

MIPSBE

3liswaid

What version of RouterOS and firmware you are using?

current firmware:6.43.12
RouterOS v6.43.12 (stable)

3liswaid

Hi, i have some issues with my Mikrotik router Rb951ui-2nD. i will write them one by one. 1-sometime the router reboot automatically throughout the working hours. i have 3 WLANs and 1AP and connect my PC through Ethernet. all the interfaces down for 1 min then all up. 2-when i apply something new th...

Search found 53 matches