Community discussions

MikroTik App

Search found 146 matches

by aesmith
Fri Dec 18, 2020 10:56 am
Forum: Beginner Basics
Topic: Home LAN setup & Management
Replies: 3
Views: 591

Re: Home LAN setup & Management

For management it really depends on how the Draytek can be configured, there's nothing technically wrong with having a normal IP address on an Ethernet port that also has the PPPoE client, I expect that can be configured at the Mikrotik end but it's anyone's guess whether the Draytek supports it. If...
by aesmith
Fri Dec 18, 2020 10:47 am
Forum: Beginner Basics
Topic: QoS example/template
Replies: 15
Views: 1128

Re: QoS example/template

Oops, looks like I'm a little out of date. However doing a quick catch up it looks like that convention is subject to change, with the latest RFC recommending 000001 for LE traffic, this being a value not previously classified. Do you know which convention Mikrotik follows, specifically in the "...
by aesmith
Thu Dec 17, 2020 7:12 pm
Forum: Beginner Basics
Topic: Mikrotik to Mikrotik VPN for specific port only
Replies: 7
Views: 566

Re: Mikrotik to Mikrotik VPN for specific port only

Here's an example I did for test, I'm matching destination address in the mangle rule whereas you would match by source /ip firewall mangle add action=mark-routing chain=prerouting dst-address=8.8.4.4 new-routing-mark=FISH passthrough=yes /ip route add check-gateway=ping comment="*** ADSL - PBR...
by aesmith
Thu Dec 17, 2020 7:01 pm
Forum: Beginner Basics
Topic: Mikrotik to Mikrotik VPN for specific port only
Replies: 7
Views: 566

Re: Mikrotik to Mikrotik VPN for specific port only

There might be a simpler solution. If your VoIP phone only communicates with specific hosts at the company, or specific subnets, then you can add routes for those addresses via the VPN. That is easy because the natural behaviour of a router is to forward based on destination address. It gets more co...
by aesmith
Thu Dec 17, 2020 6:42 pm
Forum: Beginner Basics
Topic: QoS example/template
Replies: 15
Views: 1128

Re: QoS example/template

Make sure your upload program in the PC uses a lower priority (DSCP 8 or 16) than the default traffic (normally DSCP 0).
Then use one of the QoS methods that use DSCP (high 3 bits) to determine priority.
DSCP=0 is the lowest possible priority.
by aesmith
Thu Dec 17, 2020 6:41 pm
Forum: Beginner Basics
Topic: QoS example/template
Replies: 15
Views: 1128

Re: QoS example/template

What I've done is to prioritise small TCP packets on the upload direction. That way if a big upload is taking place the the small TCP "ack" packets relied on for download will still get through. For streaming services you'll need to look at what upstream control packets are send and do som...
by aesmith
Tue Dec 08, 2020 7:08 pm
Forum: Beginner Basics
Topic: QoS example/template
Replies: 15
Views: 1128

Re: QoS example/template

The other problem is that you are trying to manage bandwidth utilization of inbound (to the router) traffic flows. That is a very important point. One aspect of QoS is congestion management, when there is more data to be sent than the bandwidth can cope with. Under these conditions QoS is essential...
by aesmith
Mon Nov 30, 2020 10:20 am
Forum: General
Topic: How is your public IP address determined?
Replies: 23
Views: 1395

Re: How is your public IP address determined?

But I'm still missing some nice centralized mechanism how to tell devices to selectively use one address or another (e.g. to route everything to selected subnet via one router, while using other one for everything else). That might not be needed if you number literally everything internally from bo...
by aesmith
Mon Nov 30, 2020 10:16 am
Forum: General
Topic: How is your public IP address determined?
Replies: 23
Views: 1395

Re: How is your public IP address determined?

About multihoming, professional solutions aside (own prefix, BGP and stuff, because that's not for little guy), it's not completely hopeless. Using multiple addresses for a dual homed organisation, Inbound sounds relatively straightforward, the way you explain it. Effectively two overlaid addressin...
by aesmith
Sun Nov 29, 2020 6:00 pm
Forum: General
Topic: How is your public IP address determined?
Replies: 23
Views: 1395

Re: How is your public IP address determined?

It gives a pretty good idea about your hardware.
by aesmith
Sun Nov 29, 2020 5:02 pm
Forum: General
Topic: How is your public IP address determined?
Replies: 23
Views: 1395

Re: How is your public IP address determined?

Another problem with IPv6 is multihoming support, or the lack of it. I have never seen a sensible solution suggested. Take an example of a user with multiple sites, centralised Internet access via a main and a secondary connection. When the main Internet fails, the hosts at the remote sites won't b...
by aesmith
Sun Nov 29, 2020 3:34 pm
Forum: General
Topic: Redundant connection between Cisco VSS LACP and two routers
Replies: 3
Views: 519

Re: Redundant connection between Cisco VSS LACP and two routers

A port channel from a VSS pair can only go to a single device, or a pair of devices pretending to be one (eg Nexus VPC, or Catalyst stack). It can't go to two different devices because on a frame by frame basis either link could be used. How are these two WAN routers going to be configured, will the...
by aesmith
Sun Nov 29, 2020 11:10 am
Forum: Beginner Basics
Topic: Inbound & Outbound firewall without NAT
Replies: 27
Views: 1495

Re: Inbound & Outbound firewall without NAT

Don't forget that "WAN" (Wide Area Network) doesn't mean "Internet". It seems to be a Mikrotik thing to treat them as one and the same. In reality you can have WAN that doesn't need NAT, in fact that's pretty commonplace, and many sites have separate WAN and Internet connections ...
by aesmith
Sat Nov 28, 2020 10:43 pm
Forum: Beginner Basics
Topic: Inbound & Outbound firewall without NAT
Replies: 27
Views: 1495

Re: Inbound & Outbound firewall without NAT

Second router [router2], the one without NAT, doesn't have a WAN interface, both are LAN
by aesmith
Sat Nov 28, 2020 7:11 pm
Forum: General
Topic: Transparent IP Mode
Replies: 2
Views: 283

Re: Transparent IP Mode

I don't want to be nat. I want to use public ip behind the Mikrotik. Is the IP subnet that you want to use behind the Mikrotik, the same subnet as the ISP uses to connect to your outside interface? Or is it a separate subnet? A lot of providers that I work with use a /30 or /31 to connect to the cu...
by aesmith
Sat Nov 28, 2020 7:04 pm
Forum: General
Topic: How is your public IP address determined?
Replies: 23
Views: 1395

Re: How is your public IP address determined?

I've got a reasonable understanding of how routers work but one thing I've never worked out is how the various methods of discovering your public IP address work? https://www.ipchicken.com/ tells me my current Virgin Media public IP address. Where is it getting that address from?? Anything you acce...
by aesmith
Sat Nov 28, 2020 6:52 pm
Forum: General
Topic: Meraki IPSec Over PPTP tunnel without changing MTU or MSS
Replies: 5
Views: 403

Re: Meraki IPSec Over PPTP tunnel without changing MTU or MSS

You might be better asking on the Meraki community, or in fact you can raise a support case from your Dashboard.
by aesmith
Sat Nov 28, 2020 6:50 pm
Forum: Beginner Basics
Topic: Inbound & Outbound firewall without NAT
Replies: 27
Views: 1495

Re: Inbound & Outbound firewall without NAT

But you can also have network like this: <internet>---[router]---<192.168.88.0/24>---[router2]---<192.168.89.0/24> That's what OP wants, router2 doesn't need NAT. Apart from the addressing, that's exactly how part of my home network is configured, [router] being my LTE router that does NAT, and [ro...
by aesmith
Sat Nov 28, 2020 12:53 pm
Forum: Beginner Basics
Topic: Using DHCP "Active Host Name" for local IP resolution
Replies: 3
Views: 391

Re: Using DHCP "Active Host Name" for local IP resolution

I have the basics taken care of, but now I'm trying to replicate an ability that I had with my previous router. It acted as a local DNS cache ... The first bit's easy, here's an example enabling local router to act as caching DNS server. In this example it's using Open DNS to resolve external names...
by aesmith
Sat Nov 28, 2020 12:39 pm
Forum: Beginner Basics
Topic: Lockout after default bridge deletion?
Replies: 6
Views: 424

Re: Lockout after default bridge deletion?

If you just want a different subnet on each Ethernet interface, and only one interface on each subnet, then you don't need VLANs at all. For each interface, first remove it from the default bridge, add it to LAN list and apply your chosen IP address and mask. Once you'd done one you can disconnect a...
by aesmith
Thu Nov 26, 2020 4:20 pm
Forum: Wireless Networking
Topic: CAPsMan on RB4011 + CAP AC
Replies: 15
Views: 1874

Re: CAPsMan on RB4011 + CAP AC

Is it worth even considering CAPs Man if you only have one AP? Personally I'm quite happy with my RB4011, I have the model with wireless and it's just about able to cover the whole house. It powers my LTE router from ether10 with no issues. Maybe there's not sufficient PoE out for your AP?
by aesmith
Thu Nov 26, 2020 3:46 pm
Forum: Beginner Basics
Topic: Queue and Mangle Questions
Replies: 2
Views: 324

Re: Queue and Mangle Questions

The benefit of DSCP marking is that it's persistent, so marks set on one device can be acted on by another. It also removes the need for downstream devices to know exactly why the mark was set, and complex matching criteria need only be configured at the point where the DSCP value is set.
by aesmith
Wed Nov 25, 2020 3:09 pm
Forum: Beginner Basics
Topic: Static Routing Assistance - Learning - Point me the right direction
Replies: 5
Views: 535

Re: Static Routing Assistance - Learning - Point me the right direction

Based on that diagram it's not clear whether the wireless devices will need routes as well. You have them interconnecting different subnets, suggesting that they're routing, but you don't show addressing on the actual links so they don't appear to be neighbours. However for the RB2011s it's reasonab...
by aesmith
Tue Nov 24, 2020 1:44 pm
Forum: General
Topic: Redirecting specific external traffic to appear as if it came from within the network
Replies: 8
Views: 390

Re: Redirecting specific external traffic to appear as if it came from within the network

I agree, L2TP is easiest if that's supported at the third party's equipment as well. You said you don't need encryption, which makes some sense if this is Internet traffic anyway. You'll need a route to your third party's IP address range(s) via the L2TP tunnel interface. And if you're using default...
by aesmith
Tue Nov 24, 2020 11:03 am
Forum: Beginner Basics
Topic: Dual WAN + OpenDNS
Replies: 12
Views: 581

Re: Dual WAN + OpenDNS

A router's natural behaviour is to route based on destination address. So adding configuration to make the routing decision on some other basis is not quite so easy. I've not done this, but I think you could use packet marks or routing marks to do this. I did a quick check and I think it can be done...
by aesmith
Mon Nov 23, 2020 4:48 pm
Forum: General
Topic: Redirecting specific external traffic to appear as if it came from within the network
Replies: 8
Views: 390

Re: Redirecting specific external traffic to appear as if it came from within the network

Yes, I'm looking to have someone outside of my network browse the internet through my router. Do you know of any guides that best match this kind of use case?
How will their traffic reach your network, do you have a private link or are they reaching you over the Internet?
by aesmith
Mon Nov 23, 2020 3:04 pm
Forum: Beginner Basics
Topic: Dual WAN + OpenDNS
Replies: 12
Views: 581

Re: Dual WAN + OpenDNS

When I try to remove the ip address assignment on ether2, I can no longer connect to the router and have to reset to factory defaults. It comes up with that config on default (assigning 192.168.88.1/24 to ether2). To be honest I can't remember what I did with my old router. That had the IP address ...
by aesmith
Sun Nov 22, 2020 8:02 pm
Forum: General
Topic: Redirecting specific external traffic to appear as if it came from within the network
Replies: 8
Views: 390

Re: Redirecting specific external traffic to appear as if it came from within the network

Let's see your current configuration. Making a few assumptions, for example when you say "web traffic" I've assumed you mean Internet access. And when you say "be redirected back out" I assume you mean redirected to the Internet. If my wild guesses are correct, I would expect tha...
by aesmith
Sun Nov 22, 2020 7:29 pm
Forum: Beginner Basics
Topic: Dual WAN + OpenDNS
Replies: 12
Views: 581

Re: Dual WAN + OpenDNS

Comments from comparing with my configuration, where I do the same with DNS - router uses Open DNS but the DHCP clients lookup from the router. I think you need to add the DNS option into your DHCP server config. /ip dhcp-server network add address=192.168.88.0/24 dns-server=192.168.88.1 gateway=192...
by aesmith
Fri Nov 20, 2020 5:53 pm
Forum: Wireless Networking
Topic: Set wireless AP to be connected to a Mikrotik
Replies: 2
Views: 184

Re: Set wireless AP to be connected to a Mikrotik

It depends on the ISP router, can you let us know the make and model? Most home routers have all LAN Ethernet and wireless bridged together, then a separate Ethernet or DSL port for the Internet. If that's the case all you'd have to do is connect one of the LAN ports to your Mikrotik, switch off DHC...
by aesmith
Fri Nov 20, 2020 2:49 pm
Forum: Beginner Basics
Topic: Internet access not available
Replies: 15
Views: 756

Re: Internet access not available

It's not perfect but you can find data on your mast here, seaching by the mast ID (210070) .. https://www.cellmapper.net/map?MCC=222&MNC=88&type=LTE&latitude=44.94576770661959&longitude=9.631337821483612&zoom=16&showTowers=true&showTowerLabels=true&clusterEnabled=true...
by aesmith
Fri Nov 20, 2020 2:43 pm
Forum: Beginner Basics
Topic: 2 separate subnets on 2 different router's ports
Replies: 40
Views: 1779

Re: 2 separate subnets on 2 different router's ports

That's how I'd do it. If you only need each subnet on one interface only, no need for VLANs or bridges. Configuration can be applied directly to the interface. Not sure on your filter rules, I would have thought they should be on chain "forward", as "input" refers to traffic rece...
by aesmith
Thu Nov 19, 2020 2:10 pm
Forum: Beginner Basics
Topic: Internet access not available
Replies: 15
Views: 756

Re: Internet access not available

Is your SXT getting an address and a route from the provider?
by aesmith
Thu Nov 19, 2020 10:46 am
Forum: General
Topic: Problems with MT [SOLVED]
Replies: 11
Views: 772

Re: Problems with MT [SOLVED]

Check that the bridge MAC addresses are unique, different for each device.
by aesmith
Thu Nov 19, 2020 10:34 am
Forum: General
Topic: How to Block URL's in Router OS?
Replies: 12
Views: 666

Re: How to Block URL's in Router OS?

Could you block the DNS entries that those apps depend on? So people could download and install the apps, but they wouldn't work.
by aesmith
Wed Nov 18, 2020 10:43 pm
Forum: Beginner Basics
Topic: Configure CAP AC with external DHCP server [SOLVED]
Replies: 5
Views: 406

Re: Configure CAP AC with external DHCP server [SOLVED]

Something like ..
IP address add address=192.168.50.4/24 interface=bridge network=192.168.50.0 
by aesmith
Wed Nov 18, 2020 6:58 pm
Forum: Beginner Basics
Topic: Configure CAP AC with external DHCP server [SOLVED]
Replies: 5
Views: 406

Re: Configure CAP AC with external DHCP server [SOLVED]

How are you connecting the CAP AC to your ISP router? If it's by Ethernet, then that Ethernet and the wireless LANs need to be in the same bridge. Once you've done that your wireless connected devices will be able to communicate directly with the ISP router. You would probably also want to assign th...
by aesmith
Tue Nov 17, 2020 3:06 pm
Forum: Beginner Basics
Topic: How do I make highly-available AP that becomes LTE router in case of internet downtime?
Replies: 3
Views: 220

Re: How do I make highly-available AP that becomes LTE router in case of internet downtime?

I see your point, use Chateau as a gateway (without NAT) to the main router. It makes sense, but then how about upnp? It works on first router/gateway, isn't it? Using the term gateway in a general sense yes. Have the wireless and any Ethernets all in one Bridge, Interface List "LAN". Onl...
by aesmith
Tue Nov 17, 2020 11:04 am
Forum: Beginner Basics
Topic: Dual WAN + OpenDNS
Replies: 12
Views: 581

Re: Dual WAN + OpenDNS

Related, I also want to be able to use OpenDNS regardless of the WAN used. That means setting the DNS nameservers to specific, static addresses. Is this possible? In other words, would the IP resolution occur at the MikroTik or at the WAN modems/routers? Would the MikroTik dynamically / automatical...
by aesmith
Tue Nov 17, 2020 10:56 am
Forum: Beginner Basics
Topic: SXT LTE Kit - LTE Scan Function
Replies: 8
Views: 449

Re: SXT LTE Kit - LTE Scan Function

I think I'm now pretty certain it's just not supported on the older modem. A colleague has the Cat 6 version, using the same ISP (although a different mast and cell) and scan works for him.
by aesmith
Tue Nov 17, 2020 10:51 am
Forum: Beginner Basics
Topic: How do I make highly-available AP that becomes LTE router in case of internet downtime?
Replies: 3
Views: 220

Re: How do I make highly-available AP that becomes LTE router in case of internet downtime?

Difficult to be specific without actual IP addresses. But let's assume your main router is .1 and your Chateau is .2 on the same subnet. Default gateway for your devices is .1 so your main router is the decision making point. - On Chateau, make sure it has a default route to the Internet via LTE. If...
by aesmith
Mon Nov 16, 2020 6:07 pm
Forum: Beginner Basics
Topic: SXT LTE Kit - LTE Scan Function
Replies: 8
Views: 449

Re: SXT LTE Kit - LTE Scan Function

Thanks. Your answer about cell-monitor makes sense, I'm connected to Band 20 and it does indeed only show other Band 20 sources. I still can't get anything from Scan. I've tried just explicitly enabling the bands that should be available around here, Band 3 and Band 20 but still nothing. But I notic...
by aesmith
Mon Nov 16, 2020 11:12 am
Forum: Beginner Basics
Topic: SXT LTE Kit - LTE Scan Function
Replies: 8
Views: 449

Re: SXT LTE Kit - LTE Scan Function

Thanks. I still see nothing even after updating RoS and FW to 6.47.7. LTE modem firmware was already at the latest. Maybe a silly question, but does the scan show only signals other than the one it's connected to? That still doesn't quite explain it as "cell-monitor" picks up some other si...
by aesmith
Sun Nov 15, 2020 7:25 pm
Forum: Beginner Basics
Topic: RB4011 SFP Port as WAN
Replies: 10
Views: 517

Re: RB4011 SFP Port as WAN

That's correct. If you install something like this ... https://www.fs.com/uk/products/66613.html into an SFP+ slot, then it can connect it to either a 1000BaseT SFP or a native 1000BaseT interface and work at 1gig. Assuming compatibility between equipment and SFP+ of course.
by aesmith
Sat Nov 14, 2020 7:48 pm
Forum: Beginner Basics
Topic: RB4011 SFP Port as WAN
Replies: 10
Views: 517

Re: RB4011 SFP Port as WAN

So if you stick a Gigabit 1000BaseT SFP into the RB4011 SFP+ port, and connect that to a normal Gigabit 10/100/1000BaseT port on another device, say to a laptop, does that work? If the only thing that works is SFP to SFP connections (or SFP+ to SFP) then it sounds like there's something non-standard...
by aesmith
Sat Nov 14, 2020 7:41 pm
Forum: Beginner Basics
Topic: Failover WAN to LTE
Replies: 8
Views: 514

Re: Failover WAN to LTE

If it's configured correctly it will work for both. This is how I think it should work ... Your wireless devices connect wirelessly to the LtAP on its wireless, their default gateway is the LtAP 192.168.88.1. Same for anything on Ethernet, it gets its IP address from the LtAP and again default gatew...
by aesmith
Sat Nov 14, 2020 5:27 pm
Forum: General
Topic: Question about buying my first mikrotik
Replies: 2
Views: 212

Re: Question about buying my first mikrotik

The hAP AC is a general purpose Mikrotik router that happens to have pretty decent wireless. You can use it for a lot more, but on the other hand it would be pretty easy to configure just as a wireless AP. From the default configuration that I remember you wouldn't need to do much more than remove t...
by aesmith
Sat Nov 14, 2020 5:20 pm
Forum: General
Topic: RB4011iGS+ Ethernet performance issue [SOLVED]
Replies: 4
Views: 406

Re: RB4011iGS+ Ethernet performance issue [SOLVED]

To fancy for me LOL, I just use Ookla;-PP
Great if you have a Gigabit or better Internet connection, otherwise the Internet is going to be the limit and you're not really testing your Ethernet.
by aesmith
Sat Nov 14, 2020 5:18 pm
Forum: Beginner Basics
Topic: RB4011 SFP Port as WAN
Replies: 10
Views: 517

Re: RB4011 SFP Port as WAN

I have a SFP-RJ45 Module and it shows the link is up in Winbox. When I select the SFP port for the wan - it just does not work - Does the SFP port work for other functions, for example if you add it into the bridge (or whatever configuration you have for your other ports). The question may not be &...
by aesmith
Sat Nov 14, 2020 1:36 pm
Forum: Beginner Basics
Topic: Blacklist all but one IP? [SOLVED]
Replies: 4
Views: 269

Re: Blacklist all but one IP? [SOLVED]

If you want to literally reach only one IP on the Internet, then just have a static route for that one IP and don't configure a default route.
by aesmith
Sat Nov 14, 2020 1:32 pm
Forum: Beginner Basics
Topic: New HAP ac2 - wifi works, cable doesn't
Replies: 11
Views: 504

Re: New HAP ac2 - wifi works, cable doesn't

That's how you know it's a default config
My new router assigned the address to the bridge as default. Maybe it's version dependent, maybe depends on the shipping version of RoS.
by aesmith
Sat Nov 14, 2020 1:29 pm
Forum: Beginner Basics
Topic: New HAP ac2 - wifi works, cable doesn't
Replies: 11
Views: 504

Re: New HAP ac2 - wifi works, cable doesn't

I have no idea of the purpose of that part of the config. I know when my IP changes on my bell fibre connection I have to manually assign the new gateway to the routing otherwise no dice, unlike my cable connection which automagically routes to the new gateway. Perhaps that feature is designed for ...
by aesmith
Sat Nov 14, 2020 11:23 am
Forum: Beginner Basics
Topic: milrotik and o2 sim
Replies: 3
Views: 206

Re: milrotik and o2 sim

I've seen others have trouble getting the SIM properly seated, apparently if you put the SIM in the wrong way round it can still go in far enough to apparently latch, but of course it doesn't work. See this discussion on another forum .. https://www.ispreview.co.uk/talk/threads/mikrotik-routerboard-...
by aesmith
Sat Nov 14, 2020 11:20 am
Forum: Beginner Basics
Topic: SXT LTE Kit - LTE Scan Function
Replies: 8
Views: 449

Re: SXT LTE Kit - LTE Scan Function

You have a SIM card inserted?
Yes. It's in service, connected to the mast and carrying traffic. Does the SIM have to come out for the scan to work? Or SIM installed but not connected (not actually sure how to do that).
Thanks,
by aesmith
Fri Nov 13, 2020 4:01 pm
Forum: Beginner Basics
Topic: New HAP ac2 - wifi works, cable doesn't
Replies: 11
Views: 504

Re: New HAP ac2 - wifi works, cable doesn't

Shouldn't the address be on the bridge not on ether2?
by aesmith
Fri Nov 13, 2020 2:31 pm
Forum: Beginner Basics
Topic: SXT LTE Kit - LTE Scan Function
Replies: 8
Views: 449

SXT LTE Kit - LTE Scan Function

Hi, I have an "SXT LTE Kit" RBSXTR&R11e-LTE. I don't get any results when I run the scan function, either from the GUI or the CLI " interface lte scan lte1". Is this function just not supported on this particular modem (R11e-LTE) or is there some setting somewhere to enable i...
by aesmith
Fri Nov 13, 2020 2:02 pm
Forum: Beginner Basics
Topic: Failover WAN to LTE
Replies: 8
Views: 514

Re: Failover WAN to LTE

OK I'm getting the idea a bit better. So your NMEA data is sourced on 192.168.88.1:1000. That route isn't going to be disturbed by re-routing Internet access via another device. What I think I'd try as a start is .. - Keep the LtAP as your central router, default gateway etc - Change the LTE route t...
by aesmith
Thu Nov 12, 2020 5:33 pm
Forum: Beginner Basics
Topic: Failover WAN to LTE
Replies: 8
Views: 514

Re: Failover WAN to LTE

How is the NMEA data sent, is it just sent from the GPS or does the chartplotter reply to confirm receipt? If it need to reply then you need a specific route to the IP address of the NMEA source. The separate and more specific route will still remain in effect when the the general Internet route cha...
by aesmith
Thu Nov 12, 2020 5:25 pm
Forum: Beginner Basics
Topic: Layer 7 Blacklist
Replies: 16
Views: 807

Re: Layer 7 Blacklist

And the days of this method are numbered. Methods to detect this man-in-the-middle and refuse the connection are being implemented.
It's a pain, we had to do it for one customer but I remember we had to white list quite a few sites that weren't happy with that sort of interference.
by aesmith
Wed Nov 11, 2020 6:50 pm
Forum: Beginner Basics
Topic: Layer 7 Blacklist
Replies: 16
Views: 807

Re: Layer 7 Blacklist

There is no need to use the word "currently" in that statement. Decrypting SSL will never be possible, and should some ASIC appear that can do it, the SSL protocol (or the encryption protocols it uses) will be upgraded to defeat that. Some systems carry out a form of interference with SSL...
by aesmith
Wed Nov 11, 2020 6:49 pm
Forum: Beginner Basics
Topic: Pass through IP address to wireless router
Replies: 2
Views: 151

Re: Pass through IP address to wireless router

Another option may be to turn off NAT on your Asus router, and leave that to the Mikrotik. Then do your port forwarding on the Mikrotik, and also add a route to your internal network so it knows how to reach it. If you configure pass through on the Mikrotik then without some further configuration an...
by aesmith
Wed Nov 11, 2020 6:42 pm
Forum: Beginner Basics
Topic: Cat6 versus dBI for rural broadband
Replies: 3
Views: 236

Re: Cat6 versus dBI for rural broadband

The main benefit from Cat 6 is "Carrier Aggregation" combining two bands from the same mobile operator. So the benefit to you will depend on what your mast offers. If it only offers one band then CA doesn't come into play. You can check your mast on Cellmapper www.cellmapper.net. Also cons...
by aesmith
Wed Nov 04, 2020 7:01 pm
Forum: Wireless Networking
Topic: Mikrotik RB4011iGS+5HacQ2HnD and WiFi 802.11 AC 160mhz [SOLVED]
Replies: 45
Views: 9992

Re: Mikrotik RB4011iGS+5HacQ2HnD and WiFi 802.11 AC 160mhz [SOLVED]

Thanks, if I read that correctly it's a total of 553 Mbits/sec.
by aesmith
Wed Nov 04, 2020 6:54 pm
Forum: General
Topic: Failover for router hardware (not WAN)
Replies: 11
Views: 506

Re: Failover for router hardware (not WAN)

Ah, thanks! Sounds very similar to what I'm looking for :) Can VRRP also distribute config changes from master to backup nodes? Looks like that is left for the user to handle? VRRP (and HSRP) are intended to preserve the first hop, so that hosts can always reach their default gateway. The routers s...
by aesmith
Wed Nov 04, 2020 5:46 pm
Forum: Wireless Networking
Topic: Mikrotik RB4011iGS+5HacQ2HnD and WiFi 802.11 AC 160mhz [SOLVED]
Replies: 45
Views: 9992

Re: Mikrotik RB4011iGS+5HacQ2HnD and WiFi 802.11 AC 160mhz [SOLVED]

Just did a test from my work laptop. Winbox shows the laptop connected with 160Mhz "Rx Rate" and 80MHz "Tx Rate". I don't know if Rx and Tx are from the client's perspective, or the router. The Windows properties shows various rates from 866.7meg up to 1.7gig.. Again I don't know...
by aesmith
Wed Nov 04, 2020 9:38 am
Forum: Beginner Basics
Topic: Adding cAP AC to my network [SOLVED]
Replies: 52
Views: 2214

Re: Adding cAP AC to my network [SOLVED]

Completely aside, I'm puzzled by the idea of a an "Internet of Things" network, with no Internet access. Doesn't that just make them "Things"? .. I think we can call it a IntRAnet of things. There is no reason all devices on the network need to be connected to the www individual...
by aesmith
Tue Nov 03, 2020 11:43 pm
Forum: Beginner Basics
Topic: LAN to LAN bridging over EOIP
Replies: 12
Views: 567

Re: LAN to LAN bridging over EOIP

I think a fair summary would be to bridge between interfaces on the same subnet, route between interfaces on different subnets.
by aesmith
Tue Nov 03, 2020 7:06 pm
Forum: Beginner Basics
Topic: Firewall DNS Problem
Replies: 4
Views: 228

Re: Firewall DNS Problem

It's not advisable to have an open access for DNS traffic from the Internet into your network. The default "accept established" should permit in replies to your actual requests. Have you confirmed whether your requests are being prevented from going out, or whether the replies are being pr...
by aesmith
Tue Nov 03, 2020 6:24 pm
Forum: Beginner Basics
Topic: connect 2 subnets
Replies: 3
Views: 219

Re: connect 2 subnets

If this network isn't Internet connected, I'd suggest disabling any firewall, NAT or mangle rules in the first instance. Just assigning those two subnets via the two interfaces will allow them to talk to each other. If that doesn't work there's probably something wrong with the hosts, for example in...
by aesmith
Tue Nov 03, 2020 3:26 pm
Forum: Beginner Basics
Topic: LAN to LAN bridging over EOIP
Replies: 12
Views: 567

Re: LAN to LAN bridging over EOIP

You also have the same addresses applied to different things, for example 10.0.0.1 is applied to ether11 on site 1. But it's applied to the tunnel on site 2. And vice versa for 10.10.0.1. I'm not really familiar with Mikrotik's EOIP tunnels, but assuming it's the same as Cisco's GRE I'd suggest some...
by aesmith
Tue Nov 03, 2020 9:32 am
Forum: Beginner Basics
Topic: LAN to LAN bridging over EOIP
Replies: 12
Views: 567

Re: LAN to LAN bridging over EOIP

You're bridging two different subnets? I can't see how that's going to work, shouldn't you be routing between them? Or if they're supposed to be bridged, then it should be the same subnet. /interface bridge port add bridge=bridge1 interface=Site2 add bridge=bridge1 interface=Local /ip address add ad...
by aesmith
Mon Nov 02, 2020 2:48 pm
Forum: Beginner Basics
Topic: Route via a Specific Interface Only
Replies: 11
Views: 532

Re: Route via a Specific Interface Only

I finally got around to testing. It turns on that not for the first time I was over complicating things. I don't actually need the black hole route unless I want to see a particular remote gateway as down for any particular reason. So my basic configuration is ... /ip route add check-gateway=ping co...
by aesmith
Mon Nov 02, 2020 11:59 am
Forum: Beginner Basics
Topic: ethernet router + lte router - please advise configuration
Replies: 5
Views: 460

Re: ethernet router + lte router - please advise configuration

I've set mine up using a separate subnet between the main router and the LTE router. The interface that connects the main router to the LTE router is added to "LAN" rather than "WAN" interface list, so the main router does not do NAT. Added a default route on the main router poin...
by aesmith
Fri Oct 30, 2020 7:51 pm
Forum: Beginner Basics
Topic: Bridge / switch Ports
Replies: 3
Views: 260

Re: Bridge / switch Ports

Did you also move the IP address from ether1 to the bridge?
by aesmith
Thu Oct 29, 2020 7:07 pm
Forum: General
Topic: Problems with MT [SOLVED]
Replies: 11
Views: 772

Re: Problems with MT [SOLVED]

You might want to explain which exact Mikrotik products you are using, and how they are configured.
by aesmith
Tue Oct 27, 2020 4:19 pm
Forum: Beginner Basics
Topic: Schedule Question [SOLVED]
Replies: 4
Views: 345

Re: Schedule Question [SOLVED]

You could disable the route to 0.0.0.0/0 - that will kill the Internet. I think you'd have to create a script for this, and a schedule to run the script. You'd also want another script and schedule to enable it again.
by aesmith
Tue Oct 27, 2020 4:16 pm
Forum: Beginner Basics
Topic: ping by hostname
Replies: 3
Views: 276

Re: ping by hostname

How do you have DNS configured? You can add a script on the Mikrotik to create a matching DNS entry for any DHCP lease issued, using the domain you're configured on the DHCP Network, and the hostname provided during the DHCP request. Of course that's not any good if you're not using the Mikrotik as ...
by aesmith
Sat Oct 24, 2020 6:45 pm
Forum: Beginner Basics
Topic: DHCP2DNS problem!
Replies: 3
Views: 228

Re: DHCP2DNS problem!

I think those log messages are a red herring. They are errors from a script, presumably you've added that script to the DHCP server. Assuming no errors in the script one of the log messages suggests that you haven't specified a domain in the DHCP network, the other one just means a particular DHCP c...
by aesmith
Sat Oct 24, 2020 6:39 pm
Forum: Beginner Basics
Topic: Adding cAP AC to my network [SOLVED]
Replies: 52
Views: 2214

Re: Adding cAP AC to my network [SOLVED]

All I believe that is required att is to separate the IoT (which is currently on VLAN50) from the rest. We have it currently setup as a no-internet VLAN, but I can access it from my Admin workstation Completely aside, I'm puzzled by the idea of a an "Internet of Things" network, with no I...
by aesmith
Sat Oct 24, 2020 5:15 pm
Forum: General
Topic: Network config help on HEX S & Cisco Switches.
Replies: 32
Views: 1275

Re: Network config help on HEX S & Cisco Switches.

To those who have actually used these type of subscription features, do you feel they are worth the price, and which subscription features do you use? If you have used them and are now no longer paying for the features, what made you change? i don't use anything like these at home but we do for our...
by aesmith
Fri Oct 23, 2020 4:03 pm
Forum: General
Topic: Network config help on HEX S & Cisco Switches.
Replies: 32
Views: 1275

Re: Network config help on HEX S & Cisco Switches.

The Cisco device needs a subscription to get all the fancy stuff. Annual subscription price is around 2/3 of the initial hardware cost.
Cisco Small Business RV340
Cisco RV Securitysubscription licence (1 year) - 1 licence
by aesmith
Wed Oct 21, 2020 7:15 pm
Forum: Beginner Basics
Topic: Route via a Specific Interface Only
Replies: 11
Views: 532

Re: Route via a Specific Interface Only

It doesn't work on the recursive route, as soon as you stick the %ether5 it goes unreachable. To be clear, this route shows as unreachable, but becomes reachable as soon as I remove the "%ether5"
 ip route add check-gateway=ping distance=1 dst-address=0.0.0.0/0 gateway=8.8.8.8%ether5
by aesmith
Wed Oct 21, 2020 7:05 pm
Forum: Beginner Basics
Topic: How to select band for EE
Replies: 1
Views: 158

Re: How to select band for EE

I have a different model router but it may be the same. In Winbox if you select the LTE interface, on the General tab it should have options to select bands. If it doesn't can you put up a couple of screenshots showing what you do have available?
by aesmith
Wed Oct 21, 2020 9:37 am
Forum: Beginner Basics
Topic: Does "Detect Internet" actually do anything?
Replies: 5
Views: 535

Re: Does "Detect Internet" actually do anything?

I need to think a bit about lists. I have a router that will have three potential Internet connections, one needs NAT and firewall, one just needs firewall, and the third doesn't need either (the LTE has it's own firewall).
by aesmith
Tue Oct 20, 2020 8:38 pm
Forum: Beginner Basics
Topic: Does "Detect Internet" actually do anything?
Replies: 5
Views: 535

Re: Does "Detect Internet" actually do anything?

Actually I think I may have worked it out. Say I create a new Interface List "INTERNET-DETECTED", and set that in the Detect Internet settings, theoretically it should add the interface into that list, and I would match my rules against the list "INTERNET-DETECTED". Does that sou...
by aesmith
Tue Oct 20, 2020 7:46 pm
Forum: Beginner Basics
Topic: Does "Detect Internet" actually do anything?
Replies: 5
Views: 535

Re: Does "Detect Internet" actually do anything?

Thanks, I was already reasonably clear on all that, however I still can't see where the status is used. I can't see how for example you apply a filter, NAT or mangle rule based on detected status of "internet". The match address list options only offer the statically defined lists, or some...
by aesmith
Tue Oct 20, 2020 7:09 pm
Forum: Beginner Basics
Topic: Does "Detect Internet" actually do anything?
Replies: 5
Views: 535

Does "Detect Internet" actually do anything?

I'm not sure I've seen a straight answer to this, but I'm trying to find out whether "Detect Internet" actually does anything that influences the router's behaviour. The only effect that I think I've seen is on the Mikrotik mobile app where it determines whether the app shows a graph or In...
by aesmith
Tue Oct 20, 2020 6:39 pm
Forum: Beginner Basics
Topic: Route via a Specific Interface Only
Replies: 11
Views: 532

Re: Route via a Specific Interface Only

I just saw elsewhere that an interface can be specified along with the gateway definition, I presume this is just not supported by Winbox. Maybe this does away with the need for the second blackhole route. Will have to test when I get a chance, but if it works it will look something like .. /ip rout...
by aesmith
Tue Oct 20, 2020 4:47 pm
Forum: Beginner Basics
Topic: How to access other network device through Mikrotik [SOLVED]
Replies: 7
Views: 466

Re: How to access other network device through Mikrotik [SOLVED]

You need to explain a bit more, and show your existing configuration. You drawing shows 192.168.200.30 directly connected to 192.168.50.100, with no network devices in between. Could you also clarify about changing IP, as you say "I want to access UBNT device from my LAN IPs, without changing m...
by aesmith
Mon Oct 19, 2020 7:48 pm
Forum: Beginner Basics
Topic: Pi-Hole and Mikrotik - DNS - Pi-hole only show my router’s IP address
Replies: 12
Views: 891

Re: Pi-Hole and Mikrotik - DNS - Pi-hole only show my router’s IP address

I guess you entered pi-hole as DNS server in IP -> DNS? You should additionally specify pi-hole as DNS server in IP -> DHCP -> Networks Hi, Yes. Attached known bug. It's not really a bug though. Setting in IP->DNS tells the router what DNS server it should use, for requests not cached or locally de...
by aesmith
Mon Oct 19, 2020 1:01 pm
Forum: Beginner Basics
Topic: Route via a Specific Interface Only
Replies: 11
Views: 532

Re: Route via a Specific Interface Only

Hmm never used blackhole, interesting. I guess I find it hard to fathom not providing internet since one has a backup ISP. I presume "blackhole" just bins the packet silently, like a route to Null on other vendor's kit, whereas "unreachable" or "prohibit" return ICMP e...
by aesmith
Mon Oct 19, 2020 12:54 pm
Forum: Beginner Basics
Topic: NAT over 2 ports - cant get it to work (dstnat, srcnat or masquerade)
Replies: 2
Views: 153

Re: NAT over 2 ports - cant get it to work (dstnat, srcnat or masquerade)

What is your NAT trying to achieve? 10.1.1.88 is address of your own router interface so not sure which bit of configuration is expected to convert that and into what? Why can't you route to the PBX, without NAT, is it because the PBX won't talk to anything not on it's local subnet? If so then you w...
by aesmith
Sun Oct 18, 2020 7:07 pm
Forum: Beginner Basics
Topic: Route via a Specific Interface Only
Replies: 11
Views: 532

Re: Route via a Specific Interface Only

Cheers, I was thinking of something like this, where 172.17.47.2 my primary Internet router and 172.17.47.6 the secondary ... /ip route add check-gateway=ping distance=1 dst-address=8.8.8.8/32 gateway=172.17.47.2 scope=10 add distance=2 dst-address=8.8.8.8/32 type=blackhole add check-gateway=ping di...
by aesmith
Sun Oct 18, 2020 6:12 pm
Forum: Beginner Basics
Topic: Building LAN from scratch: 4 mikrotiks - 4 networks
Replies: 15
Views: 607

Re: Building LAN from scratch: 4 mikrotiks - 4 networks

That's quite a complex network for a home. If it's being done as a learning exercise then I'd suggest adding something else into the mix, variable length subnets. Typically in a corporate network we'd use /30 or /31 for any point to point links that will only ever have two devices. I'm not sure if M...
by aesmith
Sun Oct 18, 2020 5:37 pm
Forum: Beginner Basics
Topic: Route via a Specific Interface Only
Replies: 11
Views: 532

Route via a Specific Interface Only

Hi, This is for Internet fail over. What's the best way in RouterOS to configure a route via a specific interface, so that if that interface is down it won't route via the default route (or any other less specific route)? I think I can do it by adding a route to Null for the same /32 but with worse ...
by aesmith
Sun Oct 18, 2020 5:35 pm
Forum: Beginner Basics
Topic: Forum issue - posting from home network blocked
Replies: 0
Views: 146

Forum issue - posting from home network blocked

Hi, At home I use an LTE Internet connection (Mikrotik router of course) which uses CGNAT. My source address therefore is one shared on an unpredictable basis with an unknown number of users. What I've found is this forum blocks my IP address if I try to post from my PC, but is quite happy if I post...
by aesmith
Sun Oct 18, 2020 5:30 pm
Forum: Wireless Networking
Topic: Tip: Faster Roaming without STP
Replies: 14
Views: 928

Re: Tip: Faster Roaming without STP

Actually my previous analogy was wrong, a new connection to a L2 switch port IS an STP topology change, it's just that this is usually over-ridden by some special fast start configuration (eg Cisco's "portfast"). A wireless LAN is more akin to an Ethernet hub, where the "network"...
by aesmith
Sun Oct 18, 2020 11:13 am
Forum: Wireless Networking
Topic: Tip: Faster Roaming without STP
Replies: 14
Views: 928

Re: Tip: Faster Roaming without STP

The underlying problem here is the wireless interface changing to Disabled when no clients are associated. Why does it do this? A client attaching or roaming should be no different at the STP level than plugging or unplugging a host into an Ethernet switch. It shouldn't trigger a Spanning Tree topol...
by aesmith
Sat Oct 17, 2020 6:34 pm
Forum: Beginner Basics
Topic: Problem with IPPBX Behind Mikrotik
Replies: 7
Views: 394

Re: Problem with IPPBX Behind Mikrotik

Most IP telephony systems want SIP ALG disabled, so they can see the actual local addresses. Other methods normally deal with NAT traversal. When you say "can't call" does the callsetup fail, or connect with no audio?
by aesmith
Thu Oct 15, 2020 10:24 am
Forum: Beginner Basics
Topic: Problem with IPPBX Behind Mikrotik
Replies: 7
Views: 394

Re: Problem with IPPBX Behind Mikrotik

To be honest I nothing springs out as blocking inbound registrations. In fact your firewall could be described as dangerously sparse. I wonder about all the static NATs though, whether these might be conflicting. I might be inclined to strip back all the NAT entries referring to your PBX except for ...
by aesmith
Wed Oct 14, 2020 3:38 pm
Forum: Beginner Basics
Topic: Problem with IPPBX Behind Mikrotik
Replies: 7
Views: 394

Re: Problem with IPPBX Behind Mikrotik

Disabling the firewall doesn't sound a good idea. Without seeing your exact configuration or documentation for the phone system I suspect what you'll need is (1) Inbound NAT so that a designated public IP address routes to the internal IP address of your PBX. (2) Firewall rules to permit the ports a...
by aesmith
Wed Oct 14, 2020 12:59 pm
Forum: General
Topic: Out of disk space - upgrading hAP Lite from v6.35 to v6.35.2
Replies: 42
Views: 16368

Re: Out of disk space - upgrading hAP Lite from v6.35 to v6.35.2

I've got two devices with 16meg flash. Looking at "Files" both report around 12.6 used out of 16, but the actual files listed only amount to less than 100k. How do you see what is actually occupying flash?
by aesmith
Wed Oct 14, 2020 12:51 pm
Forum: Beginner Basics
Topic: Problem with IPPBX Behind Mikrotik
Replies: 7
Views: 394

Re: Problem with IPPBX Behind Mikrotik

Tested 3 phones and 1 soft client PC all connects fine internally and only problem is i cannot connect a soft phone / IP phone from outside network When you say you can't connect from outside the network, do you mean from elsewhere on the Internet? If so then we need to know how these remote phones...
by aesmith
Wed Oct 14, 2020 12:45 pm
Forum: Beginner Basics
Topic: Advice for best Practice/Solution
Replies: 1
Views: 222

Re: Advice for best Practice/Solution

Does the Nordvpn appear as an interface on the Mikrotik, with a route pointing to it? Could you share the output from "ip route print" from terminal, or screenshot from IP / Routes / Route List from Winbox or the web interface? Assuming it does appear as an interface, with default route po...
by aesmith
Tue Oct 13, 2020 1:11 pm
Forum: General
Topic: RB3011 system error critical
Replies: 5
Views: 350

Re: RB3011 system error critical

What's a "proper shutdown" for a Mikrotik router? Most network equipment is OK to just switch off, do Mikrotik need a soft shutdown first?
by aesmith
Sun Oct 11, 2020 10:56 am
Forum: Beginner Basics
Topic: QoS and Speed optimization
Replies: 5
Views: 422

Re: QoS and Speed optimization

Just to expand a bit more, if you're really sure that queuing delays are the issue you could manually tweak the output queue on your Hap. A simple FIFO queue with depth of say 100 packets can only add a maximum of 1.2 milliseconds even when the queue's full. If that helps you might want to use RED a...
by aesmith
Sun Oct 11, 2020 9:33 am
Forum: Beginner Basics
Topic: QoS and Speed optimization
Replies: 5
Views: 422

Re: QoS and Speed optimization

"Bufferbloat" happens where you have a bottleneck and a device with inappropriately long buffers. With 1gig service the bottleneck may be within your network, or contention in the ISP access network. Have you tested with a direct Ethernet to the Hap?
by aesmith
Sat Oct 10, 2020 10:22 am
Forum: Beginner Basics
Topic: QoS and Speed optimization
Replies: 5
Views: 422

Re: QoS and Speed optimization

What do you have configured at the moment, and when you say "bufferbloat" how have you determined that this is within the Mikrotik? It depends on your design but in a normal configuration where your router sits between you and your ISP then excessive latency during heavy uploads is most li...
by aesmith
Fri Oct 09, 2020 3:01 pm
Forum: Beginner Basics
Topic: Route all traffic through Site-to-Site VPN Tunnel
Replies: 3
Views: 274

Re: Route all traffic through Site-to-Site VPN Tunnel

What sort of VPN have you configured? It may be as simple as changing your default route to point to the VPN. You may need an additional /32 static route for the VPN end point, I like to include that to "nail up" the VPN and avoid it trying to tunnel itself.
by aesmith
Thu Oct 08, 2020 11:32 am
Forum: Beginner Basics
Topic: TCP "ACK" - Mark Connection or Packet?
Replies: 0
Views: 159

TCP "ACK" - Mark Connection or Packet?

Hi, Still drafting my QoS and queuing rules. I want to prioritise small TCP packets whose function is solely to increment acknowledgement number. Is this a case where I should mark the Packet rather than Connection? Something like .. add action=mark-packet chain=postrouting connection-mark="&qu...
by aesmith
Wed Oct 07, 2020 11:54 am
Forum: Beginner Basics
Topic: Couple of Quick Questions on Mangle Marks
Replies: 1
Views: 879

Couple of Quick Questions on Mangle Marks

Hi, Could someone confirm a couple of things? (1) If a connection or packet is marked in " prerouting ", does it keep that mark all the way through so it could be matched and acted on on " postroutin g", or indeed later to match a queue? (2) Some of the examples show DNS being ma...
by aesmith
Wed Oct 07, 2020 10:19 am
Forum: General
Topic: SFP/SFP+ confuzion [SOLVED]
Replies: 10
Views: 801

Re: SFP/SFP+ confuzion [SOLVED]

If your switch has more than one SFP port, try plugging both in there and see what it thinks. That way you're checking both SFPs and the cable.
by aesmith
Wed Oct 07, 2020 9:55 am
Forum: Beginner Basics
Topic: Priority Output Queue
Replies: 1
Views: 218

Re: Priority Output Queue

Hope you don't mind me bumping this one. I've been searching around and I simply can't find any reference to the "priority" marking doing anything to change behaviour, the only references I've seen use it as a mark to be matched in later rules or to assign queues etc. Is there more to it t...
by aesmith
Tue Oct 06, 2020 4:07 pm
Forum: Wireless Networking
Topic: SXT LTE - Any way to display modulation in use?
Replies: 5
Views: 337

Re: SXT LTE - Any way to display modulation in use?

The mast we're served from is around 12 km away. That mast only has Band 20, but I doubt the higher frequencies would be viable over that distance anyway. There are two masts much closer which have Band 3 as well but so far I haven't found a location or orientation that will pick them up. With hills...
by aesmith
Tue Oct 06, 2020 3:16 pm
Forum: Wireless Networking
Topic: SXT LTE - Any way to display modulation in use?
Replies: 5
Views: 337

Re: SXT LTE - Any way to display modulation in use?

Thanks. SINR is 18dB at the moment, although it varies. CQI 13. We're on Band 20 where our carrier has 5MHz.
by aesmith
Tue Oct 06, 2020 1:24 pm
Forum: Wireless Networking
Topic: MikroTik HAP AC2 - unable to get 867 Mbit/s on 5 Ghz - LOCAL network
Replies: 11
Views: 916

Re: MikroTik HAP AC2 - unable to get 867 Mbit/s on 5 Ghz - LOCAL network

The spec for the HAP AC2 quotes 300meg as the maximum speed on 2.4Ghz. I bet that's what it is. Google finds a few posts about issues with 5GHz on Lenovo laptops, hopefully it finds the solutions as well. Quick check you could disable 2.4GHz on the router.
by aesmith
Tue Oct 06, 2020 12:23 pm
Forum: Beginner Basics
Topic: proplem with dhcp
Replies: 7
Views: 433

Re: proplem with dhcp

Highly recommend that you don't use a public address on your private network. There are private IP ranges for a reason. Using someone elses address range wiil come back to haunt you if you every have connectivity to the rest of the Internet. For example it will prevent you accessing the real instan...
by aesmith
Tue Oct 06, 2020 12:20 pm
Forum: Beginner Basics
Topic: New Router Choice RB4011iGS+5HacQ2HnD-IN or what?
Replies: 1
Views: 196

New Router Choice RB4011iGS+5HacQ2HnD-IN or what?

Hi, My current network uses a hAP AC as the main router, with bridge to the internal LAN, and L3 link to a separate LTE router. The HAP handles all local connections both Ethernet and wireless, and mounted centrally it provides good enough wireless everywhere we need it. The problem is that I'm runn...
by aesmith
Tue Oct 06, 2020 11:14 am
Forum: Wireless Networking
Topic: MikroTik HAP AC2 - unable to get 867 Mbit/s on 5 Ghz - LOCAL network
Replies: 11
Views: 916

Re: MikroTik HAP AC2 - unable to get 867 Mbit/s on 5 Ghz - LOCAL network

Are you sure you're connected to the 5Ghz? You can check on the Mikrotik under Wireless / Registration (using Winbox)
Or CLI ..
/interface wireless registration-table print
by aesmith
Tue Oct 06, 2020 11:06 am
Forum: Wireless Networking
Topic: SXT LTE - Any way to display modulation in use?
Replies: 5
Views: 337

SXT LTE - Any way to display modulation in use?

Hi,
I'm using an SXT LTE, the LTE modem is shown as "R11e-LTE" in Winbox. Is there any way to show the modulation in use both upstream and downstream? It's not shown in Winbox as far as I can see, are there CLI options that display more detail?
Thanks,
Tony S
by aesmith
Mon Oct 05, 2020 1:31 pm
Forum: Beginner Basics
Topic: Priority Output Queue
Replies: 1
Views: 218

Priority Output Queue

Hi, This configuration was suggested to me to set a strict priority for output. Do I also need to set up any special queuing for the egress interface? I just want strict priority, no bandwidth limits just always sent higher priority packets before lower. Looking on Winbox the LTE interface queue typ...
by aesmith
Fri Oct 02, 2020 5:28 pm
Forum: Beginner Basics
Topic: configure tp link ap (c5400) behind mikrotik rb3011 router [SOLVED]
Replies: 8
Views: 478

Re: configure tp link ap (c5400) behind mikrotik rb3011 router [SOLVED]

How is the TP Link configured? As far as I'm aware that device is, or can be, a complete router etc. To works as a simple AP a few things would probably need to be disabled, and other need to be changed. Do you have L3 connectivity to the TP, for example can you reach it's management interface via t...
by aesmith
Thu Oct 01, 2020 10:33 am
Forum: Beginner Basics
Topic: Routing between connected subnets - ICMP but not TCP
Replies: 4
Views: 302

Re: Routing between connected subnets - ICMP but not TCP

Just to close this off, just for fun I created another NAT rule for access to just that one host from this source subnet, and with that in place it works. Confirming, I think that the Gigaset doesn't like admin access except from its connected subnet. It's not a lower level IP issue because it repli...
by aesmith
Wed Sep 30, 2020 6:46 pm
Forum: Wireless Networking
Topic: Mikrotik RB4011iGS+5HacQ2HnD and WiFi 802.11 AC 160mhz [SOLVED]
Replies: 45
Views: 9992

Re: Mikrotik RB4011iGS+5HacQ2HnD and WiFi 802.11 AC 160mhz [SOLVED]

So does that mean the issues are fixed now? I was considering this router for home, as I need more Ethernet ports than my hAP AC and I want to keep a single box.
by aesmith
Wed Sep 30, 2020 10:50 am
Forum: Beginner Basics
Topic: Routing between connected subnets - ICMP but not TCP
Replies: 4
Views: 302

Re: Routing between connected subnets - ICMP but not TCP

Very difficult, even impossible, to help if you only give part of the configuration. Fair comment. It's just that even with the "hide-sensitive" option export exposes a lot of stuff including SSIDs, SNMP communities and of course the full addressing scheme. It's possible to mask all this ...
by aesmith
Tue Sep 29, 2020 6:54 pm
Forum: General
Topic: Cisco EIGRP over Mikrotik EOIP
Replies: 1
Views: 231

Re: Cisco EIGRP over Mikrotik EOIP

How do you have your EIGRP configured? I'm wondering if maybe multicast isn't supported over your tunnel. You could try static neighbours if you haven't already.
by aesmith
Tue Sep 29, 2020 6:02 pm
Forum: General
Topic: Metal 52 ac & hAP AC - WiFi provider selection in the field [SOLVED]
Replies: 10
Views: 593

Re: Metal 52 ac & hAP AC - WiFi provider selection in the field [SOLVED]

Layer 2 network means the devices can directly communicate by Ethernet without having to go through a router. Devices on the same subnet assume this. How is the your hAP AC configured? Specifically ether5, is that set up with specific IP addressing or if it part of a bridge group? Ideally could you ...
by aesmith
Tue Sep 29, 2020 4:56 pm
Forum: General
Topic: Metal 52 ac & hAP AC - WiFi provider selection in the field [SOLVED]
Replies: 10
Views: 593

Re: Metal 52 ac & hAP AC - WiFi provider selection in the field [SOLVED]

How do you have the devices linked, physically and in terms of IP? For example it sounds as if you have 192.168.88.1 as an interface on the hAP AC. If the Metal 52 is on 192.168.88.2 then it needs to be on the same Layer 2 network as that interface.
by aesmith
Tue Sep 29, 2020 2:10 pm
Forum: Beginner Basics
Topic: Routing between connected subnets - ICMP but not TCP
Replies: 4
Views: 302

Routing between connected subnets - ICMP but not TCP

Hi, I have configured routing between two subnets which I'll call "Office" and "Home". Home is defined on the bridge and includes ether2, ether3, ether4 and the wireless. Office is connected to ether1. From a host on Office subnet I can ping one particular device on the Home subn...
by aesmith
Tue Sep 29, 2020 10:33 am
Forum: Beginner Basics
Topic: HAP AC - L2TP - Funny NAT issue
Replies: 4
Views: 591

Re: HAP AC - L2TP - Funny NAT issue

Thanks, that sort of confirms what I was coming around to realising. For SIP the UDP "connection" will never timeout, the device specifically keeps it alive in order to allow otherwise unsolicited inbound signalling. I need to look at scripting, particularly triggering since that script is...
by aesmith
Mon Sep 28, 2020 4:28 pm
Forum: Beginner Basics
Topic: HAP AC - L2TP - Funny NAT issue
Replies: 4
Views: 591

Re: HAP AC - L2TP - Funny NAT issue

Did a bit more testing and I can see that this would definitely stop proper fail-over operation. What's happening in a failover situation is that the Mikrotik is correctly re-routing the traffic based on the preferences in the routing table. However it is hanging onto the previous NAT status for the...
by aesmith
Mon Sep 28, 2020 2:36 pm
Forum: Beginner Basics
Topic: hAP AC next model
Replies: 4
Views: 376

Re: hAP AC next model

Who knows when a new model of hAp ac² with SFP will be available?
Wouldn't that be the existing "hAP AC" which is already available?
by aesmith
Sun Sep 27, 2020 5:25 pm
Forum: Beginner Basics
Topic: HAP AC - L2TP - Funny NAT issue
Replies: 4
Views: 591

Re: HAP AC - L2TP - Funny NAT issue

I don't know why this issue was arising for just one particular host but I think I've fixed it by brute force. Firstly there was no good reason other than laziness for the double NAT on the LTE connection so I've changed that to a routed connection, and on the main router moved ether5 out of "W...
by aesmith
Sat Sep 26, 2020 2:49 pm
Forum: Beginner Basics
Topic: A routing conundrum
Replies: 10
Views: 657

Re: A routing conundrum

If A can ping C then it looks like you have two way routing in place. Check it's not Windows firewall on A blocking inbound.
by aesmith
Sat Sep 26, 2020 1:47 pm
Forum: Beginner Basics
Topic: HAP AC - SFP port [SOLVED]
Replies: 3
Views: 289

Re: HAP AC - SFP port [SOLVED]

OK that's great thanks. I'm running short of interfaces but I'm sure I can scrounge an SFP from work, Hopefully a Cisco GLC-T is compatible. I'll bear your comments in mind, I assume the concern is throughput and CPU impact rather than function. My main ISP uplink is on eth5 as it uses PoE, but I co...
by aesmith
Sat Sep 26, 2020 1:42 pm
Forum: Beginner Basics
Topic: HAP AC - L2TP - Funny NAT issue
Replies: 4
Views: 591

HAP AC - L2TP - Funny NAT issue

Hi, I have a HAP AC with effectively two logical Internet interfaces. One is a physical link from eth5 to an SXT LTE router, that's set up in the laziest way with double NAT, so eth5 has DHCP client and adds a default route with distance=2. The other is an L2TP logical interface that goes via the LT...
by aesmith
Sat Sep 26, 2020 1:30 pm
Forum: Beginner Basics
Topic: HAP AC - SFP port [SOLVED]
Replies: 3
Views: 289

HAP AC - SFP port [SOLVED]

Hi,
I have the hAP AC (not AC2 or AC Lite) with PoE out and SFP slot. Is the SFP slot a separate interface, making six in all, or does it take over one of the five Ethernets when it's in use? Block diagram seems to show it separate.

Thanks, Tony S
by aesmith
Thu Sep 24, 2020 4:09 pm
Forum: Beginner Basics
Topic: Logging SINR etc
Replies: 2
Views: 525

Re: Logging SINR etc

Best option is to collect these values using SNMP. I've set that up using PRTG to monitor RSRP etc. Unfortunately I can't remember whether this was a pre-canned sensor in PRTG or whether I had to look out the MIB and the OIDs.
by aesmith
Fri Nov 01, 2019 8:03 pm
Forum: General
Topic: Configuration not saved, or reverted
Replies: 3
Views: 1020

Re: Configuration not saved, or reverted

Thanks for the response. I now think "Safe Mode" is the most likely cause. I have been in the habit of leaving Winbox running on the desktop PC, and the PC had some sort of crash or reboot. I guess I must have selected Safe Mode (without knowing what I was doing) when I carried out the las...
by aesmith
Fri Nov 01, 2019 5:22 pm
Forum: General
Topic: Configuration not saved, or reverted
Replies: 3
Views: 1020

Configuration not saved, or reverted

Hi, My home router is a Hap AC (RB962UiGS-5HacT2HnT). It's been in service only for a couple of weeks now and has been working fine. However overnight it suddenly lost three quarters of my wireless configuration. In my configuration I used my own SSID on both of the two physical wireless interfaces ...
by aesmith
Fri Aug 30, 2019 11:44 am
Forum: General
Topic: QoS / Prioritisation on Variable Bandwidth Link
Replies: 6
Views: 1601

Re: QoS / Prioritisation on Variable Bandwidth Link

Thanks, I need to look into this a bit more. I don't suppose you could link or show any examples where the bandwidth is unspecified?
by aesmith
Thu Aug 15, 2019 6:19 pm
Forum: General
Topic: QoS / Prioritisation on Variable Bandwidth Link
Replies: 6
Views: 1601

Re: QoS / Prioritisation on Variable Bandwidth Link

Thanks. That's a little disappointing. I was hoping there was a mechanism that would let the interface run at line rate, sending each outgoing packet as soon as the preceding one had been transmitted. Even quite basic routers will do that.
by aesmith
Tue Aug 13, 2019 5:26 pm
Forum: General
Topic: QoS / Prioritisation on Variable Bandwidth Link
Replies: 6
Views: 1601

QoS / Prioritisation on Variable Bandwidth Link

Hi, The examples and documentation that I've found for RouterOS quality of service and queuing, all seem to need a known bandwidth to be set either as the maximum for a given traffic class, or the max available on the interface. Are there any mechanisms that adapt to the rate that's actually availab...
by aesmith
Tue Aug 13, 2019 4:45 pm
Forum: General
Topic: RBSXTR&R11e-LTE Signal Strength Reading
Replies: 2
Views: 1502

Re: RBSXTR&R11e-LTE Signal Strength Reading

Thanks for the response, sorry I didn't notice your post earlier. Yes I have mine in service in the UK now, on Three. I'm monitoring and logging LTE signal parameters with PRTG using SNMP, but to answer my own original question I found the Android App best for live display while adjusting the alignm...
by aesmith
Wed Mar 27, 2019 6:49 pm
Forum: General
Topic: RBSXTR&R11e-LTE Signal Strength Reading
Replies: 2
Views: 1502

RBSXTR&R11e-LTE Signal Strength Reading

Hi, Sorry this is a basic question, however I'm thinking of trying the SXT LTE version (RBSXTR&R11e-LTE) in the UK. If it's like other LTE devices that I've used it will need some trial and error to choose the best location and alignment. Is there anywhere in the user interface that displays a l...