Community discussions

MUM Europe 2020

Search found 25 matches

by AidanAus
Fri Sep 20, 2019 10:33 am
Forum: Beginner Basics
Topic: Help!!
Replies: 2
Views: 452

Re: Help!!

Guessing your using just 0.0.0.0/0 in the routing table used by each WAN path. So when PBR (policy based rules) selects the route table to use, based on a connection mark or IP range etc, it doesn’t use your main routing table, which likely has the local LAN routes. And would follow your next hop o...
by AidanAus
Fri Sep 20, 2019 10:27 am
Forum: Beginner Basics
Topic: PPTP VPN and gateway question
Replies: 2
Views: 449

Re: PPTP VPN and gateway question

I think the easiest way would be to run on proxy arp on the bridge going to the 192.168.x.x network and it should be able to communicate for you, the issue is that the LAN's on either side of the tunnel dont know how to communicate to each other. Another way to get around this is to set a static rou...
by AidanAus
Tue Jun 18, 2019 10:10 am
Forum: Beginner Basics
Topic: New
Replies: 1
Views: 223

Re: New

Hi I'm new in the Mikrotik world and I want to know how mix three DSL lines and make the forth used for upload only. Thanks Are all 4 connections to the same ISP connection or are they different and when you say you would like the 4th one for upload only do you mean initiation uploads from your rou...
by AidanAus
Tue Jun 18, 2019 10:02 am
Forum: Beginner Basics
Topic: WAPR LTE Kit Bridge Mode Help
Replies: 12
Views: 786

Re: WAPR LTE Kit Bridge Mode Help

Thanks Craig. That's very helpful and appreciated. I used the CLI method linked to above to see if that would work. It seems to have put the router in bridge mode as I now don't have any ability to alter the IP address of the router or change DHCP settings so I assume it's now bridged. That's one o...
by AidanAus
Tue Jun 18, 2019 9:57 am
Forum: Beginner Basics
Topic: HOME Wifi configuration
Replies: 1
Views: 267

Re: HOME Wifi configuration

Please look at the following link and go to the part in the table where the left hand side is mode https://wiki.mikrotik.com/wiki/Manual:Interface/Wireless#General_interface_properties Station means that the Mikrotik would be looking for an AP to connect to so it is not broadcasting an SSID but look...
by AidanAus
Tue Jun 18, 2019 9:30 am
Forum: Beginner Basics
Topic: Captive portal for Wi-Fi users (no authentication, no internet)
Replies: 8
Views: 740

Re: Captive portal for Wi-Fi users (no authentication, no internet)

IT might be a good idea to close off this thread or Offline custom landing page (Captive portal) for Wi-Fi users since you have doubled up and maybe bump the threads in the future rather than making new ones each day?
by AidanAus
Tue Jun 18, 2019 9:22 am
Forum: Beginner Basics
Topic: Redirect Port to specific WAN [SOLVED]
Replies: 7
Views: 765

Re: Redirect Port to specific WAN [SOLVED]

something like this would fail over the SSH, take out the second line of the route if you dont want it to fail over /ip firewall mangle add action=mark-routing chain=prerouting new-routing-mark=SSH passthrough=no \ protocol=tcp dst-port=22 /ip route add check-gateway=ping distance=1 gateway=10.10.10...
by AidanAus
Tue Jun 18, 2019 9:15 am
Forum: Beginner Basics
Topic: l2tp/ipsec with Android smartphone
Replies: 2
Views: 594

Re: l2tp/ipsec with Android smartphone

You can set the remote IP address to anything you would like as it is a point to point address it doesnt really matter what you set it to or if it is within the same classical subnet scheme(since p2p addresses dont 'use' subnets) the main thing is that each device has its own unique remote address b...
by AidanAus
Tue Jun 18, 2019 9:09 am
Forum: Beginner Basics
Topic: dual wan with an hap ac2 ?
Replies: 5
Views: 742

Re: dual wan with an hap ac2 ?

/ip route add check-gateway=ping distance=2 gateway=8.8.4.4 target-scope=30 add check-gateway=ping distance=3 gateway=208.67.220.220 target-scope=30 add distance=10 gateway=ispgateway(secondary) target-scope=30 add distance=2 dst-address=8.8.4.4/32 gateway=ispgateway(primary) add distance=3 dst-add...
by AidanAus
Tue Jun 18, 2019 9:01 am
Forum: Beginner Basics
Topic: Offline custom landing page (Captive portal) for Wi-Fi users
Replies: 1
Views: 284

Re: Offline custom landing page (Captive portal) for Wi-Fi users

I created a landing page basic html webpage hosted locally on my PC with Wamp server. PC connected to mikrotik (ether2). The mikrotik (hEX S) doesn't have built-in Wi-Fi so I have an Outdoor AP connected to it via ether3. All ports are bridged so the AP would work. The Network setup is OFFLINE/NO I...
by AidanAus
Tue Jun 18, 2019 8:51 am
Forum: Beginner Basics
Topic: Which CAT4/CAT6 LTE modem has compatibility & reliability?
Replies: 4
Views: 878

Re: Which CAT4/CAT6 LTE modem has compatibility & reliability?

Any luck? Im in the same boat, ive been running a wAP LTE but its not ideal(wont connect to 4g) Have you checked what services are on your local cell tower and how far away it is? the international version of the r11e-lte supports the following bands: LTE FDD bands 1 (2100MHz) / 2 (1900MHz) / 3 (18...
by AidanAus
Tue Jun 18, 2019 8:35 am
Forum: Beginner Basics
Topic: Need help 2x SXTsq PTP bridge
Replies: 6
Views: 592

Re: Need help 2x SXTsq PTP bridge

Use NV2 because 802.11 don't work well in mikrotik AC NV2 works well now as they have fixed the bug, would recommend using 6.44.3 if you want to use it, the bug was also only present on ARM biased devices like the sxt sq ac and the disc ac not to sure if stuff like the 4011 and the hap ac 2 have th...
by AidanAus
Fri Jun 14, 2019 10:23 am
Forum: Beginner Basics
Topic: Wlan - CAPsMAN Speed limit ?
Replies: 1
Views: 267

Re: Wlan - CAPsMAN Speed limit ?

I think the easiest way to set this up is with simple queues, I guess you could either use a simple queue to target the IP/subnet of the guest, main network and specific user or you could possibly have an interface queue for the 2 different wlan interfaces and then have a simple queue for the specif...
by AidanAus
Fri Jun 14, 2019 10:17 am
Forum: Beginner Basics
Topic: Config VPN and DDNS + smartphone
Replies: 5
Views: 586

Re: Config VPN and DDNS + smartphone

Is this router the one with the public IP address on it? if its not you will need to set /ip cloud advanced use-local-address=yes ALSO if you are using a GRE biased tunnel its your in for a bad time if the router is behind a nat like that. Are you able to send through a export of your config using e...
by AidanAus
Fri Jun 14, 2019 10:10 am
Forum: Beginner Basics
Topic: Mikrotik VPN Connection
Replies: 6
Views: 742

Re: Mikrotik VPN Connection

You can find the basic config for a l2tp server, mikrotik client and widows client below, you can put the IP address of the local and remote side in either the profile the secret is using or in the secret. A good idea would be to have a profile with one local address put in it then in the remote add...
by AidanAus
Fri Jun 14, 2019 10:04 am
Forum: Beginner Basics
Topic: HAP AC2 - Ethernet drops out every 10 minutes
Replies: 1
Views: 261

Re: HAP AC2 - Ethernet drops out every 10 minutes

What does your logs say? I would be first seeing if it is a layer 1 issue and seeing if the logs report ether1 going up and down, if this is happening I would recommend swapping the cables, if it continues with new cables I would suggest swapping the WAN port and configuring a known working port as ...
by AidanAus
Fri Jun 14, 2019 9:55 am
Forum: Beginner Basics
Topic: Need help 2x SXTsq PTP bridge
Replies: 6
Views: 592

Re: Need help 2x SXTsq PTP bridge

So technically you don't need an IP address on the SXT but It would be good to have one for management, I think the main thing here is to go to the bridge settings from the main menu of winbox/webfig and click the blue plus button while you are in the bridge tab and create a bridge, after that you w...
by AidanAus
Fri Jun 14, 2019 9:42 am
Forum: Beginner Basics
Topic: My first Mikrotik Router - Firewall Help
Replies: 16
Views: 1181

Re: My first Mikrotik Router - Firewall Help

Yes you resolved your problem but have make you router vulnerable because somebody can send you connections to UDP port 53 and saturate you processor usage! As ongdaka said you ave made your system vulnerable at the moment, I would recommend adding the following rules to your list if you do not hav...
by AidanAus
Thu May 09, 2019 10:56 am
Forum: General
Topic: Resetting admin access
Replies: 6
Views: 502

Re: Resetting admin access

If ur device is under router os 6.4x you should be able to run the winbix exploit on it and get the admin password. Google winbix poc and it should be the first link. Eithet use the unix sub system or miniconda to run it as u need python 3. This is only to be used on ur own hardware that you own and...
by AidanAus
Wed May 08, 2019 11:24 am
Forum: Beginner Basics
Topic: Remote access from the Internet (WAN side)
Replies: 33
Views: 204145

Re: Remote access from the Internet (WAN side)

I would assume you have a dynamic wan ip so i would enable ddns under ip cloud then if the router is not the one with the public address run ip cloud advanced use-local-address that will make ur routers ip be linked to the dns name that is publicly routable. From there set up a sstp or l2tp-ipsec se...
by AidanAus
Wed May 08, 2019 10:52 am
Forum: Beginner Basics
Topic: RB 133C3 reset
Replies: 2
Views: 336

Re: RB 133C3 reset

You might be using a version of winbox that is to new for the device, if you cant reset it through the pins try connecting to it via the serial cable and either configure it through that to get a internet connectivity and upgrade the device or set it to system>routerboard try ethernet once then nand...
by AidanAus
Wed May 08, 2019 9:42 am
Forum: Beginner Basics
Topic: New Office LAN design - which router? Advice please
Replies: 3
Views: 447

Re: New Office LAN design - which router? Advice please

I would suggest look in at the 3011 as that would be able to to most of ur needs or if you feel more comfortable with something with a bit more grunt that will be in a place with good ventilation I would suggest looking at the 4011 as they are pretty much a cheaper and smaller rb1100
by AidanAus
Wed May 08, 2019 9:13 am
Forum: Beginner Basics
Topic: VPN client access with public IP
Replies: 2
Views: 360

Re: VPN client access with public IP

When you try and ping the tunnels address from outside the network are you doing it from the server? Only the Mikrotik and the VPN server should be able to ping each other on the VPN addresses unless you have set up proxy-arp/routing ect then your internal networks connected to the VPN server or cli...
by AidanAus
Wed May 08, 2019 8:28 am
Forum: Beginner Basics
Topic: IPSec SITE to SITE VPN ping problem?
Replies: 1
Views: 202

Re: IPSec SITE to SITE VPN ping problem?

Are you able to give us a bit more information about this please? A supout would be great as well :) please remember that all tunnel links etc credentials would be viable as well as public IP addresses ETC. To clarify the issue, the Mikrotik can ping the PC through the tunnel but the PC is unable to...
by AidanAus
Wed May 08, 2019 8:18 am
Forum: Beginner Basics
Topic: /flash Files deleted after reboot in CRS326
Replies: 1
Views: 171

Re: /flash Files deleted after reboot in CRS326

Are you 100% sure that the file was inside the /flash folder? If the file was it should have a directory of flash/hotspot... if this was the case can you please try upgrading your router OS then going to system router board upgrade to upgrade the firmware? If you have time I would suggest net-instal...