MikroTik

pekr

"Simply disabling Winbox mitigates all of these attacks." - i couldn't agree more with this approach. i understand that winbox was a key for many happy current RouterOS users to get acquainted with networking, as for many the CLI still kind of scary, and it is still doing it. on the other hand, it ...

pekr

maybe a separate soho.npk that includes the torrent client, kid-control and SMB server..
... and Quick Set

Quickset should stay imo. Just don't touch it, if you don't need it. It does not posses any security risk, it is a configurator helper, so why to remove it?

pekr

Just bricked one of our CRS switches, connected via SFP to CCR. It was a testing one, but we still need to visit the site. How could SFP support get broken, if there are no SFP related changes? I expect fix to be released asap, not just in a mysterious stable release sometimes in the future?

pekr

We use Veeam backup solution at work and today's newsletter was pointing to the following blog article. You will learn, why Veeam has switched to WireGuard. Seems like days of OpenVPN are over in maybe not so distant future ....

https://www.veeam.com/blog/veeam-pn-v2-wireguard.html

pekr

OK, understandable. It is just that if I do DST-NAT on hAP ac^2 even for the routed address, it does seem to work - packets are counted and if I change the destination port, it influences that. But agreed - this is not probably a correct way to do things.

pekr

Hi, I am not sure if I found a bug in MT, or most probably am not correctly using a DST NAT, but here is my scenario: Internet --> (Central CCR FW, public ip, DST NAT of services to Server IP) ---> MT hAP ac^2 (DST NAT to services) --> Synology NAS small server The thing is, that on a central CCR FW...

pekr

But - the AP to connect to is on the roof above my flat, no cable here. If I understand you correctly, you need a CPE (wireless client) to connect to that AP on the roof. I need both - a CPE to connect to the AP placed one floor above my flat, as well as to provide local AP to other devices - ntb, ...

pekr

Hi, is there any small, home level RB, which supports attachment of the stronger antenna? I have a TP-Link here, which died, and would like to replace it with MT RB. But - the AP to connect to is on the roof above my flat, no cable here. TP-Link has 8dB antenna here. I can see RBs with only internal...

pekr

Thanks for the reply, guys, will try from notebook to notebook, using either btest for PC or suggested iperf ...

pekr

Hello, first - I was not here for a long time, and second - I tried to read many possible related discussions, but not sure I have a clear answer to the problem we are facing - kind of slow TCP throughput. Some time ago we bought two CCR-1036-12G-4S routers , assigning them two roles - MT1 (NAT, fir...

pekr

We have tried independent Ethernet, ethernet being put into switch, bridge. As far as AppleTV is connected to the ethernet port, it does not work, well, maybe it works, but at mediocre speeds. Our RB is RB951G-2HnD, latest 6.18 firmware ...

pekr

Right now at our client home, I can confirm identical syndrome - no matter how we try, AppleTV box does not work over ethernet, but does just fine via wi-fi.

Had anyone find out, what could be the cause? TV works, PC works, but AppleTV does not work. Etherned port are put into switch mode ...

pekr

It was quite long time since I last posted. I wanted to look into virtualization, because I want to move my ClearOS Linux box on main site. And so I thought, that I might set-it-up in virtualised environment on a new machine, adding a back-up ROS, using VRRP. So my set-up would be: 1. box - HW based...

pekr

Hi, just struggling with the same problem. We have own smtp server (ClearOs Linux), but it is not reliable (if it would broke, my brother would not be able to repair it himself, and I am not always available at hand), so that server is not a problem. But then we have users, who request that e.g. gma...

pekr

OK, I can send suppout file, but I think that they know what the bug is about. Taken from 3.25 changelog: *) api - closed sessions were not removed from the '/user active' list; From the thread you suggested, it is not clear what version was the user using .... EDIT: btw - this happens from python A...

pekr

Hi, just doing some experiments with API using REBOL language, and found out that each time I log, no matter how do I terminate the session ("/quit" or just closing the TCP port), I can see the list of API (demo) users is growing. I noticed that this bug was fixed in 3.25. But I am doing my tests on...

pekr

hmm, my positive reaction was preliminary. ESXi v4 is 64 bit only

pekr

Hi, while I tried to search the discussions, I am not sure my friend's set-up is typical ppoe scenario, so forgive me the new thread :-) I have one friend, who lives in Italy, and his ISP installed MT box for him. They don't provide him with even read-only access to MT box, so his set-up is as follo...

pekr

Hi, I read VM wiki docs, but I still might need some help with my decision. Looked at most of VM related topics I found, I have not found any to post to, so set-up a new topic. My scenario/wish is following - we have 50mbit line, one main router (SuperMicro HW), and I would like to set-up backup rou...

pekr

Sorry to bump-up the topic, but maybe better than establishing new one :-) We were recently contacted by one criminal investigation agency, and they want us to cooperate upon catching some criminal activity from our network. Surely we want to cooperate :-) I tried many things, but I am not sure I am...

pekr

RouterOS works fine on VMserver, won't work with ESX thou due the support required for SCSI disks as far as I've seen. If it can't run under ESXi, then it sucks pretty much badly. I wonder what sense does it make to install Linux or Windows, and then VMWare Server upon it? That is the old-school an...

pekr

Webserver on internal network problem can be adressed in several ways: - add static DNS entry for it. But beware, I still claim, that MT DNS is unreliable for that, and hence ... - you have to source-nat packets which go to your webserver (chain=srcnat dst-address=webserver-ip action=masquarade out-...

pekr

Hi, last two months or so we started to see strange problem on our network. Some sites as youtube were sporadically not fully loaded, especially in the case where the site used off-site .CSS file storage. We ended up with content loaded, but without CSS it was not fully functional. Apart from MT unr...

pekr

Hello Rozis, I can confirm problem number 2, apart from some other MT DNS problem discussed in another thread. We have mostly routed network, and all our nodes has only one DNS set - that of the main router, which has our provider's DNS server set. No matter what, once in a time, some of our nodes c...

pekr

Should be rather easy - double click the link. You will see rather simple dialog box. Choose appropriate "device". Then select "mastering type" as "routerOS". Then you will be albe to select "interface".

-pekr-

pekr

OK, so if we want to compare for Nstreme Dual purposes, which will form > 1000 bytes packets, the tests are not much usefull. RB433AH seems to have 100mbit Ethernet ports, which went to its limit during tests, so the only comparison which applies is for 64bytes packets? According to that test, RB433...

pekr

I downloaded winbox loader from 3.7 router directly and it is the same as at your mt.com download section. Then I located Mikrotik directory in my user profile, deleted 3.7 dir and even winbox.cfg and let it redownload stuff once again. Still no change. However, when I visually inspect config file (...

pekr

Hi, while this thread is rather old, I have to report that the issue was not resolved and is pretty much denerving. I wonder if anyone else is not able to observe this behavior? I use loader 2.2.13 and I connect to our main router OS version 3.7. When I open queues, it opens window with following co...

pekr

Hi, we have our webserver on local address 10.10.10.10. We have fully routed network, no NAT except main router masquarade. I wanted our customers to have access to our webserver, as there is web presentation of our town touristic portal. In the past I solved it with some DST NAT tricks, because we ...

pekr

Hi, tried to follow API docs myself, but even if scripting from time to time, docs are not imo explanatory enough, at least to me. I would like to use my fave REBOL language. When I try your string: >> to-string #{4d696b726f74696b} == "Mikrotik" I can see I can get some output, which makes sense. Ho...

pekr

Hi, we run network with 400+ users, some 20 nodes or so. We got new nice connection two weeks ago, bought piece of land for it, built new tower, and now we skipped chain of 2 ISPs at least, and buy from premier one, using Ceragon technology. Although the connection is more expensive for us, we were ...

pekr

Yes, one reboot happened even after upgrade to 3.0. There were two suppout.rifs from rc14, I deleted them :-(. I will try to play with the router and see, if that file is generated once again. I checked after the reboot and there was no file ... btw - why RB to RB test is faster than PC to PC test? ...

pekr

RB600 #1: [admin@MikroTik] /interface wireless> print Flags: X - disabled, R - running 0 name="wlan1" mtu=1500 mac-address=00:C0:CA:1A:48:3E arp=enabled interface-type=Atheros AR5213 mode=nstreme-dual-slave ssid="MikroTik" frequency=5180 band=5ghz scan-list=default antenna-mode=ant-a wds-mode=disabl...

pekr

OK, to not spam further - today will do: - upgrade to latest version (btw: congrats to 3.0 official release :-) - change radios and will watch, if one RB600 still randomly reboots - conn-tracking was already disabled - will do some tests and post configs and results ... - any suggestion towards the ...

pekr

As I said - I had one 400mw Alpha radio, dunno the brand or where my brother took it from, and I think that RB600 rebooted just because of that. I will try to change two radios, to have 4xCM9. As for settings, I use very simplistic setting, found on MT wiki - http://wiki.mikrotik.com/wiki/Nstreme_du...

pekr

Hi, I have 2xRB600 in dual-nstreme mode, signal -53, -56, conn-tracking off, bridged with eth1, and I am able to get only 18mbit full duplex, trying PC to PC in tcp mode. Is that ok or should I get higher throughput rates? One RB600 is rebooting, when trying to change some radio settings, also bandw...

pekr

Hi guys, we are "upgrading" our line next month, switching providers, and so going for Ceragon based connection to ISP. Can't wait for it, instead of going thru other smaller providers :-) Well, as we might as well resale connectivity in our area, and everything is now gonna be distributed from that...

pekr

RB411? What is that?

I thought we will see RB600 announcement .....

pekr

So, guys, any news about RB 600?

thanks,
Petr

pekr

There is several solutions to it imo. And imo it is in no way bug in Mikrotik OS. Actually I think that cheapo gear provides you with some helpers. There is several solutions based upon scenario. 1) Add DNS static entries for your public address and domain - why don't you consider it being a solutio...

pekr

Hello, you know the situation. You start something, then your network scales, it mostly works, so you have no need to improve the situation. However, we want to change few things, so I have following questions: - currently we use simply queues only for our clients. One consultant told us, that SQ do...

pekr

Hello, we are currently reaching nearly 400 users and I think we need to redo our strategy from scratch. Some guys are suggesting, that when we will install new router, we should go directly for two new routers - one wich will do queueing/shaping, and the other which will be for NAT purposes only. H...

pekr

Sorry guys, that I am posting non OS 3.0 report, but maybe the internal code is similar. I will shortly describe my troubles: - some random unavailable domains - Windows Vista, XP Professional, connected to RB133, version 2.9.38 - all our inner nodes are chained to the main router x86PC, latest 2.9....

pekr

OK, I think I can understand that, thanks for your reply. But - is there solution like "mesh networking" (if that is correct term) with MT? Simply imagine the case, if I would have wi-fi enabled cell phone, and would like kind of roaming. I cannot wait for the phone to reassociate to another AP, rig...

pekr

Yes, there will be wired etherned. It should be one flat network. RBs will be connected to switch and powered from that switch via PoE. So no need to WDS? Just a bridge? I need barcode readers to not lose the connection, when ppl will move around the warehouse.

-pekr-

pekr

Hello guys, I just read many suggestions on WDS front, but I am not either understanding what WDS is good for, or I am misconfiguring my routers. Our company is about to implement warehouse management system, using barcode readers. We have one former warehouse implemented using Cisco Aironets, but a...

pekr

Hi Tom, thank you very much for your suggestion. We tried it before I posted my request, unfortunatelly we later found out, that our RADIUS is not properly configurated for such option. Now everything works OK. So, my post is just informative for those who will search this conference in the future -...

pekr

Hello, I wanted to introduce MT platform to the new company I work for, but what I really need is seamless authentication in MS environment for our wifi notebook users. By seamless I mean I am not willing to set-up user manager and manually enter users, nor am I willing to set-up CA here and to manu...

pekr

Hello, do you think that MT would work on new WRAP boards? It is not mentioned in their docs, but seems to be general PC hw anyway. New boards are called Alix: http://www.pcengines.ch/alix.htm Sorry if such message could be considered being improper here, as those might be considere competition to M...

pekr

What's to wonder here, Sergejs? It does not work from beta5 already, no? ;-) It uses "strange" format of 10.10.10.10-255.255.255.255 format (after upgrade) - is that the default format? And once you go into console, it shows nonsense like 10.10.10.10/31 :-) I will try to upgrade to beta6 to see what...

pekr

Yes, that was really a BAD decision to not go there. I am from CZ, but Krakow is something like 100km? from here, whereas last year we travelled to Prague, some 450km, so actually this year, although in Poland, it was closer for us :-) My brother did not want to go - way too much work. Then at the d...

pekr

ok, nice

But what was said about new, upcoming routerboards?

thanks,
Petr

pekr

Any news from conference regarding development of new, more powerfull routerboards?

-pekr-

pekr

But according to docs not surely how Savage describes it? Or am I missing something? According the docs the burst time is NOT guaranteed all the times. At least doc in following section shows, that once average speed is above treshold, the burst is interrupted (as there is no need for it anymore). S...

pekr

mneumark, burst of course is something different than op asks for, no? :-) Your burst treshold simply defines, that once speed decreases under the treshold value, queue is allowed for burst speed download/upload, for a given period of time. But - op (original poster) wanted to let user to download a...

pekr

Hello, sorry to post once again about Nstreme dual. I searched forums, found some answers, so I was able to "get it running", but the trouble is, it does not run optimal. Well, guys, bear with me - I never wanted to touch routing/networking in IT sector, but I did. Thanks to MT even I am able to bui...

pekr

Hi, our public IP was listed on CBL. I got it from my Linux home webserver mail message: " ----- The following addresses had permanent fatal errors ----- <petr.krenzelok @ mydomain.com> (reason: 554 Service unavailable; Client host [our-public-ip-here] blocked using sbl-xbl.spamhaus.org;" Of course ...

pekr

Hi, we have some occassional problems too. As for me, I don't believe in AMD myth. We changed completly two PCs, various parts, and sometimes system locked on us - still the same scenario - refusing Winbox, refusing SSH, Internet connection still running for some time. As for me, I would not run ANY...

pekr

Hi eclipse, two years ago we did project where we used mini-itx for kiosk systems. We did not mind below zero temperatures, the board can heat its box, if isolated. I have never tried nano-itx though, but as for mini-itx, it was VERY sensitive to memory used, otherwise pretty unstable. However - whi...

pekr

Hi SmartBoy, your repeated ask for help is not smart, you know? :-) - you seem to be desperate, right? ;-) Well, I am not the one skilled here on the forum, but, as another poster suggested: 1) Try to mark in prerouting instead of forward 2) I can see you mark packet twice, why? Why do you mark twic...

pekr

Thank you very much, now that's a nice reply, and it is clear to me ...

Petr

pekr

Thanks for the tip, Eugene. But in my post I already stated that I "know" about this manual page, looked into it several times, but maybe it is just behind of level of my ability to understand things. I mean - I understand it, as I read it, but I am not able to answer myself questions as e.g. - why,...

pekr

Hi, sorry if I will ask what is obvious to most of you, but I read thru tonnes of mangle/p2p related topics, but I did not find satisfactory enough answer to following: - what chain should I use for mangle - prerouting or forward, and what are consequences in the case of using NAT (masquarading netw...

pekr

Well, that was the kind of question, which bothered me too. Not sure if related to NAT (masquarading), but generally I think that you mark your connection just because of it. Then MT tracks the connection for you (correct me, if I am wrong, please :-) If you can see, your marked packets are just equ...

pekr

Hi, I just would like to ask following. We have two ISPs (as we are in the mountains area and there are outages from time to time. We decided to switch to ISP2 as a default, and ISP1 letting as a backup. Here's how we are connected: ISP1 via Ethernet to Motorola Cannopy. Some 4 - 6 km to their gw. P...

pekr

Better wait for some guru to confirm, but IIRC we just burned image to CD, and installed once again. All settings and license were ok ...

good luck,
Petr

pekr

Gerard, so what is the state with with policy routing? I can see it with various examples, where ppl claim, that without telling RouterOS to look-up correct routing table, it does not work properly. But from other examples, e.g. Eugene's one, there seem to be no need for such explicit setting? Thank...

pekr

Not sure it is the same problem. Three times already our router was in the state, that it was working, web was accessible, we could ping to it, but it refused whatever connection. "Starting Winbox" was last message, then it said something like "connection refused", don't remember correctly. As for s...

pekr

Hey guys, thanks a lot, appreciated! Now let's talk the solution a bit. Never saw anything like that - even, odd packets, nice. So if I understand it correctly, the solution tries to equally divide traffic between two gateways, right? You use one local interface. Is it possible to use single mangle ...

pekr

Normis, I am on some 8 or so MLs/forums for various kind of products, I do know many computing communities. MT's one, is the better one, friendly. And I also note the fact, that users get help mostly from other users. But, I am known as a person not fearing voice my own opinion :-) So, I have to obj...

pekr

Hi, we have some repeating behavior here. Well, we used to have some hw problems in the past, but other than that, our main router works correctly for last two months. We have 2.9.22 version running there, and once in two/three weeks, we are not able to login to router. It just starts to login via w...

pekr

Hi, I would expect load balancing using "simple" technique as one packet goes this way, other one that way, as simply being a stopper for services like ICQ etc., where some connection persistency is required. However, I was surprised, that MT docs state, that ECMP creates pairs of source/destination...

pekr

Couldn't, theoretically, be the problem related to your ISP DNS server? IIRC we once had such problem, so we flushed caches, and as we have two ISPs, we switched to other DNS servers from the second ISP. Maybe some cache problem, dunno ...

-pekr-

pekr

What about ECMP? According to docs, routerOS creates pairs of source-destingation adresses (not sure if ports included) and sends it thru particular gw. Not sure it is so with CISCO, but MT does it, so it could be sufficient, so no ICQ, FTP problems - IP pairs should be suitable for that (if differe...

pekr

I would give users a choice - either they turn encryption off, or I forbid them bit-torrent. I don't want to abandon it, just have it under control. If user breaks my trust, then I will find other ways, of how to legitimately limit him ...

-pekr-

pekr

Thanks Mezlo,

it does seem to work

The trick is not let local network request to go to public interface, but catch it incoming to main router, and dst-nat it to the server directly.

-pekr-

pekr

Hi, this thread is not about how to get local webserver running. I have it running. Well, I needed to do it quickly, so I hacked double dst-nat thru two of our nodes, but it works, except the fact, that I can't access web server from local nework. Now from MUM docs, I can see we had is as an "Advanc...

pekr

butche, could you please also explain to me, what are look-up tables good for and when are they created? Am I correct thinking, that they are created during the mangle phase? And why you used them? What is the reasong to "lookup" the "table", if router can do decision according to routing-mark itsel...

pekr

Hello, yesterday I took some training at MT RouterOS topics. Part of the training was queuing. Currently we use Simple queues, on per user base. It was initial quick hack on our part, to get it running "some way". But lector suggested to swithc to queue trees, stating some things, I am not all that ...

pekr

We had some problems too, sent out supout.rif and received reply to wait for 2.9.21 ... which is out now, so I wonder, if it contains those kernel fixes ...

-pekr-

pekr

What's new in 2.9.21: *) added "/system show-license" command; *) fixed hotspot to work on RB112; *) fixed memory leak in IPSec ISAKMP; *) fixed WinBox "Set BGP Prepend" option in routing-test; *) updated Intel E1000 driver and added support for latest Intel Gigabit ehternet cards; *) fixed bug - rb...

pekr

I think that there also can be the oter way around. It is your network, isn't it? And you decide the rules, upon which you let users being connected. So - as for us, we do allow p2p, but we want to have it under control. I want to have such traffic mangled. If I will see (manually chekcing IP firewa...

pekr

public1 IP:10.10.10.1/30 public1 gateway:10.10.10.2 ether1 public2 IP:10.10.11.1/30 public2 gateway:10.10.11.2 ether2 clients: 192.168.1.0/24 on ether3 use public1 192.168.2.0/24 on ether4 use public2 The config: /ip firewall nat add chain=src-nat out-interface=public1 action=masquerade add chain=s...

pekr

Hi, I have similar problems, we have public1 and public2 interfaces: 1) I mark routing, according to source networks: 0 chain=prerouting src-address=10.0.0.0/24 action=mark-routing new-routing-mark=public1 passthrough=yes 1 chain=prerouting src-address=10.0.5.0/24 action=mark-routing new-routing-mar...

pekr

Hi, I have one specific question - we have one customer, who asked us to replace his client station. He runs small company, three PCs, so we decided to sell him RB112. The trouble is, that his ISP has his client station mac address registered, and we need to do change today, but they will be availab...

pekr

What's new in 2.9.20: *) fixed write-sect-total for RB500; *) added limit of simultaneous hotspot mac logins to 1 for each MAC address; *) made LCD displaying more stable; *) added WinBox support for routing-test package; *) fixed PPTP client to not disconnect every 30s on some occasions; *) fixed b...

pekr

Hi, although I read several threads plus docs, I would like to have situation for us clearer, by finding out, which way should we go ... We currently have 2x 3/1 mbit line from two ISPs. In the future, we want to buy from one one ISP further, and the second one let as a backup. My questions are: 1) ...

pekr

Hi,

not sure if routerOS does, or does not support nforce4 onboard NIC?

Thanks,
Petr

pekr

Hi, I would like to ask - in MT documentation (http://www.mikrotik.com/docs/ros/2.9/ip/address - in ARP section), there is an example, where two opposite interfaces on "one" network, are having different network mask, e.g. 192.168.0.20/24 ------ 192.168.0.1/25 I can understand the example given, fro...

pekr

normis, please, just don't try to teach me the os design :-) I know your motives and you are free to disagree. But it is like saying that linux based router is not router, because it allows you to use additional packages. It is all about some clever api providing some hooks to system, so your router...

pekr

What a nightmare. Why necessarily a nightmare? E.g. I would like to use the scripting language I know the best - REBOL ... it is much better than anything else I know, and it is also very small. If proper hooks would exist in routerOS, that would be possible. I can imagine problems could exist, but ...

pekr

dunno - but what about some firewall rule on outgoing interface? The thing is however, that NAT is being applied after the routing, so not sure what chain you would have to check, as it will be "forward". Or what about logging wan interface traffic? Looking for particular source address packets .......

pekr

What's new in 2.9.18: *) fixed bug - dhcp server, dhcp client and hotspot could show up as invalid in case of many (> 10) vlan interfaces; *) added back ospf logs, they were removed since 2.9.13; *) fixed vrrp mac address restoring after reboot; *) upgraded SysKonnect SK-98xx/SK-95xx Gigabit Etherne...

pekr

How should this work? Hm, i thought this should match the masqerading rule? Like for any other Client on the internal side of NAT. I thought that too ... maybe normally, if you would use ping without the source address parameter, it would be masqeraded, maybe that parameter is overriding it? -pekr-

pekr

Hi, today I tried following - to use our both ISPs, as we finally are connected to both of them: http://www.xidys.com/xidysnet-en.jpg My task is - I want J town local 10.0.0.x traffic, to go via ISP1, and all nodes 10.0.5.x, to go via ISP2. I did following: Mangle: --------- 2 chain=prerouting src-a...

pekr

Thanks.... I think I will go routing too. So basically - do you use NAT at the end-point nodes (where clients are connected), or you simply route it all (if possible, I don't understand routing properly yet

, so that all your clients are distinguishable on the main router?

thanks,
Petr

pekr

Well, our design looks overcomplicated, but we are here in mountain areas, so we need to do e.g. 2 - 3 hops, to get those areas connected. One day, we would like to do PPPoE/Hotspot, but I currently don't know, how to overcome nat or routing. In the case of one hop (K, N networks), I could theoretic...

pekr

Hi, so here I am with my own findings. Maybe some novices, as we, would find following interesting. If you look into picture (link in previous post), I had following problem - from PC2 or PC3 I could NOT ping to PC1. As one folk pointed to me on czech forum, the cause was, that on PC1, I had gateway...

pekr

Hi, as we are proceeding building our network, some questions are arising, which I don't know simple answer to. I prepared some visual slide for you to help you orientiate in our current situation .... When we started with internet providing, we started reselling some ADSL connectivity in smaller re...

pekr

Hi, yesterday I installed following test configs, as I am struggling with establishing static routes, but that will come probably with another post :-) So here we go: http://www.xidys.com/test-config.jpg The trouble is, PC2 and PC3 can ping out of the box! But PC1 is NOT reachable. I do not know why...

pekr

guys, isn't it better to simply release 2.9.17?! Remember - not all ppl do visit this forum ....

-pekr-

pekr

Guys, if you want cross platform, small and flexible environment for your Winbox, I am all for REBOL. That is the language created by the person I do regard being kind of genius - Carl Sassenrath - AmigaOS author. Just expose Winbox protocol API - then you have small GUI or even smaller non-gui vers...

pekr

Petr, even to be able to ping from 10.0.0.0/24 clients to 10.0.5.2 you also need a route on 10.0.5.2 to route back to the 10.0.0.0/24 network - the reply packets have to know how to get back to you pinging machine! But you're really close now ;-) Best regards, Christian Meis ;-) ah, well. It is jus...

pekr

Every device/ip address not in your own subnet cannot reach you directly, but has to get there by routing. As long as you do not configure a route telling the 10.0.5.2 machine the it can reach your network 10.0.0.0/24 by going over your AP (i.e. by using the gateway with ip address 10.0.5.1 as next...

pekr

Remote router don't know where your PC are - i think if you will try to ping your PC from thar remote router you eill get "no route to host" Place a correct route to the remote router! Ah, so finally we are very near. I know I have to place correct route, I just don't know why! That was the point o...

pekr

I just tried this morning to play with routes, and I really must be dumb or what, but I can't easily ping from one network to the other: Let's assume: PC: 10.0.0.88, connected to switch, whole network via Ovislink 2.4 connected MT router (10.0.0.254 set as a gw on pc): MT router: wlan1, wlan2 - brid...

pekr

lets take a look at: http://www.mikrotik.com/docs/ros/2.9/graphics:packet_flow31.jpg As you can see src-nat is after any of "routing-decision" action, so I assume, when you are using your src-nat, it is already determined through what port it would go out. Try to use mark-routing action in the mang...

pekr

It will not work! Why not? :-) What are the fields of source adress, dst address there for then? OK, maybe I start to understand a bit after all. The thing is, I can't somehow "imagine", what NAT does with the packet under the hood. Does it just change src/dst address accordingly? Well, so NAT has ...

pekr

Uh, NAT is done after routing decision? that is strange no? You have packet arriving to your local interface. Now it looks into routing table what to do and if there would be no masquarading involved first imo, packet would not get thru .... because imo only after masquarading to output interface n...

pekr

OK - red route rule - clear to me now .... I will try with using gateways then:-) I just thought that some kind of defining destination and preferred source will be involved to have local1 and local2 accessible to each other. I will try some experiments with routing and NATting once I get next RB, a...

pekr

Uh, NAT is done after routing decision? that is strange no? You have packet arriving to your local interface. Now it looks into routing table what to do and if there would be no masquarading involved first imo, packet would not get thru .... because imo only after masquarading to output interface ne...

pekr

Hmm, let's just not compliate set-up with more routers this time :-) I have one router, with eth1 - local1 - 10.0.0.1 eth2 - local2 - 10.0.1.1 eth3 - public - 10.5.1.1 now the simples thing of how to ping from local1 to local2 is to use masquarading on outgoing interface = eth3 = public. It simply p...

pekr

Hi Valens,

thanks for your reply. Are you the one who gave his presentation during the MUM conference?

I was sitting in the first line

-pekr-

pekr

So, the last one for today ... We don't define routes except for gateway. Then we use masquarading on outgoing interface and voila, we are done. So we can ping from one network, to another one, in terms of masquaraded interfaces in one machine. But - what if I don't want to use masquarading? Let's s...

pekr

So, the next question, regarding NAT: We use simple scenario - we simply use chain=srcnat, outgoing-interface=public and finally action=masquarade. Works like a charm. But now we would like to have two gates, as we've got two ISP lines. So far, let's forget bonding and failover. Let's say we want to...

pekr

Hi, I decided to start few threads with smaller amount of question, for you to easily answer, instead of long list of question. The thing is, that I read docs, but sometimes I miss simple details, which can take me further in MT OS understanding :-) So here we go: we have two radios in one router PC...

pekr

Hi guys, when looking at whatever interface or even queue, I can see actual tx/rx rate, but not so with wireless clients in Registration list. I mean - tx/rx rate column is there, but I find it pretty useless, as it just shows basic rates, not actual rates. If you double-click particular entry, go t...

pekr

Djape, thanks for so long reply, really appreciated here! :-) The trouble is, that I read the manual, several times :-) It is like when you read book about programming, you "understand" even higher concepts, but then you sit in front of empty source code editor, and you are kind of struggling writin...

pekr

yes, it was just quick hack on my side, that I did limitation for whole subnet :-) I don't understand your wireless-default remark and pfifo, as wireless-default uses sfq, not pfifo? As for your tip for limiting customers in your mentioned way, I have following questions: 1) 256/256 - does it mean 2...

pekr

Hi, we have one RB532 behind ADSL line, catching clients on wireless. I set up simple queue, as follows: 0 name="256kbit" target-addresses=10.0.0.0/24 dst-address=0.0.0.0/0 interface=wlan1 parent=none direction=both priority=8 queue=wireless-default/wireless-default limit-at=64000/128000 max-limit=1...

pekr

Look, I can use the console, and I am using it from time to time, as I work with Linux on occassion at home, but I have another ppl as e.g. my brother, who are productive using WinBox. We are not talking console here, right? I don't understand why I am suggested using console, if I am just trying to...

pekr

Ah, thanks for really educating reply, that was really rational answer

While MT is not MS, Winbox usability sux. And if you need some lessons on interface usability, go and study some material on the web

-pekr-

pekr

Hi guys, just wanted to ask, if it would be possible to bit redesign/adapt winbox for better usability? 1) and probably very cosmetic - graphs are using one red, one blue, one pixel wide lines. Why not some nicer graphs? I mean - bot rx and tx to be displayed one over each other? You can mix colors,...

pekr

Just curious - when your ISP sells you you some bandwidth, and you resell it to your customers, what actually the bandwidth is? Is that on frames level? IP level? TCP level? Because - if let's say 256kbit means 256kbit on frame level, then there is much less for the TCP and upper level. If you will ...

pekr

OK, I have similar situation here: 1 ADSL line 1Mbit adsl router ---> MT-eth1-public--MT-wirelessAP--->clients Now I want to have following scenario: 1 group of users sharing 256kbit line 1 group of users sharing 512kbit line Can I do it the following way? 1) setting up 1 parent simiple queue on eth...

pekr

Hi, being back from MUM, I am now playing with the MT router in the wild, doing various tests. I think that now it is the right time to ask some questions, as I read various docs, tried some stuff myself, but would like to know how some things work ... Firewall --------- Is there any good firewall t...

pekr

At MUM, I noticed MT reps talked about 400 RB version, which should be smaller to fit in outdoor cases better and should sport Gbit ethernets. Dunno any times-frames. But - what about VIA mini-itx? We used some boards for kiosk systems, they were unstable if not supported by good RAM modules, but no...

pekr

Hi pekr, The IP scheme you have shown is correct according to the example I mentioned. In the case of your diagram you have an extra network, 10.0.1.0/24, which you would not need if the clients could act as bridges. It's not a problem, but for me it just complicates the network. I understand the l...

pekr

To route you just need to add static routes and appropriate gateways. As you can only route between different networks you will have to have a network for your customers, say 10.0.1.0/24, then a network between the CPE and the AP, say 10.0.2.0/24, then you can NAT to the public address space. I fou...

pekr

Thanks for the tip. I will probably go with EoIP, as WDS is not widely used here. We have nearly full or already full 2.4 band, not so flat area, and nobody uses it for kind of Mesh networks here. But maybe to bridge two or three radios on one RB it would do the job. As for routing, dunno how to do ...

pekr

Hi, few days ago I got home from MT training before MUM at Prague. Man, the training and the conference itself was really very good experience! Well, so now I need some at least small pointers. You know, I tried to be really concentrated during the training, both because I wanted to learn something ...

pekr

Hi, you can try some of http://www.viaembedded.com boards, mini-itx (17x17cm) or nano-itx (12x12cm), just recently released. However - we have used mini-itx M10K version, but departured with it, because of its instability some two years ago. It is VERY sensitive to the model of RAM you put into it. ...

pekr

Hi, I tried to configure MT to work with our ADSL line too. I know how frustrating the thing can be, so I try to reply with what I know, but I know little so far, so actually I will not probably help you to solve your case. The trouble I had was with static IP we got for our ADSL from our ISP. I wan...

pekr

Any free VPN clients around MT can work with? What about OpenVPN. IIRC it is not full-fledged VPN client, but I read good reviews on it. Any other suggestions?

-pekr-

pekr

Hi, just tried to tell it all in subject field :-) We are about building our network, where we use MT router. From that central point, we want to distribute to two kinds of nodes: 1) 5GHZ, locally 2.4 GHz APs 2) retranslation nodes, which will forward on 5GHZ to other nodes The question is, what IP ...

pekr

MRTG server/traffic accounting - I think that is exactly what Billingo service offered. It read out snmp protocol each 5 or so minutes and then generated it for users to visit via web interface. As for simple queues, I just have to get into it. I printed bandwidth control chapter and I don't know wh...

pekr

Hello, we are about to start our first network in two weeks, and we originally planned to use http://www.billingo.com for our customers, to let them log into their dedicated portal space and see how they do use bandwidth of the line they pay for .... But Billingo seems to be closing their service (a...

pekr

Hi, next week we are starting our first true 1mbit line. Our main router is PC 2.6 Sempron, Mikrotik level 5, version 2.8, two Atheros CM9s on 2.4, one on 5.9. What we would like to do is to get our line to other locations. We bought RouterBoard 532, which should already contain 2.9 version. My ques...

Search found 138 matches