Community discussions

MikroTik App

Search found 556 matches

  • 1
  • 2
by ConnyMercier
Tue Nov 30, 2021 11:15 pm
Forum: RouterBOARD hardware
Topic: Router antennas
Replies: 6
Views: 258

Re: Router antennas

If you don't get an answer via the Forum in the next couple of days.


Ask your distributer or Mikrotik Support directly
by ConnyMercier
Tue Nov 30, 2021 11:14 pm
Forum: RouterBOARD hardware
Topic: Router antennas
Replies: 6
Views: 258

Re: Router antennas

I don't have the Electronics knowledge to answer this question... I don't know if you need to change something before connectiong the LTE-Antenna I just know one of my German supplier wrote under the Chateau "Sie können 2 externe LTE-Antennen" translated-> You can connect 2 LTE-Antenna (ht...
by ConnyMercier
Tue Nov 30, 2021 6:13 pm
Forum: General
Topic: Using two routers
Replies: 5
Views: 208

Re: Using two routers

What do you not understand about ----> I don't know the login for either of them!!!
He added / edited his Post this after i postet =)
by ConnyMercier
Tue Nov 30, 2021 6:02 pm
Forum: Beginner Basics
Topic: Travel VPN router - Wireless both WAN and LAN
Replies: 10
Views: 372

Re: Travel VPN router - Wireless both WAN and LAN

Yes the cAPac gets very very HOT...
The enclosure is printed in PETG and it has enough holes not to melt =)

use it every day since the beginning of Corona...
No problem yet ...
by ConnyMercier
Tue Nov 30, 2021 6:00 pm
Forum: Beginner Basics
Topic: Travel VPN router - Wireless both WAN and LAN
Replies: 10
Views: 372

Re: Travel VPN router - Wireless both WAN and LAN

I used the cAPac insteed of the hAPac because of the PoE Bypass. Why? 1. It gives me the posibility to connect and power an IP-Phone or other small PoE-Device 2. Sometime i connect the Router between existing devices (like switch and existing IP-Phone) because no other Cable is free or working (like...
by ConnyMercier
Tue Nov 30, 2021 5:48 pm
Forum: Beginner Basics
Topic: Travel VPN router - Wireless both WAN and LAN
Replies: 10
Views: 372

Re: Travel VPN router - Wireless both WAN and LAN

I also make some 10.5" Rackmount enclosures for Mikrotik and other Devices. It's designed to be easy to print on a Std Sized 3D-Printer and you can even attach two together to mount in 19" Rack. I can't show actual Picture of Data-Center where i implemented them.. But I attached some Pictu...
by ConnyMercier
Tue Nov 30, 2021 5:41 pm
Forum: Beginner Basics
Topic: Travel VPN router - Wireless both WAN and LAN
Replies: 10
Views: 372

Re: Travel VPN router - Wireless both WAN and LAN

Your wish is my command :lol:

If here there is a need for this kind of "Produkt"
i'll gladly refine the Design and make it available

https://ibb.co/hXHm9X1
https://ibb.co/28yMDGn
by ConnyMercier
Tue Nov 30, 2021 2:34 pm
Forum: General
Topic: find switch port with fluke
Replies: 1
Views: 101

Re: find switch port with fluke

Do have LLDP/CDP active on your Mikrotik-Device ?
You can check under
/ip neighbor discovery-settings print 
by ConnyMercier
Tue Nov 30, 2021 6:55 am
Forum: General
Topic: Feature request for PoE outputs
Replies: 1
Views: 284

Re: Feature request for PoE outputs

I don't fully agree with your statement: "a script, but it's mess and it substantially more difficult ..." In my opinion the benefits of Scripting in this case outweigh the drawbacks. You only need a small Scheduler running every 120 Seconds after Startup to check actual Voltage and Compar...
by ConnyMercier
Tue Nov 30, 2021 6:21 am
Forum: General
Topic: Mikrotik suddenly stop working
Replies: 2
Views: 124

Re: Mikrotik suddenly stop working

I had something similar in the Past
I wasn't able to recover from it !
by ConnyMercier
Tue Nov 30, 2021 6:02 am
Forum: General
Topic: Picking preferred DNS server
Replies: 2
Views: 101

Re: Picking preferred DNS server

Good Morning, I did some quick Test and I can confirm your Problem.... I found two Solutions to your Problem... Solution 1: Netwach When Netwatch detect the Pihole-Server is back online, it will reset the Static- DNS-Server and Flush all DNS-Cache entries. The Static-Server will be #1 again!! In the...
by ConnyMercier
Tue Nov 30, 2021 4:55 am
Forum: General
Topic: Using two routers
Replies: 5
Views: 208

Re: Using two routers

Can you please post the config of the Mikrotik device
(/export hide-sensitive file=anynameyouwish)
by ConnyMercier
Tue Nov 30, 2021 2:45 am
Forum: Beginner Basics
Topic: Travel VPN router - Wireless both WAN and LAN
Replies: 10
Views: 372

Re: Travel VPN router - Wireless both WAN and LAN

mAPLite is a very good Travel-Router! I have 3 of them and one is always in my Laptop-Bag It's Compact and you can power it with your laptop or Power-Bank, everyone should have one =) I do a lot of Job-Hopping... And realised most company's have a PoE-Network So my Main Travel-Router at the moment i...
by ConnyMercier
Tue Nov 30, 2021 12:26 am
Forum: General
Topic: Execute remote script in Router OS from Windows Machine
Replies: 2
Views: 107

Re: Execute remote script in Router OS from Windows Machine

I use the Mikrotik-API + Powershell for some projekts.
It's not perfect, but i didn't have any problems yet!
by ConnyMercier
Tue Nov 30, 2021 12:22 am
Forum: RouterBOARD hardware
Topic: [Request} Restrict web admin to a VLAN in RouterOS
Replies: 3
Views: 906

Re: [Request} Restrict web admin to a VLAN in RouterOS

Glad i could help !

Good Luck and don't forget to backup before changing anything =)
by ConnyMercier
Mon Nov 29, 2021 4:34 pm
Forum: Beginner Basics
Topic: assign ip and mac for each port
Replies: 5
Views: 189

Re: assign ip and mac for each port

Solution A: DOT1X provide port-based network access control via a Radius-Server (https://help.mikrotik.com/docs/display/ROS/Dot1X) Solution B: DHCP If you don't want to border with complex Radius-Server and Co.... You could set the DHCP-Server to only give IP-Addresse to known devices (Static-Leases...
by ConnyMercier
Mon Nov 29, 2021 4:07 pm
Forum: General
Topic: RDP connencton on a specific WAN
Replies: 3
Views: 107

Re: RDP connencton on a specific WAN

Incomming RDP ?
Where Client via the Internet connects to PC's and Server's
in your Local Network

or Outgoing RDP ?
Where the PC's in your Local Network connect to
Server's in the internet
by ConnyMercier
Mon Nov 29, 2021 3:37 am
Forum: General
Topic: password suddenly stopped working
Replies: 2
Views: 241

Re: password suddenly stopped working

You did the right thing!! Try connecting directly to the Router , and see what happens... If you are where using the "Default-Config" you can try using Telnet (IP & MAC) ,Winbox (IP & MAC), SSH, WEB (HTTP) If the Router is unresponsive and we assume you didnt do anything =) There i...
by ConnyMercier
Sun Nov 28, 2021 11:13 pm
Forum: RouterBOARD hardware
Topic: Router antennas
Replies: 6
Views: 258

Re: Router antennas

Short Answer: Yes
by ConnyMercier
Sun Nov 28, 2021 5:27 pm
Forum: RouterBOARD hardware
Topic: Router antennas
Replies: 6
Views: 258

Re: Router antennas

The antenna's are used for both 5Ghz and LTE frequencies.
by ConnyMercier
Sun Nov 28, 2021 6:06 am
Forum: Beginner Basics
Topic: What does contry "etsy" mean? [SOLVED]
Replies: 5
Views: 407

Re: What does contry "etsy" mean? [SOLVED]

ETSI: European Telecommunications Standards Institute
(https://en.wikipedia.org/wiki/ETSI)


Use the Standard USA (country="united states")
by ConnyMercier
Fri Nov 26, 2021 10:19 pm
Forum: RouterBOARD hardware
Topic: Post-fire hardware recommendations
Replies: 14
Views: 861

Re: Post-fire hardware recommendations

NICE to have use of the full 300/300. FYI, I get that now in certain areas of the house. With the actual Public Stable, you won't be able to get 300/300 speeds over Wireless. A standard cAPac or wAPac will achive around 200mbits MAX Someone did some Test last week and posted the results on the Foru...
by ConnyMercier
Fri Nov 26, 2021 10:12 pm
Forum: RouterBOARD hardware
Topic: Post-fire hardware recommendations
Replies: 14
Views: 861

Re: Post-fire hardware recommendations

It wouldn't be a problem hardwiring them all, but I assumed Mesh was the way to go.
I always recommend using Wired-Connection wherever possible.
Only use Mesh or Repeater-mode if hardwiring them is impossible.
by ConnyMercier
Fri Nov 26, 2021 10:06 pm
Forum: RouterBOARD hardware
Topic: Post-fire hardware recommendations
Replies: 14
Views: 861

Re: Post-fire hardware recommendations

I had a similar Home-Setup..... I started with a CRS328-24P-4S+RM as a "All-in-One" Solution (Switch, Router, Firewall, Capsman-Manager, etc..) - wAPac and cAPac for Wireless-Connectivity powered and Managed via the CRS328 - SPF+/10Gbps for NAS - GPON SFP-Modules for ISP-Connectivity It wa...
by ConnyMercier
Fri Nov 26, 2021 9:30 pm
Forum: Scripting
Topic: block ping but see what is pinged?
Replies: 6
Views: 445

Re: block ping but see what is pinged?

Good Evening,

Can you please Export and Post the Firewall
 /ip firewall export
by ConnyMercier
Fri Nov 26, 2021 5:51 pm
Forum: RouterBOARD hardware
Topic: hEX temperature feedback
Replies: 5
Views: 780

Re: hEX temperature feedback

In the "ROS ver.7.1rc6" is software cosmetic bug, information is forwarded to person in charge.
@elans,
ROS ver.7.1rc7 still has the "cosmetic" bug
by ConnyMercier
Thu Nov 25, 2021 5:11 pm
Forum: Wireless Networking
Topic: cAP vs cAP XL
Replies: 15
Views: 863

Re: cAP vs cAP XL

Hmmm good question.... Exept for the Antenna both devices are identical... If price isn't a problem, go for the XL My personal Tipp : Look at what's available I don't know where you live, but many of my suppliers don't have the XL in Stock or in great numbers. I only have one who has them in Stock a...
by ConnyMercier
Thu Nov 25, 2021 4:52 pm
Forum: General
Topic: How to explain my boss about complexity of RouterOS
Replies: 9
Views: 597

Re: How to explain my boss about complexity of RouterOS

If you have a Team-Member working in IT, wo doesn't understand IT... Well If he isn't the Son of a Board-Member, the company has a Management Problem But returning to your original Question.... Problem 1: Time to teach I assume your daily Workload will not change until your are gone... So this makes...
by ConnyMercier
Thu Nov 25, 2021 12:38 pm
Forum: Scripting
Topic: Howto get the PTR record for a single IP?
Replies: 6
Views: 389

Re: Howto get the PTR record for a single IP?

Try the :resolve command

Exemple :

[admin@MikroTik] > :put [:resolve 18.196.34.14]
ec2-18-196-34-14.eu-central-1.compute.amazonaws.com
by ConnyMercier
Thu Nov 25, 2021 3:23 am
Forum: General
Topic: Detecting Viber traffic characteristics?
Replies: 11
Views: 625

Re: Detecting Viber traffic characteristics?

I did some Quick Test.... I didn't have any success with Layer7 in the short time... I will try again tomorow BUT I was able to identify "Viber" Servers via a Firewall-Rule and /ip firewall filter add action=add-dst-to-address-list address-list=ViberServers address-list-timeout=none-dynami...
by ConnyMercier
Thu Nov 25, 2021 12:48 am
Forum: General
Topic: Mikrotik equipment to the new home
Replies: 3
Views: 345

Re: Mikrotik equipment to the new home

Take a look at the Mikrotik Audiance
(https://mikrotik.com/product/audience)

It has 3 Wireless-Interfaces.
2.4 & 5 Ghz for Network
and a dedicated 5Ghz for Mesh or Repeater-Mode
by ConnyMercier
Thu Nov 25, 2021 12:45 am
Forum: General
Topic: User Allowed Addresses
Replies: 2
Views: 274

Re: User Allowed Addresses

Et Voila !
/ip service set winbox address=""
by ConnyMercier
Thu Nov 25, 2021 12:43 am
Forum: Scripting
Topic: block ping but see what is pinged?
Replies: 6
Views: 445

Re: block ping but see what is pinged?

Here you go...
/ip firewall filter
add action=add-dst-to-address-list address-list=PingedIP address-list-timeout=none-dynamic chain=forward comment="Identify ICMP / PING Servers " dst-address-list=BlockLAN protocol=icmp
by ConnyMercier
Wed Nov 24, 2021 7:46 pm
Forum: SwOS
Topic: Disabling ARP Entry
Replies: 3
Views: 558

Re: Disabling ARP Entry

Sorry..
by ConnyMercier
Wed Nov 24, 2021 5:03 pm
Forum: Scripting
Topic: block ping but see what is pinged?
Replies: 6
Views: 445

Re: block ping but see what is pinged?

Basic-Exemple /ip firewall filter add action=add-dst-to-address-list address-list=PingedIP address-list-timeout=none-dynamic chain=forward comment="Identify ICMP / PING Servers " out-interface-list=WAN protocol=icmp add action=drop chain=forward comment="Drop: ICMP / PING (LAN -> WAN)...
by ConnyMercier
Wed Nov 24, 2021 4:12 pm
Forum: General
Topic: Why tool traceroute limited to 14 hops?
Replies: 10
Views: 561

Re: Why tool traceroute limited to 14 hops?

It is not limited to 14
24-11-_2021_15-11-00.jpg
by ConnyMercier
Wed Nov 24, 2021 4:07 pm
Forum: RouterBOARD hardware
Topic: Post-fire hardware recommendations
Replies: 14
Views: 861

Re: Post-fire hardware recommendations

What kind of Wireless-Performance do you want? - How many Devices will be connecting to the Network ? - What kind of Performance do you want from your Wireless-Network? (Do you expect max Throughput and surf the Internet with full Bandwidth of your ISP's) - Are you able to provide Wired Connectivity...
by ConnyMercier
Wed Nov 24, 2021 12:16 am
Forum: RouterOS v7 BETA
Topic: Health readings with v7
Replies: 31
Views: 1757

Re: Health readings with v7

@Jotne,
do you still need help with testing ?
by ConnyMercier
Tue Nov 23, 2021 5:57 am
Forum: Scripting
Topic: how to reboot for more than 1 minute
Replies: 6
Views: 412

Re: how to reboot for more than 1 minute

Ahhh ...It was my mistake

When receiving a SMS the modem sometimes get "Stuck"
Because of this, you want to constantly check if the modem is "Stuck"
and if so, reset the Modem / USB-Device.
by ConnyMercier
Tue Nov 23, 2021 5:29 am
Forum: General
Topic: Many Pending Connections / Gmail / Youtube Music / Google Meets
Replies: 2
Views: 316

Re: Many Pending Connections / Gmail / Youtube Music / Google Meets

Maybe a DNS issue ....
Did you try using 1.1.1.1 or 8.8.8.8 for your Clients?
(Basically skiping Mikrotik as a DNS-Server completely)
by ConnyMercier
Tue Nov 23, 2021 5:22 am
Forum: Scripting
Topic: how to reboot for more than 1 minute
Replies: 6
Views: 412

Re: how to reboot for more than 1 minute

Maybe i didn't understand your Request....

I taught you needed a way to Check 60 Sec after boot,
If your device received a SMS and if not Reset USB

What did i understand wrong ?
by ConnyMercier
Tue Nov 23, 2021 5:09 am
Forum: Wireless Networking
Topic: Field Wireless Network
Replies: 6
Views: 430

Re: Field Wireless Network

Mikrotik has a very steep learning curve.... I recommend looking for a local Distributor of Mikrotik-Products (https://mikrotik.com/buy) Most of them have experienced IT-Staff that can quickly and easely Configure the Hardware. It will cost you a bit more $ (or €) , but it's usually the best Solutio...
by ConnyMercier
Tue Nov 23, 2021 4:51 am
Forum: Scripting
Topic: how to reboot for more than 1 minute
Replies: 6
Views: 412

Re: how to reboot for more than 1 minute

Create a Scheduler with parameter "start-time=startup"
And use ":delay 60" to wait 60 sec before executing your script.

Exemple :
2021-11-23_03-51-05.jpg
by ConnyMercier
Tue Nov 23, 2021 4:42 am
Forum: Beginner Basics
Topic: Completely separate one eth port from LAN
Replies: 1
Views: 251

Re: Completely separate one eth port from LAN

Different Solutions for the Problem... But if you want to keep it "Easy", i would create a sepreate Guest-Network / Bridge Basic Setup-Exemple: Step 1: Create Bridge /interface bridge add comment=Guest-Network name=bridge2 Step 2: Assign IP for Guest-Network /ip address add address=192.168...
by ConnyMercier
Tue Nov 23, 2021 4:21 am
Forum: Wireless Networking
Topic: Field Wireless Network
Replies: 6
Views: 430

Re: Field Wireless Network

But i don't see the Problem using Metal 52 ac in your case. It's Cheaper + has more Range !! whichever solution you adopt : -> Mounting is always going to be a problem... Mikrotik device's aren't really "Waterproof" only IP55 (it may survive the Rain, but not the presure washer) Tractor's ...
by ConnyMercier
Tue Nov 23, 2021 4:20 am
Forum: Wireless Networking
Topic: Field Wireless Network
Replies: 6
Views: 430

Re: Field Wireless Network

I had to solve similar Problems in the Past.... For the Customer Mobile-Device connectivity was important, so we used an wAP ac LTE kit on the "Main" tractor Basic Setup: --> WLAN 2.4Ghz for the Tractor-Network --> WLAN 5Ghz for the Wireless device in the Tractor (Tablet, Phone, etc..) -->...
by ConnyMercier
Tue Nov 23, 2021 3:05 am
Forum: General
Topic: Not Able To Surf Internet On Mac
Replies: 1
Views: 274

Re: Not Able To Surf Internet On Mac

How do you connect to your Mikrotik-Device ?
Wireless or Cable ?

Do you get an IP-Address via the DHCP-Server ?
by ConnyMercier
Tue Nov 23, 2021 2:56 am
Forum: General
Topic: Internet access via Campground Wifi using Metal 52 ac and a Netgear R6400
Replies: 3
Views: 309

Re: Internet access via Campground Wifi using Metal 52 ac and a Netgear R6400

Most Wireless-Networks do not support Multiple Client behind a Wireless-Client (802.11 limitations for L2 bridging) A lot of different Solutions to this problem... The "Easy" way is to use NAT aka. Configure the Mikrotik as a Router If you need help... Simply POST the actual Config (/expor...
by ConnyMercier
Tue Nov 23, 2021 2:40 am
Forum: General
Topic: Autonegotiation issues between MikroTik switches and servers
Replies: 2
Views: 326

Re: Autonegotiation issues between MikroTik switches and servers

Did you try updating the Mikrotik-Device to the ROS 6.48.5 (Long-term) ?
Some Forum-Users seam to have Problem with ROS 6.49 and SFP /QSFP modules...
Maybe a Bug in the Version....
by ConnyMercier
Tue Nov 23, 2021 2:31 am
Forum: The User Manager
Topic: slow connection speed
Replies: 2
Views: 510

Re: slow connection speed

The CRS112-8G-4S-IN won't be able to handel the Routing of ISP-Speeds of 1Gpbs
If you take a look at the Mikrotik-Webpage (https://mikrotik.com/product/CRS112-8G- ... estresults)
I wouldn't expect more then 32.8Mbps with this device / configuration
2021-11-23_01-26-42.jpg
by ConnyMercier
Tue Nov 23, 2021 2:24 am
Forum: SwOS
Topic: Disabling ARP Entry
Replies: 3
Views: 558

Re: Disabling ARP Entry

Yes it it posible to remove a single Entry via CLI Solution 1: Manually remove ARP-Entry First you need to Print all entries via the "/ip arp print" command. This will give you a list with a unique ID for each ARP-Element. Exemple: /ip arp print # ADDRESS MAC-ADDRESS INTERFACE 0 DC 192.168...
by ConnyMercier
Tue Nov 23, 2021 1:41 am
Forum: General
Topic: Unable to access any MT device behind Mikrotik Router
Replies: 17
Views: 739

Re: Unable to access any MT device behind Mikrotik Router

The "bridge" is missing RB2011UiAS
Is there a reason for this ?
by ConnyMercier
Tue Nov 23, 2021 1:10 am
Forum: General
Topic: Unable to access any MT device behind Mikrotik Router
Replies: 17
Views: 739

Re: Unable to access any MT device behind Mikrotik Router

Difficult to say.....

We need to take a look at the Config of your Router
If possible please POST Config of RB2011UiAS AND WAP LTE
(/export hide-sensitive file=anynameyoulike)
by ConnyMercier
Tue Nov 23, 2021 1:01 am
Forum: General
Topic: Resetting CRS125-24G-1S-2HnD-IN routerboard
Replies: 1
Views: 240

Re: Resetting CRS125-24G-1S-2HnD-IN routerboard

It's almost invisible =)

23-11-_2021_00-00-44.jpg
by ConnyMercier
Tue Nov 23, 2021 12:53 am
Forum: Beginner Basics
Topic: Establish connection from WiFi to machine on ethernet port
Replies: 1
Views: 227

Re: Establish connection from WiFi to machine on ethernet port

This is how I would do it... I tried to keep all the same names and IP. Step 1 : Create Bridge /interface bridge add name=Lab-test-bridge Step 2: Assign Interfaces to Bridge (not to Interface!) /interface bridge port add bridge=Lab-test-bridge interface=ether7 add bridge=Lab-test-bridge interface=La...
by ConnyMercier
Tue Nov 23, 2021 12:16 am
Forum: Wireless Networking
Topic: Field Wireless Network
Replies: 6
Views: 430

Re: Field Wireless Network

Good Morning,

for those of us who don't know nothing about farming... :D
How far appart are the tractors during normal operations ?
10m, 100m , 1 000m, 10 000m ???
by ConnyMercier
Mon Nov 22, 2021 7:24 pm
Forum: General
Topic: Remove poe adapter on wimax antenna
Replies: 3
Views: 274

Re: Remove poe adapter on wimax antenna

I am sorry, I was focused on the "PoE" question... Of course, you may need to edit the configuration of the Mikrotik-Device. If you are comfortable with RouterOS, it shoudn't be a "Problem" -->> Tipp : Make Backups & use Safe-Mode =) If you need help or advice Post the Config...
by ConnyMercier
Mon Nov 22, 2021 6:47 pm
Forum: General
Topic: Remove poe adapter on wimax antenna
Replies: 3
Views: 274

Re: Remove poe adapter on wimax antenna

It depends on the Device you want to Power (aka. wimax-Antenna)

The RB2011UiAS-2HnD-IN only has a Pasive PoE on ether10.
Max out ether10 (input 18-30 V) 510 mA


If the device is compatible, you can connect the device via ether10
and it should be "Plug&Play"
by ConnyMercier
Mon Nov 22, 2021 6:16 pm
Forum: Wireless Networking
Topic: Wireless and Mikrotik - one settlement
Replies: 4
Views: 571

Re: Wireless and Mikrotik - one settlement

Danke @Andy for the nice summary.
i concur with your results
by ConnyMercier
Mon Nov 22, 2021 5:57 pm
Forum: General
Topic: Router for test environment
Replies: 10
Views: 529

Re: Router for test environment

I personally learned on two Mikrotik hAP ac lite

But in your case , if you don't need / want Wireless-Interfaces
Maybe a hEX S would be more adequate
by ConnyMercier
Mon Nov 22, 2021 5:38 pm
Forum: RouterOS v7 BETA
Topic: Health readings with v7
Replies: 31
Views: 1757

Re: Health readings with v7

Mikrotik-Device : hEX ------------------------------------------------------- MikroTik RouterOS 6.48.5 (hEX) [admin@MikroTik] > :put [/system health get] temperature=42;voltage=273 [admin@MikroTik] > /system health print voltage: 27.3V temperature: 42C -----------------------------------------------...
by ConnyMercier
Mon Nov 22, 2021 5:21 pm
Forum: RouterOS v7 BETA
Topic: Health readings with v7
Replies: 31
Views: 1757

Re: Health readings with v7

Mikrotik-Device : hEX S ------------------------------------------------------- MikroTik RouterOS 6.48.5 (hEX S) [admin@MikroTik] > :put [/system health get] temperature=60;voltage=477 [admin@MikroTik] > /system health print voltage: 47.7V temperature: 60C -------------------------------------------...
by ConnyMercier
Mon Nov 22, 2021 5:20 pm
Forum: RouterOS v7 BETA
Topic: Health readings with v7
Replies: 31
Views: 1757

Re: Health readings with v7

Mikrotik-Device : CRS112-8P-4S ------------------------------------------------------- MikroTik RouterOS 6.48.4 (CRS112-8P-4S) [admin@MikroTik] > :put [/system health get] psu1-voltage=275;psu2-voltage=484;temperature=45 [admin@MikroTik] > /system health print temperature: 45C psu1-voltage: 27.5V ps...
by ConnyMercier
Mon Nov 22, 2021 4:36 pm
Forum: RouterBOARD hardware
Topic: hEX temperature feedback
Replies: 5
Views: 780

Re: hEX temperature feedback

@krafg, sorry for the late response... Room-Temperature during the Test ca. 16.5°C Results ------------------------ ROS ver.6.48.4 /system health print voltage: 27.2V temperature: 17C ------------------------ ROS ver.6.49.1 /system health print voltage: 27.3V temperature: 20C -----------------------...
by ConnyMercier
Mon Nov 22, 2021 4:00 pm
Forum: RouterBOARD hardware
Topic: Mikrotik switch SFP+ port issue on COLD restart
Replies: 10
Views: 4272

Re: Mikrotik switch SFP+ port issue on COLD restart

I had the same issues with some SFP/SFP+ modules in the past.... SFP-Interfaces worked perfectly, but on some Reboot and/or Cold-Starts the Interface wouldn't properly initiate. We use a Scheduler on "startup" to, 1. Wait 90 Sec. 2. Check SFP/SFP+ Interface (If !running Step 3-6) 3. Disabl...
by ConnyMercier
Mon Nov 22, 2021 12:23 am
Forum: RouterOS v7 BETA
Topic: Health readings with v7
Replies: 31
Views: 1757

Re: Health readings with v7

It's seams to be a ROS7 problem...

I upgrade the Swich back to ROS version 6.48.5
The Command :put [/system health get] works normally ..
by ConnyMercier
Mon Nov 22, 2021 12:13 am
Forum: RouterOS v7 BETA
Topic: Health readings with v7
Replies: 31
Views: 1757

Re: Health readings with v7

Result of :put [/system/health/get]
by ConnyMercier
Mon Nov 22, 2021 12:09 am
Forum: RouterOS v7 BETA
Topic: Health readings with v7
Replies: 31
Views: 1757

Re: Health readings with v7

Result from your Script (:foreach id in=[/system health find] do=....) .id=*10;name=power-consumption;type=W;value=9.6 .id=*11;name=cpu-temperature;type=C;value=54 .id=*1b59;name=fan1-speed;type=RPM;value=0 .id=*1b5a;name=fan2-speed;type=RPM;value=0 .id=*1b5b;name=fan3-speed;type=RPM;value=0 .id=*1b...
by ConnyMercier
Sun Nov 21, 2021 10:55 pm
Forum: RouterOS v7 BETA
Topic: Health readings with v7
Replies: 31
Views: 1757

Re: Health readings with v7

Doesn't seam to work on ROS7
by ConnyMercier
Sun Nov 21, 2021 10:04 pm
Forum: RouterOS v7 BETA
Topic: Health readings with v7
Replies: 31
Views: 1757

Re: Health readings with v7

# nov/16/2021 20:31:46 by RouterOS 7.1rc6 # model = CRS328-24P-4S+ [/system health print as-value] .id=*10;name=power-consumption;type=W;value=8.9;.id=*11;name=cpu-temperature;type=C;value=54;.id=*1b59;name=fan1-speed;type=RPM;value=0;.id=*1b5a;name=fan2-speed;type=RPM;value=0;.id=*1b5b;name=fan3-sp...
by ConnyMercier
Sun Nov 21, 2021 8:56 pm
Forum: RouterOS v7 BETA
Topic: Health readings with v7
Replies: 31
Views: 1757

Re: Health readings with v7

Same Problem here...
CCR1009 are all in production use.

Not sure, but i think updating them to V7 is punishable by death :lol:
by ConnyMercier
Sun Nov 21, 2021 8:51 pm
Forum: General
Topic: Block p2p from IP cameras - RB4011iGS+RM
Replies: 22
Views: 1696

Re: Block p2p from IP cameras - RB4011iGS+RM

Q1. Did you reboot the Camera after editing the Firewall?
Q2. How do you know that the Internet access for the Camera's isn't working ?
Q3. Can you Post the Latest config of your Router ? (/export hide-sensitive)
by ConnyMercier
Sat Nov 20, 2021 3:30 am
Forum: RouterOS v7 BETA
Topic: Health readings with v7
Replies: 31
Views: 1757

Re: Health readings with v7

PSU-State ?
Do you know which models have this output ?
Dual Power supplies Devices?
by ConnyMercier
Thu Nov 18, 2021 8:40 pm
Forum: General
Topic: How to change Mikrotik's name on my LAN
Replies: 6
Views: 539

Re: How to change Mikrotik's name on my LAN

Depending on your configuration you will need to change the MAC-Address in different Locations.

I assume you have a "Bridge" active for your LAN and no VLANs
--> Go to Winbox -->> Bridge -->> select bridge -->> Admin. MAC Address
18-11-_2021_19-37-03.jpg
by ConnyMercier
Thu Nov 18, 2021 3:02 pm
Forum: General
Topic: How to change Mikrotik's name on my LAN
Replies: 6
Views: 539

Re: How to change Mikrotik's name on my LAN

Just set a new identity.:
/system identity set name=NEWNAME
But if you don't want Clients on the Network identifying your Router as Mikrotik
you will need to do additional Steps like change the MAC, firewall rules etc..
by ConnyMercier
Wed Nov 17, 2021 3:32 pm
Forum: General
Topic: Hide-sensitive shows serial number
Replies: 5
Views: 503

Re: Hide-sensitive shows serial number

+1
I agree Serial-Number shouldn't be part of the /export hide-sensitive
by ConnyMercier
Wed Nov 17, 2021 5:40 am
Forum: Scripting
Topic: remove address list where prefix belongs to certain ip range [SOLVED]
Replies: 4
Views: 560

Re: remove address list where prefix belongs to certain ip range [SOLVED]

Added the Feature (delete only if enabled) for both Scripts. Script 1: #--------------------------------------- # Set IP-Addresses to Remove from Address-List :local A2R 4.4.4.0/24 #--------------------------------------- /ip firewall address-list remove [find where address in $A2R && disabl...
by ConnyMercier
Wed Nov 17, 2021 5:26 am
Forum: Scripting
Topic: remove address list where prefix belongs to certain ip range [SOLVED]
Replies: 4
Views: 560

Re: remove address list where prefix belongs to certain ip range [SOLVED]

Oh Man.... I should read Post more carefully... Here is what you wanted #--------------------------------------- # Set IP-Addresses to KEEP from Address-List :local A2R {2.2.2.0/24;8.8.8.0/24;1.1.1.0/24} #--------------------------------------- :local KeepIP :foreach i in=[/ip firewall address-list ...
by ConnyMercier
Wed Nov 17, 2021 4:50 am
Forum: Scripting
Topic: remove address list where prefix belongs to certain ip range [SOLVED]
Replies: 4
Views: 560

Re: remove address list where prefix belongs to certain ip range [SOLVED]

#---------------------------------------
# Set IP-Addresses to Remove from Address-List
:local A2R 2.2.2.0/24
#---------------------------------------
/ip firewall address-list remove [find where address in $A2R]
by ConnyMercier
Wed Nov 17, 2021 4:00 am
Forum: Virtualization
Topic: Is it possible to create a script that updates the domain record every time the pppoe connection is established?
Replies: 1
Views: 762

Re: Is it possible to create a script that updates the domain record every time the pppoe connection is established?

Yes,

The PPPoE-Interface can be assigned a "Profile"
In return each Profile can be assigned a "On-Up" and "On-Down" Script.
by ConnyMercier
Wed Nov 17, 2021 2:58 am
Forum: General
Topic: RB750Gr3 Vlan scenario advice
Replies: 10
Views: 920

Re: RB750Gr3 Vlan scenario advice

Good Morning, If you want to learn about Mikrotik and VLAN I recommend the Forum-Bible -->> https://forum.mikrotik.com/viewtopic.php?t=143620 But i am not sure if VLAN will solve your Problem... We need more information about your Network Is the RB750 the only Network-Device? Are you already using V...
by ConnyMercier
Wed Nov 17, 2021 2:45 am
Forum: Beginner Basics
Topic: Cant connect to renew license
Replies: 1
Views: 320

Re: Cant connect to renew license

Is it possible for you to POST your Config ?
(/export hide-sensitive file=anynameyouwish)
by ConnyMercier
Wed Nov 17, 2021 2:07 am
Forum: General
Topic: How to make spikey traffic
Replies: 2
Views: 361

Re: How to make spikey traffic

To test your Mikrotik device under load ?
If yes , i would use something like ipef3 to genereate traffic
by ConnyMercier
Wed Nov 17, 2021 1:59 am
Forum: General
Topic: High availability for RoutrOS services
Replies: 1
Views: 516

Re: High availability for RoutrOS services

I would personally not implement any High-Avaiability Features,
if your Network only comprise of two CRS328-Switches.....

The added complexity of VRRP, Sync DHCP-Leases and co..
don't really overcome any advantages, in my opinion!

But maybe other Forum-Members can express their views....
by ConnyMercier
Wed Nov 17, 2021 1:31 am
Forum: General
Topic: Looping/switching Queues automatically
Replies: 1
Views: 282

Re: Looping/switching Queues automatically

The quick and easy way is to use "comment" to find the correct Queue... In the following exemple the comment must contain Q1="abcdef" and Q2="123456" Warning Basic-Script so no Buiild-in error mitigation and Co. # Queue Flip-Flop Script #--------------------------------...
by ConnyMercier
Wed Nov 17, 2021 12:47 am
Forum: Wireless Networking
Topic: Please help me solve this problem , RBSXTsq5HPnD
Replies: 4
Views: 471

Re: Please help me solve this problem , RBSXTsq5HPnD

I don't understand HOW you are getting 200Mbps speeds via 100Mbps Switch/AP?

Anyways ...
Maybe the Switches are BAD.
Did you try replacing one of them and doing some Speed-Test ?
by ConnyMercier
Wed Nov 17, 2021 12:36 am
Forum: Beginner Basics
Topic: What wrong with queue?
Replies: 4
Views: 674

Re: What wrong with queue?

Did you try another "Queue Type" like default or default-small insteed of ethernet-default?
by ConnyMercier
Wed Nov 17, 2021 12:20 am
Forum: General
Topic: RB1100AHx4 Very Slow Upload Speeds
Replies: 1
Views: 345

Re: RB1100AHx4 Very Slow Upload Speeds

Q1: Bandwidth Are you sure noting else is using the Bandwidth? Some Computer in your network using OneDrive, DropBox? Q2: Router-Stats During the Speed-Test, What kind of CPU and RAM usage to you have ? Q3: Is it possible for you to POST your Config ? (/export hide-sensitive file=anynameyouwish)
by ConnyMercier
Wed Nov 17, 2021 12:10 am
Forum: General
Topic: Windows 7 Ikev2 Split Include
Replies: 5
Views: 608

Re: Windows 7 Ikev2 Split Include

Q1. Do you use Windows VPN-Client or a 3rd-Party software to connect via Ikev2?
Q2. How do you know the Routes are not working? (Windows CLI : route print)?
Q3. Can you please POST your config ? (/export hide-sensitive file=anynameyouwish)
by ConnyMercier
Wed Nov 17, 2021 12:03 am
Forum: General
Topic: Thousand LOGIN messages after RouterOS upgrade
Replies: 3
Views: 592

Re: Thousand LOGIN messages after RouterOS upgrade

Only during the "Update" Phase?
or do you still get then now?
by ConnyMercier
Wed Nov 17, 2021 12:01 am
Forum: General
Topic: 2nd RB951 ko in 2 months
Replies: 1
Views: 338

Re: 2nd RB951 ko in 2 months

Maybe it wasn't only Blackout, but some sudden increase of voltage (aka. Power Surge)

If the Utility's aren't Stable invest in a Uninterruptible Power Source (UPS)
or some industrial Power-Supply's capable of handling bad Input-Current.
by ConnyMercier
Tue Nov 16, 2021 9:32 pm
Forum: RouterOS v7 BETA
Topic: Health readings with v7
Replies: 31
Views: 1757

Re: Health readings with v7

Guten Abend, # nov/16/2021 20:31:46 by RouterOS 7.1rc6 # model = CRS328-24P-4S+ / system health print; # NAME VALUE TYPE 0 power-consumption 14.2 W 1 cpu-temperature 50 C 2 fan1-speed 2565 RPM 3 fan2-speed 2790 RPM 4 fan3-speed 2145 RPM 5 fan4-speed 2250 RPM 6 board-temperature1 29 C 7 psu1-voltage ...
by ConnyMercier
Tue Nov 16, 2021 8:23 pm
Forum: Beginner Basics
Topic: Filter Rules
Replies: 1
Views: 312

Re: Filter Rules

I assume you made the typical L7 configuration error.
This MUM viedo explaines it well -->> https://www.youtube.com/watch?v=3LmQYIQ5RoA


If you need more help, we will need to see the config and your firewall rules
(/export hide-sensitive file=anynameyouwish)
by ConnyMercier
Mon Nov 15, 2021 10:23 pm
Forum: General
Topic: which switch to choose for 1/2.5Gbps switching? [SOLVED]
Replies: 10
Views: 1073

Re: which switch to choose for 1/2.5Gbps switching? [SOLVED]

Mikrotik doesn't really have any 2.5Gbits Switches....
a friend of mine bought the QNAP QSW-2104-2S Switch
to connect some 2.5Gbits Devices and he is very pleased with it !
by ConnyMercier
Mon Nov 15, 2021 10:16 pm
Forum: General
Topic: which switch to choose for 1/2.5Gbps switching? [SOLVED]
Replies: 10
Views: 1073

Re: which switch to choose for 1/2.5Gbps routing? [SOLVED]

do i need to let space with only 1G S-RJ01 ? i only plane to usr with sf0++ fiber and dac
All SFP-Modules with RJ45 get quite hot.
But I have a couple of S-RJ01 running side-by-side without any problems.
by ConnyMercier
Mon Nov 15, 2021 8:16 pm
Forum: RouterBOARD hardware
Topic: RB5009UG+S+IN power question
Replies: 1
Views: 516

Re: RB5009UG+S+IN power question

Yes you can used them at the same Time for redundancy
by ConnyMercier
Mon Nov 15, 2021 6:07 pm
Forum: Announcements
Topic: WinBox v3.31 released!
Replies: 63
Views: 32316

Re: WinBox v3.31 released!

I vote for an office2000 theme/skin.
Microsoft Bob theme would be way cooler =)
by ConnyMercier
Mon Nov 15, 2021 2:11 am
Forum: Announcements
Topic: WinBox v3.31 released!
Replies: 63
Views: 32316

Re: WinBox v3.31 released!

i don't want to offend anyone, but i don't really understand the "Dark-Mode" hype !
How is "Dark-Mode" more important than a Stable7.X Release, extended IPSec-Parameters, etc....???
by ConnyMercier
Sun Nov 14, 2021 11:11 pm
Forum: RouterBOARD hardware
Topic: Mikrotik console server?
Replies: 2
Views: 613

Re: Mikrotik console server?

I don't know if there is a sustainable Market for Console-Server (RS232, RS422, RS485, etc..) Most new Devices today have Ethernet or Wireless-Connectivity... Nevertheless, If you are looking for a Solution TODAY, look up W&T (https://www.wut.de/) I used them all the time for Indutrial applicati...
by ConnyMercier
Sat Nov 13, 2021 9:26 pm
Forum: SwOS
Topic: DHCP failover to 192.168.88.1
Replies: 9
Views: 1266

Re: DHCP failover to 192.168.88.1

..., so every IT-expert (we are IT experts, aren't we? :wink:)
Mikrotik Forum Guru is indeed the highest title for IT-Experts :lol:
Thanks for the Feedback!
by ConnyMercier
Sat Nov 13, 2021 8:18 pm
Forum: SwOS
Topic: DHCP failover to 192.168.88.1
Replies: 9
Views: 1266

Re: DHCP failover to 192.168.88.1

... never ever use DHCP client (not even fallback) on LAN infrastructure devices (and servers). Is that Best-Practice or more a security thing? More and more IT- "Expert" i get to talk to, tell me to use DHCP for both IPv4 & IPv6 Not only for Client-Devices but also for Servers and/or...
by ConnyMercier
Sat Nov 13, 2021 12:21 pm
Forum: SwOS
Topic: DHCP failover to 192.168.88.1
Replies: 9
Views: 1266

Re: DHCP failover to 192.168.88.1

I concur with @rextended.
I usually avoid these IP-Addresses:

Mikrotik 192.168.88.0/24
Unifi 192.168.1.0/24
AVM 192.168.178.0/24
LANCOM 172.23.56.0/24
TP-LINK 192.168.0.0/24
by ConnyMercier
Fri Nov 12, 2021 9:03 pm
Forum: Scripting
Topic: firewall configuration in Mikrotik
Replies: 3
Views: 502

Re: firewall configuration in Mikrotik

As always, thank you @rextended !
by ConnyMercier
Fri Nov 12, 2021 12:00 pm
Forum: Scripting
Topic: Need to enable/disable Interface
Replies: 7
Views: 661

Re: Need to enable/disable Interface

@Naomie

I answers your Question in your original Post #1
by ConnyMercier
Fri Nov 12, 2021 11:59 am
Forum: Scripting
Topic: firewall configuration in Mikrotik
Replies: 3
Views: 502

Re: firewall configuration in Mikrotik

Step 1: Trigger You can use "Scheduler" or "Netwatch" to trigger Scripts. Step 2: Script A (IP-Online) The quick and easy way is to use "comment" to find the correct NAT-Rules After Creating the needed NAT-Rules simply add a unique string to you comments. In the follow...
by ConnyMercier
Fri Nov 12, 2021 11:02 am
Forum: General
Topic: Block Access From Lan 2 To Lan 1
Replies: 2
Views: 387

Re: Block Access From Lan 2 To Lan 1

Many Solutions for this Problem =) I like to use Interface or Interface-List. Basic-Exemple: /ip firewall filter add action=drop chain=forward comment="Drop: Everything (LAN1 --> LAN2)" in-interface=LAN1 out-interface=LAN2 add action=drop chain=forward comment="Drop: Everything (LAN2 ...
by ConnyMercier
Fri Nov 12, 2021 3:00 am
Forum: General
Topic: Help Access Mikrotik's Port from VPN
Replies: 28
Views: 1352

Re: Help Access Mikrotik's Port from VPN

Finally!!!! :D
by ConnyMercier
Fri Nov 12, 2021 1:42 am
Forum: General
Topic: Public IP blacklisted by BBC Amazon and Netflix
Replies: 20
Views: 1181

Re: Public IP blacklisted by BBC Amazon and Netflix

Just in case someone else want's to try I attached a Basic Firewall-Script to Block a sample of Windscribe-Servers I don't know how long this will work . But on the 11.11.2021, it worked for following Servers: Germany Frankfurt - Castle France Paris - Seine United Kingdom London - Custard United Kin...
by ConnyMercier
Thu Nov 11, 2021 11:32 pm
Forum: General
Topic: which switch to choose for 1/2.5Gbps switching? [SOLVED]
Replies: 10
Views: 1073

Re: which switch to choose for 1/2.5Gbps routing? [SOLVED]

1. @benoitc you forgot the Title, it still says "Routing" =)

2. May i ask why you want / need 2.5 Gbps for your Project?
by ConnyMercier
Thu Nov 11, 2021 10:47 pm
Forum: RouterBOARD hardware
Topic: Problemas de comunicação
Replies: 2
Views: 578

Re: Problemas de comunicação

Good Evening,

Did you try to disable "auto negotiation" on the SFP+ Interfaces of the crs305 ?
Set Speed manually to 1Gbps Full-Duplex
by ConnyMercier
Thu Nov 11, 2021 10:03 pm
Forum: General
Topic: Public IP blacklisted by BBC Amazon and Netflix
Replies: 20
Views: 1181

Re: Public IP blacklisted by BBC Amazon and Netflix

I am still analysing the VPN with Procmon, Wireshark and co... still looking for an easy Solution to Block the Service. I was quickly able to Block any VPN-Connection to "Germany / Frankfurt Castle" after "blocking" TCP53 and UDP53 (aka. DNS). The Windscribe-VPN-Client, will stil...
by ConnyMercier
Thu Nov 11, 2021 7:41 pm
Forum: Scripting
Topic: scripts work with some devices NOT other
Replies: 3
Views: 521

Re: scripts work with some devices NOT other

I don't think it has something to do with the Hardware, but with Software....

Which RouterOS are your running on your RB4011?
Still the ROS6 ?
by ConnyMercier
Thu Nov 11, 2021 7:33 pm
Forum: General
Topic: Public IP blacklisted by BBC Amazon and Netflix
Replies: 20
Views: 1181

Re: Public IP blacklisted by BBC Amazon and Netflix

Soo, i took a quick Look at Windscribe And I must say, I am impressed with this VPN-Solution. In contains a lot of Tools and Strategies to circumvent firewall and dns restriction Thank god the Developers don't do Malware and Viruses :lol: I did some Test: I was able to cripple the "Emergency Co...
by ConnyMercier
Thu Nov 11, 2021 4:14 pm
Forum: General
Topic: Public IP blacklisted by BBC Amazon and Netflix
Replies: 20
Views: 1181

Re: Public IP blacklisted by BBC Amazon and Netflix

I don't have a Windscribe-VPN account, so i can't test this...
But maybe one or more Firewall-Rules to identify Windscribe-Traffic via L7 or TLS-Host could help
Analoge to users that block Youtube, Facebook and co..
by ConnyMercier
Thu Nov 11, 2021 12:41 pm
Forum: General
Topic: which switch to choose for 1/2.5Gbps switching? [SOLVED]
Replies: 10
Views: 1073

Re: which switch to choose for 1/2.5Gbps routing? [SOLVED]

Routing or Switching ?

If switching
How about the CSS610-8G-2S+IN ?

It has 8x 1Gbits and 2x 10Gbits
The only disadvantage is the Swoslite
by ConnyMercier
Thu Nov 11, 2021 12:03 pm
Forum: Scripting
Topic: Script to convert dynamic to static for specfic address list. [SOLVED]
Replies: 9
Views: 1254

Re: Script to convert dynamic to static for specfic address list. [SOLVED]

How do you populate the Address-List ?

Is it possible to share the config of your Mikrotik devices?
/export hide-sensitive file=anynameyoulike
by ConnyMercier
Thu Nov 11, 2021 11:40 am
Forum: Beginner Basics
Topic: Just configure mAP Lite as an AP!
Replies: 7
Views: 979

Re: Just configure mAP Lite as an AP!

After the Reset....
Look in Winbox under the Tab "Neighbors"
You should be able to see the Mikrotik-Device

Select the MAC address and NOT the IP-Address to connect !
by ConnyMercier
Thu Nov 11, 2021 12:39 am
Forum: General
Topic: Help Access Mikrotik's Port from VPN
Replies: 28
Views: 1352

Re: Help Access Mikrotik's Port from VPN

That's a bummer! The PPTP was working.... I searched online and found some Troubleshooting Tipps and Tricks I think you are allowed multiple Clients (i think up to 10), but only one with the dedicated IP (duh!) For diagnostic purposes, Deactivate the VPN on all your devices (PC-App,Browser-Extention...
by ConnyMercier
Wed Nov 10, 2021 11:36 pm
Forum: Beginner Basics
Topic: Accessing "parent" network
Replies: 5
Views: 600

Re: Accessing "parent" network

Like @joegoldman sayed, Solution A: NAT/Masquerade on Mikrotik-Router Basic Exemple: /ip firewall nat add action=masquerade chain=srcnat Solution B: Static Routing Your Main-Router doen't know where to send Trafffic for 192.X.X.X so you will need to add a Route, that tells the Main router to send 19...
by ConnyMercier
Wed Nov 10, 2021 10:46 pm
Forum: General
Topic: Help Access Mikrotik's Port from VPN
Replies: 28
Views: 1352

Re: Help Access Mikrotik's Port from VPN

@carcaussa,

Were you able to find a Solution to your Problem ?
by ConnyMercier
Wed Nov 10, 2021 7:07 pm
Forum: General
Topic: Briding EoIP Tunnel = Problem
Replies: 1
Views: 316

Re: Briding EoIP Tunnel = Problem

MTU issue....
@sindy wrote a lot of information about this in this Forum-Post
-> viewtopic.php?t=179311&hilit=cottage#p888865


For a "Quick" fix, change the MTU..
Watch this video : https://www.youtube.com/watch?v=pN9hB9p9UvA
by ConnyMercier
Wed Nov 10, 2021 6:01 pm
Forum: Forwarding Protocols
Topic: RDP Block
Replies: 5
Views: 675

Re: RDP Block

Can you please share the config of your Mikrotik devices.
/export hide-sensitive file=anynameyoulike
by ConnyMercier
Wed Nov 10, 2021 5:56 pm
Forum: Beginner Basics
Topic: How to configure 2nd mikrotik router as repeater via network cable
Replies: 11
Views: 1014

Re: How to configure 2nd mikrotik router as repeater via network cable

I will configure as a normal router? but the ip will get from the main router? @anav already made some great suggestions for your Mikrotik-Device. If you setup the "wlan1" interface as AP-Bridge, All connected Wifi-Device (2.4GHz and 5 GHz) will be part of your Main-Network on L2 Conseque...
by ConnyMercier
Wed Nov 10, 2021 5:51 pm
Forum: Beginner Basics
Topic: How to configure 2nd mikrotik router as repeater via network cable
Replies: 11
Views: 1014

Re: How to configure 2nd mikrotik router as repeater via network cable

So its better to not repeat the wireless-repeater, just connect the network cable from switch to 2nd router? then I will turn on the WLAN1 for WIFI? YES, Usually the "Repeater" funktion is only used when no Wired-Conection to the Network is available. The main Reason for this is "Per...
by ConnyMercier
Wed Nov 10, 2021 2:12 pm
Forum: Beginner Basics
Topic: How to configure 2nd mikrotik router as repeater via network cable
Replies: 11
Views: 1014

Re: How to configure 2nd mikrotik router as repeater via network cable

I think you created a Network-Loop.
Both ether4 and Wlan1 are connected to your network and are assigned the same bridge.

Why do you absolutely want to create a Wireless-Repeater, if you have a wired connection to your AP?
by ConnyMercier
Wed Nov 10, 2021 12:52 pm
Forum: Beginner Basics
Topic: How to configure 2nd mikrotik router as repeater via network cable
Replies: 11
Views: 1014

Re: How to configure 2nd mikrotik router as repeater via network cable

Question1:
Du you really want to "repeat" the WIFI-Signal ?
Or do you really just want an to configure the Device as an Access Point with the same SSID and Password?

Question 2:
Can you please share the config of your Mikrotik devices.
/export hide-sensitive file=anynameyoulike
by ConnyMercier
Wed Nov 10, 2021 9:51 am
Forum: RouterBOARD hardware
Topic: Rack mount CRS3xx Series Switch with DC input
Replies: 4
Views: 866

Re: Rack mount CRS3xx Series Switch with DC input

1. Mikrotik CRS3XX with DC-Power Input The Mikrotik CRS326-24G-2S+RM & CRS326-24G-2S+IN have DC-Inputs alternatively, use CRS112 or similar... 2. Modification Power-Input I know someone has modified a CRS3XX for an Offgrid-Application. You could develope a own solution to ... -> https://forum.mi...
by ConnyMercier
Wed Nov 10, 2021 9:32 am
Forum: General
Topic: it's possible in Nanostaion M2?
Replies: 3
Views: 510

Re: it's possible in Nanostaion M2?

Do you have any Mikrotik-Devices in your Network ?
by ConnyMercier
Tue Nov 09, 2021 8:39 pm
Forum: Scripting
Topic: Need to enable/disable Interface
Replies: 7
Views: 661

Re: Need to enable/disable Interface

Thank you @Jotne
It really makes the Script less bloated and easier to read!!
by ConnyMercier
Tue Nov 09, 2021 7:04 pm
Forum: Beginner Basics
Topic: Internet access
Replies: 8
Views: 727

Re: Internet access

@anav, What about Access-List Function in Mikrotik?

Set a default VLAN-TAG with no Internet on the Wireless-Interfaces.
Only Clients in the Access-List get access to the Network or Internet!

Good idee?
by ConnyMercier
Tue Nov 09, 2021 3:47 pm
Forum: Wireless Networking
Topic: Mikrotik RBDiscG-5acD distance ?
Replies: 6
Views: 803

Re: Mikrotik RBDiscG-5acD distance ?

Karma is a bitch :lol: :lol:
by ConnyMercier
Tue Nov 09, 2021 3:40 pm
Forum: Wireless Networking
Topic: Mikrotik RBDiscG-5acD distance ?
Replies: 6
Views: 803

Re: Mikrotik RBDiscG-5acD distance ?

100Mbit/s yes, 100MBit/s is a different story

Hmmmm....
Are you sure ?!?
I know b = bit and B = byte
But isn't 100 MBit/s equal to 100Mbit/s
by ConnyMercier
Tue Nov 09, 2021 3:04 pm
Forum: Scripting
Topic: Need to enable/disable Interface
Replies: 7
Views: 661

Re: Need to enable/disable Interface

Very Basic Script-Exemple... :if ((![/interface ethernet get ether1 disabled]) && ([/interface ethernet get ether1 running])) do={ # Interface is Enabled AND Interface is Running /interface ethernet set ether2 disabled=yes } else={:if ((![/interface ethernet get ether1 disabled]) && ...
by ConnyMercier
Tue Nov 09, 2021 12:01 pm
Forum: RouterBOARD hardware
Topic: CRS354-48G-4S+2Q+RM Speed not Stable
Replies: 8
Views: 1010

Re: CRS354-48G-4S+2Q+RM Speed not Stable

Dont get it what dose this has to do with the port "D12 - Port 17"
In the Config the Interface "D12 - Port 17" negotiated 100mbits with the Client.
Some Mikrotik-Devices have a performance Problems on the Switch, as soon as a 100mbits-Device is connected.
by ConnyMercier
Tue Nov 09, 2021 2:51 am
Forum: General
Topic: Help Access Mikrotik's Port from VPN
Replies: 28
Views: 1352

Re: Help Access Mikrotik's Port from VPN

I don't know why it isn't working....
The Public IP responds to PING.. but the Firewall only allows TCP80
So something else is responding...


It's almost 02:00AM in Germany
I wish you the Best of Luck, Time for bed =)
by ConnyMercier
Tue Nov 09, 2021 2:22 am
Forum: General
Topic: Help Access Mikrotik's Port from VPN
Replies: 28
Views: 1352

Re: Help Access Mikrotik's Port from VPN

FYI
I am not 100% sure how PureVPN works...
But they sell an Option called "Port Forwarding" are you sure you have that option?!
And if you have this option, i don't know if you need to configure something on there Website ?!
by ConnyMercier
Tue Nov 09, 2021 2:12 am
Forum: General
Topic: Help Access Mikrotik's Port from VPN
Replies: 28
Views: 1352

Re: Help Access Mikrotik's Port from VPN

You won the First Fight =)
Log showes the VPN is working !

"PureVPN-PPTP: authenticated"
"PureVPN-PPTP: connected"


Can you export and post the Latest Config of your Router?
by ConnyMercier
Tue Nov 09, 2021 1:34 am
Forum: General
Topic: Help Access Mikrotik's Port from VPN
Replies: 28
Views: 1352

Re: Help Access Mikrotik's Port from VPN

Ok--- So DNS is not the Problem..
Next Error -> MPPE128 stateless

I looked it up in the Forum:
You may need to edit the PPP Profil and try again
viewtopic.php?t=152878#p755953
by ConnyMercier
Tue Nov 09, 2021 1:12 am
Forum: General
Topic: Help Access Mikrotik's Port from VPN
Replies: 28
Views: 1352

Re: Help Access Mikrotik's Port from VPN

Temporarily disable all Firewall-Rules
Disable and re-enable PPTP interface.

And Post screenshot of LOG (/log print where topics~"pptp")
by ConnyMercier
Tue Nov 09, 2021 12:54 am
Forum: General
Topic: Help Access Mikrotik's Port from VPN
Replies: 28
Views: 1352

Re: Help Access Mikrotik's Port from VPN

Could not resolve name indicates a DNS-Problem

We will have to find why...
But for now try the IP (192.253.246.2) and see what appends !
by ConnyMercier
Tue Nov 09, 2021 12:28 am
Forum: General
Topic: Help Access Mikrotik's Port from VPN
Replies: 28
Views: 1352

Re: Help Access Mikrotik's Port from VPN

Oh man ,, forgot you had so much Logging activ =)

Reboot the router and screenshot of LOG with filter !
/log print where topics~"pptp"
by ConnyMercier
Mon Nov 08, 2021 11:59 pm
Forum: General
Topic: Help Access Mikrotik's Port from VPN
Replies: 28
Views: 1352

Re: Help Access Mikrotik's Port from VPN

Can you Post a Screenshot of the LOG?
by ConnyMercier
Mon Nov 08, 2021 10:24 pm
Forum: General
Topic: Help Access Mikrotik's Port from VPN
Replies: 28
Views: 1352

Re: Help Access Mikrotik's Port from VPN

1. Servers On the Pure-VPN Website, you can find a "Note" Declaring limited support for PPTP starting June 15th, 2021. (https://support.purevpn.com/mikrotik-configuration) I found an unsupported Server in your Export-File... Please try again, using a supported Server 2. Dial-on-demand /int...
by ConnyMercier
Mon Nov 08, 2021 7:12 pm
Forum: Beginner Basics
Topic: add a rule to position N counting from the bottom
Replies: 1
Views: 424

Re: add a rule to position N counting from the bottom

It's not perfect,
Maybe someone with more experience, can help and make it better.
But it works!

Basic exemple 5 counting from bottom
/ip firewall filter
add action=log chain=forward comment=test place-before=(([/ip firewall filter print as-value count-only]) - 5)
by ConnyMercier
Mon Nov 08, 2021 11:09 am
Forum: General
Topic: RB450G Slow Speeds on Switch Port without Bridge
Replies: 3
Views: 443

Re: RB450G Slow Speeds on Switch Port without Bridge

Thanks @mkx for the correction !
by ConnyMercier
Mon Nov 08, 2021 11:06 am
Forum: RouterBOARD hardware
Topic: CRS354-48G-4S+2Q+RM Speed not Stable
Replies: 8
Views: 1010

Re: CRS354-48G-4S+2Q+RM Speed not Stable

Guten Morgen,

I don't have a CRS354 in my LAB, so i can't do any Test...
I know some Mikrotik-Devices have performance Problems, as soon as a 10/100 Device is connected

For diagnostic purposes,
you could try to disable Interface "D12 - Port 17", reboot your Switch and do the Test again.
by ConnyMercier
Mon Nov 08, 2021 5:14 am
Forum: General
Topic: Help Access Mikrotik's Port from VPN
Replies: 28
Views: 1352

Re: Help Access Mikrotik's Port from VPN

Q1. What are the tasks of the Mikrotik-Device ?
only VPN-Gateway to your network?

Q2. Can you please export your FULL Config and Post it on the Forum
(/export hide-sensitive file=anynameyouwish)
by ConnyMercier
Mon Nov 08, 2021 3:00 am
Forum: General
Topic: RB450G Slow Speeds on Switch Port without Bridge
Replies: 3
Views: 443

Re: RB450G Slow Speeds on Switch Port without Bridge

Good Morning,

i wouldn't expect anything more than ~ 700Mbps (aggregate speed)
https://mikrotik.com/product/RB450G#fndtn-testresults

How did you Test the speed of the laptop ? Btest?
by ConnyMercier
Mon Nov 08, 2021 2:47 am
Forum: RouterBOARD hardware
Topic: CRS354-48G-4S+2Q+RM Speed not Stable
Replies: 8
Views: 1010

Re: CRS354-48G-4S+2Q+RM Speed not Stable

Good Morning,

Can you please export your Config and Post it on the Forum (/export hide-sensitive file=anynameyouwish)
by ConnyMercier
Mon Nov 08, 2021 2:43 am
Forum: RouterBOARD hardware
Topic: RB 4011 GS+RM SFP+ Port not working on 10gbp
Replies: 3
Views: 1611

Re: RB 4011 GS+RM SFP+ Port not working on 10gbp

I would disable "Auto-Negotiation" and play with the Speeds on the Mikrotik.


P.S:
Your Mikrotik-Device and Computer won't be able to generate 10Gbit traffic via Bandwidth-Test
IF you really, really have to use it, test in only 1 direction UDP . You may get ~2.5 Gbits
by ConnyMercier
Mon Nov 08, 2021 2:31 am
Forum: General
Topic: Firewall rule works with interface, but not interface-list?
Replies: 4
Views: 514

Re: Firewall rule works with interface, but not interface-list?

Maybe a bug.... but more likely a mistake in the Config

Can you please export your Config and Post it on the Forum (/export hide-sensitive file=anynameyouwish)
by ConnyMercier
Mon Nov 08, 2021 2:25 am
Forum: General
Topic: CRS109-8G-1S-2HnD-IN
Replies: 1
Views: 381

Re: CRS109-8G-1S-2HnD-IN

Depending on what you want to do with your Router/Switch:

CRS112-8G-4S-IN -->> 139$
CSS610-8G-2S+IN -->> 99$ (warning only SWos lite)
by ConnyMercier
Mon Nov 08, 2021 2:19 am
Forum: General
Topic: Robust Youtube Block
Replies: 1
Views: 701

Re: Robust Youtube Block

Many different ways to Block Websites.... When Static-Address-List isn't possible i use the following... https://forum.mikrotik.com/viewtopic.php?t=179557 Step 1: Create Block-Rule Basic-Exemple, needs to be at the top of "Forward" rules I usually Block only one direction (LAN -> WAN) But ...
by ConnyMercier
Mon Nov 08, 2021 1:30 am
Forum: General
Topic: First network file copy often fails with 0k file and no error messages.
Replies: 1
Views: 348

Re: First network file copy often fails with 0k file and no error messages.

I am no Synology-Expert.... If i had the Problem i would, - Connect PC directly to NAS-Server (to see if Mikrotik is to blame) - Check for "Special" Characters (ä,ö,ü %, §,*,°,^ è ) everywhere from share-name, NAS-Name, Login, etc.. - make sure NAS-Server NAME and IP are unique - Only have...
by ConnyMercier
Mon Nov 08, 2021 1:02 am
Forum: General
Topic: Dual Wan with Failover
Replies: 2
Views: 597

Re: Dual Wan with Failover

I think you have a Routing-Problem.... Quick-Test: Ping to something directly via the Mikrotik-Device, and then disconnect the RJ11 from the Modem... You may lose a couple of ping, but it should switch over ... Problem 1: DHCP-Client You have multiple Routing tables, but also have two "default&...
by ConnyMercier
Mon Nov 08, 2021 12:40 am
Forum: General
Topic: No internet on Vlan's
Replies: 2
Views: 510

Re: No internet on Vlan's

The Config is a bit confusing...
Do you have a Network-Diagramm or a small description of you network?


I would normally expect only one bridge with vlan-filtering
See VLAN-Bible : viewtopic.php?t=143620
by ConnyMercier
Mon Nov 08, 2021 12:31 am
Forum: Beginner Basics
Topic: Wireless Wire Dish and vlans
Replies: 2
Views: 742

Re: Wireless Wire Dish and vlans

I think VLAN will work out-of-the-box (aka. default config)
Add DHCP-Client on bridge-interface for management
Secure your Router, and you are good to Go!
by ConnyMercier
Mon Nov 08, 2021 12:28 am
Forum: General
Topic: On home network, block all but internet traffic from router devices
Replies: 2
Views: 498

Re: On home network, block all but internet traffic from router devices

To directly answer your Question,
you only need an additional Firewall-Rule placed before your "block-Rule"
Something like:
add chain=forward dst-address=192.168.0.1 action=accept
by ConnyMercier
Mon Nov 08, 2021 12:20 am
Forum: General
Topic: Show Max bandwidth used
Replies: 2
Views: 517

Re: Show Max bandwidth used

I am no Scripting expert....
Attacht to this post is a basic Script to LOG MAX and MIN in a Global variable.

Maybe a Guru can help and make it better.
I hope it helps !
by ConnyMercier
Sun Nov 07, 2021 11:12 pm
Forum: Beginner Basics
Topic: WAN Failover detection
Replies: 2
Views: 604

Re: WAN Failover detection

Found another Script, maybe it can help !

viewtopic.php?t=177917
by ConnyMercier
Sun Nov 07, 2021 11:09 pm
Forum: Beginner Basics
Topic: dhcp client different hostname on WAN Interface
Replies: 1
Views: 554

Re: dhcp client different hostname on WAN Interface

Good Evening Kurshad,

Of course you can =)

Step 1: Create DHCP-Option
/ip dhcp-client option
add code=12 name=FakeName value="'abcdef'"
Step 2: Assign option to DHCP-Client
/ip dhcp-client
add dhcp-options=FakeName,clientid disabled=no interface=ether1
by ConnyMercier
Sun Nov 07, 2021 10:58 pm
Forum: Beginner Basics
Topic: Port forwarding
Replies: 3
Views: 640

Re: Port forwarding

Can you please post the config of the Mikrotik device
(/export hide-sensitive file=anynameyouwish)
by ConnyMercier
Sun Nov 07, 2021 10:53 pm
Forum: Beginner Basics
Topic: Router for 3 internet connections for 3 buildings
Replies: 3
Views: 695

Re: Router for 3 internet connections for 3 buildings

Answer to Question 1: Every solutions has it advantages and disadvantages. But i think it's a good idee to concatenate all three WAN's /LTE's Just be sure you don't create NEW problems =) For exemple: Cable-Length may be an issue here.. You will probably need Ethernet-Repeaters or even Fiber-Optic-L...
by ConnyMercier
Sun Nov 07, 2021 10:21 pm
Forum: Scripting
Topic: CRS and PoE function
Replies: 2
Views: 787

Re: CRS and PoE function

Good Evening from Germany, Solution A: API The Mikrotik-API is a great Solution.... Some use it via a Small Web-Application (http) or other via dedicated Programms or simple Scripts Tipp / Trick: I had something similar, where the customer (restaurant) didn't have or want any "servers". So...
by ConnyMercier
Sun Nov 07, 2021 9:25 pm
Forum: Wireless Networking
Topic: IoT / LORA Clients
Replies: 1
Views: 565

Re: IoT / LORA Clients

I am no Lora-Specialist... I only have limited experience with a Mikrotik R11e-LoRa8 Gateway and some Sensors & IO-Devices. On Mikrotik, you can define on the LoRaWAN-Gateway which Lora-Networks / Lora-Servers are allowed. See Wiki -> https://wiki.mikrotik.com/wiki/Manual:Interface/Lora Authenti...
by ConnyMercier
Sun Nov 07, 2021 9:00 pm
Forum: General
Topic: DHCP Relay?
Replies: 5
Views: 503

Re: DHCP Relay?

@holvoetn isn't wrong

especially if you can't change any setting on the Main ISP-Router.
by ConnyMercier
Sun Nov 07, 2021 8:51 pm
Forum: Scripting
Topic: Auto block MAC Address or IP Address
Replies: 4
Views: 479

Re: Auto block MAC Address or IP Address

The Easiest Solution is to only Allow a connection to the Router via a isolated Management-Network and/or Physical-Port. If this isn't possible, you will need to jerry-rig something together... The Mikrotik-Wiki show an exemple for SSH (https://wiki.mikrotik.com/wiki/Bruteforce_login_prevention) Unf...
by ConnyMercier
Sun Nov 07, 2021 8:24 pm
Forum: General
Topic: DHCP option 82 support?
Replies: 1
Views: 440

Re: DHCP option 81 support?

The Answer is YES

You can Add DHCP-Client and/or DHCP-Server Options

DHCP-Client
/ip dhcp-client option
DHCP-Server
/ip dhcp-server option
/ip dhcp-server option sets
by ConnyMercier
Sun Nov 07, 2021 8:07 pm
Forum: General
Topic: DHCP Relay?
Replies: 5
Views: 503

Re: DHCP Relay?

How big of a Network are we talking here ?

If you are dealing with a typical SOHO-Network,
I would try to deactivate the DHCP-Server on the ISP-Router

Anything else will be Sub-Optimal
by ConnyMercier
Sun Nov 07, 2021 7:45 pm
Forum: General
Topic: bridge 3 vlan on diffrent interfaces
Replies: 1
Views: 357

Re: bridge 3 vlan on diffrent interfaces

Good Evening, Are you sure the "Sip trunk" Provider accepts multiple Servers connected at once? A know a lot of Providers that don't allow this at all. And if they allow it, they usually want more money! If that's not the Problem, maybe it's the Mikrotik-Config. If you post the config of t...
by ConnyMercier
Sat Nov 06, 2021 3:16 pm
Forum: Beginner Basics
Topic: How to
Replies: 22
Views: 1191

Re: How to isolate two network and mange them with Winbox?

Glad we could help !
by ConnyMercier
Sat Nov 06, 2021 1:36 pm
Forum: Beginner Basics
Topic: How to
Replies: 22
Views: 1191

Re: How to isolate two network and mange them with Winbox?

I just tried it but I can not even ping from main router in subnet1 to deveice in subnet2, there must be something wrong in the configuration..
What are you trying to Ping ?
by ConnyMercier
Sat Nov 06, 2021 1:34 pm
Forum: Beginner Basics
Topic: How to
Replies: 22
Views: 1191

Re: How to isolate two network and mange them with Winbox?

1. Mikrotik-Bandwidth Test
You shouldn't have any problems running Test between subnet1 and subnet2

2. NAS
You have no Firewall-Rules that limits Foward-Traffic between LANs at the moment.
So it should be possible to connect to the NAS-Server in Subnet2 via Subnet1 (via IP)
by ConnyMercier
Sat Nov 06, 2021 12:01 pm
Forum: Beginner Basics
Topic: How to
Replies: 22
Views: 1191

Re: How to isolate two network and mange them with Winbox?

Mikrotik-Winbox "Discovery" only works within a given L2-Network Sooo... -> If you enter the IP-Address manualy you will be able to connect to the other Mikrotik-Devices from Subnet1. -> If you Computer is connected to subnet2, you will be able to "see" the Mikrotik-Devices in Su...
by ConnyMercier
Sat Nov 06, 2021 11:50 am
Forum: Beginner Basics
Topic: WAN Failover detection
Replies: 2
Views: 604

Re: WAN Failover detection

Guten Morgen Plani, I had to solve a similar WAN-Failover for a Phone-System Network. Because of the High requirements of the Client, we used a Scheduler (every 60 seconds on Startup) Basic Parameters of Failover: - ISP1 default, ISP2 as automatic Failover after MAX 60sec. - Manually be able to set ...
by ConnyMercier
Sat Nov 06, 2021 10:34 am
Forum: Wireless Networking
Topic: Mikrotik RBDiscG-5acD distance ?
Replies: 6
Views: 803

Re: Mikrotik RBDiscG-5acD distance ?

I would say yes...


I double checked it with Mikrotik-Tools
-> The P2P-Guide says yes (https://mikrotik.com/products/ptp)
-> The Wireless-Link Calculator also says yes (https://mikrotik.com/calculator)
by ConnyMercier
Sat Nov 06, 2021 10:27 am
Forum: Beginner Basics
Topic: Cap input bandwidth to avoid overage charges
Replies: 2
Views: 450

Re: Cap input bandwidth to avoid overage charges

Good Morning Andy, 80mbit of Data a month? That is not a lot of Data .... What do you use it for ? IoT-Devices? Usually if someone needs to limit Data-Amount then they use the HotSpot-Feature in Mikrotik. I don't know if it is an "easy" Solution to implement for the Router itself to manage...
by ConnyMercier
Sat Nov 06, 2021 9:51 am
Forum: Beginner Basics
Topic: How to
Replies: 22
Views: 1191

Re: How to isolate two network and mange them with Winbox?

Is it possible to post the config of the Mikrotik device?
(/export hide-sensitive file=anynameyouwish)
by ConnyMercier
Sat Nov 06, 2021 8:43 am
Forum: Beginner Basics
Topic: How to
Replies: 22
Views: 1191

Re: How to isolate two network and mange them with Winbox?

I don't really understand the Problem with Winbox..... If you don't use any Firewall, you will be able to connect to your Router via all 3-Networks ("WAN", "YourLan", "BrothersLAN") If you have other Mikrotik devices in your private Network, your will have a. to configu...
by ConnyMercier
Sat Nov 06, 2021 1:32 am
Forum: Beginner Basics
Topic: How to
Replies: 22
Views: 1191

Re: How to isolate two network and mange them with Winbox?

Create Your Network Step 1: Create Bridge /interface bridge add comment="Your Network" name=bridge1 Step 2: Assign Interfaces to Bridge /interface bridge port add bridge=bridge1 interface=ether3 add bridge=bridge1 interface=ether4 add bridge=bridge1 interface=ether5 Step 3: Network IP-Add...
by ConnyMercier
Fri Nov 05, 2021 10:44 pm
Forum: Beginner Basics
Topic: How to
Replies: 22
Views: 1191

Re: How to isolate two network and mange them with Winbox?

You have two main Option, Option A: Bridge You can create a seperate Bridge for your Brothers, and assign all needed Interfaces to it. If you AND your Brothers both need the Wireless, you will have to create "Virtual" Wireless-Interfaces for your Brothers and assign it to the Bridge. Optio...
by ConnyMercier
Fri Nov 05, 2021 10:11 pm
Forum: Beginner Basics
Topic: How to
Replies: 22
Views: 1191

Re: How to isolate two network and mange them with Winbox?

What did you buy ?
by ConnyMercier
Fri Nov 05, 2021 12:17 pm
Forum: RouterBOARD hardware
Topic: Adding a cooling fan to CRS326
Replies: 55
Views: 13103

Re: Adding a cooling fan to CRS326

@kidtienk

- Do you have any SFP-Modules installed?
- Did you update to the Lastest Long-Term or Stable version of RouterOS
by ConnyMercier
Wed Nov 03, 2021 11:40 pm
Forum: RouterBOARD hardware
Topic: block the daily data
Replies: 1
Views: 749

Re: block the daily data

Good Evening, Usually if someone needs to limit Data-Amount then they use the HotSpot-Feature in Mikrotik. The Forum and Mikrotik-Wiki are full of Information about this Feature. Alternatively, -> The PPPoE also allows Data-Amount limitation, but in you case not necessarily usefull. -> Script/Schedu...
by ConnyMercier
Wed Nov 03, 2021 9:58 pm
Forum: The Dude
Topic: Doubt about what hardware to buy [SOLVED]
Replies: 2
Views: 1503

Re: Doubt about what hardware to buy [SOLVED]

We have something similar running.... We decided to use a CCR1009-7G-1C-1S+ Router does DHCP, VLAN, QoS, Firewall,CAPsMAN ,Routing LAN <-> WAN and Routing LAN <-> LAN Basic Setup : ether1 - WAN1 (Main) 1 Gbps / 1 Gbps ether2 - WAN2 (Backup) 600Mbps / 250 Mbps ether3 - Secondary Network 1 Gbps / 1 Gb...
by ConnyMercier
Wed Nov 03, 2021 9:13 pm
Forum: Beginner Basics
Topic: Fiber Optic Connector [SOLVED]
Replies: 3
Views: 782

Re: Fiber Optic Connector [SOLVED]

If "Auto Negotiation" is enabled on the SFP or SFP+ Interface, you can advertise several Speeds. For exemple 1Gbps and 10Gbps So if the SFP-Counterpart only supports 1Gbps The Devices will negotiate to a common Speed (in this case 1Gbps) And communitation on the Link will be possible. BUT ...
by ConnyMercier
Sat Oct 30, 2021 5:01 pm
Forum: Beginner Basics
Topic: VPN to connect home network to cottage
Replies: 107
Views: 5204

Re: VPN to connect home network to cottage

Do you want me to remove the drop all not coming from LAN and replace it with Drop: Everything Else(same spot)?
Yes please !
by ConnyMercier
Sat Oct 30, 2021 4:44 pm
Forum: Beginner Basics
Topic: VPN to connect home network to cottage
Replies: 107
Views: 5204

Re: VPN to connect home network to cottage

There's your Problem ! add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN Solution A: Change Firewall-Rule to /ip firewall filter add action=drop chain=input comment="Drop: Everything else (WAN --> Router)" in-interface-list=WAN Sol...
by ConnyMercier
Sat Oct 30, 2021 3:58 pm
Forum: Beginner Basics
Topic: VPN to connect home network to cottage
Replies: 107
Views: 5204

Re: VPN to connect home network to cottage

Cottage-Network
To do the Quick-Test :
/interface bridge port set [find where interface=ether8] bridge=bridge1
by ConnyMercier
Sat Oct 30, 2021 3:17 pm
Forum: Beginner Basics
Topic: VPN to connect home network to cottage
Replies: 107
Views: 5204

Re: VPN to connect home network to cottage

Problem 1: SSH on Home-Router Can you please add this Firewall Rule and reboot the Home-Router. and then try again to connect via SSH /ip firewall filter add action=accept chain=input comment="Accept: SSH (!WAN --> Router)" dst-port=22 in-interface-list=!WAN protocol=tcp place-before=5 Pro...
by ConnyMercier
Sat Oct 30, 2021 2:43 pm
Forum: Beginner Basics
Topic: VPN to connect home network to cottage
Replies: 107
Views: 5204

Re: VPN to connect home network to cottage

Now check on the Cottage-Router under
Winbox: IP-->> Addresses
If bridge2 and bridge3 got an IP-Address !


or Terminal:
/ip address print
by ConnyMercier
Sat Oct 30, 2021 2:35 pm
Forum: Beginner Basics
Topic: VPN to connect home network to cottage
Replies: 107
Views: 5204

Re: VPN to connect home network to cottage

Log #82 and Log #83 is a good sign!
Can you see if something came after that ?

I would expect the eoip-interfaces to come online,
Like this :
30-10-_2021_13-33-16.jpg
by ConnyMercier
Sat Oct 30, 2021 2:11 pm
Forum: Beginner Basics
Topic: VPN to connect home network to cottage
Replies: 107
Views: 5204

Re: VPN to connect home network to cottage

What does the LOG on the HOME-Router say ?
Can you please make a Screenshot ?
by ConnyMercier
Sat Oct 30, 2021 12:17 pm
Forum: Beginner Basics
Topic: VPN to connect home network to cottage
Replies: 107
Views: 5204

Re: VPN to connect home network to cottage

Config-Review of your Home-Network (29Oct21Home.rsc) Error 1: Firewall Rules for IPSEC are disabled (see attachment) Enable them to allow IPSEC-Communication between "Cottage" and "Home" Error 2: Firewall "DROP" rules (SSH) You have two Firewall Rules, that Drops all no...
by ConnyMercier
Sat Oct 30, 2021 1:14 am
Forum: General
Topic: macOS - how to connect to VPN
Replies: 3
Views: 516

Re: macOS - how to connect to VPN

I don't own any MAC-Computers...
So i can't really help....

If i understand the VPN-Guide from Apple you don't need to Install any VPN-Client.
https://support.apple.com/guide/mac-hel ... lp2963/mac
by ConnyMercier
Fri Oct 29, 2021 9:26 pm
Forum: Beginner Basics
Topic: Mikrotik hAP ac3 LTE6 RBD53GR and Canadian Rogers
Replies: 15
Views: 1156

Re: Mikrotik hAP ac3 LTE6 RBD53GR and Canadian Rogers

Your welcome!
Glad i could help =)


P.S: you may want to disable the "LTE" logging, you enable yesterday.
by ConnyMercier
Fri Oct 29, 2021 8:45 pm
Forum: General
Topic: interface is bandlimited, but I don't know why
Replies: 11
Views: 659

Re: interface is bandlimited, but I don't know why

Exemple:
/interface ethernet set ether10 bandwidth=unlimited/unlimited
by ConnyMercier
Fri Oct 29, 2021 8:23 pm
Forum: Beginner Basics
Topic: Setting up VLANs on RB4011 on Multiple Ports for Switches
Replies: 10
Views: 941

Re: Setting up VLANs on RB4011 on Multiple Ports for Switches

@mkx:
Thanks again for the clarification

I adjusted my Exemple to use only one bridge and VLAN filtering!
Now we just have to way for v7 to be released as Stable =)
by ConnyMercier
Fri Oct 29, 2021 7:50 pm
Forum: Beginner Basics
Topic: Mikrotik hAP ac3 LTE6 RBD53GR and Canadian Rogers
Replies: 15
Views: 1156

Re: Mikrotik hAP ac3 LTE6 RBD53GR and Canadian Rogers

Try this APN:
/interface lte apn
add apn=ltedata.apn name=Rogers2
by ConnyMercier
Fri Oct 29, 2021 2:48 pm
Forum: General
Topic: interface is bandlimited, but I don't know why
Replies: 11
Views: 659

Re: interface is bandlimited, but I don't know why

Good Morning,

Can you please export your Config and Post it on the Forum (/export hide-sensitive file=anynameyouwish)
by ConnyMercier
Fri Oct 29, 2021 1:22 pm
Forum: RouterBOARD hardware
Topic: Gper with 24v passive poe?
Replies: 1
Views: 788

Re: Gper with 24v passive poe?

It will work with 24V PoE input...
The main problem is the Voltage drop on the cable and on the GPeR.

Depending on the Quality and Lenght of Cable
You may only have 22V at the other end.

This may cause Problems with the GPer.
by ConnyMercier
Fri Oct 29, 2021 1:17 pm
Forum: RouterBOARD hardware
Topic: [Request} Restrict web admin to a VLAN in RouterOS
Replies: 3
Views: 906

Re: [Request} Restrict web admin to a VLAN in RouterOS

May i ask why Firewall-Rules aren't viable for you as a way to restrict access to Web? Exemple A: /ip firewall filter add action=drop chain=input dst-port=80 in-interface=!bridge1_vlan111 protocol=tcp Exemple B: /ip firewall filter add action=accept chain=input dst-port=80 in-interface-list=listofvl...
by ConnyMercier
Fri Oct 29, 2021 4:43 am
Forum: Beginner Basics
Topic: Setting up VLANs on RB4011 on Multiple Ports for Switches
Replies: 10
Views: 941

Re: Setting up VLANs on RB4011 on Multiple Ports for Switches

Good Morning,

So i corrected my Forum-Post #5 to only use one Switch-Chip.
ether-6 thru ether10 are assigned the bridge


Use ether1 thru ether5 for WAN, MNGT and co.
by ConnyMercier
Fri Oct 29, 2021 2:29 am
Forum: RouterBOARD hardware
Topic: wAP ac cable routing
Replies: 5
Views: 1017

Re: wAP ac cable routing

Also, if I have to drill out, am I going to have to cut the end of my cable and put a new end on it? And will it fit a Cat 6A cable, nothing looks that big?
you shouldn't have to CUT your cable !
by ConnyMercier
Fri Oct 29, 2021 2:27 am
Forum: RouterBOARD hardware
Topic: wAP ac cable routing
Replies: 5
Views: 1017

Re: wAP ac cable routing

Sooo..
I don't have any new wAP lying around...


I tried it with a Wireless-Wire...
I am pretty sure you have to break-off on of the four thingamajig's
Using a Knife or a drill could be a better idee then to break them away!
I'll give you that =)
by ConnyMercier
Fri Oct 29, 2021 2:08 am
Forum: RouterBOARD hardware
Topic: wAP ac cable routing
Replies: 5
Views: 1017

Re: wAP ac cable routing

They change the concept a couple of times,
If i remember correctly,
On the removable lid, you can break-off on of four thingamajig's =)
by ConnyMercier
Fri Oct 29, 2021 2:00 am
Forum: RouterOS v7 BETA
Topic: Maybe a Bug
Replies: 2
Views: 649

Re: Maybe a Bug

i "copy and paste" on a Mikrotik cAP ac v6.48.4 without any problems.

Reset the cAP ac and updated to 7.1rc5
got the same Error!
by ConnyMercier
Fri Oct 29, 2021 1:49 am
Forum: Beginner Basics
Topic: Access bridge settings from devices in LAN [SOLVED]
Replies: 6
Views: 961

Re: Access bridge settings from devices in LAN [SOLVED]

Solution A: If it's possible to change the IP-Range of the Router completly 192.168.12.1/24 insteed of 192.168.1.1/24 After that everything will work... Solution B: Add Route This might help ! if not you will need mangel rules... /ip route add copy-from=[find where dst-address=0.0.0.0/0] dst-address...
by ConnyMercier
Fri Oct 29, 2021 1:41 am
Forum: General
Topic: macOS - how to connect to VPN
Replies: 3
Views: 516

Re: macOS - how to connect to VPN

When you activate the VPN via the QuickSet option
It will enable and setup SSTP, L2TP and PPTP


L2TP is your best choise for MacOS
All the information you need is shown in the Quick-Set menu,
- VPN-Address : XXXXXXXXXXXX.sn.mynetname.net
- VPN-USER: vpn
- VPN-Password: XXXXXXXXXXXXXX
by ConnyMercier
Fri Oct 29, 2021 1:27 am
Forum: General
Topic: How many connection marks and packet marks can be set at the same time [SOLVED]
Replies: 3
Views: 620

Re: How many connection marks and packet marks can be set at the same time [SOLVED]

Only one connection mark can be assigned to a connection at a time...
Routing and the QoS is still possible.
Look up : viewtopic.php?t=59973
by ConnyMercier
Fri Oct 29, 2021 1:12 am
Forum: Beginner Basics
Topic: Access bridge settings from devices in LAN [SOLVED]
Replies: 6
Views: 961

Re: Access bridge settings from devices in LAN [SOLVED]

Problem: Your Router AND your ONU Terminal have the IP-Address 192.168.1.1
So you will have to change the IP-Address of at least one device
by ConnyMercier
Fri Oct 29, 2021 12:53 am
Forum: Beginner Basics
Topic: Dual WAN Scenario (Starlink and WISP) RB4011
Replies: 1
Views: 431

Re: Dual WAN Scenario (Starlink and WISP) RB4011

It's a good plan! It might be easier to split the traffic the other way around ! I would make "Startlink" the default for ALL Traffic. Identify the "Realtime services" via mangel Rules and give them a different Routing. P.S: You may still need QOS to avoid a single client hogging...
by ConnyMercier
Fri Oct 29, 2021 12:44 am
Forum: Beginner Basics
Topic: Mikrotik hAP ac3 LTE6 RBD53GR and Canadian Rogers
Replies: 15
Views: 1156

Re: Mikrotik hAP ac3 LTE6 RBD53GR and Canadian Rogers

Thank you for the Screenshot's I still don't understand why the interface isn't up and running! So you will have to activate LTE-Logging Go to Menu --> System -->> Logging -->> Add Rule (+) -->> Topic LTE -->> Save (press OK) 2021-10-28_23-36-00.jpg After that, restart your Router and post the the S...
by ConnyMercier
Fri Oct 29, 2021 12:17 am
Forum: Beginner Basics
Topic: RB4011iGS Beginner Configuration incl. VLAN (intern/guests/VoIP)
Replies: 31
Views: 2226

Re: RB4011iGS Beginner Configuration incl. VLAN (intern/guests/VoIP)

If your old Router is still working, why buy a new VOIP-DECT and throw the Fritz.Box away =) Having sayed that, After my Fritz.Box died, i switched to the free version of 3CX and installed it on a RaspberryPi4 VOIP DECT station from Gigaset ist great if you don't need a classic Phone system. Fritz.B...
by ConnyMercier
Thu Oct 28, 2021 10:57 pm
Forum: Wireless Networking
Topic: Virtual WIFI and VLAN's - driving me crazy
Replies: 36
Views: 2284

Re: Virtual WIFI and VLAN's - driving me crazy

This is how i configured the CAPac in the LAB... Step 0: Configure WLAN's /interface wireless set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX disabled=no distance=indoors frequency=auto installation=outdoor mode=ap-bridge ssid=MikroTik wireless-protocol=\ 802.11 set [ find ...
by ConnyMercier
Thu Oct 28, 2021 10:44 pm
Forum: Wireless Networking
Topic: Virtual WIFI and VLAN's - driving me crazy
Replies: 36
Views: 2284

Re: Virtual WIFI and VLAN's - driving me crazy

Found a big mistake : This is wrong /ip address add address=192.168.88.1/24 interface=bridge network=192.168.88.0 add address= 172.16.0.0/24 interface=bridgevlan101 network=172.16.0.0 add address= 172.16.1.0/24 interface=bridgevlan102 network=172.16.1.0 This is right! /ip address add address=192.168...
by ConnyMercier
Thu Oct 28, 2021 10:38 pm
Forum: General
Topic: Slow speed when connecting to Internet with 5Gbit USB dongle [Solved (nofix)]
Replies: 11
Views: 705

Re: Slow speed when connecting to Internet with 5Gbit USB dongle [Solved (nofix)]

I am no LinuxOS expert .... If this would be a Windows-Laptop , i would - Uninstall all AQC111U driver from Marvell - Install/Update USB-Drivers for Laptop - Reboot - Install latest AQC111U driver from Marvell - Reconnect Adapter - Test again But i don't know if Linux sufers from the same problems a...
by ConnyMercier
Thu Oct 28, 2021 10:26 pm
Forum: General
Topic: Slow speed when connecting to Internet with 5Gbit USB dongle [Solved (nofix)]
Replies: 11
Views: 705

Re: Slow speed when connecting to Internet with 5Gbit USB dongle [Solved (nofix)]

Hmmm.....
Whats the Model of your USB-Adapter?


At work we use SoNNeT Solo 10 G Thunderbolt 3 adapters
I used them with Mikrotik before , no problems
by ConnyMercier
Thu Oct 28, 2021 10:08 pm
Forum: Wireless Networking
Topic: Virtual WIFI and VLAN's - driving me crazy
Replies: 36
Views: 2284

Re: Virtual WIFI and VLAN's - driving me crazy

I still have a CAPac somewhere...

I will configure it and send you the Export.
Give me 20 minutes
by ConnyMercier
Thu Oct 28, 2021 9:52 pm
Forum: Wireless Networking
Topic: Virtual WIFI and VLAN's - driving me crazy
Replies: 36
Views: 2284

Re: Virtual WIFI and VLAN's - driving me crazy

Oh am sorry..

VLAN101, VLAN 102 are not assigned to the bridge.
Then you can assign the DHCP-Server to the VLAN101, VLAN 102-Interfaces
by ConnyMercier
Thu Oct 28, 2021 9:28 pm
Forum: Wireless Networking
Topic: Virtual WIFI and VLAN's - driving me crazy
Replies: 36
Views: 2284

Re: Virtual WIFI and VLAN's - driving me crazy

You want to create a Bridge and assign all Interfaces to it.
Ether1, WLAN1, WLAN2, WLAN3, WLAN4, VLAN101, VLAN 102


Then everything should work, like you expect !
by ConnyMercier
Thu Oct 28, 2021 9:16 pm
Forum: Beginner Basics
Topic: Setting up VLANs on RB4011 on Multiple Ports for Switches
Replies: 10
Views: 941

Re: Setting up VLANs on RB4011 on Multiple Ports for Switches

Oh man, sorry ! :(
Forgot the RB40011 has 2 Switch-Chips
RTL8367 (ether1-ether5) and RTL8367 (ether6-ether10)



@mkx :
I though L2-Hardware offloading was posible in ROS6.X
Did i missunderstand the Wiki?
(https://help.mikrotik.com/docs/display/ ... p+Features)
by ConnyMercier
Thu Oct 28, 2021 4:57 pm
Forum: Beginner Basics
Topic: Setting up VLANs on RB4011 on Multiple Ports for Switches
Replies: 10
Views: 941

Re: Setting up VLANs on RB4011 on Multiple Ports for Switches

I hope this helps ... Step 1: Create Bridge /interface bridge add name=bridge1 vlan-filtering=yes Step 2: Create VLAN-Interfaces /interface vlan add comment="LAN" interface=bridge1 name=bridge1_vlan100 vlan-id=100 add comment="Guest Wifi" interface=bridge1 name=bridge1_vlan110 vl...
by ConnyMercier
Thu Oct 28, 2021 2:07 pm
Forum: General
Topic: Multi-wan failover with 2 LANs
Replies: 2
Views: 423

Re: Multi-wan failover with 2 LANs

It is possible to use only one Router !

many different ways to solve the problem
A lot of information on the Forum on the Subject


one way to do it,

Create TWO Routing-Tables
Routing-Table 1: WAN1 + Failover WAN2
Routing-Table 2: WAN3 + Failover WAN4

And to add the Routing-Mark via Mangel-Rules.
by ConnyMercier
Thu Oct 28, 2021 12:12 pm
Forum: Beginner Basics
Topic: RB4011iGS Beginner Configuration incl. VLAN (intern/guests/VoIP)
Replies: 31
Views: 2226

Re: RB4011iGS Beginner Configuration incl. VLAN (intern/guests/VoIP)

It's quite a nice Home-Network Setup! Am i correct ? Mikrotik for Routing & Switch Unifi for WLAN RaspberryPi as Unifi-Cloudkey If i am correct, its another wake-up call for mikrotik, to make better Wifi-AP =) Possible solution for your Fritz.Box: You could have another VLAN in your network and ...
by ConnyMercier
Thu Oct 28, 2021 11:29 am
Forum: Beginner Basics
Topic: Setting up VLANs on RB4011 on Multiple Ports for Switches
Replies: 10
Views: 941

Re: Setting up VLANs on RB4011 on Multiple Ports for Switches

Solution A: You can simply create a bridge for each VLAN and assign the VLAN-Interfaces to them. For exemple : /interface bridge add name=bridge_vlan100 add name=bridge_vlan200 /interface bridge port add bridge=bridge_vlan100 interface=ether5_vlan100 add bridge=bridge_vlan100 interface=ether10_vlan1...
by ConnyMercier
Thu Oct 28, 2021 1:31 am
Forum: Beginner Basics
Topic: Mikrotik hAP ac3 LTE6 RBD53GR and Canadian Rogers
Replies: 15
Views: 1156

Re: Mikrotik hAP ac3 LTE6 RBD53GR and Canadian Rogers

Can you please make a Screenshot of

Menu --> IP --> Addresses

AND

Menu --> LOG
by ConnyMercier
Thu Oct 28, 2021 12:38 am
Forum: Beginner Basics
Topic: Mikrotik hAP ac3 LTE6 RBD53GR and Canadian Rogers
Replies: 15
Views: 1156

Re: Mikrotik hAP ac3 LTE6 RBD53GR and Canadian Rogers

Do you have a "PIN" for the SIM-Card ?
Maybe that is missing ?


What do the Log says ?
by ConnyMercier
Wed Oct 27, 2021 11:50 pm
Forum: Beginner Basics
Topic: Problems with CRS125-24G-1S-2HnD
Replies: 19
Views: 1439

Re: Problems with CRS125-24G-1S-2HnD

:lol:
That's weird !
That doesn't make any sense !
by ConnyMercier
Wed Oct 27, 2021 9:53 pm
Forum: Wireless Networking
Topic: 60GHz Radio - PtP indoor with walls? [SOLVED]
Replies: 3
Views: 857

Re: 60GHz Radio - PtP indoor with walls? [SOLVED]

I use the Wireless-Wire to solve all kinds of Network-Problems. For Exemple: - Connectivity between two booth on a Trade shows and Fairs. - Connectivity between Buildings - or even connectivity between two floors of an old Building =) In my experience: Never implement the Wireless-Wire, if they don'...
by ConnyMercier
Wed Oct 27, 2021 9:31 pm
Forum: Beginner Basics
Topic: Problems with CRS125-24G-1S-2HnD
Replies: 19
Views: 1439

Re: Problems with CRS125-24G-1S-2HnD

Didn't quite understand the last part ...

As soon as you deleted theses Rules, you didn't have internet access anymore ?
/ip dhcp-server network
add address=31.11.XXX.XXX/21 gateway=31.11.XXX.XXX

/ip pool
add name=dhcp_pool1 ranges=31.11.XXX.XXX-31.11.XXX.XXX
by ConnyMercier
Wed Oct 27, 2021 10:22 am
Forum: General
Topic: Winbox via subnet
Replies: 6
Views: 451

Re: Winbox via subnet

You have some Error in your Config.

If you Post the config of the Mikrotik device, we can help
/export hide-sensitive file=anynameyouwish
by ConnyMercier
Wed Oct 27, 2021 10:19 am
Forum: Beginner Basics
Topic: Mikrotik hAP ac3 LTE6 RBD53GR and Canadian Rogers
Replies: 15
Views: 1156

Re: Mikrotik hAP ac3 LTE6 RBD53GR and Canadian Rogers

Good Morning,

Import this APN-Config and assign it to the LTE-Interface

/interface lte apn
add apn=ltemobile.apn name=Rogers
by ConnyMercier
Wed Oct 27, 2021 2:04 am
Forum: Beginner Basics
Topic: RB4011iGS Beginner Configuration incl. VLAN (intern/guests/VoIP)
Replies: 31
Views: 2226

Re: Vlan Configuration - Knots in head

@anav, i am sorry i didn't see your Post before posting my answer ! I imported the Config on my RB4001 and saw the /32 addresses After that PING will work ! Guten Morgen, You still have a small Error in your "/IP Address" configuration. This is the proper way to allocate your IP-Addresses ...
by ConnyMercier
Wed Oct 27, 2021 1:29 am
Forum: Beginner Basics
Topic: Problems with CRS125-24G-1S-2HnD
Replies: 19
Views: 1439

Re: Problems with CRS125-24G-1S-2HnD

What do you think about mentioned default rule "special dummy rule to show fasttrack counters" it can cuesd some problem? Is there any other way to delete it than "zero reset"? You have Fasttrack enabled at the moment. That is why the dummy rule is showing. If you use my Firewal...
by ConnyMercier
Wed Oct 27, 2021 1:27 am
Forum: Beginner Basics
Topic: Problems with CRS125-24G-1S-2HnD
Replies: 19
Views: 1439

Re: Problems with CRS125-24G-1S-2HnD

Here is a basic Firewall for you Router This is how it look's in Winbox : https://ibb.co/HzB6XC9 The Firewall is focused for ease of use and Diagnostic. Yet, I don't think you will see a Performance difference. Input (Internet--> Router) Filter-Rules 0 thru 7 are the Filters for Internet--> Router T...
by ConnyMercier
Tue Oct 26, 2021 9:36 pm
Forum: Beginner Basics
Topic: Problems with CRS125-24G-1S-2HnD
Replies: 19
Views: 1439

Re: Problems with CRS125-24G-1S-2HnD

If you want, i can make you a suggestion for a new Firewall

-> Simple and Clear
-> Protection against Brute-Force and Port-Scanner
-> Easely expandable

Would you like that ?



P. S: Maja and Wiola are beautiful names by the way!
by ConnyMercier
Tue Oct 26, 2021 8:22 pm
Forum: Beginner Basics
Topic: Problems with CRS125-24G-1S-2HnD
Replies: 19
Views: 1439

Re: Problems with CRS125-24G-1S-2HnD

Good Evening, 0. Bad News first ... I didn't find anything in the Config, that would explain your Problems. 1. Sensitive Information (Export) I just wanted to take the time and explain my Warning =) The Export-File contained a WAN IP-Pool , WAN IP in the Firewall and the Mikrotik Serial-Number**. **...
by ConnyMercier
Tue Oct 26, 2021 4:56 pm
Forum: RouterOS v7 BETA
Topic: Looking for Docker container ideas for RouterOS
Replies: 5
Views: 967

Re: Looking for Docker container ideas for RouterOS

I don't think the Docker-Feature will be widely used in the "Entreprise" enviroment. In other words, no Entreprise with On-Site virtualization capability, will move there DNS-Server to a Mikrotik-Device! It just doesn't make any sense =) having said that, I use Mikrotik-Devices all the tim...
by ConnyMercier
Tue Oct 26, 2021 1:21 am
Forum: Beginner Basics
Topic: Problems with CRS125-24G-1S-2HnD
Replies: 19
Views: 1439

Re: Problems with CRS125-24G-1S-2HnD

You have a lot of Public-Addresses...

I have a copy of your config, you can remove the Export !
by ConnyMercier
Tue Oct 26, 2021 12:48 am
Forum: Beginner Basics
Topic: Bandwidth Test Question
Replies: 4
Views: 592

Re: Bandwidth Test Question

As sayed by @ingdaka The Mikrotik Bandwidth-Test will only connect to a Device with an active mikrotik Bandwidth-Server. - This is usually another Mikrotik Device - but it can also be a Windows-Computer with the mikrotik-Tool running. (https://mt.lv/btest) For more Information, check the Wiki https:...
by ConnyMercier
Tue Oct 26, 2021 12:27 am
Forum: Beginner Basics
Topic: Problems with CRS125-24G-1S-2HnD
Replies: 19
Views: 1439

Re: Problems with CRS125-24G-1S-2HnD

Good Evening,

Do you see anything out of the ordinary in the LOG-File?

Is it possible to Post the config of the Mikrotik device?
/export hide-sensitive file=anynameyouwish
by ConnyMercier
Mon Oct 25, 2021 7:47 pm
Forum: Beginner Basics
Topic: RB4011iGS Beginner Configuration incl. VLAN (intern/guests/VoIP)
Replies: 31
Views: 2226

Re: Vlan Configuration - Knots in head

DNS is missing,
/ip dns
set allow-remote-requests=yes
by ConnyMercier
Mon Oct 25, 2021 12:36 pm
Forum: RouterBOARD hardware
Topic: [Request] CRS312-4C+8XG - disable zero rpm
Replies: 5
Views: 1345

Re: [Request] CRS312-4C+8XG - disable zero rpm

That was quick ! =)
by ConnyMercier
Mon Oct 25, 2021 6:05 am
Forum: Beginner Basics
Topic: Problems with CRS125-24G-1S-2HnD
Replies: 19
Views: 1439

Re: Problems with CRS125-24G-1S-2HnD

The diagnostic of an intermittent fault is usually more art than science :D Assuming you have a small Office-Environment , my best bet would be "Heavy Traffic" Somewhere a User or a Computer is hogging your Network-Bandwidth For exemple: -> Windows-Update (Quite active at the moment with W...
by ConnyMercier
Mon Oct 25, 2021 5:15 am
Forum: General
Topic: Block p2p from IP cameras - RB4011iGS+RM
Replies: 22
Views: 1696

Re: Block p2p from IP cameras - RB4011iGS+RM

You don't always have to reboot your Router, when adding Firewall-Rules... It was just a simple and error-proof way to terminate all "established" connections =) It has something to do with your Firewall Setup.... The Firewall works Top-Down and very the first Firewall-Rule for Foward-Traf...
  • 1
  • 2