MikroTik

Eliminateur

that's the issue, i can't think of way to identify the clients to add them to an address list. the thing is that the client ip is unknown and varying, i can't make a list beforehand. hmmm or a FW rule from LAN to the list of remote networks/hosts with action add source to address list should work(or...

Eliminateur

destination rules are of no consequence, those will be static for the entire lan to each remote subnet in its entirety. the return rules are the thing. your solution would not work, because the connections are established at system boot adnw ill be maintained up continuously, also, multiple stations...

Eliminateur

Hello, i have something peculiar to pull off in a routerboard that's acting as a pptp client concentrator: i want that the remote network have access ONLY to a computer that has initiated traffic on the LAN side, i dont know if that's clear enough, or here goes an example: i'm dialing N pptp connect...

Eliminateur

hello, i'm having a somewhat simple yet frustrating issue: i've setup a mikrotik box as a pptp-client concentrator(it will dial several PPTP client connections and route that traffic for the LAN), the pptp interfaces run ok, i've added specific routes for each pptp remote network, and ping from the ...

Eliminateur

no, of course they're not bridged, if they where bridged it would be like having two ip on the same interface which is where the problem originated.

if each of the etherx has an ip address assigned to it, how come they aren't ip interfaces?

Eliminateur

now the traffic from etherr1 to wan1 works, but the PBR is not working for the 2nd ISP, i see the mangle numb ers rising but i think i'm missing or doing something wrong on the masquerade... i forgot to add that i do have a 3rd network but that one is on a different interface and subnet so that one ...

Eliminateur

The loss of connectivity is because you don't have your LAN IP range excluded from PBR and/or included in every policy's routing table. This command will fix that problem: /ip route rule add dst=192.168.0.0/16 action=lookup-only-in-table table=main interesting, at first it didn't work UNTIL i physi...

Eliminateur

well i can't separate the subnets nor change the internal addressing at all, i tried setting the ips on different interfaces but the second i enable the 2nd ip all traffic to the RB stops so apparently it's not supported to have two IP from teh same subnet in different interfaces(and i can't have th...

Eliminateur

interesting i found out that if i enable the 2nd interface then the traffic dies... even if the interface is not yet physically connected...

what is going on!?!

Eliminateur

Hello, i have an issue with a very simple setup: there are two ISPs, A and B, and two ether interfaces in the SAME subnet (192.168.0.1/24 and 192.168.0.2/24). i want that traffic from stations that goes to ether1 uses ISP A, traffic to ether 2 goes to ISP B, nothing more than that...(by simply chang...

Eliminateur

it seems so, i did a ton of digging and seems to be a limitation of iptables as well... i'd use vlan but then i'd have issues on the switch because i don't know if the port would accept being in PVID 1 and having vlan 1 as tagged as well.. EDIT: nope, it farts rainbows, can't have the same vlan as t...

Eliminateur

hello, i need to mark some packets for PBR based on which IP of the local interface on the routerboard the station used as gateway, but i can't find any info about that. for example: ether0 has two ip: 192.168.0.1/24 and 192.168.0.2/24 i want that stations that use .1 go through WAN1 and the ones wi...

Eliminateur

this is not a discussion about having clear los and yadda yadda like that, PLEASE STICK TO WHAT I ASKED or refrain from giving opinions..
Again, WILL THERE BE 802.13AC mPCI RADIOS in the near future?

Eliminateur

Does mikrotik have a roadmap for 802.11AC radios in the near future?, specially on minipci for older installations (you could argue 133MB/s is "slow" but i call BS on that, reaching that speed on air is damn near impossible in reality) AND high power. i have a couple of dirty LoS long haul...

Eliminateur

uldis, that board stills fails to cover the need for ethernet ports for a decent router, it only has 3 ports which is nowhere near enough, a router (in the switch/router/all-in-one category) should have AT least 5 ports(and frankly 8 should be the standard)

Eliminateur

So i'm browsing the current list of integrated products and see a couple of interesting ones and after talking to a friend and showing them to him he says "no 5Ghz?!?". and indeed, there's NO simultaneous dual-band integrated option... so i tought "ok, i'll build it with a bare board!...

Eliminateur

i'll try that.
The idea is to move TO a bridged network, we already had a routed ntwork and the ammount of problems it brings just doesn't cut it, the topology is way too complicated with multiple gateways all over the place

Eliminateur

Hello, i have a bridged network that has two distinct DHCP servers on each side, problem is that it's giving wrong leases on both sides of the bridge. So i need to implement a bridge filter that stops one network to giving leases to the other and viceversa, how can i do this?. i've tried blocking br...

Eliminateur

i haven't had much success with my script, even with big time delays, it always logs 1970, looks like ntp client does not updates until looong after network is up.
is there a command to manually launch a NTP time update normis?

Eliminateur

anyone?
i've searched the documentation, wiki says nothing, manual says nothing other than explain what the value does

Eliminateur

excellent, i'm going to build a script on startup and then do
:delay 60
:log info null something

Eliminateur

Hello, there's a simple question, everytime a RB reboots, the first events are logged as 1970, NTP client then updates but nothing is logged, so there can be weeks passing untils omething triggers an event that logs something. how can i make a script that compares if the time is indeed correct and t...

Eliminateur

update:
i also tried it on a RB411 with 5.2, same problem

Eliminateur

i'm trying to setup webproxy on my RB750. system resources indicate 16.7mb free so i wanted to set a 4MB cache. This is how i have it now: [admin@fw] /ip proxy> print enabled: yes src-address: 0.0.0.0 port: 8080 parent-proxy: 0.0.0.0 parent-proxy-port: 0 cache-administrator: webmaster max-cache-size...

Eliminateur

thanks, using your script(much simpler as well) worked like a charm!

Eliminateur

Hello, i need to run a script in my ROS 5.5 box that simply emails the WAN IP if it changes. the WAN is a dhcp client standard ip i've tried both of the scripts here: http://wiki.mikrotik.com/wiki/Sending_your_self_an_e-mail_with_DSL_interface_IP_address (changing the mail send line as i have the ma...

Eliminateur

i hjave the same problem, i've implemented BOTH these scripts: http://wiki.mikrotik.com/wiki/Sending_your_self_an_e-mail_with_DSL_interface_IP_address the only change is in the: /tool e-mail send from=from@email_here_com to=to@email_here_com subject="DSL IP $strDate $strTime $strSystemName"...

Eliminateur

Hello, how do i control to which ports can the internal LAN clients access? i want to setup so that they can access a specific set of services as i'm seeing some strange traffic that eats my BW, so i added a rule on the forward chain with accept forward 80, 8080 on tcp then i have a couple of block ...

Eliminateur

anyone?, it still isn't working at all. and to add, how do i make that incoming connections go back throught the correct port?(i.e. how do i operate on a packet that is marked?, or a route for that effect?). edit, for greater simplification....: only ONE of the gateway goes through a ADSL modem whic...

Eliminateur

Hello, i need to implement a simple 2 wan failover, i've been racking my brians with the following topics: http://wiki.mikrotik.com/wiki/Advanced_Routing_Failover_without_Scripting http://wiki.mikrotik.com/wiki/Two_gateways_failover and this useful topic: http://forum.mikrotik.com/viewtopic.php?f=2&...

Eliminateur

fu**, you are so fast.. xD point 4, for wxample like this: /ip firewall mangle add action=mark-connection chain=input comment="IN router1" disabled=no in-interface=ether2-ISP1 new-connection-mark=ISP1_conn passthrough=no add action=mark-connection chain=input comment="IN router2"...

Eliminateur

chupaka, i found this thread looking for a simple way to failover two connections(one similar to this examples in which a external router brings up the adsl connection and the other one is standard ethernet). (btw, i have to finish reading the documentation about scopes and target scopes) i have a s...

Eliminateur

I need to setup a failover over 2 connections on my routerboard(i don't care about load balancing as that's another can of worms), the trick is that both WAN connections are DHCP(and possibly one of them will be PPPoE managed by ROS) and all the wiki examples use manually set static IP addresses for...

Eliminateur

sounds like yoor only RB that would support your environment is a RB433AH which has 3xmPCI, but only 3 FAST ethernet jacks(you could bond them together but you'll have to check the procurve and use 3 ports). The only other routerboard with gigabit lan ports and minipci slots is the RB800 but it's on...

Eliminateur

true, 12~16 ports gigaswitches price rise exponentially, but i'd be more than happy with an 8 port version, 5 ports is just too few(is the same with an encore adsl modem, 4 ports available), take this example: 1 port lost to modem/wan device 1 port to wifi backhaul/bridge/MAN link only 3 ports left ...

Eliminateur

most unfortunate, i was really expecting an 8 port+ gigabit routerboard(no, a rb1100 will not work for a soho/home router

) without a 2 digit pricetag, or a 493G without minipci slots, i guess i'll wait for next year to see if they come up with a >5port inexpensive version to consider deployment

Eliminateur

any news on the RB250GS?, please tell me it's a RB450G with 8+ ports......

5 ports just don't cut it for me and adding an 8port gigaswitch does not cut it money and spacewise(think Cisco RV200ish, 16 ports multi-wan router all-independant ports, VPN, ~300$)

Eliminateur

It's been a while since the virtualization support on MT and i've been wondering if it's still not posssible to put a windows guest in there. Or what way can i have to make the same box host windows+MT with minimum resources(a ESXi would need +2GB of ram just to install and HW direct access would be...

Eliminateur

Hello,
i have a 3COM switch(old one) and i'm wondering if it's possible to automatically map each station/device to the correct switch port, i know 3com network supervisor could do this(but i don't have it anymore).
Anyone has had success in doing this?

Eliminateur

Is there an event or some way to trigger a dynamic dns script(i.e. changeip one) on a interface IP change?.
triggering it by time is kind of a makeshift solution as there could be blackouts which the customer does not want

Eliminateur

4 days and not even a single hint?

anyone has any ideas?, any chance of seeing some documentation about it?(and no, the wiki doesn't even start mentioning guest support and "example" configuration and the manual...)

Eliminateur

I wonder if it's possible to virtualize a Windows XP guest under KVM in the x86 version of routerOS 4.x, has anyone tried this? (i know, taking into account hardware virtualization) Also, how can i present a hard drive to the guest(direct access)?, do i need to build an store on the drive and assign...

Eliminateur

i've been searching the wiki prior to posting and haven't found it(the wiki has a lot of unlinked pages, it should be easier to navigate from the root, yet....) one thing a friend mentioned is getting the 2nd gateway with a higher metric than the CM one. that's all nice, but how do i do gateway ping...

Eliminateur

Hello, i have a RB450 with a directly connected CM(standard IP) and there's a wireless router with a ADSL connection. the RB is 192.168.1.2 the router 192.168.1.1 right now, when the CM goes poof, users need to manually change heir DF gateway and it works. how can i make it so that RB does this auto...

Eliminateur

well i did all that and it kept failing, no log, so i redownloaded the file from the site and after upload the file manager showed "PACKAGE" which previously didn't show anything, now it works.
looks like the file got corrupted or sthing

Eliminateur

I have ROS 3.20 on a RB411 board, i copy the wireless test mipsbe 3.20 to the files and reboot, the file is still there and i don't see the wireless-test package.

what am i doing wrong?

Eliminateur

it's not practical as i can't cover all hosts/destinations, a general rule must work for any dest

but aren't queue trees more geared towards bandwidth control than priorization?

Eliminateur

my home router doesn't have telnet, it's closed in that aspect, most likely based in that network processor ASIC with packet shaping(can't remember the name now). normis: like i've said, i want to priorize EVERYTHING, be it incoming and outgoing for ANY source/destination address, then what, should ...

Eliminateur

but what's that target-address for?, i don't have a defined target for each rule as they're either to the internet or from any internal station

Eliminateur

it's a D-LINK gaming router, and i'll never put it in between, what's the point on doing that if i'm testing mikrotik for this matter, it's a router connected to a modem, i'm sure because i monitor in-game lag and have transfer graphs for downloads. What is your home router, make, model, firmware, Q...

Eliminateur

ADSL, 2.5mb down, 256K up i don't want to do BW control(or 99% as you say) because i need max speed in any given task, but the ability to game with ultra-low ping(as it where running alone) when using P2P and heavy downloading+uploading at the same time. my current "home" router can do thi...

Eliminateur

then what's the point of the ros accepting them, mark it as invalid instead! even so, the problem of duplicated inbound and outbound traffic is still there with other queues. is it so hard to do what i need to? prioritize small ACK packets, prioritize gaming traffic, depriorize P2P and large downloa...

Eliminateur

wrong about documentation point maybe, but that was not the main point of my situation which i detailed prviously and which i haven't resolved and it's not working at all. besides there's weirdness in how it works, if i use one type of queue, it doesn't show traffic at all, if i use small, it shows ...

Eliminateur

Hello, i'm breaking my head trying to figure out how to do a very very simple QoS priorization of traffic. there are 3 selectors: HTTP, Games, P2P i only want to priorize traffic, games priority 1, rest 8 and even more, P2P restricted to 128kbps upload internal network is NATtes via masquerading. i'...

Eliminateur

haha for me all i'm asking is a full gigabit "RB450" with hardware configurable switch(multi-domains, configurable via BIOS or software -hot config is too much to ask-) and multiple virtual interfaces for each domain(i.e. ports 2-4 in domain "1" gaina virtual "eth1" in ...

Eliminateur

evil normis

there's the issue of the thousand dollars of air tickets only to get a sneak peak

i'll have to wait for the newsletter then

(and hold on new purchases until then, i'd hate to buy units now and want to shot my foot later because a much better device came out for the task)

Eliminateur

What are the new RB models and specs?, unfortunately i won't be able to fly half the world and learn a new language to see them

.
Also, wheren't they already introduced in MUM brazil?

Eliminateur

i hope they put out the next newsletter soon, i'll hold on buying new units until i see what's coming

Eliminateur

How are the ports handled in the RB450? does ROS sees all 5 ports as eth0~4 ? can the ports be configured as switch?(either all of them together or selectively). What happens if i set all ports as switch with the "eth0" in ROS(does eth0 connects "internally" to the switch, thus a...

Eliminateur

CCQ is usually high 80's to 100% both ways when running 35mbit transfers. whilst transferring, noise floor doesn't moves(i've tried changing freq across the board no difference). frames vs HW frames doesn't shows much skew either, and signal str is -68~ (again, all this parameters are on a good day ...

Eliminateur

i hope someone from mikrotik sees this threads and sheds some light on the matter. my guess is that since the wireless interface MTU, the WDS MTU and the bridge MTU are all 1500 bytes, then the nstreme framer will never work(or doesn't appears to work). About my throughtput, i'm already using turbo(...

Eliminateur

noise floor is -103dB, there's noone in the entire area using 802.11a, SNR is usually above 25dB, 30+ when 54mbps is achieved. But the speed is capped @35mbps no matter what we do. i've tried ANI enabled/disabled, nothing. i'm using nstreme with polling and csma disabled, short preamble. but apart f...

Eliminateur

if you're using a OLD dual core P4, then a C2D like the E8400 series would be MUCH MUCH faster(it's integer performance is on the roof compared to the shitty netburst arch). dunno is 2.9.15 takes full advantage of the C2D, but even if it doesn't, a 2.4G E8400~ is much much faster than a 3GHz P4 dual...

Eliminateur

Hello, i have a simple PtP WDS bridge over wifi with nstreme. RB411 ROS 3.10 on both ends we've been doing speed tests(which are unsatisfactory as @108mbps we barely get 34~24mbps fluctuating TCP-SMB real speed, but that's another subject that doesn't come to the case now) and i've noticed that the ...

Eliminateur

I know that limitation, but broadcast is just another packet, why shouldn't i be able to forward it with all the "mangling" rules mikrotik has?.

i can't redesesign any of the other two networks as it ends up behing a nightmare and doesn't provides enough isolation

Eliminateur

we can't use bridge, there's already a bridge in place i haven't mentioned and it isn't working as it should, the two networks CAN'T have the same subnet, and when running this particular application that relies on broadcasts, it somehoiw DOSed the netB router(anopther non tik router) and apart from...

Eliminateur

Hello, i have two networks, netA and netB with different subnet mask and a mikrotik 3.10 between them. I need to forward broadcasts(255.255.255.255 global ones) between the two networks whilst performing two-way NAT on the those packets(so that a station originating a bcast on a net, receives broadc...

Eliminateur

dsobin, it's just what i need, block dhcp on both ends of the bridge. maybe just blocking 67/68 UDP will suffice without touching broadcast. the DHCP server is a non-MT router on one end of the network, on the other i don't know if there is a dhcp server. :(, too bad you can't remember, i hope that ...

Eliminateur

one more question, what's the proper usage form of bridge filter?. for example, i want to prevent the remote site from accesing one of my stations, which chain to i use? input, forward or output? also -this one's more tricky- i have a DHCP server on a router on my local lan, i want the remote LAN to...

Eliminateur

thanks dsobin for your data, it's been very helpful to clarify a lot of my doubts for now(and for the foreseable future) it'll stay in P2P only so i'll levae it in dynamic to minimize the hassle, even if a 2nd node is added, i'd need a 2nd routerboard+radio combo standalone from the 1st link(P2P-lan...

Eliminateur

i won't have that problem then, it's a P2P bridge, with only 1 of each interface, it's highly unlikely i'll swap cards(until they're broken, then a little downtime dueto forwarding won't hurt compared to the global downtime) or disable the ether/wlan interfaces. i'll check ont he WDS sub-interface f...

Eliminateur

hmm i'll double check my settings once i have both ends online again(waiting for the damn poe inyectors). Where do you put the MAC(i'm assuming you mean the MAC of the respective WLAN cards) of each partner in the WDS? Also, when you mean "pick one mac already assigned to a port" wouldn't ...

Eliminateur

in version 3.x then i can disable conntrack safely?(apart from the IP firewall) Do not disable connection tracking on a version 2.x router. This will also disable the router's ability to pass IP fragments across any bridge. On version 3.x routers, you can do this if you have disabled (the default) &...

Eliminateur

Ha, i only found out about this after contacting support(they promised they will put the information visible on the website somewhere as right now it's an undocumented problem). support told me the RB400 series(not only the 411) DO NOT SUPPORTS HW COMPRESSION if anyone could shed more light as to WH...

Eliminateur

Hello, seeing as how TCP sucks over wireless and UDP has *almost* no return traffice and it's perfect i embarked on a quest to find a protocol stack or sofware(preferably having seamless explorer integration) for UDP file transfer, as transparent and clean as possible (worse could be a client/server...

Eliminateur

*bump for the last question*

Eliminateur

JJ,
thanks for the answer, what i did was to not assign any IP to the bridge(only IP assigned is ether1) and it apparently works as it should, bridge connectes, traffic passes.

is there a need to put an IP address on the bridge itself for my P2P scenario?

Eliminateur

Hello, i'm running two RB411 with R52 in turbo-A mode in WDS transparent bridge mode, i've disabled conntrack, disabled all packages but the basic ones(system, wireless, adv tools, security and routerboard). i'm running ROS 3.10 and bios 2.15 links stablish in 36mbpsx2 each way, i'm running TCP test...

Eliminateur

I'm testing this and seeing the wiki, in te wiki it assigns IP to the interfaces, but a transparent bridge should be protocol-independant (i mean, even if i have the ip 192.168.0.x on ether1, it should still pass ANY traffic regardless of ip and protocol). will it work like that?. what's the point o...

Eliminateur

Hello,
i want to build a not-so-transparent bridge between 2 networks, the thing is that i don't want both networks to have full visibility.
so i want to filter the MAC that can access the bridge on each side of both networks.

can i do this with routeros in WDS bridge mode?, how?

Eliminateur

Hello, i have 2 RB411 stock boards, level 3 license i want to build a transparent bridge, i've read: http://wiki.mikrotik.com/wiki/Transparently_Bridge_two_Networks and http://forum.mikrotik.com/viewtopic.php?f=7&t=23952&hilit=bridge (which pointed to the former) but AFAIK, i can't use WDS A...

Eliminateur

Read The Fine Manual

Read my post first before posting useless comments, all the things i've asked aren't specified in the manual

Eliminateur

anyone?

Eliminateur

As you can see fromt he title, i have a ton of questions!, here they are: 1) nstreme can do packet framing(disabled by default) but so can M3P, does M3P work for bridge?, which framing works better?, can i use M3P AND nstreme(leaving framing disabled?, what if i enable framing on nstreme as well?)? ...

Eliminateur

i've downloaded Radio Mobile to give it a shot for a simple link, and i find it extremely daunting to the point i have no idea what to do :( Any guides or easy howtos for wifi? I noticed that you did a lot of very complex things to try to look at your path, when you could just use Radio Mobile to do...

Eliminateur

AFAIK the limit is the CPU, it's too powerless to handle more throughtput, so if you put 2 cards, you'll get the same speed over 2 of them

Eliminateur

Which cards currently support 900MHz in the routerboard series apart from the Ubiquiti SR-9 ?

Eliminateur

i meant on the minipci boards, not the host board

so either if i lower or raise tx power, i'll fry it?

Eliminateur

which minipci boards support 900MHz?

Eliminateur

i thought about that, but 900MHz is licensed here and getting a licence(not to mention getting new antennaes) would be more troublesome and expensive than running a fiber-optic cable undrground between the sites.

Eliminateur

Hi, i have to link 2 sites that are ~ 1KM away(city, suburb). one site has a 30mt tower, that's no problem, the other site is a 2-story house roof on which a tower isn't allowed, so it will have a 3mt mast(2mt from the tallest point), the tallest point in the house must be 10mts~ the problem: a tree...

Eliminateur

A2, B2 (and C maybe) will probably be mesh-WDS so that they act like a wire for all purposes and intents. i wonder if running WDS i can also set a EoIP tunnel on the C mikrotik... Also, EoIP supports transparent tunneling?(i.e. if i choose 192.168.0.x/24 for both site B and C, will it be able to for...

Eliminateur

Nickw, yeah, that looks like the solution, the problem is thhe mikrotik gateway behind each wireless bridge, can a dual-bridge be done?(all the wireless utiks will be WDS mesh so the main problem is the mikrotiks behind them), or using EoIP solves that on the B-1 gateway?

Eliminateur

Glaxynet, site C is my house, site B is a friend's house and site A is my friend's workplace. since we want 100% transparent function because of lan games and stuff that refuses to work with different address space, we need transparent bridge between mine and his house. now, he also needs to access ...

Eliminateur

yes, the inner microtiks all are wlan only as they are RB133c-series.
and it's only one antennae for both sites, not separate WLAN cards

Eliminateur

Hello, i'm running my head intoa wall firguring how to make this work: as you see in the schematic, i have 3 sites, Site A and B have microtik as main routers and site C has a normal hardware router. each site has it's own internet connection. the goal here is that site C and B need to be bridged an...

Search found 96 matches