Community discussions

Search found 472 matches

  • 1
  • 2
by nickshore
Fri Oct 11, 2019 2:39 pm
Forum: Wireless Networking
Topic: Audience vs Eero?
Replies: 27
Views: 3790

Re: Audience vs Eero?

I tested the meshing a couple of days ago. 1) power up the 1st Audience which you will use as the main AP 2) press the wps-sync button briefly, the light on the front starts flashing green 3) power up the next Audience device whilst holding the wps-sync button, keep holding until the light on the fr...
by nickshore
Tue Oct 08, 2019 11:38 am
Forum: RouterBOARD hardware
Topic: DISC Lite5 ac PtP NV2 Hickups and generally disapointing performance
Replies: 15
Views: 3831

Re: DISC Lite5 ac PtP NV2 Hickups and generally disapointing performance

Antenna gain on a Disc should be set to 21, you are running far too much power for a short link.

I could add antenna gain in the interface setting, do you think it is a good idea?
by nickshore
Fri Sep 20, 2019 4:13 pm
Forum: General
Topic: One public address per LAN
Replies: 3
Views: 573

Re: One public address per LAN

Nick, any practical example of rule ? i.e. : 192.168.1.0/24 (ether4) will use 10.20.30.1/29 on ether1 192.168.2.0/24 (ether5) will use 10.20.30.2/29 on ether1 and so on... Still masquerade rule needed ? Thank you Try /ip firewall nat add chain=srcnat place-before=1 src-address=192.168.1.0/24 action...
by nickshore
Wed Sep 18, 2019 3:44 pm
Forum: General
Topic: One public address per LAN
Replies: 3
Views: 573

Re: One public address per LAN

Put the /29 IPs on the interface and then use a srcnat rule for each subnet to srcnat to the IP address you wish to use.

Regards
Nick
by nickshore
Fri Sep 13, 2019 5:07 pm
Forum: Beginner Basics
Topic: Router cannot reach certain websites.
Replies: 2
Views: 444

Re: Router cannot reach certain websites.

If you show us your config it would help.

use /export and then we can see what is wrong.

Also provide the output of /ip route print

Regards
Nick
by nickshore
Wed Sep 11, 2019 1:58 pm
Forum: Wireless Networking
Topic: Bit confused by the existence of the hAP AC Lite?
Replies: 15
Views: 1369

Re: Bit confused by the existence of the hAP AC Lite?

My confusion was not so much over price as to why this model exists at all and what are the usage cases. I guess here in the UK if you're lucky enough to get near the maximum VDSL2 speed (80Mbps), then it would be useful as the most as I could get out of my little hAP mini (which I'm using for teac...
by nickshore
Fri Sep 06, 2019 5:47 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 196
Views: 36414

Re: RouterOS v7.0beta1 (ARM)

Try putting your router on latest v6 Stable or Testing release before upgrading to the v7 beta



Labtest beta? I tried the link on the first page. http://mt.lv/v7
by nickshore
Thu Sep 05, 2019 6:40 pm
Forum: Wireless Networking
Topic: Cap interface down/up [SOLVED]
Replies: 3
Views: 458

Re: Cap interface down/up [SOLVED]

The interface will be marked down when there are no clients connected.
by nickshore
Wed Sep 04, 2019 5:23 pm
Forum: Wireless Networking
Topic: SXT LTE not connecting to LTE
Replies: 2
Views: 431

Re: SXT LTE not connecting to LTE

Can you tell which band your phone is using ?

Which bands do you have selected on the SXT ?
by nickshore
Wed Jul 24, 2019 2:12 pm
Forum: Wireless Networking
Topic: Wifi equipment for 70m distance behind windows
Replies: 14
Views: 1206

Re: Wifi equipment for 70m distance behind windows

We have a 60m wireless wire link here with one end in a window, and the other outside which works fine.

However it may not work depending on the type of glass.

Regards
Nick
by nickshore
Thu Jul 11, 2019 6:26 pm
Forum: General
Topic: CCR1036-12G-4S dual PSU or not?
Replies: 3
Views: 341

Re: CCR1036-12G-4S dual PSU or not?

The dual PSU version has r2 at the end of the model number on the product sticker.

They have only recently started shipping the revised model with dual PSU.

Regards
Nick
by nickshore
Mon Jun 03, 2019 12:44 pm
Forum: RouterBOARD hardware
Topic: RB3011 POE-In Not Working
Replies: 2
Views: 425

Re: RB3011 POE-In Not Working

The 3011 only takes passive PoE between 10 and 30V, but your switch is an 802.3af PoE switch, so won't power it.

You can use a PoE converter to do this, https://mikrotik.com/product/rbgpoe_con_hp

Hope that helps
Nick
by nickshore
Tue May 28, 2019 2:07 pm
Forum: RouterBOARD hardware
Topic: S+2332LC10D Availability ?
Replies: 2
Views: 421

Re: S+2332LC10D Availability ?

We have stock:
https://linitx.com/product/mikrotik-pai ... 10d)/14558

and they are still also available to order more from Mikrotik.

regards
Nick
by nickshore
Fri May 17, 2019 2:23 pm
Forum: Scripting
Topic: Setting up mikrotik in enterprise environment
Replies: 1
Views: 407

Re: Setting up mikrotik in enterprise environment

On each device you should have the ethernet and the wlan in a bridge

You should have a dhcp-client on the bridge

On the wireless set one end as Bridge, and the other as station bridge, then they will just be a transparent layer 2 bridge.

Hope that helps
Nick
by nickshore
Tue Apr 23, 2019 6:28 pm
Forum: Beginner Basics
Topic: internet not working despite pingable addresses
Replies: 10
Views: 474

Re: internet not working despite pingable addresses

If you just make sure that the in interface on those 2 rules is set to be your WAN interface then only traffic coming in on the WAN will be affected by them, without that the rules will intercept the traffic on all interfaces.

Regards
Nick
by nickshore
Tue Apr 23, 2019 4:13 pm
Forum: Beginner Basics
Topic: internet not working despite pingable addresses
Replies: 10
Views: 474

Re: internet not working despite pingable addresses

Looks like you are NATing all port 80 and 443 traffic to an internal IP
add action=dst-nat chain=dstnat dst-port=80 protocol=tcp to-addresses=192.168.50.7 to-ports=80
Try setting an in interface on these rules.

Regards
Nick
by nickshore
Mon Mar 11, 2019 2:31 pm
Forum: General
Topic: RoMON function
Replies: 3
Views: 311

Re: RoMON function

You may need to check any filtering settings on the switch.

It sounds like the switch is filtering all packets in 01:80:c2:00 rather than just the range which is supposed to be excluded.

Only this part should be filtered 01-80-C2-00-00-00 to 01-80-C2-00-00-0F

Regards
Nick
by nickshore
Tue Feb 12, 2019 3:31 pm
Forum: Announcements
Topic: v6.42.12 [long-term] is released!
Replies: 27
Views: 6611

Re: v6.42.12 [long-term] is released!

What does this mean ?

*) wireless - improved antenna gain setting for devices with built in antennas;

It would be nice if it knew the antenna gain of the device, just tested on a 4011 with wireless, and nothing obvious in winbox.
by nickshore
Tue Jan 29, 2019 2:11 pm
Forum: Beginner Basics
Topic: Port forwarding doesn't work over SSH [SOLVED]
Replies: 16
Views: 1850

Re: Port forwarding doesn't work over SSH [SOLVED]

Firstly, no need to set to-ports in the nat rule, only use this if you are changing the to-port

Secondly, the filter rule needs to use the IP of the internal device, eg after the NAT has happened.

Hope that helps
Nick
by nickshore
Wed Jan 02, 2019 6:48 pm
Forum: General
Topic: Hacked Board
Replies: 15
Views: 1568

Re: Hacked Board

If services were available from the LAN, then an infected PC on the LAN could exploit the router from the LAN side.
by nickshore
Thu Dec 20, 2018 3:44 pm
Forum: Beginner Basics
Topic: Port forwarding problem
Replies: 2
Views: 339

Re: Port forwarding problem

1) don't specify the to-port=80, you don't need to if the port is the same.

2) check that you have an ip filter forward chain rule which allows the traffic to port 80 on 10.0.0.101

3) check that the device 10.0.0.101 has a default route back to the routerboard.
by nickshore
Thu Dec 20, 2018 3:41 pm
Forum: Beginner Basics
Topic: Neighbors problems
Replies: 3
Views: 492

Re: Neighbors problems

Turn off neighbour discovery on the CPE interface, or use a bridge filter to control the MNDP packets.
by nickshore
Thu Dec 20, 2018 3:39 pm
Forum: Beginner Basics
Topic: fallback partition
Replies: 3
Views: 350

Re: fallback partition

When the router boots it uses the active partition, if that fails then it tries the next partition. That is all it does.
by nickshore
Fri Dec 14, 2018 1:24 pm
Forum: Wireless Networking
Topic: Wireless allowing only one client
Replies: 2
Views: 359

Re: Wireless allowing only one client

It sounds like you have the wireless mode set to Bridge.

It needs to be AP Bridge.

Hope that helps
Nick
by nickshore
Tue Dec 11, 2018 1:20 pm
Forum: Wireless Networking
Topic: Newbie: LHG 5ac only hitting 100mbps
Replies: 30
Views: 2056

Re: Newbie: LHG 5ac only hitting 100mbps

Ceee means 1 control channel plus 3 extension channels so a total of 80MHz, in fact your status screen shows 80MHz When you btest you should not btest on the devices, the CPU will max out, you should btest between other devices connected to both ends. Also the signals are much too high, which will n...
by nickshore
Mon Dec 10, 2018 6:28 pm
Forum: General
Topic: Cannot upgrade at all!
Replies: 7
Views: 468

Re: Cannot upgrade at all!

Make sure you have set the logging to disk and try again
by nickshore
Mon Dec 10, 2018 5:55 pm
Forum: General
Topic: Cannot upgrade at all!
Replies: 7
Views: 468

Re: Cannot upgrade at all!

Is there anything in the logs ?
by nickshore
Mon Dec 10, 2018 4:37 pm
Forum: RouterBOARD hardware
Topic: hardware idea for a multiport switch
Replies: 45
Views: 8608

Re: hardware idea for a multiport switch

Cabling nightmare ?
by nickshore
Mon Nov 12, 2018 1:02 pm
Forum: RouterBOARD hardware
Topic: hAP AC2 availability
Replies: 26
Views: 4221

Re: hAP AC2 availability

We are the biggest UK distributor for MikroTik and we have stock:

https://linitx.com/product/mikrotik-rou ... hape/15370


Hope that helps
Nick
by nickshore
Wed Oct 24, 2018 5:32 pm
Forum: General
Topic: CRS125 poor throughput & low cpu load [SOLVED]
Replies: 41
Views: 2415

Re: CRS125 poor throughput & low cpu load [SOLVED]

I have problem with my CRS125 and ethernet throughput. I can reach roughly 50mbit/s to my WAN port. I'm having NAT in WAN, I have enabled fasttrack and changed WAN port queue type to ethernet-default. CPU load is about 30-40% and still I can't reach even close of my Internet connection speed (250mb...
by nickshore
Thu Oct 18, 2018 4:13 pm
Forum: General
Topic: Problem with speed limitations
Replies: 3
Views: 516

Re: Problem with speed limitations

I would suggest that you look at the perfomance test results for this device:

https://mikrotik.com/product/CRS112-8G- ... estresults

This is not a fast router, it is mainly a switch, so you don't really have the right device for a 1Gig internet feed.

Nick
by nickshore
Sat Oct 13, 2018 11:50 am
Forum: Scripting
Topic: Portknocking by script.
Replies: 9
Views: 2771

Re: Portknocking by script.

You could use a variation on port knocking but using icmp and various packet sizes.

Then the client can use the ping command with size set to execute the knock

Hope that helps
Nick
by nickshore
Thu Oct 11, 2018 5:40 pm
Forum: Beginner Basics
Topic: How can I check if my CAP is correctly provisioned by the CAPsMAN?
Replies: 2
Views: 426

Re: How can I check if my CAP is correctly provisioned by the CAPsMAN?

Looks like you have it set on channel 3, and only g, what did you set it to on the capsman ?

You should make sure you are using non-overlapping channels, and the correct 802.11 protocols, such as g/n

Nick
by nickshore
Tue Sep 25, 2018 6:16 pm
Forum: Beginner Basics
Topic: wAP LTE kit setup
Replies: 3
Views: 2628

Re: wAP LTE kit setup

Modem isn't configured yet normally means the SIM is not in place correctly.

Are you using the correct sim size ?
by nickshore
Fri Aug 24, 2018 5:03 pm
Forum: RouterBOARD hardware
Topic: Please give a remote hard reset option!!!
Replies: 11
Views: 1503

Re: Please give a remote hard reset option!!!

i am currently facing a situation where the device needs to be reset but the rains and winds are too strong to climb the tower and the client has his entire production machines cutoff from the server as the PTP link is down.


And you can't just mac-telnet in ?
by nickshore
Wed Jun 13, 2018 6:04 pm
Forum: Wireless Networking
Topic: CAPsMAN unable to manage its own Wireless interface
Replies: 16
Views: 3604

Re: CAPsMAN unable to manage its own Wireless interface

Did you make sure the interface was removed from capsman ?

The only time it should be doing it by IP is if you specify the IP of the capsman when setting up the cap.
by nickshore
Wed Jun 13, 2018 4:13 pm
Forum: Wireless Networking
Topic: CAPsMAN unable to manage its own Wireless interface
Replies: 16
Views: 3604

Re: CAPsMAN unable to manage its own Wireless interface

You don't seem to have a discovery interface selected, probably because you are trying a layer3 connection. I use: /interface wireless cap set discovery-interfaces=bridge1 enabled=yes interfaces=wlan1 In your case it is probably bridge-local, and remove the capsman IP, then it will use L2 to find th...
by nickshore
Wed May 16, 2018 6:32 pm
Forum: Beginner Basics
Topic: Request help! RouterOS Configuration screwed up. [SOLVED]
Replies: 25
Views: 2594

Re: Request help! RouterOS Configuration screwed up. [SOLVED]

Please remember that you should stick with bugfix channel for production routers.
by nickshore
Tue May 15, 2018 5:53 pm
Forum: Wireless Networking
Topic: HAP AC and HAP AC Lite WiFi issues 6.42.1?
Replies: 14
Views: 1938

Re: HAP AC and HAP AC Lite WiFi issues 6.42.1?

Yes it is in the additional packages download.
by nickshore
Tue May 15, 2018 11:16 am
Forum: Wireless Networking
Topic: HAP AC and HAP AC Lite WiFi issues 6.42.1?
Replies: 14
Views: 1938

Re: HAP AC and HAP AC Lite WiFi issues 6.42.1?

For production systems you should use the bugfix branch, which is currently on 6.40.8

Bugfix includes any security fixes.

Nick
by nickshore
Fri May 11, 2018 4:49 pm
Forum: General
Topic: Can route to internet but not between local Subnets
Replies: 10
Views: 740

Re: Can route to internet but not between local Subnets

It is best if you export the whole config so that we can see it.

I am guessing it is related to NAT rules.

Nick
by nickshore
Fri May 11, 2018 12:23 pm
Forum: Wireless Networking
Topic: WAP60G 60 Ghz P2P Range and deployment advice
Replies: 22
Views: 3399

Re: WAP60G 60 Ghz P2P Range and deployment advice

Currently only available in PtP and needs a minimum antenna gain of 30dBi, which the WAP60 does not have.

Ofcom have recently consulted on 60GHz PtMP usage and micro cells, (lower antenna gain requirements) but they have not yet issued any actions/changes.

Nick
by nickshore
Thu May 10, 2018 12:35 pm
Forum: General
Topic: Winbox Login over Windows Server RADIUS [SOLVED]
Replies: 15
Views: 2123

Re: Winbox Login over Windows Server RADIUS [SOLVED]

I don't know about radius on windows, but on freeradius we send a radius reply containing:
MikroTik-Group=full
which maps onto the user group on the Router.

Hope that helps
Nick
by nickshore
Thu May 03, 2018 12:34 pm
Forum: Beginner Basics
Topic: Conditional 'Mark Routing' only if interface available
Replies: 6
Views: 813

Re: Conditional 'Mark Routing' only if interface available

Just add the fallback route with a greater distance into this L2TPVPN table.

Then when the l2tp interface is down the first route won't be used.

Hope that helps
Nick
by nickshore
Mon Mar 26, 2018 12:28 am
Forum: Beginner Basics
Topic: DHCP Server use different DNS on specified IPs [SOLVED]
Replies: 6
Views: 2297

Re: DHCP Server use different DNS on specified IPs [SOLVED]

You can add /32s into the DHCP network settings so that you can override settings for individual IPs
by nickshore
Thu Feb 22, 2018 7:09 pm
Forum: General
Topic: Bridge Fast-Forward
Replies: 2
Views: 5150

Re: Bridge Fast-Forward

It is only available when there are only 2 interfaces in the bridge, no more, no less.
by nickshore
Tue Jan 09, 2018 11:43 am
Forum: General
Topic: Issue with Getting DHCP IP using Bridge interface.
Replies: 5
Views: 3477

Re: Issue with Getting DHCP IP using Bridge interface.

Did you make sure that you set an admin-mac on the bridge ?
by nickshore
Fri Dec 08, 2017 9:10 pm
Forum: RouterBOARD hardware
Topic: RBM33G who is selling
Replies: 2
Views: 565

Re: RBM33G who is selling

They haven't shipped any M33G yet.

We have them on backorder, but Mikrotik are currently saying no availability until end of Dec, so we hope to see them in January

Nick
by nickshore
Wed Dec 06, 2017 5:21 pm
Forum: Beginner Basics
Topic: IPv6 on WAN no cimp
Replies: 15
Views: 1013

Re: IPv6 on WAN no cimp

Did you add a default route ? Maybe if you show us an export of your /ipv6 that will help
by nickshore
Mon Nov 27, 2017 5:53 pm
Forum: General
Topic: Mikrotik with external free radius server
Replies: 3
Views: 382

Re: Mikrotik with external free radius server

Have you added your routerboard as a NAS on the freeradius server ?
by nickshore
Thu Nov 16, 2017 6:41 pm
Forum: RouterBOARD hardware
Topic: Mikrotik VDSL / DSL Modem?
Replies: 314
Views: 87933

Re: Mikrotik VDSL / DSL Modem?

I have been testing a 180-T but it seems to resync every 10-12 hours.

It does sync at a high speed on my line, and latency is low when it is working, but drops twice a day.

Has anyone else seen this sort of instability ?

Nick
by nickshore
Wed Nov 15, 2017 7:07 pm
Forum: General
Topic: Buying Advice
Replies: 5
Views: 627

Re: Buying Advice

by nickshore
Wed Oct 25, 2017 5:45 pm
Forum: General
Topic: Winbox Profile TACAS or Raduis
Replies: 2
Views: 502

Re: Winbox Profile TACAS or Raduis

See https://wiki.mikrotik.com/wiki/Manual:R ... Remote_AAA for RADIUS

You can set a default user group for all logins, maybe read only, and then override that in the radius response.

eg set MikroTik-Group = full

Hope that helps
Nick
by nickshore
Fri Oct 20, 2017 4:06 pm
Forum: RouterBOARD hardware
Topic: SXT Lite5 ac 2.4GHz interface
Replies: 3
Views: 1057

Re: SXT Lite5 ac 2.4GHz interface

The 2.4GHz interface is only really meant for management.

The level 3 licence means that only one client can connect, you have to use Bridge mode, not AP Bridge.

Also the antenna gain on the 2.4GHz is only 1.5 dBi which will not provide much range.

Nick
by nickshore
Fri Sep 29, 2017 1:52 pm
Forum: General
Topic: Upgrading of historical boards - can't get to 4.x
Replies: 4
Views: 595

Re: Upgrading of historical boards - can't get to 4.x

From memory you need to get it to 3.30 first
by nickshore
Wed Sep 13, 2017 3:13 pm
Forum: General
Topic: Static Route Metric Logic Problem (in case of using PPPOE and PPTP connection concurrently) [SOLVED]
Replies: 2
Views: 513

Re: Static Route Metric Logic Problem (in case of using PPPOE and PPTP connection concurrently) [SOLVED]

The route selected is first decided based on the smallest subnet mask which matches.

Only if 2 identical routes are available is the metric used.

Nick
by nickshore
Tue Sep 12, 2017 2:05 pm
Forum: General
Topic: Using SFP port as regular rj-45 port [SOLVED]
Replies: 2
Views: 559

Re: Using SFP port as regular rj-45 port [SOLVED]

Yes you can use an RJ01 to do this.
by nickshore
Mon Jul 24, 2017 3:42 pm
Forum: Beginner Basics
Topic: [SOLVED] Assign Static IPs in RB3011 to four RB952 serving as access points
Replies: 7
Views: 727

Re: Assign Static IPs in RB3011 to four RB952 serving as access points

:) Yes thats the one, you can see above that it has chosen a mac address of one of the interfaces assigned to the bridge. If you take the mac address it is currently using, which starts 6C and make it start 6E instead then you will have set a special private admin mac which will be unique and won't ...
by nickshore
Mon Jul 24, 2017 2:23 pm
Forum: Beginner Basics
Topic: [SOLVED] Assign Static IPs in RB3011 to four RB952 serving as access points
Replies: 7
Views: 727

Re: Assign Static IPs in RB3011 to four RB952 serving as access points

I'm guessing that you have put the dhcp-client on the bridge on the APs. The DHCP client will use the mac address of the bridge. If you have not set an admin mac on the bridge then the bridge will pick a mac from the interfaces in the bridge, and that can change. So the answer is, set an admin mac o...
by nickshore
Fri May 12, 2017 4:39 pm
Forum: General
Topic: LNS for PPP termination
Replies: 12
Views: 2520

Re: LNS for PPP termination

Can you post an example config for this ?
by nickshore
Thu May 11, 2017 7:05 pm
Forum: General
Topic: Firewall rules only using one CPU
Replies: 8
Views: 1014

Re: Firewall rules only using one CPU

If they are already in your address list then don't match them again on the L7 matcher !
by nickshore
Tue Mar 28, 2017 5:16 pm
Forum: Beginner Basics
Topic: dual SSID
Replies: 7
Views: 925

Re: dual SSID

You need to use a Virtual Wireless interface for each extra SSID

See
https://wiki.mikrotik.com/wiki/Manual:I ... #VirtualAP

Nick
by nickshore
Thu Mar 16, 2017 4:00 pm
Forum: General
Topic: Yet another "dhcp,warning offering lease without success" issue
Replies: 38
Views: 13071

Re: Yet another "dhcp,warning offering lease without success" issue

I have seen this happen where the DHCP server is on a bridge, and the admin-mac has not been set on the bridge.

It is always good practice to set an admin-mac

Nick.
by nickshore
Tue Mar 14, 2017 5:10 pm
Forum: Wireless Networking
Topic: Considering setting up ptp link between my parents house to my house, any advice?
Replies: 13
Views: 1318

Re: Consider setting up ptp link between my parents house to my house, any advice?

You can use Bridge mode on an SXT lite5 which allows 1 client to connect.
by nickshore
Tue Feb 21, 2017 6:14 pm
Forum: General
Topic: Hairpin nat weirdness
Replies: 24
Views: 2861

Re: Hairpin nat weirdness

Its very hard to work out what is happening when you hide the IPs with XX.XX.XX.XX

Normally to avoid the need for hairpin NAT you use internal static dns to point at the internal IPs instead.
by nickshore
Mon Jan 30, 2017 1:45 pm
Forum: Beginner Basics
Topic: Routing two Networks on one CRS125-24G-1S
Replies: 2
Views: 475

Re: Routing two Networks on one CRS125-24G-1S

The modem needs to be able to reply to an IP which is not in its subnet. If you can add a static route on the modem for 192.168.1.0/24 via 192.168.0.1 then this will work. Otherwise add a srcnat masquerade rule on the mikrotik for dst address 192.168.0.2 Then the modem will see traffic from 192.168....
by nickshore
Thu Dec 08, 2016 3:52 pm
Forum: General
Topic: How to Schedule blocking a client connected to external AP?
Replies: 2
Views: 408

Re: How to Schedule blocking a client connected to external AP?

The input chain is for traffic to the router.

To restrict traffic going through the router to the client you should use the forward chain.

Nick
by nickshore
Wed Dec 07, 2016 6:32 pm
Forum: General
Topic: input drop all rule - moved by accident!!
Replies: 18
Views: 2720

Re: input drop all rule - moved by accident!!

there is an rj45 on the back or just use winbox to a mac address if you are plugged into one of the ethernets
by nickshore
Fri Dec 02, 2016 6:17 pm
Forum: Wireless Networking
Topic: CAPsMan question
Replies: 3
Views: 689

Re: CAPsMan question

Power level is managed using the antenna gain setting on wireless settings of the AP, and the region setting in capsman.
by nickshore
Mon Oct 31, 2016 6:12 pm
Forum: RouterBOARD hardware
Topic: RB3011UiAS-RM hard to find one
Replies: 8
Views: 1740

Re: RB3011UiAS-RM hard to find one

We have new stock arriving in approx 8 days

https://linitx.com/product/mikrotik-rou ... -psu/14584

Nick
by nickshore
Mon Oct 31, 2016 5:38 pm
Forum: Forwarding Protocols
Topic: BGP Full Table time
Replies: 11
Views: 5025

Re: BGP Full Table time

The thing about having 1M+ routes in the table has been search time for me, less about convergence and loading. This is where Cisco and other platforms have killed it over Mikrotik for me - if I want to look up the current active route entry for 8.8.8.8 (for example). the search time on a 1036 with...
by nickshore
Thu Oct 20, 2016 6:52 pm
Forum: Beginner Basics
Topic: Dead Board? [solved]
Replies: 3
Views: 677

Re: Dead Board?

by nickshore
Thu Oct 20, 2016 4:47 pm
Forum: Beginner Basics
Topic: Please check my setup
Replies: 3
Views: 721

Re: Please check my setup

You need to work on the problem, by breaking it down into separate parts. eg you mention a PtP link using SXTs, is this reliable can you ping end to end, what are the settings on it etc Then once you have proved the wireless link is ok, can you then ping from the RB across to the other router ? Then...
by nickshore
Thu Oct 20, 2016 2:19 pm
Forum: General
Topic: Horrible experience with wireless. In need of a fix.
Replies: 10
Views: 1314

Re: Horrible experience with wireless. In need of a fix.

To make a PtP link like this you would be better off using a pair of SXTs, usually the SXT lite5

Nick
by nickshore
Tue Oct 18, 2016 11:33 am
Forum: Wireless Networking
Topic: Wi-Fi min password length
Replies: 1
Views: 468

Re: Wi-Fi min password length

WPA has a minimum of 8 characters.
by nickshore
Fri Sep 30, 2016 5:21 pm
Forum: Wireless Networking
Topic: Wireless Upload Speeds
Replies: 7
Views: 1006

Re: Wireless Upload Speeds

what channel width are you using ?

what modulation rates are the clients connected at ?
by nickshore
Thu Aug 04, 2016 12:53 pm
Forum: General
Topic: Fast Bandwidth Test, But Slow Real Throughput
Replies: 5
Views: 1325

Re: Fast Bandwidth Test, But Slow Real Throughput

Have you checked that the links are not causing interference to each other ?
by nickshore
Wed Aug 03, 2016 4:00 pm
Forum: RouterBOARD hardware
Topic: QRT2 - waiting on one since April, problem ?
Replies: 8
Views: 1081

Re: QRT2 - waiting on one since April, problem ?

MikroTik's ordering system says 9th September for the next batch.

Hope that helps

Nick
by nickshore
Fri Jul 15, 2016 12:27 pm
Forum: Wireless Networking
Topic: seamless roaming not working properly
Replies: 12
Views: 2824

Re: seamless roaming not working properly

Add an access-list rule which rejects when the signal is too low.

Have a look at our article :
https://blog.linitx.com/howto-improved- ... t-roaming/


Nick
by nickshore
Thu Jul 14, 2016 6:43 pm
Forum: Beginner Basics
Topic: Basic LAN to LAN
Replies: 4
Views: 651

Re: Basic LAN to LAN

Have you check that the device on 192.168.0.100 has a default route of 192.168.0.1 ?

Also have you checked that your NAT rule has an out interface specified ?
by nickshore
Thu Jul 14, 2016 6:39 pm
Forum: Beginner Basics
Topic: Performance - Speeds
Replies: 22
Views: 2699

Re: Performance - Speeds

I tried another test .... removed the BT homehub out of the equation and just went ppoe direct from the hAP lite, similar results via ethernet or wifi :( If you see the same speeds on ethernet you must have a config issue. Have you checked the ethernet status to see if it has negotiated correctly ?...
by nickshore
Wed Jul 13, 2016 6:35 pm
Forum: Beginner Basics
Topic: Performance - Speeds
Replies: 22
Views: 2699

Re: Performance - Speeds

Well firstly the hAP AC lite only has 10/100 ports. If you are using the default config, you have probably connected from ether1 on the hap ? If so you will be NATing. Looking at tested speeds http://routerboard.com/RB952Ui-5ac2nD you should be getting close to the limit of the 10/100 ethernet - nor...
by nickshore
Wed Jul 13, 2016 4:11 pm
Forum: Beginner Basics
Topic: Not able to setup equal ports
Replies: 2
Views: 486

Re: Not able to setup equal ports

Assuming no config: (you can get to this by going to System - Reset-Configuration and selecting no default config) Go to interfaces -> ethernet, and set the master port on each of ether2-ether5 to ether1 Go to Bridge add a bridge Go to Bridge -> Ports add ether1 and wlan1 into the bridge Go to wirel...
by nickshore
Fri Jul 08, 2016 10:58 am
Forum: Wireless Networking
Topic: Two MikroTik's - One WIFI
Replies: 13
Views: 2117

Re: Two MikroTik's - One WIFI

If you use Capsman on your 2011 you can then set the wireless interfaces on the other routers to be CAP, and they will be managed by the 2011.

http://wiki.mikrotik.com/wiki/Manual:CAPsMAN
by nickshore
Wed Jul 06, 2016 11:14 am
Forum: General
Topic: one interface two pppoe-client
Replies: 9
Views: 1219

Re: one interface two pppoe-client

Use one pppoe-client and route the additional IP to it.
You will need to manually assign it on the client RouterBoard.

Nick
by nickshore
Fri Jul 01, 2016 5:14 pm
Forum: Scripting
Topic: WOL over net
Replies: 15
Views: 17333

Re: WOL over net

Most RouterBOARD devices will turn back on after a minute or so. 

I've just shutdown a 951ui to test this, and it hasn't restarted after 10 mins

Which models do this ?

Nick
by nickshore
Wed Jun 29, 2016 6:33 pm
Forum: General
Topic: Upgrade wireless-6.35.4-tile.npk missing
Replies: 10
Views: 1582

Re: Upgrade wireless-6.35.4-tile.npk missing

Check in system packages

You should be using wireless-fp or wireless-cm2 if you are running capsman.

If it is showing that wireless is there then remove it.

Then you should be able to upgrade.

Nick
by nickshore
Tue Jun 28, 2016 6:15 pm
Forum: General
Topic: Router for FTTH autorized with PPPOE and using VLAN
Replies: 13
Views: 1569

Re: Router for FTTH autorized with PPPOE and using VLAN

I would suggest you check your facts

1) you can run RouterOS 6.x on an RB850Gx2

2) see http://routerboard.com/RB850Gx2 for performance specs
by nickshore
Tue Jun 28, 2016 4:28 pm
Forum: General
Topic: Router for FTTH autorized with PPPOE and using VLAN
Replies: 13
Views: 1569

Re: Router for FTTH autorized with PPPOE and using VLAN

Look at RB850Gx2, RB1100AHx2 or CCR1009-8G-1S-PC
by nickshore
Wed Jun 22, 2016 6:26 pm
Forum: General
Topic: New RB3011UiAS-RM - not impressed with throughput...
Replies: 22
Views: 7086

Re: New RB3011UiAS-RM - not impressed with throughput...

What happens when you don't have the bridge ? Nick I see a performance diference between ports. My setup is the following SFP=> Wan (down 800Mb/s up 250Mb/s bandwith) eth1 Master of eth2-5 eth6 Master of eth7-10 bridge eth1 & and eth6 Speedtest with a cable from eth1 ==> 780Mb/s down 240Mb/s up Spee...
by nickshore
Wed Jun 22, 2016 6:23 pm
Forum: General
Topic: Mikrotik. Traffic-flow
Replies: 5
Views: 1201

Re: Mikrotik. Traffic-flow

You can't do that.

You would need to filter it in the collector

Nick
by nickshore
Fri Jun 17, 2016 5:46 pm
Forum: General
Topic: Congratulations to new moderators !
Replies: 11
Views: 1062

Re: Congratulations to new moderators !

Hi normis

I'm happy to help with moderation

Nick
by nickshore
Thu Jun 16, 2016 6:32 pm
Forum: Beginner Basics
Topic: Egress Filter DNS / Use only DHCP DNS Settings
Replies: 2
Views: 602

Re: Egress Filter DNS / Use only DHCP DNS Settings

You can also add a nat rule to force dns requests to the router even if a client is sending the request to something else:
/ip firewall nat
add action=redirect chain=dstnat comment="redirect dns to router" dst-port=53 in-interface=localbridge protocol=udp
Hope that helps
Nick
by nickshore
Tue May 24, 2016 4:00 pm
Forum: Beginner Basics
Topic: CAPsMAN and Dual Band APs?
Replies: 6
Views: 1747

Re: CAPsMAN and Dual Band APs?

Click the down arrow next to the interface

Nick
by nickshore
Sat Apr 30, 2016 8:22 pm
Forum: Beginner Basics
Topic: PPPOE IPv6
Replies: 6
Views: 6271

Re: PPPOE IPv6

Use DHCP Client to get the IPv6 prefix:

/ipv6 dhcp-client
add interface=pppoe-isp pool-name=isp request=prefix use-peer-dns=no

Set an IP using the prefix on your local bridge:

/ipv6 address
add disabled=no from-pool=isp interface=localbridge
by nickshore
Sat Apr 30, 2016 2:00 pm
Forum: General
Topic: PPPOE ISP configuration - CCR routers
Replies: 5
Views: 928

Re: PPPOE ISP configuration - CCR routers

You can make a bridge and put the pppoe server on that, and then add the vlans into the bridge.

But you would need to create the vlans. I can't think of a way to generically strip the tags at the moment.

That seems more of a switch function, and the CCRs don't have switch chips.

Nick
by nickshore
Sat Apr 30, 2016 12:15 pm
Forum: General
Topic: PPPOE ISP configuration - CCR routers
Replies: 5
Views: 928

Re: PPPOE ISP configuration - CCR routers

Just wondering why you are using per customer VLANs ?

The PPPoE encapsulation keeps customers traffic separate anyway.

Nick
by nickshore
Wed Apr 27, 2016 3:37 pm
Forum: RouterBOARD hardware
Topic: wAP AC (General questions and experience)
Replies: 118
Views: 44405

Re: wAP AC (General questions and experience)

When they arrive they have the default config with firewall on ethernet and open wireless. So if you want to manage them you need to connect to the wifi, or reset them into CAP mode. To reset into CAP mode, power them up whilst holding the reset button in. The wireless lan lights will flash, and aft...
by nickshore
Sat Apr 16, 2016 7:32 pm
Forum: General
Topic: Best way to do subnets for customers?
Replies: 6
Views: 942

Re: Best way to do subnets for customers?

Better to connect the customers using PPPoE, then you can assign a /32 to them or route a bigger block without wasting IPs.
by nickshore
Sat Mar 26, 2016 2:14 pm
Forum: Wireless Networking
Topic: Zero-handoff using CAPsMAN doesn't work
Replies: 10
Views: 6405

Re: Zero-handoff using CAPsMAN doesn't work

Make sure you send the datapath via the CAPsMAN, then the ARP entry for the client will remain on the central bridge.

NIck
by nickshore
Fri Mar 25, 2016 12:16 am
Forum: Beginner Basics
Topic: CCR1036 not passing data through sfp
Replies: 3
Views: 1569

Re: CCR1036 not passing data through sfp

Try turning auto negotiation on
by nickshore
Sun Feb 21, 2016 7:13 pm
Forum: General
Topic: Does mikrotik support HAProxy style load balancing?
Replies: 2
Views: 1893

Re: Does mikrotik support HAProxy style load balancing?

You should be able to use PCC to mark each connection in turn, and then add multiple dstnat rules, each using a connection mark. The per-connection-classifier keeps each client talking to the same server, but you can choose different methods. Note that this does not test to make sure that the server...
by nickshore
Sun Feb 21, 2016 6:49 pm
Forum: Beginner Basics
Topic: Linking Two RB951
Replies: 7
Views: 723

Re: Linking Two RB951

Simplest method is to use eth2 on both routers if you are starting from the default config. Make sure you change the IP on the bridge to be 192.168.88.2/24

eth1 is separate in the default config and you need to change it so that is part of the same switch/bridge if you wish to use it.

Nick
by nickshore
Mon Feb 08, 2016 7:36 pm
Forum: Wireless Networking
Topic: Station mode problem
Replies: 2
Views: 562

Re: Station mode problem

Can't you use Bridge mode on a nearby device and then mac-telnet to it ?
by nickshore
Sat Jan 23, 2016 8:02 pm
Forum: RouterBOARD hardware
Topic: Mikrotik VDSL / DSL Modem?
Replies: 314
Views: 87933

Re: Mikrotik VDSL / DSL Modem?

In the UK FTTC delivered over VDSL is no longer supplied with a modem.

Its up to the user to provide their own.

So a MikroTIk with builtin adsl/vdsl modem, or even a simple 1port modem would be great.

Nick
by nickshore
Tue Dec 29, 2015 7:27 pm
Forum: Wireless Networking
Topic: SXT Lite2 dies after 15s of wireless connection
Replies: 4
Views: 630

Re: SXT Lite2 dies after 15s of wireless connection

Have you checked the nv2 key ?
by nickshore
Wed Dec 23, 2015 1:55 pm
Forum: General
Topic: VLAN over PPPoE possible ?
Replies: 2
Views: 1290

Re: VLAN over PPPoE possible ?

You can connect the pppoe into the bridge by using the ppp profile
by nickshore
Thu Dec 10, 2015 1:22 pm
Forum: General
Topic: Family network OpenDNS strategy - any ideas?
Replies: 2
Views: 426

Re: Family network OpenDNS strategy - any ideas?

Set OpenDNS IPs in IP -> DNS servers Use a dstnat chain rule, protocol udp, dst port 53, with action redirect This grabs all dns traffic and forces it via the mikrotik, then you can still use static entries for local machines Use an address list to bypass the redirect, for unfiltered machines, you c...
by nickshore
Tue Dec 08, 2015 6:35 pm
Forum: RouterBOARD hardware
Topic: Uplink is faster than my CRS109 can handle, should I still use QoS?
Replies: 6
Views: 846

Re: Uplink is faster than my CRS109 can handle, should I still use QoS?

QoS is only useful when the link is congested.

So I would turn it off !
by nickshore
Mon Nov 30, 2015 6:14 pm
Forum: RouterBOARD hardware
Topic: RB3011 Block diagram?
Replies: 230
Views: 51055

Re: RB3011 Block diagram?

Stock of 3011UiAS-RM has now arrived:

http://linitx.com/product/mikrotik-rout ... -psu/14584

They have 6.32.2 installed.

I note that the 6.32.3 combined package is not available for download... maybe MikroTik will make this available soon

Nick
by nickshore
Sat Nov 28, 2015 7:00 pm
Forum: Forwarding Protocols
Topic: Tip about VPLS
Replies: 14
Views: 2524

Re: Tip about VPLS

But, how to make OSPF to advertise all /32 routes from PPPoE clients to the border and make client's traffic to flow thru the VPLS tunnel ? If you want to concentrate the PPPoE tunnels in a single point you will need VPLS tunnels. If you can have several PPPoE server in the network you can do "one ...
by nickshore
Thu Nov 26, 2015 7:30 pm
Forum: General
Topic: Problem with hopping from one AP to an other
Replies: 7
Views: 799

Re: Problem with hopping from one AP to an other

Use capsman and tunnel all traffic back to one router.

This reduces delays on switch between APs.

Nick
by nickshore
Wed Nov 25, 2015 9:50 pm
Forum: Scripting
Topic: Better Usage options?
Replies: 2
Views: 559

Re: Better Usage options?

We use PPPoE and RADIUS accounting
by nickshore
Fri Nov 20, 2015 6:04 pm
Forum: RouterBOARD hardware
Topic: RB3011 Block diagram?
Replies: 230
Views: 51055

Re: RB3011 Block diagram?

http://linitx.com/product/mikrotik-routerboard-3011uiasrm-with-1u-rackmount-case-and-uk-psu/14584 - Interesting LinITX are listing the 3011-RM for start DEC. Might ask them about it if I remember as sometimes the dates on the sites aren't that accurate. The dates we show are confirmed dates from Mi...
by nickshore
Tue Nov 17, 2015 3:02 pm
Forum: Wireless Networking
Topic: hAP Lite wireless channels missing?
Replies: 7
Views: 3786

Re: hAP Lite wireless channels missing?

You should really stick to 20 Mhz channel width on 2.4

Nick
by nickshore
Mon Nov 16, 2015 4:28 pm
Forum: General
Topic: Bring public IPs to PPPoE server through OSPF
Replies: 3
Views: 892

Re: Bring public IPs to PPPoE server through OSPF

Yes you can do that.

You assign the IPs on the PPPoE servers using secrets or radius, and then announce the /27 in ospf networks

As each client connects OSPF will announce the /32 which has been assigned.

Nick
by nickshore
Mon Nov 16, 2015 1:24 pm
Forum: General
Topic: Accessing Mikrotik when using route-mark
Replies: 4
Views: 654

Re: Accessing Mikrotik when using route-mark

If you add a mangle rule which matches new connections with in interface WAN2 and marks them, you can the use that connection mark to make sure that return packets are routed out of WAN2. eg: /ip firewall mangle add action=mark-connection chain=input comment="Mark new connections on WAN2" connection...
by nickshore
Fri Oct 23, 2015 10:48 am
Forum: Wireless Networking
Topic: mikrotik cAP n2 as repeater bridge
Replies: 4
Views: 2192

Re: mikrotik cAP n2 as repeater bridge

As long as you use normal wireless mode (not capsman) you can put both cap2n in AP Bridge mode.

Then build a WDS link between them, but I wouldn't recommend it, performance is not good in my experience

Nick
by nickshore
Fri Oct 02, 2015 2:58 pm
Forum: General
Topic: PPPoE connection to UK BT ADSL, MTU with RFC 4638
Replies: 4
Views: 2201

Re: PPPoE connection to UK BT ADSL, MTU with RFC 4638

RFC4638 has only just been implemented in the latest RouterOS Release Candidate. 6.33rc16

Changelog says:
*) pppoe - added support for MTU > 1492 on PPPoE;

Which version are you using ?

Nick
by nickshore
Wed Sep 02, 2015 5:02 pm
Forum: Wireless Networking
Topic: CAPsMAN and Antenna Gain
Replies: 11
Views: 2744

Re: CAPsMAN and Antenna Gain

You should set it on the wireless interface before you enable cap.

Nick
by nickshore
Sat Aug 01, 2015 2:18 pm
Forum: Announcements
Topic: 6.31 RC testing
Replies: 41
Views: 13264

Re: 6.31 RC testing

And what about the disabled packages? Elaborate... You enable/disable any package except System and routerOS, you need to reboot to do so. Nooooo. Packages must remain enabled i they were enabled before upgrade. Think in 50 CAP's massively upgraded via capscam never more reachables because dhcp pac...
by nickshore
Mon Jul 27, 2015 7:42 pm
Forum: General
Topic: Queues from Radius, But by Option-82?
Replies: 2
Views: 428

Re: Queues from Radius, But by Option-82?

Can you use address lists to add the served IP into an address list and then set a queue for that ?
by nickshore
Sat Jul 25, 2015 4:02 pm
Forum: General
Topic: QRT (RB911G-5HPnD) Very Low Throughput - Stuck In NV2 Protocol
Replies: 3
Views: 833

Re: QRT (RB911G-5HPnD) Very Low Throughput - Stuck In NV2 Protocol

I don't know why you are using WDS Just put one end in Bridge mode, and the other in station-bridge Put the eth1 and the wlan1 in a bridge on each end, remember to set an admin mac on each bridge to prevent issues. You should see better results. Also check that the ethernet ports are negotiating the...
by nickshore
Sun Mar 08, 2015 9:49 pm
Forum: General
Topic: Good signal but no Link on sfp interface
Replies: 4
Views: 1482

Re: Good signal but no Link on sfp interface

Try turning autoneg off or on
by nickshore
Thu Feb 12, 2015 3:35 pm
Forum: Forwarding Protocols
Topic: Routing distance and subnets priority
Replies: 6
Views: 3295

Re: Routing distance and subnets priority

Distance is only considered after subnet size.
by nickshore
Thu Feb 12, 2015 3:19 pm
Forum: Forwarding Protocols
Topic: Routing distance and subnets priority
Replies: 6
Views: 3295

Re: Routing distance and subnets priority

The most specific route is used first, so a /24 will always be used in preference to a /16
by nickshore
Thu Feb 12, 2015 1:51 pm
Forum: General
Topic: Support for PPPoE MTU > 1492 (via RFC4638 PPP-Max-Payload)
Replies: 18
Views: 5278

Re: Support for PPPoE MTU > 1492 (via RFC4638 PPP-Max-Payload)

Any news on including RFC 4683 support ?

This is already available in the linux pppoe code, so it shouldn't be difficult to add ?

Nick
by nickshore
Wed Feb 04, 2015 5:53 pm
Forum: General
Topic: CRS212 availability
Replies: 6
Views: 1009

Re: CRS212 availability

Excellent - yes our stock arrived today.

http://linitx.com/product/mikrotik-clou ... case/14327

Nick
by nickshore
Mon Jan 26, 2015 1:45 pm
Forum: General
Topic: CRS212 availability
Replies: 6
Views: 1009

Re: CRS212 availability

We have some on order which should be here in 11 days time.

We do aim to hold stock of all MikroTik products, but we do have to wait for them to process and deliver our orders !

http://linitx.com/category/mikrotik-clo ... 4/166,1074


Hope that helps

Nick
by nickshore
Mon Jan 19, 2015 2:50 pm
Forum: Wireless Networking
Topic: How to do MAC Filtering?
Replies: 3
Views: 2714

Re: How to do MAC Filtering?

On the Wireless Interface disable Default Authentication

Then add an entry in to the wireless access list for each client.
by nickshore
Sun Nov 30, 2014 4:51 pm
Forum: General
Topic: (Another) Dual WAN Setup Help
Replies: 2
Views: 804

Re: (Another) Dual WAN Setup Help

If you assign different address ranges to the 2 sets of equipment then you can use a route rule to lookup in a different routing table, and then have a different default route in that table.

To cope with fallback add a 2nd default route via the other connection with a bigger distance

Nick
by nickshore
Wed Nov 26, 2014 3:37 pm
Forum: Forwarding Protocols
Topic: Dual wireless link failover
Replies: 5
Views: 2446

Re: Dual wireless link failover

You can do that using routes with different distances along with check-gateway enabled.

Nick
by nickshore
Mon Nov 24, 2014 5:40 pm
Forum: Beginner Basics
Topic: Can someone explain MIKROTIK_ADDRESS_LIST
Replies: 7
Views: 1623

Re: Can someone explain MIKROTIK_ADDRESS_LIST

You can use the Radius attribute Mikrotik address List to add the assigned IP, which the PPPoE user gets, into an address list on the PPPoE server. This allows you to build queue trees using the address list, or setup firewall rules etc. The IP address which is assigned and then added into the addre...
by nickshore
Thu Nov 13, 2014 6:03 pm
Forum: General
Topic: New forum look & feel
Replies: 64
Views: 8446

Re: New forum look & feel

Please can we have the old theme back !
by nickshore
Thu Oct 16, 2014 4:38 pm
Forum: General
Topic: Firewall is broken in v6.20
Replies: 17
Views: 2581

Re: Firewall is broken in v6.20

It is good practice to drop all traffic, and then add rules in to allow good traffic.
by nickshore
Thu Oct 16, 2014 3:48 pm
Forum: General
Topic: Firewall is broken in v6.20
Replies: 17
Views: 2581

Re: Firewall is broken in v6.20

The 3 rules you say you have in the forward chain are add chain=forward comment="Accept and forward Established connections" connection-state=established add chain=forward comment="Accept and forward Related connections" connection-state=related add action=drop chain=forward comment="Drop forwarded ...
by nickshore
Thu Oct 16, 2014 3:02 pm
Forum: General
Topic: Firewall is broken in v6.20
Replies: 17
Views: 2581

Re: Firewall is broken in v6.20

A normal set of rules in your forward chain might be as follows: /ip firewall filter add chain=forward comment=Established connection-state=established action=accept add chain=forward comment=Related connection-state=related action=accept add chain=forward comment="New from local bridge" connection-...
by nickshore
Fri Oct 10, 2014 6:20 pm
Forum: Wireless Networking
Topic: CAPs Manager
Replies: 165
Views: 56597

Re: CAPs Manager

if you want to register the onboard wifi interface of the CAPsMAN into the CAPsMAN system you can use the caps-man-addresses=127.0.0.1 in the /interface wireless cap. I tried the caps-man-addresses=127.0.0.1 with registration success in the CAPsMAN but the devices aren´t able to go online via webbr...
by nickshore
Wed Sep 24, 2014 6:52 pm
Forum: Wireless Networking
Topic: Device discovery not working over wireless
Replies: 1
Views: 634

Re: Device discovery not working over wireless

You shouldn't bridge WAN and LAN, you should route the IPs

Nick
by nickshore
Fri Sep 19, 2014 11:30 am
Forum: Forwarding Protocols
Topic: Enabling MPLS breaks OSPF
Replies: 14
Views: 3025

Re: Enabling MPLS breaks OSPF

I think that you need your transportt-address to be the IP on eth3 not your loopback

Nick
by nickshore
Fri Sep 12, 2014 6:40 pm
Forum: Beginner Basics
Topic: Network Printer not printing or scanning after Mikrotik
Replies: 3
Views: 1330

Re: Network Printer not printing or scanning after Mikrotik

Is the printer connected wirelessly ?

If so you may need to allow forwarding on the wireless interface.

Nick
by nickshore
Wed Sep 10, 2014 6:01 pm
Forum: General
Topic: MikroTik Wiki Radius description seems to be wrong
Replies: 3
Views: 647

Re: MikroTik Wiki Radius description seems to be wrong

You can't do a coa but you can force a disconnect.

eg
echo "Acct-Session-Id=81e01fb1,User-Name=user1" | radclient -x 10.1.1.2:3799 disconnect radiussecret
The client will then reconnect and get their new radius profile.

Nick
by nickshore
Fri Aug 22, 2014 4:40 pm
Forum: Wireless Networking
Topic: CAPsMAN without Local Forwarding problem
Replies: 2
Views: 869

Re: CAPsMAN without Local Forwarding problem

I have an RB2011 running capsman and a cap.

I use local forwarding onto my bridge for that traffic.

Nick.
by nickshore
Thu Aug 21, 2014 11:55 am
Forum: Wireless Networking
Topic: SXT G-5HPacD: Can't adjust TX Power
Replies: 4
Views: 2700

Re: SXT G-5HPacD: Can't adjust TX Power

Hello. I noticed that new SXT AC doesn't show the current TX Power (http://forum.mikrotik.com/viewtopic.php?f=7&t=88071&p=442289&hilit=txpower#p442289). I haven't tried yet Netbox, but it must be the same. That's a "minor" bug but... really we can't adjust the TX-Power! You can't set "Card Rates" (...
by nickshore
Mon Aug 18, 2014 2:38 pm
Forum: General
Topic: SXT AC best settings
Replies: 82
Views: 49963

Re: SXT AC best settings

We blogged about our SXT AC testing:

http://blog.linitx.com/mikrotiks-sxt-acs/

Hope you like it !

Nick
by nickshore
Mon Jul 28, 2014 8:41 pm
Forum: Beginner Basics
Topic: Noddy guide for BT Infinity PPPOE setup?
Replies: 2
Views: 1176

Re: Noddy guide for BT Infinity PPPOE setup?

Add input chain rules to only allow access for what you need, specify the pppoe client as the in interface.

You should also have rules to allow established and related packets.

Then add a drop rule at the end of the input chain.

Hope that helps

Nick
by nickshore
Sat Jun 14, 2014 7:30 pm
Forum: General
Topic: Feature request: route - check gateway via ping to some IP
Replies: 3
Views: 1588

Re: Feature request: route - check gateway via ping to some

You can do this using recursive routes.
by nickshore
Fri Jun 13, 2014 5:32 pm
Forum: General
Topic: AAISP Upstream Bonding
Replies: 2
Views: 631

Re: AAISP Upstream Bonding

If you join us in our irc channel we may be able to help

Nick
by nickshore
Wed Jun 11, 2014 4:40 pm
Forum: Wireless Networking
Topic: CAPs Manager
Replies: 165
Views: 56597

Re: CAPs Manager

I've just tested on mine and it works with a set of rules like this: /caps-man access-list add action=reject comment="Deny all low signals" signal-range=-120..-60 add action=accept comment="Laptop" mac-address=E0:CA:94:92:D2:AD add action=accept comment=N4 mac-address=40:B0:FA:6D:EB:CE add action=ac...
by nickshore
Sat Mar 29, 2014 2:21 pm
Forum: Wireless Networking
Topic: BaseBox5 PtP 20km wireless link
Replies: 6
Views: 5213

Re: BaseBox5 PtP 20km wireless link

You should use Bridge - Station Bridge for a transparent L2 link between RBs

There is no need to use wds
by nickshore
Sat Mar 29, 2014 2:03 pm
Forum: Wireless Networking
Topic: CAPs Manager
Replies: 165
Views: 56597

Re: CAPs Manager

I have setup three APs in a CAPsMAN/CAPs test configuration How does one disable the 'default authenticate' in order to apply the access list ? Unfortunately comments in Access list aren't preserved Try adding a reject rule in the access list after your accept rules: /caps-man access-list add actio...
by nickshore
Mon Feb 03, 2014 5:05 pm
Forum: Beginner Basics
Topic: Pure switching on RB2011
Replies: 3
Views: 869

Re: Pure switching on RB2011

On each interface eth2-eth5 set the master port to be eth1

On each interface eth7-eth10 set the master port to be eth6

Then bridge eth1 to eth6

Then add the IP address to the bridge.

Nick.
by nickshore
Wed Dec 18, 2013 1:47 pm
Forum: General
Topic: 2 LAN 2 gateways
Replies: 6
Views: 1888

Re: 2 LAN 2 gateways

You can do this simply using Routing Rules In winbox go to IP Routes Add default routes with routing marks eg wan1 and wan2, specify the gateway on each one. then go to the Rules tab Then add rules for each subnet, using the src address of the lan, action of lookup and table specifies the routing ma...
by nickshore
Tue Dec 03, 2013 11:31 am
Forum: Wireless Networking
Topic: Low througput with simple p2p SXT link
Replies: 2
Views: 1395

Re: Low througput with simple p2p SXT link

What speeds are showing in Wireless Registrations ?

Did you make sure both chains were enabled ?


Nick.
by nickshore
Sat Nov 30, 2013 10:29 pm
Forum: Forwarding Protocols
Topic: Ospf settings
Replies: 10
Views: 3212

Re: Ospf settings

If the 751 is acting as your border router then you should NAT on there.

I don't think you need a NAT at all on the 951

Can you draw a picture ?

Nick
by nickshore
Sat Nov 30, 2013 10:25 pm
Forum: General
Topic: TCP SynCookie in 6.6 & 6.7
Replies: 2
Views: 1452

Re: TCP SynCookie in 6.6 & 6.7

The TCP SynCookie setting is now in IP Settings


Nick.
by nickshore
Sat Nov 30, 2013 5:06 pm
Forum: Forwarding Protocols
Topic: Ospf settings
Replies: 10
Views: 3212

Re: Ospf settings

You shouldn't need to NAT if your routes are distributing correctly

Can you show the IP Routes from each router ?

Also you seem to mention 2 areas ? you should only need to use backbone for a small network.

Nick.
by nickshore
Wed Nov 27, 2013 11:41 am
Forum: Wireless Networking
Topic: allow one MAC address to access Mikrotik router(AP) RB751
Replies: 4
Views: 3520

Re: allow one MAC address to access Mikrotik router(AP) RB75

You can use an access list entry to do this: 1) Connect the client by wireless to the 751 2) In winbox look in Wireless Registration 3) Double click the entry for the client 4) Click the Copy to Access List button 5) Go to Wireless Interfaces 6) Double click the interface 7) Untick Default Authentic...
by nickshore
Mon Nov 25, 2013 3:06 pm
Forum: RouterBOARD hardware
Topic: RB2011UAS-RM - auto negotiation problem
Replies: 110
Views: 52675

Re: RB2011UAS-RM - auto negotiation problem

I've just been testing FTTC modems with 2011s and 951Gs and the new Cloud Router Switch I have found that the stock we have of 951G-2HnD, RB2011UiAS-RM, and RB2011UAS-2HnD-IN will all connect at 100 Mbps full duplex on their gigabit ports when using the Huwaei. However they will not work properly wi...
by nickshore
Wed Nov 13, 2013 12:27 pm
Forum: RouterBOARD hardware
Topic: RB2011UAS-RM - auto negotiation problem
Replies: 110
Views: 52675

Re: RB2011UAS-RM - auto negotiation problem

I queried options for return. This is what I got. No news yet for 951G owners but I don't hold out much hope. Using RB2011 it is still possible to establish 100Mbit link with BT modem by using ether6-ether10 ports. This incompatibility is not caused by defect in any way, therefore warranty does not...
by nickshore
Wed Oct 16, 2013 8:29 pm
Forum: RouterBOARD hardware
Topic: 2011UiAS no winbox on eth1-eth5, winbox ok on eth6-eth10
Replies: 4
Views: 1280

Re: 2011UiAS no winbox on eth1-eth5, winbox ok on eth6-eth10

Did it come with version 5 on it, I thought they were coming with version 6.

Nick.
by nickshore
Sun Oct 13, 2013 9:28 pm
Forum: RouterBOARD hardware
Topic: RB912UAG-5HPnD-OUT - how to open the case
Replies: 8
Views: 3100

Re: RB912UAG-5HPnD-OUT - how to open the case

There are 2 screws which have small covers on the outside of the case.
by nickshore
Sun Oct 13, 2013 6:47 pm
Forum: General
Topic: Lock to AP MAC function
Replies: 4
Views: 1374

Re: Lock to AP MAC function

If it is a mikrotik client, then add a connect list entry (connect and then copy it from wireless registrations)
and then turn off Default authentication

If you want to control it on the APs, then use an access list entry

Hope that helps
Nick.
by nickshore
Wed Sep 11, 2013 4:00 pm
Forum: General
Topic: About upgrading CCR to v6.3
Replies: 4
Views: 1312

Re: About upgrading CCR to v6.3

by nickshore
Fri Aug 30, 2013 3:49 pm
Forum: Beginner Basics
Topic: One eth to "see" multiple VLANs
Replies: 6
Views: 1323

Re: One eth to "see" multiple VLANs

Make a bridge and put eth3 and both vlans into it.

On each vlan in the bridge ports set the horizon to be the same value eg 1

Then the vlans won't be able to talk to each other, but they will both be able to communicate with the pc on eth3.

Nick.
by nickshore
Thu Aug 22, 2013 6:25 pm
Forum: General
Topic: [SOLVED]How to route all traffic to tunnel pptp,eoip,ipsec
Replies: 5
Views: 3133

Re: How to route all traffic to tunnel (pptp,eoip,ipsec,...)

You can change the DHCP route distance in the DHCP client.

You then need to add a static route for the PPTP endpoint over the WAN ethernet.

Then your PPTP default route will work.

Nick.
by nickshore
Thu Aug 22, 2013 6:07 pm
Forum: Forwarding Protocols
Topic: Very strange issue with BGP and performance
Replies: 10
Views: 2090

Re: Very strange issue with BGP and performance

Did you check the ethernet status to see what speed they are connecting to the switch port at ?

The 2011 has problems negotiating gigabit speeds with some devices.

Nick.
by nickshore
Tue Aug 20, 2013 5:41 pm
Forum: Beginner Basics
Topic: Two SSID-s on RB 951-2n
Replies: 7
Views: 3769

Re: Two SSID-s on RB 951-2n

Did you add a dhcp server to the virtual AP ?
by nickshore
Wed Jul 10, 2013 7:03 pm
Forum: General
Topic: Which Mikrotik supplier to choose?
Replies: 2
Views: 605

Re: Which Mikrotik supplier to choose?

We are always helpful :)

Nick.
by nickshore
Tue Jun 25, 2013 6:39 pm
Forum: Forwarding Protocols
Topic: ipv6 dhcp pd and interface enumeration on RouterOS 5.20
Replies: 3
Views: 2429

Re: ipv6 dhcp pd and interface enumeration on RouterOS 5.20

You need to specify the address part which will be added to the prefix:

eg
 /ipv6 address add advertise=yes disabled=no interface=ether2-master-local from-pool="pdprefix"  address=::1


Nick.
by nickshore
Tue Jun 18, 2013 11:21 am
Forum: General
Topic: Failover - NAT with Routed IP
Replies: 1
Views: 560

Re: Failover - NAT with Routed IP

From your description it looks like a masquerade rule with out-interface=ether2 should do the job

Nick.
by nickshore
Fri Jun 14, 2013 4:12 pm
Forum: Beginner Basics
Topic: is this RouterOS error!
Replies: 5
Views: 1011

Re: is this RouterOS error!

can you show the output of
/ip address print
by nickshore
Sun Jun 09, 2013 4:09 pm
Forum: Wireless Networking
Topic: RB951G-2HnD cannot get 300mhz
Replies: 19
Views: 5888

Re: RB951G-2HnD cannot get 300mhz

Disable tkip
by nickshore
Wed Jun 05, 2013 3:48 pm
Forum: RouterBOARD hardware
Topic: RB 2011LS-IN & MIKROTIK GBIC PAIR S-35LC20D
Replies: 7
Views: 2929

Re: RB 2011LS-IN & MIKROTIK GBIC PAIR S-35LC20D

Make sure that autonegotiate is switched on for the interface on the CCR, it defaults to off.

NIck.
by nickshore
Sat Jun 01, 2013 10:03 pm
Forum: Wireless Networking
Topic: LAN and WAN with one DHCP server
Replies: 2
Views: 933

Re: LAN and WAN with one DHCP server

1) Make a bridge
2) Put both interfaces into a bridge, in Bridge - Ports
3) Assign an IP to the bridge
4) put the DHCP server on the bridge.

Hope that helps

Nick.
by nickshore
Wed May 29, 2013 4:26 pm
Forum: RouterBOARD hardware
Topic: Groove-5Hn, SXT, others --> Availability
Replies: 18
Views: 4016

Re: Groove-5Hn --> Availability

We should have some stock of Groove 52s on around the 12th June.

See http://linitx.com/search.php?keywords=groove

We have sold a lot to customers already, but do have a further 80 available to be reserved.

Nick.
by nickshore
Tue May 28, 2013 7:18 pm
Forum: Beginner Basics
Topic: PPPoE Noob
Replies: 5
Views: 1348

Re: PPPoE Noob

Can you turn off Add Default Gateway on your dhcp client, and turn on Add Default Gateway on your pppoe-client ?

Then see if it works

Nick.
by nickshore
Sat May 25, 2013 10:18 pm
Forum: Beginner Basics
Topic: CCR doesn't have default IP
Replies: 14
Views: 2821

Re: CCR doesn't have default IP

When you add pppoe clients to wan2 and wan3 you should not enable add default route on those either. You need to decide on how to you wish to route. In fact I would not check add default route on any of the pppoe clients, and then I would add one static default route, with all 3 gateways, this is ca...
by nickshore
Sat May 25, 2013 10:00 pm
Forum: Beginner Basics
Topic: CCR doesn't have default IP
Replies: 14
Views: 2821

Re: CCR doesn't have default IP

Looks like you have a DHCP client on ether 1 with add default route checked, turn that off.

You currently have 2 default routes ! and the DAS shows the ether1 route is the active one.

Nick.
by nickshore
Sat May 25, 2013 9:49 pm
Forum: Beginner Basics
Topic: CCR doesn't have default IP
Replies: 14
Views: 2821

Re: CCR doesn't have default IP

open a terminal and do
/ip route print
and
/ip firewall nat print
then show us
by nickshore
Sat May 25, 2013 9:38 pm
Forum: Beginner Basics
Topic: CCR doesn't have default IP
Replies: 14
Views: 2821

Re: CCR doesn't have default IP

you need a src-nat chain masquerade rule for your pppoe interface

do you have add default route set on the pppoe client ?

do you have a default route in IP routes ?
by nickshore
Sat May 25, 2013 6:21 pm
Forum: Beginner Basics
Topic: CCR doesn't have default IP
Replies: 14
Views: 2821

Re: CCR doesn't have default IP

Using winbox go into IP -> addresses and add an IP to an interface,then connect to that interface.

Nick.
by nickshore
Wed May 15, 2013 5:50 pm
Forum: Beginner Basics
Topic: Multiple profiles/subnets on PPTP
Replies: 2
Views: 1404

Re: Multiple profiles/subnets on PPTP

I think you might be able to specify the local and remote address in the radius profile.

Use Framed-IP-Address for the remote IP and Framed-Route for the local address.

I've not tested it yet...

Nick.
by nickshore
Wed May 08, 2013 4:19 pm
Forum: General
Topic: Back leds on sxt lite, don't works, Is normal?
Replies: 9
Views: 1595

Re: Back leds on sxt lite, don't works, Is normal?

AFAIK the LEDs only work in the station modes.

It would be nice if the LEDs worked in Bridge mode (only allows 1 client) as well, but I don't think they do ?

Nick.
by nickshore
Wed May 08, 2013 11:43 am
Forum: General
Topic: NAT forwarding when not default gateway
Replies: 2
Views: 5223

Re: NAT forwarding when not default gateway

The default gateway is used to send packets where the destination address is not in the subnet of the interface. In your example a request packet comes in from outside, lets say 212.212.212.212, and gets sent to 10.0.0.2 It replies to 212.212.212.212 using the only route it has for that address, its...
by nickshore
Sat May 04, 2013 2:56 pm
Forum: General
Topic: Lock to ap mac address?
Replies: 5
Views: 4342

Re: Lock to ap mac address?

For a client MikroTik in station mode use connect list to specify the required AP.
Switch off default authenticate on the wireless interface to only connect to APs in the list.

Hope that helps

Nick
by nickshore
Thu May 02, 2013 10:49 am
Forum: General
Topic: VDSL Connection won't work
Replies: 5
Views: 2661

Re: VDSL Connection won't work

Which speed port on the 2011 are you using ?

We have seen autoneg problems between 2011s and VDSL modems when using the gigabit ports.

Try using one of the 10/100 ports - eg ether10

Nick.
by nickshore
Wed May 01, 2013 11:42 pm
Forum: Beginner Basics
Topic: Help routing problem
Replies: 6
Views: 1097

Re: Help routing problem

Your default route has the wlan interface on it, this only works for ppp type connections.

You need to specify the next hop IP address instead.

Nick.
by nickshore
Wed May 01, 2013 7:02 pm
Forum: General
Topic: PPPoE drops connections when Ethernet port bounces
Replies: 6
Views: 1681

Re: PPPoE drops connections when Ethernet port bounces

Make sure that you have set an admin-mac on the bridge.

Nick.
by nickshore
Wed May 01, 2013 6:59 pm
Forum: General
Topic: Setting up full /25 of public IP's on Network
Replies: 4
Views: 773

Re: Setting up full /25 of public IP's on Network

You should check in ip firewall filter for rules in the forward chain

You should also check to make sure the device you are trying to access has the correct default route set.


Nick
by nickshore
Tue Apr 30, 2013 3:00 pm
Forum: General
Topic: Setting up full /25 of public IP's on Network
Replies: 4
Views: 773

Re: Setting up full /25 of public IP's on Network

Put the 66.x.x.154/30 on your WAN interface

Set the default route to 66.xx.xx.153

Put 206.xx.xx.129/25 on your LAN interface

Disable your NAT rules.

Use the rest of the /25 on your devices in your LAN, (by DHCP if you like) and give them a default route of 206.xx.xx.129


Hope that helps

Nick.
by nickshore
Sat Apr 20, 2013 6:57 pm
Forum: Wireless Networking
Topic: Is mikrotik is secured ...
Replies: 14
Views: 2671

Re: Is mikrotik is secured ...

Use an extra layer of strong encryption.

Run WPA2 or NV2 encrytion on the wifi, and then run IPSEC over that

Nick.
by nickshore
Thu Apr 11, 2013 11:34 am
Forum: General
Topic: Give to local device public ip address (without nat)
Replies: 7
Views: 1109

Re: Give to local device public ip address (without nat)

Do you have another IP range for the WAN connection ? a /30 from your ISP ? You can put an IP from the /24 block onto the LAN eg xxx.234.147.1/24 Then you can disable your NAT rule. Then local devices can have an address in xxx.234.147.0/24 and use xxx.234.147.1/24 as their gateway. Hope that helps ...
by nickshore
Tue Apr 09, 2013 5:54 pm
Forum: Forwarding Protocols
Topic: BGP Conditional Route Injection
Replies: 4
Views: 1867

Re: BGP Conditional Route Injection

Use a route filter to remove the route, or change its parameters.
by nickshore
Sun Apr 07, 2013 4:29 pm
Forum: General
Topic: How to have both NAT and Non-NAT on same board
Replies: 1
Views: 398

Re: How to have both NAT and Non-NAT on same board

Check your NAT rule, and make sure that it is only NATing src addresses in the private block.
by nickshore
Thu Apr 04, 2013 6:49 pm
Forum: Beginner Basics
Topic: Nat public ip range in half bridge
Replies: 5
Views: 1493

Re: Nat public ip range in half bridge

You should be able to put the /29 and the /30 on the wan interface and use NAT rules.

Your ISP will be routing the /29 to your /30 endpoint

Hope that helps

Nick.
by nickshore
Thu Apr 04, 2013 6:21 pm
Forum: Wireless Networking
Topic: Lost ping when roaming Client connected or disconnected
Replies: 4
Views: 1790

Re: Lost ping when roaming Client connected or disconnected

You don't have an admin-mac on the bridge - try setting one.

Use something like 02:00:00:00:00:01

Nick.
by nickshore
Thu Apr 04, 2013 6:18 pm
Forum: Forwarding Protocols
Topic: BGP path selection
Replies: 4
Views: 1392

Re: BGP path selection

You need to show the routes you have a problem with

do

/ip route print detail where dst-address in x.x.x.x/x
by nickshore
Sun Mar 24, 2013 4:00 pm
Forum: RouterBOARD hardware
Topic: RB2011UAS-2HnD-IN Gigabit switch throughput
Replies: 8
Views: 3159

Re: RB2011UAS-2HnD-IN Gigabit switch throughput

Problem is that Gigabit requires auto-neg so you can't force it.

You need to email support@mikrotik.com with the details, hopefully they will fix this problem.

Nick
by nickshore
Sat Mar 23, 2013 12:10 pm
Forum: RouterBOARD hardware
Topic: RB2011UAS-2HnD-IN Gigabit switch throughput
Replies: 8
Views: 3159

Re: RB2011UAS-2HnD-IN Gigabit switch throughput

That sounds like a duplex mismatch between your modem and the gigabit ports on the 2011. There are a couple of threads on the forum related to BT supplied VDSL modems. It seems that the autonegotiation fails to work correctly and the port gets set to half duplex. Have a look at the interface status ...
by nickshore
Sun Mar 17, 2013 4:16 pm
Forum: Forwarding Protocols
Topic: suitable RB hardware for bgp multihoning a /24
Replies: 6
Views: 1519

Re: suitable RB hardware for bgp multihoning a /24

We would recommend using a dual core RB1100, full tables can take quite a lot of CPU as well as memory.

Nick.
by nickshore
Thu Mar 14, 2013 5:45 pm
Forum: Forwarding Protocols
Topic: Cant get VPLS to Work.
Replies: 2
Views: 1146

Re: Cant get VPLS to Work.

Bridge the VPLS tunnels to the ethernets at each end and then assign IPs to the PCs in the same subnet and they should be able to communicate. You can get the VPLS tunnels to automatically join the bridge by setting the bridge in the BGP VPLS tab (if you get to implementing some BGP as well) Hope th...
by nickshore
Wed Mar 06, 2013 11:31 pm
Forum: RouterBOARD hardware
Topic: RMA
Replies: 17
Views: 2769

Re: RMA

If the board is within warranty and we find it to be faulty we would just ship a replacement.

We would then report faulty ones back to MikroTik in a batch, new replacements then get added to our stock.

We never make a customer wait for an RMA to MikroTik !

Nick.
by nickshore
Mon Mar 04, 2013 3:28 pm
Forum: Wireless Networking
Topic: Sextant Bridge 2 networks
Replies: 4
Views: 1673

Re: Sextant Bridge 2 networks

To make a transparent wireless bridge do the following: on one sextant set the mode to Bridge on the other set the mode to station-bridge on both ends add a bridge and put the eth and the wlan in the bridge if you want to pick up an IP for management add a dhcp client to the bridge interface or set ...
by nickshore
Tue Feb 26, 2013 12:55 pm
Forum: RouterBOARD hardware
Topic: RB2011UAS-RM - auto negotiation problem
Replies: 110
Views: 52675

Re: RB2011UAS-RM - auto negotiation problem

We have worked around this problem with our customers by them using port 10 on the RB2011 set at autonegotiate they get 100 Mbps full duplex to the BT supplied FTTC modems.

We have reported this to MikroTik support, and supplied supouts etc using both common FTTC modems as supplied by BT.

Nick.
by nickshore
Tue Feb 26, 2013 12:52 pm
Forum: General
Topic: newbie questions about pppoe
Replies: 3
Views: 602

Re: newbie questions about pppoe

We run pppoe servers at the edges - just behind the Access points, then route from there.

Nick.
by nickshore
Mon Feb 25, 2013 7:44 pm
Forum: Beginner Basics
Topic: rb2011 - poor performance with uk bt infinity
Replies: 42
Views: 14904

Re: rb2011 - poor performance with uk bt infinity

We have seen this issue with several customers. It is an issue related to Gigabit autonegotiation on the 2011. We solved it in the short term, by using port 10, and it connects at 100 Mbps full duplex We have raised a ticket with mikrotik in conjunction with one of our customers, and have supplied s...
by nickshore
Fri Feb 15, 2013 8:20 pm
Forum: RouterBOARD hardware
Topic: SXT...shows up in Netinstall but...
Replies: 4
Views: 1466

Re: SXT...shows up in Netinstall but...

did you actually download the latest netinstall though ?
by nickshore
Thu Feb 14, 2013 6:05 pm
Forum: RouterBOARD hardware
Topic: SXT...shows up in Netinstall but...
Replies: 4
Views: 1466

Re: SXT...shows up in Netinstall but...

Do you have the latest netinstall ??

Otherwise try installing 5.22 first.

NIck.
by nickshore
Wed Feb 13, 2013 5:35 pm
Forum: Forwarding Protocols
Topic: VLAN tag On Mikrotik router
Replies: 3
Views: 1436

Re: VLAN tag On Mikrotik router

Create VLAN interfaces on the ethernet port, with the required vlan IDs
by nickshore
Tue Feb 12, 2013 11:01 am
Forum: General
Topic: Static DHCP leases - different DNS servers per lease
Replies: 2
Views: 890

Re: Static DHCP leases - different DNS servers per lease

Yes you can make specific entries on the DHCP Server - Networks tab.

The addresses are matched from smallest first, so a /32 will match over a /24

Hope that helps

Nick.
by nickshore
Mon Feb 11, 2013 6:17 pm
Forum: General
Topic: How to bridge to many identical LANs?
Replies: 3
Views: 632

Re: How to bridge to many identical LANs?

Just get the remote routers to pptp back to your central router and then you can bridge the interface as needed.

The 450G can easily handle that many connections especially as they won't all be in use at the same time.

Nick.
by nickshore
Tue Feb 05, 2013 11:35 am
Forum: General
Topic: How does Ruterbord -Bridge RSTP- decide which is root port?
Replies: 5
Views: 3301

Re: How does Ruterbord -Bridge RSTP- decide which is root po

Set an admin-mac on the bridge.

If you don't set an admin-mac then the bridge uses the lowest mac address of its members, which means that the bridge reconfigures every time a wireless client connects/disconnects.

Nick
by nickshore
Sat Jan 26, 2013 7:37 pm
Forum: Beginner Basics
Topic: Bandwidth limitation on mikrotik
Replies: 7
Views: 3154

Re: Bandwidth limitation on mikrotik

Set the limit per customer in the PCQ using the Rate: setting

Hope that helps

Nick
by nickshore
Wed Jan 23, 2013 3:59 pm
Forum: Beginner Basics
Topic: lcd
Replies: 5
Views: 724

Re: lcd

Be nice to be able to set the screen to show something from winbox, eg an interface graph, and completely disable the touchscreen.

Also be nice if scripts could send messages to the LCD

Nick.
by nickshore
Tue Jan 22, 2013 5:15 pm
Forum: General
Topic: PPPOE authentication failed
Replies: 8
Views: 4260

Re: PPPOE authentication failed

when they go over the limit change their radius profile to put them in a different group

Still let them auth, but give them a different profile.
by nickshore
Tue Jan 22, 2013 3:50 pm
Forum: General
Topic: PPPOE authentication failed
Replies: 8
Views: 4260

Re: PPPOE authentication failed

Let the users authenticate but put them in a different IP pool.

Then block traffic to that pool, or webproxy them to a page where you tell them they are over their limits.
by nickshore
Mon Jan 21, 2013 1:28 pm
Forum: Forwarding Protocols
Topic: IPv6 routes not withdrawn from BGP/OSPFv3
Replies: 1
Views: 974

Re: IPv6 routes not withdrawn from BGP/OSPFv3

Any update on this ?

Tested on 5.22 and it is still there.

On a radius profile using Framed-IPv6-Prefix := 2aaa:9c41:ffff:90::/64
The route is inserted correctly when the pppoe client connects but when it disconnects the route remains in OSPFv3.

Nick
by nickshore
Mon Jan 21, 2013 1:20 pm
Forum: RouterBOARD hardware
Topic: CLOUD CORE ROUTER
Replies: 1374
Views: 1015821

Re: CLOUD CORE ROUTER

Any update on when the new IPv6 routing package will be available ?

We really need route marking in IPv6.

Nick.,
by nickshore
Fri Dec 21, 2012 3:25 pm
Forum: General
Topic: v6 rc6 released
Replies: 215
Views: 62353

Re: v6 rc6 released

Yes agreed, partitioning is very cool, manual is here:

http://wiki.mikrotik.com/wiki/Manual:Partitions
by nickshore
Fri Dec 21, 2012 12:44 pm
Forum: General
Topic: RB2011 firewall - can't block winbox on one port
Replies: 4
Views: 4827

Re: RB2011 firewall - can't block winbox on one port

To disable winbox access using mac address you have to disable mac-server on the NIC

Go to Tools -> MAC Server

Click on the WinBox Interfaces Tab

by default this is probably set to all

You can add specific interfaces, and disable the all entry

Hope that helps

Nick.
by nickshore
Thu Dec 20, 2012 2:01 pm
Forum: RouterBOARD hardware
Topic: 1100 AHx2 vs. Hx2
Replies: 3
Views: 3081

Re: 1100 AHx2 vs. Hx2

The latest news sent to distributors said the following: We are glad to introduce our new RouterBOARD 1100Hx2! It has PowerPC 1066Mhz CPU (dual core) and 1GB RAM, as well as thirteen Gigabit Ethernet ports. Hardware encryption is not supported. Next batch of RB1100AHx2 will arrive from factory on Fe...
by nickshore
Wed Dec 19, 2012 11:12 am
Forum: Beginner Basics
Topic: How to setup RouterOS with 2 different subnets from ISP
Replies: 8
Views: 1589

Re: How to setup RouterOS with 2 different subnets from ISP

For inbound NAT you can use a dstnat rule eg: /ip firewall nat add action=dst-nat chain=dstnat dst-address=217.122.1.50 to-addresses=192.168.1.10 This would NAT all traffic through, you could reduce this to just the ports you want by adding some ports eg dst-port=80,8080 Note that NAT happens first ...
by nickshore
Tue Dec 18, 2012 5:11 pm
Forum: Wireless Networking
Topic: wireless bandwidth problem
Replies: 3
Views: 1040

Re: wireless bandwidth problem

what channels are you using on the 2 links ?

how far apart are the antennas ?
by nickshore
Tue Dec 18, 2012 11:34 am
Forum: Beginner Basics
Topic: How to setup RouterOS with 2 different subnets from ISP
Replies: 8
Views: 1589

Re: How to setup RouterOS with 2 different subnets from ISP

The suggestion to put the /29 on LAN2 would mean that the IPs would be available directly on LAN2 ie a machine connected to LAN2 could be assigned an address in that range and not need any NAT. If you want to use NAT instead then you would assign all IPs to the WAN interface, and then add specific s...
by nickshore
Tue Dec 18, 2012 11:21 am
Forum: Beginner Basics
Topic: Hairpin nat problem
Replies: 2
Views: 1067

Re: Hairpin nat problem

Try changing your out-interface to bridge-dmz in the masquerade rule.
by nickshore
Wed Dec 12, 2012 12:25 pm
Forum: Wireless Networking
Topic: Mikrotik Routerboard 751U-2HnD wireless problems
Replies: 13
Views: 7905

Re: Mikrotik Routerboard 751U-2HnD wireless problems

Sometimes the power saving mode when you run a laptop on batteries can cause very poor performance. You can solve this by turning the power management off: iwconfig wlan0 power off See the blog I wrote about this: http://blog.linitx.com/fixing-slow-laptop-wifi-on-linux/ Hope this is useful Nick
by nickshore
Wed Dec 05, 2012 5:13 pm
Forum: RouterBOARD hardware
Topic: CLOUD CORE ROUTER
Replies: 1374
Views: 1015821

Re: CLOUD CORE ROUTER

Just ship them to us, we will upgrade them to the stable version 6 before we sell them on :P
by nickshore
Thu Nov 29, 2012 11:43 am
Forum: General
Topic: 6.0rc4 released!
Replies: 101
Views: 18365

Re: 6.0rc4 released!

5.22 packagesare available on download page.
Go to download page

Click ppc

Choose 5.22 (Legacy) - surely should be stable ?

There are no packages shown, only Netinstall, Changelog, and MD5
by nickshore
Thu Nov 29, 2012 11:33 am
Forum: General
Topic: 6.0rc4 released!
Replies: 101
Views: 18365

Re: 6.0rc4 released!

Where have the 5.22 downloads gone ? and why is 6rc4 shown as stable ?
by nickshore
Wed Nov 28, 2012 11:59 pm
Forum: Beginner Basics
Topic: PPPoE and DHCP on same interface
Replies: 2
Views: 736

Re: PPPoE and DHCP on same interface

Disable 'add default route' on the dhcp client

Then add a srcnat masq rule to access the modem, with out-interface set to your wan eth interface

Hope that helps.

Nick.
by nickshore
Wed Nov 28, 2012 2:36 pm
Forum: General
Topic: PPPoE Server dropping connections
Replies: 6
Views: 3258

Re: PPPoE Server dropping connections

Make sure you have set an admin mac on the bridge interface

Then the bridge won't have to restart when interfaces come and go.

Nick.
by nickshore
Wed Nov 28, 2012 11:16 am
Forum: General
Topic: how to force protocol to exit on precise IP on multiIP WAN
Replies: 1
Views: 374

Re: how to force protocol to exit on precise IP on multiIP W

Mark the SMTP connection.
Put a route mark on the connection.
Add a route to the routing table using the route mark.
Add a srcNAT rule for SMTP from that server IP

Hope that helps

Nick.
by nickshore
Mon Nov 26, 2012 10:58 am
Forum: RouterBOARD hardware
Topic: can RB1100AH X2 handle 600 hotspot client?
Replies: 9
Views: 2534

Re: can RB1100AH X2 handle 600 hotspot client?

hotspot uses a lot less cpu than pppoe server
by nickshore
Fri Nov 23, 2012 8:46 pm
Forum: General
Topic: RB751U 2HnD to version 6.0-rc3 with variable processing
Replies: 11
Views: 2993

Re: RB751U 2HnD to version 6.0-rc3 with variable processing

Today's rc4 seems a lot better !
by nickshore
Wed Nov 21, 2012 6:01 pm
Forum: Wireless Networking
Topic: Repeater (AP + Client)
Replies: 2
Views: 1038

Re: Repeater (AP + Client)

If you put the repeater in AP bridge mode you can use WDS to connect the repeater back to the first AP.

You will need to setup a WDS link between the 2 APs.

The clients can choose to connect to either AP.

Nick.
by nickshore
Wed Nov 21, 2012 5:06 pm
Forum: Beginner Basics
Topic: Route traffic to one IP through specific gateway
Replies: 6
Views: 16143

Re: Route traffic to one IP through specific gateway

You need to make sure your PCC rules don't get triggered for that destination. or you need to route mark specifically for that destination and uncheck passthrough in the mangle rules. then use a route with the route mark set on it. It would help if you showed your mangle rules and routing table. Nick.
by nickshore
Wed Nov 21, 2012 3:27 pm
Forum: General
Topic: hotspot policy page without authentication
Replies: 5
Views: 2936

Re: hotspot policy page without authentication

If you take the existing hotspot login page, you can change the username and password fields on the form to hidden and set a default value in them. Then when the button is pressed those values will be submitted, just as if the user had typed them in. You can also change the label on the submit butto...
by nickshore
Wed Nov 21, 2012 11:43 am
Forum: General
Topic: RB751U 2HnD to version 6.0-rc3 with variable processing
Replies: 11
Views: 2993

Re: RB751U 2HnD to version 6.0-rc3 with variable processing

Confirmed CPU usage when downloading on wired seems fine, but using wireless causes it to use lots of CPU.

Nick.
by nickshore
Mon Nov 19, 2012 3:35 pm
Forum: General
Topic: Need Help on Balance the speed
Replies: 4
Views: 1479

Re: Need Help on Balance the speed

Add a simple queue using a PCQ to share the bandwidth fairly. /queue type set 6 kind=pcq name=pcq-upload-default pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=10s pcq-classifier=\ src-address pcq-dst-address-mask=32 pcq-dst-address6-mask=128 pcq-limit=50 pcq-rate=0 pcq-src-address-mask=32 \ ...
by nickshore
Sat Nov 17, 2012 6:05 pm
Forum: General
Topic: RB751U 2HnD to version 6.0-rc3 with variable processing
Replies: 11
Views: 2993

Re: RB751U 2HnD to version 6.0-rc3 with variable processing

I am seeing lots of cpu being used by the flash process on a 751U as well. Tried to make a supout but it didn't like it - tested on dev version, still the same I'm testing by doing a wget over wifi on a single stream, into a pppoe client onto my DSL. Seeing flash process jumping up to around 35% in ...
  • 1
  • 2