Community discussions

MikroTik App

Search found 9 matches

by katbert
Wed Sep 01, 2021 8:50 am
Forum: General
Topic: Select interface for Netflow don't working
Replies: 2
Views: 555

Re: Select interface for Netflow don't working

Аfter 3 days - Newflow analyzer show additional interfaces IfIndex15728782,IfIndex15728782 - for each established VPN connection
by katbert
Fri Aug 27, 2021 3:40 pm
Forum: General
Topic: Select interface for Netflow don't working
Replies: 2
Views: 555

Re: Select interface for Netflow don't working

My netflow setup:
by katbert
Fri Aug 27, 2021 3:38 pm
Forum: General
Topic: Select interface for Netflow don't working
Replies: 2
Views: 555

Select interface for Netflow don't working

Hello! I’m using Mikrotik x86 6.48.3 I’m trying to setup netflow reporting using Manageengine Netflow Analyzer. In Traffic Flow general settings I select only one interface (LAN). But in Netflow Analyzer console I see two interfaces (LAN and WAN). My Netflow setup on Mikrotik side is very simple - e...
by katbert
Thu Nov 05, 2020 6:12 am
Forum: General
Topic: Incomplete IPSec site-to-site tunnel example in wiki?
Replies: 7
Views: 860

Re: Incomplete IPSec site-to-site tunnel example in wiki?

So, this is my second CHR firewall firewall config (allow only icmp from remote network): [admin@MikroTik] > ip firewall filter print Flags: X - disabled, I - invalid, D - dynamic 0 ;;; Accept - established, related chain=input action=accept connection-state=established,related log=no log-prefix=&qu...
by katbert
Wed Nov 04, 2020 5:38 pm
Forum: General
Topic: Incomplete IPSec site-to-site tunnel example in wiki?
Replies: 7
Views: 860

Re: Incomplete IPSec site-to-site tunnel example in wiki?

I don't use FastTrack rule in my lab environment, so I don't use FastTrack bypass rules. About There are multiple ways how to solve this. The simplest one is to make the rule above match only on packets which do not mirror-match any IPsec policy, by adding ipsec-policy=in,none to its condition list....
by katbert
Wed Nov 04, 2020 5:12 pm
Forum: General
Topic: Incomplete IPSec site-to-site tunnel example in wiki?
Replies: 7
Views: 860

Re: Incomplete IPSec site-to-site tunnel example in wiki?

Thanks for the detailed answer!

Post about unsupported FastTrack in CHR on this forum:
viewtopic.php?t=147804
viewtopic.php?t=143747
by katbert
Wed Nov 04, 2020 11:30 am
Forum: General
Topic: Incomplete IPSec site-to-site tunnel example in wiki?
Replies: 7
Views: 860

Incomplete IPSec site-to-site tunnel example in wiki?

I'm configuring IPSec site-to-site tunnel in demo environment using this wiki: https://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Site_to_Site_IPsec_tunnel I have two CHR 6.46.7 on Hyper-V. Each CHR have only two interfaces - LAN and WAN. First CHR LAN IP is 192.168.1.1, second CHR LAN IP is 192.168.2.1...
by katbert
Tue Aug 25, 2020 7:42 pm
Forum: RouterBOARD hardware
Topic: E3372h-320 USB/lte1 problems constantly LTE1 link up-down
Replies: 68
Views: 56932

Re: E3372h-320 USB/lte1 problems constantly LTE1 link up-down

Same issue with MikroTik hAP ac and Huawei E8372h-320 (E3372 with Wi-Fi and advanced web interface). I'm trying RouterOS 6.45.9 and 6.47.2 - no luck . 19:44:42 interface,info lte1 link up 19:44:42 interface,info lte1 link down 19:44:42 interface,info lte1 link up 19:44:44 dhcp,info dhcp-client on lt...