MikroTik

karo84

+10000 for DNSSec/DNSCrypt . It is a big need today to use DNSCrypt. Thanks!

karo84

Hello. After updating to 6.44.1 everything was OK. But in some days certificates for ipsec had been expired and I had to add new certificates. So I can not connect to my router now. Getting "ipsec,error identity not found for peer:". Before this I was connecting from Iphone and from Window...

karo84

Hello. PPTP connection on ROS 4.17 download speed is limited to 2Mbps. There is no queue, no limitation created by me. The same user connects to router via PPPoE, everything is ok. No Speed limitation. What is the difference between PPTP and PPPoE connections. Why PPTP is limited, but PPPoE is not l...

karo84

Hello, we are using Mikrotik ROS 5.7 version on i3 based PC. Yesterday I noticed, that when my users are connected via pptp to my server, they CAN NOT download more than 1.5Mbps by One session (say downloading from a web server by windows internet explorer or firefox or google chrome,). But when the...

karo84

Thanks for Reply
I am waiting for more replies)

karo84

Thanks For Reply
I would be glad to see more suggestions)

karo84

Hello We are using Mikrotik ROS over 4-5 years, now I want to increase the power of our server, and I have to select an powerful server could You please help me with hardware selection ? I would like to have an server on i5 or i7 CPU with RAM 2-4 GB DDR3 Has anyone tested such configuration of hardw...

karo84

Thank You very much, I'll try and tell You the result.

karo84

Hello
I'd like to block anonymous proxies that using ssl protocol.
Is there any way to block that sites?, my users can only use tcp ports 80 and 443.
Could You tell me please how to block, say ultrasurf by regexp ?
I'm using ROS 4.13 .

karo84

Hello
I'd like to block anonymous proxies that using ssl protocol.
Is there any way to block that sites?, my users can only use tcp ports 80 and 443.
Could You tell me please how to block, say ultrasurf by regexp ?
I'm using ROS 4.13 .

karo84

so drop 69.63.189.0/24

will not work )
As say my proxy server is from address 72.XX.XX.XX/24 range)

karo84

Thats wrong, because if you block facebook using this way (web proxy) they can access it throw anonymous proxies. The best thing is to drop facebook.com ip addresses: Name: facebook.com Addresses: 69.63.181.12, 69.63.189.11, 69.63.189.16 Add those ip's to and address list called facebook Go to IP-F...

karo84

Personally, I would use the built-in web proxy, but this is just my preference. That being said, you could also use a DNS static entry for all *.facebook.com and redirect to your router IP, or 127.0.0.1. The Mikrotik Wiki has a good entry on this topic. Hope this helps, Thanks bro, its very helpful...

karo84

Hello I want to block just www.facebook.com or facebook.com sites. (I do NOT Want to block sites by IP address, as they can be avoided by anonymous surfing) How can I block this sites ONLY. There are some sites, which have links to www.facebook.com. When I block the sites by content (/ip firewall fi...

karo84

Hello
How to block skype using l7 filters. I have tried to use http://www.mikrotik.com/download/l7-protos.rsc rules, but ther was some problem, when I block skype packets all https traffic is blocked((.
Is there any regexp right for skype?

Thanks
Regards Karapet Aznavuryan

karo84

I have the same issue too.
How To limit simultaneous logins?
When working without Userman everything is OK, (only-one=yes).
How To do same Limit in Userman?
I do not want to use CallerID.!!

Help. this is urgent.

karo84

Hello We are using The Dude for network monitoring and for logging. Very Often the Dude Server crashes, the data files and configuration files are on the server, but the dude starts as it is starting for the first time (null configuration, even admin has no password). We have tried and on windows pl...

karo84

Hello,
Could You give me the list of equipments that Mikrotik ROS can be installed on.
We're going to setup a power MT Server with Gb (PCI, PCI-X)cards.
Waiting for Reply)

karo84

There could be up to 10 Gbps traffic, How much traffic can be loaded in router ?

karo84

We have PPP service. Users are being limited by Userman.

karo84

Thanks, now we are doing so You have mentioned above, But we'd like to limit by group not by a user.

karo84

All traffic must pass via ipsec tunnels, there could be up to 150 ipsec tunnels.

karo84

Hello,
I'd like to know what combination of hardware can be used, to get maximum Bandwidth of traffic.
I've seen the Routerboard 1000 , 3.2 Gbps, if we want at least 10 Gbps bandwith and ipsec encryption, what hardware could we use.

thanks
Regards
K. Aznavuryan

karo84

How to know the version of user manager. I have written that we're using MT ROS 4.9 version.
Could you give some example how to limit by group as in Local using profile.

karo84

Thanks For Reply, I have done already static route with -p option

karo84

No. ((

karo84

Hello, How Can I Limit users speed in userman, say, as in local using profile, when I set In profile LImit 512k/512k if working without Radius everything is ok, But when I want to use Userman(radius) I have to set limits for eash user manually. How can I limit users automatically ? We are using ROS ...

karo84

Hello,

I Want to block the packets (connections ) which have already been NAT-ed. (Say, Do not Allow User to share his internet, via windows, or some router)

I'll be glad To see a nice answer.

I'm using ROS 3.30 version.

Thanks waiting for your reply

karo84

Hello.
Could One tell how to block online videos using L7 filter?
I know I need some regexp, please write this regexp,

THanks

karo84

Ia have tried. No difference.
Thanks

karo84

HI! /ip firewall filter print chain=forward 0 chain=forward action=accept src-address=23.3.3.10 then / ip firewall filter remove [/ip firewall filter find src-address=23.3.3.10] /ip firewall filter print chain=forward 0 chain=forward action=accept src-address=23.3.3.10 or / ip firewall filter remove...

karo84

Please Help Me to write regexp in MT to match http for example "char" in the url and then block or allow that requests.
I have tried, but no result.

Help Me Please.

Thanks
Regards
Karapet

karo84

When using Cisco it logs duplicated Ip Address.
But I want To have some method To log the Duplicated Ip with ROS.

karo84

Thanks)

karo84

Hi!
How To Detect and log the mac address of the bad host, which has the same IP with MT ROS. ?
Please Help Me, It's urgent.

Thanks
Regards
Karapet

karo84

Could You Tell me How to write the correct form?

karo84

Hi!
I have written some regexp pattern to match word char in the HTTP URL. But I can not use it In MT layer7 filtering why?
Here the the pattern

(http):\/\/[a-zA-Z0-9_\s\-".:;#[{/~}]+((char)=?)

I have tested it is working one, but It does not work in Mt.

karo84

Hi!
How we can filter the Http request url content without web-proxy?
I am using ROS 3.0.

THanks

karo84

Hello I'd like to know if it is possible to add some route for pptp user. Here some the setup. [as@xxsx] > ip ad print Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK BROADCAST INTERFACE 0 192.168.101.1/24 192.168.101.0 192.168.101.255 ether1 1 192.168.150.129/25 192.168.150.128 192....

karo84

Thanks for Reply

karo84

Yes I Use Proxy, MT Proxy,

karo84

Hello, Please Help Me To Block youtube.com as my users cannot surf the site http://www.youtube.com.
I am using MT ROS 3.20 I would like to block it by regexp, but I don't know how.
Help me please solve the problem.

Thanks
Regards Karapet Aznavuryan

karo84

Of Course such problem occurred to all my clients.
Sometimes antiviruses told that some Trojans downloaders were trying to be opened.

karo84

in that case how to prevent for not being cached such pages? Yesterday we had a great problem, as there was cached everything, and when we were trying to open any site, my download manager started, like that it was going to download the requested site. After clearing the cache and the reboot it bega...

karo84

Thanks,
Normis, but how to deny caching pages which url contain cgi-bin or ? symbol.

karo84

Hello
How to set cache option not to cache dynamic pages.
I use ROS 3.17
please tell me the way how to configure that setup.

Thanks,
With Regards Karapet Aznavuryan

karo84

I think it is done.
Now when I look at logs on Disk, I see just 1 line.

Thanks

karo84

Hello,
I'd like to know the way to clean the logs on Disk.
I have enabled logging on disk and now I want to clean that log, in order to free up the space on HDD.
How can I Do ?

I Use ROS 3.17 on x86.

Thanks with the best Regards
Karapet Aznavuryan

karo84

I want to use that server to have cache on it and filters NAT everything and even Layer7 Filter.

karo84

Hello, I'd like to know can I use such server (Server HP DL380R05 E5345 Performance EU Svr), on which will work Mikrotik ROS Here the specifications * Processors: o Quad-Core and Dual-Core Intel® Xeon® processors for blazing performance; systems support up to 2 processors o 1333/1066/667 MHz front s...

karo84

Yes I have, But I needed it one month ago.
But thanks, I think we can do the backup now.
Thanks

karo84

Hello,
I am using bridge on my NAS and I would like to have some script which could run and find out the same mac-addresses on difference interfaces. How can I do that setup?
Thanks With Great Regards
Karapet Aznavuryan

karo84

Hi everyone. Can I use User-Manager's database on an another HDD (say on secondary-master). I'd like to know as the database of my User-Manager has reached its limit. And I see such errors on screen 3:25:14 manager,error,info,debug failed to add log: database disk image is malformed 03:25:15 manager...

karo84

on which version of ROS?

karo84

Up to 10 Mbps, and I am going to enlarge that bandwidth.
I'd like to know what Motherboard could you advice to use.
Thanks

karo84

I have changed already 4 PC all they were PIV but no difference.
Only difference was the interval of crash.

karo84

No Yet, But soon it will be 100%, as the number of my users grows.

karo84

We have changed the router PIV > PIII IBM
and it works fine, but here the cpu is always ~ 60% used.

karo84

Log does not tell anything,
only when I click to open new terminal the above mentioned error is appears.

karo84

We use
P5PL2 with 1 GB of RAM
http://www.asus.com/products.aspx?model ... =11&l3=244

karo84

Hello My Router crashes almost every day with such problem unregistered net device ... and it begins to reboot for 5 minutes or often untill I switched of power. what is going on? I do not want to upgrade to 3.1X because of PPPTP and PPPOE DIE issue. who can tell me what can I do, Any suggestions or...

karo84

Thanks Chupaka, Is there any way to change the files downloads route?
Thanks

karo84

Hello everyone, I use ROS 3.14 on X86, I'd like to know how can I use Layer 7 option to mark, say the packets which belongs to .exe files and change the route for them. I want to change the file download routes to another way, how can I do that setup please help. THanks With The Best Regards Karapet...

karo84

sep/30/2008 22:57:08 system,error,critical System rebooted because of kernel failure So today My ROS has rebooted many times, who can tell me why? My users are authenticated by radius server. Who can tell me why do I receive shuch errors, what is the cause of this crash? Some advice, any sugestions?...

karo84

I have already done, but I want to know, what it will do ?
For what it had been created?

Thanks

karo84

Hi everyone,
I have ROS 3.10 which is doing only NAT,
In ip firewall service ports I had enabled SIP option, and my clients who used SIP could not work,
When I disabled that SIP option, they began to work properly,
Who had seen such issue?
What did it mean?

Thanks
With Regards
Karapet Aznavuryan

karo84

Yes, how I see the problem stays, there was no solution.
I hope it will be fixed later.
I have upgraded My 2.9.51 to 3.14 after, but the PPPOE DIE problem was going on.
I had to downgrade to 2.9.51, in order do not have problems with my clients.
When it will be fixed? Who can tell us?

karo84

Do a /system reset-configuration
Then reconfigure manually.

I have done.
All the configuration I have done step-by-step for 2 days.
But there is no use.

Regards
Karapet Aznavuryan

karo84

We have the same problem view the topic http://forum.mikrotik.com/viewtopic.php?f=2&t=26079 But I use freeradius server. I do not think the problem is attached with radius server as yesterday I disabled it and my users where authenticated via local, but the router continues to crash no differenc...

karo84

Hello. I use P-IV with 3000 mhz processor Dual Core (system hardware set multi-cpu=no) and 512MB RAM. Every day 2 or 3 times my HERO X86 is crashed. On the screen of router I can see just such errors unregister_netdevice: waiting for ppp22 to become free. Usage count = 52 unregister_netdevice: waiti...

karo84

I have already sent supout file to mikrotik team, but there is no news yet,
I hope they'll fix that problem, as it is very important for Mikrotik Users.
Almost every Provider uses PPTP or PPPOE Servers to provide their services.
So we need it to work properly.

With Regards
Karapet Aznavuryan

karo84

I forgot to write this message which I have seen on my router's display
It was

unregister_netdevice ppp ...

the other part don't remember, this message I receive when the router is crached.

Regards
Karapet Aznavuryan

karo84

It is x86, and I have already sent supout file to Mikrotik support center.

karo84

Hi everyone, who had seen such strange crash? Router is crashing, no way to connect to it, no PPTP or PPPOE connection could be maid. after reboot when first time I logged on it I saw below written error system,error,critical System rebooted because of kernel failure What is this? Why did it crash? ...

karo84

Hi, Mikrotik Users On my PPPOE server (ROS 3.13) continues PPPOE DIE, So PPPOE connected, is working very well, but after some minutes it dies, no traffic is passing through it. Such problem there was with PPPT on earlier versions, but on 3.13 this problem we can see just with PPPOE, When this probl...

karo84

Every thing is ok, except queues,

No Simple queue is working,
no traffic is seen on queues,

has anybody tested queues?

karo84

I have installed 3.12 on PIII, with minimal packages (System, PPP, DHCP, Wireless) I have tested PPPOE and PPTP, BRIDGE. Everything was well, BUT.... simple queue did not work even for a second, and when I tried to create a queue-type (pcq) I lost My Router, (Router Crashed 3.12) So We have to wait ...

karo84

I have tried to install fresh version, but it is not going to boot from hard drive, uncompressing linux ... and it is all done, system rebooting and so one, I am glad, because I have done just tests :) I am waiting for newer version, because I have problem with my clients according to PPPOE and PPTP.

karo84

On ROS, 3.10 and 3.11 a lot of problem I have, My users connect via PPTP and PPPOE after some (4-7 minutes) they can not use internet, as there is no traffic passing through their PPPOE or PPTP interfaces, After disconnect and reconnect they can work some time, what is THIS, It's a bug? I have Reset...

karo84

on 2.9.51 there wes no such problem,
if you want I can send the suppout file,

karo84

Hi everyone, After Upgrade from 2.9.51 to 3.11 My Firewall began work very bad, I have written some rules to allow DNS requests but they did not work at all, My clients are connected via PPTP or PPPOE But they could not open any sites, as they did not receive DNS answer from the Router, Why? Please ...

karo84

Good Day, I have such problem, too when I was using 2.9.51, there was problem with D-link DI-524 and DI-624 models, as they where connecting and there was no TCP traffic through the PPTP tunnel, I am using eoip tunnels which are bridged in my PPTP server, after upgrade to 3.10-3.11, I have a lot of ...

karo84

I have such script :global IP "192.168.23.45" ; /ping $IP count=3 ; :global tmpmac [/ip arp get [/ip arp find address=$IP ] mac-address] ; :log error $tmpmac ; :if ([/ip arp get [/ip arp find mac-address=$tmpmac] interface] = bridge1) do [:global tmpbr [/interface bridge host get [/interfa...

karo84

Hi everyone , I have ROS 2.9.51, on which is running VPN server, I have bridge on that router and my clients are connecting through this bridge, (Their VPN Server's IP Address is My Bridge's IP Address). Everyone is connecting and is ok. BUT when we try to connect to PPTP server via Dlink DI-524 or ...

karo84

Hi everyone, I have ROS 2.9.51, on which is running PPTP Server and PPPOE Server, I use freeradius FOR Users AAA, Users can log in with the same User-Name My Radius server is working very well, The Simultaneous-Use checking too, In checkrad.pl I have written 'ppp active print without-paging brief' a...

karo84

THanks Sergejs,
I hope it'll be done soon.
Waiting For New User-Manager

karo84

Hello, I'd like to know can I have Credits (say tarrifs ) for MB,in order to sell MB-s not time?
How to create MB credit in order to extend the givven user's traffic (MB)?
How can I do that Setup?

Thanks With Best Regards Karapet Aznavuryan

karo84

How To setup reverse lookup in ROS 2.9.51
say 123.12.23.45.in-addr.arpa
How Please Let Me know.

Thanks

karo84

I canno send the supout file, as I have downgrade it to 2.9.51.
When I upgrade it to 3.7 I'll le You Know,
Now All My Clients Are NATed By that Router.

karo84

Ok Thanksfor atention.

karo84

Yes Normis,
But I want o use Ip firewall addresslist then deny the IP address which are in that list in web proxy.
Can tell how?
Thanks

karo84

Hello.
I want to deny some clients to access some web pages using IP firewall address-list feature.
How can I do That setup?

Thanks with best regards
Karapet Aznavuryan

karo84

Thanks everybody for such honesty, Because I have upgrated from 2.9.51 to 3.7 and my Proxy, Redirection don't work at all, After that when bandwidth is near to 2Mbps ROS stops redirecitons HTTP requests. One question, If I downgrade to 3.3 Will it work? Thanks With the Best Regards Karapet Aznavuryan

karo84

I have the same problem too.
Even I use redirects from IP>Firewall>nat>dst-nat to adresses to ports, NOT USING IP WEB PROXY feaure, I have that problem.
I have to reboot the Router (ROS 3,7) in order i works.
Before I use 2.9.51 here was no such problem.

Thanks

karo84

Normis if your question is direced to me, I'll answer. So I have PIII on which is running ROS 3.7, Before was ROS 2.9.51. When it was running ROS 2.9.51 everything was ok, but I had to use several proxy servers to servemy clients. For that solution I thought, that I could upgrade to 3.7 and use the ...

karo84

After upgrate My ROS 3.7 does NOT WORK almost for Redirecting HTTP requests,
I thought to Upgrade to 3.7 from 2.9.51 for using several Proxy servers, But now I am having just Problems.
I don't know what to do

Thanks

karo84

Hello I have updated from 2.9.51 to 3.7 and having a lot of problems according to HTTP redirects when redirected traffic is less than 1,5 Mbps it works, otherwise it craches and there is no response. I ask MikroTik Team what is going on, I have a ot of problems now with my clients, what can I do? So...

karo84

Thanks Chupaka,
I have already done using 2 different ROS.
Thanks Very Much;

karo84

They are in different IP Segments,
Thanks

karo84

I have 2 ROS 2.9.51 PIII 1 For NAS Server, and the other is for NAT Server to Internet Look at the picture, this is the topology. My Squid Is in the same network with NAS (192.168.250.0/24 network) My Clients (PPTP and PPPOE) get IP addresses from 172.16.0.0/12 network. I just want to redirect the H...

karo84

First of All You have to generate public key, and then You can use say such command PPP active print You must put the same key in your mikrotik router, user ssh-keys import file="your pub key " running ssh 192.168.250.250 -l admin -i .ssh/id_dsa /ppp active print command on linux will prin...

karo84

well, if your users and squid server are in one subnet, you should use srcnat along with dstnat. but you will loose the ability to check user's IP on squid server. Web Proxy returns this ability back =) Thanks Chupaka. My users are not in th same subnet with Squid, When I put the proxy server setti...

karo84

My bad! :oops: /ip firewall nat add chain=dstnat action=dst-nat protocol=tcp dst-port=80 to-addresses=192.168.0.2 in-interface=ether1 This way only ether1 (internet) will use this nat. Your local users will still go through the proxy. EDIT: You also may want to do a /ip firewall nat print and insur...

karo84

So, Look at My configuration, I have Mikrotik 2.9.50 ROS and Squid running on Fedora 8 Everything is ok. My Squid listens on port 61119, when I redirect the HTTP ports via Ip>Proxy or IP>Web Proxy to the Squid's 61119 port, everything works fine, But when I do dst-nat to my squid's 61119 port, somet...

karo84

Thanks Ratkim

I have tested, But it does not work at all.
some body help, Please.

karo84

Hi every one,
I want to redirect the HTTP ports to my proxy server (Fedora

, but NOT USING IP>Proxy or IP>Web Proxy.
I just want to redirect that ports using ip firewall feature.
Any advices, Any suggestions?

Thanks
With Best Regards
Karapet Aznavuryan

karo84

Sergejs Thanks For Reply.
Now I have put the default settings for the PPPoE Server,
But the sameproblem I have on 2.9.51.

karo84

Hi everyone, I had a lot of problems with RB133 boards, When we buy them the ROS was 3.0. After that there were ne versions, and I upgraded them to 3.1 , 3.2, 3.3 ... to 3.6, After the last upgrade (to 3.6) My PPTP and PPPOE clients could not connect to internet. They connected to NAS (2.9.51) but t...

karo84

Here the scheduled script
name="schedu"
on-event=

:foreach i in=[/ip arp find ] do=[/ip arp remove $i]

start-date=dec/12/2007 start-time=02:14:19 interval=2m run-count=200 next-run=04:04:19

karo84

Hello Everybody We use ROS 2.9.51 on PIII board. There is a bridge rstp on, Often, I have to delete all arp entries, in order to have ping (connection to clients). Now I have written a script which deletes arp entries every 2 minutes. I thinkthis is abnormal act. Why? Any suggestions, any advise? Re...

karo84

Hi
Port-Limit will not work for PPP users.
You have to enable such option on RADIUS server, that will disallow duplicate
sessions.
FreeRADIUS server supports feature that is called 'Simultaneous-Use'. You need
to enable this.

Thanks
Regards Karapet Aznavuryan

karo84

Did You use "Simultaneous-use" option for groupe or for a user, ? I think, there must be some differences. I have tried the Radius Manager. In RadMan is used "Simultaneous-use" for each user, according to this the number of rows will grow up in MYSQL Database, but I want to use t...

karo84

Hello I'm Very glad to introduce you to my problem. I'm using Radius Server (Freeradius), everything is ok, but I have problem limiting SAME logins. A username can be used to connect simultaneously. I have enabled the simultaneous-use option in Radius server. But I'm having a lot of problems, becaus...

karo84

Look the MikroTik Support Center Has Answered to My question. Hello, you cannot execute remote commands through ssh from router, you can do that from any other linux host that is available to you. also access to router without password is not advised to, as a better practice use key to log in remote...

karo84

I have tried, but no use,
I could not even create a session,
Try using this for getting pptp-server client-address,
:global malibuIP [/interface pptp-server get [/interface pptp-server find user=Mag ] client-address ]
:log error $malibuIP

karo84

Can You send me the script?

karo84

Why Do You need to change Nas-Ip-Address Attribute?

karo84

Have selected the remote-Ip address, or IP-Pool for the given profile?
If You haven't You must specify some address.
Thanks.

karo84

Hi everyone I have freeradius on Fedora Core 6, and it is working fine, Any attribute I set there is sent to NAS Server (MT 2.9.50), For Example, Framed-Compression','=','Van-Jacobsen-TCP-IP'); 'Framed-Protocol','=','PPP'); 'Framed-MTU','=','1500'); 'Service-Type','=','Framed-User'); 'Mikrotik-Rate-...

karo84

Hi everyone, I need some help, so I want my MT Router (2.9.50) to Connect via SSH to another MT Router (2.9.50) to send some command (say run some script or something like that). Can You Help Me ? I have tried this setup connecting from linux. My SSH had no password and it was working very Well. Now...

karo84

Hi everyone, I need some help, so I want my MT Router (2.9.50) to Connect via SSH to another MT Router (2.9.50) to send some command (say run some script or something like that). Can You Help Me ? I have tried this setup connecting from linux. My SSH had no password and it was working very Well. Now...

karo84

Hi I have made quee-tree using PCQ type. I have divided my users by networks, and have pair of quee-trees for each group (For Upload, For Download). Now I want to use Burst. How can I do that setup. /quee tree add name="queue1" parent=global-out packet-mark=25121 limit-at=0 queue="PCQ...

karo84

Do You use radius server ?
If yes, in radius server settings UNCHECK LOGIN CHECHBOX.

karo84

Thanks Very Much,

karo84

Hi I have 5 routers working with ospf on. Everything is ok, but I have problem with routlist. So I don't want some network routes to be send to other routers. How can I do that setup ? I mean the connected routes, not all to be sent to peer. Tell me please how can I do that setup? Thanks With Regart...

karo84

rafael Thanks, For reply, But we have done it several times, but there was no use. (

karo84

Hi We have ROS 3.0 on routerboard 133, and have bridged one EOIP with one Ethernet interfaces. In bridge filter counters are only 0, and sometomis they become very large, or very small even minus. What is for problem, I have tried checking use IP firewall checkbox, and without it, but there was no d...

karo84 · Re: Yahooooooooooooo Try to Update Your ROS to 2.9.27 or higher version

Try to Update Your ROS to 2.9.27 or higher version

karo84

Thanks Very Much for attention, I have large network like the such that I have attached, so I need BGP for dinamicaly change routes when changes the network's architechture and OSPF for finding the shortest path to the Main Router, Please give me the Link Bassam Halabi's "Internet Routing Archi...

karo84

Hi
You can do that setup using eoip tunnels and you will have only one PPPOE Server,
If you need MySQL and radius configuration LOOK up here
http://wiki.mikrotik.com/wiki/How_to_se ... _By_Ramona
Try this may be it will help you

karo84

Hi Everyone. I want to do such setup, I have made this network, (see the attachment), I want to do BGP and OSPF together, I want to do balanceing and failover with having BGP and OSPF options on I use RB 133 and RB 150 for this stage, but if everything goes well, I am planing to enlarge my network. ...

karo84

Hi everyone, I have the same problem, I need to setup web proxy and balancing with 3 Gateways, I need it very much, Can You help? Now I am doing the setup, wivh is shown on wiki (load balanceing), But I need do the same with 3 or more Gateways Thanks With Regard Karapet Aznavuryan

karo84

Chupaka May Be You can give some examples, how to use dns limit? I'll be very glad to see them, Now I'm trying to limit them by the following /ip firewall filter add chain=input action=accept dst-port=53 protocol=udp limit=2400/1m,5 comment="limited dns" disabled=no add chain=input action=...

karo84

Yes I understand I have firewall rules, that are working fine, but I need to limit DNS requests somehow. Sometimes I see DNS does not work on my router (ROS 2.9.50), when I torch the interfaces, I see that someone from my clients attacks (DNS UDP port 53 a lot of requests). How can I solve this prob...

karo84 · Re: How To choose The Best Channel ?? It is on 2.9.49

It is on 2.9.49

karo84

Of course on Access Point's Side

karo84

How To Protect DNS Attacks Thanks
UDP 53 port How To Limit By SRC address

Thanks

karo84

Hi Every one I have written a script to choose the channel which noise-floor is lower, but it seems it doesn,t work well Look at My script what parameter can I choose to have the Best channel ?? :foreach i in=[/interface wireless find mode=ap-bridge] do={/interface wireless monitor $i once do={:if (...

karo84

I am Having the same Problem and on My routers
Some VPN connection could not be established to other V 2.9.4x Routers
Fix It Please

Thanks
Karapet Aznavuryan

karo84

what version is your ROS
And may be you have to know which is in-bridge interface and which is out-bridge interface
I think Your queue works only on one of these directions
Check it

Regards
Karapet Aznavuryan

karo84

I have tried to change the TTL value to 1 but it seems not to work, I could not connect to internet. I have the same problem Prevent NATed access may be try to use conection limit, or packet limit I don't know I would be Very glad If somebody solves this problem With Regards Karapet Aznavuryan

karo84

: foreach i in=[/interface wireless find ] do={/interface wireless monitor $i once do {:if ($current-ack-timeout > 100) do {:local tmpfreq [interface wireless get [/interface wireless find interface=$i] frequency] ; :log info $tmpfreq ; :set tmpfreq ($tmpfreq + 5) ; :log warning $tmpfreq ; :if ($tm...

karo84

OK Thanks I'll try to Upgrade to the latest Version, and then try to run the script.

karo84

Thanks All Very Much

karo84

MRZ
What You Mean?
What Can I do?
Upgrade?

karo84

Thanks For Reply Here My Script :foreach i in=[/interface find name=WiFi-Clients ] do={/interface wireless monitor $i once do {:if ($noise-floor > -100) do {:local tmpfreq [interface wireless get [/interface wireless find interface=$i] frequency] ; :log info $tmpfreq ; :set tmpfreq ($tmpfreq + 5) ; ...

karo84

I have writen just the same script and on others and there was no Difference
It doesn't give any errors and doesn't work at all.
Somebody can Help?

karo84

Yes I understand that :foreach i in=[/interface is equal to /interface print and :foreach i in=[/interface wireless is equal to /interface wireless print In Both Case there must be no difference as I use different Interface names on one Router So My ROS version is 2.9.27, What you think Can it be a ...

karo84

Thanks krigevr Very Much

I tried But It does not work
I don't Understand why?

karo84

Hi On my ROS (PIII) I have written a script which is choosing say better channel look at My script [admin@Monument] > system script print 0 name="script1" owner="admin" policy=ftp,reboot,read,write,policy,test,winbox,password,(unknown) last-started=oct/30/2007 00:07:31 run-count=...

karo84

Hi All I use web-proxy, but sometimes its goes down and this proxy that I use is not mine. I would like to know can I have any script checking its status, when the proxy server doesn't work it turrns Off proxying or something like that. I think I can check if it is working or no by following [admin@...

karo84

Thanks

karo84

Hi Every One
We have some wireless 108G MIMO DWL-G520M Cards
Can We use these card on ROS.
I have tried, but The ROS didn't recognize it Att All
What Can we do. Is there any opportunity to Use MIMO Cards On ROS ?

With Regards

Karo Aznavuryan

karo84

Hi You May create Queue Types (PCQ) For Download And For Upload For download and Upload Limiting Per IP You must Do / queue type add name="PCQ-Download 64k" kind=pcq pcq-rate=64000 pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=2000 add name="PCQ-Upload 64k" kind=pcq pcq...

karo84

Hi every one I have upgrated 2.9.45 to 3.0rc6 and having a lot of problems It is working very bad CPU is 100% almost always Scanning the wireless it shows just 2-3 AP-s, But with 2.9.45 They were ~30, When testing Banthwith it crashes, I don't know what to do I need 3.0rc in order to disconnect wire...

karo84

What Do You Want TO DO please write Detailed

karo84

Thanks For Help
But How could You show me some examples ?

Thanks

karo84

Hi Everyone
I would like to knowi,if it is possible to protect Router (Mikrotik ROS) from DNS Attacks, and how.
Please help because I am having a lot of problems.

Thanks
With Regard
Karo Aznavuryan

karo84

Look when u mark and disable the passthrough option packets that matched that rule (source, destination) will not apear in the lowest levels

If u have 2 adsl. you have to mark and disable passthough option to mark your traffic for all marking(Connection and Packet)

karo84

what type of queues do You use?
try To mark your users traffic and then use them in queues

karo84

try Upgrade the ROS to the lastest version
Or reset all Configuration and setup everything again

karo84

when you enable passthrough it means that packet will continue to be marked or something else done by the next rules example /ip firewall mangle add 11 chain=prerouting src-address=191.203.26.196/31 dst-address=84.235.229.0/24 action=mark-packet new-packet-mark=123 passthrough=yes 12 chain=preroutin...

karo84

Thanks Sergejs You have Already Answered to my question

Re: [Ticket#2007092966000375] Help With Radius Discconections

With Regards
Karo Aznavuryan

karo84

Thanks Uldis I found My Problem And Now It is workin well.
Yes You are Right I was having Problem with my PPPOE Server Configuration

Thanks
With Regards
Karo Aznavuryan

karo84

Uldis Now I have 3.0rc5 running on my router but I am having problems with PPPOE, 21:14:05 system,info,account user admin logged in from 192.168.254.25 via telnet 21:14:46 system,info system identity changed by admin 21:15:00 pppoe,info PPPoE connection established from 00:13:A9:02:24:80 21:15:00 pp...

karo84

Thanks Uldis

I'll Try To change My ROS but I don't know is it reliable(I mean ROS 3.0rc5)
Now My ROS is 2.9.46

karo84

Try this Setup # / interface pppoe-server server add service-name="" interface=eth1-Clients max-mtu=1480 max-mru=1480 authentication=mschap1,mschap2 keepalive-timeout=15 one-session-per-host=yes \ max-sessions=0 default-profile=default disabled=no keepalive-timeout what is your Value ? I t...

karo84

HI Every ONE I would like to know has anybody ever done such Setup which I'm going to describe? I have Radius Server and Everything Is FINE. My radius Server Can Authenticat, Authorize and Account my user. But I have Problem with wireless clients disconnections Here My Setup Sending Disconnect-Reque...

karo84

HI Every ONE I would like to know has anybody ever done such Setup which I'm going to describe? I have Radius Server and Everything Is FINE. My radius Server Can Authenticat, Authorize and Account my user. But I have Problem with wireless clients disconnections Here My Setup Sending Disconnect-Reque...

karo84

So I Solved This Problem Who wants to Know I can Tell IN MY Radius Server I commented (# PAP ) PAP Module Of Authorization and Know MY Wireless Clients are Authorized by Radius Server, BUT NOW I AM NOT ABLE TO DISCONNECT THEM Sending radlient disconnect command WHY ?, IS MIKROTIK UNABLE TO DISCONNEC...

karo84

Hi Everyone I have RB 112-s and I want to Authenticate My wireless clients Using Radius Server I have Radius Server and its works FINE but I can not Authenticate wireless Clients I receive following Error on My Radius Server when I run it in debugging mode (My Radius server IS FREERADIUS) Login inco...

karo84

Hi Everyone,
I need to Setup Billing which must Work with Mikrotik,
I need to Setup AAA For PPTP, Wireless Using Radius Server,

Who can Help me what Radius Server or Billing System to choose ??
I Am NOT A PROGRAMMER

Please Help me To Solve that Great Question

karo84

Thanks Very Much

karo84

Faton Thanks for advise I tried But there was no result Look at my experiment's result when I set the TTL to 64 or smaller to 8 I see C:\Documents and Settings\Karo>tracert www.mikrotik.com Tracing route to mikrotik.com [12.22.39.145] over a maximum of 30 hops: 1 487 ms 492 ms 485 ms a039145.colo.fs...

karo84

Thanks To All Very Much
I'll try and tell you the result of my experiments

karo84

Thanks For Attention So I have such setup for my Router / ip firewall nat add chain=srcnat src-address=172.16.0.0/12 action=masquerade comment="" disabled=no User whos VPN IP Adress is 172.17.8.25 is using NAT for his purpose On his side, on his own router but we havn't any agrees to give ...

karo84

Thanks For Reply
But I have already done that setup
I have Queue Tree with PCQ Type
And I give my users equally traffic but I want my users don't use NAT Can You help me ???

karo84

Hi every one,
I want to know if enyone could help me to Limit Nated Traffic from my users' Network.
I give each of my users 512kb/512kb
Sometimes its connections number become very larg. I can only Serve home users, please help me to solve this great problem.

karo84

Hi every One How to make the radius Server to send Disconnect-Message to my Router, when PPTP Client's Traffic is reached to its limit. I have MYSQL and i send my traffic information via Netflow, I Use Radius Server for authentication and accounting. I need do disconnect My users sending Disconnect-...

karo84

Hi I want to know if you have NATed all your traffic to Your ISP
You can do or masquarade or src-nat out interface select the interface to your ISP

karo84

Hi Everyone, I have many Mikrotik AP-s in my network, and my wireless clients use different equipments. Sometimes I have to disconnect some wi-fi clients, how can I do that setup, If default-authenticatin is enabled?
I need to enable default-authenticatin because I use DHCP Server on My AP-s

karo84

Thanks Very much, I did what YOU say and it is working

karo84

Can enyone explain why when using PCQ with pcq-rate in queue tree the parent could not bee limited. Look at my codes / queue tree add name="queue3" parent=global-in packet-mark=10UP limit-at=0 queue="PCQ-Upload 128k" priority=8 max-limit=0 burst-limit=0 burst-threshold=0 burst-ti...

karo84

Hi Everyone, I have to shape traffic on my Router. I want to give prorities some of the users groups. I have three type of users: Unlimit 1 (Priority 2 This is some network I am using PCQ type and its PCQ-RATEs are 128k/512k U/D), Unlimit 2 (Priority 3 For this network I use PCQ type with PCQ-RATE 6...

karo84

Do You have any bridged interfaces ?

karo84

Thanks for explanation

karo84

Yes it is right, when I export the scripts, I see some "\", or "/" , I don't understand Why?
What do they mean ? why they are created?

And at last when import script it doesn't work correctly, or doesn't work at all, Can You Explain this situation?

karo84

Hi everyone So I have written some scripts for Limiting PPTP users bandwith, but sometimes I am having problems, when the script works (In System>Script menu I see that it had been run) it doesn't change any value or something like that. But when I make script to work manualy, it works very well, WH...

karo84

Thanks I am very glad to know that I'll solve my problem.

I am thankfull for help.

karo84

/ system script add name="script1" source="/interface monitor-traffic \[/interface find type=pptp-in \] once do {:if $\$received-bits-per-second > 512000$ do {/queue simple \ add max-limit=262144/262144 target-address=( Must be variable or something else in order to limit by src-add...

karo84

It is very good Idea, Normis Thanks, Can I view those videos, in order I want to Upload some Videos wich are taken in my server room and on the roofs, where we have installed Mikrotik AP-s and CPE-s. After Uploading the video, when can I get level 6 license and how? Thanks For good suggestion, I thi...

karo84

Thanks Very much I'll try to use it. And hope it will help me.

karo84

Firs of all You will need to configure Your Router To have access to the internet and then make your router configuration to work as you want

karo84

I need to limit my PPTP users, but I want to do that using scripts. When a user's download rate is > 1M, I want to limit that speed by scripting. Look at my example. Here I need to give the interface name or IP address who has almost 1M tx-rate. How can I solve these problems? /system script add sou...

Search found 194 matches