Community discussions

MikroTik App

Search found 15 matches

by cyrusd
Sat Mar 18, 2023 10:26 pm
Forum: General
Topic: Prevent port scanner through mikrotik
Replies: 0
Views: 300

Prevent port scanner through mikrotik

Hi
I have a CHR as a VPN Gateway. I have no control over its clients, so if one of the clients tries to scan a network through its VPN connection the ISP blocks my public IP.
Is there a way to prevent this from happening without blocking the client for a period of time? (which I currently do via PSD)
by cyrusd
Thu Nov 17, 2022 4:10 pm
Forum: General
Topic: Special Character Support
Replies: 4
Views: 2454

Re: Special Character Support

Sometimes you have also to escape the escape. Try \\$ From the manual: https://help.mikrotik.com/docs/display/ROS/User#User-RouterUsers name (string; Default: ) User name. Although it must start with an alphanumeric character, it may contain "*", "_", "." and "@&q...
by cyrusd
Thu Nov 17, 2022 10:18 am
Forum: General
Topic: Routing packets based on DSCP tag
Replies: 7
Views: 862

Re: Routing packets based on DSCP tag

While this is perfectly possible on RouterOS. But Tik hardware is not designed for QoE appliances. This will tax the CPU like hell in a production environment.
So what's the proper way to do it, except using the source IP address?
by cyrusd
Wed Nov 16, 2022 4:13 pm
Forum: Virtualization
Topic: Adding 245th interface list cause CHR crash [SOLVED]
Replies: 6
Views: 3844

Re: Adding 245th interface list cause CHR crash [SOLVED]

Support admits this is a bug and they said it will be solved in the next version.
by cyrusd
Wed Nov 16, 2022 4:11 pm
Forum: General
Topic: Routing packets based on DSCP tag
Replies: 7
Views: 862

Routing packets based on DSCP tag

Hi Having two Routeros I want to tag all outgoing traffic of RO 1 and use the tag later in the host's gateway (RO 2) for policy-based routing. more explanation : RO 1 (192.168.1.10/24) creates a packet and sets a tag on it then send it to its gateway (RO 2) (192.168.1.1) The gateway (RO 2) receives ...
by cyrusd
Wed Nov 02, 2022 3:22 pm
Forum: General
Topic: BOOTP Mikrotik
Replies: 2
Views: 4787

Re: BOOTP Mikrotik

You only need BOOTP server that gives routerboard an IP. RB will then request file vmlinux from TFTP server (on router IP), downloads it and boots it from RAM. No special options are needed, but kernel must be in ELF format and if required, kernel commandline has to be embedded in ELF section. On w...
by cyrusd
Thu Sep 08, 2022 8:55 am
Forum: Virtualization
Topic: Adding 245th interface list cause CHR crash [SOLVED]
Replies: 6
Views: 3844

Re: Adding 245th interface list cause CHR crash [SOLVED]

Yes, I did submit a ticket.
by cyrusd
Wed Sep 07, 2022 6:46 pm
Forum: Virtualization
Topic: Adding 245th interface list cause CHR crash [SOLVED]
Replies: 6
Views: 3844

Re: Adding 254th interface list cause CHR crash [SOLVED]

Yes its 245
Just install a CHR and try to add 254 interface list, the router crashes,
by cyrusd
Wed Sep 07, 2022 11:12 am
Forum: Virtualization
Topic: Adding 245th interface list cause CHR crash [SOLVED]
Replies: 6
Views: 3844

Re: Adding 254th interface list cause CHR crash [SOLVED]

Test results with 6.49.6 shows the exact same issue
by cyrusd
Wed Sep 07, 2022 10:35 am
Forum: Virtualization
Topic: Adding 245th interface list cause CHR crash [SOLVED]
Replies: 6
Views: 3844

Adding 245th interface list cause CHR crash [SOLVED]

Hi I have to add a interface list for every user in usermanager (for VRF) The problem started when I added 245th interface list (Via command/GUI) and that cause CHR crash. Upgrading CPU/RAM/HDD didnt soled the issue. CHR Version was 7.1.5 , I upgraded to 7.5 and the problem still exist. Is this a bug?
by cyrusd
Wed Mar 16, 2022 11:11 am
Forum: General
Topic: Two L2tp connections to different l2tp servers (initiator can't find identity for peer)
Replies: 2
Views: 1357

Two L2tp connections to different l2tp servers (initiator can't find identity for peer)

Hi guys, I have two l2tp connections at the same time to two different L2tp servers, after about 10 hours both connections are dropping and not connecting till manual reboot, these errors appears on the log : "initiator can't find identity for peer" and "duplicate packet, dropping&quo...
by cyrusd
Sat Mar 12, 2022 8:03 pm
Forum: The User Manager
Topic: Assign multiple Attributes via command line
Replies: 0
Views: 2227

Assign multiple Attributes via command line

Hi guys, Is there any way to assign multiple attributes with command in usermanager 7? I have tried these commands, but the second one just replace the attribute which applied by the first command: > user-manager/user/add name=aa password=aa shared-users=1 attributes=Framed-IP-Address:1.1.1.1 > user...
by cyrusd
Mon Mar 07, 2022 9:13 am
Forum: General
Topic: VRF+PPP Secret Routes [SOLVED]
Replies: 1
Views: 874

VRF+PPP Secret Routes [SOLVED]

Hi Guys,
Is that possible to add VRF in PPP secret routes?
Something like this: ppp/secret/add routes="10.0.0.0/24 172.16.0.1@vrf_test"
I am trying to add some routes to VRF table in VPN server.
by cyrusd
Sun Mar 06, 2022 9:52 pm
Forum: Scripting
Topic: Assign local-address on-script PPP profile [SOLVED]
Replies: 5
Views: 2032

Assign local-address on-script PPP profile [SOLVED]

Hi. I want to assign local-address to a user in "PPP Profile On-script". something that doesn't work : :local localAddr :set localAddr 172.16.5.100 :set $("local-address") $"localAddr" :log info $localAddr In log I can see the result of the last line which shows : "...
by cyrusd
Sat Jan 23, 2021 12:49 am
Forum: Forwarding Protocols
Topic: VPN Client Isolation from one another
Replies: 7
Views: 2852

VPN Client Isolation from one another

Hello Guys I have a large scale VPN based network : VPN Server (Mikrotik) 172.16.1.1>172.16.1.2 VPNClinetA(Mikrotik ) > VPNClientNetworkA(10.10.10.0/24) VPN Server (Mikrotik) 172.16.1.1>172.16.1.3 CustomerVPNClientA(SomeVPN Client software Ex Win10) VPN Server (Mikrotik) 172.16.1.1>172.16.1.4 VPNCli...