MikroTik

eneimi

Does anyone have experience with the a similar setup? Any RB with USB and Huawei E173 modem? I can send and receive text messages with AT commands through Terminal, but when I send AT+CUSD=1,"A3988C3602",15 which should check my account balance, all I get is OK . It doesn't show me the rep...

eneimi

Thanks again.
It works.

eneimi

Thanks. I'll be trying it out shortly.

eneimi

I have a 411UAHR and haven't been able to get a usb power injector for it. So I scavenge my archives and come up with a 5v dc adaptor and a male to female usb cable. I've cut and joined what I think I should (green to green and white to white, both for data; red to red to red for +5v and black to bl...

eneimi

I hope this isn't off. I have a 411UAHR and haven't been able to get a usb power injector for it. So I scavenge my archives and come up with a 5v dc adaptor and a male to female usb cable. I've cut and joined what I think I should (green to green and white to white, both for data; red to red to red ...

eneimi

I assume you've connected the lan cable directly from the modem to your pc to confirm that works fine? If it does, are you working behind a hotspot, or does your router have any queues or firewall filters in place? Let's see your router config: ip addresses, dns, routes, firewall filter and nat, hot...

eneimi

Not entirely clear about your post. You didn't specify what RB you're trying to use. I will assume it has more than one ether interface. Are you creating a simple failover or are you using the links for load balancing? Either way, I think this will point you in the right direction: http://wiki.mikro...

eneimi

A diagram of the network will be very helpful.

eneimi

You can set your cards to run in 2.4ghz-b only mode. This will limit your clients to 11mbps but will provide the max power output of your cards. Besides you're only offering them 25kbps. Like you alluded, 2.4ghz-g only or 2.4ghz-b/g will give you faster transmissions but shorter range. You may have ...

eneimi

If all was well and signal strength suddenly drops you may want to take a closer look at your card. Like Rudy said, there's a long list of possible causes and we need more info. What type of card are you using (brand and model)? What does output of /interface wireless monitor 0 look like? I'm intere...

eneimi

If you want userman changes occurring 'real time' then you have to enable CoA on the userman router as well as the hotspot router. On hotspot router: /radius incoming> set accept=yes port=xxxx On userman router: /tool user-manager router> set 0 coa-port=xxxx That should help. I doubt that you can as...

eneimi

First off, what version of usermanager do you have running? I ask because some parameters may differ between version 3.x and version 4.x You need a script file (e.g user.rsc) that mikrotik UM recognizes. Transfer it to your router files (copy and paste or use ftp) and then import from terminal (/imp...

eneimi

http://wiki.mikrotik.com/wiki/User/Routing

It's all in the wiki!

eneimi

http://wiki.mikrotik.com/wiki/User/Routing

There are a number of ways to configure your routeros to use multiple wan connections. The link above should guide you. If not, search the forum - it's been addressed countless times.

eneimi

Even if you get to discover a 2000mw minipci card, you're still not going to be able to get through significant foliage! abgn (2.4ghz and 5ghz) penetrates poorly through such obstructions. If you're especially keen on cutting through trees, you should consider if it's worth shelling out the cash for...

eneimi

Are you able to browse from your mikrotik box after you disable security? Be sure you got the wpa2 settings right - EAP or PSK, supplicant identity or preshared key, AES or TKIP encryption. wpa2-PSK is simpler than EAP and you need to be sure which encryption type your linksys supports. http://wiki....

eneimi

Have you tried disabling wireless security to see if it works?

eneimi

Why don't we reset and start afresh - using a bridged setup. Should be a cakewalk this time. Just note your wep settings, station pseudobridge instead of station, dhcp client is on bridge1 (no static ip addresses, no need for nat rule) and disable or remove default ip after reset - after this you sh...

eneimi

DNS addresses should be assigned automatically once you're a dhcp client. Go back and double click the dhcp client entry and be sure that 'use peer dns', 'use peer ntp' and 'add default route' are all checked. And then release and renew the dhcp client. Then confirm in ip dns settings and ip route t...

eneimi

http://wiki.mikrotik.com/wiki/Manual:In ... properties

eneimi

To route: - remove the static ip on the bridge - remove the bridge (and bridge ports) - remove the static route (gateway) - remove the dns addresses (if you eventually put them in) - put wlan1 in station mode ( instead of station pseudobridge) and set security and connect to the linksys - dhcp clien...

eneimi

You'll probably have to get the dns addresses from the linksys. Otherwise connect your laptop one more time to your exisiting linksys ap (as a dhcp client) and you can read off the dns addresses from your laptop. This step isn't really necessary to be able to ping 192.168.1.1, unless there's somethi...

eneimi

As of the last stable version of UM and even into version 4 test, no it does not.

eneimi

Let's have some more information about your setup - ip addresses, routes, nat, bridges etc. I'm not sure why you want nat/masq in a separate router, but all the same it's definitely doable.

eneimi

Or you can eliminate wds entirely and use station pseudobridge at one end and bridge or ap-bridge at the other.
Another option would be to eliminate bridging entirely and go with routing.

eneimi

On that security issue, you said the linksys uses wep, i guess you used the same thing in your RB (static keys optional or required)? - just checking. You may want to consider WPA2 for security later on. Did you statically assign 192.168.1.254/24 to wlan1 at any time? Connect to your RB via mac addr...

eneimi

If you mean 'tools' in winbox, you're not going to find it there. You can only configure it by CLI: hit 'New terminal' from the menu list on the left and in the terminal window type 'tool userman' - it's all in the wiki (wiki.mikrotik.com). To check out userman 4, be sure to install the test version...

eneimi

If you try using a laptop to connect to your existing wireless, does it connect and browse automatically or do you have to manually configure anything ( a static ip address, wireless security, etc)?

eneimi

- on the menu list on the left, select interfaces. You should see wlan1 and ether 1 in the list of interfaces. Double click wlan1. Go to the 'wireless' tab and select mode as 'station pseudobridge' and the appropriate 'band' (i.e 2.4ghz or 5ghz) and then select 'scan' from the list on the right. Pic...

eneimi

Wlan1 (5ghz) setup to be station and it is connected to the Wlan2 on MT1

Wireless clients don't support bridge mode. Since you put wlan1 (5ghz) in a bridge, you're going to have to use 'station pseudobridge' instead of 'station'.

eneimi

Is your dhcp server on the bridge?

/ip dhcp-server print

eneimi

Only two other things come to mind, hope they don't sound silly.
After configuring NTP client in your router:
-Did you set a manual time zone (e.g +06:00) or did you choose from the list of preset time zones?
-Also, have you confirmed that the time in your routerboard clock is correct?

eneimi

http://wiki.mikrotik.com/
http://www.mikrotik.com/testdocs/ros/3.0/
And if you still have questions, back to: http://forum.mikrotik.com/

eneimi

I'm sorry, you've lost me. I suggest an online translator if that may improve the clarity of your message.

eneimi

I'm not sure I understand why you want another hotspot in the 433AH. Ok, even if you put one there, why don't you let it handle primary authentication and then the one in the x86 box handles secondary authentication. Which interface in the x86 is the 433AH connected to - the hotspot interface or the...

eneimi

When you install routeros 4.x, it maintains the last stable version of UM which is 3.30.
To get UM 4.5 test you need to download from: http://forum.mikrotik.com/viewtopic.php ... 18&start=0

eneimi

Why can I not search by first / last name in User-Manager? As you can see in the attachment below all it takes is first selecting 'advanced search' from the tab list on the left and either changing the field with 'username' to 'first name' or 'last name'. Otherwise, you can add extra fields by clic...

eneimi

If you have a RB as your main gateway, is it possible to block certain websites? Yes if so> is it possible to block certain websites depending on the ip range requestiong it. Yes So like block face book for all computer in ip range from 192.168.1.1 to 192.168.1.255 and then a pc with the ip address...

eneimi

This isn't csv but will open in any text editor:
/tool user-man user export file=umuser
It creates a umuser.rsc file in your router files.
To restore it:
/import umuser.rsc

eneimi

New RouterOS v4 doesn't include the _new_ User Manager by default, therefore you need to install it with this test package: Culled from: http://forum.mikrotik.com/viewtopic.php?f=10&t=35718&start=0 4.6 version should be very soon, as well User Manager will step out from beta soon as well (b...

eneimi

UM4.6 isn't ready yet. Downgrade to 4.5; get it here: http://forum.mikrotik.com/viewtopic.php?f=10&t=35718&start=0 Open web interface of usermanager. From the tab list on the left, select 'Routers'. If you have added a router, then select it from the list on the right. When you do, you will ...

eneimi

UM4.6 isn't available yet.
Downgrade to 4.5, get it here: http://forum.mikrotik.com/viewtopic.php ... 18&start=0
It will allow you access the user page as well as user signup.

eneimi

A general rule if you MUST use wds is to ensure you're using the same brand at either end.
Hardware from different manufacturers isn't guaranteed to function optimally in a wds mix as far as my experience goes.
I suggest you replace that Airlive unit with a routerboard.

eneimi

Remove the user's session(s) from the list of active sessions (A sessions) in the UM web interface. This is likely to work better if you have CoA enabled in UM as well as in your hotspot router. Of course you can always use winbox and directly terminate the active session. If you use PPPoE however, ...

eneimi

Perhaps a while before, there were actually 15A users. If you don't have CoA enabled between UM and your hotspot router(s), it takes quite some time for UM to obtain 'realtime' statistics. Enable CoA in the 'routers' section of your UM web interface as well as under /radius incoming in your hotspot ...

eneimi

UM4.6 test is not yet available. If you must use UM, downgrade to ROS4.5 and download and install UM4.5.
When UM4.6 is ready, download link will be posted here: http://forum.mikrotik.com/viewtopic.php ... 76&start=0

eneimi

You can follow developments here: http://forum.mikrotik.com/viewtopic.php?f=10&t=37246 and/or here: http://forum.mikrotik.com/viewtopic.php?f=10&t=35798

eneimi

Three things: 1. Go to web interface of user manager and select 'profiles' from the tab list on the left. Go to the 'limitation' tab and create a speed limitation to apply for 8am to 9pm e.g 256k/512k. Give it a name. 2. Still under profiles, go to the 'profile' tab and create a profile with validit...

eneimi

Sorry, I know very little about scripting.
This links to some things you can try out: http://forum.mikrotik.com/viewtopic.php ... my+Hotspot
It's supposed to alert the client before time-limit elapses.

eneimi

I'm not entirely sure but I suppose by uninstalling and then reinstalling the usermanager package:
/system package uninstall user-manager

eneimi

Just to be sure: - no ip for ether1 - no ip for local wlan - ip address for bridge (192.168.0.x/24) - dhcp server on bridge - hotspot server on bridge - bridge set to 'use-ip-firewall' - 'accept' rule for 192.168.0.0/24 in ip firewall filter forward chain occurring early - upnp enabled with external...

eneimi

timreichhart, there are lots and lots of different ways to configure your RBs, each with it's ups and downs. Show us a diagram and then describe exactly want you want to achieve.

eneimi

Did you set the bridge to 'use ip firewall'?
I am still not clear about your setup:

ether1 is for the LAN in question and some public PCs, wlan1 for visitors

And you've bridged ether1 with wlan1. Are you giving all PCs public IPs? Please clarify setup.

eneimi

http://wiki.mikrotik.com/wiki/Queue_wit ... _Web-Proxy

The article above applies if you use your mikrotik box for cache as well, but I see you have squid for cache.
Tinker with the settings a bit see if you can apply it to your scenario.

eneimi

Yes, enable /ip upnp, with external interface=WAN and internal interface=bridge (if your dhcp server is on the bridge interface). Make sure to disable/uncheck 'allow-disable-external-interface'. I don't fully understand this ether1 is for the LAN in question and some public PCs, wlan1 for visitors ....

eneimi

Like sergejs said, there's currently no way in routeros for a client to top up their credit themselves before it runs out. If you use Mikrotik usermanager + hotspot for your AAA (assigning credit limits etc) then two things you need to do: - alert the client that credit time-limit is almost up, and ...

eneimi

Ensure you have enabled upnp on the correct interfaces and then put that rule you specified in your firewall filter forward chain (before the hotspot rules). /ip firewall filter add chain=forward src-address=192.168.0.0/24 dst-address=192.168.0.0/24 action=accept I use a similar setup to host an sql...

eneimi

Uninstall the old um.npk first and then install the test version from the forum link.

eneimi

Upgrade to UM 4. It strictly enforces single user only. Watch out for bugs though!

eneimi

You can use cookies and extend the lifetime of the cookies as you desire.
e.g /ip hotspot profile set 0 login=cookie,http-chap http-cookie-lifetime=365d

eneimi

Disable default-forwarding on your AP.
e.g /ip interface wireless set 0 default-forward=no

eneimi

You'll have to edit the rsc file and remove the 'bad arguments'. It should look like this: /tool user-manager user add comment="xxxx" customer=eneimi disabled=no name=xxxx password=\ xxxx phone=xxxx shared-users=x add comment="xxxx" customer=eneimi disabled=no name=xxxx password=...

eneimi

http://forum.mikrotik.com/viewtopic.php?f=10&t=21214

eneimi

If there isn't a 'Settings' button, you probably have a bad installation. If you are using ROS4.2 on your router, you will need to download and install the appropriate userman-test package from http://forum.mikrotik.com/viewtopic.php?f=10&t=35718&start=0 You can change the colors, logo and v...

eneimi

Of course this only applies if you want to perform wireless client authentication. New ROS (and hence new UM) as far as I know only supports WPA and WPA2, no more WEP. And then you have the option of PSK or EAP; with either AES or TKIP cipher. You can not assign different keys to users connecting to...

eneimi

Interesting. I am not aware that UM sessions can be manually generated. Always thought they could only be generated automatically by client login. I am aware they can be edited but I don't know about manually adding. Besides, there's a host of other parameters that would need to be specified: custom...

eneimi

That's about correct. When you mention 256k and 512k I assume you mean client download, but you must also specify client upload. In your example though: - from 8am to 9pm it's set to 128k upload and 128k download with 110k/110k minimum rate. - while 9pm to 8am is unlimited! You'll need to specify ra...

eneimi

For your scenario, you might find some of the articles here interesting:
http://wiki.mikrotik.com/wiki/Bandwidth ... and_Queues

eneimi

UM, just like hotspot or pppoe etc, cannot differentiate between local and/or global transfers and so can do basic rate limiting with date and/or time scheduling based on profiles. If you want such advanced queuing, you will need first to mark (thus differentiating between) local and global traffic ...

eneimi

I'm not sure what it means, but I guess some corrupt or incompatible attribute in your rsc file. Are you performing the backup/restore from command line or web interface? I know earlier versions of UM had issues doing this via the web interface. I think the error message is rather specific; you can ...

eneimi

I can only think of an error in your hotspot config.
You may want to to look over your nat entries as well as DNS name entry in the hotspot. Perhaps for all it's worth, reset your hotspot folder.

eneimi

First off, you didn't mention what type of hardware your APs are running? What RB? What mini-PCI cards? Do you have amps installed? From the AP scan in the second image, channel 6 is packed full; I count 11 of the 20 APs in the list using channel 6 - you can hardly breathe in that channel! I suggest...

eneimi

Solved in UM 4.x.

eneimi

It should work straight out of the box. You probably have multiple times already, but look over your hotspot settings one more time. I'm accessing my mail from Evolution and my pc is behind a repeater that's behind a ROS4.2 hotspot server. It just works! I only ran the hotspot setup wizard with defa...

eneimi

When I executed the scripts in winbox, they didn't run. But they did the job when executed via CLI. You may want to try that if you haven't already.

eneimi

Are you using v3.x or v4.x

eneimi

Install wine on linux and you will be able to run winbox without problems. I have wine installed on the two latest versions of ubuntu. In both, I can't drag files onto the files list in winbox. The only way I get to upload files (including package upgrades) is by ftp. Sometimes (most times!) this i...

eneimi

I thought this filter rule will allow all internet from the said period No. This rule will disallow internet for the specified period. Just change the time period to suite your needs. i am looking for some specific users alone not all of them If one or two, specify source ip address (src-address=x....

eneimi

Not sure exactly how it works, but my RB1000 UM database has gotten corrupt once or twice. In the past, without a backup I would've had to enter in client data from the scratch. Now the rebuild command manages to fix my database, preserving all client data. So somehow it rebuilds the database, and i...

eneimi

Configure pppoe client on the appropriate interface.
http://www.mikrotik.com/testdocs/ros/3.0/vpn/pppoe.php

eneimi

I assure you, the RB433AH will most likely do a much better job in managing your network than your windows pc. But if you insist: You may either bridge all the RB interfaces (ether1, wlan1, wlan2, wlan3) if you don't want the RB to perform any other special functions OR bridge only the wlan interfac...

eneimi

Way I see it you need to: 'unseal' that case/create access to one of the other ether ports OR get a wlan adapter for your pc (untidy!) OR get another RB with a case that allows you access to all the ports. Create bridge and add wlan interfaces as ports. http://www.mikrotik.com/testdocs/ros/2.9/inter...

eneimi

192.168.x.x includes ip addresses that are termed private and cannot access the internet (public) except they are natted behind a public ip address. http://www.wisegeek.com/what-is-the-difference-between-public-and-private-ip-addresses.htm You'll have to speak with your provider about getting at lea...

eneimi

Specify uptime-limit.
http://forum.mikrotik.com/viewtopic.php?f=10&t=35945

eneimi

I suggest you re-organize your network. Let internet go directly into ether1 of your RB433AH. Setup dhcp client or pppoe client or static ip, dns and gateway - as the case may be, on ether1. You can bridge the 3 wlan interfaces and then setup hotspot on the bridge; that's one option. From the ether2...

eneimi

Specify validity +/- uptime.
http://forum.mikrotik.com/viewtopic.php?f=10&t=35945

eneimi

It means you can register as many users as you want, but only 20 sessions can be active at any time. So if you limit each user to only 1 active session, then you can only have 20 users active at any time. And if you allow each user an unlimited number of sessions, then it's possible to have only two...

eneimi

In hotspot profile, use the default. If you set limits there, they will be dynamic and will override the simple queues. Torrents are somewhat troublesome and sometimes escape these limitations. You may need layer7 filters to tackle torrents. http://wiki.mikrotik.com/wiki/L7 http://wiki.mikrotik.com/...

eneimi

You can create a profile specifying uptime-limit=74h and validity=7d.>>>this means the user has just 74h uptime which must be used up in 7d. If after 7d they have only used 10h, the remaining 64h is lost. If you extend the validity to say 30d >>>this means that the user can spread their 74h uptime o...

eneimi

You can run both.
Put them on different interfaces: if you need an extra ether interface, then you can go ahead and create a VLAN and if you if it's an extra wlan you need you can even create a VAP for that purpose.
Just put them on different interfaces.

eneimi

Snap3.jpg

Snap5.jpg

These images should give you an idea. Modify as you wish. Under the 'advanced' tab you can specify interfaces etc.

eneimi

There's no harm in them trying!
You can hide your ssid - and be sure to specify it in any client you want connected.
/interface wireless set wlan1 hide-ssid=yes

eneimi

Yes you can. But then this begs the question - what exactly are you trying to achieve? Hotspot is for AAA; PPP is for AAA - why use both? If you have multiple interfaces you can easily configure hotspot on one and PPP on another, but definitely not both on the same interface - it's insecure and unne...

eneimi

Depending on what ros version you have installed, the dhcp package will have to match. Currently only 3.30 and 4.1 are available at http://www.mikrotik.com/download.html You may either download a complete upgrade version from that site or you'll have to search the archives for the install packages o...

eneimi

In your 2nd post:

1 R ether2 ether 1500 1522

In your last post:

1 ether2 ether 1500 1522

How are you accessing the router? Have you checked your cables?

eneimi

/ip hotspot profile print
/radius print
/tool user-manager customer
/tool user-manager router print
Edit sensitive entries.

eneimi

What about /ip dhcp-server print ? I don't see a bridge listed in /interface print ; I assume you haven't put it back yet. I want to assume you haven't yet run the wds setup again either; wlan1 is currently disabled. You can still connect with winbox, but only with mac address for now. Where is your...

eneimi

We'll need some more information to be of any help. Do you have the dhcp package installed and enabled? /system package print Is your box a dhcp client or server? /ip dhcp-client print or /ip dhcp-server print If a dhcp server, have you assigned a valid ip to the right interface? /ip address print I...

eneimi

Use web proxy.
http://wiki.mikrotik.com/wiki/How_to_Bl ... sing_Proxy

eneimi

These are specific to your requests: http://wiki.mikrotik.com/wiki/Making_a_simple_wireless_AP http://wiki.mikrotik.com/wiki/Hotspot_server_setup Anything else you need you should find here: http://wiki.mikrotik.com/wiki/MikroTik_RouterOS http://www.mikrotik.com/testdocs/ros/3.0/ Otherwise, don't he...

eneimi

You have a clear line of sight, okay, but what's the signal strength on this repeater? What's the noise floor? 'Extensive data loss' is just what it says. You could be having interference from the environment or perhaps more likely, your mini-pci radio is busted. Check that your frequency band is re...

eneimi

Yes you can. It has always been possible - using simple queues with hotspot or via the usermanager. If usermanager 4.x, create a profile with validity of 7d or 30d as you wish and then assign 2 different limitations to the profile. One limitation sets allocated data rate (tx and rx) for 9pm to 6am a...

eneimi

Users created under /ip hotspot user are visible under the 'hotspot users' tab in winbox. They can login to the hotspot without being queried in the usermanager database. Users created under /tool user-manager user are not visible under any tab in winbox and can only be viewed via usermanager web in...

eneimi

You do not need an ip to access your router via winbox. The connection is possible at mac level. Confirm that the lan cable you're trying to use works - use a cable tester if you have one otherwise test using two other network devices. If the LEDs around the ports at either end of the cable are prop...

eneimi

I didn't completely understand your network arrangement, but I think the problem is with nat. You're trying to access (ping) 192.168.30.x from 192.168.16.x which means traversing subnets. Of course pinging 192.168.16.1 from 192.168.16.5 shouldn't be a problem. Like surfertim said, you can achieve th...

eneimi

You're right that someone may be trying to enter your router. If it's the same ip each time, you may block just that ip: /ip firewall filter add chain=input src-address=216.219.239.160 action=drop Of course any other ip can still try 'attacking' your router, so if you do not use winbox from outside ...

eneimi

Hotspot alone isn't enough. After your hotspot is setup, create and assign simple queues with your preferred speed/time limitations.
http://www.mikrotik.com/testdocs/ros/3.0/qos/queue.php

eneimi

note: User-manger webinterface does not work when you have hotspot running at the same time in version 4.1, not tested in other versions.

From: http://wiki.mikrotik.com/wiki/User_Mana ... subscriber
Try using your wan ip (192.168.1.64) instead of 10.x.x.x

eneimi

/ip dhcp-server lease remove Does DHCP start at .200 and allocate addresses that haven't been used in a while, or what? Yes, kind of. I think the default is 3days, after which clients lose their ip and that ip gets reassigned to the next requesting client. However, if you have 200+ clients coming on...

eneimi

Can I still use the HotSpot login page with local authentication (not-radius) Yes you can. Do I simply install a PPPoE client on the RouterOS "public" interface connected to their gateway/modem? Yes. Do I need both a client and Server PPPoE? No you do not. Your mikrotik box is a pppoe cli...

eneimi

Could be malware, could be dos attacks, could be ping floods, could be a host of stuff. Some of the filter rules here should help.
http://wiki.mikrotik.com/wiki/Firewall

eneimi

Are you using winbox or CLI?

eneimi

Yes, those links show how to set limits for amount of data downloaded. You can use just hotspot for AAA, otherwise, you will need a radius server e.g. usermanager. Check the manual to see what either has to offer. You didn't ask for help on how to setup hotspot; you asked how to limit data download....

eneimi

but for some reason it will got pass private traffic to the internet

Do you mean you can't access your private lan from the internet? If that's what you're trying to achieve you'll need a dstnat rule as well.
http://www.mikrotik.com/testdocs/ros/3.0/qos/nat.php

eneimi

It's safe to upgrade rb 133 and 112 to ROS 4 Sure - if your license permits. However I don't think those boards were projected to live this long! From personal experience RB133 doesn't do so good with v3.x. I would stick with 2.9.51. and connect to an AP with 3.xx installed? Sure you can. Can i hav...

eneimi

http://www.mikrotik.com/testdocs/ros/3.0/qos/nat.php

eneimi

You can use hotspot 'limit-bytes-out' feature: http://www.mikrotik.com/testdocs/ros/3. ... otspot.php or
you can use usermanager 'download-limit' feature: http://wiki.mikrotik.com/wiki/User_Manager/Limiting

eneimi

what should do so the PC1 192.168.50.5 to be able to acces and ping 192.168.1.77.the mikrotik router can ping my friend pc.

Those are two different subnets. You need dstnat.
http://www.mikrotik.com/testdocs/ros/3.0/qos/nat.php

eneimi

See the first 2 replies in this post.
http://forum.mikrotik.com/viewtopic.php ... 22&start=0
and/or search for 'how to roam with mikrotik' or something similar.

eneimi

station - the interface is operating as a wireless station (client) station-pseudobridge - wireless station that can be put in bridge. MAC NAT is performed on all traffic sent over the wireless interface, so that it look like coming from the station's MAC address regardless of the actual sender (th...

eneimi

RB/133c3

I advise you stick with 2.9.51. It's been addressed elsewhere in the forum.

eneimi

Then you're good to go!

eneimi

Yes that is correct.
I assume 192.168.1.2 is the ip assigned to bridge1?

eneimi

DNS is not assigned to any interface.
In terminal type: /ip dns add primary-dns=x.x.x.x secondary-dns=x.x.x.x

Yes, gateway interface is bridge1.
In terminal type: /ip route add gateway=x.x.x.x interface=bridge1
Where gateway ip (x.x.x.x)= ip of upstream AP

eneimi

http://www.mikrotik.com/testdocs/ros/2.9/interface/bridge.php >> you cannot bridge a wireless client/station http://www.mikrotik.com/testdocs/ros/3.0/interface/wireless.php >> station-pseudobrige is a routeros 3.x workaround Set wlan1 = station pseudobridge (not station!) Set wlan2 = ap/bridge Creat...

eneimi

What version of UM comes with ROS 4.0 RC1? Is it still the 4.04 beta or something newer?

eneimi

You're using an amp with an xr2? Did you set manual card rates?
If you need to push your signal any further than the xr2 and say a 15-17dbi antenna will go (for multipoint), then you need a repeater, not an amp. Rule of thumb for best throughput with an amp - use an R52.

eneimi

Ensure you haven't got any rules that would drop such traffic.
Use action=srcnat/action=dstnat (rather than masquerade/redirect); that will allow you specify to-addresses/to-ports. I think port 3389 is what you need to work with.

eneimi

You may want to keep tabs on this thread: http://forum.mikrotik.com/viewtopic.php?f=10&t=35084

eneimi

Using Hotspot on the client end.

eneimi

I'm not sure about the bullet, but I know senao, dlink and a couple of others have a universal repeater mode that should work for your scenario. However in my experience, 30 users or not, that's shaky ground to start out on. The bullet works great as an AP, but if you're looking to setup a repeater,...

eneimi

AP/bridge + station-pseudobridge.
Or you could skip bridging and use a routed solution!

eneimi

That's right.
Otherwise if you've got just one local interface then a single rule should do:

/ip firewall filter
add action=drop chain=input comment="" disabled=no dst-port=8001 \
in-interface=!local protocol=tcp

eneimi

Can this unit do this? Definitely yes..and lots more! my requirement is to have Password Access control for individual users who use this router through the WiFI Sure. You can use hotspot if you want something relatively straightforward. PPPoE is a more secure option a tad bit more technical. and t...

eneimi

You are running two separate networks and with respect to the mikrotik box: x.x.56.0/24=wan and x.x.55.0/24=lan. Problem your having is because you're trying to traverse subnets without applying the necessary rules. Your srcnat rule ensures that when PC2 and PC3 (both on lan) are pinging PC1 (wan), ...

eneimi

i see many connectionf from the outside how can i fix this You didn't provide any info about your setup. If you're using a mikrotik box, you need to prevent open proxy with a filter rule. Something like: /ip firewall filter add in-interface=wan dst-port=proxy-port protocol=tcp action=drop my does m...

eneimi

But when I plug a switch into it, it comes to a grinding halt! OK.. I have read the posts that say this is typical, and that I should be using WDS Mode instead. I fail to agree. That behaviour is not typical. I have used station-pseudobridge just fine with multiple clients behind my bridged network...

eneimi

You can generate the key in your mikrotik account, once you specify a valid software-id.

eneimi

Yes. Config will depend on your setup.

eneimi

Hello normis.
It appears the download limit setting isn't working - at least in 4.04b. I set a 2GB download limit (i specified 2G and it converted it to 2.0GiB) but many users are well over the limit. Or must we specify 2147483648b?

eneimi

I have an RB133 with 2 R52H radios serving as a routed repeater. It's been working fine over its 2 year sojourn with me. Recently, i noticed that one of the wlan interfaces (always the same one) just disappears and doesn't come back until I reboot the board. It's happened twice now, about 1 month ap...

eneimi

Have conected my laptop to the ap at more than 6 km with ligne of sight

Your laptop must be equipped with some highly classified wireless gear! You connected your laptop to an AP 6km away? Please enlighten us.

eneimi

Your senao radio, or any other radio at that, will (can) only associate with 1 AP at a time.

eneimi

/ip hotspot ip-binding add address=x.x.x.x to-address=x.x.x.x mac-address=xx:xx:xx:xx:xx:xx type=bypassed

Sorry, i've edited it.

eneimi

Every user/device/ip behind the hotspot has to be authenticated unless you specify otherwise; that includes the webserver.
To allow traffic to or from the webserver: /ip hotspot ip-binding address=x.x.x.x to-address=x.x.x.x mac-address=xx:xx:xx:xx:xx:xx type=bypassed.

eneimi

Is there any way to install a CF Microdrive on a 433 beeing able to boot from it?

No. You cannot boot routeros from CF. Other OS, maybe.
Why would you want to boot from CF? What's wrong with nand?

eneimi

Configure ether1 (wan) of routerboard as usual. Run dhcp server setup on ether2 and then run hotspot setup wizard, also on ether2. Connect dlink to ether2 (directly or through a switch). Configure dlink as AP. Any ip you assign the dlink will be just for you to access the web config of dlink. Set yo...

eneimi

I'm stuck - it should work.
You don't lose anything by upgrading ROS - perhaps you should, for all it's worth.

eneimi

add the radius server to ip/hotspot/ ip bindings Yes, and also set type=bypassed. I assume you have set the hotspot server to use radius (/ip hotspot profile set use-radius=yes), and the correct ip and secret have been set under /radius set address=x.x.x.x secret=xxxxxx Alternative is to put the ra...

eneimi

What ROS version are you using?

eneimi

b) If there is at least one limitation for this profile, which is active at other time, access now is denied

Ok.

eneimi

RB1000 with UM 4.04b I use radius with hotpsot service. I only use rate limits and download limits for profiles and I assign profiles to users before they log in . I usually assign just one profile per user, but sometimes two or three different profiles per user. The first assigned profile usually b...

eneimi

I notice that when I assign multiple profiles to a user, after one profile expires, the next doesn't become active automatically.
Anything on this girts?

eneimi

I unticked a day, understanding that that day I will not be able to connect but still can I think the way it works is that if you untick a day or days, some hour or hours it just means the limitations you have assigned to that profile will not work during the unticked periods, i.e the user is unlim...

eneimi

How did you save the database? /tool user-manager database save, or via the web interface?
How did you try to restore it? /tool user-manager database load, or via the web interface?
I noticed that if I try restoring via the web interface, it doesn't work, but through terminal, it works perfectly.

eneimi

What service are you running on mikrotik radius (/radius print)?
If you disable wpa on the dlink, does it work?

eneimi

About your setup, is it that you have a RB with the dlink AP wired to one of its ether interfaces? You didn't say how you have it set up. What routerboard? What interfaces? Dlink AP is connected to what interface of routerboard - ether or wlan? Your clients connect to what device - dlink AP or RB w...

eneimi

But this is NOT working at my place

How do you mean exactly? What isn't working?
Export your config for us:
/ip hotspot profile print
/radius print
/tool user-manager user print
You may edit out the mac-addresses.

eneimi

http://wiki.mikrotik.com/wiki/User_Manager

eneimi

14:15:26 manager,debug,packet Reply-Message = "unknown authentication algorithm" Usermanager can't understand the authentication used. If you are using wpa enterprise (rather than wpa personal): Authentication type is either: wpa-enterprise or wpa2-enterprise (not plain wpa) Authentic...

eneimi

I am not sure if this is enough information for you to help with the problem and if not, let me know what you need

There's too much to go through, let alone understand!
A simple diagram would probably generate the responses you're looking for.

eneimi

Yes you can. Depends on what you're trying to achieve. If roaming for clients, also set them to the same frequency.

eneimi

Unless you changed it, by default your dhcp lease is for 3d.
You didn't give us any information about your 'link' that drops every once in a while!

eneimi

In the CPE confirm that the dhcp client (wlan1) is set to use peer dns and default route. Give ip to ether1 and create your ip pool or dhcp server on that interface. If you have another device doing srcnat upstream, the masquerading is not necessary in the CPE. The part i'm not clear about is your u...

eneimi

A level 3 license, like you have in that RB411 can work as a wireless client, but not AP. Even if you upgrade routeros on it to v4.x you still have a level 3 license. http://wiki.mikrotik.com/wiki/License_levels Leaving the radio in bridge mode will allow only 1 client associate with it. http://www....

eneimi

To access user data/logs from usermanager: 1. /tool usermanager database save This creates a *.umb file which as far as i know can only be read by usermanager. It saves all user data and logs. AND/OR 2. /tool usermanager user export This creates a *.rsc file which can be read by notepad or any text ...

eneimi

it would be interesting customers migrate sector automatically in case of interference

Give the 3 cards the same ssid and frequency, i.e roaming..
I you are so keen on using omni antennas, why don't you use just one?

eneimi

Had a similar issue with just 10m of cable run, RB133 and 2 wireless cards. A 24v adapter should do just fine.

eneimi

I second jp's suggestion.
I have an RB600 with 3 XR2s and 3 sectorials. Great coverage.
3 omnis coming out of that one unit, even 3 omnis on one mast! Unthinkable.

eneimi

If you disable webproxy can you browse?
If yes, then run your proxy setup again - compare with wiki or manual.
If no, then you should check your routeros config - routes etc.

eneimi

What is your terrain like? Do you have clear LOS all the way to the other end? What hardware have you tried receiving with @ 100m? Radio & antenna. Did you lower transmit power (card rates) for the xr2? Have you tried another antenna? Have you tried another radio? Have you tried another pigtail/...

eneimi

Just to lend a voice! I am also having performance issues with mikrotik webproxy on compact flash+RB1000. I have had to dump it.. For very active proxy caches, where many files are stored and retrieved at once, the RB1000 is not so optimized, as it doesn't have native IDE controller on it (speed is ...

eneimi

i was thinking if it is possible to log automatically without entering username and password(skiping mikrotik login page) Yes it is. Setup your router so that clients can connect (dhcp or static leases) and not require authentication..no hotspot. and be able to use profiles By profiles do you mean ...

eneimi

http://wiki.mikrotik.com/wiki/User_Manager
Answers all your questions and more. Any specific problem and don't hesitate to let us know.

eneimi

1. Should we use User Manager? You can. Allows you integrate everything in one box. 2. If yes, can we run User Manager on the RB1000? Absolutely. With the RB1000 you even have a level6 license and so unlimited number of active sessions etc. You can not limit the number of simultaneous sessions per ...

eneimi

Take it easy asus, take it easy. I'm also having a very tough time. The 4.04b i can now confirm is still very unstable. Every now and then when active users peaks, my RB1000 stalls ('please wait', as well as a number of other server error messages) and forces a reboot. When this happens users lose t...

eneimi

MikroTik RouterOS supports the Intersil Prism II PC/PCI, Atheros AR5000, AR5001X, AR5001X+, AR5002X+, AR5004X+ and AR5006 chipset based cards for working as wireless clients (station mode), wireless bridges (bridge mode), wireless access points (ap-bridge mode), and for antenna positioning (alignme...

eneimi

This i understand. ether1 - 192.168.6.1/24 - connected to LAN ether3 -conected to ISP DHCP Client bind to ether3, got ip address from isp This i don't understand. ufanet (is interface) - PPTP Client connect to 10.8.0.1 (ISP vpn server) Do you have two connections to your isp? Dhcp client and pptp cl...

eneimi

http://www.mikrotik.com/testdocs/ros/3.0/qos/filter.php
http://www.mikrotik.com/testdocs/ros/3.0/qos/nat.php
Your request is rather vague.

eneimi

In routeros, you can't put a wireless client in a bridge using 'station' mode.
http://www.mikrotik.com/testdocs/ros/2. ... bridge.php
Switch wlan1 to station-pseudobridge (you need routeros 3.x) and go ahead with the rest of the setup as usual; you should be fine.

eneimi

The docs are a bit cryptic I doubt this is! http://www.mikrotik.com/testdocs/ros/2.9/interface/bridge.php [*]Create bridge. [*]Add interfaces of interest to the bridge, as ports. [*]Create dhcp server on the bridge interface. All devices connected to any of the interfaces added above will obtain ip...

eneimi

Your description isn't quite clear.

From what i could gather: wan interface of your router (connection to your isp) is pppoe client, while you have dhcp server setup on one of your ether interfaces (local network)?

Please let's have a well labelled diagram to give us a clearer picture.

eneimi

Yeah, http://wiki.mikrotik.com/wiki/User_Manager
That should get you started Akin.

eneimi

Yeah, already done that. Still waiting for a response.

eneimi

I upgraded routeros to 4.04b on my RB1000 a few weeks ago and it had to update the license - i obliged. Yesterday, something went wrong and i was forced to power cycle the board. This morning it tells me my license will expire in 4hours. I went to my account on the mikrotik website and tried to gene...

eneimi

Yes.

http://wiki.mikrotik.com/wiki/User_Manager

eneimi

I have an RB600 with 3 XR2s and 3 120deg sectorial antennas. All 3 radios are in ap mode, have different ssid in 2.4Ghz. Each of those interfaces is in a different subnet running separate dhcp and hotspot servers. However i use usermanager for authentication. That's one option for you. Another optio...

eneimi

Vague request. While setting up your hotspot server, if you use the setup wizard it will automatically add relevant nat (masquerade) entry. If so, you don't need to play around with nat. Read more about nat: http://www.mikrotik.com/testdocs/ros/3.0/qos/nat_menu.html There are a host of firewall filt...

eneimi

Very graphic illustration. Nice.

And i think pilgrim meant wlan1 not vlan1

Just create a bridge and put ether1 and the vlan1 into this brigde

eneimi

Yes, it's enough to clear just the cache. Format? Definitely not! It probably won't allow you anyway, seeing the system is running on the same drive.

Again, it would be good practice to separate them.

eneimi

However, with frequent writes, erasures and rewrites to the disk by your proxy cache - the disk is likely to use up its rewrite cycles (and thus fail!) sooner than if you had the cache running separately. And of course in this scenario, the disk fails - so does your system. It may take quite a while...

eneimi

...and then 15db omni to AP(RB411) and 24db grid to client(RB433).
The 433 is a more feature/option rich RB, perhaps you may consider using at for the AP instead.

eneimi

Mikrotik Forum
Take up your question with HP, Canon or some other laser printer manufacturer.

eneimi

A Sessions=active sessions; number of current sessions started by users
A Users=active users; number of users currently authenticated
If each user is limited to one active session, then A Sessions=A Users.
Sessions=total sessions ever opened since UM was installed and configured.

eneimi

What do you yous on the other side (HotSpot/PPP/Wireless)? Wireless does not support traffic amount limitations.

I use hotspot.

eneimi

can i power them up through poe Yes you can - board supports passive poe. they only have one lan port if i can then how can i feed in data to the board Your poe adaptor should have a 'power+data' port as well as a 'data only' port. Connect your pc to the data only port and your RB to the power+data...

eneimi

You can use simple queue with time interval setting. One rule with the 8am - 6pm restriction (1k/1k) and a second rule permitting normal browsing between 6pm and 7am. However you can only apply the queue to a specific ip or subnet and not to a user ; so if you use static IPs it's straightforward bu...

eneimi

Strange request. You may cache youtube videos with web proxy - that may take some load off your direct connections after a while. This is hoping your clients watch just about the same set of videos! There was a debate some time ago about how useful this (cache) is, seeing the tons of different video...

eneimi

I assume your radio is in station mode and you've scanned and connected to the network of interest (any security - wpa etc)? Enable dhcp client on the correct interface (wlan1?) and ensure 'add default route' and 'use peer dns' are checked - unless you know what they are and prefer to assign them ma...

eneimi

In the second image you sent, you should have allowed us see the 'dial out' tab - have you input the correct 'service name', 'user' and 'password'? You should aso mark the boxes 'add default route' and 'use peer dns'; otherwise you will have to manually specify correct dns and valid gateway (not 192...

Search found 387 matches