MikroTik

leemans

In most cases issue is solved by downgrading to the previous working ROS firmware.
Then upgrade the LTE modem.
Then upgrade again to the latest ROS firmware

leemans

I need this out-interface because when the IP changes on the LTE device I lose the port in the bridge of my Router where to the LTE device makes VPN connection to. When the L2TP connection is back up the interface does not automatically appears back in the bridge of my Router, it stays unknown until...

leemans

Hi All, I need a script which gets the out-interface in a Firewall NAT rule into the CurrentOutInterface and then compare it with the CorrectOutInterface. When the Interfaces doesn't match the out-interface in the NAT rule must be updated with the correct one. The issue that I have is on the second ...

leemans

1- firmware update. 2- configuration backup and compare. 3- Wireguard VPN generator for client side (a file that can be import to fireguard software). 4- site to site ipse vpn 5- network and wifi settings to any mikrotik in the same site 6- firewall rules and NAT 7- IPS IDS 8- sd-wan 9- geo IP locat...

leemans

This is a know issue at MT, I'm still waiting for them to fix it too

leemans

Same for RB450Gx4

leemans

I'm having the same issue on Routerboard 5009 with ROS version 7.1r7.
MT Support told me that it's solved in this version which is clearly not.

leemans

For the correct working of your 3CX PBX SIP-ALG must be disabled on the Mikrotik Router.
This might be helpful, https://www.3cx.com/docs/mikrotik-firew ... iguration/

kr

leemans

I would go for this device. https://mikrotik.com/product/mantbox_52_15s
If there is a lot of Iron then 2.4ghz is recommended.

leemans

Mikrotik is nice and very good but it's missing it's own Central and Remote Management Solution like the bigger Companies like Cisco, HP, Ubiquity and even Barracuda have. Configuration of these devices is done Remotely from this Central Management Platform. This is a point they really have to tackl...

leemans

Dear,
Yes we hope that Mikrotik will add this feature to User Manager. Would be logic.. why you should need 2 radius servers or why should you replace userman by Freeradisu or Windows NPS if this feature could be added to Userman.
Hope Mikrotik will add this feature soon.

leemans

Dear,
Best to use Devices with Sector Antenna's these ones gives the most stable connection.
KR.

leemans

Dear, For me it's working with domain authentication. In Wireless profile in Radius setting take EAP Accounting, MAC Format: XX:XX:XX:XX:XX:XX Mac Mode: as username and password Called ID format: mac: ssid In the EAP tab: EAP Methods: passthrough TLS Mode: no certificates (this is the case in our si...

leemans

Correct... that's why CAP should check version of CAPsMAN first... if newer upgrade.
It's a shame that it doesn't work anymore... should be the task of CAPsMAN to maintain the CAPs.

leemans

Dear,
It's your license... L5 licence is limited to 50 active sessions, L6 license is unlimited active sessions:

https://wiki.mikrotik.com/wiki/Manual:License

leemans

Dear, The setting in CAPsMAN ‘require the same version’ is not much used cause most often CAPsMAN & AP (CAP) use different hardware type. In my case I’m using as CAPsMAN CHR CM & as CAP the board CAPac. From my point of view when the setting in CapsMan in upgrade policy is ON -> 'Require Sam...

leemans

Did you disable SIPALG on the Router?
In my case there is no VoIP traffic no need to disable it for me, see example... but in your case you must disable SIGALG (which you find in ->IP Firewall -> Services

SipALG.PNG

leemans

First of all... don't use Vlan1 cause it's mostly used for the switch or Router itself (management). Better to use Vlan10 & Vlan20. Generally It's easier to use a switch (CRS326)... First on the router you make a Trunk port to the Switch. On the switch on the ports where you have to put the Vlan...

leemans

Dear, You can leave HotSpot settings on Wireless instead of Ethernet. When hotspot is put on a bridge where Wireless and some Ethernet are on that bridge it will work for both. Do you have a static IP address at your location? When all your settings are correct at least you must see something appear...

leemans

Hi Dave,

Dear,
It's not working on my RB600.
It used to work for a long time...
Any idea how come?

Thanks,
Patrick

leemans

Dear, Hi, I have it working at the moment. We're working in a domain environment and I'm testing at the moment the authentication WPA2 Enterprise AES instead of WPA Enterprise with TKIP. Best way to get it working is to manually configure on the windows client the wlan profile. Here are the RouterOS...

leemans

You have to fill in on top some characters where you can identify the new added users.
I put always a Prefix on my account so I can Identify them.
Once identified you select only those you need.

leemans

Hi,
Did you mean local in Hotspot or via Userman?

leemans

Then CCR1009 cause it's a newer device.
RB1100AHx2 is also good but production may be stopped.

leemans

Dear,
You should better go for RB3011RM.

leemans

Yes,
But without requirement for payment.
Is this possible?
Thx,
Patrick

leemans

Any Suggestions?
Thanks,
Patrick

leemans

Dear, A good advise. Better work with Vlans instead and keep the Phones out of the hotspot. Vlan10 -> Office LAN Vlan20 -> VoIP Vlan70 -> HotSpot Config VAP's (Virtual AP's on the AP's) and put them in the correct bridge Bridge-Office Bridge-VoIP Bridge-HotSpot Put the IP addresses on the correct br...

leemans

You will have to improve your wireless signals
If your connection are always good, between -50 till -70 then you will not have any issues.

leemans

Put mac address of client in access list.
Ban mac addres on other AP's

leemans

Best way is to setup VPN.
Remote sites connect to VPN.
You have secure setup for your userman connections.

leemans

I don't know about UserMan, but FreeRADIUS lets you do that.

Do realize that it can be a security weakness because if someone captures your RADIUS secret, they can connect to your server from that same range and start making brute force attempts on your passwords.

leemans

Dear, I have several setups like this running in plants (factory) in different locations. We use Simbol and Motorala scanners with WPA2 ecryption. Setup is AP Mode with different channels and same SSID. Scanners are working well even it the RX & TX speed seems to be low (viewed from the AP side)...

leemans

In order to get everything working well you need public fixed IP addresses on all sites.
Another solution is to make VPN's to your central point if this is possible and then you're authenticating through a fixed connection with fixed IP address.
Patrick

leemans

Dear, You have to setup Userman first. Or in the same router (not recommended) or in a separate router (device) or VM. Read the documentation of Userman how to setup subscribers, profiles, routers, users, etc... Then in the AP in winbox menu Radius put IP address of Userman + secret and rest of conf...

leemans

No one is enough.
I'm talking about 3 different AP's and not about 3 different Radius servers.
Radius requests must come from different IP addresses to work properly.
Anyway it's how you're familiar with different setups.

leemans

Yes,
I know but this is not what I want.
When zero payment self registration would be possible then I'm able to capture email addresses and build up a dbase.
Userman with self signup with free account would do the job.
Kind regards,

leemans

Hi, Does anybody can advise me how to solve this: I want to have a Signup page (Self Registration) page like in Userman to sign up for a free account but with no payment. The signup page must look like this: Free Account Self Registration Page Name: * Family Name: * Email address: * Username: * Pass...

leemans

Denis, You can work with radius (UserMan) and with automatic signup you assign a limited profile in time 2hours and then add Validity for just 1day. On the hotspot page add a button with the link to automatic signup page. User must have only the possibility to create username & password and to s...

leemans

Dear,
You better use small Router OS instances as AP which you can create for free in Metarouter.
They can be very small with all the RouterOS features you need for the AP.
Patrick.

leemans

Dear, From my point of view the best way to do this is the following: Then only way to do this is to work with MetaRouter and to have Different Virtual RouterOS instances AP's per needed SSID. In this way you can sent separate Radius Requests from different RouterOS systems. Radius settings in the R...

leemans

vm type gen 2 hyper-v image is also broken no boot. chr-6.34rc19 tryed with and without secureboot enabled. 12-9-2015 8-22-05 AM.png was able to generate a gen 1 image from the vmdk and it loades w/o issues. Dear, When you convert the VHDX file into VHD file it will work with IDE config and Legacy ...

leemans

RB3011 inside
nooo, the mPCI-e slot is missing...

Yes of course the slot to insert the card.

leemans

MT,

I'm missing this on the RB3011:

Memory card type 1 x M.2 SDD (which can be used as bootable drive).

Kind regards,
Patrick

i think the only mikrotik with this feature is ccr1072, but dont know if can be booted from m2

Maybe not ... But it better should be.

leemans

MT,

I'm missing this on the RB3011:

Memory card type 1 x M.2 SDD (which can be used as bootable drive).

Kind regards,
Patrick

leemans

Dear, Can the Cloud Hosted Router itself be a Virtual Router with KVM? I suppose this will depend in the future on the hosted provider. Thanks, Patrick Yes it can. I'm using it in both KVM and QEMU. I suppose you didn't get me wel. You take a Cloud Hosted router and this Router itself will be the K...

leemans

Dear,
Can the Cloud Hosted Router itself be a Virtual Router with KVM?
I suppose this will depend in the future on the hosted provider.
Thanks,
Patrick

leemans

HHD -> Metarouter / bigger images
-> Userman

leemans

I hope this device will have a Hard Disk Connection.
That we finally can add a SSD HD.

leemans

Dear,
How can this software be tested?
Kind regards?
PL

leemans

@Nest,
How did you organize the backup?
What did you copy? UM profiles? UM dbase? ..etc..
How often did you synchronize the files and how?
How do you import them on the second radius server?
Thanks for the info.

leemans

Userman can have multiple customer.
A customer can control his own users.
A customer can be an ISP
Subsciber is someone who got an account by online paiement directly on the hotspot.

leemans

,?? Any help?

leemans

Dear,You can use ftp to upload files to router.

leemans

Dear, Ik can only work if you use the wireless routers only as AP (if possible). Then you make MT Router as Hotspot server on some selected ethernet ports. The AP's that are behind that the Hotspot will get the login page. You can then either work witqh local hotspot users which is the fasted soluti...

leemans

Dear Newbie,

Can you update your script that it can work with these parameters?

last-seen is < today
and Uptime-Used>0
and Till-time=Unknown
and Total-Time-Left=""
and Time-Left=""

Thanks in advance.
Patrick

leemans

alfagius, How to change the 'Automatically clean expired User-Manager accounts' script on this way that only the users accounts will be deleted which meet the following requirements: last-seen is < today and Uptime-Used>0 and Till-time=Unknown and Total-Time-Left="" and Time-Left="&qu...

leemans

ok,
Lets hope.

leemans

Correct,

I hope MT will do something about it.
Anyway if the network interface is not working we can't sent a support file to MT to take a look into it and fix it.

leemans

MT should be concerned that RouterOS is working well with Hyper-V cause then you can create High Availability Solutions. In a project we're switching over from physical servers to Virtual Servers with SAN storage solution and Fail Over Clustering for High Availibility. One of our goal was to virtual...

leemans

Hi Nick247,
Ok thx, will wait for v5 and hopefully stable on RB450G.
Hope you will integrate then te FreePBX Gui in your package list.
Thx in advance.
Patrick

leemans

Hi nik247
is it possible to add the FreePBX Gui in your package list.
Thanks in advance.
P

leemans

Ok thx,
Will see when the feature is there.

leemans

Will there be an Winbox Interface to configure KVM? (Like before with XEN?).
Patrick

leemans

Hi Normis, I am preparing the usermanager to be run as a service (SAAS) in a data center ... Thus it's meant to a lot of customers. On the otherhand the machine will be sold also with my logo on it .... when they make by themselfs a second customer (fex. a department in an office, public place, etc ...

leemans

I have the following feature request for the User Manager: Copy the settings from the admin/owner to a new customer instead of Mikrotik default settings ! This change will help us a lot cause now we have to change for each customer made in the UM the logo/templates/style ... etc. so when you copy th...

leemans

Hi, Woulde it be possible to add this feature in the new User Manager! Redundant (Backup) User Manager! I Suppose everyone who is using User Manager Professionally would love this feature. Advantages: * Will give Wisps/Companies/Organizations a main reason to chose for Mikrotiks UM * A feature that ...

leemans

Hi,
By older image I don't mean a CD ISO image but a CF image (.img) file.

leemans

... sorry for Linux users use 'dd' to write the image to the CF. I don't know MAC but maybe 'dd' also exists for MAC.

leemans

Hi, Depending on witch Alix board you have. If you have one with a external HD drive IDE connector you can connect a CDROM on that by using a 40pin to 44 pin IDE cable. Another option is to use an older CF image from routerOS. You can write the image with Physdiskwrite.exe. Once software installed y...

leemans

Dear all? Can anyone help me. My situation is the follwing ! I want to give hotspot users access trough an external login page: https://xxx.xxx.xx.xxx/eIDWebAuthSample/ This page will do an eID (smartcard authentication). When the authentication is sucessful the user may be logged in. How does it wo...

Search found 71 matches