MikroTik

bledar

Thanks for the reply ZeroByte. This parameter helped me a lot on Mikrotik world and I thought if something similar would exist even for Cisco IOS. Pls, any equivalent config on Cisco for marking connection and count bytes would be great for prioritizing real web traffic instead of all tcp 80 port tr...

bledar

Hi mates,

I need help on how to configure connection-bytes= parameter used for QoS in Mikrotik, to Cisco router.
So, connection-bytes equivalent on Cisco
I will very appreciate your help!

bledar

Hello!

I need to add Squid proxy for my clients. I must be in the same subnet with clients.
All requests that came to router, redirects to Squid.
Please, I need help on doing that on Mikrotik (not with parent proxy).

Thank you in advance!

bledar

Dear friends. On my system I have 3 gateways with 3 different internet providers. I want to add some QoS (traffic prioritization, or per traffic limitaion) rules, different for each gateway. My new queue with parent interface (for ex. ethernet1) does not work. It works only with parent global-out. A...

bledar

Are enough this 2 rules below for doing config like on attached picture (clients and Squid proxy are on the same subnet and squid will not serve as parent proxy for mikrotik web proxy): ip firewall nat>print 2 X ;;; To Squid chain=dstnat action=dst-nat to-addresses=192.168.12.66 to-ports=3128 protoc...

bledar

"Why that works with PCC http://wiki.mikrotik.com/wiki/Manual:PCC ?"

"that" i mean proxy

bledar

So, there is no way to build 2 separated LAN IP groups connected to 2 different ISPs with Web proxy ? Why that works with PCC http://wiki.mikrotik.com/wiki/Manual:PCC ? Even on this config connection is classified per src-address. I tried that to put src-address-list="grpup ip A" and src-a...

bledar

But I want a solution that 'Group IP A' of LAN to connect with ISP1 and 'Group IP B' of LAN to connect with ISP2 via Mikrotik Router with buildin Web Proxy (traffic must not bypassing proxy).

Is it possible to separate traffic based on source IP address after proxy?

bledar

Sorry, it was my mistake. Rules that inhibit each-other are: ip firewall mangle print> 1- ;;; Route_to_ABCom chain=prerouting action=mark-routing new-routing-mark=route_to_ABCom passthrough=no src-address-list=Route_to_ABCom ;;; Route_to_Albtelekom2 chain=prerouting action=mark-routing new-routing-m...

bledar

I am trying to mangle with prerouting packets and than to give priority to queue tree. Also must mangle prerouting tcp port 80 connection for than redirect that to port 800 (port of proxy). But in this way does not work. Does exist any other way to do so? Config: ip firewall mangle print> ;;; Downlo...

bledar

Yes, I am marking packets on upper rules. ip firewall mangle print> 3 X ;;; Mark 80 TCP Connection for proxy chain=prerouting action=mark-connection new-connection-mark=http_conn passthrough=no protocol=tcp dst-port=80 But does exist any way to do traffic/bandwidth optimization and transparent proxy?

bledar

Hi guys! Is it possible to do traffic/bandwidth optimization and transparent proxy simultaneously? My config is: /ip firewall mangle>pr 8 X ;;; Route_to_ABCom_backup chain=prerouting action=accept src-address-list=winbox_active in-interface=Local 9 ;;; All Download All chain=prerouting action=mark-p...

bledar

Hello friends! On Mkrt system I have 2 internet connections. I need to ping http://www.google.com via one of them but when I ping using cmd /ping http://www.google.com is OK about 50ms, when I ping interface defined I have some strange response time /ping http://www.google.com interface=ABCom why th...

bledar

Hello guys.

Do you have any idea or any experience on mangle audio and video messengers traffic (msn,yahoo, skype)?

Thnks.

bledar

Hello.

No, in RouterOS no. Only some changes on Squid config and on file system of linuxOS for best performance.
If you need them I will list them.

BR

bledar

OK. Thank you. I resolved it.

Best regards

bledar

Pls, may you help me with some other informations regarding that config?
Like:
-the ip of squid is the same range, physical port with other clients?
-route to/from squid.

thank you for your help.

Best regards!

bledar

I did: / ip firewall address-list add list="WAN-01" address=172.18.1.24/32 comment="" disabled=no add list="WAN-02" address=172.18.1.76/32 comment="" disabled=no / ip firewall nat add chain=srcnat action=masquerade out-interface="WAN - 01" src-addres...

bledar

I want to do the below configuration (attached)
Sqid proxy to serve like parent proxy for mikrotik web proxy.
Pls, I need help doing that. Any presentation or tutorial regarding this config will help me to much.

Thank you in advance.

bledar

I added another WAN/Internet connection to my router. Pls, I need help to route some clients to new added WAN2.

bledar

Pls, any help?

bledar

Thank you guys. I'll try it.
I have some DNS records for youtube, but I dont know if thay are enough!
I need help to find all dns that youtube uses. Does exist any tools or website for this purpose?

thanks again.

bledar

I have to route youtube to another WAN interface. I tried with some IP ranges, no success. I tried with another method: script to search on DNS records for "youtube", send thats IPs to an address-list, route traffic to that address-list to desired WAN gateway, but even this way is not so e...

bledar

I found it on Manual.

have a nice day guys.

Bye

bledar

I have implemented QoS traffic prioritization with Queue tree and PCQ on RouterOS.
Which parameter determine queue store size (I mean queued traffic in bytes of a queue tree with lower priority than others)

bledar

Is it any way to allow or deny a group of IPs on IP webproxy access?
For example, on src-address="adress list"

thank you in advance.

bledar

So, have anyone mangled successfully messengers (yahoo, MSN, skype...) multimedia traffic (voice and vide traffic)?

bledar

I need help mangeling messenger's video traffic. Any idea on how to distinguish messengers video traffic from other video traffic (like from youtube or other similar sites) Or how to mangle for examle these 2 coddecs that live messenger use: "x-rtvc1" with payload type 121, the second one ...

bledar

Thank you again Chupaka. I read that article a couple of times times before, but now I think that understood thats philosophy.

Have nice weekend.
Bye

bledar

I need a idea please on how to change below script to monitor queue tree queue load. Is this wright?: system script add name="tl_down" source="/queue tree monitor-traffic [/queue tree find name "interface"] once do { /system script add name="tl_down" source="/...

bledar

I have implemented QoS traffic prioritization, from 1 to 8. Please, I need to clear something, what QoS is doing in these case: only limiting traffic for different of queues and acontenting firstly "limit-at" of queues with higher priority or queueing some traffic and letting passing first...

bledar

I tested it with ip:80 but no success. I will check again, maybe some input rule is dropping anything else except port 8291 for IP of comp that I tested.
So, in that way it works, means that I have locally something that blocks it.

thank you for your help.

Best regards

bledar

If I change port of winbox to 80 and disable www service (/ip services), I cant connected any more from winbox localy and not from internet. Maybe winbox search for connection only port 8291.
Does someone have success connecting from port 80 to router via winbox?

bledar

Thank you guys. It was very helpfully.

Best regards

bledar

I have troubles finding all IPs that youtube uses, thats why I cant route video traffic. I have an list of IPs but I think it is not full range of ips that youtube uses. ip firewall address-list print Flags: X - disabled, D - dynamic # LIST ADDRESS 0 Youtube 208.117.224.0/24 1 Youtube 208.117.225.0/...

bledar

I have 3 WAN interfaces on my Router.
Please, I need help to route to only one WAN interface video traffic (youtube, redtube etc...). I have troubles mangle it.

bledar

I want to connect from my office to Mikrotik RouterOS via winbox. I have only port 80 TCP open on my office.
So, may I connect to RouterOS via winbox with only port 80 TCP opened?

BR

bledar

Hello.
I resolved it. Removed LAN ip addresses from PCC selection on upload and redirected them to a specific gateway.
I will see how might do for all IPseach incoming gateway.

Thank you for your help.

bledar

I did it but no success again. At least this time I can connect to router via this gateway (I tested with WAN1 interface firstly)

I see that is 0B routing mark rule (please see attached print scrn), what does it means that it was never matched?

Thank you again.

bledar

Hi.

I moved those rules upper on top of all rules.
But no success.

Please how may I resolve this problem?

Best Regards

bledar

Hello. Thanx for reply. I added these rules: 17 X ;;; Reply to traffic going to WAN1 side with WAN1 connection chain=input action=mark-connection new-connection-mark=outside_WAN1_connection passthrough=yes src-address=!192.168.12.0/24 dst-address=xx.xx.xx.247 18 X ;;; Reply to traffic going to WAN1 ...

bledar

Hello. I have 3 wan interfaces. I am trying with remote desktop to connect from internet to my home server (ip:192.168.12.122) with NAT but when I have success only via 2 interfaces (with pppoe authentication) and with other sometimes I have and sometimes not. the config is same I disabled all rules...

bledar

thank you for reply.

My processor is dual core but I have problems when it was configured RouterOS to run with dual cores. When I did multi-cpu=no looks like situation was normalized.

So, I have no change (except reducing cache size) to reduce time of high processor consumption

?

bledar

Hello. I have installed RouterOS 4.3 on an IBM 3Ghz proc/1GB RAM/80GB HDD and configured web proxy with 30GB cache size. I have some troubles with proxy cache. The CPU consumption rest to 100% for about 5min when I reboot system. I think it happen when "building cache" process is running. ...

bledar

thank you for reply. I had problems with some users to loggin to facebook (some users logged in successfully some not ). I thought that maybe was problem on cache. I added this rule: ip proxy cache add dst-host=:facebook action=deny and I am waiting for results. Has anyone this problem before? What ...

bledar

Hi.

On ip proxy cache I do want to cache websites like: facebook, twitter ... May I do that in one rule?

bledar

Have anyone success with RouterBoard44 PCI 4 port ethernet adapter to work with ESXi 4?
Or does exist any working driver that I must add for having this card to work on that system?

bledar

No I dont know what exactely these rules do, thats why I am asking about 'drop' rule
So If someone helps me with short explain Ill bee grateful.

Thanks

bledar

It is true, I havent any rule with chain=drop. I created one and all seems OK.
For blocking a specific traffic, may I use now chain=drop instead of input, output or forward?

Thank you kirshteins!

bledar

Hi. I put the rules of "NetworkPro on firewalling", wiki, on my router but something seems going wrong. http://wiki.mikrotik.com/wiki/NetworkPro_on_firewalling All rules that contains "jump-target=drop" are with red color (on winbox). Please, may someone help me to find where the...

bledar

Does RouterBoard44 PCI 4 port ethernet adapter works with ESXi 4?
Or any working driver?

bledar

come on guys, nobody helps me.

bledar

Please, any help?

bledar

Hello. I monitored traffic from router (web proxy cache) with: chain=output action=log protocol=tcp out-interface=Local dscp=4 log-prefix="from_proxy=" When I downloaded for second time same files, they was miss not hit. Hit was only a little bytes. For example refresh www.google.com has H...

bledar

sorry even those may be helpful :) queue tree print Flags: X - disabled, I - invalid, D - dynamic 0 chain=srcnat action=masquerade out-interface=ABCom 1 chain=srcnat action=masquerade out-interface=Albtelekom1 2 chain=srcnat action=masquerade out-interface=Albtelekom2 3 chain=dstnat action=dst-nat t...

bledar

Hi. I have problems with my web proxy. When I download for second time any file less than max. cache size, so less than ~25MB, it downloads from internet again not from cache. Maybe the rule for caching all packets from proxy, DSCP=4 is not working properly, 23 ;;; HIT TRAFFIC FROM PROXY chain=outpu...

bledar

May I use PCQ with rate=x for QoS, traffic prioritization queue tree? I mean. Does it have any problem to use PCQ queue types (with rate specified) on queue trees for QoS traffic prioritization? In some threads here in forum, say that QoS prioritization does not work for download traffic with motiv...

bledar

May I use PCQ with rate=x for QoS, traffic prioritization queue tree?

Thank you in advance.

bledar

Did you have any success with it?

bledar

thank you. I will try it.

bledar

But how may I do that. Please help me.

bledar

I dont know how to use it on PCC.

Maybe a working code of L7 mangle, got it anyone?

thanks.

bledar

[img][i]btw, 'Mark all downloaded packets from 3 WANs' is actually 'Mark all not marked downloaded packets from 3 WANs' - in previous rules you have passthrough=no [/i][/img] I put those rules upper than 'services' packets mark, passthrough=yes and seems that works well. I have no success with .exe...

bledar

Hi!

Is it any success way to mangle .exe downloads, for QoS.
I tried it with layer 7 but no success (\x4d\x5a(\x90\x03|\x50\x02)\x04).

bledar

On this example: http://wiki.mikrotik.com/wiki/NetworkPr ... of_Service

add action=mark-packet chain=postrouting comment=QoS dst-port=80,443 new-packet-mark=QoS_1_Up out-interface=ADSL1 packet-size=0-666 passthrough=no protocol=tcp tcp-flags=syn

why packet-size is 0-666, why till 666?

bledar

Sorry, understood

bledar

By the way, why I have to specify limitation (CIR, MIR) for queue tree. I do not need to do limitation of traffic or services, I want to give them prioritization. For ex. if we have 2 services A with 10 packets and B with 20 packets (A prio1 and B prio2), firstly must pass all 10 packets of service ...

bledar

Hi all. This is my config: Please I need your opinion regarding traffic prioritization. [admin@MikroTik] /ip firewall mangle> pri Flags: X - disabled, I - invalid, D - dynamic 0 chain=input action=mark-connection new-connection-mark=pub1_conn passthrough=yes in-interface=WAN1 1 chain=input action=ma...

bledar

Hi. On this link, http://mum.mikrotik.com/presentations/CZ09/QoS_Megis.pdf page 34 indicate to mark with prerouting and shape with HTB global-in. Not mark packets with forward and shaping with HTB global-out. I don't understand now what I must to do, trying to find the way to mark with prerouting an...

bledar

I tested it only for queue tree number 3 and 19. Other upload queues are disabled.

bledar

I put this rules on firwall mangle: 14 ;;; Mark all dwn packets chain=prerouting action=mark-packet new-packet-mark=from_pub passthrough=no in-interface=WAN1 15 chain=prerouting action=mark-packet new-packet-mark=from_pub passthrough=no in-interface=WAN2 16 chain=prerouting action=mark-packet new-pa...

bledar

No Chupaka I asked: is it true that must use oly prerouting for marking packet and shaping on HTB global-in, not for example mark packet with forward and shaping on global-out?
Will work good the second way for traffic prioritization purpose?

Thank you!

bledar

QoS regarding traffic prioritization.
Is it true that must use oly prerouting for marking packet and shaping on HTB global-in?
Forward for marking packets and shaping on HTB global-out, will it works good?

Thanks for helping me.

bledar

Thank you Macgaiver!

So is no way to use prerouting packets in this case?
Confronting prerouting mark, shaping on global-in and forward mark and shaping on global-out for QoS purposes, who is the best way?
Or the result is same on both ways?

bledar

OK. Now I understood what PCC is but on continue of my routerOS config I posted also QoS issue. in this case I have those rules on firewall mangle: 14 ;;; HIT TRAFFIC FROM PROXY chain=output action=mark-packet new-packet-mark=proxy-hit passthrough=no out-interface=Local dscp=4 15 ;;; UP TRAFFIC chai...

bledar

Hi. I want to give some packets higher priority than others. Is it any way to mark packet on chain 'prerouting' and than shaping them on HTB Global-in when I have 3 public interfaces? Or I must mark packets only on chain 'forward' and than shaping them on HTB Global-out? My Router's actual config is...

bledar

Hi. I want to give some packets higher priority than others. Is it any way to mark packet on prerouting and than shaping them on HTB Global-in when I have 3 public interfaces? My Router's actual config is: [admin@MikroTik] > ip route print Flags: X - disabled, A - active, D - dynamic, C - connect, S...

bledar

Dear Chupaka. I intend to implement QoS with this priority order: Prio 1 dns,icmp, VoIP, SIP, STUN Prio 2 add chain=forward action=mark-connection connection-bytes=0-500000 connection-mark=all_conn connection-rate=0-200k new-connection-mark=light_traffic_conn protocol=tcp add chain=forward action=ma...

bledar

No, no they wok perfectly on other cases but in this case (messenger's video) or I put wrong values or is impossible to determine the wright bandwidth diapason (as I know video quality over ethernet may vary from 128kbps-2Mbps).
So I asked for any other way that I don't know.

bledar

Hi Normis. with L7 I can find some messenger traffic mangle: add name="skypeout" regexp="^(\x01.?.?.?.?.?.?.?.?\x01|\x02.?.?.?.?.?.?.?.?\x02|\x03.?.?.?.?.?.?.?.?\x03|\x04.?.?.?.?.?.?.?.?\x04|\x05.?.?.?.?.?.?.?.?\x05|\x06.?.?.?.?.?.?.?.?\x06|\x07.?.?.?.?.?.?.?.?\x07|\x08.?.?.?.?.?.?.?....

bledar

Hello.

May someone help me how to mangle video traffic of some known messengers (msn, yahoo, skype, aim) for quality of service.

bledar

Hi Normis. I don't know exactly what L7 does. Lets take for example Video over HyperText Transfer Protocol L7=http/(0\.9|1\.0|1\.1)[\x09-\x0d ][1-5][0-9][0-9][\x09-\x0d -~]*(content-type: video) If I mangle this traffic via L7 and prioritizing it confront other packets, does really all streamed pack...

bledar

Is it any way to mark messenger's (msn, yahoo, skype ...) video for QoS ?
With connection-rate, L7 filtering or other way?

bledar

I use simple queue for having more bandwidth for an period of time (ex. 10s). But on my configuration queue simple rules seems that does not work properly. Please, what I must change for making them to work? queue config: [admin@MikroTik] /queue tree> pr Flags: X - disabled, I - invalid 0 name="...

bledar

I test it and it is really well working. But I have an problem with yahoo messenger. Cant not initialize a voice or video connection. Chat is OK. I changed connection configuration on messenger's menu, set it to direct connection, http proxy and sock proxy IP of router and port of proxy but no succe...

bledar

Maybe when adding routes via terminal must use 'gateway=xx.xx.3.1%WAN2' and 'gateway=xx.xx..3.1%WAN3' not 'gateway=xx.xx.xx.225%WAN1' and 'gateway=xx.xx.xx.225%WAN2' ??? Because WAN2 & WAN3 have the same GW IP address. I did it in this way ( 'gateway=xx.xx.3.1%WAN2' and 'gateway=xx.xx..3.1%WAN3'...

bledar

I asked for this queue simple: 'default' or 'PCQ' [admin@MikroTik] /queue simple> pr Flags: X - disabled, I - invalid, D - dynamic 0 name="conn 1" target-addresses=192.168.1.101/32 dst-address=0.0.0.0/0 interface=Local parent=none direction=both priority=5 queue= default/default limit-at=2...

bledar

No, no, no it still does not works.
when I determine "Gateway Interface" for each connection WAN3 interface is still present on WAN2 with routing mark to_pub2

Please, how may I resolve this situation.

thnks again

bledar

I think I found it, determining "gateway interface" and it works.

Thank again.

Bye

bledar

Dear Chupaka, please, help me how to do that: 'code' tag. May you suggest me how to do that.

Thank you again. you are great

bledar

Oh, this one I think is wright :) /ip firewall mangle add chain=output out-interface=Local dscp=4 action=mark-packet new-packet-mark=proxy-hit passthrough=no comment="HIT TRAFFIC FROM PROXY" add chain=prerouting in-interface=Local src-address=192.168.0.0/16 action=mark-packet new-packet-ma...

bledar

Sorry. this one has a nicer view

bledar

My Routing table: WAN1 is not connected # DST-ADDRESS PREF-SRC GATEWAY-STATE GATEWAY DISTANCE INTERFACE 0 A S 0.0.0.0/0 reachable xx.xx.3.1 1 WAN3 1 S 0.0.0.0/0 unreachable xx.xx.xx.225 1 WAN1 2 A S 0.0.0.0/0 reachable xx.xx.3.1 1 WAN3 3 S 0.0.0.0/0 unreachable xx.xx.xx.225 1 WAN1 4 S 0.0.0.0/0 reac...

bledar

I dont know how to do that without connection-marks. Is this config OK with PCQ? Do I need to set up queue type on Simple Queues and Interface Queues to PCQ_Download or PCQ_Upload? Thank you again for your help! /ip firewall mangle add chain=output out-interface=Local dscp=4 action=mark-packet new-p...

bledar

I did PCC gateway load balancing configuration with 3 WAN connections. I intend to do this configuration too for having max speed from proxy cache to clients, but firstly I need to consult with you. -Is this wright config that I must add to my router? -New Mangle rules (these ones that I intend to a...

bledar

I tested it with 2 ro 3 different PCs, maybe more traffic is needed?
I have 2 DSL lines from/to the same ISP, with the same gateway IP address, is this a problem using above configuration? (just for surety)

Thank you again.

bledar

thank you Chupaka for helping me

bledar

Hi.

What about messengers, do they have problems using PCC matcher?

Thank you and best regards.

bledar

Does anyone of you have problems with messengers using PCC matcher?

bledar

I entered this configuration on router http://wiki.mikrotik.com/wiki/PCC#Introduction http://wiki.mikrotik.com/wiki/PCC#Introduction but when I download only one interface is loaded. Please, where is the error? Maybe this is only for upload gateway load balancing? Is this the wright config for load ...

bledar

Please, is this script OK for monitoring load of "ether2" interface for 10 sec and if it will be over 1Mbps will disable route Routes2 ??? /system script add name="ether2" source="/interface monitor-traffic [/interface find name "ether2"] once do { :if ($received-b...

bledar

It has not to do with prioritization, but with traffic matcher yes.
For prioritization it firstly I must match it. am I wright?

bledar

So all script will looks like this: /system script add name="ether2" source="/interface monitor-traffic [/interface find name "interface"] once do { :if ($received-bits-per-second > 1048576) do { /ip routes disable [/ip routes find comment=Routes2] :while ($i < 10) do={ :set...

bledar

I need to do gateway load balancing with 3 DSL connections, 2 on one ISP and one on other ISP. If on firewall mangle I will match http traffic firstly add action=mark-connection chain=forward comment="HTTP and HTTPS" disabled=no \ dst-port=80,443 new-connection-mark=HTTP_HTTPS passthrough=...

bledar

Hi. I need help on editing below script or. I want to monitor interface and if for an average of time of 10 seconds will exceed 1Mbps traffic do..., not only if traffic will exceed 1Mbps traffic do... /system script add name="tl_down" source="/interface monitor-traffic [/interface fin...

bledar

Dear Chupaka. To be honest I want to do this configuration: A-ISP 1 connection must handle these traffic and priority order Priority for traffic from/to interface WAN1 must be: 1-DNS 2-ICMP 3-VoIP [with IP range 192.168.12.40-50, SIP and audio (all needed for good voice service) packets, protocol ca...

bledar

Thank you Chupaka.

Please, I want to take support (if it possible) from you. So, please may you write me to my private address muca.indrit@gmail.com or give me your address.

Have a nice day.

bledar

Any idea???

bledar

thank you for reply. To route HTTP traffic only via ISP1, I think mangle rule for marking HTTP traffic must be permanent. Script i needed for monitoring ISP1 connection and activating/ deactivating route with routing-mark and gateway to ISP2 (when this route is active, route to ISP1 with http routin...

bledar

How may I edit this script to monitor bandwidth on interface and if average of bandwidth will exceed 1Mbps for 60s, may activate queue simple rule, and deactivating queue rule if average of bandwidth will be under 950kbs for 60s Scheduled check for loaded interfaces (auto adding queue to some IP or ...

bledar

I have 2 different connections to internet, one 10 and other 20Mbps. If traffic to ISP1 will reaches max bandwidth (10Mbps), new HTTP requests must pass via ISP2 connection till bandwidth to ISP1 will be under 9.5Mbps, than newer HTTP requests must pass again via ISP1 connection. Please, may someone...

bledar

Hi SurferTim Thank you for your reply. With "Kind of traffic" I mean: via ISP1 I want ot pass only DNS, ICMP, HTTP, HTTPS traffic and via ISP2 & ISP3 must pass other traffic. Meanwhile, with help of a script will monitor load of ISP1 interface, if ith will be loaded more than 10Mbps, n...

bledar

Hi! I have 3 different internet connections on my Mikrotik, ISP1,ISP2 &ISP3. I want to divide traffic on 2 pieces, one kind of traffic must pass via ISP1 and other traffic must pass via ISP2& ISP3 to internet. So, how system may know only 2 main pieces of connections. One is ISP1 and other I...

bledar

Hello. Please, I need help for this configuration. I have 3 different internet connections on my Mikrotik RouterOS. Need to pass HTTP, DNS traffic via ISP1 and other traffic (including HTTP and DNS traffic, when bandwidth of ISP1 is full or reaching a specific bandwidth) via ISP2 & ISP3. I welco...

bledar

Hello. Please, I need help for this configuration. I have 3 different internet connections on my Mikrotik RouterOS. Need to pass HTTP, DNS traffic via ISP1 and other traffic (including HTTP and DNS traffic, when bandwidth of ISP1 is full or reaching a specific bandwidth) via ISP2 & ISP3. I welco...

bledar

Please, any suggestion regarding only point A?

Thank you in advance.

bledar

If I will install system and cache on the same, for clearing all cache it's enough only clear cache or must format drive.
thanks a lot for your help.

bledar

If system and proxy cache are on the same disk, does it affect the router performance?

thank you in advance.

bledar

Hi guys. I must to do the below configuration on RouterOS Firstly, I need to disuse with you for any idea or configuration. A- ISP 1 connection must handle these traffic and priority order Priority for traffic from/to interface WAN1 must be: 1-DNS 2-ICMP 3-VoIP (with IP 192.168.12.40) 4-HTTP 5-HTTPS...

bledar

Thank you for your help.

bledar

Thank you Chupaka for your help.

But what about IP web proxy, does it works with that configuration?
Does anyone test it before?

thnx

bledar

Hi. I want to configure gw load balancing with 4 WAN connections to different ISPs, with different bandwidth limitation. It must guarantee that all paths to the destination network are being used. I need your opinion on how to configure (load balancing) router for forwarding packets in different rou...

bledar

Hi.

I am wondering if IP proxy cache works with this scenario.

2 LANs
2 WANs

1 internet gateway for each LAN network

http://wiki.mikrotik.com/wiki/Load_Bala ... e_Gateways

If yes, please any suggestion on configuring that.

Thanks.

bledar

Hello

I want to find IP addresses of msn, yahoo, skype, ... servers messengers for marking, priortization than their connections.

Please, help me to find the IPs (range) for most messengers.

Thank you in advance.

bledar

Thank you n2m for your help.
I have a fogginess regarding gateway load balancing with NTH feature:
Does ip proxy, works with nth load balancing?
Is it a good choice to use NTH with 2 different connections (one connection use shared bandwidth, unstable bandwidth)

Thank you for reply.

bledar

Hi. I would like to configure gateway "Load balancing". I mean 2 different internet connections, connected to Mikrotik that serve like one (like on fig). Please, may you help me with configuration, suggestions or any available guide. P.S. 2 Internet Connections have different bandwidth lim...

bledar

Hi. I know that this is not the right forum and I know also that only you can help me regarding this issue. I like very much RouterOS but I want to have and one cisco router configured as backup on a critical business envoirement. Please, what literature I must read or what configuration I must put ...

bledar

Dear friends.

May someone help me, what software I might install on client Laptop to connect with RouterOS PPTP Server.
Maybe Cisco VPN client will works?

bledar

Hello. I want to implement MKRT with 2 internet conections: /interface set ether1 name=Internet1 /interface set ether2 name=Internet2 /interface set ether3 name=Local Some firewall mangle roules: /ip firewall mangle add chain=prerouting in-interface=Local connection-state=new nth=2,1 action=mark-con...

bledar

Nth, sorry

bledar

What is Mth on firewall filter please.
May any one help me with some articles about that (except routeros manual)

Thank you in advance.

bledar

OK. Thank you again Normis.

I have an open thread, what about it please. http://forum.mikrotik.com/viewtopic.php?f=2&t=30789

bledar

Even if new installation of OS is needed (installed on PC)?

bledar

Any help with succeed scenarios.

thank you in advance.

bledar

Thank you Normis

What about if ROuterOS crashes. What we can do for lousing not the license? Any backup restore of OS, how to?

bledar

Please, any help how to backup RouterOS for disaster recovery.
(not only configuration, OS also)

Thank You

bledar

Hi.

Is it possible to work ip proxy on version 3.22 with load balancing over multiple gateways (as shown in this example + ip proxy:
http://wiki.mikrotik.com/wiki/Load_Bala ... e_Gateways

thnks!

bledar

Hello. Please, how may I configure routerOS with 2 WAN and 2 LAN interfaces that member of X IP range on LAN 1 to access internet via ISP1 connected on WAN1 interface and member of Y IP range on LAN 2 to access internet via ISP2 connected on WAN2 interface. 2 WAN interfaces: WAN 1-->ISP1 WAN 2-->ISP...

bledar

I mean, does simple queue (limiting customer's bandwidth) works well on RouterOS v3.22 when web cache is enabled.
On RouterOS v2.9.51 is OK.

Sorry but I sow something like that on this thread:
http://forum.mikrotik.com/viewtopic.php?f=13&t=23663

bledar

Does bandwidth management is working so well when using new proxy from mikrotik ROuterOS 3.2 as old one on version 2.9.51?

Thanks

bledar

Hi to all. We have RouterOS 3.2 installed on a PC with parameters:3GHz P4 processor, 1GB RAM, 80GB HDD I want to build a proxy cache for our clients but I have some fogginess. a)Please, how can I change cache-drive from system to another (for ex. with capacity 60 GB) How to find the list of availabl...

bledar

I tried with different workstations, I tried forcing ethernet speed and duplex for my camera and the port of the router it is connected to. From the router I ping normally (with no latency) all devices. I tried to change the ethernet port of the router for LAN, but no results. All max bandwidth of t...

bledar

May someone help me???
BR

bledar

I have a scenario and IP route table like below on my MKRT: My bandwidth is 1Mbps. When I was connect from an computer with IP 192.1698.11.100 to an IP camera 192.168.12.20 the connection was slowly (gave the impression that I reached ip camera from Internet). Pinging IP 192.168.11.100 from range 19...

bledar

Hello.

I need your help regarding issue like bellow:

I want to add another IP range on my local ethernet port.
I have actual range 192.168.12.0/24 and I want to add 192.168.11.0/24 ip range.

Please what config I must do?

Thanks in advance!

bledar

Please, may someone help me regarding this issue?

Thank you in advance!

bledar

Hello.

I have other fogginess according that tutorial, please.
1.May it works even if the IP of WAN interf is public IP (routed one)?
2.Why NAT must be disabled ?

Best regards & thank you for your help!

bledar

Hello. I want to build a cache system like in link below: http://wiki.mikrotik.com/wiki/Open_source_caching_server But under wan interface I want to put different IP, public one (routed ip) not private (192.168.12.11.1, 192.168.12.2) Is it possible? Or if you have any idea I will welcome them :) tha...

bledar

Sorry, lets say 48mW power to antenna.

BR

bledar

Hello!

We want to buy some Omni 8 dBi antennas.
From your experiences, about how meters from AP we will have good quality?

The antennas will be operate on the city area, with 15-20 meters buildings mostly.

Thank you in advance for your help!

bledar

OK. Thank you QpoX for your continuous support.
Have a good day.

bledar

Please, how meters about from AP goes 100mW phone covered?
Let say it will operate in full with building area.

Does it works about 80-100 meters from AP with that scenario?

Thank you for your help.

bledar

Has any body any idea regarding this thread?

THNX.

bledar · Re: RouterOS 2.9.51 and 3.16 upgrade Thank you Louis!

Thank you Louis!

bledar

Hello.

May some give us an answer regarding this issue?
Maybe forumguru or siteadmin have infos about this.

BR

bledar

Hello.

If I purchase RouterOS version 3.16 with level 5 licence, I may upgrade for free till version 5.x
What if I buy RouterOS version 2.9.51, till which release I will upgrade it for free???

Thnx.

bledar

If I will buy RouterOS version 3.13, I will might upgrade OS for free till version 5.x, right?
What about if I buy RouterOS version 2.9.51. Till which release may upgrade for free RouterOS?

Thanks.

bledar

Hello.

Please, I want to know the time duration of clients connections on my net via DHCP server.
How can I get it?

Thanks.

bledar

Thanks GuJack20.

Benny 30,
Squid is a part of Mikrotik RouterOS. It used on IP Web Proxy.

bledar

Hello

Have anyone any idea regarding this topic???

bledar

Hello.
Thnx for your info and supporting me.

Please, phone with 100mW at 2.4 GHz capability at which distance from AP works?
What dbi gain must have access point for working at maximum distance that allowing TX of phone (Nokia E51, E65) ?

bledar

Hello

Please, may someone explain me exactly (maybe with one scenario) for what parent-proxy, on web proxy is used for?
Can I add another proxy cache and other proxy policies (on another machine) ?
Who will be primary (master)?

Thnx!

bledar

I think it too.

bledar

when I try to format cache drive an error message appears: "Could not format disk-system drive cannot be formatted"

Please, what can I do for formatting cache drive?

Thank you.

bledar

Hello.

If I format drive on ip web-proxy what I miss except cached data?

Thank you in advance.

bledar

Hello!

Have anyone find the way to install RouterOS on ESX?

BR

bledar

Thank you for your reply.
On ESX is anyway to build an SATA drive not an SCSI one?

bledar

That mean there are no possibilities for installing Mikrotik on ESX?
Maybe with another boot floppy???

Thnx.

bledar

I will see both them.

Thank you for your help!

bledar

Hello! Firstly thanks all of you for your help. God bless that was invented Forums, and this one is GREAT! I want to implement Voip technology on my net for international calls. Normally this will be done through internet connection. But I have a limited bandwidth (1.2 Mbps). This bandwidth will be ...

bledar

Hello!

Can we dedicate a cache space on IP proxy?
Please, can someone explain how ip proxy works?

Thank you!

bledar

Hello!

I want to install MikrotikOS like a guest OS on ESX 3.5, but I have troubles.
The message that appears is: Fatal error. There is no HDD.
I have 2 datacentres, one SAS and One SATAII.
Have someone installed MikrotikOS on SCSI, SAS, SATA HDD?

Thank You in advance!

bledar

Thank you Archibaldo for your help!
I think will going to 2.9.51

bledar

Maybe on the next releases will think about username and passw for new users on proxy?

bledar

OK.
Thanks for your continuous support!

bledar

Please, how can restrict access to web proxy with username &password for new users?

bledar

Who is the best ip proxy or web proxy?

Thnx

bledar

It use many IPs.
Exist any tools or web address that find all ip addresses for each DNS?

THNX

bledar

Hello!

Did anyone have block facebook.com from firewall rules?
Or maybe in another way except proxy.

Thnx.

bledar

Thank you for your reply!

bledar

Thank You Changeip!

I will welcome other opinions also please.

bledar

But, on version 3 are any queue simple limitation?

bledar

Hello!

Is any queue simple rules limitation?
Maybe my version of MKRT (2.9.27) support only 50?

bledar

Hello.

I want to buy a RouterOS for my system Intel.
But I don't know which are the differences between 3.13 and 2.9.51.

Which of 2 do you suggest me?

Have a nice day.

bledar

But, what gain do normal IP phones have (phones that works 200-300m from base station)?

bledar

Thank you for reply.

I know about ip phone antenna, but my question is: Do you know any wireless IP phone with high (higher than others) gain antenna?

I will appreciate your help.

bledar

I did it so but no results.

Maybe the latest mikrotik version works better regarding firewall rules???

bledar

Hello. I am trying to block all activity to/ from some IPs but I have no results. For ex: chain=forward src-address=87.229.24.119 action=drop chain=forward dst-address=87.229.24.119 action=drop but there are again traffic from/ to this IP I am asking, is Mikrotik's firewall valid or not. Or maybe th...

bledar

Hello.

Please, I want to know how meters away from base station a wireless IP Phone can take a call normally?
Let say, at the base station is a radio with high gain antenna transmitter.

bledar

It must be wireless.

Have any one any idea?

Hi gain phone?

Thnx.

bledar

But I tried to block X ip and still I see traffic toward that IP.

How is it possible?

bledar

Hello!

I want to create a wi-fi phone network wit omni mikrotik antena.
But I want to find any wi-fi phone with hi gain antena.

Can someone know one of these that works on about 0.5Km distance or more from base station?

Thank You for helping me!

bledar

Thank You for replies. Mu PCs are protected with clean slate. When I do a restart the computer goes on the state that I left when I activated Clean Slate. So, a little bit possibilities are that the PCs might be infected. Its bean about 3 days that I see no upload traffic toward those IPs. My questi...

bledar

No on know how to block these 2 ips ?

bledar

Hello!

May any one help me to resolve this problem?
I will really appreciate your help.

bledar

Hello! The "attack" still continue. But now with 2 other IPs, 64.125.23.254 & 209.249.222.45. Even from port 80 of these 2 new IPs. I tried to block these new IPs with firewall rules but no result. /ip firewall filter add chain=forward src-address=64.125.23.254 action=drop /ip firewall...

bledar

Thank you Normis!

For my info, what was that?

bledar

OK. Tank You for your reply. I will read with attention those articles.
But please, what config I must do on firewall for blockin that activity on fastest way?

bledar

Hello! I have upload bandwidth activity full from my router to internet. I see that the source IP is 209.249.222.27/32 (erotic site) port 53(dns) destination my LAN IPs on different ports (IPs of computers connected to LAN interface). Different port for each IP. Please, what configuration I can do f...

bledar

Hello.

But What gateway I must add an my IP route table?

Thanks.

Search found 234 matches