MikroTik

tomswenson

SOB, you nailed it. That rule was somehow missing.

Great catch, thanks all for responding.

tomswenson

Didn't have much luck searching for this issue since every posted config contains this, so I hope you don't mind me posting this. Odd problem with one of my clients. I couldn't Winbox to the HEX router via DNS. Turns out the IP/Cloud was not working and system/packages wouldn't check for updates. Af...

tomswenson

Followup in case anyone is interested.

I had to install KB5010793 to fix the VPN before the Draytek client would work,

Thanks for all the info in all the posts here. Now to fix a bunch of clients.

Tom

tomswenson

Thought I'd try the Draytek Smart VPN client as I hate all the windows updates breaking things. I can't seem to get it to work to what was a perfectly fine Microtik using l2tp/ipsec. I just get "unknown error" Log on Mikrotik says: "phase1 negotiation failed due to time up: Seems like...

tomswenson

I know what you are getting at Tom. AFAIK, the /31 is a special beast, different RFC. Using the /32 is a "workaround" for Mikrotik not supporting that RFC 3021 https://tools.ietf.org/html/rfc3021 I can't explain this, but today, when I looked, my route says it is reachable. I have no idea ...

tomswenson

What I was doing was to create a address with a /32, but setting the network for the 2nd IP in the subnet. No VPN yet. R1: Ether1 IP address: x.x.x.31/32; Network: x.x.x.30; Gateway: x.x.x.30 R2: Ether1 IP address: x.x.x.30/32; Network: x.x.x.31 This worked in testing between mikrotiks, but I'm tryi...

tomswenson

In testing, I have been able to get it to work with a /32 if I'm going Mikrotik to Mikrotik. However, I'm being given this /31 from a provider with an UBNT Edgerouter, and we have not be able to get it to work. So, any suggestions for a competing router to the Mikrotik, must do /31, must do VPN, can...

tomswenson

No go on the /30, but thanks for the effort you are putting forth and your ideas.

Tom

tomswenson

Yes, the mac is in the arp table. It is also pingable, but still shows as unreachable.

Tom

tomswenson

Here is what I found in another thread: "Mon Jan 22, 2018 12:06 am routeros doesn’t support /31s you can use /32s to achieve the same address saving effect. /ip address add interface=gre1 address=1.1.1.0 network=1.1.1.1 and do the opposite on the other end." This isn't the only reference t...

tomswenson

I also read that it wasn't supported, but I also read multiple times, that it can be made to work with an IP of /32, but this hasn't worked for me either. Tom Hello, I've read somewhere (forum, wiki???) that MikroTik does not support /31 :( Try a few searches on the forum to validate this. Regards, ...

tomswenson

/ip address add address=x.x.x.31/31 interface=ether1 /ip route add distance=11 gateway=x.x.x.30 /ip route pr detail Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit 1 S dst-address=0.0.0.0/0 gatew...

tomswenson

I was just given and IP address from an ISP of x.x.x.31/31 with a gateway of x.x.x.30 I have tried multiple things ( using a /32 IP with a .30 address ), but nothing is working for me. I keep getting unreachable in my default gateway ( 0.0.0.0/0 > x.x.x.30) There is a dynamic route in there of x.x.x...

tomswenson

I got it solved today. Here are the settings I used to get it to work. I still had one item checked.

On the security profile, I only checked WPA2 PSK, Unicast aes, and Group aes. If anyone needs more details, let me know.

Tom

tomswenson

I went through this a year ago. iPhones wouldn't connect to my ap with a virtual ap. I set wpa2 only and aes only and all was well... till Friday. New 2011uas, ap with virtual, one public, one private. My android and laptops(hp's) work fine, iPhones don't. Latest Routeros.

Any ideas?

Tom

tomswenson

So far I'm trying to get the NTP to work to a public server, but no go. I also only installed the NTP server/client when the SNTP client didn't work. I guess I'll just have to replace the box or maybe factory defaults and reconfigure.

Thanks,

Tom

tomswenson

I just installed a new RB2011UiAS-2HnD yesterday, SNTP worked perfectly on 6.18. Sure can't explain it.

Tom

tomswenson

I have a RB2011UAS now upgraded to 6.18. I was at 5.xx, but couldn't never get it to work, so I upgraded. I have tried all I can think of to get this to work. 1. turned off all firewalls 2. used different and/or multiple or the same time servers 3. upgraded firmware 4. specifically open ports 123 al...

tomswenson

I have had this happen over and over on two different devices. One was on a RB2011 and now on a RB750. I took a RB750 and added the dude package, configured it to only ping one address, then sent the box to a customer to monitor their Internet connection. I went to look today and the entire config i...

tomswenson

Thanks leonset for the response.

I do have the problem solved, I replaced the rb-230 with a rb-450 with version 5 software, problem solved. I don't know if it was software or hardware, guess I'll never know. I probably won't upgrade that rb-230 past the version 3 that is on it.

Thanks.

Tom

tomswenson

I have a location with a routerboard 230. Currently running 3.22 software. I'm having speed issues with it. I have other Mikrotik hardware in this town without issues, so it seems to be in this box. So far, I have figured out that maybe the traffic from access points behind it aren't being fragmente...

tomswenson

Update: Upgraded every cpe and ap to 5.5, set every radio to station-bridge, same problem. Last time I swapped out the radio and it fixed it, why it happened to the exact same customer, I'll never know. I'm pretty sure we swapped out their router last time also. Funny thing is I see other customers ...

tomswenson

Just had another storm, problem is back. What is strange is that it is the exact same customer who is getting others ip numbers again. Last time we replaced the radio, very strange. Anyway, I just upgraded that customer to 5.5, turned the ethernet back on and it got someone else ip address again. I'...

tomswenson

I haven't had the luxury of having this experience again. I'm also starting to upgrade to version 5. Hopefully this issue is fixed.

Tom

tomswenson

Darn, now you tell me. I thought I had tried that with station-bridge and it didn't work for me. But now, I do a test on my bench and it is working just fine. This would make transition even easier for me. Thanks very much. On the plus side, I did learn a lot about writing scripts in this process. Tom

tomswenson

I figured out something that will work for me and figured I'd post it for the next guy trying to do the same thing. I decided to use a script to look at how it is connected and then to switch from pseudobridge to station-bridge if is is connecting with NV2. Since I couldn't get values from the tdma ...

tomswenson

I figured out something that will work for me and figured I'd post it for the next guy trying to do the same thing. Since I couldn't get values from the tdma variables, I looked for something else. I found I could trigger on the 802.1x variable. Here is my script: #Get current mode :local tommode [/...

tomswenson

I'm still trying to figure out how to change an AP to nv2. I thought maybe I could make a script and have it determine whether it was connecting to an nv2 ap and then switch it to station-bridge, since station-pseudobridge doesn't work yet in nv2. I haven't been able to retrieve any tdma settings li...

tomswenson

I have a lot of CPE's running station pseudobridge. I'm looking to transition them to 5.0 and NV2. I have tested and it seems to work fine in station mode, but they won't work in station mode now, and station pseudobridge doesn't work in NV2. Can anyone think of a good way to transition this ap othe...

tomswenson

I don't know if this is because of a beta thing or something I'm doing wrong. I have a RB192 with 2 bridges running in it. I'm trying to limit users with PCQ_Upload and PCQ_Download as I have seen in tutorials. It doesn't seem to be working. The PCQ_Download has packets hitting it, but none in the u...

tomswenson

I had a hotspot with multiple ethernet ports bridged together for a while, had constant problems, especially with Vista users. Never could figure out what the issue was, but I finally did as you and made each port separate ip/pool/hotspot server. Fixed most of the issues I was having. I don't know i...

tomswenson

That is what I had to do two or three times now.

Tom

tomswenson

I'm the one who started the first thread you started, http://forum.mikrotik.com/viewtopic.php?f=2&t=44095 . After this issue and testing 4.13 with nv2 that doesn't work with pseudobridge, I'm looking again about how I can convert to a routed cpe. I have customers with static, public IP's in thei...

tomswenson

We recently had troubles with a hotspot in a motel. We have two motels and they both have had the same issues ( customers don't get the login page). Since I have never figured out why that is, we disabled the hotspot in one of the motels. Now the motel is telling me that corporate is making them put...

tomswenson

I have never found a solution for this other than to replace the client. Very frustrating to figure out. This has happened to me twice now. I only found the culprit by de-authorizing clients and watching the last ip field.

Tom

tomswenson

This is a very strange problem to figure out. I happened to two different AP's yesterday and one about a month ago. Both were after lightning storms. I can understand the lightning ruining radios, but I sure wish they didn't take down the entire network. When this happens, I can get into every ones ...

tomswenson

It was not my intention to hijack this thread, but to offer a "similar" type of issue with DHCP and ip conflicts and dhcp denials.

My apologies.

Tom

tomswenson

I ran across this earlier when searching for clues. It is not on the client or the AP. I'll go into every customer on this AP and check them out. Thanks for the reminder.

Tom

tomswenson

I'm having a similar problem. I have a RB411A AP doing dhcp to customers on that access point. Lately, we found that customers (mostly routers) were getting ip's, but they were declining them as they thought they were in use. Oddly, I found one customer who's Last IP on the Registration table kept c...

tomswenson

I have been attempting to set up a bandwidth limiting queue for users on a access point. 1. I want to be able to give a few users higher bandwidth than the others based on mac address (if possible). 2. I then want the rest of the users to be bandwidth managed to 512k. This would be either by the sub...

tomswenson

When you rebooted the radio, did you go into the radio via winbox or telnet and reboot, or power off and turn on again?

Tom

tomswenson

Current temp at 10:23PM CDT on 1/9/2010 is -12. I have about 150 or so units like these out there, most are fine, but it definitely got worse when the weather got colder. Sorry about using wind chill.

Tom

tomswenson

No, it is not the sleep thing, they just won't connect, even though they can scan an access point at a good signal. It is happening in the summer, but it has been happening a lot more since it has been brutally cold here. I just got word that one of our access points (411a/R52) that is running reall...

tomswenson

ok, I understand what you are saying about the transmit not working. This would make sense this time of year, but it also happens in the summer months also. But, you may be on to something about the inability to transmit maybe.

Tom

tomswenson

But would the radio be able to scan and see access points with good rssi's if the radio were not working correctly?

Tom

tomswenson

In my case, removing the radio, replacing the radio, then rebooting would have taken long enough that it would have fixed the problem. If it were not a bad radio but the issue I'm dealing with.

Tom

tomswenson

I'm assuming that your test results are similar for all the rb cards. Loss of throughput isn't our issues. I have had a problem with our 411/XR3 radios since we started using them. We have customers who have been on just fine and then all of a sudden they don't connect. You can do a scan in the radi...

tomswenson

I'm seeing issues here also. We have a number of customers who went down. Unplugging the POE for 2 minutes or so (1 isn't enough) and they came back up. Still have more people with problems, so we will see what has to be done to fix them. We also have a number of customers whose P throughput went do...

tomswenson

Maybe that is part of my problem. With the dude running on there compiling info all the time, maybe the CF isn't a good way to go.

Tom

tomswenson

Got a new CF card today, installed very quickly, formatting was done very fast. Now I have to restore my data, unfortunately, it wasn't a very recent backup, but I'll be alright. I'm now figuring out the key issue.

Thanks for your help. I have but one CF installation, this one.

Tom

tomswenson

Wow, 5 this year. Doesn't really inspire confidence in cf cards. I put this in to be more reliable than a hard disk, but now I' not so sure.

Tom

tomswenson

I had a x86 system with a compact flash card in an IDE adapter running fine for years. Today it croaked and would keep rebooting itself after the login screen came up. I have tried to fix it by putting the same level of OS that was on it, it formatted the drive for what seemed like forever, then sai...

tomswenson

Yes, I have over 100 of them installed. They do a frequency remap. You set up the Mikrotik for 5 gig and it translates it to 3650 frequencies. You only have 3 frequencies to use in the the US 3.7 variety of the XR3. Here is the translation chart: Channel A - 5765 Mhz - 3658 - 5/10 Mhz Channel B - 57...

tomswenson

I recently went through this. I had a hot spot with an rb 450 ( 5 port ). I had ether1 being the Internet side and ports 2-5 were bridged together. DHCP was configured on the bridge. What I did to make it start working was to separate the ports and configure 4 separate dhcp servers, 4 pools, etc. I ...

tomswenson

Yes, you have the correct.

Tom

tomswenson

I'm not sure what you mean, these are the only freq's available to use with the 3.7.

Tom

tomswenson

Yes, I'm using 3.65 in the US.

Tom

tomswenson

That doesn't sound too bad, what mfg is that? Those prices I could live with. I just say today that Tranzeo has just announced their 3.65 US version of their pico station or something like that. I think the pricing should be similiar. It would be kinda hard to replace what I have up now, but who kno...

tomswenson

I looked at all that was out there when I started the xr3 based system. The pricing was WAY higher per AP. Somewhere around 6 to 10k per sector. I have 9 sectors up in my town already and two in another town. That would be up to 110k for the access points alone. Those kinds of numbers were out of th...

tomswenson

I enabled it on the ap also.

Tom

tomswenson

I decided to upgrade one of my ap's and start using the rts/cts in 3.18 and the wireless test. I set it at the access point (not sure I really had to do this) and then started to upgrade and set it at the clients. It worked fine for 5 out of 6 client radios, but the 6th one died after putting in the...

tomswenson

I had 3 sectors at the same location go down on Wednesday. I could get into every one of them and do a scan and they would see other locations in town, but not each other. We finally had to go out there and unplug the POE for each and them all came up and cpes reassociated again. For some reason, th...

tomswenson

So why WOULDN'T I want to upgrade all my clients and turn on the rts? Sounds like a good thing to do.

Tom

tomswenson

I put a realm in my AP to do mac address authentication for my cpes. I have it working, but not quite correctly as it doesn't pass the realm to my radius server, it gets passed as: 14988-Dummy-Atrribute-71 = "@realm.net" I put in the @ sign for testing. Nothing shows up in my log as a real...

tomswenson

My first work with wireless was with Breezecom, it had rts/cts, so for some reason, I thought that is what 802.11 consisted of. Can you think of any reason why I should upgrade everything to rts/cts right now. I have 3 locations in town with 3 sectors on each location. Wouldn't this help with hidden...

tomswenson

I thought that 802.11 used rts/cts and the nstreme would allow polling, but I see that it has been added in the wirelesstest package. Does that mean that it hasn't been used in the past. Wouldn't it be a great thing to add to every access point then if it wasn't running before? I have searched and a...

tomswenson

Followup: I went to a site today that was getting installed. It looked ok, till we were finalizing the settings, had an issue because mac telnet didn't work with it. Anyway, it no longer would connect. I played and played with it. It would scan the AP, but the RSSI seemed to be about 10 db lower tha...

tomswenson

Like I mentioned, this was happening even before it got cold here. It just gets more frustrating each time it happens. Today, I took the radio that my installer couldn't get to connect two days ago and set it up in my office, connected up just fine to my test AP. Signal at -39. More frustrations. On...

tomswenson

The XR3 is rated at -45 C to +85 C, spec wise shouldn't be a problem.

Tom

tomswenson

I sure hope not. It is -18 F right now, so far the ones we have installed are still working. We have had this issue for a while however, even back when it was warmer, so I'm thinking this is not the case. I do understand the cold issue, having been working with Waverider for many years, their access...

tomswenson

I have been working with the dude the last couple of days and trying to get into some more of its options beyond just pinging devices. I'm monitoring about 90 devices so far. I was trying to create a map my network, but when I go to local map, I just see green dots, I can't seem to put labels on the...

tomswenson

Yes, I have a nationwide license and 11 locations registered.

Tom

tomswenson

We keep seeing the same issues over and over. Anyone see this before: Using 411 boards with Xr3 cards. We go to do an install, rssi's look ok, so we do the install, run the cat5, etc, etc. We then go back to see how it looks and it won't connect anymore. You can do a scan and it will see the access ...

tomswenson

I decided I would give calling devices routeros in the settings again. OMG, the power in doing this is great!!! To look at all my access point registrations in one place is awesome and very useful. Not to mention seeing all the os versions and more. I knew I liked the dude, but it is way better now....

tomswenson

A number of them are RouterOS, but I don't tell it so in the dude after having lots of problems the last time I did that.

Anyway, that would be great, thank you very much.

Tom

tomswenson

Since recent versions, when I look at the device view, it is impossible to sort by ip, by name, etc since everything is always sorted by parent. I can sort by name, ip, and so forth inside each parent, but often I just want to look at the list. It is like looking at a threaded view of the devices al...

tomswenson

There is a difference between the 3.5 XR3 cards and the 3.7 version for part 90. The 3.5 cards are a 2ghz offset and the 3.7 version is a different format:

5765 - 3658
5770 - 3663
5775 - 3668

Tom

tomswenson

Thanks for the reply Normis, I'll give it another try with the newest firmware and turn on all 3 sectors. When I tried it before, it caused problems. Maybe the newer software will work better, trouble is that it upsets my customers every time I try it.

Tom

tomswenson

Thought I'd touch on this again, is there anyone out there doing nstreme on a sectorized location?

Tom

tomswenson

As Alex mentioned, I set up a router to do this once: /ip firewall nat add action=src-nat chain=srcnat comment="CCU1 Nat" disabled=no src-address=172.16.4.0/22 \ to-addresses=xxx.xxx.xxx.xx1 add action=src-nat chain=srcnat comment="CCU2 Nat" disabled=no src-address=172.16.8.0/22 ...

tomswenson

I didn't catch the part about only working in station mode, that must be why it isn't working for me. I cant find a way to use station mode instead of station-pseudobridge and give a customer a public address without natting.

Tom

tomswenson

I downloaded it again and also no problem or password this time, thanks.

Tom

tomswenson

Thanks for looking it up, but they must have changed the password.

Tom

tomswenson

The Rat software seems to need a password for the zip. I couldn't open it.

Tom

tomswenson

I posted this in another thread, but thought I'd repeat myself in a new one, it was kinda off topic of the other thread. I have a location with 3 3650 sectors. Yesterday, I took 3.17 and wireless test and put it on one of the sectors with about 8 cpes. It all seemed to be fine. No one was reconnecti...

tomswenson

I have a location with 3 3650 sectors. I have been watching this thread and testing the nstreme as I would like to use it if possible. Today, I took the 3.17 and wireless test and put it on one of the sectors with about 8 cpes. It all seemed to be fine. No one was reconnecting over and over like bef...

tomswenson

I guess if my distributor won't do a warranty, and I can't warranty them directly, then there is no warranty. I guess I need a different distributor or they are just throwaways.

Anyway, thanks for clarifying that.

Tom

tomswenson

I have one sitting in front of me with this problem. It quit working when I installed it with POE, so I took it back to the office and plugged it in directly and c825 smoked. I was told by my reseller that they don't warranty Mikrotik products. It is our responsibility to send them back to Latvia. H...

tomswenson

Thanks, Dallas. It looks like you are doing this from the AP, I'll give it a try.

Tom

tomswenson

Dallas, what do you mean by a 20 bandwidth test? 20 seconds? I would like to give this a try on the clients I that are bouncing up and down all the time.

Tom

tomswenson

Wolverine, thanks for the good message, but subnetting isn't where I'm having the trouble. I currently have 8 of my own class c's. I have subnetted them all to all my access points, but my problem is more with deploying my first mikrotik network. I have used waverider extensively in the past as well...

tomswenson

I have been been testing and searching and trying to figure out how I can have a routed AP, a non-bridged CPE so I can use PPPoe for ip addresses and such and yet still give my customers public, non-natted static ip's. All CPE's and AP's are Mikrotik and running 3.0 or higher. Any ideas would be gre...

tomswenson

I installed this package and turned on nstreme (I'm pretty new to mikrotik wireless, but not mikrotiks) for the first time and had nothing but trouble with disconnections, so I had to go off of nstreme. I didn't get any support files as I was in a panic to fix things. I used it on two ap's with abou...

tomswenson

I'm seeing the same thing here with the XR3's. I have a number of clients (including myself at home) that are experiencing constant disconnections. Others with very good signals are staying connected all the time. Running a bandwidth test to my radio improved the rssi by at least 8db. I don't know i...

tomswenson

I have considered this also Tom. I have some locations that I would have easy access to the box, but others would be up a tower. If a routerboard went bad, I would rather it only take down one sector, especially if it required a climb to get at it. I wasn't aware of the 411AH model. That might be a ...

tomswenson

If I have 3 different AP's setup as routers, then each sector would have it's own arp table. I'm not seeing your point of an advantage of putting all 3 arp tables on one router. I'm not sure about having the same ESSID's. Haven't really thought that one through. Hasn't been an issue on most of what ...

tomswenson

I'm new to using Mikrotiks for wireless. Was wondering which is better. 3 radio cards on 1 433AH board, or 1 radio card per 411A board? Or maybe a different board? I suppose there are pros and cons to each. More boxes, more POE, etc. Just wondering what peoples experience was with putting up 3 secto...

tomswenson

My XR3 works just fine, so the client isn't dead as yours was. I got this after posting the question in another forum: " I don't think it has anything to do with the up/down convert cards.. It happens on Mikrotik when you have a really strong signal and are using 5 or 10mhz channels. When using...

tomswenson

I figured out the problem. It was my fault all along. I looked at a routerboard in a box that I had. small board with 5 ethernets. I went to the routerboard website and found a picture of it (450 model) and then had downloaded the appropriate version from Mikrotik. Trouble was that the model I actua...

tomswenson

I finally got it to work. Seems that it won't work with version 3.10 of RouterOS. I went back to 3.9 and it installed just fine.

Tom

tomswenson

Sorry, when I said I was using 3.1, I meant 3.10. It was the latest version from the download page.

Tom

tomswenson

Ok, I'm thoroughly frustrated by this. I tried to do a restore from a different routerboards backup (I know this shouldn't be done this way now). Anyway, it won't boot past the "Starting Services". So, I'm trying to reinstall the OS from NetInstall. I can run the program, set the boot addr...

tomswenson

I'm testing out a xr3 and am new to mikrotik/ubiquiti radio combinations although not new to mikrotik. I have the radio set at a certain frequency, but when I do a scan from the client, it sees 3 access points with different frequencies, but they are really the same one. Maybe I'm missing something,...

tomswenson

I have to setup a configuration and am not sure how to do it. Here is the scenario: Existing Config, there is an existing lan with with wireless links between them: Office1 <--> Office2 <--> Office 3 <--> Office4 | | | | 10.10.4.1 10.10.4.2 10.10.4.3 10.10.4.4 I am going to feed this existing networ...

tomswenson

I sure can't explain it. I installed a new Linksys nic card in a mikrotik running on a pc, and this is the mac address that comes up. It appears to be working fine, but is very strange. The other NIC in this box looks just fine.

Tom

tomswenson

I found that if I double click on a route with a route mark in it, it will crash the winbox.

Tom

tomswenson

I have a Mikrotik hotspot controller that the ether2 port goes directly into an InscapeData wireless radio. I seemed to be having problems with the interface, so I switched it to 10mb FD. So far so good, but I sure wish I could see if there were any errors. There is not that capability in the inscap...

tomswenson

I have been trying to see where I can look at an ethernet port and see if there are any errors. I put in a Mikrotik and had to take it out as I found there were errors on the interface going to a Cisco Router. So, I have been getting leary of all my other Mikrotiks in my network and how I can see if...

tomswenson

I have a link to a building that I couldn't get to with wireless. It is two dry copper pair lines bonded together to make one larger line. I used net2net dsl modems on each side. Due to the crappy phone lines around here, I only get about 1.5mb out of them and it costs me about $112 per month for th...

tomswenson

I have 6 t1's in my current location, but so far, it is the cheapest I have found. It depends a lot on where you live. Here, there is no fiber and a ds3 is too expensive. I'm thinking the rule of thumb is that after 8 t1's, it is cheaper to get a ds3. I'm assuming you are looking for more backbone b...

tomswenson

I think that will work. Thank you very, very much.

Tom

tomswenson

Are you asking about backhauls or backbone.

Tom

tomswenson

I'm moving a lot of routing from a Cisco Router to a Mikrotik. I've been using masquerading for years but the dynamic natting of it always used the main outside ip address. I do this in my Cisco like this: ip nat pool ccu3 x.x.x.243 x.x.x.243 prefix-length 24 ip nat pool ccu4 x.x.x.244 x.x.x.244 pre...

tomswenson

I have never tried 1.x Dude. I'm leary of giving it a try since this was happening on a production server.

Tom

tomswenson

I just moved to the Dude from IPmonitor and all of a sudden, my webserver running cold fusion, mysql, apache, and dns started crashing. First the dns would go, then things started going downhill and I had to reboot to get them back up. After this happening for a couple of weeks, I turned of the dns ...

Search found 115 matches