MikroTik

Muqatil

You might want to add some consistency to the numbers then.. 1GHz is smaller than 800MHz in that matrix

Muqatil

Furthermore, you can associate a RADIUS to manage the mac-address/password association.
There are few presentations that covered this topic.
MikroTik was there for ages, too bad they didn't use it as a good advertisement.

Muqatil

I'll challenge you with another approach. If the networks that you are trying to isolate are more than the networks that you want to allow, you might want to use ACL to whitelist the networks you want to allow forwarding, and drop everything else. I would build a firewall like this (in the forward c...

Muqatil

Sounds to me a BGP peering message.
Do you have a BGP session active on that router?

Muqatil

Let's see if you share my struggle...

Muqatil

Have you tried to set the ospf interface to Unicast instead of Multicast? Try to set the ospf interface to PTMP. I don't think multicast packets are sent through SSTP tunnel

Muqatil

If you check both Mikrotik and Ubiquiti forums, you will find a lot of threads about this topic.
For me, the issue was with the AF24 that hadn't the clean line of sight and the wireless frame errors were translated to FCS errors on the ethernet too. Fixing the wireless link, solved the issue.

Muqatil

Screen Shot 2018-08-07 at 10.23.50.png

Winbox upgrades with no issues though.

On a side note, can we have an icon for the TR069 package on Winbox? It's just cosmetic.

Screen Shot 2018-08-07 at 10.25.53.png

Muqatil

Yes, I noticed that, but both prefixes don't answer my question. Can I see the General tab of these?

Muqatil

Reeeeeally stupid question, but worth asking: is the nexthop reachable on both routes? (target scope within scope?)

Muqatil

https://forum.mikrotik.com/search.php?keywords=mikrotik+hacked A 0.1 seconds search will give you an insight of the issue. Without opening yet another topic that is going to be moderated like the others. Issue was fixed in March already. https://blog.mikrotik.com 1. Upgrade to 6.42.3 2. Change passw...

Muqatil

Actually, instead of netwatch, I used the VRRP functionality to have an "heartbeat" like functionality. Basically the VRRP interface checks the status of the other side and triggers a script to enable disable the hotspot interface (in my case they are in a bridge interface) /interface brid...

Muqatil

That's a tough topic. You cannot VRRP the gateway because it will not work nicely with the hotspot daemon, You can't run them in parallel with two different IPs otherwise the customers need to reconnect in case of failure. My solution was: Active/Passive design, Netwatch on the slave to bring up/dow...

Muqatil

/ip dhcp-server network add address=192.168.8.0/24 comment=defconf gateway=192.168.9.1 netmask=24 The gateway is outside the configured network... It's not gonna work. Perhaps it's a typo? /ip address add address=192.168.8.1/24 comment=defconf interface=ether2 network=\ 192.168.9.0 The network is a...

Muqatil

Export again your config with the latest changes and the suggested cleanup.
Let's have a look.

Muqatil

did you disable rapid packet steering in ROS too? You find it in system resource RPS
Also change the interface queue to multi-queue-ethernet-default to use fully the inbuilt queues of the hypervisor.
It should help a little.

Muqatil

Thanks for checking and reporting to us @doneware. Much appreciated.

Muqatil

Most likely is related to the SSH response of the Mikrotik..
Did you investigate the Ansible module for Mikrotik already?

https://github.com/CFSworks/ansible-routeros
https://github.com/zahodi/ansible-mikrotik

Muqatil

Be careful with asymmetric routing.
MPLS does not support ECMP whilst OSPF does. Some protocols (such as SNMP) are not responding correctly on asymmetric routing.
Try to set the OSPF weights to not have any asymmetric routing or ECMP (unless forced by Traffic engineering)

Muqatil

As pe1chl noted, you can set your VPN profile to add the user's assigned IP to a dynamic address-list. You can use that address-list in your firewall filters then.

Muqatil

I don't want to crush your dreams, but, unless you are living in the middle of the desert, you will struggle with your project of multiple PtP links from A to B. Many people here might help you finding the best solution, but if you are willing to invest a lot of time and do not expect the solution w...

Muqatil

Hi, Today all our customers who has puplic ip with Mikrotik device stop working. When we check we see that ether interfaces not working on LHG, and some SXT reseted. İs that related with this vulnerabilities ? Thanks. Screen Shot 2018-03-19 at 16.50.48.png Do you have SMB enabled? is your WAN inter...

Muqatil

Maybe the cause is the :local scope of the variable. Try to wrap it up with {} or use :global for CLI testing

Muqatil

Quite simple, as @rextended said, the browser still needs to be tricked that internet works. The first thing that the browser do is a DNS request to resolve the domain (IE www.mikrotik.com) and then initialises the connection to the corresponding IP address. That connection can be intercepted by Hot...

Muqatil

Here are the best configurations for mikrotik skype optimization QoS. https://www.mansooryousaf.com/blogs/mikrotik-router-voip-skype-qos-prioritization-best-configurations 1. You did not put any reference to this thread and you just stole someone else work for your own site. 2. The L7 rules you use...

Muqatil

Did you copy paste the script into the terminal or did you use Winbox? There are too many escape characters The DOWN script should be: {\ /ip dns static enable [/ip dns static find where comment~"MAINTENANCE"];\ /ip hotspot profile set [/ip hotspot profile find where html-directory~"N...

Muqatil

Create a directory called maintenancePage and put there your html with the maintenance page files. No external references, a simple html page with few images would work. Add fake DNS resolution (depending on ROS version, one of them will fail) /ip dns static add address=1.2.3.4 comment=MAINTENANCE d...

Muqatil

It seems to me too that you are trying to reinvent the wheel. In the past, Safe mode was kind of buggy, I agree with you. But with the latest releases, I've not encountered any more problems. It might be worth checking again. But all your checks can be scripted and if it fails, it can run the latest...

Muqatil

If the VPN server is the Mikrotik itself, It's quite easier. If the end devices are under RFC1819 IP addresses (private IPs) and you NAT them to reach the internet content, you just need to tune up the masquerade rule to NAT only the source IPs released by the VPN service you use. Something along th...

Muqatil

Without a network diagram, we can just guess. I guess you have a VPN server with a fixed Public IP where your users need to connect remotely. The easiest way is to use firewall. (not saying it's the best way). Let's assume your remote VPN server is a OpenVPN server on a public IP of 100.100.1.1 addr...

Muqatil

Can you post your full configuration? (Hiding sensitive information)
Is 62.30.5.17 the provider device or the whole 62.30.5.16/28 is a routed network to your device?

Muqatil

I think you got everything working correctly, and missing only one small thing: On the 62.30.5.16/28 network segment, the Gateway 62.30.5.17 wants to send a packet to your IIS (62.30.5.20) because it is directly connected and sends an ARP request to the L2 domain. No router got that IP assigned to, ...

Muqatil

Hi Dexter, Can you explain a little bit more what is the problem or what you want to achieve?
Are you saying that your router is dropping packets with ToS different than 0?
Or you want your router to drop packets with ToS different than 0?
It is not clear to me.

Muqatil

Like someone already suggested, a CHR controller would be awesome. CHRsMAN like CAPsMAN. It can be used for: Monitor Health of every CHR deployed Centralised Files management (Thinking about hotspot files) Centralised firewall custom chains management (jump-to=centrallymanagedfirewallrules) Ad-hoc t...

Muqatil

The above configuration works.
I did a packet capture after the Mikrotik and I could see the ESP packets with the correct SPI forwarded.

The remote side forgot to whitelist the public IP address. Everything works fine now.
So disappointing.

Muqatil

Hello, I have a curious problem with IPSEC. The setup is quite simple, nothing fancy. Site A Huawei USG firewall ( Cannot access it nor retrieve the config) Remote IP 192.168.135.202/32 Remote network 10.206.251.192/29 Site B Mikrotik CHR v6.40 Public IP 192.168.65.230 Local network 10.160.0.0/11 su...

Muqatil

Looks like the oid reported into the /system license print oid returns invalid values (Most likely valid for x86 but not for CHR) [renato@MikroTik] /system license> print oid software-id: .1.3.6.1.4.1.14988.1.1.4.1.0 level: .1.3.6.1.4.1.14988.1.1.4.3.0 [renato@MikroTik] /system license> print system...

Muqatil

CHR main advantages are the drivers.
X86 Mikrotik has a lot of problems with Hardware compatibilities which CHR resolves using virtual interfaces.
X64 Mikrotik would have the same problems.

Muqatil

Why don't you try the approach that Wardner Maia shown us at EU MUM?
http://mum.mikrotik.com/presentations/E ... 752556.pdf

Muqatil

Run dude.exe as administrator to upgrade it

Muqatil

Can you provide a Winbox 3.1 link meanwhile?
Or withdraw 3.2 from updates?
Winbox must work perfectly with the lastest bugfix version.

Muqatil

If both sides are mikrotik, i would suggest you to use BCP Tunnel Bridging..
Here's an example
http://wiki.mikrotik.com/wiki/Manual:BC ... _bridging)

Muqatil

Those are the droids you are looking for: http://wiki.mikrotik.com/wiki/Manual:Queues_-_PCQ

Muqatil

I had problems adding CHR_6.32 to GNS3. It wont start. Maybe it's something related to my HW, but CHR_6.31 works flawlessly out of the box

Muqatil

I'm experiencing the same issue. Going to open a ticket.

Muqatil

As Diego said, i feel like the issue might be related to the radio part... I have some AF24 deployed and only one is having a lot of issues with FCS errors. This link is the only link which doesn't have a free fresnel path along the way.. Nothing to worry about but the signal received is sightly low...

Muqatil

I've never had an issue like that. When Mikrotik didn't resolve framed attributes, it gave the assigned profile attributes or gave nothing. It might be useful enabling system logging radius debug and see what Mikrotik receives. /system logging add topics=radius action=memory Something like this: scr...

Muqatil

framed-ip-pool tells to the mikrotik which LOCAL ip pool to use, if not present, the profile ip pool is used instead.
you might be lookin for framed-ip-address field. Framed-ip-address should be assigned from a sql query in Radius itself.

Muqatil

NetXMS is linux based, there's not windows installation available. But still a good choice! On PRTG you can have one sensor per device or multiple sensors for each device (one sensor for one interface throughput, one for latency to the device, etc...) Edit: scrolling down there is windows installer....

Muqatil

It's free for 100 Sensors (not devices) so you can test it. Pricelist is here https://www.paessler.com/prtg/price_list Yes i use it and it's awesome. I used cacti and zabbix too. Both are good but not easy as PRTG. Learning curve is less harsh on PRTG than other network monitor tools. They have nice...

Muqatil

Paessler PRTG works on windows and it's pretty user friendly.
Not free though.

Muqatil

As stated on this slideshow from Megis, CCR is not optimized for Queue Tree.
http://mum.mikrotik.com/presentations/RU14/megis.pdf
Simple queues is prefered on 6.x versions. Might change on 7.x

Muqatil

In your PPP profile used by your PPPoE client, enable Change TCP MSS. It should solve reachability of some sites..

Muqatil

I would suggest to use RB 750UP instead of RB260GSP. So you can have a Router on each site for debug and troubleshoot. Don't forget to enable WDS on Ubiquiti PTP Links.
And if you have only UBNT clients, enable Airmax for TDMA.

Muqatil

It should not.

Muqatil

OSPF will announce default route "if-installed" only if it has a flag "STATIC" (a static route, or a created by DHCP, PPP, etc) OSPF will not announce BGP default routes. All you can do, is some netwatch scripting disabling or enabling default-originate option in OSPF istance. Or...

Muqatil

Sure! Your default route should be set as "distribute-default=if-installed-as-type1" and the static gateways should have check-gateway=ping to disable it if it's not reachable. Of course if the gateway is a ADSL router, you should use a recursive gateway to ensure the check gateway to work...

Muqatil

* how many peers; /routing bgp peer print count-only 24 * how many routes in routing table; /ip route print count-only 1575550 * is there also OSPF,MPLS, VPLS, RIP etc running on the router; OSPF with around 2k routes * what are the hardware specs; /system resource> pr uptime: 2w4d14h38m46s version:...

Muqatil

You can use /tool traceroute on your link. Even it's one hop, it will ping the remote device and calculates the standard deviation of the latency, which is the jitter you are looking for.

Muqatil

I misread the requirements. You are right, he cant use a RB2011 for that purpose. I am sorry

Muqatil

Why shouldn't RB2011 be able to fulfil his needs? And as AcidDemon specified, a assembled RouterBoard is not a solution for him.

Muqatil

Hi, a RB2011 suits your needs! or a RB951 but it doesn't have GbitEth.
About WLANs, just create a VirtualAP with WPA2 for AP mode, and HS functionality without auth on main WLAN. You can create several WLANs for each phisical interface.

Muqatil

You know what? I've no problems at all on ROS updates.. When i deploy a new router, i just run Packages update and everything works... Sometimes i upgrade ROS in productional enviorment and i had some little issues back in 6.10 IIRC with some CCRs. Downgraded and waited for a new version to come out...

Muqatil

Thanks faisali, my problem was that IBGP wasn't announcing any route, and R2 doesn't have OSPF daemons running. All of sudden, routes on IBGP started incoming, i don't really know why though... I just added one of the connected routes to BGP networks announce. After that, even the other connected ro...

Muqatil

@faisali
This might be a good hint to make it work, but looks more like a workaround than a correct solution. It is true that ospf routes will be prefered, but there are no BGP routes announced, that's why OSPF is prefered.

Muqatil

When one customer have billing issues, just add his IP (with access-list) to a walled garden where he gets redirect to a warning page to pay the service. This avoids misunderstandings and the customer doesn't address his problem as a broken service.

Muqatil

faizan, get out of cisco schemes, there's no need of GRE tunnels or routing. OP needs a L2 network with two links... rSTP will do the trick. Priorize the main link over the backup link and it will disable link2 unless link1 is down. STP and Rapid STP are standard protocols supported from every smart...

Muqatil

In this configuration IBGP.jpg The internal network is managed by OSPF and every address is correctly redistribuited. There are 3 EBGP routers connected to 3 uplinks (2 of them are IX) which receive Full routing tables from EBGP peerings (over 1.7k routes in one of them). Those routers are connected...

Muqatil

If you have more than one network card disable the others, especially if you use VmWare or other which create virtual cards.

You solved my issue!
Disabling all other interfaces, discover works correctly
Thanks

Muqatil

Welcome to the MikroTik World

For testing / lab purpose, you can use GNS3 to create a virtual network infrastructure.
Here's a nice slideshow of GNS3 and Mikrotik
http://mum.mikrotik.com/presentations/ID13/rofiq.pdf

Muqatil

And about load, you can simly switch to a x86 solution...
You can get all the resources you need.

Muqatil

PCQ = Per connection Queuing
PCC = Per connection Classifier
Dont mix them

Muqatil

P.S.: Attualmente è vietato fare punto-punto con i 5GHz, si possono fare solo punto-multipunto, quindi metti un diffusore a cui collegare poi tutti i clienti. Ma ricordati di chiedere l'autorizzazione al Ministero. "Considerato quanto sopra, è opportuno che sia chiarito e verificato il rispett...

Muqatil

It looks like wireless "tx-power-mode=card-rates" is not supported anymore... however, the command still exists. Does anyone know why? P.S. Not sure if it's from v6.12 or before, since I upgraded from v6.0... Same here.. isn't Card Rates better than All rates Fixed mode? i don't think it ...

Muqatil

With firmware 2.0 they did a good job, we use AF24 in short links (2km) and they go at 775mbit speed FDD. Inside EIRP limits too. chart.png Today was an heavy rainy day. You can see at 13.30 the rate drop. n21roadie, you should give it a try. I was sceptic aswell.. And yeah, Mikrotik should focus mo...

Muqatil

It's the natural behaviour of MPLS to choose one path and a backup path (Labels) for fast route selection.
You might be interested on Tunnel Engineering to split traffic on both links..

Muqatil

Smartdraw does the job for me

Muqatil

P.S. No problems so far with 6.5

Muqatil

ROS 6.x fixed my issue

Muqatil

+1 on all of em.
It feels like the wireless part of MikroTik fell apart lately...

Muqatil

Using it in my production network without problems.
Of course, Only Mikrotik supports this. That's the only limitation

Is this usable in production networks?
Where's the catch?

BR,
M

Muqatil

Usually it's 115200

Muqatil

I'm brave:
V6.0 on CCR1036 running on core router on top of BGP/OSPF, Queue Tree, Firewall. Everything's working since upgrade.

Muqatil

It does support from 100mhz to 30ghz, you have to configure it to match you needs and your specifics.
A perfect "out of the box" software which is free doesn't exist. A lot of commercial version (which are a copy of Radiomobile) are out and they have the templates you are looking for.

Muqatil

I successfully male a coverage map of My network using and tweaking radiomobile. The accuracy is very close to reality. It takes a while before RAdiomobile gets configured, but There are a lot of guides around. And it's free

Muqatil

You might have some VSWR issues.
There's a nice presentation of my friend Ahmad about wireless troubleshooting from last Europe MUM
http://mum.mikrotik.com/presentations/PL12/ahmad.pdf
Give it a look!

Muqatil

If you change the frequency when the signal is low, and get a good result, then i'm correct!
If the signal does not improve, then i'm wrong and there's a pigeon that sits there at 16PM every day.

Muqatil

Hi Martin, Looks like the link is passing through an high Humidity zone (Water or some rice farm) which create some link deviation after the hottest hours of the day. Maybe the link has some Fresnel zones obstructed too. There's not much you can do beside moving up some meters one of the sides or us...

Muqatil

Looks like the Hotel is Full

did they reserve some rooms for MUM Attendees or not?

Muqatil

unused colours (so far as I know)?

This has been used in Wroklaw 2 Years ago

Muqatil

I think i did not explain correctly how does the nACK matcher works.. To let the L7 pattern work correctly, you have to arrange it with the "Range" of your Pubblic IP addresses... You need only the first bits of the ip address (IE 78.x.x.x). If you have multiple IP ranges, you can add them...

Muqatil

Like other 700ppl wearing Mikrotik shirt?

Nice hint!

Muqatil

I presume that he has a configuration script that disables the neighbor protocol on wlan of his CPE units.
On the new Firmwares (which are loaded on RB711) the disabling behavior has changed.
Just my thoughts...

Muqatil

Okay, I corrected a couple of things here. First of all, I wasn't specifying the address list I wanted it to pull from. Second, I did have it in the output chain. I'm running a proxy on this device. My logic was that since it was a proxy redirect, it would be seen as coming from the router, but you...

Muqatil

Why did you set chain=output on your packet marker? That chain checks only the packets generated by the router itself. if i did not misunderstood your conf, change it to forward chain

Muqatil

Card Rates mode will lower the power accordingly based on data rates.
@54Mbit most likely it will be 21dbm if the power is set to 26dbm

Muqatil

yes it does. And it works for me

Muqatil

/ip firewall layer7-protocol
add name="Extension \" .mp4 \"" regexp="\\.(mp4)"
add name="Extension \" .flv \"" regexp="\\.(flv)"

Muqatil

It's RadioMobile with Link export on Google Earth

Muqatil

You should set on your BIOS settings the Halt behaviour on "All, but keyboard"
Of course if your BIOS supports it

Muqatil

Then i apologize for my misleading.
I didn't run it in para-virtualization enviorment, but only as virtual machines, which caused this low througput.
I'm aware that everything works better in para-virtualization.

Muqatil

i would suggest to discard the vmware solution: RouterOS doesn't allow to install any 3rd party driver on his system, and vmware requires his network tools to be installed to emulate network interfaces properly. Without those drivers the virtual machine will work, but his throughput computing is lim...

Muqatil

While your fight is pretty funny, the argument is interesting..
I would like to know if really an extension channel "above control" is +30 and -10 from the frequency used or not..

Muqatil

You can run all the voltages listed on the datasheet Power options: ● J9 power jack: 10..28V DC (cut-off voltage - 30V) ● Power over Ethernet (PoE) on the J601 LAN1 Ethernet port: 14..28V DC (18..28 V suggested; cut-off voltage - 30V) non-standard PoE powering support Be carefull on the Watts part, ...

Muqatil

Yes, you can freely update your purchased routerboard with the lastest version of RouterOS without any extra fee. Be carefull upgrading from 3.x because you need to consider that 3.x had 7-digits license format and 4.x needs 8-digits license format. Once you upgrade to 4.x or 5.x, at the next login ...

Muqatil

station-pseudobridge doesn't work with NV2
switch to station-bridge (available in ROS 5.x)

Muqatil

Just to add some points to NV2 It's been almost 6 months that we migrated all our network to NV2. The migration was smooth and nice, we had no problems on clients. We had to replace some 133 (because we were using 4.16 at that time) but we had huge improvements Nothing to complain. I was following t...

Muqatil

Minsk would be nice to visit.
Too bad it has no ryanair flights

Muqatil

The pic on the PDF is a RB711-2Hn

Muqatil

Lol i didn't spot the error with a fast check, i was thinking about a faulty POE injector

Muqatil

Can you post TCP both directions throughput?
And Latency at 5mbit Full duplex traffic?
Thanks

Muqatil

Did you try to log off skype and relog? it should recognize all the IPs of your contacts online.. (at least it's how it works with me)

Muqatil

Actually it picks the IP addresses of the skype users. After that the connections are crypted and you cannot recognize them anymore. But you have still those IP addresses: Just mark any connection of around 50kbps between your IPs and Skype IPs. You might have some false positive, but it's a good de...

Muqatil

Post your mail so we can meet with the price

Muqatil

I'm not saying NV2 is better than AirMax. I'm saying that you have to use either one of them to avoid issues. To use NV2 you need both AP and client to be Mikrotik To use Airmax you need both AP and client to be Ubiquiti It's up to you what you want to do, but mixing clients and AP doesn't bring any...

Muqatil

You save 40$ but you will save a lot of time spending fixing client connections.. which means $$$ saved.. make your consideration before buying anything

Muqatil

Use some kind of Mikrotik CPE (RB711-2hn + your flavour enclosure = 90$) instead. If you use other vendors CPE you cannot use all the benefits of Mikrotik software (NV2)
Otherwise use all Ubiquity (Rocket as AP and Nano as clients)
I suggest the first choice btw

Muqatil

Very nice, i wonder if this is illegal or not..
It might be a nice way to add some profits

Muqatil

I feel comfortable with flow-tools (deb package of ubuntu). It has mysql support so you can store the informations you need for future parsing. A simple php page with some select queries helps. Be careful when using the mysql support, if you store too much informations your database might collapse (...

Muqatil

with traffic flow you get all the informations you need to track connections of your customer.
You need to capture those flows with some netflow aware software.

Muqatil

Feature requested a lot of times..
+1

Muqatil

Airmax Dish is dual-pol antenna, and its much better than JRC on long distance link

Really? even with worse cross polarization separation?

Muqatil

Feedback your results please

Muqatil

You will face a lot of disconnections due Fresnel obstructions. The link might go up for a while with good signals too but when you will try to pass some traffic, the CCQ will sink until disconnections. Maybe lowering data rates and channel widht to bare minimum, the link might be more stable than i...

Muqatil

That link is not gonna work.
It will carry max 5mbit, whatever you do.
Even with big antennas.

Muqatil

I'm pretty confident with 2 cards in a single board with the help of a microwave foam absorber ( http://www.wispmax.com/vmchk/34-microwave-foam-absorber-20x20.html ) Remember to close the board and the card in a metallic enclosure to avoid external interferences. Otherwise go for 1 radio for every b...

Muqatil

Muqatil

I dont use Radiusmanager product, i developed our custom frontend software to manage freeradius. About routing, my routing table has all the /32 routes to the customers. OSPF and BGP are used to redistribuite them. (BGP from AP to Site router, then OSPF between sites routers( It can be all OSPF but ...

Muqatil

http://wiki.freeradius.org/Rlm_ippool

Muqatil

Hello!
Please Consider to contact a trainer /consultant from this list
http://www.mikrotik.com/training/?train ... e=partners
There might be a trainer in your neighbourhood

Muqatil

You can make a script that upgrades all your routers to the last ROS version possible. Some of them will halt @ 3.30 because the license is still old and need to be upgraded. but then you just need to log in and upgrade the license. The script will run once again and it will upgrade your router to 4...

Muqatil

Maris suggested me to upgrade to 5.x there are fixes on route selection.
I will upgrade soon

Muqatil

You can use this http://anonsvn.wireshark.org/wireshark/trunk/manuf to determine the brand of the miniPCI card..
it's a Mikrotik card, most likely R52. It might be R5H or R52H, but you can check it from the default card power in the wireless section.

Muqatil

I saw the same behaviour on idle links.. I suppose that TDMA has an internal queue for time slots, which are calculated by the load of the client: If the client is doing some kind of traffic, TDMA will allocate more time than an idle client which has only beacon packets traffic. Try to put a small l...

Muqatil

I've the same issue. It will install if i disable the redistribuite and enable right after.

Muqatil

very good explanation bholler!

Muqatil

your pics show 2 problems, fresnel related:
1 the trees @ point B are too high, you need to raise your pole at least of 3-4 meters
2 the mountain on the right side of the antenna A (from point b view) might be a problem aswell, (not sure because the point is very far away)

Muqatil

http://en.wikipedia.org/wiki/Fresnel_zone
I cannot find the link calculator with Fresnel Zone calculation too, i usually use RadioMobile, but might be a PITA to configure.
If you plan to make a lot of links, RadioMobile tool is a must.

Muqatil

Do you have LOS between the points?
Do you have the fresnel zone clear enough?
Is the Antenna Polarization the same for both sites?
Are all the cables correctly plugged in?
You have serious problems if your signals are so high..

Muqatil

RB433AH works at 12V but you have to ensure enough Amperes to the routerboard, to feed the Wattage request of the board

Muqatil

E' un forum in inglese, dunque non possiamo. Piuttosto potremmo sentirci via skype o via mail == renato . bernardi [at] medianetitalia . net
It's an english forum, we can't use different languages than english. We can use skype or mail if you prefer

Muqatil

It's not an error message, it just notify that the client that is trying to connect is not on your Access List, but you have the default-authenticate flag active on your AP, so the client is allowed to connect.

Muqatil

..and a button that recalls a teleport.
(pure trolling post)

Muqatil

I've done a presentation about this idea on my training course:

QoS on Wireless Links.pdf

Muqatil

I've the code 11700, so i might assume it's about 700 ppl

Muqatil

Put a Router (QoS) with that IP X.X.X.2/30
Then do IBGP for those /21 IPs between the two PPPoE Servers and you are done.

Muqatil

I am struggling to get this to work but so far no luck. All that I can make to happen is that when logging into Skype the first time a series of ´foreign´ IP's are listed in my "skype" address list. When Skype is just standby sometimes I see a new IP beeing add. But thats it. The next man...

Muqatil

Understand! My scenario is: One provider - uplink 10.10.10.1 ex.(actually public ip is there) Main router: wan:10.10.10.2 ex. lan:10.100.100.1/24 clients:10.200.200.1/24 I want to add second router and to be redundand if main router stop ,second to take over. Notice:only one provider and that provi...

Muqatil

again:

Unfortunately there is no available room for the selected day(s).
We also have some other options, please call us or send an e-mail.

Use the credential specified here http://mum.mikrotik.com/2011/HU/accomodation
There should be some rooms reserved to mum attenders

Muqatil

You should read the whole thread

Muqatil

uptime.jpg

Level Complete! I saved the princess!
Now the mushrooms are armored buzzy beetles

Muqatil

You aren't going to use a RADIUS (you have one but you are trying to avoid it), so you must add secrets for your clients. Just assign the remote-address to the secret and that client will always get that IP.

Muqatil

Please, be more specific about two identical servers? how they exist with same ip addressing in real time? When i mean identical servers, i mean same profiles. It's obvious that they should have different ip addresses, and they will NAT accordingly to the IP you assigned. Hello, I am about to set u...

Muqatil

I'm already tried drop: src dst src and dst Whether someone was able to block skype? In the Opening Post, i linked a pdf of a guy that analyzed skype protocol.. Look there if you find something useful. This thread is not meant for blocking skype, but only to recognize it. The NACK Packet always ret...

Muqatil

drop src-address-list too

Muqatil

Post your dropping rules..

Muqatil

I didn't try to block Skype. Just try it. It should connect but if you drop connections, it shouldn't exchange any data..

Muqatil

Just duplicate your pppoe server, change the Tunnel ID to the remote Base Station (and accordingly add another EoIP on the Base Station with the same Tunnel ID to the Second PPPoE Server).
It might be confusing, but it's easier than you might think

Muqatil

The NACK Packet always returns with the Public IP (Necessary for Skype peering) so your regex (even in a natted CPE) must contain your class A Public address range. I saw a very low impact on performance, so i think you can use your idea of TOS from the CPE. The NACK Packet anyway doesn't exchange a...

Muqatil

Do you have a working PPPoE server now?
Duplicate it, give it another ip address, put it in the same LAN group and you got a redundant PPPoE server.

Muqatil

Almost 250 RB711 on my network working fine.
I had some failures but all at the first boot.
RMA and got new ones.

Muqatil

It is possible Using FreeRADIUS. Check the module radippool You can use a mysql database to store the ip to distribuite. I've 60 PPPoE servers (one on each AP) on my network, synced by FreeRADIUS. You have to tune it a bit to avoid IP collisions, but it works, and it works PERFECTLY. I even choose w...

Muqatil

Cattura.JPG

That's our Gateway
Xeon Quad Core
Routing OSPF and eBGP
QoS
Firewall

Nothing to complain

Muqatil

Your task is easy to accomplish: put two boxes with the same configuration (with only one exception explained below) running as your current pppoe server. The only exception is for the ip addresses. If they are assigned statically (or dynamically) by your radius server, there's nothing to change. If...

Muqatil

I've presented to my training course a similar problem about qos on wireless links..
Maybe you can adjust this accordingly to your needs

Muqatil

Nice job

Muqatil

I've a working script on our network that slowly is upgrading every CPE from 3.11 to 4.16 It halts on 3.30 if the license doesn't allow to upgrade further and logs which cpe license has to be upgraded manually. It uses API, MAC-Telnet, Telnet, Autoupgrade to fetch info and upgrade. Runs smoothly. It...

Muqatil

What's your "Pretty Good"? I had the same results of Rodolfo. (Anyway we are talking about of products of the same price range) I don't know much about carrier products. 3 Radios on the same routerboard looks professional but it is not. 3 Radios on 3 different routerboards will give you a ...

Muqatil

Try Upgrading to version 5.
It fixed my problems with FoIP

Muqatil

If you make multiple pppoe servers with the same hardware configuration (let's say 5 RB1000), they will balance perfectly between all of them because the less used will have a faster PAD0 response.
Tried and it works perfectly. No additional configuration needed.

Muqatil

Normis, can you provide nv2-wireless.npk packages for 4.15 like you did for 4.13? Thanks

Muqatil

Then, when we have availability of bandwidth, is it important build a QoS system?

In a general rule of thumb you need QoS to solve bottleneck problems..
If you think you don't have any (even on client side), you don't need it, since it doesn't do any work..

Muqatil

This is the exact example of PCQ queuing with address lists explained by this PDF http://mum.mikrotik.com/presentations/C ... _Megis.pdf
You can find a lot more configurations in this forum (even a RADIUS pool assignment) using PCQ

Muqatil

A lot of questions! :lol: 1. I suggest to use this on your border router, since is quite cpu intensive (for a RB112, a RB411 might handle this without problems). The NACK packet has the pubblic address not natted so you need to specify the public IPs that usually your ISP gives you (a business conne...

Muqatil

interference. Let us say - its cheap, but all what is cheap or free isnot best.

Let us say - If you cannot understand properly what's going on and how it works, buy something ready to work which is not cheap.
All your statements in the last post are not correct.

Muqatil

I found v5 working better for faxing too.. for unknown reasons

Muqatil

Is that all?
then:
Balance the advertising of the ip

Muqatil

You didn't provide enough info about your configuration.
Does your customer have dedicated ips? does he NAT his traffic?
There are many ways to do multihoming loadbalancing..

Muqatil

Yes' i checked already: 210€ Total..
I was hoping for a 50€ RyanAir Flight

Muqatil

Just checked Ryanair flights..

Ping to Budapest: No Route to Host
Ping to Budapest: No Route to Host
Ping to Budapest: No Route to Host

(Only from UK)

Muqatil

Hello Renato,

Thank you very much for your report.
We are aware of the problem with The Dude on PPC RouterBOARDs (RB600/800/1000/1100).
The problem should be fixed in the next Dude version.

Regards,
Sergejs

Downgrading to 4beta1 fixed the issue

Muqatil

I upgraded ROS 5rc4 and Dude 4beta2 on RB1000.
On reboot, i cannot access anymore on the Dude server.

I tried to contact support but:

<support@mikrotik.com>:
Sorry, I couldn't find a mail exchanger or IP address. (#5.4.4)

Muqatil

Hire a consultant, your knowledge looks not appropriate for the task you are trying to do

Muqatil

Battery portable 433 + antenna is the best if u can actually get it working at places. Better than using ne wi-spy or radio mobile I have to disagree. A connection might work for various reasons for a while (when you test it) but then issues might arrive. I find more useful to plan the link with ra...

Muqatil

this config will match like 70% of your traffic.
RTFM and check the link i posted above.

Muqatil

And bigger presentations room.
While i do agree that only the first day at the first presentations it is full of people, it was impossible to attend the presentation of new products on Wroklaw.
Are you going to adopt the USA system for the courses?

Muqatil

post your configuration

Muqatil

Those 15 ip adresses you catch, are other skype users and skype servers.
The connections between them and your IPs are calls and chats...
Aren't you looking for them?

Muqatil

/ip firewall layer7-protocol add name=skypenack regexp="[\\xbc]"

Muqatil

(4) what if the RB800+RB604 locks for whatever reason? All your network will be bringed down? Will 8x RB411AH (or 4x RB433AH) be too much more expensive? You would get the rid of all the internal interferences if u separate the radios in different enclosures..

Muqatil

What does not work for you exactly? Did you read the post? Did you change the pattern matching your ip addresses?

Muqatil

Did you send your question to support@mikrotik.com ?
Or do you expect that a users forum will solve your issue?

Muqatil

search.JPG

http://forum.mikrotik.com/viewtopic.php?f=9&t=45209

Muqatil

Read this topic http://forum.mikrotik.com/viewtopic.php ... 78#p166678
It will raise your wireless knowledge and why you having such behaviour.
Read it all.

Muqatil

Yes, full feeds. Those are common supermicro boards /system resource> pr uptime: 15w2d23h36m27s version: "5.0beta4" free-memory: 1601032KiB total-memory: 1944092KiB cpu: "Intel(R)" cpu-count: 2 cpu-frequency: 3000MHz cpu-load: 8% free-hdd-space: 207288KiB total-hdd-space: 242442K...

Muqatil

I'm using BGP Mikrotik (peering with Cisco and Juniper) without issues since routing-test 3.28 was out. (there were a lot of issues before)
Now i'm fine with 4.11 too, and 5.0rc1 is working fine until now...
3 BGP peers with 2 full feeds each.
Nothing to complain (finally)

Muqatil

I RMA them to my distributor, which doesn't specify anything about RB711, i'll ask more info about that then

Muqatil

100 RB711 purchased
5 RMA..

Muqatil

Nice porting, i tested it and works fine!
New ideas incoming!!

Thank you for the app
(installed by .deb package without problems.)

Muqatil

The problem here is that you can't guarantee perfect fresnel with clients. If I only connected customers with a perfect fresnel zone I would only have about 20 customers. IMHO you should plan again your network deployment (changing AP positions) Maybe increasing AP (smaller and closer to the custom...

Search found 559 matches