MikroTik

rastod

Is there a way how to run Dude.exe from command line in secure mode?
I need to run it from a local dude installation configuring appropriade Tool.

This is command for "remote" mode:

dude.exe --connect [Device.FirstAddress] [Device.UserName] [Device.Password]

but I need to run "secure" mode.

rastod

Hello, is it possible to interconnect more dude servers to one dude monitoring tree? I have two networks that are geographically far-away and there is a dude server in each network. It would be nice to configure third dude server that contains links to these other dude servers. I would expect that t...

rastod

Currently 50-58mbit/s, 580 users (325 queues) - packet loss i still here :( To RouterOS itself: 600 packets transmitted, 594 packets received, 1% packet loss The absolutely same story via connected PPPoE: Packets: Sent = 600, Received = 594, Lost = 6 (1% loss), It's better than 2-5% loss in older v...

rastod

1. when there are more users (700-900), we can see that sometimes ping to localhost is higher, up to 2-5ms, but not every ping, only 10-30% 2. we have problem that users are not able to get higher speeds than 15-20Mbit for download and 5-9Mbit for upload. But this is common problem with older 2.9.x ...

rastod

We tested the 3.7 package, from our point of view it is suitable to be released. But now it depends only on MT.

rastod

We do not have any problems with 3.7 build time Mar/27/2008.
We run it 4 days on 4 PPPoE server with 500-800 active connections each.
We have only little performance problems that are common for older versions 2.9.x

rastod

We use PPPoE servers for thousands of PPPoE clients and we never had such problem. Check your connectino timeout settigs may be. There were another problems on 2.9.5x.

rastod

Still the same, working fine..., no problems as before.

rastod

Don't wory, 3.7 seems to be really very good.
Running 24 hours, no problems yet.

rastod

Yes, I can confirm this problem too. I have ping to localhost over 100ms. After restart it is ok. I've already informed MT, they are working on it.

rastod

MT sent me to check corrections.

rastod

it seems they found. I am testing 3.7 and it works much more better...

rastod

I have reply from MT support, they confirmed problem and they are working on solution.

rastod

I use two radius servers too and it is normal that mikrotik do not go to the second radius when first one deny request. Purpose of the second one is when there is timeout from the first one - so when the first one is not functional. The query is redirected to the second one - to the backup radius se...

rastod

It seems to be true - I watched log and ping and it seems that every time new PPPoE session is created or closed, packet lose occures. So, it seems there are two problems: - packet lose when creating/closing pppoe session - high ping response to locahost when higher utilization even CPU is about 50%...

rastod

I believe MT is working on this issue. But there is always workaround - use static queues or queue tree. There are also several benefits to use static queues: *) few queues, instead of hundreds for each user *) easy to manage *) reduced CPU and memory usage. Probably you can find more. We terminate...

rastod

Yes, I suppose that it can be problem. But in older versions it was correct. Maybe MT should consider this.
But not only packet lose, also high time response to locahost ping is problem. Maybe it is common problem.

rastod

I did, but still no answer. I wanted to check if there are others that meet the problem.

rastod

I have new observation.

When I switched off "Change TCP MSS" on all used profiles, so there were no dynamic iptable's Mangle rules, the problem diminish. It is still here, but not so huge.

rastod

At least, I am not alone.

And what are you doing now? Downgrade back to 2.9.xx?

rastod

Hi all, we have big problems with performance of PPPoE server running 3.x versions. Today we run 3.4 version and still having problem. The problem is that we have packetlose on localhost (127.0.0.1) and all interfaces. It seems like it is a performance problem or problem of interface queues. We run ...

rastod

Hello, it would be very useful if mikrotik would support IGMP snooping on bridge. Then we would be able to use it as an universal HAG (Home Access Gateway) device that delivers both - IPTV and internet connectivity to customer. Do you plane to support IGMP snooping? And why not to integrate VoIP gat...

rastod

Nobody knows?

rastod

Is it possible to limit number of packets per second transmited to dst IP address? There is firewall filter "dst-limit" but how it works? chain=forward in-interface=ether1 dst-limit=200,300,dst-address/10s action=drop I suppose this filter should drop every packet 200+nth packet for 10 seconds after...

rastod

no, no, this way you define filter only.
You need an ACTION that can modify VLAN features like VLAN ID or priority

rastod

I want to generate repeating alarm when e.g. SMTP service fails on my server. How to do it? If I create notification with sound alarm and I set "repeat count", the sound is plaing just "repeat count" times. But if the service is back on-line, I would like to stop the alarm playing the sound file (bu...

rastod

Yes, but if I have simple APC UPS with serial/ups port that can be monitored using Mikrotik device only, and mikrotik does not support SNMP for UPC, there is not other way possible...

rastod

Good idea with the IP. Thanks.

rastod

Is it already possible to use SNMP for checking status of APC UPS? If so, from which version of Mikrotik?

rastod

Hi all, how can I set 802.1p priority marks in VLAN tagged packets on VLAN interface in Mikrotik?

rastod

Hi all, we have big problems with mikrotik routers that are under high performance. e.g. we have several PPPoE servers based on Mikrotik and when the server connects up to 1000 connections with downlink speed up to 20Mbit, the router is at 99% CPU and has problems with response times for authorizati...

rastod

Will MikrotIK update SNMP version to be able to find interface by its name?

rastod

Hi All, there is no exact answer available to this question. Is it OK to configure more APs on one tower or in one town with the same SSID to allow users to connect to the most suitable AP? The ahthorisation can be done using Radius MAC authorization. Do you know about some problems using this confi...

rastod

Thank you, it works fine. The only problem is that the checkrad.pl script is very ineffective because it must read all interfaces from PPPoE server. Will MikrotIK update SNMP version to be able to find interface by its name?

rastod

yes please, can you provide more details?

rastod

Can someone give me a hint how to solve following: We are using PPPoE server with FreeRadius autentification and we are using Simultaneous Use Checking. We are limiting number of simultaneous connections to 1. The problem is in nonstandard situation when PPPoE server is nonstandardly restarted and t...

rastod

My new observation: It seems that that the problem occurs when there is very high number of requests for PPPoE session.

rastod

After upgrade from 2.9.31 to 2.9.32 on PPPoE server with high load (up to 600-800 PPPoE Active connections), CPU hangs on 100% and PPPoE is not answering to responses. I must restart the computer, but after short time, CPU hangs on 100% CPU again. I was not able to find conditions when it hangs, it ...

rastod

there is a "find" command on several places of command interface on MIkrotik, but how it works? If I write command like "interface find 'name-of-ppp-interface', or any other find in queues, dynamic routes or ppp active sessions, it does not works, there is no output...

rastod

Thanks, I will try...

rastod

Hi all, My APC Backup Pro 500 works fine with MT using USB cable. But when I use serial cable delivered with the APC, it does not work. There is a pin diagram of the serial cable with two DB9 connectors, but APC is using cable with DB9 connector on side of PC and R52 (ISDN linke) connector. How it s...

rastod

my configuration is: [admin@mikrotik_apnam] routing ospf> print router-id: xx.xx.208.22 distribute-default: never redistribute-connected: as-type-1 redistribute-static: as-type-1 redistribute-rip: no redistribute-bgp: no metric-default: 1 metric-connected: 20 metric-static: 20 metric-rip: 20 metric-...

rastod

Hi all, I need to configure a tool that enable keep my network working even some links are dropped. I have routed netowork with 6 main routers that are connected in a circle. There is /28 network between each two routers in order. 1-2 2-3 3-4 4-5 5-6 6-1 I suppose that OSPF is the tool. I have read ...

rastod

and what HW do you use?

rastod

hi trtmrt
- Yes, we use radius
- I do not think it is a good idea to install more PPPoE servers due to effective afregation, also big aDSL providers use thousands of users per one DC
- do you mean if I have opened WinBox and active PPP connection? No.

hi normis
you think just to use higher CPU?

rastod

Hi all,

we have up to 800 active PPPoE connections and our P4 2500MHz router is on 90% of CPU utilization. Can you advice better HW solution for up to 2000 PPPoE connections?

rastod

Hi all, we have backbone built on mikrotik routers with defined bridges over WDS and ethernet ports. And we have problems, that some packets are transmitted to a branches of WAN even there is are no MAC items in the HOST table of a bridge. Why? In such a situation we can see TX traffic on a WDS inte...

rastod

No no, please, consider carefuly, IPsec mikrotik router is behind the NAT router. And I see problem with configuration of sa-src-address and sa-dst-address. I should set up addresses of the NAT router and not addresses of my IPsec router. But in this way th IPsec tunel does not work. I get messages ...

rastod

is it possible to configure IPsec tunel between MT1 and MT2 that are behind NAT, like here:

LAN1 <--> MT1 <--> NAT/firewall <---- WAN ----> NAT/firewall <--> MT2 <--> LAN2

If so, how is it possible?

rastod

But I need to compare maximal values. You know, we would like to use SR5 cards for long-range link but after installation our pratcical tests says that results are the same with SR5 or CM9 cards. How is it possible?! I suppose I should get better signal level using SR5 thanks to ability to transmit ...

rastod

Hello, we have done some testing. We have Point-to-Point link with the same devices on both sides, the same directional antennas. The only difference is that on the one side we installed Atheros CM9 and on the second side Atheros SR5. On both side we limited communication speed to 6Mbit and configur...

rastod

how exactly are you finding this new feature very useful?

rastod

I have changed the time limit on MikrotTIK side and now I can see: On Mikrotik Log the same as before On Debian Log: --------------------- Mar 15 12:40:12 proxy pluto[22383]: "orakor_zv" #300: max number of retransmissions (20) reached STATE_MAIN_I1. No response (or no acceptable response) to our fi...

rastod

there are my log informations: On Mikrotik: ------------------ when I start ping to the second side of the tunel I get following messages: 21:43:21 ipsec,ike,info queuing SA request, phase 1 with peer 11.87.214.163 will be established first 21:43:21 ipsec,ike,info initiating phase 1, starting mode I...

rastod

Sorry, I forgot to write how is this configuration working. When I try to ping each-other, I can see on Mikrotik: IPsec counters: ------------------ Out Accepter: increasing Out Dropped: increasing Out Encrypted: 0 In Accepted: increasing In Dropped: 0 In Decrypted: 0 ISAKP Out Accepter: increasing ...

rastod

Yes, I would be very thankful if you can help me. Here it is: Linux Debian side: ----------------------------------------- # /etc/ipsec.conf - FreeS/WAN IPsec configuration file # RCSID $Id: ipsec.conf.in,v 1.11 2003/06/13 23:28:41 sam Exp $ # basic configuration config setup forwardcontrol=yes inte...

rastod

no, it is not working

rastod

yes, I did, there is no info about freeswan. To work with freeswan I need to define secure key and there is no place to do it on Mikrotik.

rastod

Can anyone help me how to configure IPsec tunel between MikroTIK and Freeswan IP Sec?

rastod

Hi all,

when this parameter is in "on" or "auto" state:

protocol header encrypt (Anti BT protocol filter): auto

MT is not able to detect p2p traffic. When we switch it off, MT catch all BITCOMET traffic.

rastod

we have tested client with BITCOMET p2p program using p2p filter on MT version 2.9.11. p2p filter recognize only up to 20% of the BITCOMET traffic. Is it possible to improve p2p recognition?

rastod

Hi all, PPPoE-RELAY agent is very small, easy and fast application so WHY NOT TO ADD IT to Mikrotik. Installation takes minute on standard linux system. I suppose everybody knows it's functionality: it proxies PPPoE sessions updating MAC translation table between two interfaces - interface with pppo...

rastod

ops, sorry, I can't see it. Is it available in Ap mode? I am running 2.9.12 with atheros miniPCI. I see only: [admin@mikrotik_dsinama] interface wireless> monitor ap_dsinama status: running-ap band: 2.4ghz-b frequency: 2437MHz overall-tx-ccq: 69% registered-clients: 10 nstreme: no current-tx-powers:...

rastod

And how should I understand the growth? What was changed?

rastod

thanks

rastod

So higher CCQ is incorrect? Or how to understand?

rastod

Hi all,

I noticed that CCQ value on wireless interface si much higher when using wireless-test package. Why?

Before enabling wireless-test I had valuses about 10-20%, now I have over 60%-90%

rastod

I can't see noise level value. Where is it?

rastod

No, WDS is transparent for MAC so, every user acts with it's own IP and MAC address. I need to do such a configuration that is the same as in standard wireless client bridge.

rastod

OK, sorry, I'll try to explain better: I would like to configure MikroTIK to the same functionality as a simple "wireless bridge client" device. So, in following configuration: users <-- ethernet --> MTclient <-- wireless --> AccessPoint <-- WAN if there are more IP users, all are accessing WAN with...

rastod

I am sorry, you probably do not know what I am talking about. I mean MAC translation, not IP. Please anyone if you know how to configure bridge NAT to correctly handle ARP and MAC translation, please answer.

rastod

Is it NAT rule for bridge? How it handes ARP requests? It seems to be only IP masquarading.

rastod

Hi all, wow can I configure NAT on Mikrotik bridge that is working as a wireless client ? I need to get simmilar functionality as on any simple "wireless bridge". The result is that all IP traffic of ethernet clients is NATed to MAC address of wireless interface of the Mikrotik. I suppose that I nee...

rastod

Hi All, I asked for PPPoE-relay as a general problem. If you have one PPPoE user behind a wireless client, it is no problem. But when there are more clients it is problem, because wireless bridge is bridging IP only, not MAC. WDS solve this. There is no problem. So why I asked for PPPoE-relay? PPPoE...

rastod

Do you have some exact experiences and can you suggest how many registered clients is optimal? We have som APs with more than 25-40 registered users and we have problem with ping time that is varied from 10 to 300ms, or sometimes more. Is it possible to generalize optimal number for AP? Does it depe...

rastod

Of course, we tested filtered bridge and it works but it does not seem to be serious solution, especially if the defice is routing too. Is it correct to put two routed segments - their interfaces to bridge? Also we tested EoIP but we found unknown problems with it. Users connected by PPPoE through l...

rastod

Hi all, it would be very useful to add PPPoE-RELAY agent to mikrotik firmware. It is very small open source deamon. We are using it on a pocket installation of linux instead of mikrotik. If there would be PPPoE-RELAY support we would buy at least 50 license of mikrotik. What can we do to convince yo...

rastod

Another problem - where can I get 2.8 firmware for RB532? It is not available on http://www.mikrotik.com.

rastod

Hi all, how can I downgrade form 2.9.6 to 2.8 on routerbard 532 ? I have very big problems with clients accessing my new AP based on MIkrotik RB532 with Senao NL-2511MP+ that has Prism chipset. I am using two cards on one routerboard and there are up to 30 clients on each card. There are some topics...

rastod

Hello,

just add to you radreply table for the user:

Framed-Pool == ""
Framed-IP-Address == "a.b.c.d"

Of course without quotes

rastod

Hello,

I think that very high part of P2P is using http protocol and is not detected by mikrotik.
Is it possible?
Will mikrotik prepare some actualization of detection enginee?

rastod

Hello, we have an ARP problem in our network. There are more than 10 mikrotik routers connected in one switch and they are configured with bridges. There are some AP connected through WDS with another mikrotiks, the structure is tree with cca 4 nodes and over 8 leaves. On every microtic a bridge int...

rastod

is the following configuration correct?

chain=forward dst-address=x.x.x.x dst-limit=2,4,dst-address/1m40s
action=accept

Is the action correst? It seems it does not affect traffic.

rastod

Hi all,

we use pppoe-relay that means, that more than one PPPoE user share the same MAC address. How can we limit PPPoE server to allow only one session for each user? MikroTIK parameter "One Session Per Host" limits sessions according MAC address. But we need to limit it by username.

rastod

how to set rtc estabilihed setting?

rastod

After 2 days when connection tracking is OFF it works fine, no packet rejected. We use the connection only for bridge purposes so no mangling and routing is performed.

rastod

When connection tracking is switched off, there is no problem. We have two identical bridges installed, one for over 1 month and the new one for one week. We had the same problem with the new one - packet rejecting. We compared configuration many times but we forgot to check connection tracking. Now...

rastod

Hi all, please, can someone describe me how can more wireless access points use the same SSID in small area like hotel, or 4 sectors covering small town? Like some hotspot services offer only one SSID that works everywhere. And if it works, how can I provide that users connect to available access po...

rastod

Hi all, I need to configure backup connection to Internet using ISDN line. Now my Mikrotik router is connected through wireless interface using PPPoE and I need to configure it so that in any problem with the primary connection it will dial a backup ISDN connection so that users connected on etherne...

rastod

Hello all, we need to connect wireless clients using WDS because we need to bridge PPPoE protocol from behind client's wireless bridges (there are more PPPoE clients connected to ethernet port of the Mikrotik that is connected through wlan1 to AP). But we know, that using WDS, throughput of links cr...

rastod

the problem is that the router is very far from me...

rastod

throughput is not important, testing is done on real traffic. But when I want to test throughput, I use bandwidth software from behind routers.

rastod

Hi all,

Is it possible to permanently change CPU frequency on RB532 remotely?

When I use
/system routerboard settings set cpu-frequency=330
/system routerboard settings keep-frequency

the frequency returns back to 264MHz after a time.

rastod

16Mbit is the real level of traffic, it can transmit more. The problem of Atlas is in packet lose on ethernet interface !!! My situation: <router1> ---ethercable---<Atlas1>---wireless--- <Atlas2>---ethercable---<router2> When I ping from router1 to atlas1 or router2 to atlas2 during high traffic uti...

rastod

Can someone tell me why there is so interesting difference between these two solutions: Both were tested on the same link with real traffic up to 16Mbit: Trango Atlas: - excellent latency - up to 18ms - max p/s up to 2200 on graph - high packet lose ( on ethernet ports when high traffic, ping form r...

rastod

I have deteled it too, can yu please send me the package? Send it on e-mail dr@mailbox.sk. Thanks.

rastod

Yes, it is possible. Just use Filter-Id attribute, it creates dynamic rule that jums into chain named by Filter-Id value. Then I collect SRC address list of that connection and according to Address-list I can mangle, I can create Queue-tree etc. If you have any better idea how to do this on Mikrotik...

rastod

May be I had the same problem and after some testing I found that problem occures only if there are more interfaces in the bridge. Let's suppose that client is connected through wlan1 and output interface is ether1. Just add wlan1 and EoIP interfaces to bridge and it should work fine. (IP is assigne...

rastod

It would be very nice if you provide pppoe-relay and some status tools for it. Is it problem?

rastod

I am using Freeradius server and it is very easy to configure and operate it. And it can use MySQL for stored data about users so it is easy for you to manage it, because you have many windows tools for accessing MySQL. After installation you will not need to access radius, only mysql.

rastod

But I do nod need to use script and e-mail notofication.

rastod

can you please help me how can we limit nonstandard packet flow? We would like to limit packet/sec for src or dst IP addresses. How to configure it?

rastod

I have the same problem, in your example I think you have problem, you have to redistribute something, e.g. redistribute-connect=yes. As for the filter, it seems good but it should be assigned to the peer, so I suppose it should be: / routing bgp peer ... in-filter=bgpchain such a configuration modi...

rastod

Helo, I would like to test some features of new BGP but I have fundamental problems to configure basic things like how to announce a network when there is no "/routing bgp network" command.

Please answer this quiestion, If my necessary features will not work fine, I have to change to Zebra e.g.

rastod

does BGP implementation in Mikrotik supports:

- WEIGHT attributes for peers (if I would like to prefer one peer before another)

- IBGP (internal BGP support)

- will the BGP support the same functionality like Zebra BGP?

rastod

We have problem with our mikrotik in wireless APmode. We wanted to change our old solution and replace it with mikrotik solution. Old solution worked with wireless card LW1100P in AP mode. New solution is mikrotik firmware on embedded PC with miniPCI card in AP mode. We have tested more embeded PCs ...

rastod

Is it possible to use MT for limiting traffic so that I need limit pps for each connection, or limit pps for each pair: src-dst

If so, can you write me a hint how to configure it?

rastod

Nobody can help?

rastod

I have performed upgrade without problem. Telling the true, I was surprised. Before upgrade I forgot to take attention to license and what happen during installation of the new version. I used netinstall. Using netinstall I booted old MT with 2.8.27 using bootp feature of network adapter and after, ...

rastod

Hi all, I have problem with traffic shaping of users connected through PPPoE. The problem is, that I am not able to use both - simple queue and tree queue. When user is connected, new PPPoE interface and Simple Queue are created. The Simple Queue is limiting bandwidth according to radius rate-limit ...

rastod

it is not good solution. Why it does not work?

rastod

I have no filter defined on firewall

rastod

Yes, it works !!!

I am connected through PPPoE tunel to the MT and when trying to read SNMP from PPPoE connection, it does not work. When trying to read SNMP from "outer" network, it works. Is it possible?

rastod

Does SNMP service works on 2.9rc6 ? I am not able to read from MT any data. There was no problem on 2.8 .

rastod

Does anyone know why I can't print count of connections?

[admin@APnamQoS] ip firewall connection> print count-only
TIMEOUT

Thaks

rastod

Really nobody noticed the same problem?

rastod

Hi all, I have problem with rate limiting in PPPoE sessions. When I define Rate-Limit in radius table, after connected to PPPoE server, simple queue is created with Limit-at=Rate-Limit form radius. It is correct. When I do not define Rate-limit attribute on radius server and I would like to use rate...

rastod

Webmin? It is tool not designed for MT. Don't you think winbox?

rastod

Does some P2P use http protocol? Is it covered by MT?

rastod

yes, but now it is not possible. I described simplified state, in fact I am solving more complex problem.

rastod

I have installed MT as a transparent bridge between NAT router and ISP connection, ether1 and ether2 are configured as a bridge so I can see all traffic form our network to ISP. The problem is, that the traffic is already NATed and I can't recognize traffic by src address, because many users (more t...

rastod

Does it means that mikrotik has a limitation when used for AS propagation and BGP routing?

Search found 122 matches