Community discussions

MikroTik App

Search found 99 matches

by alphahawk
Thu Jan 09, 2020 9:00 pm
Forum: General
Topic: firewall vs nat packet flow
Replies: 8
Views: 1527

Re: firewall vs nat packet flow

A. "RAW" part of firewal inspects packets which enter firewall or leave it but are originated by router: https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Raw B. NAT is done before routing and firewal so you have inspect proper addresses in firewall rules e.g if you DST-NATted packet to internal de...
by alphahawk
Wed May 03, 2017 2:30 am
Forum: Announcements
Topic: v6.39 [current]
Replies: 89
Views: 38507

Re: v6.39 [current]

!) firewall - discontinued support for p2p matcher (old rules will become invalid); So how we should detect p2p traffic now? p2p matcher with two-step method (add destination ip to address list and block/prioritize this list) is working very good for me. It's great that you think it did it's job, b...
by alphahawk
Mon May 02, 2016 11:12 pm
Forum: Beginner Basics
Topic: Multiple WAN ports routing remote https login
Replies: 0
Views: 400

Multiple WAN ports routing remote https login

I have 2 internet connections. WAN: 1.1.1.1/29 for internet (ppoe connection) 172.16.255.10/30 for SIP (The ISP only does sip this way) LAN: 192.168.100.0/24 for general internet usage on vlan 100 10.0.101.1/24 on vlan 25 for SIP /ip address add address=192.168.100.1/24 interface=vlan100 add address...
by alphahawk
Thu Mar 24, 2016 5:29 pm
Forum: Beginner Basics
Topic: Hotspot remove authentication
Replies: 3
Views: 1613

Re: Hotspot remove authentication

Mikrotik, nomadix, and quite a few other hotspot systems allow you to connect to a network when you have a IP address that is not a valid IP on your network. The to-address is the address the mikrotik assigned to that device temporarily so that it will work.

Thanks
by alphahawk
Tue Mar 22, 2016 7:26 pm
Forum: Beginner Basics
Topic: Hotspot remove authentication
Replies: 3
Views: 1613

Re: Hotspot remove authentication

Assuming you probably just did the hotspot setup there 2 spots you should remove it from. 1. Hotspot active 2. Hotspot Cookies Both spot "can" allow it to reauthenticate without showing splash page. Above and beyond that check out http://wiki.mikrotik.com/wiki/Manual:TOC and look at the info for hot...
by alphahawk
Fri Mar 18, 2016 7:54 pm
Forum: Beginner Basics
Topic: Routing public IP's to Vlans
Replies: 7
Views: 1705

Re: Routing public IP's to Vlans

if I do the /24 do I still do
add address=2.2.2.1 interface=vlan10 network=2.2.2.10
or would I do
add address=2.2.2.1/24 interface=vlan10 network=2.2.2.0
by alphahawk
Fri Mar 18, 2016 7:24 pm
Forum: Beginner Basics
Topic: Routing public IP's to Vlans
Replies: 7
Views: 1705

Re: Routing public IP's to Vlans

I can't say for sure that it's the proper solution, but you can do: /interface vlan add interface=ether2 name=vlan10 vlan-id=10 add interface=ether2 name=vlan11 vlan-id=11 add interface=ether2 name=vlan12 vlan-id=12 ... /ip address add address=2.2.2.1 interface=vlan10 network=2.2.2.10 add address=2...
by alphahawk
Fri Mar 18, 2016 6:43 pm
Forum: Beginner Basics
Topic: Routing public IP's to Vlans
Replies: 7
Views: 1705

Re: Routing public IP's to Vlans

I knew I forgot something.

I am going to have 200 vlan's on the network. So I want to put a different IP on each vlan.

Thanks
Brent
by alphahawk
Fri Mar 18, 2016 6:16 pm
Forum: Beginner Basics
Topic: Routing public IP's to Vlans
Replies: 7
Views: 1705

Routing public IP's to Vlans

There is probably a simple answer to this I just am not seeing it. ISP gave me for example: address: 1.1.1.2/30 gateway 1.1.1.1 address 2.2.2.0/24 /ip address add address=1.1.1.2/30 interface=ether1 /ip route gateway=1.1.1.1 /ip address add address=2.2.2.1 interface=ether2 /interface vlan add interf...
by alphahawk
Thu Mar 12, 2015 1:10 am
Forum: General
Topic: One to One NAT to internal customer router
Replies: 7
Views: 3368

Re: One to One NAT to internal customer router

MacGuyver solution: If making the masquerade rule more strict doesn't fix things, then you could always try to forward it directly to them in stead: - Change the dstnat/srcnat rules: -- src-address=xxx.xxx.xxx.xxx action = accept (pass the public IP through w/o NAT) -- dst-address=xxx.xxx.xxx.xxx a...
by alphahawk
Tue Mar 10, 2015 10:25 pm
Forum: General
Topic: One to One NAT to internal customer router
Replies: 7
Views: 3368

Re: One to One NAT to internal customer router

Basic Solution: Does the masquerade action have a match criteria that limits it to packets going out the WAN interface? If not, then it seems that new connections from the Internet to the user's public IP would get masqueraded to appear as if they are from the Mikrotik's internal IP address. Most u...
by alphahawk
Fri Mar 06, 2015 10:34 pm
Forum: General
Topic: One to One NAT to internal customer router
Replies: 7
Views: 3368

One to One NAT to internal customer router

I have a cloud core setup in a apartment complex. We are only given 15 public IP's from the ISP. We have 200 apartments in this hotel. I have vlan the network out and set up private ip ranges on each vlan to help the tenants get online. When I have a tenant that would like a public IP I just setup a...
by alphahawk
Wed Oct 02, 2013 7:04 pm
Forum: Scripting
Topic: Find Mikrotik with Winbox
Replies: 5
Views: 1337

Re: Find Mikrotik with Winbox

If I understand your question you want to be able to see the mikrotik device before authenticating to the hotspot. To do this the easiest way is to add the mikrotik LAN ip to the hotspot walled garden.

Just a fyi though this is a security issue.
by alphahawk
Tue Oct 01, 2013 6:44 pm
Forum: Scripting
Topic: Add active users with session limit to HotSpot through API
Replies: 3
Views: 1576

Re: Add active users with session limit to HotSpot through A

You can acomplish this useing mac authentication. It takes a little bit of extra api code to go kick them off so they are forced to reconnect to the hotspot but it works.
by alphahawk
Mon Sep 09, 2013 9:50 pm
Forum: General
Topic: Question on code to replace global-in/global-out
Replies: 0
Views: 508

Question on code to replace global-in/global-out

I have started upgrading a couple of my devices to 6.2 now. I know one of the changes they put in place were to remove the global-in/global-out. I am trying to figure out how to updated my speed limiting queues now that those are not available. My question is now in instead of global-in/global out u...
by alphahawk
Wed Jun 12, 2013 7:12 pm
Forum: General
Topic: RouterOS 6.1 released
Replies: 198
Views: 57549

Re: RouterOS 6.1 released

*) fix 1G linking with some Cisco devices (affects RB7xx, RB9xx, RB1100, RB2011, CCR);
Does this fix issue where auto negotiate is disabled and still the port will not link up?

THanks
by alphahawk
Tue Jun 04, 2013 2:35 am
Forum: RouterBOARD hardware
Topic: RB2011LS brick power supply suggestions
Replies: 0
Views: 729

RB2011LS brick power supply suggestions

I am looking for a power supply that will work with the 2011ls that is what I call a brick PS. Basically a 24hpow but with the correct power settings for the 2011LS. Anyone have any suggestions?
by alphahawk
Wed Apr 03, 2013 8:31 pm
Forum: General
Topic: DHCP lease without success!!! shoot me now.
Replies: 8
Views: 4630

Re: DHCP lease without success!!! shoot me now.

First question are you ap's using the same ssid? If they are its possible the devices are bouncing between ap's before they finish connecting. I have seen this happen a few times on some of my networks. Simple fix I did to help this issue and also know where the user is located is change the ssid of...
by alphahawk
Thu Mar 28, 2013 1:54 am
Forum: General
Topic: Authentication by certificate
Replies: 5
Views: 4189

Re: Authentication by certificate

Is each user going to have a different login? if not just set the username and passwords in the html form to the logins. I you want a different login for each user incorporate the mac address of the machine as part of the username or password and pass that into the form in login.html. That is best I...
by alphahawk
Fri Nov 09, 2012 5:57 pm
Forum: General
Topic: Hotspot not redirecting https traffic
Replies: 2
Views: 911

Re: Hotspot not redirecting https traffic

Yes that is what I meaning. When did this change or has that always been the case? It seems like that in the past a the mikoritk would redirect https to http.
by alphahawk
Thu Nov 08, 2012 7:43 pm
Forum: General
Topic: Hotspot not redirecting https traffic
Replies: 2
Views: 911

Hotspot not redirecting https traffic

Okay I have seen a few threads about this and have tried to get more info as to what the problem is. From what I can see they dst port 443 is not detecting traffic on port 443 so therefore is not trying to redirect it. Has anyone else noticed this?
by alphahawk
Wed Oct 10, 2012 1:11 am
Forum: General
Topic: DHCP server taking 30+ sec to hand IP out on VLAN
Replies: 2
Views: 842

Re: DHCP server taking 30+ sec to hand IP out on VLAN

We are using dell powerconnect 3524 switches and turning off spanning tree helped. Thanks for that.
by alphahawk
Wed Oct 10, 2012 12:48 am
Forum: General
Topic: DHCP server taking 30+ sec to hand IP out on VLAN
Replies: 2
Views: 842

DHCP server taking 30+ sec to hand IP out on VLAN

I have a rb1100 in a property location. I have setup 163 vlan interfaces. Each vlan interface has a dhcp server setup on it. The issue I am having is that it is taking anywhere from 20 seconds to a minute for a address to be handed out on the vlan. I have looked at everything I can think of so figur...
by alphahawk
Thu Aug 02, 2012 11:27 pm
Forum: General
Topic: Routing different lans through different wans (Sanity Check)
Replies: 1
Views: 524

Routing different lans through different wans (Sanity Check)

I have a setup where we have a t1 connection on ether1 and a cable connection on ether 2. There is then 1 Lan setup on ether3 and 2nd Lan on ether4. I am trying to setup the router so that ether3 routes out the t1 and ether4 to go out the cable. On top of this if either connection fails it falls ove...
by alphahawk
Mon Jul 23, 2012 10:53 pm
Forum: General
Topic: Hotspot newbie trying to figure out if this fits needs
Replies: 2
Views: 1099

Re: Hotspot newbie trying to figure out if this fits needs

Short Answers 1a. You can have the login page hosted on the mikrotik router. 1b. user can defined under the user tab or you can the usermanager software for options 2. Yes you can do both QOS and bandwidth limitations. 3. no. yes. depends on how you setup each user. yes. depends on setup 4. It can d...
by alphahawk
Thu Jul 05, 2012 8:07 pm
Forum: General
Topic: I suspect MTU problem with hotspot. Can anyone help?
Replies: 5
Views: 5757

Re: I suspect MTU problem with hotspot. Can anyone help?

/ip firewall mangle add action=change-mss chain=forward comment="Fix for MSN and Yahoo Web Pages" disabled=no new-mss=1440 passthrough=yes protocol=tcp tcp-flags=syn hotspot=auth this is the fix for compatability issue with some adsl providers (/cough century link /cough). adding the hotspot=auth a...
by alphahawk
Mon Jul 02, 2012 7:22 pm
Forum: General
Topic: Need help with a vlan
Replies: 4
Views: 858

Re: Need help with a vlan

Could I add a default vlan tag that would tag any unmarked packets coming in with a vlan to grab everything else
by alphahawk
Fri Jun 29, 2012 7:00 pm
Forum: General
Topic: Need help with a vlan
Replies: 4
Views: 858

Need help with a vlan

I am in the process of taking over a hotel network where the original provider is using a custom built router that has failed. (The original company who built the router no longer exists) They wen from the router to a smc unmanged switch. From that switch they go to 5 nortel managed switches. Each p...
by alphahawk
Tue Jun 26, 2012 7:23 pm
Forum: Scripting
Topic: Help with creating a hopefully simple script
Replies: 1
Views: 558

Help with creating a hopefully simple script

I am hoping I can get the help of someone here to make a simple terminal script that in pulls the mac address from ether1 and puts it in the following line

/interface bridge set 0 auto-mac=no admin-mac=<ether1 mac>

Thanks
by alphahawk
Tue May 08, 2012 9:28 pm
Forum: Scripting
Topic: PHP API script add carriage return
Replies: 27
Views: 8888

Re: PHP API script add carriage return

Boen_robot thanks that helps a little. The problem is it adds the new line and since it doesnt have a =down-script= associated on the front it doesn't actually put it in I believe. Maybe I missed it but is there a way to append more info to a value you are passing? Here is what I get <<< [43] =down-...
by alphahawk
Fri May 04, 2012 10:11 pm
Forum: Wireless Networking
Topic: Wireless backhaul best practice?
Replies: 11
Views: 7502

Re: Wireless backhaul best practice?

I have been seeing the same issues with the wds mesh. I have yet to figure it but honestly I haven't spent a huge amount of time looking into it other than I can describe what you are probably seeing is a large amount of rx packets and rx data. This is all coming from a arp storm on the wds bridge. ...
by alphahawk
Wed May 02, 2012 7:57 pm
Forum: Scripting
Topic: PHP API script add carriage return
Replies: 27
Views: 8888

PHP API script add carriage return

There is probably a easy fix for this but for the life of me I cannot figure it out if ($API_SWITCH->connect($ip,$port_alt,$GW_username,$GW_password)) { $API_SWITCH->write('/tool/netwatch/add',false); $API_SWITCH->write('=disabled=no',false); $API_SWITCH->write('=down-script=:log info "ap '. $netwat...
by alphahawk
Wed Feb 08, 2012 1:25 am
Forum: Scripting
Topic: API PHP on ROS3.20
Replies: 4
Views: 942

Re: API PHP on ROS3.20

$API->write('?name=' . "ppp1");

should actually be:

$API->write('=name=' . "ppp1");


Also upgrade your routeros to latest to fix many other options
by alphahawk
Tue Jan 17, 2012 1:05 am
Forum: Scripting
Topic: PHP API Question
Replies: 7
Views: 1651

Re: PHP API Question

Your looking for something like this. Its rough and I probably screwed something up in there but should give you the general idea <?php require('routeros_api.class.php'); $API = new routeros_api(); $API->debug = true; if ($API->connect('172.17.10.2', 'user', 'pass')) { $API->write('/ppp/secret/getal...
by alphahawk
Tue Jan 17, 2012 12:52 am
Forum: Scripting
Topic: Radius Incoming
Replies: 15
Views: 15447

Re: Radius Incoming

Chimaster,

I it depends on what you are trying to disconnect. I do know with the hotspot radius it checks every few moments to make sure the client should still be allowed access. I believe there is a option in freeradius at that point to disconnect them on next checkup.
by alphahawk
Thu Dec 08, 2011 7:58 pm
Forum: General
Topic: "RADIUS server is not responding" on hotspot config
Replies: 6
Views: 10555

Re: "RADIUS server is not responding" on hotspot config

/tool user-manager router
add coa-port=1700 customer=admin disabled=no ip-address=127.0.0.1 log="" \
    name=hotspot shared-secret=123456
This line of code set the ip-address to your wan address. When I was testing the hotspot kept running into this issue and that was fix I found.
by alphahawk
Wed Dec 07, 2011 7:36 pm
Forum: General
Topic: Load Balancing ECMP alternatives?
Replies: 1
Views: 713

Load Balancing ECMP alternatives?

Back in the day before pcc we had the capability to load balance with ecmp. From my understanding due to a code change that capability was broken / fixed. My question is has anyone come up with a solution to recreate the ecmp load balance using a mikrotik?
by alphahawk
Fri Nov 11, 2011 6:32 pm
Forum: Scripting
Topic: Hotspot setup script
Replies: 1
Views: 1108

Hotspot setup script

I am working on a PHP/API script to setup a the hotspot. The one issue I am running to is the /ip/hotspot/reset-html command. When you run it in terminal on winbox it requires a yes or no response. In reading the manual on the wiki for API I noticed this may fall under the CLI commands that will not...
by alphahawk
Wed Oct 12, 2011 8:05 pm
Forum: Scripting
Topic: API PHP class
Replies: 46
Views: 64453

Re: API PHP class

Found a weird issue with php api. If you are doing a file fetch you get stuck in a infinate check loop for end of file transfer since you never recieve a !done. I had to edit the php api code on lines 313 to this to handle it. if ($_ == "!done" || $_ == "=status=finished" ) $receiveddone=true; This ...
by alphahawk
Fri Oct 07, 2011 5:16 pm
Forum: General
Topic: Hotspsot Page Customizing
Replies: 6
Views: 1218

Re: Hotspsot Page Customizing

http://wiki.mikrotik.com/wiki/Manual:Cu ... _variables

See above link for hotspot variables. You are going to want to use combinations of session-time-left and uptime to calculate there times.
by alphahawk
Tue Sep 27, 2011 12:14 am
Forum: The Dude
Topic: Dude on ppc (RB1100) cant access by web
Replies: 15
Views: 8557

Re: Dude on ppc (RB1100) cant access by web

Did you get a answer on this from support? I have the same issues using rb1100, rb450g and x86.

Thanks
by alphahawk
Fri Apr 15, 2011 12:23 am
Forum: General
Topic: Simple P2P file share blocking
Replies: 5
Views: 1011

Re: Simple P2P file share blocking

I am still able to download files through bit torrents with this option on. Any other thoughts? You are probably downloading with encrypted torrents. With that it is much more difficult. Your best approach is to block everything and then only allow the traffic you want through your network. Thanks ...
by alphahawk
Thu Apr 07, 2011 6:05 pm
Forum: General
Topic: PPC+Hotspot on the same pc PLz help me Network diagram insid
Replies: 18
Views: 2029

Re: PPC+Hotspot on the same pc PLz help me Network diagram i

Plz any body take my code to try and tell me the result and take Screen Capture of the download Ahmedprof, You are load balancing not bonding connections. Load balancing speeds are only as fast as the line it went out. What you are seeing is pictures from someone who is using a download manager to ...
by alphahawk
Thu Apr 07, 2011 5:51 pm
Forum: General
Topic: downgrade version from 5 to 4.16
Replies: 3
Views: 2051

Re: downgrade version from 5 to 4.16

You need to use the netinstall to downgrade

http://wiki.mikrotik.com/wiki/Manual:Netinstall
by alphahawk
Mon Feb 14, 2011 6:51 pm
Forum: The Dude
Topic: 4.0beta2 PPC rb1100 broken?
Replies: 2
Views: 1076

Re: 4.0beta2 PPC rb1100 broken?

normis any hints you can throw at us for when beta 3 will be released?
by alphahawk
Fri Nov 19, 2010 12:02 am
Forum: Wireless Networking
Topic: Mac OS X 10.6.3 and R2N 802.11n
Replies: 24
Views: 4422

Re: Mac OS X 10.6.3 and R2N 802.11n

Any updates to this solution?
by alphahawk
Tue Nov 09, 2010 3:48 am
Forum: The Dude
Topic: Issue with auto export of maps
Replies: 0
Views: 784

Issue with auto export of maps

I have 4.0beta2 running on a x86 ROS package with version 4.9. So far system is running great and has been since beta was released. I have the dude storing to a 2nd sata drive. I am trying to setup auto export of maps to any of the file formats. I am assuming I am doing it right. I go to the network...
by alphahawk
Sat Oct 30, 2010 12:45 am
Forum: General
Topic: ECMP
Replies: 66
Views: 26377

Re: ECMP

Are there any fix or news about ECMP problem?
There are quite a few people who would like to see the ECMP connection table flush reversed. Don't expect it to happen any time soon. Right now PCC is best option using only mikrotik.
by alphahawk
Wed Oct 27, 2010 6:29 pm
Forum: General
Topic: Please help with mikrotik PCC
Replies: 25
Views: 4615

Re: Please help with mikrotik PCC

Somebody, please export working PCC configuration! http://wiki.mikrotik.com/wiki/Manual:PCC#Example Is a working example. You must adapt it to what you are doing. From what I can see in your images at the very least your routes are not setup correctly. Also We need to see a text export of your mang...
by alphahawk
Tue Mar 23, 2010 7:50 pm
Forum: Beginner Basics
Topic: [ask] bridging and bandwidth limiter
Replies: 3
Views: 830

Re: [ask] bridging and bandwidth limiter

Your looking for transparent bandwidth managment.

Check this link out to get you started
http://wiki.mikrotik.com/wiki/TransparentTrafficShaper
by alphahawk
Wed Sep 30, 2009 6:52 pm
Forum: General
Topic: Upgrade Hotspot 3.23 -> 3.28: Login broken
Replies: 36
Views: 6871

Re: Upgrade Hotspot 3.23 -> 3.28: Login broken

Forgot to add if you want old images you just have to download them from the mikrotik website. They keep them up there for quite awhile. You just have to change the url manually to get them http://66.228.113.58/mikrotik-3.24.iso http://66.228.113.58/mikrotik-3.27.iso http://66.228.113.58/mikrotik-3....
by alphahawk
Wed Sep 30, 2009 6:48 pm
Forum: General
Topic: Upgrade Hotspot 3.23 -> 3.28: Login broken
Replies: 36
Views: 6871

Re: Upgrade Hotspot 3.23 -> 3.28: Login broken

I have been watching this thread and was curious about something. How is your dns setup? I have had the same issue happen on a couple different locations. What I had to do to fix it was change the dhcp server to hand out the 10.0.100.1 or whatever the ip is of the gateway as the dns. Then I have to ...
by alphahawk
Tue Aug 11, 2009 11:36 pm
Forum: Wireless Networking
Topic: Wireless AP disappearing from network
Replies: 0
Views: 521

Wireless AP disappearing from network

Network Layout: rb1000 -> hp gigabit 8 port switch -> back haul runs to 2 locations from either location hp gigabit switch -> rb411, crossroad and rb433ah devices. the rb1000 is using a lvl6 license. The hp switches are the hp procurve gigabit 8 port switches. All devices are upgraded to ros 3.24 AP...
by alphahawk
Mon Jul 27, 2009 7:31 pm
Forum: The Dude
Topic: Vote for new DUDE features!
Replies: 117
Views: 48370

Re: Vote for new DUDE features!

Have a client/agent install version of dude for ROS that is not so bloated with unneeded files when I only install the dude to act as a agent.
by alphahawk
Wed Jul 22, 2009 6:58 pm
Forum: General
Topic: RB 433 AH ethernet prblem..
Replies: 2
Views: 5559

Re: RB 433 AH ethernet prblem..

Just personal opinion from what I have seen. remove the virus firewall rules and/or readjust them. Your previous system has a little more power to handle that. The 433ah doesn't seem to handle that many rules nicely when you have that many people connecting.
by alphahawk
Wed Jul 22, 2009 6:53 pm
Forum: General
Topic: 2 different ISPs, 2xGWs, srcnat. How to load balance?
Replies: 10
Views: 2287

Re: 2 different ISPs, 2xGWs, srcnat. How to load balance?

Look at this for the load balance: http://wiki.mikrotik.com/wiki/PCC#Introduction Then for failover changes your routes to look more like / ip route add dst-address=0.0.0.0/0 gateway=10.111.0.1 routing-mark=to_wlan1 check-gateway=ping add dst-address=0.0.0.0/0 gateway=10.112.0.1 distance=2 routing-m...
by alphahawk
Fri Jul 10, 2009 12:42 am
Forum: General
Topic: PROBLEM WITH LOAD BALANCING
Replies: 10
Views: 2078

Re: PROBLEM WITH LOAD BALANCING

Use PCC balancing. this resolves issue you are experienceing
by alphahawk
Sat Jun 13, 2009 8:20 am
Forum: General
Topic: Changing the default script
Replies: 2
Views: 670

Re: Changing the default script

hmmm ok. I will retry it again
by alphahawk
Thu Jun 11, 2009 9:07 pm
Forum: General
Topic: Changing the default script
Replies: 2
Views: 670

Changing the default script

I am trying to change the default script on a bunch of our mikrotik routers. I have read up on it and from what info I can find I use the netinstall and then I upload a rsc file by clicking the config script and selecting the rsc file. This works on the initial install but once I reset the router 2 ...
by alphahawk
Wed May 20, 2009 7:25 pm
Forum: The Dude
Topic: Bug? The Dude 3.2 - Notifications - Email CC field not w....
Replies: 10
Views: 1914

Re: Bug? The Dude 3.2 - Notifications - Email CC field not w....

Was the Email CC issue fixed in version 3.3 or 3.4? I am using 3.4 right now and I still am unable to recieve a email no matter what I put in the CC line.
by alphahawk
Mon May 18, 2009 9:11 pm
Forum: The Dude
Topic: Monitor Devices behind hotspot with agent problems
Replies: 3
Views: 1222

Monitor Devices behind hotspot with agent problems

I have a dude server that sits in my home office. I have about 300 remote networks I monitor with dude. I ran into a wierd one today though that doesnt make sense. I normally setup the remote location using right now a routerbaord 433ah with dude. I setup the admin password and thats it for the dude...
by alphahawk
Thu May 07, 2009 5:15 pm
Forum: General
Topic: RouterOS and SMP (multi-core and multi-cpu) crashes
Replies: 39
Views: 14509

Re: RouterOS and SMP (multi-core and multi-cpu) crashes

Does this also fix issue with the cpu's spikeing to 100% usage and locking up the dude?
by alphahawk
Thu May 07, 2009 1:03 am
Forum: General
Topic: New firewall matcher PCC
Replies: 298
Views: 76365

Re: New firewall matcher PCC

Nice fix for the nth load balance.

Question though is will there ever be a fix or patch for ecmp to work correctly?
there is nothing to fix, it just works that way - linux kernel developers made this. this is why we made another method that does what you want.
Thanks for reply normis.
by alphahawk
Tue May 05, 2009 6:33 pm
Forum: General
Topic: please help me in Load Balance
Replies: 5
Views: 710

Re: please help me in Load Balance

Overall easiest fix is to upgrade to latest ros. The best thing is to look at the sticky thread at top for PCC.

When you put up the hotspot disable or delete the masquerade rule the hotspot creates.
by alphahawk
Tue May 05, 2009 6:15 pm
Forum: General
Topic: New firewall matcher PCC
Replies: 298
Views: 76365

Re: New firewall matcher PCC

Nice fix for the nth load balance.

Question though is will there ever be a fix or patch for ecmp to work correctly?
by alphahawk
Wed Apr 29, 2009 12:08 am
Forum: General
Topic: New firewall matcher PCC
Replies: 298
Views: 76365

Re: New firewall matcher PCC

Testing new system right now. So far working great. haven't seen anything drop so far. I am watching it though. It seems to act a little more like nth on splitting how it picks which gateway but so far no major issues. Going to keep testing it more tonight and push it harder with more connections to...
by alphahawk
Mon Apr 27, 2009 5:45 pm
Forum: General
Topic: New firewall matcher PCC
Replies: 298
Views: 76365

Re: New firewall matcher PCC

Thanks normis.

So next question when is 3.24 going to be released.
by alphahawk
Fri Apr 24, 2009 12:21 am
Forum: General
Topic: ECMP
Replies: 66
Views: 26377

Re: ECMP

Any update on patching the kernel or a fix for the ecmp normis?
by alphahawk
Fri Apr 24, 2009 12:19 am
Forum: General
Topic: LOAD BALANCING WITH 3 GW AND FAILOVER
Replies: 8
Views: 2397

Re: LOAD BALANCING WITH 3 GW AND FAILOVER

Look at this how-to http://wiki.mikrotik.com/wiki/NTH_load_ ... masquerade

all you need to do as add a third mark and change your nth to 3,1 3,2 3,3 and then add in 3rd route.

ECMP is another way to load balance but currently there are a few bugs being worked out on it?
by alphahawk
Mon Apr 20, 2009 10:05 pm
Forum: The Dude
Topic: Changelog 3.3
Replies: 1
Views: 694

Changelog 3.3

Changelog for 3.3?
by alphahawk
Thu Apr 16, 2009 10:18 pm
Forum: General
Topic: ECMP
Replies: 66
Views: 26377

Re: ECMP

Normis,

Any update as to if and when mikrotik will be releasing a fix or work around other than using the nth for ecmp?
by alphahawk
Mon Apr 13, 2009 8:14 am
Forum: General
Topic: ECMP
Replies: 66
Views: 26377

Re: ECMP

By the way, PPTP works with ECMP + route table flush workarounds, but L2TP does not . I mean from the router itself to a external router somewhere in the wild. Tested. I wonder how come L2TP does not work, what is so special about it that is different from PPTP for example? L2TP gets hit by the flu...
by alphahawk
Sun Apr 12, 2009 8:37 am
Forum: General
Topic: ECMP
Replies: 66
Views: 26377

Re: ECMP

Is there a way to simulate flushing the routes?
by alphahawk
Fri Apr 10, 2009 12:41 am
Forum: The Dude
Topic: RouterOS Dude won't restore backup...?
Replies: 4
Views: 1607

Re: RouterOS Dude won't restore backup...?

dfwair. I tried same thing and ran into same issues. Saw CPU sitting at 100%. once dude is removed works fine. Post back if you see anything.
by alphahawk
Tue Apr 07, 2009 7:20 pm
Forum: The Dude
Topic: What is needed for ideal dude system
Replies: 1
Views: 799

What is needed for ideal dude system

What type of system would be ideal to run the dude on. I have about 250+ remote sites with average of 4-6 mikrotik ap's in each location. I want to use the dude to monitor these with the dude using the agent feature. I need it to be able to store log's and also handle multiple people connecting to i...
by alphahawk
Tue Apr 07, 2009 5:13 pm
Forum: Beginner Basics
Topic: Identifying P2P
Replies: 7
Views: 1403

Re: Identifying P2P

It doesn't. You can only find some of the first packets, before it all gets encrypted, and then mark connection to drop it, but I don't think it works all that well. That's what encryption is for.

Figured as much. Just wishful thinking of being able to limit encrypted packets for p2p
by alphahawk
Tue Apr 07, 2009 4:14 am
Forum: General
Topic: PC obtaining different subnet and gateway
Replies: 5
Views: 774

Re: PC obtaining different subnet and gateway

Seen this before. Its a virus that causes it. I believe if you have a system with antivirus 2009-2010 it can happen. To fix it run malware bytes on all machines and also run your virus scanners
by alphahawk
Tue Apr 07, 2009 3:54 am
Forum: Beginner Basics
Topic: Identifying P2P
Replies: 7
Views: 1403

Re: Identifying P2P

How well does the L7 find encrypted P2P packets? Has anyone had any experience with this?
by alphahawk
Tue Mar 31, 2009 7:59 pm
Forum: Beginner Basics
Topic: Restrict MAC spoofers
Replies: 4
Views: 779

Re: Restrict MAC spoofers

Like normis suggested use hotspot. hotspots have a option in there to limit the number of the same mac that logs in.
by alphahawk
Thu Mar 19, 2009 10:10 pm
Forum: The Dude
Topic: All agent stop connecting
Replies: 0
Views: 561

All agent stop connecting

I have a windows xp pro box running a dude server. I use it to monitor a groups of properties I manage. Has worked fine for a few months until just earlier this week I started having problems with it not connecting to the agents I had setup. agents.jpg I have tried deleting the agents and readding t...
by alphahawk
Mon Mar 09, 2009 8:55 pm
Forum: The Dude
Topic: logging to db?
Replies: 7
Views: 2226

Re: logging to db?

Didn't think I would ever say this but read the mysql doc's mysqladmin is the command line for mysql. Otherwise just need to find a command line client that can do this.
by alphahawk
Wed Feb 25, 2009 6:14 am
Forum: The Dude
Topic: DNS Resolving
Replies: 4
Views: 871

Re: DNS Resolving

Thanks for info.

Experiementing is fun sometimes. Other times kinda sucks.

Wish we could get a updated manual for dude sometimes.
by alphahawk
Mon Feb 23, 2009 7:59 pm
Forum: General
Topic: Load Balancing 3dsl, Bank's pages not resolve
Replies: 13
Views: 5809

Re: Load Balancing 3dsl, Bank's pages not resolve

Short answer of what is wrong. After your users logins to there bank web site the new pages create a new connection that most of the time ends up going out a new pipe. Bank web pages dont like this. Easy fix is to mark port 443 to 1 pipe and let all 443 traffic go out that pipe. example code put at ...
by alphahawk
Fri Feb 20, 2009 12:09 am
Forum: The Dude
Topic: DNS Resolving
Replies: 4
Views: 871

DNS Resolving

I have multiple networks scattered across the US. My problem is some of the properties dont have the luxury of static ip's. I am using a few different dydns services. Can the dude connect to a device that has a changing ip if I give it the dns name?
by alphahawk
Thu Jan 15, 2009 6:24 pm
Forum: General
Topic: Feature Request: Hotspot user automatic disable
Replies: 1
Views: 709

Feature Request: Hotspot user automatic disable

Would it be possible to add in a option on the hotspot user so that they are disabled and or deleted on a set time. I know this can be done with scripting or with usermanager. Adding in those is cumbersome for what I am needing to use this for. Example: hotspot user Jan09 is disabled or deactivated ...
by alphahawk
Sat Dec 27, 2008 1:34 am
Forum: Beginner Basics
Topic: rb1000 + Compact Flash
Replies: 1
Views: 578

rb1000 + Compact Flash

Is it possible to load the mikrotik software on a complact flash drive and then boot to the flash drive on a rb1000?
by alphahawk
Thu Dec 11, 2008 8:20 pm
Forum: Beginner Basics
Topic: connections combine or load balance?
Replies: 1
Views: 625

Re: connections combine or load balance?

Yes there is a way to combine the 4 connections per say. Don't recommend though it presents alot of problems. Your probably better of doing a round robin type of connection.
by alphahawk
Fri Oct 31, 2008 7:38 pm
Forum: Beginner Basics
Topic: L2TP/IPSEC laptop to Mikrotik server vpn
Replies: 1
Views: 1222

L2TP/IPSEC laptop to Mikrotik server vpn

I have read manuals and the forums and for some reason cannot get my head around how to do this. What I am looking for is: Laptop (dhcp address) ------> Router to internet -----> Internet ----->(public wan 1.1.1.1)Mikrotik server(private lan 192.168.100.1/24) I would like to create a L2TP/ipsec vpn ...
by alphahawk
Thu Oct 09, 2008 1:21 am
Forum: RouterBOARD hardware
Topic: How many are PPPoE clients support by RB1000?
Replies: 12
Views: 2504

Re: How many are PPPoE clients support by RB1000?

I may be able to help answer this one a little. I have a rb1000 running hotspot and usermanager. I have 4 internet connections coming in. 2 bonded t1's and 4 7 down 1.5 up dsl connections. All users are limited to 1.5k up and down. The server has a average of about 600 users on all time. At full us...
by alphahawk
Mon Sep 29, 2008 7:15 pm
Forum: RouterBOARD hardware
Topic: How many are PPPoE clients support by RB1000?
Replies: 12
Views: 2504

Re: How many are PPPoE clients support by RB1000?

I may be able to help answer this one a little. I have a rb1000 running hotspot and usermanager. I have 4 internet connections coming in. 2 bonded t1's and 4 7 down 1.5 up dsl connections. All users are limited to 1.5k up and down. The server has a average of about 600 users on all time. At full use...
by alphahawk
Mon Sep 29, 2008 6:04 pm
Forum: Wireless Networking
Topic: where do I block p2p in hotspot rules
Replies: 0
Views: 893

where do I block p2p in hotspot rules

Checking to see if there is a better way to block p2p in hotspot rules. I have a hotspot setup nothing fancy just the generic wizard setup. Adding /ip firewall filter add action=drop chain=forward comment="" disabled=no p2p=all-p2p and then moving to the start of the firewall list seems to work just...
by alphahawk
Sat Jul 19, 2008 11:12 pm
Forum: Wireless Networking
Topic: PERFORMANCE OF CROSSROADS
Replies: 5
Views: 1318

Re: PERFORMANCE OF CROSSROADS

As far as quality of signal you will get a little better. Otherwise depends on how much data you are pushing through network as to wether the board can handle it. I have personally used it as a ap set to 802.11g mode and with 50 clients connected doing average internet browsing it ran fine with no i...
by alphahawk
Tue Jul 01, 2008 8:56 pm
Forum: General
Topic: Dynamic DNS with zoneedit or changeip
Replies: 1
Views: 1233

Dynamic DNS with zoneedit or changeip

I currently use Zoneedit for dydns for some servers we use in hotels we support using monowall. Currently we are switching to mikrotiks and so far I have not had any luck getting the mikrotiks to update Zoneedit. If there is a way can someone please point me in the correct location. I have been look...
by alphahawk
Fri Apr 25, 2008 4:31 pm
Forum: General
Topic: Hotspot and DNS not resolving some address's
Replies: 5
Views: 2167

Re: Hotspot and DNS not resolving some address's

I am using ROS v 3.X (have been using 3.2 and 3.3 mostly). One of the pages I can give you right off the bat is test.lvcm.com. I use mostly RB532 and RB333 atm.
by alphahawk
Fri Apr 25, 2008 5:59 am
Forum: General
Topic: Hotspot and DNS not resolving some address's
Replies: 5
Views: 2167

Hotspot and DNS not resolving some address's

I have setup multiple gateway's now w/ the hotspot. I am noticing a issue I need to get resolved. Setup is: Internet ---> gateway w/ hotspot ----- internal network with wireless ap's On the gateway ether1 has static public ip's with. I setup the gateways and the mikrotik can ping internet fine. I us...
by alphahawk
Mon Apr 14, 2008 11:11 pm
Forum: Beginner Basics
Topic: Export File format
Replies: 0
Views: 789

Export File format

I am building a quick script for my company that creates configurations for mikrotik's. I am having a issue though with the format of it.

What carriage return or line feed does the export file use. Or what carriage return or line feed does the terminal in winbox accept?