MikroTik

mudasir

Thanks for the update on this.

mudasir

This was posted almost 7 years back. I had no idea that even existed anymore.

mudasir

Hi, It's been years since I worked on this (and almost 3 years since I properly worked on any Mikrotik device). I am not sure if this can / will work on new version of Mikrotik RouterOS. The main reason I can think of is that it does not use API rather it uses simple (some not so simple) SSH command...

mudasir

Hi,

It is not designed to work with HotSpot. You can make changes in the functions to make it work for HotSpot.

mudasir

Hi,

I found the problem. It was in my configuration. I am using a very complex config having bandwidth and client link on same ethernet. My client traffic was being masqueraded because of which my total traffic was getting stuck at about 30Mbps. So I fixed my NAT rules and now it is working fine.

mudasir

Hi everyone.

I am facing a very odd issue. Please check this post where I have detailed the issue http://forum.mikrotik.com/viewtopic.php?f=2&t=75556

mudasir

I would like to add one thing. The same settings when used on a PC with RouterOS installed, it works fine without any issue. This issue is coming only on CCR.

mudasir

HI, I am using CCR-1036 and for some reason (which I am unable to figure out) the WAN interface is not going above 30Mbps. When I reboot CCR the WAN interface goes to around 70Mbps to 80Mbps which is usually the case in peak times. However after some time the bandwidth comes down to around 30Mbps. E...

mudasir

Hi, I am facing some issues regarding CCR-1036-12G-4S. It is disconnecting again and again and I have to reboot the router to get it back working. Once it is disconnected, I can not connect to it using anything (Winbox, Webfig, Console) and this happens randomly. It can happen after 5 min or after ...

mudasir

Hi,

The device again got hanged... It is creating allot of issues for me now. I was planning to put this on production, but this behavior is creepy. If this happens in production, I really dont what what I will be doing.

If possible, please look into this issue.

mudasir

Hi,

I have sent the support.rif file on support.

mudasir

Hi, I am facing some issues regarding CCR-1036-12G-4S. It is disconnecting again and again and I have to reboot the router to get it back working. Once it is disconnected, I can not connect to it using anything (Winbox, Webfig, Console) and this happens randomly. It can happen after 5 min or after 3...

mudasir

Hi, I am looking for a solution for CCR-1036-12G-4S where I can group first 4 ether ports. Like in Cisco we can create a VLAN and add multiple ports in that VLAN and can give IP address to that VLAN and perform all the routing for that VLAN. Can we do something similar in CCR-1036-12G-4S, like 1 DHC...

mudasir

Hi,

Got it working after doing the RESET.
It will be great if the touch screen comes pre-calibrated.

mudasir

Hi, Is there any "First time config" article on Wiki for CCR. I have tried almost everything. Touch is not calibrated I think, because of which I am unable to use the touch screen properly. Unable to connect to the router using Winbox. Serial console is also not working. I am stuck for this.

mudasir

HI,

Mikrotik UserManager and My system are both RADIUS based. You can use anyone of them at a time.

mudasir

Hi, It will be great if you can share your work, so everyone can benifit from it. I am glad that you like this system. I stopped working on this because I started working on something way cooler than this. Check out the link below http://forum.mikrotik.com/viewtopic.php?f=2&t=69983 I am preparin...

mudasir

Hi,

Thanks for the feedback.
Actually that feature is there, I forgot to mention.

A cronjob runs on daily basis and send email to the User and to the entity (Dealer, Sub-Dealer) that user belongs to.

mudasir

Hi everyone, I have been working on a RADIUS system and its almost complete. Based on Freeradius. Below are the features which are complete and are running in a production environment for an ISP of about 3000 customers. 1. Server Management a. Add / Remove / Edit Mikrotik Routers from web interface ...

mudasir

Hi, I can not use Free DNS Servers. I have local-sites running with few custom DNS entries and Reverse Pointers setup on the DNS Server. The issue that is confusing me is that how can it works when connecting the ID created in Mikrotik and not work when connecting the ID created in RADIUS. If anyone...

mudasir

mudasir

Hi, If I am getting it right you want all the traffic from both CPE's to be routed to Ether11 (private IP NAT, public IP route). Private IP NAT is very easy (and from your first post I get an idea that you have already done this). Public IP routing can also be achieved but there are some limitations...

mudasir

Hi, I have setup Freeradius with a custom developed PHP/MySQL based fronted for Freeradius. Mikrotik is using freeradius for PPP based authentication. Freeradius is configured with very basic "radcheck" and "radgroupreply" attributes. The issue is that there is a specific Wireles...

mudasir

Hi,

Is there a way by which we can kick / remove an active user from PPPoE using a SNMPSET command.

mudasir

Hi, This can be achieved easily. However some Mikrotik side settings will also be needed, as I can not think of a solution which only requires RADIUS side settings. What you can do is quiet simple. In RADIUS (radgroupreply or radreply) table you can create an entry that adds the user in a firewall a...

mudasir

Hi.
I have properly implemented these rules in order...
Also passthrough is needed in this case, i have these rules working on another router.

mudasir

Hi, Recently I was implementing QoS in my Office router and came across something weird. These are working and limiting User bandwidth in a Queue. /ip firewall mangle add action=mark-connection chain=forward disabled=no new-connection-mark=BIG src-address=192.168.10.28 passthrough=yes add action=mar...

mudasir

Yes I figured that out

mudasir

Hi,

The settings are working but only from web interface and not on Winbox.

mudasir

Hi,

I have upgraded to Mikrotik v5.16, still WebFig skin not working. User is able to see everything and edit everything.

webfig.png

mudasir

I forgot to update it

Will do that right now and will see what happens.

mudasir

Hi,

I just created a skin in WebFig and assigned that to a group and assigned that group to a User as show in http://forum.mikrotik.com/viewtopic.php?f=2&t=52184

But when I log-in using that User, the user is able to perform almost all the task system wide.

I am using Mikrotik ROS 5.7

mudasir

Hi,

Yes that is exactly what I initially figured out. My upstream provider does blackhole my IP address and it blocks everything. Up till now I have not been able to get any updates from my provider as to how we can control this.

Lets see, if I come up with any solution, I will share it here.

mudasir

Hi, It is somewhat similar, however I can not add another Mikrotik instance, as still my core router will be receiving this attack which at some time will get saturated link. Core router is also a Mikrotik Router. I thought of implementing PCQ on Interface Queue to restrict complete traffic, but aga...

mudasir

Hi,

Snapshot in my initial post shows the torch screen also, there I tested it from my local IP address "10.6.24.2". I have a perl script which I use to perform this this, I define port, packet size and few other parameters in there and then start the test.

mudasir

Hi,

Not working, attached snapshot.

floodtest.JPG

mudasir

Hi, I have recently setup a TeamSpeak 3 Server to provide Voice Services to my Clients on Network. However shortly after putting on Public IP I started receiving UDP Flooding. The behavior is very odd, as the IP from which flooding is being done is caught in a dynamic Address-List and all packets ar...

mudasir

HI,

Dear to make it work with 2.9.6, I will have to re-write almost all the functions, as there are many things that got upgraded while moving from 2.9.X to 3.X and then moving from 3.X to 4.X...
So its better to upgrade.

If you want this to be ported, you will have to sponsor.

mudasir

Hi, Recently I was writing a script to create backup of router and send it using gmail smtp. But I faced an issue that I could not figure out. The code that is creating issue is :local ip [:resolve smtp.gmail.com] :local user "xyz@gmail.com" :local pass "xyzxyz" :local to "b...

mudasir

I think the app is not good enough...any ways...I thought that it might help few..

mudasir

Hi, Thanks for pointing that out. Attached in this post is the patch for that. The zip file only contains "functions.php", just replace current functions.php in folder "inc" nothing else needed be done. I will try to add that Login authorization system as soon as I get time. I ha...

mudasir

Hi, This is the first update which includes some bug fixes and a new feature to create PPP Profile. I have update the code to work with v5.X but now its not working for v3.X. So I will not be updating this code to work for v3.X as that is very old. Also I have added the Feature to create "Profi...

mudasir

Hi, The function that is being called on "User Stats" menu is function user_stats() { $ssh_command = ':global user :global fname :global lname :global traffic :global up :global down :foreach i in=[/queue simple find] do={ :set user [/queue simple get $i name] :for m from=([:len $user]) to...

mudasir

Something is really weird. The same function when being executed from Mikrotik CLI is showing proper results, but the same thing when being executed from remote SSH is giving errors. I am working on this and by tonight I will update and remove errors and will also add the "Adding Profile Featur...

mudasir

Which version of mikrotik are you using to test this.

mudasir

Yes. As the topic of the post sepcifies "PHP Based PPP Secrets Management System". This can be added as a feature request. Not much work is needed to be done for this.. Creating a profile is not that difficult, but for that you will also have to create an IP Pool, so that's why I left it.

mudasir

Hi, Yes that is just a spelling mistake, nothing else. About the SQL import method that I have used. In my video tutorial, I have clearly mentioned that I am using a different method then specified in Wiki Article, because a MySQL library is required for that import method to work "libmysqlclie...

mudasir

Hi,

Will keep that in mind next time...
Thanks.

Also if you think that the app is nice...you can also make this post sticky.

mudasir

Hi,

I have uploaded a video tutorial on http://www.tiktube.com. It is under the evaluation process, the video is a complete installation guide of the application.

http://www.tiktube.com/index.php?video= ... vGlloKnGE=

mudasir

Hi,

@aacable

I have also written an article on how to setup a WebMin based Mikrotik Panel with some of the scripts that provide basic functionality to perform PPP User Management using SSH.
The article is at following URL http://wiki.mikrotik.com/wiki/Useful_Bash_Scripts

mudasir

Hi, I have tested this. I did setup this panel for one of my clients. Now I am working on a complete RADIUS Manager which is 100% based on PHP+AJAX+CSS and has many more features than this Panel. But to be honest, I will not be sharing that for FREE. I will also submit a Video tutorial on how to per...

mudasir

Hi everyone, I have created a very simple but a very useful PHP Based PPP Secrets Management System. Currently following features are present in these scripts, more will be added if I get time. 1. Creating New User ( PPP->Secret + MySQL ). 2. Searching User ( this is only from MySQL ). 3. Show a lis...

mudasir

Hi,

I would like to see OpenSSL integration with Mikrotik for creating certificates. This will help in managing certificates more easily.

Also PUSH Route for OpenVPN is a feature that i am waiting for.

mudasir

Hi,

Thanks for your quick reply. And thanks for the information.

mudasir

Hi,

I would like to know, is it possible to filter VPN traffic to stop SPAM. I just want to block all traffic of port 25 and 110 that is coming through VPN ( either SSTP, PPTP, L2TP ).

mudasir

Hi, I am trying to implement ACK packet prioritization, but its not working properly. Below is the rule that I am implementing. add action=mark-packet chain=prerouting disabled=no in-interface=lan new-packet-mark=QoS_ACK packet-size=0-120 passthrough=no protocol=tcp tcp-flags=ack,!fin,!syn,!rst,!psh...

mudasir

Hi,

Thanks for your quick reply.

Can you please give me some example rules for Static DST-NAT rules for port >30000.

mudasir

Hi,

How can I restrict Port range for UPnP.
Like UPnP should only be for ports greater than 30000.

mudasir

Hi,

Thanks for you reply.

I have solved the problem. For some reason IP route was not accepting 10.6.24.0/23 and 10.6.28.0/23 as dst-address while adding routes, so I have to add /24 routes. Now its working fine.

mudasir

Bump...

Can any one help me out in this.

mudasir

Hi, I have configured Mikrotik on a PC as a normal router, performing simple routing functions. There are total 6 ports, each port with different IP range and using DHCP-Relay on each port from a linux based dhcp server. Port 1 = 10.6.32.0/29 (used for ISP end connectivity) Port 2 = 10.6.24.0/23 Por...

mudasir

Hi, Thanks for your reply, below are the details that you asked, i have removed replaced IP's with "XXX" [admin@firewall.mywall] > ip address print detail Flags: X - disabled, I - invalid, D - dynamic 0 address=192.168.10.253/24 network=192.168.10.0 interface=LAN actual-interface=LAN 1 add...

mudasir

Hi, I have a scenario where i am a bit stuck. Below is a brief info of what i am working on. 1. We have 2 ISP. (ISP1 and ISP2). 2. We have 2 separate Live IP pools from both ISPs (pool1 and pool2). 3. Local Clients use 192.168.10.0/24 , few clients are provided with live IP (from ISP1 and ISP2 at ra...

mudasir

Hi, After doing google for about 5 days, i am writing here. I am using Ubuntu 10.04.2 LTS Server. I have configured Freeradius to work with Mikrotik to authenticate PPTP users. But the issue that i am facing is that i want to limit a user to single login not multiple, but users are able to login as ...

mudasir

MT 4.17 is running fine. I am talking about 3.28, me system hangs during installation

mudasir

Thanks for your reply.
I really appreciate your quick response.

mudasir

Hi,

I was trying to install 3.28 but it did not work now i tried to install 4.17 and it is installed.
Can you please tell me why is this.

mudasir

Hi, I am trying to install Mikrotik on an ESX Server. It boots properly from ISO Image, then i select the packages that i want to install and then press "i" then "n" and then as soon as I press "y" to continue my keyboards NUM LOCK and SCROLL LOCK starts blinking and sy...

mudasir

Hmmm...
I have setup OpenVPN on linux behind Mikrotik. Its working. So i dont think i need Mikrotik OVPN anymore. Anyways thanks for the answer.

mudasir

Hi,

When i try to decrypt the certificate, it asks for passphrase, and i have not created certificates with any passphrase, i leave the passphrase blank and press ok. Then nothing happens.

mudasir

Hi, I am setting up OVPN. I have created certificate on my Linux box using below steps. # cd /etc/openvpn/easy-rsa/2.0 # source vars # ./clean-all # ./build-ca # ./build-key-server Server # ./build-key client After creating Keys, i imported them in mikrotik using below steps. # cd /etc/openvpn/easy-...

mudasir

Thanks allot.

Got it working..

mudasir

Ok.

I can loop through all users, but can you please guime me how can i check name for "cn".

mudasir

Thanks allot.

I got that working in 4 of my v4.16 ROS, but is there any way to get this working in v3.23. Because I have 2 ROS v3.23 and 4 ROS v4.16.

Please let me know if there is any method in v3.23

mudasir

Hi, I would like to know how can i do regular expression matching. I am trying to figure out all active users in "/ppp active print" which starts with "cn-", like cn-mudasir cn-abc cn-xyz So how can i only print information about the users having cn- at the begining of the user id.

mudasir

Hi,

Thanks allot dear.

mudasir

Dear All,

In VPN, when any user logs out, series of numbers are shown in logs. I would like to know what does those numbers means. Example is an attached snapshot.

pptp.JPG

mudasir

Hi,

Yes this is the main reason i am working with SSH and CLI, not with API, becasue API is still under development and is not 100%. On the other hand CLI is 100%.

I am using phpseclib for all the SSH commands.

mudasir

Hi, I am working on a script to show all active interfaces in PPTP. The script is working fine when run in mikrotik console. I want to execute this script through SSH, it gives error when executed through SSH. :global iname;:foreach i in=[/interface find type=pptp-in] do={:set iname [interface get $...

mudasir

Dear, The snapshots are taken differently, in the user creation form the data entered is for 512kbps, then i deleted the user and created again with 768kbps. Today i have integrated "Live User Monitoring", "User Stats", "PPP Profile Creation" and "IP Pool Creation&...

mudasir

Dear All, I am working on a PHP based PPP User Control Panel with MySQL support. I need some ideas, like what to integrate in this panel. Currently i have completed below listed features. 1. Create User. (with monthly restriction, at the month end the user id will be disabled automatically). 2. Dele...

mudasir

Hi, Now i am using the code below, still no progress. The ip is provided by my ISP. :global file ([/system identity get name] . [:pick [/system clock get date ] 7 11] . [:pick [/system clock get date ] 0 3] . [:pick [/system clock get date ] 4 6] . ".backup") /system backup save name=$file...

mudasir

So can you tell me any other way to do so. I contacted my ISP and they gave me another SMTP server but still i am unable to send emails.

mudasir

Hi, I am trying to send my systems backup via email tool, but it is unable to send email. I am not getting errors in logs. :global smtp (:put ([:resolve smtp.gmail.com].":25")) :global file ([/system identity get name] . [:pick [/system clock get date ] 7 11] . [:pick [/system clock get da...

mudasir

Dear,

i have done all the scripts in bash and have created a complete user management panel in Webmin. Its working great and have solved all my problems. I will very soon be publishing all my bash scripts to mikrotik wiki.

mudasir

Dear friend,

You can follow the link in my previous post to share internet with the help of mikrotik.

If you dont know how to configure your ADSL modem them you should contact you ISP from which you got the DSL Service. They are always there to help you out, better then us.

mudasir

Hi,

Thanks for th reply.

the CLI command is simple.
"ip hotspot user set User_Name password=New_Password"

i want this to do through the PHP API, a working example would be great.

Thanks in advance.

mudasir

HI, uptill now i have only made login system, and a simple html form with required fields. form has following fields 1. userid 2. old password 3. new password 4. confirm password. i have made a function to check new password and confirm password. after that the password should go through the php.api...

mudasir

Hi, I am working on a simple PHP script to change password of a hotspot user. A simple example would be great. Right now i am doing this with a BASH script from a Linux Server. I get a STD Timeout error almost all the time while changing password, i dont understand why i get this. Also if someone ca...

mudasir

Hi, I would like to know how can i Disable / Uninstall the web-proxy packge in mikrotik version 3.30. And also one more thing. I am using Mikrotik version 3.30 with hotspot, at peak time almost 2800 users are online at this time my CPU utilization goes to 100% and my clients start to see strange pro...

mudasir

Thanks allot man...

mudasir

Hi, I have setup FreeRadius on Ubuntu to work with Mikrotik as PPPoE, its working fine. I want to ask what is the Attribute to be used in FreeRadius to bind MAC-Address to an User-ID. Like we use "called-id" option in mikrotik to set MAC-Address. What is the option to be used in Free-Radius.

mudasir

Hi, Is there any other way, becasue i need some particular DNS entries which i can not make in the DNS provided in Local Area Connection. I have no cotrol over DHCP server i can only change settings of PPPoE server. Is there any tweak that can be made in registry. I will try the registry things whic...

mudasir

Hi,

Dear XEN package is not installed.

mudasir

Hi, I would like to know how to use DNS assigned by PPPoE. When i connect my PPPoE dialer and after that when i do nslookup, it is not doing lookup from my PPPoE DNS. It is doing lookup with the DNS assigned in Local Area Connection. I would like to know how to be able to make use of the DNS provide...

mudasir

Hi, I tried to add a Virtual Ethernet and it gave me an error saying that "the feature is not implemented". And since then i dont see any of my Ethernet Interfaces in "Interfaces" section. Also when i try to add a firewall rule and when i try to select interface it only says &quo...

mudasir

Hi,

I know that Traffic Routing is done in PREROUTING chain. Proxy work on input and output chain.

I would like to know that is it possible or not.

mudasir

Hi,

I am trying to do load balancing over 2 gateways. It works great without Proxy, however as soon as i enable redirection in NAT for proxy only the default route is selected for complete traffic.

How to resolve this issue.

Looking for a quick and positive reply.

mudasir

HI,

I am also facing this issue. I upgraded my ROS to 3.28 and since then i am facing this...

mudasir

Hi. This is my config. / tool user-manager router add subscriber=mudasir name="CrystalNet" ip-address=10.100.74.10 shared-secret="123456" comment="" disabled=no / tool user-manager user add subscriber=mudasir username="demo" password="demo" comment=&...

mudasir

Hi, I am trying to setup PPTP on Mikrotik with User Manager. But it keeps giving me error that the UserName or Password is invalid. In the logs i see Authentication Failed. I also followed the article in the wiki section to remove all the doubts that i had in my mind. PPTP when connecting goes till ...

mudasir

Its simple.

In mangle table just add a simple rule to accept traffic of port 80....

mudasir

Hi,

Thanks to all, i have resolved my problem.
Thanks again.

mudasir

Hi,

yes i have a "masquerade" rule in my NAT table, without it internet will not work at the client side.

If you have any other method then "masquerade" please let me know, becasue it will help me in obtaining the desired result

mudasir

Dear chupaka,

i tried this, but the traffic that i recieve at proxy has the src address of my mikrotik machine, not the original host machine.

mudasir

Hi,

I would like to know, is it possible to route port 80 traffic to an external machine with original src-address. I am talking about an external proxy / cache machine, mikrotik routing port 80 traffic with original src-address to an external machine.

mudasir

Hi, Dear when i make a rule "topics=web-proxy" still the logs that i see have the "debug" option in it. So its no use. I am using 2.9 as well as 3.23. I have 3 machine on 2.9 and 2 machine on 3.23. And i want to make a centralized loggin server, for which i have re-installed my s...

mudasir

Hi, Dear let me requote, when i use "topics=web-proxy, !debug" i get no logs at all. And i really mean no logs, so what will be transfered if i have no logs. The only way i see any sort of web-proxy logs is "topics=web-proxy,debug" . I am using Red-Hat Enterprise 5, with Apache2 ...

mudasir

Hi,

Can any of you point me to any article or tutorial related to this topic, in regards with mikrotik.

mudasir

Hi. Dear Normis, First thing is that, when i enable logging for "topic=web-proxy, !debug" . I see no logs at all, not in Mikrotik's Log or anywhere. The only way i see logs related to Web-proxy is "web-proxy,debug,packet". So I had to edit the file webproxylogtomysql.php I did th...

mudasir

I resolved this issue also by editing he PHP file. There are allot of mistakes in PHP files, believe me. Now when i do cat /root/mysql.pipe , i see the logs going. And aslo in my proxylizer page it is showing that i have logs. But how to use this Dumb thing. Unable to do any thing. For me Proxylizer...

mudasir

HI, I would like to know is there any possible way to save web-proxy logs. Right now i have made a log rule to save all logs to disk and i have increased the number of lines to maximum. Please if any one says about "PROXYLIZER", i tried that and its not working for me, follow the link to s...

mudasir

Hi, Somehow i have come around the problem that i described in my last. My last problem was resolved by using "/usr/bin/php" to execute .php files. Now i am facing a new problem. i am getting " Not valid web proxy log!!! " message in /var/log/proxylizer/webproxytodb_debug.log , h...

mudasir

Hi, I got it working, by doing a complete re-install of the Proxylizer. Now i am facing anther issue. When i execute the Crontab of Proxylizer manually i get the following error PHP Notice: Undefined property: DB_mysql::$disconnect in /var/www/proxylizer/mail_send.php on line 54 Please let me know w...

mudasir

Hi, Dear Normis, I installed Chrome as well as Opera. Still the same. The source of the page from Chrome is as follows <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/199...

mudasir

Hi, I was tryting to install Proxylizer, but its not working. I get a blank page with only a Mikrotik Logo at the bottom. I followed all the steps as per the Wiki, but no progress. Please let me know how will i be able to set it up properly. I have made database. when i try to open the web-page this...

mudasir

Hi,

Dear chupaka,

It would be great if you can give me an example, becasue i am a bit confused regarding this.

I tried creating single queue with target add "192.168.0.0/29" , but it gave me error to give correct IP address.

mudasir

Hi,

can any of you show me an example. I dont want to add queue for each IP in the Pool of /29. How is it possible with only one QUEUE for the whole /29 Pool.

mudasir

Hi,

I have an IP pool of /29 subnet and i want to restrict this whole IP pool to 4mb. How to do this.

Like if all IP are using internet, the total bandwidth restriction on all IP's should be 4mb, each IP should not be restricted to 4mb.

Let me know this.

mudasir

Hi,

Thanks chupaka for the information. I will try it, might be today or tomorrow and will let you know.

mudasir

Hi, I want to know how is it (i.e if) possible to provide live ip's to client without using NAT. I have three "/24" subnets of live ip's and i want to give them to client by creating virtual interfaces and doing subnetting. Like for example i have this subnet 137.0.0.1/24 Now i divide it f...

mudasir

Hi,

Its unbelievable, its working now and i did nothing to it.

If this sort of thing happened again i will post logs of both side.

mudasir

Hi, Thanks for the quick reply. I know this, becasue till yesterday i only had single server running, but today as i setup my second pppoe server, i faced this issue. I divided the area and it was working fine. but the thing is i can not setup only 1 server on my network, or you can say not single s...

mudasir

Hi, Is it possible to run multiple PPPoE server in single network. I tried it but many of clients are not properly being authenticated. Like if a client is supposed to login to PPPoE server1 but all its login attempts goes to PPPoE server2, thus not allowing the client to login. Please let me know w...

mudasir

Hi, My Mikrotik machine is mainly being controlled by my linux machine with my custom made BASH scripts. Now till 2 days back, everything was working fine, but now i am unable to SSH to my mikrotik box. I am getting ssh_exchange_notification error, and now i am facing very serious issues just becaus...

mudasir

Hi, It is very easy only if you have a linux machine available. The following script can help you out. FPATH="/path/to/dir" FILE="raw-data-file" NEW="newfile.rsc echo "/ppp secret" >> $FPATH/$NEW cat $FILE | while read users do UID=`echo $users | cut-d, -f1` PASS=`...

mudasir

Hi, Thanks dear Normands. That page was usefull. I want to ask, if we set encryption=yes , then what will be the effect on the CPU Load, like what will be the average load. Currently i have a 2.8 GHz systeb with 1.5 GB RAM. I am thinking of shifting about 1000 clients to PPPoE with MPPE 128bit RSA. ...

mudasir

Hi, When creating a profile in PPP, if we set encryption=yes , what type of encryption is done over PPPoE. And is it possible to do 256bit or 128bit encryption with Mikrotik with pppoe or with l2tp. I am looking for some security measures. Please help me out. I want to create a point to poin link be...

mudasir

Hi, I am using simple queues to limit bandwidth on per IP basis. Now what happens is that when any one is downloading a file, their browsing dies. I want to implement QoS on HTTP Traffic so that even if they are downloading their browsing should work at good rate. I tried to use MARK with Mangle usi...

mudasir

Hi, I am recieving an error while using commands through SSH. failure: std failure: timeout (13) This is the error that i am facing. I use a BASH script to generate .RSC file then copy the script to Mikrotik with SCP then import the script, and during the import process this error comes up. What is ...

mudasir

Hi,

Dear right now i am using L7 to block this and it is working great. Just wanted to know how to block VoIP using content filtering. I dont know SIP or any other server's IP.

mudasir

Hi,

How to use Parent-Proxy feature. I have a working squid and i want to set it up as the parent proxy and cache server.

What settings will i need to do on squid and on mikrotik, please let me know

mudasir

Hi, I am using squid as my proxy server, and i want to give full speed to my clients for cache contents. Below is my squid.conf file. Please tell me which TOS DSCP number should i mark with firewall according to this squid.conf. http_port 8080 transparent http_port 80 vport vhost hierarchy_stoplist ...

mudasir

Hi,

Please tell me how to block VoIP with Content Filtering not using L7 Protocols.

mudasir

Hi,

I want to know ho to block complete VoIP traffic. I am using v2.9 and v3.20. Please help me out in blocking complete VoIP traffic using both 2.9 and 3.20.

Looking forward for a positive and quick response.

mudasir

Hi, I am working on a scenario where i will have to give Public IP's to wach user who gets connected with PPPoE. Please tel me how to accomplish this, and what configuration will be required at my Router, i am using v3.20 , and i have about 200 clients. They should be directly connected to internet ...

mudasir

Hi,

I have an IP pool of about 20 public IP's and i have about 200 users and i want to give each user a public ip.

Basically how to break up IP's and give my clients public ip using DHCP. How to accomplish this.

Please help me out.

mudasir

Hi, I am trying to write a script for changing default route. During the day the route should be different and after say 8pm the route should be automatically changed to something else. Like during the day time the route should be 192.168.1.1 and after 8pm the route should change to 192.168.200.1 Pl...

mudasir

Hi,

This will help you out.
http://www.kashifbukhari.com/content/view/15/30/

mudasir

Hi, msundman is right, i just messed it up. Mikrotik is making my Linux skills weak. By the he is right, in linux iptables work on chaing 1. PREROUTING 2. INPUT 3. FORWARD 4. OUTPUT 5. POSTROUTING Rules are read in chains following the orders of chain above. However not same in Mikrotik, rules are r...

mudasir

Hi, I have recently deployed a network of about 700 users on Mikrotik. Mikrotik providing: 1. QoS 2. PPPoE 3. Graphing 4. Some simple Firewall Rules 5. Load Balancing over two WAN Links Specification of PC is as follows total-memory: 774536kB cpu: "Intel(R)" cpu-frequency: 1793MHz CPU Usag...

mudasir

Hi, Material below taken from http://wiki.mikrotik.com/wiki/PCQ_Examples , edited to meet your needs. There are two ways how to make this: using mangle and queue trees, or, using simple queues. 1. Mark all packets with packet-mark all: /ip firewall mangle add chain=prerouting action=mark-packet new-...

mudasir

Hi, I dont have a L6 License, running two L5 on different machines, so i can not use User-Manager. Normally at night more than 50 clients are online, so user-manager will not be of great help to me. If i would want to shift to user-manager, i will simply create a script using linux to add all users ...

mudasir

Hi,

Thanks, i will try and let you all know

mudasir

Hi, I have two DSL connections having same gateway. And i have to IP Networks (10.0.1.0/24 and 10.10.100.0/24). Is it possible that i will make 10.0.1.0/24 use one DSL connection and 10.10.100.0/24 should use the other one. Remember both have same gateway. Mikrotik also acts as PPPoE Client and is d...

mudasir

Hi, Which scenario are you using 1. Internet directly connected to Mikrotik, Mikrotik connected to Proxy with another interface, Mikrotik connected to Local Network 2. Internet directly connected to Proxy, Proxy connected to Mikrotik, Mikrotik connected to Local network. If using Scenario number 1 t...

mudasir

Hi,

He was using dynamic queues, i made him use static queues with burst rate settings to avoid extra usage of bandwidth.

mudasir

Hi, If their account expires then they will not be able to login, and also no query will be answered by the server if they are not logged in. What you can do is write a script which will give STATIC to those ID's and set the whole network of /24 of that IP tp redirect to a specific page. You can do ...

mudasir

Hi,

I am using PPPoE with profiles. Profiles are only used to give different IP's to different package based users.
I have static QUEUE for each IP. For local network using DHCP with static ARP, ARP=reply-only on Local interface.

mudasir

Hi,

Firewall rules are read from top to bottom, same in linux, it does not matter to which chain it belongs.
If the rule at top matches the query it will not go to any other rule to check. So its very important to make your DST-NAT Rule above all.

mudasir

Hi,

The problem usually occurs at peak time, but it some times also occurs at normal time. And i have enabled CPU graphing and i dont see my CPU usage going even near to 90%.

I am using CAT5 to provide internet services to client.

I am not using RADIUS, using simple SECRET feature.

mudasir

Hi,

roc-noc you are right, you should divide users in segments, may be segments of 200 would be enough, again it depends on your needs

mudasir

Hi,

Dear i have been using this feature for sometime now, but this is the first time i am facing issues.

I have send support file to support lets see what do they tell me.

mudasir

Hi,

yes its very true 2.9.5 is more stable then 3.X. I have recently done a setup of about 1000 clients on 2.9.5 and it is running very smooth, and me my self running about 100 clients on 3.20 and believe me its a headache.

mudasir

Hi, Its not that hard. I would say dont even use Perl/PHP. This can be done using simple BASH scripts. I have recently provided a complete web-based user managemenet system for PPPoE to a Local client of about 700 users. Not very difficult. Believe me, just generate SSH key and share it wil your MT ...

mudasir

Hi, Let me add something to it. Since i have upgraded to 3.20 i am unable to use Web-Proxy Feature. There is some sort of bug in it thats for sure. Every thing was working fine till 3.17 then suddenly 3.18 started the problem, then came 3.19 almost the same problem, then 3.20 the problem is at its p...

mudasir

Hi,

I am not using PPPoE on Wifi.

mudasir

Hi, I have used MT with 3000+ PPPoE Sessions. It was working fine. A Local Cable Internet System with almost 15000 Clients I was using it only for PPPoE Authentication purpose not for any other. My setup was Like This INTERNET < -- > LINUX < -- > MT < -- > CLIENTS It was working. I was managing ever...

mudasir

Hi,

This type of problem occurs at peak time. I can not say for sure why, but this is happening.

I dont have any faulty HDD or RAM. I am not using any L7 Protocol Filter.

Please guys help me out.

mudasir

Hi,

Since i upgraded my ROS to version 3.20, whenever i start my proxy, everything gets stuck, no web-browsing no messenger nothing.

Please check is there any sort of bug in proxy in 3.20 because it was working fine uptill veriosn 3.17 and after that i have not been able to use PROXY properly.

mudasir

AOA,

Dear Atif,

why can not you implement to PPPoE or Hotspot, they are the best authentication methods. Where are you running your cable internet system

mudasir

Hi,

Dear it is definitely web-proxy. I was facing the same issue, and when i disbale proxy then every thing seems normal.

mudasir

Hi,

Dear can you tell me how to reset user-manager. I dont want to reset my System as whole, only user-manager.

mudasir

Hi,

I was setting up user-manager and got an error saying

failed to remove customer: unable to open database file

Please tell me how to resolve this.
I am using Level 4 mikrotik 3.20

mudasir

Hi,

Dear Atif,
If you have enabled masquerading then it should work, there must be something wrong in your settings. What are the ARP settings on your interface is it "reply-only" if yes then you will have to set dhcp to add ARP for leases.
By the way where are you from PK, Khi.

mudasir

Hi, I want to ask a simple question. I have made up a combination of devices which i to buy to setup a WISP. I just want to ask can any tell me how much distance can be achieved with this combination. Base Station Side. 1. R52H 802.11a/b/g miniPCI card. 2. RB/433AH. 3. 15dB Omni Directional Antenna....

mudasir

Hi, I implemented PPPoE on my network, and facing allot of problems. The main issue is that users get disconnected after some time normally 30min. Another issue that, when users dials in he/she is disconnected immidiately. At the same time when i dial from the same PC but with different ID it works,...

mudasir

Hi, I am stuck in a small problem. My senario is as follows. Mikrotik with 4NIC's ether1 -- connected to linux machine (linux machine connected to internet). ether2 -- directly connected to internet. (Static Live IP) ether3 -- also directly connected to internet (conntected to modemm, private IP) et...

mudasir

Hi,

Thanks for the info, i read about routerboard its very good.

Can anyone please guide me with some technical details.
As i said, dont know for sure what should i put up at client side, thats why i am asking help from experts. Please Guide me.

mudasir

Hi, I want to start a WISP for about 150 users in an area of about maximum of 5km. Please guide me which equipment should i use to setup base station. One of my friend told me to use an 15db omni antenna with an AMP with a Linksys-G AP. I am totally new to wireless technology, right now running my o...

mudasir

Hi, Thanks for the reply. I dont understand that script completely. Dear Normis, when you say try other kind of e-mail address, i have tried gmail.com, hotmail.com, yahoo.com, live.com. Same error on all e-mail address. I only want a simple way to mail my backup file created on alternate days to my ...

mudasir

Hi,

Dear i am using this SMTP server on other machine, and it does not require any authentication. So there must be something else worng wtih MT.

mudasir

Hi, I am trying to send my Backup file using "/tool e-mail" options, but it is giving me error. Error is "Error sending e-mail: invalid TO address" I am using following command /tool e-mail send to="cool_mudasir@hotmail.com" subject"Testing Mail" body="Th...

mudasir

Hi, My Firewall and Queue rules are as follows /ip firewall mangle add action=mark-packet chain=output comment="" disabled=no dscp=4 dst-port=80 new-packet-mark=cache-out out-interface=ether1 passthrough=no protocol=tcp add action=mark-packet chain=prerouting comment="" disabled=...

mudasir

Hi, I was trying to implement bandwidth restriction in such way that all cache contents will not be restricted at all. I was following http://wiki.mikrotik.com/wiki/Queue_with_Masquerading_and_Internal_Web-Proxy But this is not working for me. When i Create QUEUE TREE all contents are being included...

mudasir

Hi,

Sorry its my mistake, before posting i changed the value from "Unlimited to 15000", i thought it might clear things up here. But still on "Unlimited" also i am getting almost the same type of response

mudasir

Hi, I was using 3.14 then upgraded to 3.15, the cache performance was very good in both version, but as i upgraded to 3.16 cache seems almost not working at all. Due to which my bandwidth consumption has gone high. Graphs clearly shows that cache is not being buildup at all since i have implemented ...

mudasir

AOA,

Dear Zaib bhai,

I think i will be able t modify the script in order for it to work with our environment. However it might take about 1 or 2 week, as i am a bit busy in my own work.

Will mail you as soon as i am done.

mudasir

Hi, I have setup PPPoE Server. Now i am facing some difficulties. Single User ID is able to sign in at multiple places at same time, which is obviously i dont want. I also checked "One Session Per Host" but still same thing. How can i restrict each ID on signle session. looking forward for...

mudasir

Hi, I would like to ask one question. I am thinking to implement PPPoE with User Manager, how ever on my main server i have a L4 License, and in L4 only 10 sessions are allowed with User Manager. What if i setup another machine with L6 license on which i will create all the users and my main GATEWAY...

mudasir

Hi,

I would like to know is there any way that i can shift my license from one PC to another, or from one installation to other.

As my current HDD is making allot of voises and i am afraid that it might die soon. Please let me know any possible way.

Looking forward for a positive reply.

mudasir

Hi, First Set Your Local Interface ARP Parameter to "reply-only" /interface ethernet set ether1 arp=reply-only Replace Ether1 with your interface connected to local network Now create static ARP entries in IP > ARP /ip arp add address=172.16.254.244 mac-address=00:01:02:03:04:05 comment=&q...

mudasir

Hi,

Dear SurferTim,

Thanks allot for your kind help. I am making a script that will change the active users rate-limit if the total number of users online are less then a particular number...

mudasir

Hi, I would like to know, how can i get a list of active user in user-manager. by active user i mean who are currently logged in. i am using PPTP with user-manager. i can get the total number of users from the following code :put ([:len [/tool user-manager user find subscriber=mudasir]]) but i only ...

mudasir

HI,

I have accomplished my task and made a small script.

:foreach i in=[/tool user-manager user find subscriber=mudasir] \
\... do={:if ([/tool user-manager user get $i credit-left] != "4w3d00:00:00") do={/tool user-manager user disable $i }}

mudasir

Hi, Basically i am writing a script (my first one). I have accomplished half of the task :foreach i in=[/tool user-manager user find subscriber=mikrotik] \ do={:put ([/tool user-manager user get $i credit-left])} These lines print the credit-left parameters of all the users of subscriber named MIKRO...

mudasir

Hi,

I want to know, is there any tool on which we can check whether the script that we have made is correct or not.

mudasir

Hi, I can only guide you on ethernet not on wireless... while using ethernet what i am doing right now is giving static LEASE through DHCP to all users, and have statically entered their MAC Addresses in IP > ARP. And have set my ethernet card's ARP property to reply-only. This way only those users ...

mudasir

Hi, I have figured out a way to resolve this issue. I have set the ARP on interface to REPLY-ONLY, which is solving this issue of mine. I still have one last issue that i want to solve. My User Manager is working fine, i have setup Credits also which are working fine, but they only reduce the credit...

mudasir

Hi, Dear Mr. Ashish, Can you please tell me in a bit detail what do you mean by that. Still then i have to masquerade an IP Pool, and if any user enters any IP from the IP Pool which is masqueraded he/she will still be able to use the INTERNET. :( This is a security issue i am facing right now in mi...

mudasir

Hi, I have setup PPTP with User Manager, but i am facing one issue. My PPTP server assings IP's through a Pool. If a user enters any IP Address from that Pool Manually, he/she is able to use the Internet with out the authentication from PPTP. I want to know how will i be able to resolve this issue t...

mudasir

Hi, When i was using 3.11 User Manager was not working, i upgraded to 3.13 and its working great. I have used the Credit option and its working, but this reduces time only when the person logs in. What i want to do is that from the first login exactly after 32 days the account should be removed whet...

mudasir

Hi, Thanks for the help. I have successfully setup User Manager with PPTP, working 100% fine. I have created a user "test" with pass "test". I want to know is there any such option in User Manager that this user will be disabled and deleted after a month or a time period specifie...

mudasir

Hi, I am using ROS 3.11, i have setup PPTP Server and its working fine when i create a Secret in winbox. However i am unable to make it authenticate using User Manager. Can any one please guide me how will i be able to accomplish this task. I need some urgent help. Looking forward for a positive rep...

mudasir

Hi, I am using ROSv3.11 with L4. I want to know, is it possible to define multiple Regex in single Layer 7 Protocol. Like i have created one Layer 7 Protocl Rule in which i have included .mp3 . As far as i use single Regex, it works fine, however as i use more than one Regex in one L7 rule, the rule...

mudasir

Hi,

Dear nz_monkey,

Right now i am using RHEL5 with QMAIL as my main Mail Server. It was just a suggestion.

mudasir

Dont worry...i think someone will help us out.

mudasir

Hi,

Dear QpoX,

I really appreciate your reply, however i dont know anything about scripting in Mikrotik

mudasir

Hi, I have a running local ISP of about 150 clients, using Mk 3.11 as my Server. I am thinking to switch to wireless. The maximum area that is being covered is about 3KM radius. I have no prioir knowledge of wireless, also would like if any one can suggest some basic docs that i can go through to ge...

mudasir

Hi,

I would like to see Mikrotik work as a SMTP Server, that can be a great feature to addup, as it can help out many people. For guys who use multiple ISP's as there uplinks they can setup a SMTP Server on there MK machine, and use this on the client side.

Search found 278 matches