MikroTik

mojiro

It happens that I have the same issue with some old installations that I cannot risk upgrading due to the fact that they are remote installations. My SSTP Server runs on 7.14.1, while those remote clients are using from 6.23 to 6.43.2. The issue is random, and the only permanent solution was to disa...

mojiro

+1

mojiro

I have noticed that when I have a CHR installation, its system-id (software-id replacement) is not visible.
It might be good for security reasons. Is it possible to have another Unique-ID there? Software-ID is a Unique-ID.

mikrotik-chr-softid.png

mojiro

Hi, I have this network where I need to provide different path between these two routers for different things. Dual GW network.jpg I have applied policy-based routing using Mangle rules, but no luck.. The packets where getting always routed by the main routing table. I thing that I just need two man...

mojiro

any suggestion?

mojiro

1) too old version and probably cracked and hacked 2) you cannot create dns based rules in mikrotik, you need a dns for that 3) do you use opendns? 4) there is a possibility that your probably cracked mikrotik is also hacked so it does crazy thinks I strongly advise you to update it to 5.26 or 6.15....

mojiro

I own one CRS125 with 20 ports switched. Using Switch -> FDB's -> Unicast FDB I see all MAC's as dynamic entries from some ports. I can also create static entries, but dynamic entries will continue to fill up this list. Is any way to disable the dynamic entries at all ? Can we disable it for specifi...

mojiro

why don't you create a metarouter+busybox ?

mojiro

Please check this topic for updating Mikrotik's Templates for Cacti.

http://forums.cacti.net/viewtopic.php?f=12&t=51149

mojiro

With the same workaround you can detect your dynamic internet IP and have it available at an address-list

mojiro

well.. there is a way to do it..
create a script that will ping those addresses with ttl=1 and timeout=1 (they have not, to be really pinged)
and then create a firewall rule at output chain for icmp protocol that will add the dst-address to the desired list

mojiro

thanks anyway ...

mojiro

You can change advertised AS-path with routing filters.

Could you please provide me an example?

Using set-bgp-prepend, you add N times your AS to the end of path...
Using set-bgp-prepend-path, you add a path, at the end of the existing...

I need to rebuild the path. Match and replace.

mojiro

Confederation is not a solution, because: a) I do not want it, because I have to make changes on every router. I want to reconfigure only border routers. b) It does not advertises what you really believe... Example AS10 - Network 1 Confederation Router4 AS Table: 10.1.1.0/24 - 10 (3 2 1) 10.1.2.0/24...

mojiro

Hello, I have a problem with two(or more) networks that are using BGP (with lots of AS in every network) and they have to be connected using BGP. Notes: a) I have to use only BGP. b) The following is a simplified example, of course I do not have only six routers or six AS. c) Aggregation and Confede...

mojiro

I think that I understood what you mean... I'll try it.

mojiro

Is it possible to use 2 routerboards to act as a bridge for the rs-232 port over ip? I do not want to use the VPSE software (http://wiki.mikrotik.com/wiki/Serial_Port_Usage#Accessing_a_serial_device_as_if_it_were_physically_connected_to_your_PCs.27_COM_port) ... but a routerboard as an rfc2217 client.

mojiro

hm... interesting problem...

mojiro

At this time, I have a 500 rules fw listing (including, mangle and nat) with no problems on a unique internet gateway. I could easily reach 1500 rules with more complex scenarios than I have now (adding hotspot facility, ppp's, more internet gateways, more local areas), but I could not imagine, wher...

mojiro

any help ?

mojiro

After reading http://forum.mikrotik.com/viewtopic.php?p=146194#p146194 I realized that channel 0 maybe the virtual cd-rom device that carries the windows/mac drivers. I changed the data channel to 1 (as information channel) but with no luck. Now, after "reseting link..." it brings repeated...

mojiro

Hello, yesterday I bought one Huawei E1692 for 3G connection. Although is not listed in supported hardware (is it the same with E169 ?) it have been recognized, but I cannot connect... * I have tried several options, and I have found that channel 0 is for data, and channel 1 for information. * I hav...

mojiro

Looking at capabilities of a R52N card, I noticed that it supports "14". What is that? / interface wireless info print interface-type=Atheros AR5416 chip-info="mac:0x80/0x2, phy:0xd0, a5:0xc0, a2:0x0, eeprom:0x0" pci-info="00:13.0" capabilities=tx-power-control,ack-time...

mojiro

partially fixed, using quagga on my server, connected on my router

http://www.netlinxinc.com/netlinx-blog/ ... g-bgp.html

mojiro

I want to advertise only one host (for anycast dns purposes) and I cannot since it is disallowed!

moufa-bgp-implementation.png

10.0.0.1/32 is NOT only a host, is a network too.
10.0.0.1/24 YES is only a host, not a network.

mojiro

I have noticed that traffic information, exists in many mikrotik "items" like: interfaces, queues, firewall rules, etc. For every usage of traffic/stats there is a different implementation. Am I wrong? While in Simple Queues using the following command, you can get traffic values ... :fore...

mojiro

Is it possible to get pci-info and/or chip-info for a specific wireless interface?

mojiro

Thanks my friend, that was not so obvious.

mojiro

I am trying to setup a local access point using WEP (I now that it is insecure) but I cannot find any WEP option in Wireless Security Profiles. What I have to do?

I am using a RB433AH with Mikrotik 3.20.

mojiro

Since my Internet IP address is dynamic, and I wanted to create firewall rules that act using it, I created the following script: / system script add name=gw-inet policy=test source="/ ping 195.170.0.2 count=1 size=28" / system scheduler add comment="" disabled=no interval=1m nam...

mojiro

Thanks for your help. Since I do not use routing marks I removed the "gateway" part, which detects the internet interface and I added static resolution of the interface like the 2.9.x script does. # Define User Variables :global ddnsuser "xxx" :global ddnspass "xxx" :gl...

mojiro

Hello,

I use the 3.x script from Wiki but when I execute the script from console, I receive the following message:

[xxx@mojiro.awmn] > / system script run xxx.xxx.com 
interrupted
           input does not match any value of value-name
[xxx@mojiro.awmn] >

mojiro

what do you mean `weird` ?

mojiro

Popping this up as one of my RB1000 with BGP/OSPF yesterday ceased service after running a few weeks without problem. CPU was at 100% 2 vlans did not work correctly and BGP does not work (connections up but no incoming traffic). I was lucky to reach it for a reboot. A reboot and then a BGP-resend c...

mojiro

Is it possible to compare the in and out ports of a connection?

ex. if inPort = outPort then ... block/allow/etc

mojiro

Probably right now I cannot remember all the problems we had in past with mikrotik's BGP. In general, the problems had to do with the peers, not with the number of routes.

ex. One peer -> no problems, Second peer -> problems arise...

mojiro

mojiro

As long I use ROS (since 2.8.x), I do not use its BGP implementation. Our network is big (more than 800 private AS'es now) and reveals easily any problem or bug. Most stable is probably cisco and quagga's stable versions. Many people here around, say that mikrotik is not bad with BGP. We (in AWMN) h...

mojiro

MikroTik: Routing the World, Crashing the World Internet - anything you need for small fees!

Guys, I like ROS power!

rolf

mojiro

βάλε κουάγκα

mojiro

When you are editing prepend from console, you are allowed to set it 1...16 When you are editing prepend from winbox, you are allowed to set it 1...2^32 1st mistake, we are allowed to set it up to 2^32 2nd mistake, 255 seems to be the default value, should be 0 or null (=> not set => not used) 3rd m...

mojiro

bgp1.PNG

bgp2.PNG

from Winbox, we are allowed to set prepend up to 2^32... and 255 seems to be the default value

mojiro

What do you want? 1. Security ? -> use firewall filters 2. Invisibility ? -> use mangle ex:. / ip firewall mangle add action=change-ttl chain=prerouting disabled=no new-ttl=increment:1 rule disabled C:\>tracert 10.86.90.129 -d Tracing route to 10.86.90.129 over a maximum of 30 hops 1 <1 ms <1 ms <1 ...

mojiro

mojiro, i mean can we monitor on queue child of the queue tree both by packet and traffic(Byte)? Yes, it is possible. Since they would be in the same graph, both units should have similar numeric size, which is difficult. What I mean? Every packet carries 1500 bytes, so you will have a graph with 1...

mojiro

By the way, can we monitor each queue tree leaf by Traffic? if monitor by packet, it would be difficult for monitoring.

ehm... what do you mean? If you monitor the top level of a tree, then you get all the traffic.

I cannot understand.

mojiro

Bump!

I have updated the template. Check the first post.

mojiro

i would like to note, that winbox is made in a way so it works on wine without problems. sometimes it is working on wine even better than on native

I think that Winbox 2.0.8 is the most compatible version with Wine. The last one does not work properly.

mojiro

I searched in some old work for MSN, and I had found that also uses 7001 port. I do not know why it does.

Also 131.107.111.0/24 and 131.107.112.0/21 are being used to send Application Usage Feedback, so block them.

mojiro

1863 TCP, is primarily used for chat messages
443 TCP, is used for the transfer of the XML file that carries the contact file(backup), extra tabs, advertisement url's
UDP Ports, should be used for video and talk

I do not think that they use UDP for file transfer, it is ridiculous!

mojiro

Seems to me that Mikrotik may need to release a MIB (dictionary) file one of these days.... There are many thinks to be fixed and a lot to be created, but this, I think has totally really low priority. I would appreciate to have a better SNMP GUI than a MIB Dictionary. Anyway... lets see what 3.20 ...

mojiro

maybe I don't understand this thing, but Dude SNMP-walk gives me: iso.org.dod.internet.private.enterprises.mikrotik.mikrotikExperimentalModule.mtXRouterOs.mtxrLicense.mtxrLicVersion.0 1.3.6.1.4.1.14988.1.1.4.4.0 = 3.20 Edit: maybe it's related to the fact that mine is a routerboard? I will look int...

mojiro

do an SNMP-walk on your RouterOS device, and you will find the OID for the Version. Just saw it yesterday, but can't tell you the oid right now .. I did, I rejected known OID's and ... SNMPv2-MIB::sysDescr.0 = STRING: router SNMPv2-MIB::sysObjectID.0 = OID: SNMPv2-SMI::enterprises.14988.1 SNMPv2-MI...

mojiro

Try to run wireshark before sending a file in order to capture all the packets when the transfer will begin. Then find something common in all transfers that identify them and make rules using that. For example, using wireshark I have found how to block the msn advertisements. There are transfered v...

mojiro

What's new in 3.19: *) fixed BGP route selection in routing-test; I uploaded routing-test (3.19) to all backbone routers two days ago. First it looks like everything works fine, but still having issues: - There are two RB100 that loose all routing table entries, twice per day. - Every 4-5 hours the...

mojiro

what about lm-sensors ?

mojiro

I already have Queues in Bits and is named: Mikrotik - Queue - Simple Traffic (bits/sec, Total Bandwidth).

mojiro

Check this

plugin for download/upload routers switches configuration
http://forums.cacti.net/viewtopic.php?p=59773

mojiro

Happy not being alone on that ... Been upgrading all routers to 3.19, but same sh**. My network is in production and I have to be conservative, each test I perform breaks network down, I have to reboot most of the routers, and today users aren't happy at all with the service. I'm getting no BGP mes...

mojiro

Hi all, We have a box here which used to be a Mikrotik x86 box, level 4. However, one of the younger techs used it to test a Linux ISO and formatted the drive. Now when I installed the MT OS is obviously does not find the license. Is there a way to regenerate the key from the Harddrive somehow ? Is...

mojiro

You can do it from the terminal: /system ssh <address> port=<##> user=<name> /system telnet <address> <port> But in winbox you can't even use <address>:<port>. It also has trouble connecting to IPv6 addresses. Yes I know that way, but I would like to be possible via Winbox.

mojiro

Could be possible to add port selection for Telnet/SSH client when it is called from Winbox ?

In addition, "Last Telnet/SSH sessions" would be a plus. Like a drop down menu that "remembers", user's last 10 sessions with their options.

mojiro

Hi Mojiro:

Are these scripts the most current available? What version of Cacti do you recommend for running these scripts on? Will 0.8.7b work correctly?

Thanks,
Ken

Yes, it will run just fine! Let me know if you notice any problems.

mojiro

Is this problem fixed in newer than 2.9.50 version?

Does 2.9.51 has a nice running web-proxy ?

mojiro

MME is not L2. For example Quagga and Batman may communicate, why not MME and Routing?

mojiro

Is it possible to redistribute routes that are fetched from MME/Mesh to BGP/OSPF/RIP and the opposite ?

If yes, how can I achieve it ?

mojiro

Thats because RouterOS is RouterOS, not ProxyOS or SquidOS! I agree but, using that logic, it shouldn't have proxy at all. My notice has to do with poor options in general. Do you want another example ? -> Why TCP/UDP option is missing from OpenVPN ? It is just a line in the configuration file...

mojiro

Since it is/was real Squid, why not to support proxy-mesh and so many other features that squid does ?

Why configuration options are so poor ?

At last give the opportunity to upload squid.conf inside mikrotik

mojiro

torrents routeros-ALL-3.17 @ 98.4% routeros-ALL-4.0beta1 @ 99.6% no seeder??? and lot of leechers??? :? :? :? Report it at ByteMe administators Rolf By the way, what's the extraordinary changes in 4.x version ? Only these: *) added support for MetaROUTERs; *) all test packages are regular ones; or ...

mojiro

try to use snmp write to reboot your router remotely

mojiro

did you know that default installation of routerOS is considered to be unsafe , because there is no password, many processes are listening on every interface etc. thats why you have to configure your router and set up firewall, acl, disable everything you do not need, want to be exposed. Yes thats ...

mojiro

already done, next version has snmp-write configuration, lack of which WAS the bug! an exploit is something that was not intended by the makers of the software, and can be used to do bad things to your device. by your definition, winbox and telnet are also exploits, because by default they are open...

mojiro

another... remote vulnerability

I have written in past a firewall-listing that collects information for incoming connections like ssh, winbox, neighboors, bw test. I couldn't believe that snmp could be tricky. I will rewrite this listing and I will post it. Is it appropriate to be on wiki ?

mojiro

I have created a lot of scripts (there are 46), and it is difficult for me to manage their execution.

Is there a way to create custom CLI menu/commands like "/system reboot" or create a script-shortcut under existing root-menu like "/ip address scriptX" ?

mojiro

Gotcha. Thank you.

I found b.a.t.m.a.n easily enough, but am having a problem relating it to MME.

Any thoughts?

Thanks
George

Anyone tried out MME yet?

although is exactly the same thing (batman & mme) are not connectable...

mojiro

Hi
I have replaced the file but it made no differences.
I can give You access to my Cacti and server, please contact me for details.
MikroTik versions: 2.9.29, 2.9.49, 3.0 (x86 and mips)

you have mail

mojiro

Replace the mikrotik_wireless_interfaces.php with the attached... and tell me if you saw any difference.

I have found some problems with old versions of Mikrotik. What version do you have ?

mojiro

please click "verbose query" at device's page and paste here the debug output

mojiro

You probably done something wrong.

I am sure mikrotik BGP works perfect in V3 final.

I have not migrate to v3.0 yet. I wish it be stable with BGP. I do not prefer having two pc's.

mojiro

Because of the several problems (that differ by mikrotik version...) with BGP,
I forward the traffic of all interfaces via vlans to a linux box with Quagga BGP.

mojiro

try address-lists, they can be dynamic

ex. if tcp.port = 80 then, add host to address-list

mojiro

I am using an your old script. Do you support the turbo wireless rate of 96 and 108? Regards Ros :shock: where are that ? I have seen no option like that until now! What kind of hardware/software do you have ? Is it possible to provide me read access to your mikrotik router that has 96 & 108 mb...

mojiro

Hello, is this kind of work
http://forum.mikrotik.com/viewtopic.php?f=2&t=21189

... is acceptable for license as wiki work ?

mojiro

Mikrotik RouterOS Statistics (Update 02/10/2009) http://forums.cacti.net/viewtopic.php?t=25349 One year after my last post in this forum I come back with lots of graphs that have to do with Mikrotik RouterOs. Many of them are based on older templates of mine. A lot of new work has been based on Mar...

mojiro

Excellent.

What are its country's EIRP Limitations without licence ?

mojiro

would it be possible to create a kind, of debugging utilities for networking and mostly for dynamic routing ? do you have something in mind, like, vtysh> sh ip bgp (which is totaly different from sh>ip route or sh>route ) ? when we have to work with common As , the comparison of these two tables is ...

mojiro

There is a network which is, a mixture of linux & mikrotik routers. Most of mikrotik routers are upper than 2.9.12 and less than 2.9.23. Mostly without routing-test package. Today we noticed this trace inside the network. It was the most tricky off all we have seen... We used to see loops but no...

mojiro

Well, in my opinion the routing test package is much more stable than the normal one. I have done many installations with the former with no major problems so far. Edit: routing filters are working replacement to prefix-lists from which version and after you noticed such good stability on routing-t...

mojiro

Are you planning to build a script were you could see the signal of the client on the mt ap

best regards,

Johan

I working now on getting more information about mikrotik, that has
to do with routing, also this wireless adition is ready for the next update

mojiro

Mojiro, I'd certainly be interested in any comments you might have about this...

check this
http://forum.mikrotik.com//viewtopic.php?t=4164

mojiro

cacti version: cacti-0.8.6f It has been tested only on Linux Slackware 9.1 with Mikrotik 2.8.22 & 2.8.26 I have created some templates for Mikrotik RouterOS. They capture both System and Wireless Status. There is support for: Wireless - Data Rates Wireless - Frequency 802.11a Wireless - Frequen...

mojiro

@jarosoup: can you share any template or any cacti related info with us ?

these days, I'm working on this Lewi

Search found 91 matches