MikroTik

dorijan

hm...anyone?

dorijan

Hi to all, I am trying to setup certificate from Digicert but when I import it I get error on browser err ssl version or cipher mismatch. When I use self signed certificate everything works fine. Maybe I am doing something wrong, I requested cert with my-rtr2. Thank you 2016-09-08 10_30_33-WinBox v6...

dorijan

Hi to all I am trying to auto upgrade to rc version and use new wireless rep package, but automatic download does not work: [admin@AP2.05] /system upgrade> /system upgrade download-all download-beta=yes [admin@AP2.05] /system upgrade> print # SOURCE NAME VERSION STATUS COMPLETED 0 10.40.0.1 routeros...

dorijan

Hi to all, I have in one hotel with about 140 Mikrotik APs and have a problem when client switches from one AP to another. Network works this way: one ethernet cable with VLANs, 1 for managment, 100 for hotspot and 101 for internal wireless network 2 bridges - 1 with wlan interface bridged with vlan...

dorijan

Thank you for info!

dorijan

Does it radiate on the back of the device? H or V polarization? What about other sides?

dorijan

Hi to all,
is there a antenna radiation pattern for wAP? how should it be mounted?
Thank you

dorijan

Thank you, it worked, backup file was 39 mb, maybe you should say something like processing in progress instead of this nasty error message

dorijan

Hi, I have problem that I cannot import old backup MikroTik RouterOS 6.34rc30 (c) 1999-2015 http://www.mikrotik.com/ [admin@xx-core] > dude [admin@xx-core] /dude> print enabled: yes data-directory: disk1/dude [admin@xx-core] /dude> import-db file=disk1/backup-2015.12.29-2.tgz action timed out - try ...

dorijan

Hi...
How do you disable/enable interface to rescan?
Thank you

dorijan

Will usb support ethernet mode for laptops without ethernet ports?

dorijan

Workaround is to put in server profiles ip address as dns name...

dorijan

I think I found a problem...it seems that there is a problem with mikrotik implementation of Avahi (Bonjour) http://en.wikipedia.org/wiki/Avahi_(software)
I will try to send Mikrotik a bug report...

dorijan

Nope, still the same problem...
I will try to create new hotspot from the start...
it seems that mikrotik redirects dns querys to 64872...
and maybe ubuntu has problem resolving from that port...

dorijan

Hi to all, I have some strange issue with hotspot and dns, and it reflect itself only on Iphone and Ubuntu(14.04). On android and windows hotspot works. So, the problem is that client that is connected to hotspot can not resolve its local ip. For example, dns name is hotspot1.local, ping looks like ...

dorijan

Thank you for your replay

mac telnet not working
mac telnet discovery not working
connecting with winbox under wine only works with ip address, not mac address
I just installed iptables, and put
/sbin/iptables -P INPUT ACCEPT
/sbin/iptables -P OUTPUT ACCEPT

but still no luck...

dorijan

Hi to all, I know it is a long shot, but I would like to use Winbox/mac telnet on my chromebook. When i removed chromeOS and installed xUbuntu, everything worked ok (under wine) but I tried the same under Crouton but there it does not work, not even under Wine (winbox starts, but cannot find anythin...

dorijan

Did somebody tried Heartbleed test on Mikrotik https hotspot?
http://filippo.io/Heartbleed/

dorijan

It seems that it was a routeros 5.x bug...
after upgrade to 6.11 it is no longer a issue...
Thank you...

dorijan

But I have switch like that. Other devices on that switch are doing fine. They join and leave multicast group as expected.
this is the switch: http://www.tp-link.com/en/products/deta ... =TL-SG2424...

It seems that Mikrotik joins all multicast groups it can lay hands on

dorijan

Hi to all... I am using Mikrotik as dhcp server for my network where I have iptv streamer and set-top boxes. Problem is that Mikrotik receive all streams and cpu gets to 100%. I dont need Mikrotik to do anything with that streams...how can I leave (dont enter any multicast groups)? Or block this tra...

dorijan

sorry to hijack your post, can you give us some details about size of that attack(bandwidth) and what router(s) did you have? PC or appliance...
thank you...

dorijan

Thank you, I read that post, but that is one solution, but I need some numbers, and was it a pc or appliance...
I will to pm him

dorijan

rextended thank you for your experience, what was magnitude of DDOS attack? and how much bandwidth did you have and how much did bandwidth did the DDOS take? I am also interested in scenario where a LOT of small packets hit Ethernet card, that it would slow down whole mikrotik, would it be possible ...

dorijan

anyone else? real life experience?

dorijan

Do you have a real experience? Appliance or pc? What was the size of attack that you were under?

dorijan

Hi to all... I am interested does anyone have any real life experience with Mikrotik and DDOS and how Mikrotik behave while he is under DDOS. I know Mikrotik is not a silver bullet, but I would like to know what he is capable of. Is it better to get appliance or to use server grade x86 machines? How...

dorijan

Hi to all,
does anyone have price list from http://www.interprojekt.com.pl/, I lost mine, but there was a promo code regarding MUM 2014 Italy...
thank you....

dorijan

anyone? on any topic?

dorijan

Hi to all.. First of all, great MUM Italy :) I have a client that runs a web hosting service, and he is thinking about switching to Mikrotik. Currently I have installed one Mikrotik on a server that serves as a load balancer, and he is satisfied with its performance. He would also like to transfer t...

dorijan

Hi to all...
Is there a way that Mikrotik would implement ngrok? I think it would be great help to all users that administer Mikrotiks around the world...
https://github.com/inconshreveable/ngrok
https://ngrok.com/
Thank you

see you in Venice

dorijan

Hi to all... I have hotspot setup and p2p rules that block all p2p connections, and if detect p2p user, block him for some period of time. 6 ;;; Add p2p IP to the list chain=forward action=add-src-to-address-list p2p=all-p2p address-list=p2p_users address-list-timeout=1d limit=3/1h,5 7 ;;; Drop p2p ...

dorijan

The feature I miss the most is mac telnet and mac discovery on android. If I could have that, all other is not important...I can set ip address and continue to work as I please, but without that, I cannot even connect. Is there a way that someone will compile mac-telnet ( https://github.com/haakonne...

dorijan

Hi to all..
I just want to report a minor bug in 6.6 with SXT 5nD r2
Spectral scan is not working correctly if HT TX and RX chain0 is not selected, and only chain1 is selected...

dorijan

Hi to all.. As far as I know, if you turn on pptp server, it is active on all interfaces and all ip addresses. But I have multiple public addresses, and I would like to pptp be active only on 1 address, and on other to forward GRE and TCP 1723 to some other internal pptp server. How can I do this? I...

dorijan

I have some bugs to report too... 6.0rc12(and maybe earlier versions too) Users behind hotspot, but in IP bindings, type bypassed access to some ip addressed are just forbidden, example: C:\Users\User>ping www.facebook.com Pinging star.c10r.facebook.com [31.13.81.23] with 32 bytes of data: Reply fro...

dorijan

Hm...I tried to upgrade my RB2011UAS-2HnD-IN that I got in MUM in Croatia, with rc12 (dated 13.3.2013, 15:09), but it died after upgrade... I cant ping him, I cant find with mac... however, gigabit switch is working... this are packaged that I put on him: advanced-tools-6.0rc12-mipsbe dhcp-6.0rc12-m...

dorijan

Hi... I have problem with netinstall.. My routerboard 411 failed after trying to upgrade from version 4 to version 5... Now, when I try to load with netistall 4.17, I got this error: trying bootp protocol.... OK Got IP address: 192.168.1.2 resolved mac address DC:0E:A1:E6:8A:ED transfer started .......

dorijan

Hi... I need to make one p2p link, and on one side I have PC with latest rotuer OS, and there I would put R52n-M. On other side I would put 711G-5HnD. Can I use this setup to connect that with 1 antenna on each side with 40 mhz channels (I suppose I cannot use a turbo, but 5 ghz N with 40 mhz channe...

dorijan

will do...thank you

dorijan

any news? I am also interested for this product...

dorijan

Hi to all, I am using pppoe out to connect to my internet provider, and I noticed couple of days ago these messages in my log: 03:37:01 pppoe,ppp,debug,packet 4f b0 3b ee 03:37:01 pppoe,ppp,debug,packet pppoe-out1: sent LCP EchoRep id=0xad 03:37:01 pppoe,ppp,debug,packet <magic 0x4fb03bee> 03:37:01 ...

dorijan

I request it and I dont get it...
It is set like this:

add address=161.53.xx.0/24 comment="" dhcp-option=option1 dns-server=161.53.xx.xx gateway=161.53.xx.x next-server=10.168.x.x ntp-server=161.53.x.x

also, I dont get NTP and I also tried with option 7...

dorijan

Hi... I have trouble getting options from mikrotik dhcp. This is how it is set-up: [adminxx@router.xxx.hr] /ip dhcp-server option> print # NAME CODE VALUE 0 option1 72 161.53.xx.xxx [adminxx@router.xxx.hr] /ip dhcp-server option> I dont get anything from dhcp... I tested it with mikrotik 4.17 and 3....

dorijan

Thank you...now it is much clearer

dorijan

Hi to all.. I succesfuly set up a igmp-proxy like this: [admin@mt-duck] /routing igmp-proxy> interface print Flags: X - disabled, I - inactive, D - dynamic, U - upstream # INTERFACE THRESHOLD 0 U ether1 1 1 wlan1 1 2 all 1 [admin@mt-duck] /routing igmp-proxy> mfc print # GROUP SOURCE INCOMING-INTERF...

dorijan

I would like to thank everyone, I managed to get working nfdump and I think it work very nice...

dorijan

but for this solution with radius manager, all customers must be in radius server I suppose?
Maybe there is some solution with traffic flow and mysql as database?

dorijan

ok..thank you...
I managed to get this working, I setup traffic flow and nTop with netflow, so I got nice graphs with distribution of protocols...
but what if I want to know what IP address connected to ip adress x.x.x.x last night at 3:15? can I do that?

dorijan

Hi to everyone. I would like to setup a syslog deamon on one linux/debian machine where I would like to store all data about traffic that went throught one router in case I need to find out what user did what... Also I would like to avoid setting a proxy so proxylizer is out... Maybe there is some m...

dorijan

Chupaka, that is the answer...Ill do it that way

thank you

dorijan

I meant to connect to some port on mikrotik, and then mikrotik sends magic pocket

dorijan

I know you can send magic packet only broadcast space, not over routed network. So I want to be able to somehow initialize magic packet (maybe firewall rule) over routed network so I dont have to logon to mikrotik and initialize /tool wol mac=xxxxxxx
Maybe port triggering would do it...

dorijan

Hi to all..
I saw there is a way to send a magic packet to some mac address with shell...
I am wondering is there a way that I could send some packet to some port and trigger WOL?

thx to everyone...

dorijan

Hi...
I suppose nobody have magic ball to see when xen will be working on x86, but I was wondering is it even in plans to make this work? thank you

dorijan

I tested with version 3.30 and still not working

(((
mt team pleeease fix this

dorijan

well this is 170$ notebook that I am looking http://cgi.ebay.com/7-White-Netbook-Wifi-Laptop-Notebook-UMPC-Windows-CE_W0QQitemZ220480726989QQcmdZViewItemQQptZUS_Netbooks?hash=item3355ace7cd&_trksid=p4634.c0.m14.l1262#ht_4255wt_940 but here it is impossible to buy something under 200$ (even used)...

dorijan

Hi..
Does anyone know do winbox works on Windows ce 5?
There are some cheap 7" netbooks (based on arm chips) that have Windows ce on it.
Thank you

dorijan

does ospf have some regulation that can increase cost depending on link quality?

dorijan

anybody any ideas? does ospf have some regulation that can increase cost depending on link quality?

dorijan

Hi to all.. I have similar topology on my network like on this picture. rb are routerboards or Mikrotik devices rb1, rb2 and rb3 are routerboards that are connected with fast links in turbo a mode, and there is OSPF there (the actual structure is much bigger and more complex) rb4, rb5 and rb6 are cl...

dorijan

I tested on 3.28 and still there is a problem... /xen add comment="" console-telnet-port=6000 cpu-count=1 disabled=no disk-images=\ hda:centos.img host-shutdown-action=shutdown initrd=centos.initrd.rgz \ kernel=vmlinuz-2.6.18-53.el5xen kernel-cmdline="ro root=/dev/hda1" \ memory=...

dorijan

does anyone have any information about this?

dorijan

thank you for your reply, but I dont see answer to any of my questions

Can windows be xen aware os?

dorijan

Hi to all Is there a way to use secondary disk as storage for image? I have primary disk as CF and secondary is some hard disk. If so how do I access it? I dont see it in /file Maybe I must format it? Maybe on other os as ext2/ext3? Is it possible to put windows 2003 server as guest os? If not that,...

dorijan

so, there is no way that I can have wds with more ap-bridges with nstream?

dorijan

Hi to all.. I am trying to make wds system with nstream, but two cards wont accociate... both cards are ap-bridge, same channel, I know dynamic wds wont work, so I put static when I turn off nstream it connects... I read in the notes The settings here (except for enabling nstreme) are relevant only ...

dorijan

Hi..
I am trying to find some documentation for /interface mesh but I cannot find any...
How do I configure my wireless cards for mesh? I saw in wiki some manual, but that was with wds...
Can I make mesh with rb411? It has only l3 licence?

thank you

dorijan

maybe to get filters from adblock plus...

dorijan

Did anyone implement something like Cisco IronPort that activly block malware, block ads and protect users that are behind firewall?

dorijan

I was wondering did you think then, to make Mikrotik capable of connecting to hamachi network only for administration. I often have my mikrotik boxes behind some other router I cannot touch, so it is difficult to forward ports for administration. I could create pptp connection to some pptp concentra...

dorijan

ok...I found what is wrong
I used global variables, but I did not know you have to declare them again in script...

dorijan

I was using 2.9.x and has this script to add ip address to mangle: /ip firewall mangle remove [/ip firewall mangle find comment=nigdje] :if ([:len [/ip firewall mangle find src-address=$ipa]] > 0) do={:put true} else={/ip firewall mangle add chain=prerouting src-address=$ipa action=mark-connection n...

dorijan

yes...it works...
but the problem is that source of packes for my mail is 192.168.1.1 that is ip address of mikrotik, but not the original source address

dorijan

ops...sorry
this is my src-nat

2 chain=srcnat dst-address=85.114.xx.xx protocol=tcp dst-port=25
action=src-nat to-addresses=192.168.1.2 to-ports=25

dorijan

Hi... I am using mikrotik to forward port 25 to my mail server. 0 chain=dstnat dst-address=85.114.xx.xx protocol=tcp dst-port=25 action=dst-nat to-addresses=192.168.1.2 to-ports=25 and for a while this was ok... But this makes source of mail is mikrotik, 192.168.1.1...and that is bad for me because ...

dorijan

this could be solution for my problem...
I will try it...
Does anyone have any mini pci card with ar5212 and ar5111a and ar2111a that is willing to send me firmware so I can try?

dorijan

Hi to all Maybe someone had similar problem... I got atheros card that is a/b/g... It is card with ar5212 and ar5111a and ar2111a radio (they are both on the card)... But the problem is that Mikrotik only detect is as 801.11b/g card. I tried mailing to mikrotik support, and they answered me that the...

dorijan

Hi..
Is it possible to add pppoe client into bridge?
I have one location where I need this...
thank you...

dorijan

Hi... I dont know if anyone had similar problem but I will try to describe it... When user is connected on hotspot, and he connect to radius, then I got in radius AcctStartTime and AcctStopTime where AcctStopTime is 00.00.0000. 00:00:00 until session timeout does not run out on Mikrotik. I got scrip...

dorijan

Oh, I understand

it is simple and this way I can make more complex decisions..

dorijan

so, I can put in my sql in radreply user2 Called-StationID = hotspot1 and he could connect only to hotspot1?

dorijan

Hi to all I have one problem that I still dont know how to resolve so maybe someone can help me and have idea... I have one radius server with mysql server on it, and will have deployed multiple hotspot mikrotiks... So, I want to be able to specify if user will have rights to connect to use some spe...

dorijan

mangle: Flags: X - disabled, I - invalid, D - dynamic 1 ;;; user xxxxx chain=prerouting src-address=xxx.x.xx.xx action=mark-connection new-connection-mark=sve_osim_p2p passthrough=no 2 ;;; user xxxyyy chain=prerouting src-address=yyy.yyy.yy.yy action=mark-connection new-connection-mark=xstandard pa...

dorijan

/ip firewall mangle

dorijan

Hi... I am trying to redirect http (port 80) to another address if ip that the traffic is coming from is not in the mangle list... How can I do this? I am using firewall rules in way that, if user is in mangle, he has access to internet, and he is being natted, and if his ip address is not in mangle...

dorijan

ok....what about sip?
does anyone know what ports to prioritize and what is simpiest way to do it?
thank you

dorijan

Is there any script that would prioritize SIP and skype traffic?

thank you...

dorijan

I tried but failed.. Do know where can I find how to do it? This is what I did: I got domaina that is called xxx so I set manual dns entry for xxx.local and name.xxx.local and xxx all to point to ip adress of that router... but I cannot join So I also tried this http://www.windowsnetworking.com/arti...

dorijan

Hi! I have one mt and 5 ethernet cards in it with 5 networks that are 192.168.10.x/24 and so on. In one I have Windows active directory server and I would like users to be able to connect to domanin. I know this is routerd network, and broadcasts are not going throught, and I would like to avoid bri...

dorijan

And one more thing
I think there is a memory leak in this beta
As for now, dude is 200 mb big in memory, yesterday it was 800 and I had to reboot the computer since it killed couple of my services and I cold not restart them...

dorijan

nice idea...
but eveytime I start I got Just-in-time debugging
Please select a debugger
And if I stop it enoght, I get the main screen
and then if I stop it I got more of debugging :(

dorijan

Hi!

I would like to have ability to limit read users to log with winbox with username and password, or to have two different user and password sets for read and full users
thx...

dorijan

I really like the simplicty of mikrotik, but I really would like support for more wireless cards...and this would be great thing then...

dorijan

Hi! I have problem with services for each node... If I go to device settings and then to services I see lets say 3 services: ping, mikrotik and router If I click on general I see there that there are 6 services up. This is not the problem until the services are down. If this device fails, I see unde...

dorijan

afaik, only old 5212 cards can go to 2.5-2.7 gh band...
I have couple of old dlink g520 that can do that...
and ralink also can, but ralink is not supported in mikrotik...

dorijan

I think you can do this in 2.9.x withous any script
you just define in connect list minimal signal strenght...

dorijan

I wish there were more features. such as - support for various wireless cards, 70% of available cards here in this part of the world doesnt match with routeros, such as ralink chips who are very common and cheap RouterOS == Atheros, get used to it. It's been made pretty clear on the forums that the...

dorijan

freeradius_1.1.1-0_i386.deb

how can I see what I got back...

this is what I got on freeradius -x

Sending Access-Accept of id 28 to 161.53.xx.xx
Framed-Route = "xxxxxxx@xxx.com"
Configuration-Token = "student"
Connect-Info = "NONE"

dorijan

I am using hotspot with freeradius server, and I got problem when I try to authenticate. Here is what I got on log in mikrotik 13:36:41 hotspot,error,info,debug xxxx@xxx.com (10.1.2.254): configuration error: login failed: failed to add route <xxxx@xxx.com>: bad prefix On radius server I see that au...

dorijan

It would be great if dude could discover names of machines through dhcp leases...now on most machines i got only that they are there, but most of them have firewall so I cannot get dns names...
thx...

dorijan

now, when you got only ip adresses it is quite difficult to see real path...it would be nice if traceroute within dude would make dns lookup...
thx..

dorijan

in beta6 everything was ok...
I figured out, if you press on the link, for that router data will update...

dorijan

on links in 2.0beta 7...

dorijan

just realized, dont need it anyome, since dude can run as service..
bye :)

dorijan

I have problem runing dude as service since beta4...
anyone else has this problem?

dorijan

same problem here, stil didnt found solution...
client is windows xp sp2, firewall disabled...
beta3 worked just fine...

dorijan

Hi...
I have big speed drops when using nstream and setting manualy data rates.
I didnt touch basic rates (they were on 1/6) but just disabled 54 and 48 on supported data rates, and speed dropped from 12 mbits to 6 mbits...
If you could take a look at it, it woudl be great..
thx

dorijan

Finaly, export map is working, but there are speeds missing on links...
when I export from local client, everything is ok (speeds are there)

p.s. I am running dude as a service...

dorijan

in 2.0 beta2...
I mean for automatic map export...
Still cannot find file where it is exported...

thanks :)

dorijan

for some reason, now, showing map through web is working :)

dorijan

-exported png file still dont exist, or I cannot find it? -if logged in through web, when showing map picture, speed links dont exist... 1. Tool-Export on the map works (PNG/PDF) 2. Could you be more specific, which links you want to see or you don't see? 1) under local map - settings - export - pn...

dorijan

-exported png file still dont exist, or I cannot find it?
-if logged in through web, when showing map picture, speed links dont exist...

dorijan

web server: ok we see what you mean map export: currently maps are saved in directory where dude is installed link refresh speed: currently no way to change (10 seconds) memory leak: send us your export file to support@mikrotik.com to help us resolve this issue I could not found that file...? maybe...

dorijan

hm...memory leak?

on my server dude is currently using 740 mb of memory?
after running for 10 minutes...

dorijan

-web server is not working...I cannot log in?
-local map export (new feature) - where does it save exported file?
-how to setup speed of refreshing speed of links?

thx...
great product :)

dorijan

I have similar problem...but the card on laptop is intel b-card...

dorijan

I think it would be great thing if you could make mikrotik bootable from usb sticks...easy to replace and wery handy...

dorijan

afaik, this is similar to request to automaticly export map picture every x minutes....
I would like this too :)

dorijan

great, it is working now.. but the problem is if I set interval to 600s, the result is not good like this: http://ksetovci.kset.org/~dorijan/zagorka%20wireless%20signal.png this is part where view is set to day, and as you can see, where interval was set to 30s everything is ok, but the rest is not ...

dorijan

still not fixed...
(rc4 installed)

dorijan

I tried drawing signal strength with charts, under data source I set snmp oid, and set right oid. When I hit test, I get lets say -64, so that part is working ok...
But I cannot get graph. I tried setting scale to -1.000 but it did not help...
Please fix this :)

thx

dorijan

jup...same here...

I set it up with srvany and when I reset service everything is back ok but after a while it hangs up again...

dorijan

well...i am using freeradius....
but how to send reqest to radius server? if only I got is Ip adress of some user...I know that hotspot can manage that, but this is not a hotspot...maybe something with firewall?

dorijan

Is there any way to automaticly create predefined simple queue per ip from radius(just like it got from pptp or pppoe)
thx..

dorijan

or charting signal strengts for some client?

dorijan

sometimes if you change configuration on some routers, ip adreses change..
it would be helpful if you could add that button, that would recheck all ip adreses (like first time on discovery)
thx...

dorijan

There are some situanions that both routers are accessiable, both adapters are up, but there is no traffic between them, (when ospf go crazy) so it would be nice if that links would be lets say blue...(user defined low bandwith treshold)...
thx

dorijan

Is there any way to limit users if they have signal level lets say -85 to forbid to connect?
maybe some script?

dorijan

Similar configuration here, 5123 and Edimax 7206 and works ok...
in B mode...

dorijan

And if you dont drop anything? Do you have problem then?

dorijan

if it is a standard hardware modem, that gets its real irq and serial port, then it will work, but if it is a winmodem, that needs drivers to work under windows, then it will not work...

dorijan

ok...if somebody would need this, this is what you have to do

xx:xx:xx:xx:xx Auth-Type == Accept

dorijan

All I want is mac filtering from my radius... I just set up mysql and freeradius, and all I want is that if that user exist in mysql that user can connect so this is how now it looks like rad_recv: Access-Request packet from host 10.x.x.x:1024, id=54, length=86 Service-Type = Framed-User NAS-Port-Id...

dorijan

Yes variable , you can make it , look what i do to make it work with me in radius : i insert the following lines into the file /usr/local/etc/raddb/users DEFAULT Auth-Type = Local Exec-Program-Wait = "/usr/local/bin/mtauth %{User-Name} %{Calling-Station- Id}" and i wrote that perl script ...

dorijan

Hm...didnt know that wrt can lisen and transmit on both antennas simultaneouly? How does it do it, if it has a diversity chip on exit...didnt know that divercity chip can act as a spliter...

dorijan

how? what variable do you insert?

this is how my label looks like:

Rx: [Interface.InBitRate]
Tx: [Interface.OutBitRate]

I tried inserting [Interface.MediaOid] but dont know how to set what mediaoid shold be shown

dorijan

I know, but it would be nice if you could show signal streng in lines, beside rx and tx value...
(you dont have option to insert that as a variable)

dorijan

it would be great if you could show wireless registration table for interfaces, or subnets

dorijan

yes....here is also net-smnp package installed on freebsd host..
I am sending you a ethereal capture file

dorijan

how can I help you? would dude web access help you? or I can snmp redirect port 161 to some of this devices?

dorijan

also, in beta 15 everything was working ok...

dorijan

snmp is not detecting intefaces on some non mikrotik devices, and on others that are detected, it shows 0 bps/0 bps all the time...

dorijan

It would be nice if you could implement this option, simetimes, when you have picture in your background, and you want to put many machines where they are, it got all messed up...
this way, when you zoom in, you could get more routers near, and also see what is going on there....

dorijan

Is there any way to authentificate users for hotspot if I have all my users in LDAP database?

dorijan

weeee
thx...
its working...

dorijan

hm...stil not working... here it is / ip firewall filter add chain=forward p2p=all-p2p action=drop comment="p2p" disabled=no add chain=forward connection-state=established action=accept \ comment="uspostavljene konekcije..." disabled=no add chain=forward protocol=tcp dst-port=53 ...

dorijan

Hi... I have problem that I dont know how to solve... I got some rules on m firewall, and on the end, firewall rule that drops all tcp connections that are not allowed I enabled port 21, witch is a ftp port, and users can connect to desired ftp server, but cannot start transfer... I suppose reason i...

dorijan

Hi to all.... Currently, I have to set one firewall where 2 ethernet cards are bridged and configuration is like this: main router-------eth1:Mikrotik:eth2-----switch with clients All I want is to allow ssh, pop3 and web proxy (redirect to web proxy is working)... Here is part of my firewall script ...

dorijan

Hi..
I noticed one problem with router that incoming and outgoing interface is not the same (sometimes ospfd select different ways to get to one router) than ping is ok, but mikrotik service is down, and snmp data is not collected at all...so it would be great if you could tak a look at that

dorijan

Do you know when new release will be released?

dorijan

yes...from web interface
weeee :)

dorijan

user account can change everything...
tried on changing the name of one computer...
version is beta12

dorijan

Is it just me that I dont understand, but why do you use wds? It is cheaper, but it has so many problems... I mean, right way to do things is to have one card in ap mode, and other card with another directional antenna for p2p link...and everything is working much better than in wds mode... just my ...

dorijan

I made guest account, and set it as read...
but despite that, that user can change things...
please fix that :)
thank you

despite great software :)

dorijan

yes...this would be great...
especialy until web server will work :)

dorijan

as far as I know, no...
I asked same thing, about 1 year ago, but answer was no...

dorijan

Since OSPFD does not have prefix and sufix lists, and any kind of filtering abilities, it would be great if you could implement possibility to disable or enable redistribute of default route on selected interface....

dorijan

Now, it is working great :)

One more thing, that I would be greatfull if you could implement:

If I set Probe interval to 60 s
and Probe timeout to 300s
that I dont get notification if service is down within 300s...
thx...

dorijan

when page is refreshing, hole page is not refreshed, and the picture soon become unreadable...

dorijan

hm...
a A ping-based netwatch is just opposite what I need...
it will send mail if only one ping is missing, but I want to send mail if none of 5 pings in 5 mins didnt go throu...

dorijan

Is there a way to lets say ping one router, and if ping is not responding to pings for lets say 5 minutes, to send a mail, and when it is up for 5 minutes to send mail that it is up again... Also one suggestion...it would be great if you could define a gps position for every router, and then Dude co...

dorijan

Black list is not working, or I dont know how to use it...If I set blacklist and then discover, nothing is dicovered... Also, when discovering, some devices are discovered, despite they are not there...Simple example in subnet 192.168.254.0/30 it detects 2 routers (192.168.254.1 and 192.168.254.2) a...

dorijan

I dont know what kind of amps you will be using, but I dont think they are gonna work with turbo mode...Also I am a little sceptical about nstream with amps but I gues it should work...
Well...good luck :)

dorijan

simplier is to make pcq type, and then under simple que from 0/0 to 0/0 type pcq inteface what you want...and you have it much simplier :)

dorijan

Possibly a radar...and you cant do a thing about it :(

dorijan

This would be a great feature, because sometimes ping is not there and in next ping session ping is there, and I got 2 sms on my mobile phone how some point is down and then it is up again... This is a great solution in the Whatsup...there are 3 states... Green, everything is ok, yellow, misses ping...

dorijan

I have problem on couple of my routers that ospf just die...
Is there any way of restarting ospfd without restarting router?
I am also trying to write script that would detect this and then reset it...Does anyone have idea how to detect that?

dorijan

butche I like that idea I remember before microsoft took over visio that visio use to that feature and would practically draw out the entire network for you. Was a very nice feature that was sorely missed in later versions of Visio. yes....I was searching for tool that would do just that bzt I didn...

dorijan

I have problem on couple of my routers that ospf just die...
Is there any way of restarting ospfd without restarting router?
I am also trying to write script that would detect this and then reset it...Does anyone have idea how to detect that?

dorijan

You dont need diversity in mikrotik...
Diversity is used in house aps to compensate for microposition...
You are not supposed to have to omni antennas and have diversity betwen them...

dorijan

hotspot is your answer...
you can set hotspot page without using hotspot features...

dorijan

how big is disk?
try setting disk to lba/normal mode

dorijan

:)
I mean hardware AP, not made with atheros/prism card...:)

dorijan

From my point of view wpa is useless...
On every point, I have real AP for ap and mikrotik for p2p links and routing...

dorijan

Does mikrotik have suport for sip? As far as I have seen, it has only support for voip...

dorijan

I think he is using normal wireless driver (not legacy) but not using nstreame option...
I am looking forward to test this driver...but Im quite bussy this days...

dorijan

> How that cheap cards work PERFECT under windows ?? easy - you have several mile link with mikrotik, yeah? And do you have that same link with windows or do you "test" the same cards within living room where you have several TENS of decibels in signal strength ? I think that windows driv...

dorijan

mp3turbo2: how can it be hardware issue when they are working perfectly under wireless-legacy drivers and under windows, and with new drivers they are not working????

bixi: I use 2.8.16 but make sure you select band 2.4gh-g BEFORE you enable it!!!

dorijan

I use wireless-legacy, and it works ok, both 5212 and 5213....I use dlink, planet and trust cards...but with new drivers they just dont work...tried sending support files to MT, sending messages on forum and to them directly, they said it is working, but it didnt work...so I give up complaining and ...

dorijan

Is there any calculator for ack time? most of my links are below 5 km, so I am using indoors settings...Shoud I use otherwise?

dorijan

I suppose you can bridge adapters and then add 2 adresses to that bridge

dorijan

this seams to be a problem that I mention here on forum a month before, about non legacy drivers for atheros 5213....
I am still with 2.8.16 with legacy wireless...

dorijan

weee
future is bright :)

dorijan

I think there is a complete utility for linux that solved all this issues for many motherboards and chipsets...

dorijan

Didnt detect such problem

dorijan

me to..
one server is duron(with defect mmx part-does not show correctly pictures in windows), other celeron 300-500 (lx and bx)
:)

dorijan

set wlan1 interface-type=

dorijan

this is just not working properly... I give up on new drivers for 5213 and going back to legacy drivers... It has some issues with motherboards, pci or timings, I cannot explain it... I tested on 3 motherboards, exchanged every slot but nothing... didnt test on routerboards because I dont use them.....

dorijan

ok...will do more testing...

dorijan

ok...done some more testing and I think I found the problem... when there is only one cards (5213 or 5212) it appears that it is working properly (will do some additional tests) so when both cards, 5212 and 5213 in one computer (despite if they are enabled or disabled) only 5212 is working correctly...

dorijan

Thats all ok, but, with this drivers they dont work even indoors...this is 5 meters distance...
All I want to know does anyone have any expirience with 5213 cards and new drivers...

dorijan

Does anyone have any expirience with atheros 5213 and new drivers for mikrotik? I have problem that with new drivers power output from cards are extreamly weak (up to -30 db compared to 5212 cards) Tested several different bradns but without success.. With legacy-drivers everything is ok... Here it ...

dorijan

I got it and have no problem...

dorijan

that is all ok, but the problem I have is that I allways have limited space...max one box...

dorijan

you will never have full 11 mbit...
in ideal condition you will have about 6 mbit on 802.11
so if you take out real condition you will have bout 3 mbit...

dorijan

wery hard, because you dont even know maximum throuput on your AP...it depends on other networks and garbage in the air...
the only solution I discovered to work is to use pcq queing...

dorijan

but there are other things I would like to have incorporated into my mikrotik: 1) more drivers for wireless cards: for example new ralink cards are working perfectly with linux as such 2) ftp and http server....ftp is on it, but it doesnt even support ls -la http server I managed to make crippleing ...

dorijan

all you have to do is put wireless-legacy package in ftp and reset router..

dorijan

Today I had 2 hangups of one mikrotik, that has been recently upgraded to 2.8.16...and watchdog didnt reset it...
Usualy, we didnt have that kind of problem with it, watchdog would do its thingie, and it was working all ok again...

Search found 244 matches