Community discussions

Search found 422 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 9
by aacable
Tue Jul 23, 2019 7:52 am
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 33357

Re: v6.45.2 [stable] is released!

[ Changes in this release: *) bonding - fixed bonding running status after reboot when using other bonds as slave interfaces (introduced in v6.45); *) interface - fixed missing PWR-LINE section on PL7411-2nD and PL6411-2nD (introduced v6.44); *) ipsec - allow peer argument only for "encrypt" polici...
by aacable
Mon Jun 24, 2019 7:15 am
Forum: General
Topic: how to bypass radius accounting with FastTrack !?
Replies: 1
Views: 198

Re: how to bypass radius accounting with FastTrack !?

I am not sure if FASTTRACK can help you as I have never tested it. Just to share another idea , At my friend ISP he had 10 TB of media sharing servers which users uses to download different sharing data which was also counted in users monthly internet traffic report. therefore we used intervlan rout...
by aacable
Wed Apr 10, 2019 12:02 pm
Forum: Scripting
Topic: Get single IP from interface which have multiple IP' assigned [SOLVED]
Replies: 3
Views: 339

Re: Get single IP from interface which have multiple IP' assigned [SOLVED]

whole issue is, that your [find interface="xxx"] returns an array of interfaces.. All you need to do is pick one /ip address get [:pick [find interface="ether6"] 0] address] or if you want to test it in console, simply :put [/ip address get [:pick [find interface="ether6"] 0] address]] :put [/ip ad...
by aacable
Wed Apr 10, 2019 12:01 pm
Forum: Scripting
Topic: Where can I find the IP address ...
Replies: 30
Views: 8854

Re: Where can I find the IP address ...

Basic way of getting the an interface's IP address is just to use this:

ros code

:put [/ip address get [:pick [/ip address find interface="Wan"] 0] address][/code]
Replace "Wan" with whatever the interface's name is.
This saved my day as well. Thank you
by aacable
Wed Apr 10, 2019 10:31 am
Forum: Scripting
Topic: Get single IP from interface which have multiple IP' assigned [SOLVED]
Replies: 3
Views: 339

Get single IP from interface which have multiple IP' assigned [SOLVED]

I have a interface which have multiple IP's assigned. like
ether6: 1.1.1.1
ether6: 2.1.1.1

How can I get all IPs in single variable. like VAR="1.1.1.1 2.1.1.1" or if possible just single ip ?
 /ip address get [find interface="ether6"] address
& I get this error
invalid internal item number
by aacable
Tue Jul 10, 2018 6:05 pm
Forum: Scripting
Topic: get full name from ppp active users
Replies: 0
Views: 272

get full name from ppp active users

Scenario: When I issue /ppp active print Result: 1 R USER1... pppoe 60:E3:27:FE:F8:77 110.38.229.206 3h38m23s 2 R USER2 pppoe 18:D6:C7:FB:52:CF 110.38.229.205 3h38m23s 3 USER3 pppoe 18:D6:C7:FB:52:CF 110.38.229.205 3h38m23s 1) For some users (long name) it shows dots (as showed in USER1 example abov...
by aacable
Sat May 12, 2018 12:27 pm
Forum: General
Topic: mikrotik - pppoe client delay connection [SOLVED]
Replies: 9
Views: 2262

Re: mikrotik - pppoe client delay connection

Solved. When I lower the RADIUS TIMEOUT value from 3000 ms to 500-700 ms and the problem got solved. The user is now able to connect instantly or within 5 seconds. I used this value at almost all other systems but this particular one, radius timeout value works only if under 700 ms no matter ier is ...
by aacable
Sun Apr 15, 2018 10:49 am
Forum: General
Topic: mikrotik - pppoe client delay connection [SOLVED]
Replies: 9
Views: 2262

Re: mikrotik - pppoe client delay connection

I tried every setting possible but still having problem that some times users connect instantly, but most of times it gets stucks on dialing for long time and then connect. Ok yesterday I tried following. create pppoe server on another port on CCR, connect test client pc directly to this port. Ran t...
by aacable
Fri Apr 13, 2018 7:53 am
Forum: General
Topic: mikrotik - pppoe client delay connection [SOLVED]
Replies: 9
Views: 2262

Re: mikrotik - pppoe client delay connection

@blajah
this RB is in production with 2000 active users, therefore running torch and look for specific user is quite hard.

@Anumrak
PAP/CHAP are selected.
Compression is on DEFAULT. I will disable it.

I will change compression setting and will let u know.
by aacable
Sun Apr 08, 2018 8:38 pm
Forum: General
Topic: mikrotik - pppoe client delay connection [SOLVED]
Replies: 9
Views: 2262

Re: mikrotik - pppoe client delay connection

I got it form your first post. Like i said, it could be some broadcast limit. And for reconnection, maybe you have old sessions still up? I dont see any error in mikrotik. infact I feel that mikrotik is not receiving the PADI requests , since its live network with around 2k users so i cannot enable...
by aacable
Sun Apr 08, 2018 12:03 pm
Forum: General
Topic: mikrotik - pppoe client delay connection [SOLVED]
Replies: 9
Views: 2262

Re: mikrotik - pppoe client delay connection

Mikrotik CCR 1036 - V 6.41.3
There is no Filter/NAT/Mangle rule. All users gets public ip and route to upstream ISP.
Problem is most times when users dial/redial they gets long pause on dialing seems they are unable to find the PPPoE Server.
by aacable
Sat Apr 07, 2018 9:46 am
Forum: Beginner Basics
Topic: High CPU usage.
Replies: 12
Views: 5450

Re: High CPU usage.

in one case I found a script that was running continuously caused high cpu usage.
by aacable
Sat Apr 07, 2018 9:40 am
Forum: General
Topic: Problem critical PPPoE server (ppp/active connections) High CPU!!!
Replies: 3
Views: 502

Re: Problem critical PPPoE server (ppp/active connections) High CPU!!!

Hi, We have a server pppoe + radius (dma manager) with 2300 active connections. The problem is when 30~50 fail to ppp/active connection ( fail electric in sector, reboot OLT device ) then CPU usage of server high to 60%~80% and ppp/active connections fall to 500!! This is a critical problem! please...
by aacable
Wed Apr 04, 2018 9:48 am
Forum: General
Topic: mikrotik - pppoe client delay connection [SOLVED]
Replies: 9
Views: 2262

mikrotik - pppoe client delay connection [SOLVED]

I have one Mikrotik Routerboard with 6.41.3 firmware. VLAN for multiple areas are configured in Cisco 3560 Gigabit switches and TRUNK is connected with CCR. PPPoE Server with proper settings is configured for each vlan. RB resources are OK, no heating , CPU usage 3 to 4 % max , PING from users PC (a...
by aacable
Thu Mar 29, 2018 7:43 am
Forum: General
Topic: High CPU on CCR1072 every pppoe-client go down
Replies: 13
Views: 1507

Re: High CPU on CCR1072 every pppoe-client go down

I agree, It has sense, I don't think that 5 nat entrys can be the problem. Then there is not configuration solution since connection tracking can not be removed (in my case), and only Mikotik can improve this problem, it I think. Sorry for being unclear. The issue is related to NAT in terms that if...
by aacable
Tue Mar 27, 2018 1:58 pm
Forum: General
Topic: High CPU on CCR1072 every pppoe-client go down
Replies: 13
Views: 1507

Re: High CPU on CCR1072 every pppoe-client go down

Only If you have high number of ppp clients & you are doing NATTING as well, then I would recommend you to do NATTING on different router. Example: Mark connection for private ip users, and then route them to 2nd router which will do the NATTING. also add reverse route in 2nd router so that it can s...
by aacable
Sat Mar 03, 2018 6:18 pm
Forum: Scripting
Topic: Script to monitor temperature
Replies: 5
Views: 2725

Re: Script to monitor temperature

Seems Good. I would like to provide some feedback on the script. Let's say what if we schedule it to run every 5 minutes? It will run, & do following - Check temperature, compare it with threshold value , if condition true, LOG & Send SMS Alert. Now after 5 minutes , the script executes again, & do ...
by aacable
Mon Feb 12, 2018 10:29 am
Forum: Scripting
Topic: 6 wan pcc way script #help
Replies: 1
Views: 402

Re: 6 wan pcc way script #help

seems ok, are you having any issue in it ? describe details.
by aacable
Mon Feb 12, 2018 10:24 am
Forum: Scripting
Topic: Script to especific user
Replies: 1
Views: 350

Re: Script to especific user

although its a strange requirement :) but any way, try below ... # Set variable with account name example ADMIN that is required for check :local MYUSER "admin"; # Print Script ... :log warning "Start Check Login for $MYUSER user ..."; # Get count number to see if MYUSER have open session :local i [...
by aacable
Tue Jan 30, 2018 7:49 pm
Forum: General
Topic: Blocking UDP attack in Mikrotik not working
Replies: 14
Views: 1748

Re: Blocking UDP attack in Mikrotik not working

In very old days I faced similar issue, & I have one Linux base Transparent Bridge which was placed between the ISA Server & the Clients for MAC - IP filtering. With some tuning, I placed it between ISA & Internet & it filtered all unnecessary ports / flooding & block it from reaching ISA which save...
by aacable
Wed Jan 17, 2018 1:49 pm
Forum: General
Topic: Freeradius Restrict User Auth Request Based on VLAN
Replies: 3
Views: 372

Re: Freeradius Restrict User Auth Request Based on VLAN

Ok I was able to sort it. if ("%{sql: select vlanid from users where username = '%{User-Name}'}" != "%{NAS-Port-Id}") { update reply { Reply-Message = 'You are not allowed to connect from this VLAN' } update control { Auth-Type := "Reject" } } It's added under Authorized Section. Will write in detai...
by aacable
Wed Jan 17, 2018 1:00 pm
Forum: General
Topic: Freeradius Restrict User Auth Request Based on VLAN
Replies: 3
Views: 372

Re: Freeradius Restrict User Auth Request Based on VLAN

Ok I added this in RADCHECK table. NAS-Port-Id == VLAN2 & it seems to be working fine. Is there any way I can customized the radreply if user gets rejected dueto incorrect VLAN (for log purposes) ------------------------ Example of one module I have that checks for Invalid MAC. checkval{ reject = 1 ...
by aacable
Wed Jan 17, 2018 11:52 am
Forum: General
Topic: Freeradius Restrict User Auth Request Based on VLAN
Replies: 3
Views: 372

Freeradius Restrict User Auth Request Based on VLAN

Scenario: We have One Mikrotik CCR as NAS (pppoe) and Freeradius as billing. Multiple area's are connect to Mikrotik via Cisco switch & VLAN are configured for each port. We have few reseller/frenchise managers, like Dealer-A, Dealer-B. They can create there own users in freeradius using frontend GU...
by aacable
Sat Jan 13, 2018 3:20 pm
Forum: General
Topic: High CPU load when PPPoE sessions disconnects
Replies: 51
Views: 7894

Re: High CPU load when PPPoE sessions disconnects

@cicserver

I would suggest to mark private ip series and then make a route so they should ROUTE to 2nd router, where NAT will happen. you may need to create reverse route on 2nd router as well so communications between subnet works fine,
by aacable
Sat Jan 13, 2018 8:19 am
Forum: General
Topic: countless / free traffic from a network for PPPoE users
Replies: 5
Views: 914

Re: countless / free traffic from a network for PPPoE users

Hi friends I have some download servers at my office .I want it when my users download or upload from that servers , MikroTik don't calculate traffic from it . it mean my users have free traffic to that servers . How can be do that ? is there anyway to do it from mikrotik ? My accounting is Freerad...
by aacable
Tue Nov 21, 2017 6:44 am
Forum: General
Topic: Monthly Stats for WAN interface only?
Replies: 4
Views: 629

Re: Monthly Stats for WAN interface only?

OR you can use scripting method as well to acquire data usage of particular wan interface using filter rules approach. you can save the data in txt file in mikrotik and configure it to email on every 1st of month and then reset counters.
by aacable
Tue Nov 21, 2017 6:26 am
Forum: Scripting
Topic: Combining two Internet connections to increase the speed
Replies: 2
Views: 3629

Re: Combining two Internet connections to increase the speed

Hey guys I have 2 internet connections the first is 4 MB and the second is 2MB I wanna merge them to be 6 MB Technically you cannot MERGE them without the ISP support. All you can do is to LOAD balance your requests between those 2 internet links using PCC technique in mikrotik. Mikrotik Wiki & Goo...
by aacable
Tue Nov 21, 2017 6:23 am
Forum: Scripting
Topic: Disabling IP addresses via Script
Replies: 1
Views: 309

Re: Disabling IP addresses via Script

If you would have posted the reason why you need it would much easier to answer you accordingly. any way try this.just example /ip address :if ([get [find comment="ether1_wan_ip_1"] disabled] = false) do={ disable [find comment="ether1_wan_ip_1"] enable [find comment="ether1_wan_ip_2"] } else={ :if ...
by aacable
Thu Nov 16, 2017 8:41 am
Forum: General
Topic: SNMP with Dma Radius Manager
Replies: 6
Views: 1286

Re: SNMP with Dma Radius Manager

The SNMP feature in radiusmanager hasn't worked since Ubiquiti 5.5.x firmware.

I contacted Victor to see if he could work on it but unfortunately, he said he did not have time to fix it so who knows if it'll ever work again.
how I can contact victor ?
Viktor:
support@dmasoftlab.com
by aacable
Tue Nov 14, 2017 6:50 am
Forum: General
Topic: How to prevent more than 1 authentication when using RADIUS?
Replies: 1
Views: 265

Re: How to prevent more than 1 authentication when using RADIUS?

It all really depends on how your radius server is configured. What type of radius server you are using? On free-radius, there is a parameter named 'simultanous-use' Example: Simultaneous-Use := 1 Also Uncomment simul_count_query to enable simultaneous use checking in dialup.conf Google for more
by aacable
Fri Nov 10, 2017 9:40 am
Forum: General
Topic: Freeradius Sim-Use not working with Mikrotik Hotspot
Replies: 5
Views: 858

Re: Freeradius Sim-Use not working with Mikrotik Hotspot

For good results you should not query NAS for user status.
All should be done by freeradius/mysql :)
by aacable
Wed Nov 08, 2017 11:55 am
Forum: General
Topic: Freeradius Sim-Use not working with Mikrotik Hotspot
Replies: 5
Views: 858

Re: Freeradius Sim-Use not working with Mikrotik Hotspot

NOTE: If you are using SQL, For sim-use i had to disable (comment) the “radutmp” entry in /etc/freeradius/sites-enabled/default .
ACCOUNTING SECTION
SESSION SECTION
by aacable
Tue Oct 24, 2017 2:29 pm
Forum: General
Topic: Facebook Images not appear
Replies: 2
Views: 394

Re: Facebook Images not appear

as per my tiny knowledge, It's probably due to one of following ... DNS issues (Most common one) MTU problem (seen this issue at a network where many wifi routers were installed and the new TENDA brand was giving such issues) Packet is blocked or lost at any point / HOPS (less chances) for #1 , make...
by aacable
Thu Oct 19, 2017 2:56 pm
Forum: General
Topic: Cisco InterVlan Routing with Mikrotik
Replies: 6
Views: 807

Re: Cisco InterVlan Routing with Mikrotik

I don't have professional skills, But may be it can help some one ..link...
by aacable
Thu Oct 19, 2017 12:55 pm
Forum: General
Topic: Cisco InterVlan Routing with Mikrotik
Replies: 6
Views: 807

Re: Cisco InterVlan Routing with Mikrotik

What I said: make sure the Cisco does NOT provide a default gateway in its DHCP reply, but sends a specific route, in your case this can be a route for 192.168.2.0/23 This can be done using DHCP options. Perhaps a practice example might be more feasible. to further elaborate pe1chl , see following ...
by aacable
Thu Oct 19, 2017 10:19 am
Forum: General
Topic: bypass mikrotik router for local ftp sharing
Replies: 1
Views: 702

Re: bypass mikrotik router for local ftp sharing

Look for Cisco Intervlan Routing. It will solve your problem.
Make default gateway of clients to there respective vlan interface ip, and enable ip routing in it. this way client will communicate with each other directly using there local ips.
by aacable
Wed Oct 11, 2017 11:25 am
Forum: Scripting
Topic: Script to fetch Gateway IP
Replies: 5
Views: 1698

Re: Script to fetch Gateway IP

If pppoe-outX [name of pppoe dialer] is being dialed from the RB itself, then why you are trying to hardcode the gateway IP, Just create Static Route with 'ppoe-outX' [name of pppoe dialer] as gateway. /ip route add check-gateway=ping comment="DSL1 Default ROUTE" distance=1 dst-address=0.0.0.0/0 gat...
by aacable
Fri Oct 06, 2017 7:19 am
Forum: Scripting
Topic: Script for pinging IP in WAN
Replies: 1
Views: 9524

Re: Script for pinging IP in WAN

you are almost there, Use variables, they have amazing use in the script :) One working example: :local HOST "8.8.8.8" :local PINGCOUNT "30" :local INT "sfp1" :local DELAY "3s" :local sub1 ([/system identity get name]) :local sub2 ([/system clock get time]) :local sub3 ([/system clock get date]) :lo...
by aacable
Tue Oct 03, 2017 2:21 pm
Forum: General
Topic: Uptime Challenge!
Replies: 25
Views: 13210

Re: Uptime Challenge!

If security is no problem then the uptime is nice. But if you make updates than you can't see this uptimes in Mikrotik because you need a reboot after you upload a new version. & upgrading is very frequent in the ROS ;) , specially with the new 6.x breed, we see fixbug/upgrade releases very quickly...
by aacable
Tue Oct 03, 2017 2:14 pm
Forum: Beginner Basics
Topic: PCC load Balancing Session out problem on some websites
Replies: 1
Views: 858

Re: PCC load Balancing Session out problem on some websites

Have you tried changing both-addresses-and-ports to src-address ? As Described here Example#1: src-address Use src-address as classifier, this way you will get rid of problems like https/broken link, streaming issues etc (dueot ip changing on each request) . Load balancing using this PCC technique (...
by aacable
Mon Oct 02, 2017 2:30 pm
Forum: General
Topic: High CPU load when PPPoE sessions disconnects
Replies: 51
Views: 7894

Re: High CPU load when PPPoE sessions disconnects

So if you have the same issue, then the solution should also be the same: viewtopic.php?p=620765#p620765
Noted. I saw that later. Will test it.
by aacable
Mon Oct 02, 2017 1:39 pm
Forum: General
Topic: High CPU load when PPPoE sessions disconnects
Replies: 51
Views: 7894

Re: High CPU load when PPPoE sessions disconnects

Yes Masquerade and Routing both in one box.
Scenario is something like below ...
4 wan dsl links configured with PCC using SRC-ADDRESS approach. for specific group of users.
1 wan link for public ip users routing. for users with public ips.
by aacable
Mon Oct 02, 2017 10:05 am
Forum: General
Topic: High CPU load when PPPoE sessions disconnects
Replies: 51
Views: 7894

Re: High CPU load when PPPoE sessions disconnects

Facing same issue here as well. using following RB's (with 6.40.3)
RB3011xxx
CCR1016
CCR1036
by aacable
Mon Sep 11, 2017 1:21 pm
Forum: Beginner Basics
Topic: Backup Link
Replies: 3
Views: 798

Re: Backup Link

You would set two static routes. First route will point to your first ISP and will be exactly what you use today. The second router will have a higher administrative distance, set it for say 150, and traffic will only follow the second route when the first one goes down. Primary Link distance = 1 B...
by aacable
Wed Aug 30, 2017 6:53 am
Forum: Beginner Basics
Topic: Dual WAN failover
Replies: 5
Views: 4118

Re: Dual WAN failover

I am having troubles with Dual WAN fail-over, and I'm hoping someone has a simple solution. In my testing environment I have WAN1 going to Ether1 and WAN2 at Ether2. Routes are configured as they should and while testing we see two different results based on the method of testing. If we simply disa...
by aacable
Mon Aug 28, 2017 2:05 pm
Forum: Beginner Basics
Topic: Dual WAN failover
Replies: 5
Views: 4118

Re: Dual WAN failover

Better to go with the scripting method which you can customize as per your requirements. Monitor at least 2 internet hosts via script, if mikrotik fail to get reply from both, then consider the link down and activate second link by changing its route. (& send email alert about the link down event). ...
by aacable
Mon Aug 28, 2017 1:29 pm
Forum: Beginner Basics
Topic: Dual WAN failover
Replies: 5
Views: 4118

Re: Dual WAN failover

There are few ways to to achieve the task. 1# You can create two static routes (in route section), 1st pppoe with Distance Value set to 1 , and 2nd for the 4g router link distance set to 2 . This way if wan1 (pppoe) fails, the traffic will auto route to wan2 4g router link which have distance value ...
by aacable
Mon Aug 28, 2017 11:32 am
Forum: Beginner Basics
Topic: WOL (Rule/Script?)
Replies: 8
Views: 1468

Re: WOL (Rule/Script?)

Setup Global Variables, store the UP/DOWN results in those variables, Query the variables results from the Environment, & act upon it as per requirements. You can do Multiple IF statement Matching , some thing like (you can further stretch it) :local dsl1 [/system script environment get [/system scr...
by aacable
Fri Aug 18, 2017 12:30 pm
Forum: General
Topic: 2 WAN PPPOE LOAD BALANCER
Replies: 5
Views: 5820

Re: 2 WAN PPPOE LOAD BALANCER

Sample config is using SRC-ADDRESS as classifier. In src-address approach, the source address of a client will always be the same, so all traffic from a particular client will always match the same PCC matcher, and will always be put on the same link therefore there will be no issue of IP changing a...
by aacable
Fri Aug 18, 2017 8:59 am
Forum: General
Topic: 2 WAN PPPOE LOAD BALANCER
Replies: 5
Views: 5820

Re: 2 WAN PPPOE LOAD BALANCER

You can have only DEFAULT route active at a time. Route in Blue shows that they are available but will not be used as ACTIVE gateway (until previous active route with lowest distance value is not available) If you have multiple default routes available , then the route with lowest distance value wil...
  • 1
  • 2
  • 3
  • 4
  • 5
  • 9