Community discussions

MikroTik App

Search found 46 matches

by sublimespot
Sat Mar 06, 2021 9:14 am
Forum: General
Topic: TP Link Smart Plug Minis Not Keeping Connection to TP Link Cloud [SOLVED]
Replies: 12
Views: 5241

Re: TP Link Smart Plug Minis Not Keeping Connection to TP Link Cloud [SOLVED]

I also have the TP Link smart plug (branded Kasa) and ran into this issue. I found that it is dropping off the network exactly at the 1/2 way mark for the DHCP lease when it tries to renew. I had my lease time on the network set to 30m. After extending the lease on this device to longer time like 2d...
by sublimespot
Sat Mar 18, 2006 10:40 pm
Forum: General
Topic: Largest Mikrotik implementation
Replies: 2
Views: 1502

Aren't you using "The Dude" to have a network map and manage them now?
by sublimespot
Sat Mar 18, 2006 10:40 pm
Forum: General
Topic: Roaming hotspot users and radius
Replies: 3
Views: 1357

Radius Accounting will send this information to your database. Enable it and check out your radius database.
by sublimespot
Sat Mar 18, 2006 12:16 am
Forum: General
Topic: Largest Mikrotik implementation
Replies: 2
Views: 1502

Largest Mikrotik implementation

I'm curious. What is the largest implementation of Mikrotik out there?

What is the most powerful and massive server that is running RouterOS, and also wondering how many users are running on that server?
by sublimespot
Tue Mar 14, 2006 10:34 pm
Forum: General
Topic: SYN Cookies
Replies: 1
Views: 1124

SYN Cookies

How do you enable SYN Cookies on the new 2.9.16?
by sublimespot
Mon Feb 27, 2006 7:27 pm
Forum: General
Topic: What RADIUS attributes does ROS2.9.x support..??
Replies: 3
Views: 1365

I would like the ability to set "Comment" on a user in Hotspot from the Radius reply message
by sublimespot
Thu Feb 23, 2006 1:50 am
Forum: Scripting
Topic: Radius Incoming crashes. Howto script to reset the service?
Replies: 1
Views: 1362

Looks like 2.9.13 may fix the Radius Incoming instability
by sublimespot
Thu Feb 23, 2006 1:28 am
Forum: General
Topic: Host ip keeps changing. Multiple logins.
Replies: 12
Views: 5419

I also experience this where the IP number for a hotspot user keeps changing. Its driving me nuts
by sublimespot
Thu Feb 23, 2006 1:02 am
Forum: Scripting
Topic: Kick out wireless client
Replies: 3
Views: 3274

Using php's exec() command with the following:
$cmd = "echo NAS-IP-Address=$nas_ip_address,User-Name=$mac,Framed-IP-Address=$framed_ip_address,Acct-Session-Id=$acct_session_id | radclient $nas_ip_address:1700 disconnect $radius_password";
by sublimespot
Wed Feb 22, 2006 9:56 pm
Forum: Scripting
Topic: Radius Incoming crashes. Howto script to reset the service?
Replies: 1
Views: 1362

Radius Incoming crashes. Howto script to reset the service?

Radius Incoming on the Mikrotik crashes very often. (You can also crash Radius Incoming by sending invalid data). Disabling and Re-Enabling Radius Incoming gets it working again. How would I write a script to automatically reset the Radius Incoming service every 10 minutes? I would like to put this ...
by sublimespot
Wed Feb 22, 2006 9:53 pm
Forum: Scripting
Topic: Kick out wireless client
Replies: 3
Views: 3274

Turn on Radius Incoming and send a Radius Disconnect message. I use php to fire off a command line command to do this.
by sublimespot
Wed Feb 22, 2006 5:45 pm
Forum: General
Topic: Queues, Radius, Max-Limit, Limit-At
Replies: 0
Views: 1291

Queues, Radius, Max-Limit, Limit-At

With radius you can set the customer Queue by sending Rate-Limit. According to the Mikrotik Manual, Rate limit only sets 4 items: "tx/rx speed", "Burst Limit tx/rx", "Burst Thresh tx/rx", "Burst Time" However, In Queue I see 5 items: "Max Limit", &qu...
by sublimespot
Sat Feb 04, 2006 10:37 pm
Forum: General
Topic: how to display user hotspot usage daily
Replies: 1
Views: 1022

Use Radius Accounting it logs this information to a radius server (and to mysql server). Then you can use php or something to make a web page to show usage
by sublimespot
Fri Feb 03, 2006 11:36 pm
Forum: General
Topic: Radius Disconnect
Replies: 12
Views: 11575

I have a support contract with MT. So if they do not pick up on it then I will let them know.
by sublimespot
Fri Feb 03, 2006 11:30 pm
Forum: General
Topic: Radius Disconnect
Replies: 12
Views: 11575

savage, thanks for all this information. I was able to crash the listener with invalid information. Disabling the listener and re-enabling brought it back.
by sublimespot
Fri Feb 03, 2006 9:19 pm
Forum: General
Topic: Radius Disconnect
Replies: 12
Views: 11575

It worked with Framed-Ip-Address
by sublimespot
Fri Feb 03, 2006 9:11 pm
Forum: General
Topic: Radius Disconnect
Replies: 12
Views: 11575

Radius Disconnect

I enabled Radius with /radius incoming set accept=yes I tried to perform (Disconnect-Message) via command line: echo 'User-Name = 00:00:00:00:00:00" | radclient 192.168.10.10:1700 "disconnect" radpasswd Mikrotik Log says "Radius disconnect with no ip provided' How can I disconnec...
by sublimespot
Fri Feb 03, 2006 9:07 pm
Forum: General
Topic: Freeradius used to get accurate bandwidth statistics
Replies: 16
Views: 7257

I enabled Radius with /radius incoming set accept=yes I tried to perform (Disconnect-Message) via command line: echo 'User-Name = 00:00:00:00:00:00" | radclient 192.168.10.10:1700 "disconnect" radpasswd Mikrotik Log says "Radius disconnect with no ip provided' echo 'ip = 00:00:00...
by sublimespot
Sun Jan 22, 2006 6:47 pm
Forum: General
Topic: Syn flood protection - what's the best approach?
Replies: 1
Views: 1490

On regular linux, enabling "syn cookies" can help a little in trying to keep the server alive during a dos attack. Usually a dos attack eats up all your available bandwidth. No software setting can fix that.
by sublimespot
Sun Jan 22, 2006 6:43 pm
Forum: General
Topic: Prerouting vs Forward
Replies: 3
Views: 3944

PREROUTING is the chain where things like Masquerade or SRC NAT are defined.

Every packet that is forwarded by the router to another location goes through the FORWARD chain. In order to do a port forward, or NAT/Masquerade, a packet must also go through FORWARD.
by sublimespot
Sun Jan 22, 2006 6:39 pm
Forum: General
Topic: De-Authenticate Hotspot user after using 10GB Monthly
Replies: 2
Views: 1445

De-Authenticate Hotspot user after using 10GB Monthly

I would like to De-Authenticate Hotspot user after using 10GB Monthly bandwidth usage. They will jump back to the signup screens where they can buy some more gigs of bandwidth. Is the best way to accomplish this by using scripts? I saw the script to auto-send-email when a user hits a certain bandwid...
by sublimespot
Sun Jan 22, 2006 5:08 am
Forum: General
Topic: Freeradius used to get accurate bandwidth statistics
Replies: 16
Views: 7257

I am also using this Freeradius to monitor bandwidth usage. What I am looking for now is a way to de-authenticate a hotspot account after it uses too much bandwidth.
by sublimespot
Fri Dec 23, 2005 10:56 pm
Forum: General
Topic: Problem with Proxy-Arp on Hotspot
Replies: 2
Views: 1686

disable transparent proxy.

make sure you have masquerade rule to allow traffic.
by sublimespot
Sat Dec 17, 2005 1:53 am
Forum: General
Topic: Grouping Multiple MACs into one Rate-Limit
Replies: 6
Views: 1908

Yes thank you
by sublimespot
Fri Dec 16, 2005 9:19 pm
Forum: General
Topic: Grouping Multiple MACs into one Rate-Limit
Replies: 6
Views: 1908

I think you misunderstand what I'm saying

I want user A and user B to share a 512k rate limit

So if user A is downloading at full speed, then user B will only have half the available bandwidth.

I do not want user A to have 512k and user B to have 512k. They should share the bandwidth.
by sublimespot
Fri Dec 16, 2005 9:18 am
Forum: General
Topic: Grouping Multiple MACs into one Rate-Limit
Replies: 6
Views: 1908

Freeradius
by sublimespot
Fri Dec 16, 2005 7:25 am
Forum: General
Topic: Grouping Multiple MACs into one Rate-Limit
Replies: 6
Views: 1908

Grouping Multiple MACs into one Rate-Limit

I'm using Radius to assign Rate-Limit to Hotspot users.

Is it possible to group two users together to share a Rate-Limit?

For example - two different MACs that share a 512k rate-limit. I read about Profile based Rate-Limit when using PPP, but I am not using PPP.
by sublimespot
Fri Dec 16, 2005 7:16 am
Forum: General
Topic: dictionary.mikrotik, Rate-Limit Attribute, FreeRadius
Replies: 5
Views: 2778

Yes Im using Rate-Limit with Radius with success.

Mine looks more like this:
64k/64k 256k/256k 128k/128k 10/10

For a 64k line with 10s burst.

If it works , you should find the Rate Limit in Winbox->Queues
by sublimespot
Sun Dec 04, 2005 8:36 am
Forum: General
Topic: PROXY-ARP solution SOLVED - howto
Replies: 26
Views: 19192

The port 80 solution is do disable transparent proxy
by sublimespot
Sun Dec 04, 2005 8:35 am
Forum: General
Topic: Public and Private IP routing on same interface problem
Replies: 4
Views: 2179

Yes use the PROXY ARP howto SOLVED thread. Set up a ip route to handle passing traffic to and from the public IPs behind hotspot You dont want the masquerade rule to take effect for the public IPS behind hotspot or else they will show as if they are coming from the router itself. The howto suggests ...
by sublimespot
Sun Dec 04, 2005 4:39 am
Forum: General
Topic: 2.9 Walled Garden alternatives. HTTPS support is not working
Replies: 1
Views: 1202

2.9 Walled Garden alternatives. HTTPS support is not working

I'm trying to get HTTPS working with Walled Garden. On some routers it works, on others I get "page can not be displayed" for all clients. The HTTPS walled garden support is not working well. So I am trying to set up firewall/mangle/nat rules to allow to get out to the HTTPS server without...
by sublimespot
Sun Nov 13, 2005 5:55 am
Forum: General
Topic: PROXY-ARP solution SOLVED - howto
Replies: 26
Views: 19192

Things are working for the most part with one problem now.. I've got people behind hotspot in the way the original poster does. There are no NAT rules at all. We are using the Route table and the customer has a Public IP address set behind hotspot. When the clients behind hotspot (with public IP) co...
by sublimespot
Thu Nov 03, 2005 7:14 am
Forum: General
Topic: Radius Access-Accept Filter-ID -> Create Dynamic NAT?
Replies: 4
Views: 2845

I found a solution.

I used Framed-IP-Address to create a public IP address.
Used Framed-Route to create a dynamic route.

This essentially gives the customer a public IP and they still have to authenticate with hotspot. Perfect!
by sublimespot
Wed Nov 02, 2005 10:47 pm
Forum: General
Topic: PROXY-ARP solution SOLVED - howto
Replies: 26
Views: 19192

Man I feel like such an idiot!

I checked Interfaces and it has a setting "ARP: enabled".

I assumed this meant proxy arp was enabled. It does not.

The setting had to be changed to "ARP: proxy arp" - then things started working for me.
by sublimespot
Wed Nov 02, 2005 6:14 am
Forum: General
Topic: Radius Access-Accept Filter-ID -> Create Dynamic NAT?
Replies: 4
Views: 2845

Yes I also have the manual here. That bit of information in the documentation is very limited. I was hoping for more detailed information on how it is used and maybe a sample.
by sublimespot
Tue Nov 01, 2005 6:06 am
Forum: General
Topic: Radius Access-Accept Filter-ID -> Create Dynamic NAT?
Replies: 4
Views: 2845

Radius Access-Accept Filter-ID -> Create Dynamic NAT?

Radius Access-Accept has the option Filter-Id which appears to allow a dynamic firewall rule.

Is is possible to have Radius respond to create a dynamic SRC-NAT and DST-NAT for that user?

Where can I get more information on how to use the radius Filter-Id option?
by sublimespot
Mon Oct 31, 2005 10:14 pm
Forum: General
Topic: DHCP Relay - DHCP Server Setup
Replies: 1
Views: 1414

DHCP Relay - DHCP Server Setup

In the following, when I say "DHCP server" I am referring to a Linux DHCP server, not the Mikrotik. I want to try DHCP relay. The MT manual says how to set up the MT for DHCP relay, but I'm confused how the DHCP server is configured. For testing, my DHCP server is on a 192.168.4.0 subnet a...
by sublimespot
Wed Oct 26, 2005 11:27 am
Forum: General
Topic: PROXY-ARP solution SOLVED - howto
Replies: 26
Views: 19192

Hmm. My setup is a bit different. I want them to authenticate on the login screen, but then to have a public IP address so they can run services etc. Maybe I'm barking up the wrong tree. In the past Ive left them with a private IP, then setup SRC and DST NAT to route the public IP in to them. Though...
by sublimespot
Wed Oct 26, 2005 10:57 am
Forum: General
Topic: PROXY-ARP solution SOLVED - howto
Replies: 26
Views: 19192

I set this up like you said and have one problem. If I try to connect to a computer behind hotspot (which has a public IP), the connection goes into the machine but the machine can not respond back. I can see the incoming connection with personal firewall on this machine. The syn request gets sent i...
by sublimespot
Wed Oct 26, 2005 9:29 am
Forum: General
Topic: Public IPs behind hotspot
Replies: 2
Views: 1101

I found one method here that is quite nice: http://forum.mikrotik.com/viewtopic.php?t=4402&highlight=proxyarp This method uses IP Routes. The only problem here is that if the DHCP server gives out a differnt private IP to them, then the route is broken. So it requires the DHCP static private IP ...
by sublimespot
Mon Oct 24, 2005 10:56 pm
Forum: General
Topic: Public IPs behind hotspot
Replies: 2
Views: 1101

Public IPs behind hotspot

Ive got a hotspot with many users. Most of them are happy with NAT'ed addresses, but some want public IPs. Ive experimented and found a couple different ways to accomplish this but they are kind of a pain to set up. Firewall rules, Static DHCP entries, etc... What is the easiest and best way to hand...
by sublimespot
Sat Sep 24, 2005 12:51 am
Forum: General
Topic: Want hotspot to allow all
Replies: 5
Views: 2311

I think you can use the walled garden feature to allow access to any site even though the user is not authenticated

You could set an "allow" rule to any site where destination is NOT (click the box) abcdefg.com . Then they could access any site but that one.
by sublimespot
Sat Sep 24, 2005 12:46 am
Forum: General
Topic: Flushing Hotspot Hosts table - to allow Radius re-query
Replies: 4
Views: 1873

Flushing Hotspot Hosts table - to allow Radius re-query

I am doing MAC-auth-only with Hotspot. Here is my situation: user tries to go to google.com. Radius auth fails. user is redirected to my signup page. signs up. user's mac address is added as username into my radius server At this point, if the Radius is queried, it will send back an Allow. but the M...
by sublimespot
Mon Sep 12, 2005 12:43 am
Forum: General
Topic: Radius - disabled or disabled - cant enable
Replies: 3
Views: 1211

I got MAC username auth working with the DHCP radius feature.
by sublimespot
Mon Sep 12, 2005 12:31 am
Forum: General
Topic: Radius - disabled or disabled - cant enable
Replies: 3
Views: 1211

Thank you. Ive got it authenticating against my FreeRadius now.

Now I'd like to figure out how to make it auto-send the MAC address as the username, and some string as password, instead of prompting the user for a username/pass.
by sublimespot
Sun Sep 11, 2005 2:05 am
Forum: General
Topic: Radius - disabled or disabled - cant enable
Replies: 3
Views: 1211

Radius - disabled or disabled - cant enable

I am trying to enable Radius client . If I click "Disable" , the lower status bar on the window says "disabled" in light grey. If I click "Enable", the lower status bar says "disabled" but it is dark grey. I cant turn it on! I noticed in the title bar in winbo...