MikroTik

kameelperdza

Good day I have several mikrotiks running vlan at the office. On the one mikrotik i have setup vlan trunking on ether1, eth2, ether4 and ether5. Ether3 is on vlan(IT) Trunk. Today i was copied some large files over the network to a computer on the vlan(IT) interface. I have noticed that ether1, ethe...

kameelperdza

Good day. Im a bit confused. I have setup pppoe client on my rb2011 and added the following rules on my mikrotik. /ip firewall mangle add action=mark-routing chain=prerouting new-routing-mark=ADSL1 passthrough=\ no src-address=192.168.4.0/24 add action=mark-routing chain=prerouting new-routing-mark=...

kameelperdza

Im also getting this on my transmission-torrent.
Just delete the torrent(not the files) and reload the torrent.

kameelperdza

use MPLS

http://wiki.mikrotik.com/wiki/Transpare ... using_MPLS

On first network create DHCP server

kameelperdza

Great glad you solved it.

kameelperdza

If you can ping and tracert both ways then routing might not be the caused.

What is the ip address that dns server recieves for the dns request?

How is your network setup?

router1(vlan)(172.17.0.8) - - - - - router2(vlan)(172.17.0.3)(dhcp[172.17.8.1/24])

And what dns/gateway does computer use?

kameelperdza

Check the routing table on the 172.17.0.8 router.

I recommend switching over to ospf.
What is nice about ospf is that it automatically creates/removes routes when your network change.

kameelperdza

My routers are almost setup the same way as yours. Some that you can try.... 1. On the router that vlan connect check under ip firewll connections to see if your computer ip tries to contact to the dns. 2.setup dns on one of the backbone routers and add the dns server ip address to the dns list. Cha...

kameelperdza

Are you able to ping your computer from the ip you try to browse?
you say that your laptop has lan ip 172.17.8.1/24?
And your backbone has ip range 172.17.0.0/24?

Why does the computer have different ip range if you are using vlans to create one big network?

kameelperdza

You can try to connect the cable to any other available ports.(that it if the router has more than one) or you can connect with one of the devices that usually connects to your wireless. But you will need to configure static ip address, then try winbox again. or if you can remember the wlan address ...

kameelperdza

i wil say on the router that you running dns on.
What masquerade does it help you communicate with computers behind your router.

kameelperdza

Here is a nice how to.
You just need to copy the code to notepad and edit with your settings.
Then open winbox, left click on new teminal window and right click and paste
http://wiki.mikrotik.com/wiki/Manual:Interface/PPTP

kameelperdza

Did you add masquerade?

/ip firewall nat add chain=srcnat action=masquerade

kameelperdza

If you remote router see your pings.

On remote router.

add this.

/ip route add dst-address=(your pc address or range) gateway=(the address of the rb532)

for example = /ip route add dst-address=192.168.0.2 gateway=10.0.0.1

This rule will tell the remote router where to send the reply back.

kameelperdza

Hi check this.
Example

/ip route add dst-address=0.0.0.0/0 gateway=(cable modem) routing-mark=cable

/ip firewall mangle add src-address=(your pc) routing-mark=cable protocol=icmp

kameelperdza

Im don't know much about Linux, but maybe you can try to bridge pptp-internface with Ethernet-interface on the server?

kameelperdza

Check your default gateway and dns on server and client.

kameelperdza

you can also try to downgrade/upgrade firmware.

/system routerboard upgrade

btw I also thought my problem was solved. But ether1 still does it at random times.

kameelperdza

Hi there.

Had the same problem.

You should test cable with cable tester.
One of the wires might be broken.
OR you can replace the cable with new one instead.
Should fix the issue

--EDIT--

Might also be interference?

kameelperdza

try doing a traceroute form the mikrotik, server and also client.

That might show you where the packets stop.

kameelperdza

Also add this if you there is no such rule already.

/ip firewall nat add chain=srcnat action=masquerade src-address=10.201.0.0/24

It should allow you to communicate with iprange 10.1.1.0/24

kameelperdza

If I read this correctly you say that you cannot ping or communicate with the mikrotik?

I see in your firewall rules that you drop "in-interface=ether1" and "in-interface=konata-pptp".

Have you tried disable those rules?

kameelperdza

Try adding pptp logging. Then you might see what happens on both mikrotiks when the disconnection happens.

Why do you have firewall between routers?

how is the setup? internet---mikrotik---firewall---mikrotik?

What firewall are you using?

kameelperdza

Thank you.
Nice Tool

kameelperdza

Hi there.
Look here.
http://wiki.mikrotik.com/wiki/Manual:Netinstall

I had the same issue awhile ago and this it the best way to solve it.

kameelperdza

First check this. 1. Can the routers ping each other? 2. Do you have firewall rules that block pptp port 1723tcp 3. you can get for logging info by adding pptp log rule. To do this go to system --> logging and click on the +. The click on topic and scroll down until you get pptp. Click ok and now it...

kameelperdza

Thanx mxena

I was unable to find solution for slow traffic over eoip.
After moving to mpls speed changed from 200kb/s to 3.6mb/s

kameelperdza

It is routerboard RB2011UiAS and routeros 6.11
Did not contact support yet.
70% chance that i will restore squidserver.
Thank you

kameelperdza

Good Day. I downloaded urlfilter file from non-working squid server and modified it so that it can just be copied and pasted inside mikrotik terminal. It is a very big file (about 84000 urls) and the contents will be added to /ip proxy access I don’t know how much entires "/ip proxy access" can take...

kameelperdza

Any light on this issue? Have them same problem using Ros6.11

kameelperdza

Oh thanks

They said they are still considering it

kameelperdza

How often does Mikrotik update the schedule list? Are the current schedules for the whole year or are there more courses added throughout the year?

The reason for asking is that I would like to do the MTCWE course but it is not available in my area yet.

kameelperdza

Hi folks. A friend of mine has asked me to help him limiting p2p traffic to 30kb~40kb. On my test router I copied the rules from this wiki page http://wiki.mikrotik.com/wiki/Basic_traffic_shaping_based_on_layer-7_protocols After I have done this I noticed that mangle rules did not pass on the result...

kameelperdza

I was worried my rb750up might be broken. I had to replace my rb750g so that i can have usb support.

kameelperdza

yes i did.
i always do that first after routeros upgrade/downgrade.

kameelperdza

Hi there. After upgrading from ros 4.10 to 5.24 i have notice this. Everytime the router is rebooted then i am unable to login using ip address but i can login via macwinbox. Also no pptp connections are connected. But when i ping another router on the same subnet from within winbox(after login with...

kameelperdza

i have tested it with upnp enabled and dxdiag directplay test. I am able to join session. Trying to play hardwar UIM6.0. The game does show up in list but nothing happens wehn i join. Later i will get error saying Timeout-Server failed to respond. Might still be missing something. Thank you for resp...

kameelperdza

Hi there did you manage to get the game working? I have similar game that also uses directplay.

kameelperdza

Had the same problem after upgrading routers from 4.10 to 5.24.

Thank you tyronzn for the temporary fix.

kameelperdza

Should the ethetner leds be on/blinking when in pxe mode? When i power on the router then all leds go on and then back off and then i hear beep and nothing else happens. I tried pxe mode amd the led does blink for 10 seconds but then go off again and then nothing happens. I wil find out from the sup...

kameelperdza

Hi there. Yesterday i put the rb433L in the plastic encloser and also connected two mini pci cards to it. I noticed that the wlan cards was not picking up in winbox to I download the lastest ROS and rebooted the router. But after doing so I was unable to connect to it anyway possible. Even tried doi...

kameelperdza

If you want to log every subsequent login attempt from a blacklisted address, put this above the "action=drop" rule: /ip firewall filter add chain=input protocol=tcp dst-port=22 src-address-list=ssh_blacklist action=log log-prefix=SSH-blacklisted comment="log blacklisted ssh brute forcers" disabled...

kameelperdza

Hi there. i have changed critical rule(under logging) from echo to disk. I see that it has created file called log.0.txt When i delete the file then it does not create a new file. The reason for changing th rule from echo to disk is to save all failed login attemps such as brute force to file for fu...

kameelperdza

What i have done is to change critical under logging from echo to disk.
It helps me to keep track on how many times one ip address tries.

kameelperdza

I get this alot when L7 makes cpu load run high on rb750g. Reboot helps.

Is this fixed in future ros version?
My current ros is 5.14

kameelperdza

Hi people i want to throttle all the ip addresses on the 192.168.0.0/24 range. I have the option to create rule for each ip address or only make one rule with 192.168.0.0/24 as target address. If i create rule for each ip address then i can adjust speed per ip address if needed. But to do this i wil...

kameelperdza

HI have you find an dealer yet?

kameelperdza

Hello Dobby. The router is working without any problems during the day. Only at evenings the problem will appear. It is usually when people do p2p. There are two computers doing p2p. The one is on ether 4(adsl2) and the other on erher5 (adsl3) CPU usage only goes up to +-100% if both computers are d...

kameelperdza

Hi there. I have a mikrotik rb750g which im using to split traffic between 3 adsl line. I have also setup layer 7 and im running it on ether3, ether 4 and ether5 which is the Ethernet ports that the adsl routers are connected. The cpu load is about +-50%. Sometimes when I enable some of the rules in...

kameelperdza

Solution = Disable the "Everything else that remains" mangle rules.

Search found 469 matches