Community discussions

MUM Europe 2020

Search found 592 matches

  • 1
  • 2
by kirshteins
Fri Jan 10, 2014 10:20 am
Forum: General
Topic: RSTP/STP
Replies: 7
Views: 3035

Re: RSTP/STP

Not sure if this is how it works or if I'm just not doing things incorrectly but I have RSTP enabled on a bridge with 4 ports. I loop two of the ports together with another switch just to test and start pinging the the mikrotik and it shutdown down all the ports in the bridge - even the two other p...
by kirshteins
Tue Oct 22, 2013 12:03 pm
Forum: SwOS
Topic: Auto Negotiation Bug into v1.9 (RB260GS)
Replies: 6
Views: 3307

Re: Auto Negotiation Bug into v1.9 (RB260GS)

I can confirm this problem - I need to set a port to 100/full manually, but the switch configures it as 100/half. If I refresh the page with link settings the checkmark before "full duplex" disappears. I need to be able to manually force 100/full, how do I do that? Make sure the other end is forced...
by kirshteins
Tue Jul 09, 2013 1:08 pm
Forum: RouterBOARD hardware
Topic: SEXTANT G-5HnD MCS12-MCS13-MCS14-MCS15...? I dont find ???!!
Replies: 4
Views: 1914

Re: SEXTANT G-5HnD MCS12-MCS13-MCS14-MCS15...? I dont find ?

SEXTANT G-5HnD supports up to 300 Mbps data rate. Are both HT RX and TX chains enabled? Please provide you configuration. You can export it with the following command:
/interface wireless export
Also you can send supout.rif file to support@mikrotik.com.
by kirshteins
Mon Jul 08, 2013 3:46 pm
Forum: General
Topic: problem in re-installing the software in the routerboard1100
Replies: 5
Views: 924

Re: problem in re-installing the software in the routerboard

What do you mean by "main menu"? Do you still get any error messages?
by kirshteins
Wed Jun 12, 2013 3:47 pm
Forum: General
Topic: RouterOS 6.1 released
Replies: 198
Views: 54811

Re: RouterOS 6.1 released

Yes, it is running 6.0 RC15

Does RC15 break upgrading?
One of the pre-release build for rc15 had this problem with upgrading. Netinstall if you see "broken package routeros-mipsbe-6.1.npk" message.
by kirshteins
Wed Jun 12, 2013 3:39 pm
Forum: General
Topic: RouterOS 6.1 released
Replies: 198
Views: 54811

Re: RouterOS 6.1 released

RB2011UAS-2HnD-IN Tx Power Problem ROS V6.1 and V6.0 (Firmware 3.08) On wireless tab Frequency Mode set: manual txpower Country: no_country_set Atenna Gain: 0 Tx Power tab Tx Power Mode set: card rates Tx Power set: 18 dBm Current Tx Power tab show all rates = 30 dBm Total Tx Power Why is it so? Or...
by kirshteins
Wed Jun 12, 2013 3:34 pm
Forum: General
Topic: RouterOS 6.1 released
Replies: 198
Views: 54811

Re: RouterOS 6.1 released

I've downloaded this 3 times, with the auto-updater and also direct from the website and dragged it into winbox. Every time, after rebooting, it does not upgrade. The log says "broken package routeros-mipsbe-6.1.npk" Is this router running one of the last rc versions? In that case try netinstalling.
by kirshteins
Wed Mar 20, 2013 2:13 pm
Forum: General
Topic: change hello-time on bridge RSTP?
Replies: 10
Views: 2222

Re: change hello-time on bridge RSTP?

You can drop BPDU packets with destination MAC address 01:80:C2:00:00:00.
by kirshteins
Wed Mar 20, 2013 1:05 pm
Forum: General
Topic: change hello-time on bridge RSTP?
Replies: 10
Views: 2222

Re: change hello-time on bridge RSTP?

Filter can only match packets by this value and cannot change it. Change max-message-age value of the bridge interface.
by kirshteins
Wed Mar 20, 2013 10:30 am
Forum: Wireless Networking
Topic: issue connecting SXT with E900
Replies: 12
Views: 1670

Re: issue connecting SXT with E900

Which device stopped responding? Did you tried to troubleshoot using ping and trace-route?
by kirshteins
Wed Mar 20, 2013 10:26 am
Forum: General
Topic: Router password reset
Replies: 1
Views: 974

Re: Router password reset

by kirshteins
Tue Jan 29, 2013 8:16 am
Forum: RouterBOARD hardware
Topic: rb-800
Replies: 1
Views: 562

Re: rb-800

Is this the only Routerboard that you have problem accessing via serial port? Make sure you serial terminal baud-rate is set to 115200.
by kirshteins
Wed Jan 23, 2013 12:37 pm
Forum: RouterBOARD hardware
Topic: RB 433
Replies: 7
Views: 1202

Re: RB 433

So how does the router powered through 10m cable work differently?
by kirshteins
Wed Jan 23, 2013 12:26 pm
Forum: Beginner Basics
Topic: How to configure RouterBoard 450G
Replies: 9
Views: 13384

Re: How to configure RouterBoard 450G

Route with dst. 192.168.20.0/16 will only route to your local network. Try using 0.0.0.0/0 instead.
by kirshteins
Wed Jan 23, 2013 10:52 am
Forum: General
Topic: Switch chip features
Replies: 4
Views: 863

Re: Switch chip features

Switch chip features depend on the hardware chip itself.
by kirshteins
Wed Jan 23, 2013 10:50 am
Forum: Beginner Basics
Topic: How to configure RouterBoard 450G
Replies: 9
Views: 13384

Re: How to configure RouterBoard 450G

Have you configured you default gateway (default route) in /ip router section?
by kirshteins
Wed Jan 23, 2013 10:48 am
Forum: RouterBOARD hardware
Topic: RB 433
Replies: 7
Views: 1202

Re: RB 433

Does the RB433 starts up when using 10m cable? Please describe power supply and PoE adapter that you are using.
by kirshteins
Tue Jan 22, 2013 11:48 am
Forum: Beginner Basics
Topic: How to configure RouterBoard 450G
Replies: 9
Views: 13384

Re: How to configure RouterBoard 450G

Here is a good article about initial configuration: http://wiki.mikrotik.com/wiki/Manual:In ... figuration
You can also use Quickset for the most basic configuration: http://wiki.mikrotik.com/wiki/Manual:Quickset
by kirshteins
Tue Jan 22, 2013 11:44 am
Forum: General
Topic: Switch chip features
Replies: 4
Views: 863

Re: Switch chip features

Rapid spanning-tree protocol capabilities are only available for the bridge.
by kirshteins
Fri Jan 18, 2013 10:24 am
Forum: Beginner Basics
Topic: speed up browsing
Replies: 1
Views: 954

Re: speed up browsing

by kirshteins
Thu Jan 03, 2013 9:12 am
Forum: RouterBOARD hardware
Topic: RB-493G ethernet lockups
Replies: 31
Views: 7788

Re: RB-493G ethernet lockups

This problem is fixed in RouterOS v6.x
by kirshteins
Fri Nov 09, 2012 2:38 pm
Forum: RouterBOARD hardware
Topic: RB 411GL ETH 1 GB
Replies: 3
Views: 1162

Re: RB 411GL ETH 1 GB

Auto-negotiation needs to be enabled on both ends if you want gigabit link to be established.
by kirshteins
Wed Oct 31, 2012 10:40 am
Forum: SwOS
Topic: Port name or description
Replies: 7
Views: 4176

Re: Port name or description

Currently it is not possible. We have this feature on our TODO list, but currently it is not know when it will be implemented.
by kirshteins
Tue Oct 30, 2012 8:28 am
Forum: SwOS
Topic: Ping time very strange - SOLVED
Replies: 5
Views: 3069

Re: Ping time very strange

Such ping times are normal. 250GS does not have powerful CPU to generate ping response faster than that.
by kirshteins
Thu Oct 25, 2012 10:32 am
Forum: Beginner Basics
Topic: not support Broadcom 5719 Quad-Port Gigabit Network
Replies: 4
Views: 1456

Re: not support Broadcom 5719 Quad-Port Gigabit Network

Yes, we added the support, but we do not have such card for tests. Please test and let us know if you experience any problems.
by kirshteins
Mon Oct 22, 2012 2:37 pm
Forum: RouterBOARD hardware
Topic: RB2011UAS-2HnD-IN Questions Topic
Replies: 215
Views: 93052

Re: RB2011UAS-2HnD-IN Questions Topic

It does not work at gigabit speeds... it does not negotiate at gigabit but at 100mbit, if I try to force it to gigabit it does not work. Comp has intel gigabit card (Intel 82566MM) which works ok at gigabit speeds with Dell, Cisco, also mikrotik RB450G and RB493G but not with RB2011UAS-2HnD-IN. JF ...
by kirshteins
Tue Oct 16, 2012 2:07 pm
Forum: General
Topic: FTP Server + USB Disk
Replies: 2
Views: 1451

Re: FTP Server + USB Disk

By default device running RouterOS runs a simple FTP server. The additional USB storage will show up as folder in RouterOS files.
by kirshteins
Tue Oct 16, 2012 2:02 pm
Forum: General
Topic: Problem in mangle "marck packet" With QueueTree
Replies: 1
Views: 477

Re: Problem in mangle "marck packet" With QueueTree

Yes, mark connection first and the mark packets based on connection mark.
by kirshteins
Tue Oct 16, 2012 11:51 am
Forum: General
Topic: Accidentally disabled Ethernet Interface
Replies: 1
Views: 3836

Re: Accidentally disabled Ethernet Interface

If you cannot connect through other interfaces or serial port there is not other choice but to visit that remote location. CLI, Winbox and Webfig has safe mode feature that can easily recover from such accidents http://wiki.mikrotik.com/wiki/Manual:Console#Safe_Mode
by kirshteins
Tue Oct 16, 2012 11:43 am
Forum: RouterBOARD hardware
Topic: 5.21 problem with WDS mesh
Replies: 1
Views: 875

Re: 5.21 problem with WDS mesh

Please send a reports with supout.rif files to support@mikrotik.com. We will examine what could be causing this problem.
by kirshteins
Tue Oct 09, 2012 4:02 pm
Forum: General
Topic: how to block https for facebook.com
Replies: 33
Views: 81219

Re: how to block https for facebook.com

Simply try blocking 443/TCP to
66.220.144.0-66.220.159.255
69.63.176.0-69.63.191.255
204.15.20.0-204.15.23.255
IP addresses
by kirshteins
Mon Oct 08, 2012 12:17 pm
Forum: Beginner Basics
Topic: not support Broadcom 5719 Quad-Port Gigabit Network
Replies: 4
Views: 1456

Re: not support Broadcom 5719 Quad-Port Gigabit Network

Thank you for the report. We will add support for this card in next release of RouterOS v6.
by kirshteins
Thu Sep 27, 2012 3:42 pm
Forum: General
Topic: linux wine netinstall and compact flash - howto?
Replies: 7
Views: 4158

Re: linux wine netinstall and compact flash - howto?

i tryed netinstall using wine (In archlinux), 9/2012 and it shows som bind bootp failed...error...
Try running Netinstall as superuser.
by kirshteins
Tue Sep 18, 2012 12:36 pm
Forum: RouterBOARD hardware
Topic: RB750 - Switched ports issue
Replies: 7
Views: 2582

Re: RB750 - Switched ports issue

1. What exactly was not working as expected? There are many improvements for the PoE-out in firmware that comes together with RouterOS v5.20 . Its recommended to upgrade. http://wiki.mikrotik.com/wiki/Manual:PoE-Out 2. VLAN tagging, trunking, stripping is supported by RouterOS bridging together with...
by kirshteins
Wed Aug 15, 2012 11:00 am
Forum: Beginner Basics
Topic: RB1100ahx2
Replies: 1
Views: 770

Re: RB1100ahx2

If you need to use all 10 ports in one group it would be best to use bridge. Here is an example that covers simple VLAN trunking with bridge: http://wiki.mikrotik.com/wiki/Vlans_on_ ... nvironment
by kirshteins
Mon Aug 06, 2012 9:26 am
Forum: General
Topic: how to see if mdix-enabled is YES or NO in an interface??
Replies: 3
Views: 1478

Re: how to see if mdix-enabled is YES or NO in an interface?

mdix-enable works only for RB500.
by kirshteins
Fri Jul 27, 2012 12:11 pm
Forum: General
Topic: RB1100AHX2 kernel corrupted, then, Invalid file ID.
Replies: 1
Views: 855

Re: RB1100AHX2 kernel corrupted, then, Invalid file ID.

Try to reinstall this router with Netinstall: http://wiki.mikrotik.com/wiki/Netinstall
by kirshteins
Fri Jul 27, 2012 10:46 am
Forum: General
Topic: Problem with source natting udp/5004
Replies: 2
Views: 679

Re: Problem with source natting udp/5004

Please export and post the NAT rules.
by kirshteins
Thu Jul 26, 2012 10:45 am
Forum: General
Topic: how to see if mdix-enabled is YES or NO in an interface??
Replies: 3
Views: 1478

Re: how to see if mdix-enabled is YES or NO in an interface?

Auto-MDIX is enabled by default in RouterOS and you cannot disable it.
by kirshteins
Thu Jul 26, 2012 10:40 am
Forum: General
Topic: FTP PASS Server behind Mikrotik Firewall
Replies: 2
Views: 905

Re: FTP PASS Server behind Mikrotik Firewall

Do you mean FTP forwarding? http://wiki.mikrotik.com/wiki/Forwardin ... nternal_IP
Make sure FTP NAT helper is enabled.
by kirshteins
Wed Jul 25, 2012 12:18 pm
Forum: SwOS
Topic: The Crazy Ghost Loop ! ! ! Killing my network
Replies: 5
Views: 4742

Re: The Crazy Ghost Loop ! ! ! Killing my network

From your network diagram it is not possible to determine the source of the loop. Try to limit broadcast storm with broadcast storm control feature:

http://wiki.mikrotik.com/wiki/SwOS#Forwarding_Tab
by kirshteins
Wed Jul 25, 2012 11:57 am
Forum: Wireless Networking
Topic: Problem with WDS and Virtual APS
Replies: 2
Views: 580

Re: Problem with WDS and Virtual APS

Is protocol-mode=rstp set on WDS bridge interface?
by kirshteins
Wed Jul 25, 2012 11:54 am
Forum: RouterBOARD hardware
Topic: Tagged vlans
Replies: 2
Views: 732

Re: Tagged vlans

There is no Routerboard 1300AH. Did you mean RB1200 or RB1100AH? VLAN tagging, untagging and forwarded is possible on all Routerboard models using bridge feature.
by kirshteins
Wed Jul 25, 2012 11:50 am
Forum: SwOS
Topic: Default gateway
Replies: 8
Views: 4004

Re: Default gateway

Sorry for resurrecting this old thread, but how is it possible? We have 2 Mikrotik SXT-5HNDs and we would like to manage them remotely. At this time, we can only access them when the pc is on the same VLAN or connected to the same switch.
Yes, it is possible to manage RB250GS remotely.
by kirshteins
Wed Jul 18, 2012 2:48 pm
Forum: Beginner Basics
Topic: new 750GL no router only working as a switch
Replies: 1
Views: 657

Re: new 750GL no router only working as a switch

If ping fails with "no route to host" then you should add specific route for network of this address or add default gateway.
by kirshteins
Tue Jun 26, 2012 10:18 am
Forum: General
Topic: RB1100 with 2 seperate networks and only 1 gateway
Replies: 2
Views: 544

Re: RB1100 with 2 seperate networks and only 1 gateway

VLANs are not necessary in this case. Please post your configuration if possible. Also point out which network cannot access internet.

ros code

/export compact
by kirshteins
Tue Jun 26, 2012 8:51 am
Forum: General
Topic: Bloquear Facebook en modo seguro httpS://www.facebook.com
Replies: 5
Views: 13162

Re: Bloquear Facebook en modo seguro httpS://www.facebook.co

Block
66.220.144.0-66.220.159.255
69.63.176.0-69.63.191.255
204.15.20.0-204.15.23.255
address ranges and you should be fine.
by kirshteins
Fri Jun 15, 2012 1:27 pm
Forum: General
Topic: Problem to reset routerboard
Replies: 1
Views: 601

Re: Problem to reset routerboard

by kirshteins
Thu Jun 07, 2012 11:00 am
Forum: Beginner Basics
Topic: Switch basics?
Replies: 6
Views: 1758

Re: Switch basics?

There is some traffic that will go only through the switch chip and no CPU of the router. You can change that with these features.
by kirshteins
Thu Jun 07, 2012 10:43 am
Forum: Beginner Basics
Topic: Switch basics?
Replies: 6
Views: 1758

Re: Switch basics?

1) Switch rules can do basic traffic filtering. Copy to CPU will send copy of the traffic to CPU while redirect to CPU will send actual traffic.
2) You switch ports by assign master-port to slave ports, so master-port is a must for such configuration.
3) There is a mirroring feature.
by kirshteins
Thu Jun 07, 2012 9:55 am
Forum: General
Topic: SSTP Bridge
Replies: 1
Views: 1713

Re: SSTP Bridge

From http://wiki.mikrotik.com/wiki/Manual:Interface/SSTP:
SSTP also supports BCP which allows to bridge SSTP tunnel with local interface.
by kirshteins
Tue Jun 05, 2012 1:47 pm
Forum: General
Topic: RB450G switch chip - question
Replies: 10
Views: 3913

Re: RB450G switch chip - question

You cannot configure VLAN header mode for CPU ports, so any VLAN tagged traffic remains unchanged. Exactly what configuration are you trying to achieve with VLAN table?
by kirshteins
Fri Jun 01, 2012 10:43 am
Forum: General
Topic: Bridge ppp-out interface
Replies: 1
Views: 986

Re: Bridge ppp-out interface

by kirshteins
Thu May 31, 2012 2:33 pm
Forum: General
Topic: Dynamic VLAN (VLAN mac based) which board
Replies: 3
Views: 2394

Re: Dynamic VLAN (VLAN mac based) which board

Do you mean something like bridging all ports. Adding VLAN interface on top of this bridge and then adding IP address to VLAN interface?
by kirshteins
Mon May 28, 2012 3:41 pm
Forum: General
Topic: RB450G switch chip - question
Replies: 10
Views: 3913

Re: RB450G switch chip - question

Switched traffic is not going through the CPU, so you should handle VLAN with bridges and VLAN interfaces. Here is an example: http://wiki.mikrotik.com/wiki/Vlans_on_ ... nvironment
by kirshteins
Mon May 28, 2012 3:19 pm
Forum: Beginner Basics
Topic: NAT problem
Replies: 6
Views: 826

Re: NAT problem

Please export and post your NAT rules here. In diagram it says TCP for the NAT rule. Is it UDP or TCP traffic you are trying to forward?
by kirshteins
Mon May 28, 2012 12:59 pm
Forum: Beginner Basics
Topic: on 751U-2HnD, how i get ip address assign with VLAN on eth 1
Replies: 2
Views: 619

Re: on 751U-2HnD, how i get ip address assign with VLAN on e

Is the traffic from ISP VLAN tagged or do want to tag traffic going through your router?
by kirshteins
Mon May 28, 2012 12:21 pm
Forum: General
Topic: RB450G switch chip - question
Replies: 10
Views: 3913

Re: RB450G switch chip - question

The CPU of RB450G does not support jumbo frames, so this features is also not supported for the switch chip.

VLANs are managed in sligtly different way in RB450G. You can check out the following example:
http://wiki.mikrotik.com/wiki/Switch_Ch ... heros_8316
by kirshteins
Mon May 28, 2012 11:15 am
Forum: Beginner Basics
Topic: NAT problem
Replies: 6
Views: 826

Re: NAT problem

Currently you problem is not clear to me. Please try explaining with more details.
by kirshteins
Mon May 28, 2012 10:47 am
Forum: General
Topic: Remove IP and mac appearance in Winbox
Replies: 1
Views: 1354

Re: Remove IP and mac appearance in Winbox

Disable this interface from neighbor discovery. For example,
/ip neighbor discovery disable ether1
by kirshteins
Mon May 28, 2012 8:58 am
Forum: Beginner Basics
Topic: "All in one" box possible?
Replies: 7
Views: 1316

Re: "All in one" box possible?

It is not possible to mirror traffic from Wlan port to ethernet port. You can mirror traffic between switch chip: http://wiki.mikrotik.com/wiki/Switch_Chip_Features#Introduction http://wiki.mikrotik.com/wiki/Switch_Chip_Features#Port_Mirroring If you are routing or bridging traffic from Wlan interfa...
by kirshteins
Fri May 25, 2012 8:05 am
Forum: Beginner Basics
Topic: remove switch modus
Replies: 6
Views: 1211

Re: remove switch modus

Switching mode is configured by setting master-port. If master is not set there is no switching.
by kirshteins
Thu May 24, 2012 9:30 am
Forum: Beginner Basics
Topic: remove switch modus
Replies: 6
Views: 1211

Re: remove switch modus

What do you mean by "switch modus"? By default RB493AH ports are not switched.
by kirshteins
Wed May 23, 2012 10:38 am
Forum: Beginner Basics
Topic: RB750 and bandwidth limit
Replies: 3
Views: 3941

Re: RB750 and bandwidth limit

It is best to use queues for limiting bandwidth http://wiki.mikrotik.com/wiki/Manual:Queue
by kirshteins
Wed May 23, 2012 7:56 am
Forum: SwOS
Topic: RB1200 Question
Replies: 3
Views: 1924

Re: RB1200 Question

No it is not possible. SwOS works only on RB250GS.
by kirshteins
Mon May 21, 2012 10:23 am
Forum: General
Topic: Port mirroring on master port
Replies: 4
Views: 2207

Re: Port mirroring on master port

Yes, exactly.
by kirshteins
Mon May 21, 2012 8:37 am
Forum: General
Topic: Port mirroring on master port
Replies: 4
Views: 2207

Re: Port mirroring on master port

You cannot mirror all switch group traffic by mirroring the master-port. You can add switch rule and set any port as mirroring-source: http://wiki.mikrotik.com/wiki/Switch_Ch ... Rule_Table
by kirshteins
Fri May 18, 2012 12:43 pm
Forum: Beginner Basics
Topic: winbox upgrade 5.16 could not download file write failed (6)
Replies: 7
Views: 5770

Re: winbox upgrade 5.16 could not download file write failed

Is there enough storage space for the file?
by kirshteins
Thu May 17, 2012 4:32 pm
Forum: Beginner Basics
Topic: How to set dynamic ports.
Replies: 5
Views: 1090

Re: How to set dynamic ports.

Rkvikstad,

Please read http://wiki.mikrotik.com/wiki/Manual:First_time_startup and http://wiki.mikrotik.com/wiki/Manual:In ... figuration. It cover the most basic things about configuring Mikrotik routers.
by kirshteins
Wed May 16, 2012 9:40 am
Forum: Beginner Basics
Topic: How to set dynamic ports.
Replies: 5
Views: 1090

Re: How to set dynamic ports.

You need to configure DHCP client: http://wiki.mikrotik.com/wiki/Manual:IP/DHCP_Client
by kirshteins
Tue May 15, 2012 3:59 pm
Forum: Beginner Basics
Topic: VLANs work over trunk, but how do I tag switch ports?
Replies: 8
Views: 4662

Re: VLANs work over trunk, but how do I tag switch ports?

RB750GL switch is quite limited when working with VLAN, but you can achieve this using bridge and VLAN interfaces. Take a look at this example to get the idea: http://wiki.mikrotik.com/wiki/Vlans_on_Mikrotik_environment Currently such VLAN management at hardware is possible on router with AR8316 swi...
by kirshteins
Tue May 15, 2012 10:20 am
Forum: Beginner Basics
Topic: RB751U-2HnD restoring configuration
Replies: 2
Views: 1034

Re: RB751U-2HnD restoring configuration

Do not load backups generated on different routerbaord models. Use "export compact" -> "import" instead to transfer configuration. Try resetting router with this method: http://wiki.mikrotik.com/wiki/Manual:Password_reset or reinstall using Netinstall: http://wiki.mikrotik.com/wiki/Netinstall
by kirshteins
Mon May 14, 2012 1:18 pm
Forum: Beginner Basics
Topic: API or Terminal Firewall Filter Rate Stats
Replies: 2
Views: 634

Re: API or Terminal Firewall Filter Rate Stats

Do you mean something like:
/ip firewall filter print stats interval=1
by kirshteins
Fri May 11, 2012 4:09 pm
Forum: Forwarding Protocols
Topic: Port Forwarding is blocking outbound traffic
Replies: 3
Views: 2059

Re: Port Forwarding is blocking outbound traffic

Use public IP, if you need to forward traffic coming to public interface.
by kirshteins
Fri May 11, 2012 12:14 pm
Forum: Beginner Basics
Topic: Winbox fail to open RB when the route is not available
Replies: 2
Views: 664

Re: Winbox fail to open RB when the route is not available

What address are you using to connect to the router? Please provide some more details like routes and firewall rules.
by kirshteins
Fri May 11, 2012 11:09 am
Forum: Wireless Networking
Topic: 3 ethers 3 networks 2 gateways - help me out here
Replies: 1
Views: 540

Re: 3 ethers 3 networks 2 gateways - help me out here

Make sure you masquerade NAT rule is correct. Also trace-route might help you to diagnose where the problem is.
by kirshteins
Fri May 11, 2012 11:05 am
Forum: Forwarding Protocols
Topic: Port Forwarding is blocking outbound traffic
Replies: 3
Views: 2059

Re: Port Forwarding is blocking outbound traffic

Firewall rules can be exported by "/ip firewall export" 3 X ;;; FTP to FS chain=dstnat action=dst-nat to-addresses=10.0.0.80 to-ports=21 protocol=tcp dst-port=21 When enabled this rule will forward all TCP/21 traffic ti 10.0.0.80. Specify in-interface or dst-address to apply it only for public traff...
by kirshteins
Fri May 11, 2012 9:27 am
Forum: Beginner Basics
Topic: MicroTik Router RB750 downgrade ,after reboot , not access
Replies: 2
Views: 994

Re: MicroTik Router RB750 downgrade ,after reboot , not acce

From what version to what version did you downgrade? You can reinstall RouterOS with Netinstall: http://wiki.mikrotik.com/wiki/Netinstall
by kirshteins
Thu May 10, 2012 1:15 pm
Forum: Beginner Basics
Topic: making NAT ip on mikrotik rb750g
Replies: 2
Views: 704

Re: making NAT ip on mikrotik rb750g

The following guide covers basic configuration: http://wiki.mikrotik.com/wiki/Manual:In ... figuration
by kirshteins
Thu May 03, 2012 10:58 am
Forum: General
Topic: Bonding bad performance on TCP
Replies: 18
Views: 4856

Re: Bonding bad performance on TCP

Please describe how are you testing this link? Are you using the same routers with bonded interfaces for generating traffic? What is the CPU load?
by kirshteins
Thu Apr 26, 2012 2:22 pm
Forum: Beginner Basics
Topic: Udp Broadcast over VPN mikrotik
Replies: 8
Views: 6255

Re: Udp Broadcast over VPN mikrotik

Perhaps you can use BCP bridging feature: http://wiki.mikrotik.com/wiki/Manual:BC ... _bridging)
by kirshteins
Thu Apr 26, 2012 12:36 pm
Forum: RouterBOARD hardware
Topic: RB1100 ROS 5.12 winbox time out
Replies: 6
Views: 2333

Re: RB1100 ROS 5.12 winbox time out

Was it accessible via SSH or telnet?
by kirshteins
Thu Apr 26, 2012 12:33 pm
Forum: General
Topic: RB450g Switch rules 2 trunks
Replies: 2
Views: 630

Re: RB450g Switch rules 2 trunks

Do you mean multiple VLAN on access port? If so, how do you determine what VLAN-ID is set for a specific packet?
by kirshteins
Fri Apr 20, 2012 10:40 am
Forum: General
Topic: Loopguard
Replies: 35
Views: 26338

Re: Loopguard

How will if I use RB250 (SwOS) with RouterOS? Does SwOS can do this?
SwOS has Broadcast Storm Control: http://wiki.mikrotik.com/images/9/9c/Sw ... arding.png. You can limit how many broadcast frames per second will be forwarded by each port (e.g. 1k f/s, 2k f/s etc.).
by kirshteins
Tue Apr 17, 2012 12:04 pm
Forum: General
Topic: routerboard 1000 boot problem
Replies: 1
Views: 472

Re: routerboard 1000 boot problem

What baud-rate are you using on your computer? Routerboards by default use 115200 baud-rate.
by kirshteins
Fri Apr 13, 2012 8:00 am
Forum: SwOS
Topic: SwOS 1.6 Web Interface - HOTS - ERROR:Lost Connection
Replies: 8
Views: 4741

Re: SwOS 1.6 Web Interface - HOTS - ERROR:Lost Connection

How many hosts are there in host table, how much traffic is going through the switch and whats the ping latency?
by kirshteins
Thu Apr 12, 2012 12:32 pm
Forum: Beginner Basics
Topic: Portforwarding to different ports
Replies: 5
Views: 4928

Re: Portforwarding to different ports

Take a look at http://wiki.mikrotik.com/wiki/Packet_Flow. "Destination NAT" is before "Filter Forward", so you need to accept dst-port=8443 not dst-port=48443 traffic.
by kirshteins
Thu Apr 12, 2012 11:05 am
Forum: Beginner Basics
Topic: Connecting from WAN via winbox/http
Replies: 4
Views: 26515

Re: Connecting from WAN via winbox/http

Make sure the access not blocked by ip firewall filter or disabled by ip service.
by kirshteins
Thu Apr 12, 2012 11:02 am
Forum: Beginner Basics
Topic: Portforwarding to different ports
Replies: 5
Views: 4928

Re: Portforwarding to different ports

Try specifying in-interface or public IP address as dst-address for ";;; ips webfront" rule.
by kirshteins
Thu Apr 05, 2012 7:39 am
Forum: General
Topic: Basic vlan on switchchip question
Replies: 2
Views: 2466

Re: Basic vlan on switchchip question

Try adding new-dst-ports=ether1 to the second rule.
by kirshteins
Thu Apr 05, 2012 7:24 am
Forum: Beginner Basics
Topic: How to bridge Wirless with Ethernet 2,3,4,5 of RB751U
Replies: 2
Views: 848

Re: How to bridge Wirless with Ethernet 2,3,4,5 of RB751U

Simply add bridge interface
/interface bridge add
and add ports one by one
/interface bridge port add bridge=bridge1 interface=ether2
...
by kirshteins
Wed Apr 04, 2012 12:11 pm
Forum: RouterBOARD hardware
Topic: Gigabit port compatibility?
Replies: 12
Views: 2187

Re: Gigabit port compatibility?

RB450G has been successfully used in many production networks and we haven't observed any packet drops or other problems. Please describe what switches are you connecting to RB450G. How is the auto-negotiation, speed and duplex mode configured on both ends? Perhaps there is some specific traffic cau...
by kirshteins
Wed Apr 04, 2012 8:34 am
Forum: RouterBOARD hardware
Topic: Port mirroring on routerboards
Replies: 1
Views: 770

Re: Port mirroring on routerboards

Please post what type of switch chip does this router have. You can check it with
/interface ethernet switch print
by kirshteins
Mon Apr 02, 2012 1:53 pm
Forum: SwOS
Topic: Default gateway
Replies: 8
Views: 4004

Re: Default gateway

we would well welcome the default gateway option - since we would like to monitor those device remotely from a central location.
Thanks!
It is already possible without default gateway option.
by kirshteins
Wed Mar 28, 2012 2:42 pm
Forum: General
Topic: redirect clients
Replies: 2
Views: 518

Re: redirect clients

Try adding a dst-nat rule that redirects traffic based on specific src-addresses. http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT
by kirshteins
Wed Mar 28, 2012 2:25 pm
Forum: Beginner Basics
Topic: restore backup 450G->1100AH
Replies: 5
Views: 1204

Re: restore backup 450G->1100AH

Use "/export compact" introduced in latest RouterOS version.
by kirshteins
Tue Mar 27, 2012 11:05 am
Forum: Beginner Basics
Topic: assigning ip address to an interface
Replies: 3
Views: 784

Re: assigning ip address to an interface

Make sure DHCP client is supposed to get default gateway from the DHCP server.
by kirshteins
Mon Mar 26, 2012 9:09 am
Forum: Scripting
Topic: Allowing particular address-range packets, using firewall...
Replies: 1
Views: 1258

Re: Allowing particular address-range packets, using firewal

There are no "/ip firewall rule" sub-menu, but there are "/ip firewall filter", "/ip firewall nat" and "/ip firewall mangle". You can simply use this syntax 192.168.2.1-192.168.2.50 whenever you need to specify a range of IP addresses.
by kirshteins
Thu Mar 22, 2012 8:48 am
Forum: General
Topic: Port Foward inside Network
Replies: 3
Views: 782

Re: Port Foward inside Network

It seems you need to masquerade such traffic: http://wiki.mikrotik.com/wiki/Hairpin_NAT
by kirshteins
Tue Mar 20, 2012 9:58 am
Forum: General
Topic: RB 450G router Mac flooding issue
Replies: 1
Views: 616

Re: RB 450G router Mac flooding issue

What kind of traffic is incoming. Do you experience some kind of network loop?
by kirshteins
Thu Mar 15, 2012 3:52 pm
Forum: General
Topic: Joining 2 subnets together.
Replies: 5
Views: 1445

Re: Joining 2 subnets together.

Perhaps you can bridge or switch networks together. Then do src-address filtering on gateways to drop traffic from one of the offices.
by kirshteins
Fri Mar 09, 2012 12:28 pm
Forum: Beginner Basics
Topic: Redirecting IP Address
Replies: 6
Views: 6147

Re: Redirecting IP Address

You can use this method: http://wiki.mikrotik.com/wiki/How_to_Bl ... sing_Proxy
You will need to specify redirect-to.
by kirshteins
Thu Mar 08, 2012 2:01 pm
Forum: Beginner Basics
Topic: Initial configuration
Replies: 6
Views: 1100

Re: Initial configuration

Try trace-routing to some internet address. It might give you some information where the problem is.
by kirshteins
Wed Mar 07, 2012 1:45 pm
Forum: RouterBOARD hardware
Topic: RB 1100AHX2 problem at boot
Replies: 7
Views: 3275

Re: RB 1100AHX2 problem at boot

What step is unsuccessful? What error message are you getting?
by kirshteins
Wed Mar 07, 2012 12:13 pm
Forum: Beginner Basics
Topic: Initial configuration
Replies: 6
Views: 1100

Re: Initial configuration

Are you able to access internet from router itself? Please post you DHCP server configuration.
by kirshteins
Wed Mar 07, 2012 8:59 am
Forum: RouterBOARD hardware
Topic: how to set valid ip to mikrotik??
Replies: 2
Views: 1324

Re: how to set valid ip to mikrotik??

Simpy add masquerade NAT rule with public interface specified as an out-interface.
by kirshteins
Mon Mar 05, 2012 10:24 am
Forum: Wireless Networking
Topic: how to access RB MAC ID from a browser
Replies: 3
Views: 741

Re: how to access RB MAC ID from a browser

MAC Winbox communicates with router using data link layer (layer2). Web browsers cannot do that.
by kirshteins
Wed Feb 29, 2012 10:43 am
Forum: Beginner Basics
Topic: Configure Router Boards
Replies: 10
Views: 1064

Re: Configure Router Boards

Use shift+insert or middle mouse button to paste into Putty.
by kirshteins
Wed Feb 22, 2012 8:18 am
Forum: General
Topic: Combining switches on RB1100
Replies: 2
Views: 606

Re: Combining switches on RB1100

Bridging master ports is the only option in this case.
by kirshteins
Mon Feb 20, 2012 12:17 pm
Forum: Beginner Basics
Topic: kernel failure
Replies: 1
Views: 466

Re: kernel failure

Try upgrading to RouterOS v5.13. Send autosupout.rif file to support@mikrotik.com if problem persists.
by kirshteins
Mon Feb 20, 2012 12:13 pm
Forum: Beginner Basics
Topic: Multiply VLAN (RB493G - 5.12)
Replies: 1
Views: 719

Re: Multiply VLAN (RB493G - 5.12)

You must use unique name for each VLAN interface.
by kirshteins
Tue Feb 07, 2012 2:39 pm
Forum: Beginner Basics
Topic: Vlan RB750 (Russia)
Replies: 4
Views: 820

Re: Vlan RB750 (Russia)

Nearly all of those questions are covered in the manual:

http://wiki.mikrotik.com/wiki/VLAN
by kirshteins
Fri Feb 03, 2012 9:09 am
Forum: Forwarding Protocols
Topic: Mikrotik 1100AH in switching mode
Replies: 1
Views: 2038

Re: Mikrotik 1100AH in switching mode

need to configure both Vlan trunk & access port in Mikrotik 1100 AH . port 1 to 8 will be the access port with different VLAN and port 10 will be trunk port .. This configuration is not possible as ether1-ether5 and ether6-ether10 belongs to separate switch chips. However toyu cab make the followin...
by kirshteins
Wed Feb 01, 2012 12:47 pm
Forum: Beginner Basics
Topic: receiving wol packets on routerboard 711-2Hn
Replies: 1
Views: 701

Re: receiving wol packets on routerboard 711-2Hn

Unfortunately Routerboard hardware does not support powering on received WOL packet.
by kirshteins
Wed Feb 01, 2012 12:05 pm
Forum: RouterBOARD hardware
Topic: Repeated RouterBOARD 450G spontainious reboots (crash?)
Replies: 1
Views: 803

Re: Repeated RouterBOARD 450G spontainious reboots (crash?)

Please describe the configuration of these routers. Is there are autosupout.rif file generated on the router after reboot?
by kirshteins
Tue Jan 31, 2012 2:08 pm
Forum: General
Topic: Why Bridge chooses Wifi int mac address?
Replies: 2
Views: 570

Re: Why Bridge chooses Wifi int mac address?

Bridge selects port with MAC address that has smallest numerical value and not by the type of interface.
by kirshteins
Tue Jan 31, 2012 1:53 pm
Forum: General
Topic: Bridge Problem with RB1200 not controlling Queue trees
Replies: 8
Views: 1132

Re: Bridge Problem with RB1200 not controlling Queue trees

Have you enabled use-ip-firewall in bridge settings?
by kirshteins
Tue Jan 31, 2012 12:40 pm
Forum: Forwarding Protocols
Topic: jump packets from a bridge to another
Replies: 1
Views: 496

Re: jump packets from a bridge to another

Try adding a bridge dst-nat rule, that will change dst. MAC address of specified source bridge to the MAC address of the target bridge.
by kirshteins
Fri Jan 27, 2012 8:11 am
Forum: SwOS
Topic: Typical vlan port based configuration? [solved]
Replies: 2
Views: 2192

Re: Typical vlan port based configuration?

Is this the configuration you are looking for?
http://wiki.mikrotik.com/wiki/SwOS/Router-On-A-Stick
by kirshteins
Thu Jan 26, 2012 8:16 am
Forum: SwOS
Topic: RB250GS problem
Replies: 1
Views: 1879

Re: RB250GS problem

What device are you linking to when this problem occurs?
by kirshteins
Mon Jan 23, 2012 9:19 am
Forum: General
Topic: Latency on RB1100 and RB800 ethernet ports on version 5.11
Replies: 5
Views: 2693

Re: Latency on RB1100 and RB800 ethernet ports on version 5.

It should be fixed, just not listed in changelog.
by kirshteins
Thu Jan 12, 2012 4:14 pm
Forum: SwOS
Topic: Default gateway
Replies: 8
Views: 4004

Re: Default gateway

There are no SwOS firmware version with an option to configure default gateway, but RB250GS can be remotely configured without VPN. It simply sends out replies to the same source IP, MAC and port where it received configuration packets from.
by kirshteins
Wed Jan 11, 2012 10:33 am
Forum: General
Topic: Latency on RB1100 and RB800 ethernet ports on version 5.11
Replies: 5
Views: 2693

Re: Latency on RB1100 and RB800 ethernet ports on version 5.

Thank you for the report. This problem will be fixed in RouterOS v5.12. Only RB1100 ether11-ether13 and RB800 ether3 ports are affected by this problem.
by kirshteins
Mon Dec 12, 2011 12:57 pm
Forum: Beginner Basics
Topic: Mikrotik Firewall
Replies: 6
Views: 1536

Re: Mikrotik Firewall

Please describe what do you mean by "access share file"?
by kirshteins
Thu Dec 01, 2011 9:45 am
Forum: General
Topic: RB493G switch 8 ports
Replies: 14
Views: 5024

Re: RB493G switch 8 ports

It will work as one switch, but actually its two switches bridged together: switch <-> bridge <-> switch.
by kirshteins
Wed Nov 30, 2011 2:43 pm
Forum: General
Topic: RB493G switch 8 ports
Replies: 14
Views: 5024

Re: RB493G switch 8 ports

No, ether1,ether6-ether9 ports are connected to switch-chip1, so only ether6-ether9 can be slave ports for ether1. Any switch-chip1 <-> switch-chip2 traffic needs to go through the CPU.
by kirshteins
Wed Nov 30, 2011 2:06 pm
Forum: General
Topic: RB493G switch 8 ports
Replies: 14
Views: 5024

Re: RB493G switch 8 ports

Ether1,ether6-ether9 ports are connected to switch-chip1, ether2-ether5 are connected to switch-chip2. Any of the port from switch-chip1 or switch-chip2 can be configured as master-port by assigning assign other port from the same switch as its slave port. There can only be one master-port per each ...
by kirshteins
Wed Nov 30, 2011 1:51 pm
Forum: SwOS
Topic: cant upgrade 250gs
Replies: 2
Views: 1792

Re: cant upgrade 250gs

Try manual power cycle.
by kirshteins
Wed Nov 30, 2011 8:50 am
Forum: General
Topic: Missing Switch tab on Webfig
Replies: 4
Views: 624

Re: Missing Switch tab on Webfig

What versions and what routers have this problem?
by kirshteins
Thu Nov 24, 2011 2:38 pm
Forum: Wireless Networking
Topic: RouterOS v5.8 - BUG
Replies: 2
Views: 758

Re: RouterOS v5.8 - BUG

Through what interface are you connecting? Are you using MAC or IP address in Winbox loader?
by kirshteins
Thu Nov 24, 2011 12:12 pm
Forum: General
Topic: run-after-reset - RouterOS3.28 firmware 2.20
Replies: 13
Views: 5163

Re: run-after-reset - RouterOS3.28 firmware 2.20

Hey guys, How about if click on reset button, which is on the router case? Is it same thing click this button and do command /sys res ? No, "/system reset-configuration" generates "auto-before-reset.backup" backup file by default, while button will not. Also there are many parameters for the softwa...
by kirshteins
Mon Nov 21, 2011 3:21 pm
Forum: General
Topic: Ethernet Stats not showing
Replies: 2
Views: 523

Re: Ethernet Stats not showing

Only few Routerboards like 450G and 493G supports this feature in v4.x. In RouterOS v5.x it is supported on all Routerboards.
by kirshteins
Thu Nov 17, 2011 9:26 am
Forum: General
Topic: subnetting
Replies: 2
Views: 599

Re: subnetting

It seems calculation was done with /26 mask and not /18. Fixed.
by kirshteins
Wed Nov 16, 2011 10:00 am
Forum: RouterBOARD hardware
Topic: RB1200 series power consumption
Replies: 2
Views: 2169

Re: RB1200 series power consumption

RB1200 consumes 12-25W power. This information can be found in the manual:

http://routerboard.com/pdf/308/rb1200ug.pdf
by kirshteins
Tue Nov 08, 2011 10:03 am
Forum: General
Topic: Interface marked as invalid - RB1200, ROS5.7
Replies: 2
Views: 543

Re: Interface marked as invalid - RB1200, ROS5.7

In ROS v5.7 there is a know issue, where bridge could crash and appear as "unknown" interface. This bug is fixed in ROS v5.8.
by kirshteins
Mon Oct 31, 2011 3:46 pm
Forum: Beginner Basics
Topic: RB493G 5.6
Replies: 3
Views: 3426

Re: RB493G 5.6

What does "/tool profile" command show when CPU is up to 100%?
by kirshteins
Tue Oct 25, 2011 2:42 pm
Forum: General
Topic: why ROS 5.7 only support one port of 82571GB
Replies: 3
Views: 1070

Re: why ROS 5.7 only support one port of 82571GB

If you have any problems with ethernet interfaces not recognized in RouterOS, generate and send supout.rif file to support@mikrotik.com
http://wiki.mikrotik.com/wiki/Manual:Su ... utput_File
by kirshteins
Wed Oct 19, 2011 8:57 am
Forum: General
Topic: The way to set Mikrotik into GOD mode..New secrets revealed!
Replies: 22
Views: 8209

Re: The way to set Mikrotik into GOD mode..New secrets revea

any good news on the mac duplications issue as you call it "MAC address cloning issue"?
Try using this feature: http://wiki.mikrotik.com/wiki/Manual:In ... protection
by kirshteins
Tue Oct 18, 2011 1:14 pm
Forum: General
Topic: The way to set Mikrotik into GOD mode..New secrets revealed!
Replies: 22
Views: 8209

Re: The way to set Mikrotik into GOD mode..New secrets revea

Hacker can use same MAC address as legitimate user, so blocking by MAC address is not very good solution.
by kirshteins
Tue Oct 18, 2011 9:36 am
Forum: General
Topic: The way to set Mikrotik into GOD mode..New secrets revealed!
Replies: 22
Views: 8209

Re: The way to set Mikrotik into GOD mode..New secrets revea

vetusa2 , there are several ways to block traffic by MAC addresses in RouterOS. In "wireless access-list" section 00:00:00:00:00:00 MAC address value is taken as "any MAC address" and not any single numerical value. You need to use IP firewall or bridge firewall filters to block such MAC address. I...
by kirshteins
Mon Oct 17, 2011 9:44 am
Forum: General
Topic: The way to set Mikrotik into GOD mode..New secrets revealed!
Replies: 22
Views: 8209

Re: The way to set Mikrotik into GOD mode..New secrets revea

Please describe how are you blocking 00:00:00:00:00:00 MAC address.
by kirshteins
Thu Oct 13, 2011 12:08 pm
Forum: Beginner Basics
Topic: transparent bridging
Replies: 4
Views: 1484

Re: transparent bridging

You can use bridge filter to achieve this scenario. http://wiki.mikrotik.com/wiki/Bridge. Simply accept all necessary dst. and src. MAC addresses and drop the rest of the traffic.
by kirshteins
Wed Oct 12, 2011 12:03 pm
Forum: General
Topic: NAT issue
Replies: 2
Views: 434

Re: NAT issue

by kirshteins
Wed Oct 12, 2011 11:00 am
Forum: RouterBOARD hardware
Topic: RB-493G lockups
Replies: 2
Views: 1021

Re: RB-493G lockups

Please generate supout.rif file after such lockup and send it to support@mikrotik.com.
by kirshteins
Mon Oct 10, 2011 10:36 am
Forum: RouterBOARD hardware
Topic: Routerboard 435g
Replies: 11
Views: 2805

Re: Routerboard 435g

Please describe how this board is powered. Are you using Mikrotik gigabit POE adapter?
by kirshteins
Mon Sep 26, 2011 9:31 am
Forum: General
Topic: action=dst-nat NOT working
Replies: 11
Views: 1999

Re: action=dst-nat NOT working

Bridge Dst-NAT works fine for me. Are counters increasing for this rule? How do you determine that packets get dropped and where they get dropped?
by kirshteins
Mon Sep 19, 2011 8:29 am
Forum: SwOS
Topic: Undocumented reboot feature?
Replies: 3
Views: 2122

Re: Undocumented reboot feature?

[url]http://<ip_of_switch>/reboot[/url] is an action of reboot button submit.
by kirshteins
Fri Sep 16, 2011 11:03 am
Forum: Beginner Basics
Topic: restrict 3mb to 450g for one Ethernet
Replies: 4
Views: 586

Re: restrict 3mb to 450g for one Ethernet

This is hardware feature of this board and 3M value cannot be supported.
by kirshteins
Fri Sep 16, 2011 9:42 am
Forum: General
Topic: Bridging Filter
Replies: 4
Views: 755

Re: Bridging Filter

Will it drop all traffic except 10.0.0.0/16 IP type?
Yes.
I want to have PPPoE and everything but 10.0.0.0/16 traffic dropped.
Take a note that ARP requests/replies will be blocked too.
by kirshteins
Tue Sep 13, 2011 8:29 am
Forum: General
Topic: how add multi ip in dst address in winbox
Replies: 4
Views: 1970

Re: how add multi ip in dst address in winbox

Dst address box takes IP address range or subnet. You can also use dst-address-list:
http://wiki.mikrotik.com/wiki/Manual:IP ... dress_list
by kirshteins
Thu Sep 08, 2011 2:52 pm
Forum: General
Topic: issue of open some web page in the mikrotik
Replies: 32
Views: 9269

Re: issue of open some web page in the mikrotik

What error message is given when customers cannot open these web pages? Are you using web proxy?
by kirshteins
Tue Sep 06, 2011 9:09 am
Forum: General
Topic: RSTP - asynchronous interface state
Replies: 2
Views: 485

Re: RSTP - asynchronous interface state

From your description everything appears to be working fine. Only BDPU frames will be exchanged through WDS link to maintain RSTP topology. No other traffic will be forwarded through this link.
by kirshteins
Tue Sep 06, 2011 8:29 am
Forum: General
Topic: weird bridge bandwidth manager
Replies: 2
Views: 448

Re: weird bridge bandwidth manager

Are you adding physical or bridge interface to these mangle rules?
by kirshteins
Thu Sep 01, 2011 11:04 am
Forum: General
Topic: Routeros5.6 not working in RB333 & RB433
Replies: 21
Views: 3359

Re: Routeros5.6 not working in RB333 & RB433

Is problem solved on both RB333 & RB433? What was the solution?
by kirshteins
Thu Sep 01, 2011 10:27 am
Forum: Beginner Basics
Topic: question on an RB750
Replies: 5
Views: 1154

Re: question on an RB750

By default configuration all input traffic on ether1 is dropped and ether2-ether5 are switched (ether2 switch master-port; ether3-ether5 switch slave-ports). RB750 ether1 does not support switching.
by kirshteins
Thu Sep 01, 2011 9:22 am
Forum: General
Topic: Bridging Filter
Replies: 4
Views: 755

Re: Bridging Filter

The following example should block all ARP traffic that is not "issued from" or "destined to" 10.0.0.0/8 /interface bridge filter add action=accept arp-dst-address=10.0.0.0/8 chain=forward mac-protocol=arp add action=accept arp-src-address=10.0.0.0/8 chain=forward mac-protocol=arp add action=drop ch...
by kirshteins
Wed Aug 24, 2011 1:00 pm
Forum: General
Topic: Routeros5.6 not working in RB333 & RB433
Replies: 21
Views: 3359

Re: Routeros5.6 not working in RB333 & RB433

What wireless card are you using? Does problem occurs on RB333 without any Wlan card? Is problem solved by upgrading firmware on RB433?
by kirshteins
Fri Aug 19, 2011 8:00 am
Forum: General
Topic: Webproxy: Https
Replies: 5
Views: 1001

Re: Webproxy: Https

You can easily add them to the address list :)
by kirshteins
Thu Aug 18, 2011 10:53 am
Forum: General
Topic: Webproxy: Https
Replies: 5
Views: 1001

Re: Webproxy: Https

This example covers all known Facebook addresses: /ip firewall address-list add address=66.220.144.0/20 disabled=no list=facebook_ip_addresses add address=69.63.176.0/20 disabled=no list=facebook_ip_addresses add address=204.15.20.0/22 disabled=no list=facebook_ip_addresses /ip firewall filter add a...
by kirshteins
Thu Aug 18, 2011 10:37 am
Forum: General
Topic: VLAN config for RB750GL and RB250GS
Replies: 4
Views: 4420

Re: VLAN config for RB750GL and RB250GS

RB750GL configuration appears to be fine. Please check the following example on how to configure 802.1Q Trunking using SwOS
http://wiki.mikrotik.com/wiki/SwOS/Router-On-A-Stick
by kirshteins
Mon Aug 15, 2011 2:33 pm
Forum: SwOS
Topic: SwOS version 1.6 released!
Replies: 15
Views: 13435

SwOS version 1.6 released!

What's new in 1.6: *) fixed problem - TCP could not work over slow or high latency links, hosts list could not be displayed; *) fixed problem - fixed SNMP use sysLocation.0 sysContact.0 & sysName.0 instead of sysLocation.1, etc; *) fixed problem - SNMP reported incorrect ifSpeed; *) made CPU reset ...
by kirshteins
Mon Aug 15, 2011 2:00 pm
Forum: SwOS
Topic: How to access RB on trunk port?
Replies: 2
Views: 1870

Re: How to access RB on trunk port?

You can use routing. You need to configure VLAN interface (vlan-id=300) on RB433 and assign IP address to this interface.
by kirshteins
Mon Aug 15, 2011 11:02 am
Forum: RouterBOARD hardware
Topic: 250GS or 750GL
Replies: 4
Views: 1331

Re: 250GS or 750GL

750GL supports only very basic switching features. More info: http://wiki.mikrotik.com/wiki/Switch_Chip_Features
250GS is a dedicated switch with more switching features
by kirshteins
Mon Aug 15, 2011 10:52 am
Forum: General
Topic: interface stop
Replies: 1
Views: 330

Re: interface stop

Please describe your problem in more details.
by kirshteins
Thu Aug 11, 2011 9:40 am
Forum: General
Topic: 750GL home setup need help
Replies: 15
Views: 2099

Re: 750GL home setup need help

Is SSH forwarding rule counters increasing?

Please post some additional configuration like: /ip address export, /interface ethernet export, /ip dhcp-server export
by kirshteins
Thu Aug 11, 2011 9:03 am
Forum: General
Topic: RB450G, ROS 4.6, link speed
Replies: 4
Views: 712

Re: RB450G, ROS 4.6, link speed

Gigabit speed can only be auto-negotiated and there will be no link if you force it. Is it problem only with ether2 or other ports as well?
by kirshteins
Tue Aug 09, 2011 10:23 am
Forum: General
Topic: RB1100, Port Failed and so many errors
Replies: 7
Views: 804

Re: RB1100, Port Failed and so many errors

Please upgrade to latest v5.6 it will show more advanced RX stats for ether11-ether13. Orange LED indicate that link is 100Mpbs or 10Mbps speed.
by kirshteins
Tue Aug 09, 2011 8:33 am
Forum: General
Topic: RB1100, Port Failed and so many errors
Replies: 7
Views: 804

Re: RB1100, Port Failed and so many errors

What version are you running. Also "/interface ethernet print stats" can give you more detailed information about RX errors.
by kirshteins
Mon Aug 08, 2011 3:50 pm
Forum: General
Topic: rb450G
Replies: 21
Views: 1546

Re: rb450G

You need to select s - upgrade firmware over serial port
by kirshteins
Mon Aug 08, 2011 3:26 pm
Forum: General
Topic: rb450G
Replies: 21
Views: 1546

Re: rb450G

Enter bootloader menu when board is booting up Press "g" and then "s" Now it time to use xmodem transfer method by Hyperterminal to upload http://routerboard.com/pricelist/get_firmware.php?id=38 RouterBOOT booter 2.29 RouterBoard 433AH CPU frequency: 680 MHz Memory size: 128 MB Press any key within...
by kirshteins
Mon Aug 08, 2011 10:41 am
Forum: Beginner Basics
Topic: Switches in RB1100
Replies: 2
Views: 552

Re: Switches in RB1100

It is best to use 2 option. Both LAN and WAN will have separate 1Gbps connection to the CPU in that scenario.
by kirshteins
Mon Aug 08, 2011 10:06 am
Forum: General
Topic: Ping from PC to EoIP Tunnel
Replies: 5
Views: 2426

Re: Ping from PC to EoIP Tunnel

What ping error messages are receiving? Please make network diagram, because currently it is hard to understand how devices and services are connected with each other.
by kirshteins
Mon Aug 08, 2011 9:46 am
Forum: General
Topic: RB450G, ROS 4.6, link speed
Replies: 4
Views: 712

Re: RB450G, ROS 4.6, link speed

Try upgrading to latest v5.6. Test with another cable and other ports.
by kirshteins
Mon Aug 08, 2011 9:17 am
Forum: Beginner Basics
Topic: How to disable the bridge mac address learning
Replies: 1
Views: 893

Re: How to disable the bridge mac address learning

It is (R)STP setting and cannot be set directly.
by kirshteins
Fri Aug 05, 2011 4:11 pm
Forum: General
Topic: v5.6 released
Replies: 91
Views: 21077

Re: v5.6 released

My RB1200 reboot when enable or disable auto-negotiation on any interface. Message log: system error critical router was rebooted without proper shutdown (cause1) Is there any output on serial console while rebooting? It is recommended to send supout.rif file from this router to support@mikrotik.com
by kirshteins
Fri Aug 05, 2011 3:30 pm
Forum: Beginner Basics
Topic: Download drastically dropped in simple home NAT
Replies: 7
Views: 1545

Re: Download drastically dropped in simple home NAT

Try upgrading to the latest version 5.6. Also you can send supout.rif file from this router to support@mikrotik.com and we will examine your configuration. There are many factors that could cause such problem.
by kirshteins
Fri Aug 05, 2011 11:00 am
Forum: SwOS
Topic: SwOS version 1.5 released!
Replies: 7
Views: 3441

Re: SwOS version 1.5 released!

Reboot button is also not working here- have to manually powercycle. I've also had the webUI lock up seemingly at random.
What version are you running? Does up-time reset after each reset button is pressed?
by kirshteins
Thu Aug 04, 2011 2:36 pm
Forum: Wireless Networking
Topic: how to prevent loop
Replies: 15
Views: 1798

Re: how to prevent loop

What the purpose of static Mac address and what's the advantage?
Bridge MAC address is inherited from first (in order they were added) active bridge port. With static MAC address you can prevent MAC address jumping.
by kirshteins
Thu Aug 04, 2011 9:15 am
Forum: Wireless Networking
Topic: how to prevent loop
Replies: 15
Views: 1798

Re: how to prevent loop

Make sure you enable RSTP and static MAC address for all WDS bridges.
protocol-mode=rstp admin-mac=xx:xx:xx:xx:xx:xx auto-mac=no
by kirshteins
Wed Aug 03, 2011 12:18 pm
Forum: General
Topic: reset TX abd RX bytes ipip int
Replies: 1
Views: 462

Re: reset TX abd RX bytes ipip int

Currently it is not possible.
by kirshteins
Wed Aug 03, 2011 8:31 am
Forum: General
Topic: rb450 reboot problem
Replies: 50
Views: 9251

Re: rb450 reboot problem

This bug has been fixed starting from v5.0. It is recommended to upgrade to latest version.
by kirshteins
Wed Aug 03, 2011 8:28 am
Forum: RouterBOARD hardware
Topic: RB1100(AH) reboots, when I connect a Laptop
Replies: 10
Views: 1652

Re: RB1100(AH) reboots, when I connect a Laptop

What exactly do you mean by:
"Does this router generate autosupout.rif?"
Is there autosupout.rif file in files section when you log in to the router after it reboots.
by kirshteins
Wed Aug 03, 2011 8:05 am
Forum: RouterBOARD hardware
Topic: RB/1100AH Physical Ethernet to Interface all wrong (urgent)
Replies: 6
Views: 2694

Re: RB/1100AH Physical Ethernet to Interface all wrong (urge

We have fixed this bug in v5.6. It should be released soon.
by kirshteins
Tue Aug 02, 2011 12:49 pm
Forum: RouterBOARD hardware
Topic: RB1100(AH) reboots, when I connect a Laptop
Replies: 10
Views: 1652

Re: RB1100(AH) reboots, when I connect a Laptop

Does freezing/rebooting leaves any output on serial console? Does this router generate autosupout.rif?
by kirshteins
Mon Aug 01, 2011 2:32 pm
Forum: RouterBOARD hardware
Topic: RB1200 - errors on ethernet ports
Replies: 10
Views: 2917

Re: RB1200 - errors on ethernet ports

We found a bug in statistics and we will fix it. Let us know whether there are problems with throughput or latency.
by kirshteins
Mon Aug 01, 2011 12:17 pm
Forum: RouterBOARD hardware
Topic: RB1200 - errors on ethernet ports
Replies: 10
Views: 2917

Re: RB1200 - errors on ethernet ports

What do you mean by POE in this case? RB1200 cannot be powered with PoE.
by kirshteins
Mon Aug 01, 2011 8:19 am
Forum: Beginner Basics
Topic: Winbox.exe compatability issues with Win 7 Enterprise 64bit
Replies: 2
Views: 1037

Re: Winbox.exe compatability issues with Win 7 Enterprise 64

Try disabling the firewall and running Winbox loader with administrator privileges.
by kirshteins
Mon Aug 01, 2011 8:13 am
Forum: RouterBOARD hardware
Topic: RB433UAH weird bootloader info.
Replies: 2
Views: 762

Re: RB433UAH weird bootloader info.

This problem can occur when router tries to recover from crash. Try setting the CPU frequency back to default and rebooting the router.
by kirshteins
Mon Aug 01, 2011 7:55 am
Forum: General
Topic: Port Mirroring
Replies: 26
Views: 15057

Re: Port Mirroring

Yes,
/interface ethernet switch set numbers=0 mirror-source=ether2 mirror-target=ether5
is correct. Please describe the problem you are experiencing.
by kirshteins
Fri Jul 29, 2011 8:43 am
Forum: General
Topic: 450g vlan configaration
Replies: 1
Views: 1059

Re: 450g vlan configaration

You can find documentation and examples here: http://wiki.mikrotik.com/wiki/VLAN
by kirshteins
Fri Jul 29, 2011 8:42 am
Forum: General
Topic: Port Mirroring
Replies: 26
Views: 15057

Re: Port Mirroring

Yes, port mirroring is supported on this chip. More information: http://wiki.mikrotik.com/wiki/Switch_Chip_Features
by kirshteins
Fri Jul 29, 2011 8:34 am
Forum: Beginner Basics
Topic: couldn't connect RB 450G via SSH/Winbox/Web
Replies: 2
Views: 1470

Re: couldn't connect RB 450G via SSH/Winbox/Web

Try to connect to ethernet ports other than ether1 using MAC address Winbox: http://wiki.mikrotik.com/wiki/Winbox
by kirshteins
Thu Jul 28, 2011 4:32 pm
Forum: Beginner Basics
Topic: Port forwarding issue :-) Getting crazy please help me !
Replies: 5
Views: 877

Re: Port forwarding issue :-) Getting crazy please help me !

Make sure you have enabled "use-ip-firewall" in bridge settings. Also test with firewall rules disabled.
by kirshteins
Thu Jul 28, 2011 8:36 am
Forum: General
Topic: Port Mirroring
Replies: 26
Views: 15057

Re: Port Mirroring

Check under "/interface ethernet switch print". If the type is "ICPlus175C", then mirroring is not supported.
by kirshteins
Wed Jul 27, 2011 8:45 am
Forum: Beginner Basics
Topic: Open Ports on RouterOS 3.22
Replies: 2
Views: 933

Re: Open Ports on RouterOS 3.22

The rule is in place on mikrotik to forward / open 3389 for the given server and when I RDP from outside, it shows its receivng packets but it won't connect.
Try alos adding UDP version of this TCP rule.

Is 1.1.1.1 your "outside" address?
by kirshteins
Wed Jul 27, 2011 8:25 am
Forum: General
Topic: Password recovery routerboard 750
Replies: 5
Views: 8046

Re: Password recovery routerboard 750

Password is part of configuration. There is no way to reset password without resetting configuration.
by kirshteins
Mon Jul 25, 2011 9:14 am
Forum: Wireless Networking
Topic: BRIDGE TO ROUTING MIGRATION NEED HELP
Replies: 4
Views: 787

Re: BRIDGE TO ROUTING MIGRATION NEED HELP

How are all the devices connected with each other? Please give us network diagram.
by kirshteins
Fri Jul 22, 2011 4:24 pm
Forum: General
Topic: couldn't access webfig if set address in /ip service www
Replies: 4
Views: 767

Re: couldn't access webfig if set address in /ip service www

What address you apply as available from? What IP address you are web-browsing from?
by kirshteins
Fri Jul 22, 2011 1:37 pm
Forum: Beginner Basics
Topic: Reset login and password on RB 433
Replies: 1
Views: 3705

Re: Reset login and password on RB 433

Try short-circuiting multiple times. As an alternative you can reinstall router using Netinstall with "keep-old-configuration" setting unchecked: http://wiki.mikrotik.com/wiki/Netinstall
by kirshteins
Fri Jul 22, 2011 1:32 pm
Forum: General
Topic: Interfaces Ethernet - drop packet
Replies: 1
Views: 507

Re: Interfaces Ethernet - drop packet

Perhaps queue limits are exceeded.
by kirshteins
Fri Jul 22, 2011 1:21 pm
Forum: General
Topic: GRE Tunnel not an interface?
Replies: 1
Views: 572

Re: GRE Tunnel not an interface?

Just like IPIP encapsulation tunnel, GRE tunnel does not have MAC address for L2 communication.
by kirshteins
Fri Jul 22, 2011 1:14 pm
Forum: General
Topic: couldn't access webfig if set address in /ip service www
Replies: 4
Views: 767

Re: couldn't access webfig if set address in /ip service www

Webfig is RouterOS www service. Make sure you are connecting with address within allowed address range.
by kirshteins
Fri Jul 22, 2011 1:10 pm
Forum: RouterBOARD hardware
Topic: RB 1200 CPU Usage
Replies: 4
Views: 927

Re: RB 1200 CPU Usage

Also make sure you are having global change-mss mangle rules instead of many individual ones.
by kirshteins
Fri Jul 22, 2011 1:08 pm
Forum: General
Topic: Switch Chip of RB1100
Replies: 2
Views: 737

Re: Switch Chip of RB1100

Both switch groups: ether1-ether5 and ether6-ether10 can communicate with each other through CPU (bridge or routing configuration), but port switching is only possible within ether1-ether5 and ether6-ether10 groups.
by kirshteins
Thu Jul 21, 2011 8:50 am
Forum: RouterBOARD hardware
Topic: Router Board with 2 Lan and at least one Memory Card
Replies: 14
Views: 1771

Re: Router Board with 2 Lan and at least one Memory Card

450G has 5 gigabit ethernet ports and microSD slot: http://routerboard.com/RB450G
by kirshteins
Thu Jul 21, 2011 8:15 am
Forum: RouterBOARD hardware
Topic: RB493AH hangs on reboot
Replies: 3
Views: 865

Re: RB493AH hangs on reboot

Do you use any extension card on this router? Try using more powerful power supply, as we are not aware of any problems with rebooting in v5.5.
by kirshteins
Fri Jul 15, 2011 10:00 am
Forum: Wireless Networking
Topic: Bridge or Routing which one is better.
Replies: 2
Views: 630

Re: Bridge or Routing which one is better.

If you need all you wireless interfaces on same IP subnet you have to use bridging. Otherwise it is best to use routing.
by kirshteins
Fri Jul 15, 2011 9:53 am
Forum: Wireless Networking
Topic: how to Bridge 2 mikrotik device (sxt , 433ah )
Replies: 6
Views: 1822

Re: how to Bridge 2 mikrotik device (sxt , 433ah )

vahid023, are there any IP or bridge firewall rules on SXT that could block this ping?
by kirshteins
Mon Jul 11, 2011 2:07 pm
Forum: Scripting
Topic: Please help with a very simple script [SOLVED]
Replies: 12
Views: 1665

Re: Please help with a very simple script

Here is an example:
by kirshteins
Mon Jul 11, 2011 1:05 pm
Forum: Scripting
Topic: Please help with a very simple script [SOLVED]
Replies: 12
Views: 1665

Re: Please help with a very simple script

You can simply make schedules for enabling and disabling ARP entry using scheduler:
http://wiki.mikrotik.com/wiki/Manual:System/Scheduler
by kirshteins
Thu Jul 07, 2011 10:04 am
Forum: General
Topic: RouterOS 5.5 Released
Replies: 47
Views: 12324

Re: RouterOS 5.5 Released

firmware After reboot not upgraded !!! I am not able to reproduce this problem. What information is shown after? /system routerboard upgrade /system routerboard print Also please generate supout.rif after issuing /system routerboard upgrade and one more after rebooting the router and issuing /syste...
by kirshteins
Mon Jul 04, 2011 8:12 am
Forum: General
Topic: Bug in setting of admin-mac in bridge
Replies: 1
Views: 857

Re: Bug in setting of admin-mac in bridge

Do not forget to set "auto-mac=no" in order to set static MAC address for the bridge.
by kirshteins
Thu Jun 30, 2011 9:46 am
Forum: General
Topic: SWITCH SETUP RB493AH PROBLEM
Replies: 2
Views: 603

Re: SWITCH SETUP RB493AH PROBLEM

I am not able to reproduce this problem. Can you give more detailed description about involved devices? Are all ports set to auto-negotiation. What if you force master-port to link at 100Mbps?
by kirshteins
Tue Jun 28, 2011 12:58 pm
Forum: General
Topic: Eth.port flapping in 5.4 still not solved! How about 5.5?
Replies: 4
Views: 941

Re: Eth.port flapping in 5.4 still not solved! How about 5.5

Currently we are unable to reproduce this problem. Anyone else having similar problem, please, send suppout.rif file to support@mikrotik.com.
by kirshteins
Tue Jun 28, 2011 12:22 pm
Forum: RouterBOARD hardware
Topic: 750GS switch chip traffic
Replies: 5
Views: 2546

Re: 750GS switch chip traffic

Try running
/interface ethernet print stats interval=1s
by kirshteins
Tue Jun 28, 2011 8:23 am
Forum: Beginner Basics
Topic: Mac Address Filter with firewall>filter
Replies: 1
Views: 659

Re: Mac Address Filter with firewall>filter

You can filter src. MAC address using IP or bridge firewall. Take a note that MAC address can be easily changed.
by kirshteins
Mon Jun 27, 2011 8:25 am
Forum: Beginner Basics
Topic: Switch ports in a 493G
Replies: 4
Views: 1291

Re: Switch ports in a 493G

Traffic between switch chip groups will consume CPU resources, but the rest of the traffic will be processed only through the switch chip.
by kirshteins
Mon Jun 20, 2011 4:06 pm
Forum: General
Topic: RB493AH Running 5.0 stops routing, can only accessed via MAC
Replies: 4
Views: 628

Re: RB493AH Running 5.0 stops routing, can only accessed via

/log print
Must show the reason for unsuccessful upgrade. Make sure you are using right architecture v5.4 packages and they are not placed in sub-folder.
by kirshteins
Mon Jun 20, 2011 8:42 am
Forum: General
Topic: ROS 5,4 why ... ?
Replies: 2
Views: 664

Re: ROS 5,4 why ... ?

This is a known bug. It occurs when you disable connection tracking and it will be fixed in RouterOS v5.5.
by kirshteins
Mon Jun 20, 2011 8:35 am
Forum: General
Topic: 100Mb Link down
Replies: 2
Views: 541

Re: 100Mb Link down

What board is it?
by kirshteins
Mon Jun 20, 2011 8:24 am
Forum: Beginner Basics
Topic: Port forwarding through 2 Mikrotik's
Replies: 6
Views: 2210

Re: Port forwarding through 2 Mikrotik's

It seems traffic can be routed/bridged to another RB433, so the should not be necessity for extra NAT rules elsewhere.
by kirshteins
Mon Jun 20, 2011 8:13 am
Forum: General
Topic: RB1100 Switch Chip
Replies: 6
Views: 1546

Re: RB1100 Switch Chip

Please describe in more details what is not working as expected.
by kirshteins
Fri Jun 17, 2011 8:23 am
Forum: General
Topic: RB1100 Switch Chip
Replies: 6
Views: 1546

Re: RB1100 Switch Chip

Yes, VLAN should be put on master-port interface in this case. Please post if you experience any problems.
by kirshteins
Wed Jun 15, 2011 9:47 am
Forum: General
Topic: Untagged Traffic out of Port
Replies: 2
Views: 638

Re: Untagged Traffic out of Port

Please describe the purpose of VLAN interface in this case.
by kirshteins
Tue Jun 07, 2011 12:25 pm
Forum: General
Topic: RouterOS v5.4 released
Replies: 118
Views: 31852

Re: RouterOS v5.4 released

Xymox, I have not experienced anything similar after upgrading RB750G to v5.4. Have you tried to Netinstall this board?
by kirshteins
Tue Jun 07, 2011 9:13 am
Forum: General
Topic: who give me a firewall and mangle works Flow chart ?
Replies: 1
Views: 574

Re: who give me a firewall and mangle works Flow chart ?

Do you mean something similar to packet flow diagram?
http://wiki.mikrotik.com/wiki/Packet_Flow
by kirshteins
Tue Jun 07, 2011 9:09 am
Forum: Beginner Basics
Topic: Switch ports in a 493G
Replies: 4
Views: 1291

Re: Switch ports in a 493G

You can switch ether2-ether5 and ether6-ether9, bridge together both master-ports and wireless interface.
by kirshteins
Mon Jun 06, 2011 3:53 pm
Forum: Forwarding Protocols
Topic: Bridge firewall confusion
Replies: 3
Views: 1154

Re: Bridge firewall confusion

What kind of traffic do you want to filter? Take a look at packet flow diagrams, it demonstrates the use of use-ip-firewall: http://wiki.mikrotik.com/wiki/Packet_Flow. Bridge filter is part of "Bridge Forward" box.
by kirshteins
Mon Jun 06, 2011 10:58 am
Forum: RouterBOARD hardware
Topic: RB250GS and POE
Replies: 6
Views: 2107

Re: RB250GS and POE

Product you are linking to does not appear to support Gigabit. We can only recommend to use: http://routerboard.com/RBGPOE
by kirshteins
Mon Jun 06, 2011 9:02 am
Forum: SwOS
Topic: Use one port as wan to reach internet.
Replies: 3
Views: 2411

Re: Use one port as wan to reach internet.

Using ACL rules it is possible to achieve that 10.0.0.1 dst. and src. traffic will be forwarded only between port1 and port2, and similarly with 10.0.0.2 http://wiki.mikrotik.com/wiki/SwOS#ACL_Tab. However services like routing, DNS, NAT et cetera are not supported by SwOS.
by kirshteins
Mon Jun 06, 2011 8:38 am
Forum: RouterBOARD hardware
Topic: RB250GS and POE
Replies: 6
Views: 2107

Re: RB250GS and POE

You can power up 250GS through PoE at 1Gbps speed by using this injector: http://routerboard.com/RBGPOE. 250GS does not support powering from IEEE 802.3af compliant device and it is recommended not to connect such device to port1.
by kirshteins
Mon Jun 06, 2011 8:28 am
Forum: General
Topic: RB493G switch 8 ports
Replies: 14
Views: 5024

Re: RB493G switch 8 ports

It is not possible to switch 8 ports in single switch group. However you can make ether1+ether6-ether9 and ether2-ether5 switch groups and then bridge the master-ports.
by kirshteins
Wed Jun 01, 2011 2:35 pm
Forum: General
Topic: Poor Performance
Replies: 11
Views: 1465

Re: Poor Performance

Please test with v5.4. If results are much lower than official throughput test results http://routerboard.com/RB450G, send report to support@mikrotik.com. Include supout.rif file (http://wiki.mikrotik.com/wiki/Manual:Su ... utput_File) and detailed description on how this test is done.
by kirshteins
Wed Jun 01, 2011 9:46 am
Forum: General
Topic: RB450G hangs after upgrade to OS 5.4
Replies: 5
Views: 1309

Re: RB450G hangs after upgrade to OS 5.4

Is there any output on serial console? Please generate and send supout.rif file to support@mikrotik.com

http://wiki.mikrotik.com/wiki/Manual:Su ... utput_File
by kirshteins
Fri May 27, 2011 4:47 pm
Forum: Beginner Basics
Topic: Mikrotik EoIP
Replies: 2
Views: 1298

Re: Mikrotik EoIP

EoIP is Mikrotik only. You can use GRE tunnel.
by kirshteins
Fri May 27, 2011 8:56 am
Forum: General
Topic: RB 750 Auto Negotiation Problem
Replies: 8
Views: 2040

Re: RB 750 Auto Negotiation Problem

What device is connected to this RB750? Are all ethernet ports affected? How is this board powered?
by kirshteins
Wed May 25, 2011 9:34 am
Forum: General
Topic: Bridge Ports randomly become inactive.
Replies: 2
Views: 1033

Re: Bridge Ports randomly become inactive.

Please generate and send supout.rif file to support@mikrotik.com. We will investigate what is causing this problem.
by kirshteins
Tue May 17, 2011 9:03 am
Forum: General
Topic: [Solved] RB750G ROS 5.2 serious performance issue.
Replies: 15
Views: 2992

Re: RB750G ROS 5.2 100/100 Mbps link serious performance iss

Benchmark tests for 750G can be found here: http://www.routerboard.com/pdf/routerbo ... _tests.pdf

Mtmx80, please generate and send supout.rif file to support@mikrotik.com if you are experiencing much lower results.
http://wiki.mikrotik.com/wiki/Manual:Su ... utput_File
by kirshteins
Tue May 17, 2011 8:32 am
Forum: Beginner Basics
Topic: rb450g slave ports traffic graphing
Replies: 2
Views: 637

Re: rb450g slave ports traffic graphing

You can try
/interface ethernet print stats interval=1s
by kirshteins
Tue May 17, 2011 8:11 am
Forum: General
Topic: v5.2 released
Replies: 161
Views: 30182

Re: v5.2 released

There is some serious issue with pppoe connectivity in 5.2 & 4.17.

I downgraded to 5.0rc4 all issue solved but rc4 UM is not stable :(
Please describe this problem in more details.
by kirshteins
Mon May 16, 2011 4:35 pm
Forum: General
Topic: RoS 5.2: connection tracker on bridge blocking SIP and H.323
Replies: 3
Views: 742

Re: RoS 5.2: connection tracker on bridge blocking SIP and H

Try disabling SIP and H.323 helpers in
/ip firewall service-port
section instead of disabling connection tracking. Is NAT applied twice to this traffic?
by kirshteins
Mon May 16, 2011 3:11 pm
Forum: SwOS
Topic: TCP/UDP port filter? (feature request)
Replies: 14
Views: 8010

Re: TCP/UDP port filter? (feature request)

@kirshteins - please confirm that my configuration is correct (its working but I dont want to mess in my network).
Yes, this rule will discard all TCP dst-port 23 traffic.

This feature is now documented in the Wiki http://wiki.mikrotik.com/wiki/SwOS. Sorry for the inconvenience it might caused.
by kirshteins
Mon May 16, 2011 1:22 pm
Forum: General
Topic: v5.2 released
Replies: 161
Views: 30182

Re: v5.2 released

I installed 5.2 on a pppoe (bras) mk router. Till now I see a bug. in PPP, active connection you can see new connecting pppoe client uptime starts from 39seconds and starts decreasing till reaching 0, then starts increasing! So funny :) So it's user "yyy" connect. you can see it's alive for 39, 38,...
by kirshteins
Mon May 16, 2011 10:40 am
Forum: SwOS
Topic: TCP/UDP port filter? (feature request)
Replies: 14
Views: 8010

Re: TCP/UDP port filter? (feature request)

Use 0.0.0.0/0:low-high format in IP Src and IP Dst fields, to apply UDP or TCP port conditions.
  • 1
  • 2