Community discussions

MikroTik App

Search found 12 matches

by flovin
Fri Jun 30, 2006 11:59 am
Forum: General
Topic: IPSec and VRRP
Replies: 1
Views: 1428

IPSec and VRRP

I'm trying to do a redundant router setup where I need IPSec connectivity to the VRRP address. The VRRP part seems to be working ok, takes a few seconds for the backup to take over when I disconnect the master, but it's been working everytime in my test setup. I can ping the VRRP address or use it a...
by flovin
Thu Jun 15, 2006 2:23 pm
Forum: General
Topic: IPsec between two internet MT hosts!? how?
Replies: 4
Views: 1176

Re: Manuals :)

http://www.mikrotik.com/docs/ros/2.9/ip/ipsec I read this manual many times. I need answer to this question. I think that maybe its not the right network scheme that i wrote. please sombody explain a little. Make sure you have the newest versions of RouterOS - I've had problems with differing 2.9x ...
by flovin
Mon Feb 27, 2006 8:26 pm
Forum: General
Topic: EoIP tunnel problems.
Replies: 6
Views: 2240

Ok, thanks for the suggestion.

Flóvin
by flovin
Mon Feb 27, 2006 1:29 pm
Forum: General
Topic: Understanding NAT ....
Replies: 11
Views: 1726

Uh, NAT is done after routing decision? that is strange no? You have packet arriving to your local interface. Now it looks into routing table what to do and if there would be no masquarading involved first imo, packet would not get thru .... because imo only after masquarading to output interface n...
by flovin
Mon Feb 27, 2006 1:09 pm
Forum: General
Topic: EoIP tunnel problems.
Replies: 6
Views: 2240

i would suggest using EoIP only if a transparent Ethernet-connection is needed actually. (of course its MTU is fixed to 1500, cause it's the Ethernet-MTU) It makes things a lot easier in this particular scenario - we're only a carrier for others, and they use their own equipment, this way we dont n...
by flovin
Mon Feb 27, 2006 9:59 am
Forum: General
Topic: EoIP tunnel problems.
Replies: 6
Views: 2240

What happens if you increase the MTU on the EoIP tunnel? I've noticed that if I try to ping through an EoIP interface w/ a packet larger than the MTU, RouterOS complains with a message, "packet too large and cannot be fragmented". It does sound as though there are some misbehaving routers in this p...
by flovin
Sun Feb 26, 2006 10:26 pm
Forum: General
Topic: EoIP tunnel problems.
Replies: 6
Views: 2240

EoIP tunnel problems.

I've setup up an EoIP tunnel between two routers - it was working fine. Then something happened, I don't know what... I was unable to send large ping packets, 1500 bytes through the tunnel. I tried making new tunnels, to other routers - works fine to send 1500 bytes packets through some of them, and...
by flovin
Fri Jan 13, 2006 1:14 pm
Forum: General
Topic: Configuring RouterOS
Replies: 4
Views: 1596

Thanks for the suggestion, I was originally thinking along those lines as well - but I'd like to be able to do it with MAC telnet, that way you could take the RB antennas out of the box, plug in the Ethernet cable.. after 30-45 seconds the box would be configured, without the user doing anything man...
by flovin
Fri Jan 13, 2006 12:56 pm
Forum: General
Topic: Configuring RouterOS
Replies: 4
Views: 1596

Configuring RouterOS

Hello, I was wondering if someone has made a clever way of configuring RouterOS boxes, I was thinking along the lines of writing a small application to set up the box, with a config based upon data from our customer database and documentation database- and then dumping the config automagically to th...
by flovin
Wed Nov 30, 2005 8:48 pm
Forum: General
Topic: WinBox - Address Lists - Firewall Filter
Replies: 1
Views: 3047

I agree, and in addition it would be very nice to make lists of such lists, and make lists of services as well. :wink:

And best of all, these should be relatively minor things to implement.

regards,
Flóvin
by flovin
Wed Nov 16, 2005 10:03 pm
Forum: General
Topic: Feature request: Firewall service groups and host/net groups
Replies: 3
Views: 2777

Yes, I've noticed, but it's not quite there yet. You can make those network lists, and it's a great start, however you can't make lists of lists, if you know what I mean. And when using those network lists, it would be nice to see it in the overview ie filter or nat list, I find myself constantly op...
by flovin
Wed Nov 16, 2005 9:42 pm
Forum: General
Topic: Feature request: Firewall service groups and host/net groups
Replies: 3
Views: 2777

Feature request: Firewall service groups and host/net groups

It would be very nice to have a feature ala the feature in PIX firewalls where you can name networks, services etc. This would make things much easier to organize, and you'd avoid having multiple rules doing the same thing, just for different destinations etc. E.g. For host and network definations: ...