MikroTik

bokad

So basically you want to stop the various ports from communicating with each other and only allow traffic to flow out the uplink? ------------------------------ /interface bridge filter add action=drop chain=forward comment=\ "Prevent Port To Port Communication" disabled=no in-interface=!e...

bokad

I saw many posts on if UPnP works properly on ROS and if is compatible with XBox Live.
What is the final status on this with ROS 3.x (I am using 3.28 and 3.30 on my NAT devices)

bokad

In winbox I noticed that the the configured speed for a port is 100Mbps but the auto negotiated speed is 1gbps. In this case is the which setting is actually true. Is the interface running at the configured speed or at the auto negotiated speed? I am seeing some packet loss between the devices when ...

bokad

I got this done. Thanks for the help.

bokad

I didn't get anything. Please send again or let me know how to get in touch with you.

bokad

I need two very specific things implemented with the PHP API. Should be a fairly simple task for someone and I'm willing to pay a few hundred $'s to get it done. E-mail bokad@hotmail.com if you can do this AND reply here also (so that I know to look for your e-mail in my hotmail spam) (1) Connect to...

bokad

From what I understand that is only for v4.x +.
Any way to do something like this in v3.x?
For sure I'm not the first one to want to do something like this.

bokad

Is it possible to make a bridge filter rule that will match everything on a physical interface , including logical subinterfaces on that physical interface? Like I want to match everything that goes out a certain ethernet port, including if it is on a vlan on that ethernet port. Normally if I make a...

bokad

Is there a mikrotik command to use on an ethernet port that has the same effect as the cisco command below?
"switchport trunk native vlan x"

Basically to set which VLAN will have the untagged frames on that interface?

bokad

How many redirects is your hotspot doing per second? Look at the rule in hs-unauth chain that looks like this: dst-port=80 action=redirect to-ports=64874 Also at the one for port 443. Perhaps you can put a static rule at the top of the chain that only allows so many new requests per source ip per se...

bokad

Are there any improvements to PTMP on v4.x vs v3.x ?
Specifically with nstreme and jitter and latency?
What are the big wireless improvments (other than .11n) in v4.x in general?
Just want to see if it is worth upgrading a bunch of devices.

bokad

This sounds like what happened with 3.x when you loaded the wireless test package.

bokad

Ex. I want to find all firewall mangle rules where source address is NOT set.
[find src-address=""] does not work. Nor has anything else that I have tried.
Any ideas?

bokad

I am running ROS 3.30. I have seen this with previous versions also though. Some of the devices eventually stop accept SSH connections. Winbox and everything else still works but can't SSH to it. As soon as the device is reboote SSH works again. Happens every 90 to 120 days. Any ideas on what might ...

bokad

I'm willing to pay a consultant for help if someone has the answer...

bokad

I have a script that exports the current config and then e-mails it to me. This script is called from the scheduler. In v3.13 everything worked fine. In v3.28 this stopped working. The script still works when run manually but no longer works when called from the scheduler. I see from that run count ...

bokad

I remember some places used to have a single and double 1U rack mount RB1000 unit.
Can't seem to find it anymore.
Anyone know of places that still sell these?

bokad

works great, thanks

bokad

I am trying to make a script that will fetch the IP address associated with a pptp client interface named "VPNpptp".
I have tried the below but it just returns "no such item". Any ideas?

:global vpnaddress ([/ip address get "VPNpptp" address])

bokad

That (200) is alot of wireless clients connected to one AP. I think for sure polling with nstreme is necessary. I think you would also benefit from setting up additional AP's to lower the number of clients per AP. You may also want to consider different equipment such as Alvarion althought it is muc...

bokad

I have a point to point link. There is bettter CCQ in one direction than the other. I know I can set the max wireless speed for the link (ex. 36mbps). However I want to set different speeds for each direction. The RX has great CCQ at 48mbps but the TX isn't good until 36mbps. Sometimes it will auto-...

bokad

How many subscribers are you planning on having connected to each access point? What is the highest number of phone calls you expect to be taking place at once across each access point. What frequncy will you be using? Because you will have only VoIP traffic and not data as well, it could be fairly ...

bokad

I have a simple script that creates a config export file and then e-mails it to me. This script works fine when called from the command line or winboxc but doesn't work when it is called from the scheduler. It used to work under RoS v3.13 but stopped working when I upgraded to 3.28. When scheduler c...

bokad

I have a job opening in Iraq to work on a MikroTik wireless and hotspot network.
Very safe work environment.
Six figure+ salary
Only available to US citizens

For more details, write and send resume to:
bokad@hotmail.com

bokad

Is it possible to remotely (as in without opening the equipment) to tell which card (R52 or R52H) is installed in a device?

bokad

I have several RB493's set up as switch/bridge that sometimes decide to just stop passing traffic. The RB itself remains reachable, etc.... but it doesn't pass any traffic THROUGH it. These are configured as a bridge with some simple firewall rules. This only happens on about half of the 493's that ...

bokad

This might be a bit out of date now but here are the basic procedures I wrote down a few years ago and am still following with the latest ROS and WRAP boards: ----------------Loading MikroTik RouterOS on a WRAP Board--------------------- This was done specifically with routeros 2.9.6, demo version a...

bokad

Got a response from Mikrotik support. The answer is that everything is fine with their software and it must be a hardware problem. Of course!
Anyone else experiencing this same issue?

bokad

I am running ROS v3.28 with the wireless test package on a 500 MHz AMD Geode LX CPU http://www.pcengines.ch/alix3d2.htm The clock runs ten times too fast and CPU utilization jumps to 60% (was 20% before). This also screws up the interface statistics, etc... All is normal as soon as wireless test pac...

bokad

What is the difference between "best fit " "dynamic size" "exact size" for nstreme framer policy in terms of latency, jitter and throughput/bandwidth?

bokad

Can you post a more precise description of what you are seeing vs what you expect to see?
One thing to note is that if you have a hotspot installed it will intercept the DNS requests.
Other then that, DNS is pretty straight forward and has very very few quirks.

bokad

Is this a hotspot? Are you using simple queues? Please send your complete queue tree and mangle rules. Do you sit hit coutners on both of your existing mangle rules below and in the queue tree for those packets?

bokad

I've noticed that when importing some scripts after they are exported, it omits spaces if they are the on beginning of a line. For the example below (which is a real export), it will show up as [/system clockget date] when it is imported and will not work because there is no space between clock and ...

bokad

Is there any way to reset the configuration on a RB1000 before boot? One of mine has a bad config and as soon as it boots it crashes. Or is it possible to reload RouterOS on the built in flash? Please see below: RouterBOOT booter 2.12 RouterBoard 1000 CPU frequency: 1333 MHz Memory size: 512 MB Pres...

bokad

Is there any way to pass variables between scripts? It seems that I can not access variables that are declared global in one script from another script. Ex. In script 1: :global 64kdownload 64000 On the command line: :environment print shows: ""64kdownload"=64000 In script 3: /queue t...

bokad

I have something like the below where I am using the API to get a list of all hotspot active users and then selecting a single user ID to call with remove. This does not work though. It lists the users and the ID is a valid one but it does not log that person out. Is hotspot remove supported in the ...

bokad

Same result here. My DNS name entries in hotspot walled gaden stopped working in V3 and I had to go by IP address.

bokad

Sorry, already downgraded.

bokad

Yes, this problem still occurrs in V3 as I've just found out and forgot to create the public DNS entry. You can also just disable the DNS name for the hotspot with: /ip hotspot profile set default dns-name="" v3 may support IPv6 but it's DNS server does not. Problem only seems to occur wit...

bokad

I didn't check for bad host entries and I'm not converting back to HTTPS auth.
My testing went like this...
HTTPS auth, hotspot stops accepting sign-ins
Change to CHAP, hotspot works
Change back to HTTPS, stops working again
Change back to CHAP, works again.

bokad

Just upgraded one of my routers from 3.13 to 3.19.
This seems to have broken something with queue tree.

According to the attached picture, 19.6 + 7.4 = 21.7 and 6.4 + 3.6 + .75 + 1.7 = 4.5

Also the Winbox connection responds much slower in terms of updating graphs and displaying firewall rules.

bokad

The above poster was right. As soon as you change the auth type to CHAP instead of HTTPS this problem goes away.

MikroTik take note, Hotspot eventually stops accepting new logins (it hangs at the redirect part) when using SSL/HTTPS authentication.

bokad

Bummer. It's kinda inefficient to transfer an entire list of 1600 logged in users across a slow connection when you just need information on one of them.
Do you know of any plans to implement find or where?
Is there a documentation source for the API with more information than the Wiki?

Thanks.

bokad

Does anyone have an example of using the MikroTik API to log out a hotspot user?

bokad

I am trying to use the MikroTik API to get the same results as the command line command: /ip hotspot active print where user=bokad I have tried: --------------1-------------------------- $API->write('/ip/hotspot/active/print',false); $API->write('=where=',false); $API->write('=user=bokad',true); ---...

bokad

I have a RB493 and when I configure it as a bridge (only configuration is commands shown below) it drops anywhere from 5 to 30% of the packets passing through it. Sometimes the below message is also displayed in my windows ping: reply from 192.168.35.3: bytes=1200 - MISCOMPARE at offset 959 - time=2...

bokad

The login page itself is clear text but when you click on submit for username and password the form submission is to an SSL page. ie. The login is done with https but the logon page is in http The hostname is DNS resolvable. It works for about the first 40 logons and then stops working and won't red...

bokad

For me it stops accepting logins about 60 seconds after hotspot is enabled. Too frequent to do the upgrade/downgrade thing. Any other suggestions?

bokad

I recently upgraded a large hotspot from 2.9.51 to 3.13 After the upgrade I found that the hotspot stops accepting logins after 30 ~ 40 people are logged in. It just stops redirecting people to the login page. I have already ensured that transparent proxy is turned off for ALL user profiles. Anyone ...

bokad

hi, type of work? job as a? your requirements? pay and job timings ? accomodations? Muhammad, We provide commercial internet access to soldiers in their livings quarters on base. Consider them like apartment buildings. Work is to set up MikroTik router on building and then install cables to each ro...

bokad

Also, if anyone can think of other venues/forums for finding employees of this type, suggestions welcome.

bokad

I'm looking for two engineers with MikroTik experience who are willing to work with an existing team on US bases in Iraq. Prefer Nepali and Pakistani's but open to all. Please private message or post a response with info on how to get in touch.

bokad

I've tried to use neighbor viewer on four new laptops from two different manufacturers. All these laptops are running Vista SP1. I am logged in as admin. Whenever I try to run neighbor viewer I get the below message and it will not open: "recvfrom: An operation was attempted on something that i...

bokad

What is the difference between IP binding and walled garden IP?

bokad

I have loaded several 3c2 boards with ROS without problem. I usually do this blind with no console connected and my console connection experience come from WRAP so.... You get "Loading linux... Loading initrd.rgz.... Ready then nothing" (1) The fact that it says loading linux is good, mean...

bokad

/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0 max-limit=0 name="CACHE-HITS" packet-mark=cache-hits parent=ether2 priority=8 queue=default add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0 max-limit=1536000 name="up" ...

bokad

I can't seem to find and US distributors that carry the RIC products. Any suggestions?

bokad

No burst in use.

bokad

Why are the two queues in the attached picture showing red when they are both well below their max rate? I see this quite often. Also, why does queued bytes show 4095MB?

bokad

Would someone from MT like to chime in? Is there a maximum number of subqueues for PCQ?

bokad

Page 427 of my v2.9 ROS reference manual.

bokad

/ ip hotspot walled-garden ip
add src-address=aaa.bbb.ccc.ddd action=accept comment="Server Does Not Use Hotspot"

bokad

Ooops, that was my bad typo. Is meant to put 1024 for SFQ. So PCQ is limited to 1024 subqueues as well? And if you have more than 1024 addresses behind a certain PCQ then each IP address (Assume classification by destination IP) might actually be limited to less than the per queue max because it is ...

bokad

Is there a maximum number of subqueues in a PCQ? For instance SFQ has a max of 120 subqueues.

bokad

In my case it is one of your power routers that locks up.

bokad

bokad

I had the same problem. Downgraded to 2.9.51 and all is fine.

bokad

/queue type add name="pcq-download-test" kind=pcq pcq-rate=1024000 pcq-limit=60 pcq-classifier=dst-address pcq-total-limit=5000 / queue tree add name="pcq-download-test" parent=ether1 packet-mark="whateverpacketmark" queue=pcq-download-test max-limit=1536000 Everything ...

bokad

Yes, I agree. However I think the rest of the config is fine. Whenever I turn off hotspot (no interuption in user traffic), the CPU utilization immediately drops to around 20%. It's only with hotspot running that the CPU utilization is so high. I don't have any simple queues set for the hotspot user...

bokad

Dennis,
Read above. V3.10 locks up for me. Maybe I need to start with a clean config instead of doing an upgrade but that is not an option for me.

bokad

Dennis,
I'm running a 732 now. It's still not enough CPU. I can't be the only guy with a hotspot that has 1200 active logins?

bokad

In the past my experience with changing hardware has been that it goes very easily. My experience with upgrading ROS has not been the same. But, because I am a sucker, I gave it a shot. I upgraded to v3.10. The hotspot started out fine with about 10% lower cpu util than before on 2.9. However, after...

bokad

Specifically I need 2.9 because it is operating stable now for us in a production environment. Upgrading for the sake of upgrading is a quick route to trouble. V3 hotpost has bug issues with proxy and other features as has been reported in this forum.

bokad

I've been accessing logmein PC's behind a ROS network for about a year now and without problems. Do the client PC's that you are trying to access have an always on connection and full access on port 443?

bokad

Normis,
Will this be faster than a 3Ghz P4? Will it run ROS v.2.9? I thought it would only run V3.

Thanks.

bokad

I have a hotspot that often has 1200 concurrent users. I'd like to take advantage of the performance boosts in v3 but I'm also very worried about hotpost bugs and other issues in the new software. Is v3 hotspot ready for production environments?

bokad

I'm running a hotspot that often has 1200+ users logged in at a time. I notice that each user login pegs the proc to 100% for a brief period of time. Overall CPU utilization across a one hour period of time is 75%. This is causing a constant 1 to 2 percent packet loss during peak times. I'm already ...

bokad

/ip dhcp-server lease remove [find mac-address=00:00:00:00:00:00 dynamic=yes]

I run that script every ten minutes.

bokad

I couldn't find a way to check a specific port so I created a queue for traffic coming from the proxy server and I know that if it drops below a certain level squid has probably failed. --------------------------------- :global proxy1rate ([/queue tree get "Proxy 1 Cache Hit" rate]) :if ($...

bokad

It shows so in both winbox and the command line. The current throughput rate, etc.... returns to 0.

bokad

I have a large hotspot that gets several thousand logons a day and over 1000 simultaneous users. When a new simple queue is dynamically created from a user logon, every existing queue has all of it's counters reset. When a logon is occuring every few seconds, the queues no longer work well to limit ...

bokad

The username that messed it up was just very long. Like several pages of the letter "h" if I remember correctly.

bokad

What's the general best idea for framer policy on an n-streme ptmp link?
I've been doing best fit but don't have any idea of it's merits vs.
the other options.

bokad

Is there any way for a script to look through the log for a certain string of text and take action if it finds it?

bokad

I'm trying to use a queue tree on a WDS bridge but whenever the wireless client dis/reconnects, the queue tree parent get's assigned to UNKNOWN and I have to go back in and manually asign it to WDS#. Actually, I don't need queue on each individual WDS interface, I just need it on the wlan2 interface...

bokad

I want to run a script on an access point that will check the wireless registation tables to see if a certain MAC address is present and to take action if it is not. This is what I came up with: :if ([/int wir reg pri from [find mac-address=00:0C:42:0C:C1:47]] = 1 ) do [:put hello] But of course I c...

bokad

On a wireless hotspot that I run, I recently had the problem of a client that connected then issued hundreds of DHCP requests with randomly spoofed MAC addresses. This quickly depleted the DHCP pool and left none for legitimate user. Is there a way to prevent this?

bokad

So what I'm looking for is something that (like system reset) will erase that portion of the configuration without reading/processing it. Anything that reads/processes the bad user portion of the config (like print or export or remove) causes it to freeze.

bokad

No, this is 2.9.46.

Tests on another device show that a /sytem reset will fix the problem but I'm looking for a way to avoid that.

bokad

I was able to repeat the condition on another test hotspot. Disabled and re-enabling the hostpot package and also uninstall/reinstalling it does not remove the user list.

bokad

Yes, but only for usernames added prior to the bad one. I can add remove old users but not newly added ones (nor the bad one itself). Running /ip hotspot user print locks up at the last good username and doesn't show any new users that are added but the new users do appear in winbox. The "bad&q...

bokad

A username was recently added to my hotspot (setup where the users and passes are stored on the Mikrotik itself) that had some funnny characters and now any print or export command in the /ip hotspot user conext locks up the console session and pegs the CPU to 100%. Tried rebooting, no change. Every...

bokad

Is there a variable that references which user has called the "on-logout" hotspot user profile script? Let's say after a user logs out I want to remove their account, or change their profile. Is there a way to do this autmatically with the on-logout script? something like: /ip hotspot user...

bokad

According to the ROS manual and the built in syntax help, parameters for a RED queue are defined in bytes. red-limit -- RED queue limit in bytes red-min-threshold -- Average queue size in bytes red-max-threshold -- The average queue size at which packet marking probability is the highest However in ...

bokad

/ interface wireless set wlanX default-ap-tx-limit=1024000 Will set the AP to only send a max of 1Mbps to each connected client.

Replace X with the appropriate interface number.

bokad

There are several NAT routers out there that don's decrease the TTL so this won't work for everybody. What I do is set bandwidth and traffic limits for the account. That way if they do share it out they will all ahve to share the smaller amount of bandwidth and download capacity. If you set a limit ...

bokad

Is there any way to change the line width when exporting to file? I find that even when I run the command in a terminal window that is set to something larger (say 120 characters), the output in the file is still formatted for standard 80 chars. I hate all those broken lines and "\"'s !

bokad

DSCP only uses 6 bits in the TOS byte. The other two can still be used for ECN (explicit congestion notification). MT looks at all 8 bits in the byte. So.... to convert between the DSCP decimal value and the MT TOS value, multiply by 4 :) Now, to get DSCP value to decimal: For the CSx values, multip...

bokad

It can't be done with the proxy integrated in to MT. Look up ZPH (Zero Penalty Hit) patch for Squid proxy and it will allow you to do this on a standalone proxy server. Where in Baghdad are you?

bokad

After running for several days, the auto map export (using Dude v2.2) starts to mess up and all the files it creates are 1KB in size and unviewable. Anyone else seeing this?

bokad

Is there anyway to change the directory that Dude will automatically export the PNG/PDF of a map to?

bokad

ROS does not do any automatic prioritization. You must mark packets and put them in a queue.

bokad

It was from 2.9.6 and imported to 2.9.41. I found the problem. THe export of the script didn't put the back slash "\" before ( and ) but it was required for importing it. A quick fine/replace fixed the problem.

bokad

I have the same issue with attempting to re-import large scripts and netwatch commands. Was this ever resolved?

bokad

It's been a while since I tried but I also had the same results when I attempted to set this up.

bokad

Computers with IPV6 installed and MT Hotspot I had a long standing problem that I've just figured out so I thought I would share with you all. The problem is that clients with IPV6 installed on their machine could not use my hotspot. They would pull a good IP address from DHCP and could ping IP's al...

bokad

If my in-head-calculator doesn't leave me, earth curvature alone will build a "mountain" of just over 4500 (!) meters for a distance of 300 miles (which should be about 480 kilometers)...

Wow, my bad! The calculator I was using was way out of whack on earth curve!

bokad

The RB150 (small 5 port switch that runs RouterOS) looks interesting but I haven't seen ANY discussion of it yet? Is anyone using these? If so, what are you using for a case? No one seems to sell a case for it yet.

bokad

Is there any reason this couldn't be done to longer distances? Say 300 miles? Radiowaves makes a set of 38dbi 5.8Ghz dishes. That would put the theoretical signal level at -65 or so with moderate cable loss. Was such great height necessary on both ends of the link? At 300 miles and 5.8Ghz it seems y...

bokad

Is there any way (SNMP or otherwise) to graph the number of drops from a queue? I can't find any but I'm hoping...

bokad

Cabana: Thank you for your helpful contribution Everyone else: I did send the support-output to MT but unfortunately their response was "try upgrading to the latest version". This isn't viable for me because there have been some major changes in hotspot between versions (I run 2.9.6) and I...

bokad

Hello??? Is anyone using HTTPS auth for their MikroTik hotspot?

bokad

As it looks like you are just doing normal routing and nothing ROS specific, it won't matter what kind of router you have at the other site.

bokad

When I use https logon for my hotspot (supports about 800 regular users) memory uses starts to climb rapidly and continues until all (224MB) memory is used. Eventually the router runs out of memory and starts to behave strangely (won’t answer DNS requests, etc…) until it is rebooted. Disabling https...

bokad

I upgraded a remote WRAP box from 2.9.14 to 2.9.27. When the system came back up it no longer shows as having a WLAN1 card (a CM9 in this case). WLAN2 still shows up fine. I downgraded from 2.9.27 to 2.9.14 and it still shows no sign of WLAN1! Anyone else have this problem?

bokad

Yes, I am using the hotspot in front of a routed network. I'm sure several others are as well. Maybe the default keepalive timeout could be changed to 10 to 30 minutes or some note put in the documentation to prevent problems with future users.

bokad

Great advice.

The problem ended up being marginal power. The POE CAT-5 run was only 90ft and I had recrimped the cable at least twice. Once I replaced it with a shorter cable (70ft), everything ran fine. Must have been cruddy cable.

bokad

I have a WRAP box running v2.9.14 that reboots under minimal traffic load. It runs fine for hours until any small traffic spike above a few hundred kbps. Say by running bandwidth tester against it, attempting to log in via winbox, or downloading a large file. I've tested all of these conditions and ...

bokad

Interference. I had a 5Ghz link at under a mile with great RSL. Registration would rapidly cycle when traffic was transmitted. Finally I blocked all traffic except ping and found that any ping of above 400 bytes would kill the link. Also ping times were erratic. I changed the channel and everything ...

bokad

Thanks for the excellent response, that did the trick.

bokad

What do I need to do to be able to use the 5.4 - 5.7Ghz range on my Mikrotik router with a CM9 card? I heard of some sort of special license.

Thanks,
Boka

bokad

I have a simple queue that I want to be at the top of the chain, before all the dynamic queues. The problem is that everyone time a new hotspot user logs on a dynamic queue is created and my simple queue is pushed down the list. What can I do to keep my queue at the top of the chain? From the consol...

bokad

/ip hotspot user export

will show all info about the hotspot user, including their password.

bokad

The below PHP function will take the Mikrotik time format (ex. 5d10h23m14s) and return it as number of seconds. From there it should be easy enough to convert it to hh:mm:ss or whatever else you want. There may even be a built in PHP function that already does it. Check http://www.php.net. Of course...

bokad

Some additional information from tonights troubleshooting: Noise floor on both ends is always -95 or better. So here's the strangeness: "A" is the AP with an omni, "B" is the CPE with the 23db grid (1) I can never get it to associate on freq 5745, even both antennas and cards sho...

bokad

I have two MT v2.9.11 boxes. One is an AP with an omni antenna and the other is acting as a station with a directional grid. They are about .2 miles apart and the signal level is ~-55. The station has a CM9 card, the AP has an Atheros 5354. 802.11a with no nstream Everyone couple hours the station w...

bokad

Unfortunately that didn't fix the problem. Still get the same error message. I installed the software on another machine though and it worked fine so it's definitely some problem with removing the older version. Besides running the uninstall I also went through the registry, etc... still no joy. Any...

bokad

Does beta 19 still support the traffic graphs? Do you know where I can download it from, I can't find that version on the MT site. I also saw where it was endlessly loggging in the the boxes. However, it only happened if you had them defined as being RouterOS but without an accurate username and pas...

bokad

I installed a newer version after removing the old but now when I try to access it via the web, it goes to the logon page but then nothing after that and also displays the following error on the server "BUG in dude version 0.91: ASSERT !"most probably you have mismatch in client and server...

bokad

Does this problem (and fix) apply across all version of RouterOS?

bokad

(1) In a bridged network network the only packets that will go everywhere are broadcast frames. This does not include your pings.

(2) Your pings are such a miniscule size that you would have to have an extremely slow link (32kbps?) to ever notice them.

bokad

I recently found that that hotspot profile “keepalive-timeout” feature (default value of two minutes) uses ping to verify that a client is still alive. If a client is running a personal firewall that blocks incoming pings (XP service pack 2, Norton, etc…), and has not sent any network traffic in the...

bokad

A little confused, how can I set the bursting parameters for a hotspot profile or a PCF queue.

There is only one field (rate-limit or pcq-rate) for each. Do I just put all the parameters in there separated by a / ? What order do they go in?

bokad

You can't use one MT box to authenticate clients on another. It can be a AAA client but not a server. Consider a simple and free RADIUS server like FreeRADIUS or Multitech RADIUS (search for radius201.exe)

bokad

I'm looking for a fanless small form factor board to run MT on with a bit more oomph than the RB500's. Probably C3 or Pentium M proc. Preferrably passively cooled (no cpu fan) and with a fanless power supply.
What small hardware platforms are you running MT on with success?
Bought from where?

bokad

I don't know if RouterOS has anyway of telling you if there something is a cache hit or not. There is a a plugin for SQUID proxy though that will allow you to change the TOS on packets that are coming from the cache. You can then set different mangle and queue rules on the MT based on the TOS. It's ...

bokad

I notice in the manual that they show marking a connection and then marking the packets in that connection for use in queueing. Is there any advantage to this vs. just marking directly marking the packets in mangle without first marking the connection?

bokad

In setting up a hotspot aimed at laptop users, is it best to use an H-pol or V-pol antenna? What kind of antenna do most laptops have built in?

bokad

I want to prevent people from staying connected while they are away from their machines for extended periods of time. Currently I set a “session-timeout” for the hotspot user profile. This is not ideal though as I would like for those who are present at their computers to be able to stay connected. ...

bokad

open that file in notepad or some other editor, copy the commands starting at "/ip hotspot user", log in to the MikroTik, and paste them in.

bokad

What are the dis/advantages of turning off/on transparent proxy under the hotspot users profile? If you're already using NAT is there any reason at all to turn it on?

bokad

How close are your clients? Using this online calculator and assuming a typical omni beamwidth of 7 degrees, you can see that at 30 meters heigth they will need to be at least 500 meters away to be in the sweet spot for signal strength. Inside that radius singal strength falls off rapidly. http://ww...

bokad

I've been running the bandwidth tester tool and it works great between two Mikrotik boxes. However, this maxes out the CPU and it is recommended to test from client to client. I'm having problems with the windows client though when connecting to the MT or another Windows box. Sometimes I can only do...

bokad

A bit early for April fools. Late Halloween prank?

bokad

re: Telnet...I don't recall if I mentioned in the original write up, but the SSH implementation in the current PHP package for windows is broken. In my environment the server was directly connected to the MikroTik so there was no threat of someone sniffing the traffic. My original goal was to provid...

bokad

Gracias. Looks pretty safe to install. Sorry to see there are no fixes/enhancements for the Ubiquiti 400mw cards.

bokad

I look on the site but couldn't find the changelog for 2.9.7.
Anyone?

bokad

Well, mostly disappearing. The Setup: I received two 400mw 802.11A SR5 mini PCI cards from demarctech today. I went to upgrade my main hub, running RouterOS 2.9.6 on a RB532 with a 12db 5.8Ghz omni and one radio. The current radio is an Atheros 5354. I'm using a 48V POE supply on a ~50 foot length o...

bokad

The setup: I run several hotspots on a military base in Iraq. These hotspots encompass the living areas (mostly tents and trailers). There is no fixed installation of client equipment, just Joe's powering up a laptop in their room. The problem: Due to all the concrete walls, barriers, and other nast...

bokad

So... reading various forums and what not I've seen quite a bit of "should work" and "it worked for a friend of mine" WRT running 2 or more 400mw cards in the routerboard 500. Anyone here been able to do it reliably?

bokad

Apologies that I haven't contacted any of you yet. I just got a bunch of equipment in and I've had a whole lot of sleepless nights. As soon as I can get some basic documentation together I'll post/send the info. Glad to see there is a market for this. Anyway, until I can get some stuff together a go...

bokad

I'm starting a small WISP and have chosen RouterOS hotspot as my gateway/user management. I was looking for any free/simple ways to accept credit cards and automatically create accounts on the MikroTik. I've come up with a solution that some of you may be interested in. If this has already been done...

Search found 152 matches