MikroTik

andrescamino

Hello,

Is there a way to graph connections from a time period from the Firewall? There is a possibility to graph interface BW, Queues, CPU resources, but is it possible to graph connections, or a workaround with some SNMP server?

Thanks

andrescamino

Hi Skot,

Thanks a lot for the hint

/ip firewall address-list disable [find address="192.168.1.5"]

I changed it a little bit but it worked out fine finally...If I could have the option of giving you karma I would buddy...Thanks!

andrescamino

by the way...the "disable.txt" file would look like this

0
3
5
6

andrescamino

Hi mikrotikers, I am trying to disable items from the address list by reading a .txt file inserted into files, but when I run the script it prompts the number of the item that I want to disable and also an error "interrupted no such item"...in other words...not working at all This is the s...

andrescamino

Hi Spri, Well, it's a university and the users and password are the same as the studentid and password, so the university has 12000 students. Actually i can try with usermanager which is in the same mikrotik Platform, but i am wondering if is a limitation for how many hotspot users can i create on t...

andrescamino

Hello guys,

Is there any limitation of hotspot users on Cloud Core router?? on the wiki says that license 6 can have unlimited active hotspot users, but it is just allowing me to create 3000 users and not one more

Thanks for your help

andrescamino

nevermind...i was using the wrong sintax...instead of edit it's set

/ip route set distance=2 number=1

thanks anyway

andrescamino

Hello mikrotikers, I am having troubles to change the distance in the routes with scripting, i can't find the way to do it, maybe you guys could give me a hint This is the code that I'm trying to use but can't change it automatically to 2 :if ([/ping 8.8.8.8 count=5] = 5) do={ /ip route edit number ...

andrescamino

This link is for simple queue where you don't have to select the interface...
http://wiki.mikrotik.com/wiki/TransparentTrafficShaper

for queue tree any clue?

andrescamino

Hello to all... If all ports are bridged in this RB1200 how can I tell it that download is for the clients connected on ether2,3...12 and for upload is for ether1 Megis_qos pdf shows this: Each Interface HTB only receives traffic that will be leaving through a particular interface – there is no need...

andrescamino

Hello kirshteins yes i have enabled it...but no luck...it marks the packets but it doesn't queue it I don't know what parent to choose. I have done it before but one interface that i selected for upload was the ethernet where I have the public ip, and for download the bridge, but since the whole int...

andrescamino

nothing?? no clue about this??

andrescamino

This are the ruleon RB1200 FIREWALL: /ip firewall address-list add address=10.10.10.2 disabled=no list=Res_512k_01 add address=10.10.10.4 disabled=no list=Res_512k_01 /ip firewall connection tracking set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s \ tcp-close-wait-timeout=...

andrescamino

Hello c0d3rSh3ll, There are too many rules, I will try to put make my point in the queue tree section. What i want to do the RB1200 is to be a transparent traffic controller. I tried this week and had just a little bit of luck finally is queuing but not as it's supposed to be. The In the RB1000 Queu...

andrescamino

Hello gurus, Hope you can help me with a rare problem I'm experiencing these days. I have attached an image how I am controlling a ISP Network. I had all the network rules on the RB1000 (NAT, ROUTING, Address List, Firewall and QoS) but the processor is reaching to 95% with 1000 clients already so i...

andrescamino

ohh...sounds interesting, it doesn't matter that both links are not gateway?? Because I thought that ECMP or PCC works when I want to establish the next hop as gateway, but none of the hosts are gateway of each other, could you explain me a little bit more this possible configuration? Thanks for you...

andrescamino

if the wireless links are not havin the same bandwidth, xor mode would be the best approach for the situation??

andrescamino

Tks Chupaka...it worked really well

andrescamino

Hello to all, I am a little confused, I have attached a network diagram, each wireless link has 20Mpbs of Bandwidth, I would like to know what is the best possible configuration to make the sumatory of both wireless link so the aggregated would be 40Mbps between both routers RB450G Previously I have...

andrescamino

Have you done a visual inspection of the AP, checked cables for moisture ingress or loose cables, etc Thanks for your reply! yeap...that seems fine...and it's not heatin too much either... I also don't think there is a bug in the version since it has been working for almost 2 months without problem...

andrescamino

Hello to all, I would like to know what would be the reason why my AP is rebooting every 2 to 3 hours, sometimes 30 minutes or less... I have 128 clients connected to that AP (SXT stations) the AP is a RB433AH with R52Hn dual polarity...the average wireless traffic es 6Mbps... The AP was working fin...

andrescamino

It worked with the dnat rule, it didn't worked with queues because in queues the parent was assigned to other interface...my bad

thanks for your reply!

andrescamino

Hi Fewi, It works now with the dst nat action, but for some reason the queues work just for download, and not upload this are the nat configuration rules 0 ;;; Nateo de Red y redireccion a Thundercache chain=srcnat action=masquerade src-address=192.168.1.1 1 chain=dstnat action=dst-nat to-addresses=...

andrescamino

Hi Fewi, Actually yes...for some reason it doesn't work when I redirect the traffic instead, i got an error on the navigation, i can't understand why...it's transparent and also no transparent and no luck...can't really understand why because teh proxy is actually working when i configure the proxy ...

andrescamino

Hello everyone, I have this scenario: A RB1200 has mangle rules to mark the connection and packets in order to use the packet marks for Queues purposes for down and up bandwith limit, the web proxy is activated and has parent proxy the ip address 192.168.1.1 and the NAT rules to redirect the LAN web...

andrescamino

Hi Austin, If everything you need to do is to disable the proxy you must have a redirect rule in your firewall to make it transparent, and another masquerade rule to masquerade everything else that is not port 80...assuming that those rules are number 0 (redirect) and 1 (masquerade), you will need t...

andrescamino

:if ([:len [/file find name="fileverify"]] > 0) do={
:put "file exists";
}

this way worked out!

tks!!

andrescamino

Thanks for the reply Fewi, I've tried it with your code but it returns an error "Conditional is not boolean", i've added a file "fileverify.txt" into /file, and i've tried with these two pieces of code :if ([:len [/file find name="fileverify"]]) do={ :put "file exi...

andrescamino

Hello,

How can I check if there exist a file in /file?? For example there exists a txt file called OK.txt

:if ( the file OK exists in /file ) do={ :put "lala" }

How can I write that statement for the script??

Thanks for your help

andrescamino

Thank you soo much Fewi!!

It works greaaat!

andrescamino

Sure!.. Let's say I want to add every 8 ip address to a different address list....so basically AddressList 1 would contain ip address from = 192.168.1.2 - 192.168.1.9 AddressList 2 would contain ip address from = 192.168.1.10 - 192.168.1.17 ... so on and so on... until Adress List 32 would contain i...

andrescamino

Hello to all, I'm trying to add automatically 8 address to 32 different address list. This is what i got so far, I'm trying to make a division reminder with p, q and j variables to count to 8 until I add the next address-list, but i'm stucked in here, I would use some help here :global p 0; :global ...

andrescamino

Sure if that is the case, it will have no problem

andrescamino

Ok...wiki has the answer

http://wiki.mikrotik.com/wiki/TransparentTrafficShaper

Tks for checking anyway

andrescamino

Hello to everybody, I would like to limit bandwith from a RB1100, but this is the scenario. The RB1100 can't be the default gateway (I have done the queues when the same Router was the default gateway). I have attached a picture of how I tried doing it. The client with ip 192.168.10.11 with default ...

andrescamino

What exactly do you mean by using VoIP phones?

What would be your platform? Soft Switch, PBX? or u are planning on creating a PBX over Mikrotik with virtualization?

Regards,

andrescamino

Hello to everyone, I am wondering if the RB1200 could be a good core router for handling QoS and Firewall over a network with more than 2000 customers (ISP) assuming that customers will only be using internet? The whole internet traffic is 200Mbps What is the scalability under this scenario that thi...

andrescamino

Hello to all,

I have a question, I have a spare License L5...

Can I put that License into a RB411AH which originally comes with License L4??
If so...the option in the mikrotik website in Device Type for creating it for a RB411AH would be Routerboard or Routerboard 230?

Thanks for your help

andrescamino

Thanks Normis,

I wasn't sure of that...like other cards it just appears 25dBm...I thought that was for both ranges

andrescamino

Hello, I would like to know what is the Power of the builted in wireless card that comes in the RB411UAHR? I was checking on the site and find 20db@11Mbps b and 15db@54Mbps g, but I'm not sure if that is the same for example as the R52 that has 19dBm...I am basically looking the ammount of dBm that ...

andrescamino

if i use this rule it drops all clients chain=forward action=drop src-mac-address=!00:1A:F2:EA:86:50 Do you want to drop everysingle mac address that is not 00:1A:F2:EA:86:50 ?? which is what src-mac-address=!00:1A:F2:EA:86:50 means Are you putting that rule in the filter tab of IP Firewall or brid...

andrescamino

First one : I have Mikrotik AP and i need to reset it at 12:00 AM, my question is is this script work good : Code: /system reboot well the problem here is when you reboot ur router the clock won't be saved so you will be stucked in 1970 or 2002 and the hour will change also for different RoS versio...

andrescamino

u can try THG's approach and also u can set a ntp server to ask the time to that server and after that u can modify the scrip to reboot the router at a specific time, because as far as I know when you reboot the router the time will change and unless u are a NTP client u will have to modify the hour...

andrescamino

If all of your clients receive via DHCP, what you can do is to make the clients that u want to restrict to get the same Ip address by a Static Lease on the dhcp server...you can add those address to an address list like the one we have done it before and create the rule... To avoid the problem of al...

andrescamino

u strictly need the Squid to have the connections for the actual users, or u just want it to use it as cache??

if u don't care about connections...have you tried with parent proxy??

andrescamino

Sure..it's clear... first you have to create an address list with ip address of the users that you want to control for example let's say user1 has the ip address of 192.168.1.5 and user2 has 192.168.1.15 you will have to create this rule first /ip firewall address-list add list=Restrited-users addre...

andrescamino

so the only thing that don't work is the parent proxy??

andrescamino

okay first try first creating a proxy in your routerboard like this.....i guess ur using winbox I am assuming that you already made ur LAN work...(internet withing ur LAN with a masquerading network) First enable the webproxy...u don't have to do anything besides that Second create a firewall rule a...

andrescamino

u can always use parent proxy and point that to your external proxy and port... u have first to enable your web proxy and specify the parent proxy (cash proxy) and port, then if you want to make it transparent u will have to create a dst-nat rule to redirect your traffic from port 80 to 8080 and tha...

andrescamino

well u can create a dst-nat rule on ur router...i'm assuming that u have a public ip address this is an example let's say ur ip addres of your office is 50.50.50.5 and your home router is 60.60.60.6 and your pc which is on your home LAN is 192.168.1.5 you would have to create this nat rule /ip firew...

andrescamino

u don't need a script for that...in firewall rules u can apply restriction by hours and days...

what exactly do u want to do??

andrescamino

Tks mrz...it works just like i wanted..

andrescamino

Hello, How can I insert into a text file some information for example I would like to insert into different lines the numbers 1 to 10 into a text file and save it into the files. /file print file=Number /file set Number.txt contents=" " :for i from=1 to=10 do={ :put $i } but instead of sho...

andrescamino

hello.. I found this solution not the best one but somehow effective /ip firewall filter add chain=forward action=drop src-address-list=30sec /ip firewall filter add chain=chain=forward action=add-src-to-address-list protocol=tcp address-list=30sec address-list-timeout=30s dst-port=1863 This is the ...

andrescamino

Well actually yes...the proxy can ping anything outside, it can ping 8.8.8.8 or also can ping www.google.com I don't understand why the proxy set the tcp connections as closed...When I check on the router...the proxy never ask anything on the port 80 to the router...is like the connection dies on th...

andrescamino

It happened the same thing.... On the proxy connections I can see that the source ip address 10.10.10.3:65519 is making a connection with 10.10.10.2:8080 but the tcp state is listed as closed... On the other hand on the router the connection is 10.10.10.3 with 74.125.159.99:80 and the tcp state is S...

andrescamino

Hi Fewi, I tried with your config, but I can't see traffic from the Proxy to the Router, it's like the Router sends the http traffic to the Proxy, and the proxy does nothing... I can see that because when I open the connection I can see this source destination tcp state 10.10.10.3:6434 10.10.10.2:80...

andrescamino

Ok.. this is the topology of my network...what I want is to redirect all the http traffic to the proxy server...my proxy is not natting, I tried with the two configs but didn't work as i expected, the proxy gave me an error of looping...I've also tried with HAIRPIN NAT but I know it's not for the sa...

andrescamino

Ok... How is your provider giving you ip address? through DHCP?..if this would be your option, you would have to configure into your wireless or ethernet interface a DHCP CLIENT like this /ip dhcp-client add interface=ether2 If you have to provide statically an ip address this should be your configu...

andrescamino

For WDS.... Does your Belkin support WDS??....your Wireless interface in your RB should be in mode=wds-slave and select the wds-mode and the bridge where the wds link will be working, you have to create a bridge add the wireless and ethernet interfaces to it, create a wds link (it can be created din...

andrescamino

Hello.. Regarding some lines of Mangle...if it works for you...glad to know that...but for example I also have QoS for VoIP traffic, but in order to make it work right i have to mark the actual ports that I want it to mark in order to get priority and different bandwidth since I have a contract with...

andrescamino

ok if you receive an ip with dhcp client, you must have internet connection inside your router....first check that out by pinging any public ip.... if you have that....you have to create a new ip address with the proper mask to the interface you are connecting your pc, laptop or terminal, then add a...

andrescamino

did you logged in into the hotspot before pinging it?

andrescamino

Ok show me a diagram of your network and print the ip configuration in your router and also the firewall configuration...

I can take a look and see what's wrong, and make the modifications

andrescamino

how are you giving the customer the 8Mbps?? explain your configuration

andrescamino

Quote: ip firewall filter> add chain=forward src-address-list=Intranet-Range dst-address=10.10.10.30 action= drop So this rule is correct or not? What that rule means is that every traffic starting at the address list Intranet-Range (192.168.20.50-192.168.20.80) intended to go to the ip 10.10.10.30...

andrescamino

Im not completely sure of this, I havent tried like this but maybe...

You can use mangle to mark tcp port 80 (browsing http) and tcp 443 (browsing https), and also mark whatever the protocol and port the torrent-client is using and use routing marks to route that traffic trhough the tunnel

andrescamino

Hi bombato, okay this is what you have to do let's say that your LAN has the network address of 192.168.1.0/24 what you have to do is to create a mangle rule to mark the connection and packet to this network, and then mark connection and packet for everything that isn't the network, then apply a que...

andrescamino

Gives me a strong reason to stay with squid

well actually TPROXY is a configuration for SQUID..

take a look at this...you might find it helpful

http://wiki.squid-cache.org/ConfigExamp ... WithTPROXY

andrescamino

let me get this straight you want for example to get speed of 2Mbps for your LAN like when you reach a camera that is in you internal LAN, and 512k for any internet connection?? if that is the question...then yes you just have to mark connection and packets in the mangle...let me know if this is wha...

andrescamino

Hi saifulmr, I read in an old post about a T-PROXY, which doesn't change the source address of the packets coming from your LAN, maybe if you implement T-PROXY and make your customers pointing to the T-PROXY and the proxy pointing to the Router that balances the Internet frorm both ISP's you might g...

andrescamino

If I paid a level 5 team and get on routeros5 would have to pay anything? or I recommend you leave it in routeros4. As far as i know, it doesn't matter because the license is related to the Hard drive, and from the RouterOS v4.x the software-ID is 8 characters, not like old versions of RouterOS whe...

andrescamino

If the 24h license already expired you should reinstall routerOS on the router with a serial console cable, then make a ticket of support, by clicking Make Supout.rif and send an email to mikrotik support with the file explaining the situation, they will give you the license for the Routerboard, it ...

andrescamino

hi

you may find this useful....I had the same problem so I did this

hope it helps

http://forum.mikrotik.com/viewtopic.php?f=2&t=45457

andrescamino

Thats great but is there a way of running it monthly??? Hi Keefus...well you can search on the wiki as fewi said...or you can also create a script to alternate between 30 or 31 days to reset the counters...or maybe a simpler solution is to schedule the first day of everymonth without interval like ...

andrescamino

can you be more specific?

andrescamino

Hello to all, Well the solution is really simple, this is how I did it. Ok first of all you have to set your time on the router with the following command /system clock set date=DATE time=TIME Now you will be able to change or reset the counters at a specific date and time. The second thing is to cr...

andrescamino

well..

in case anyone wants it....i figured out that you can reset the counters every day with the scheduler with a line of script to reset the counters in the hotspot

andrescamino

Hello to all,

Is there a way to reset the uptime limit everyday in hotspot for example I have a created a user with uptime limit 1 hour, but the next day I would like to reset that hour again...is there a posibility to do that?

thanks for your help

andrescamino

Tks so much SurferTim!

it works great!

andrescamino

off course SurferTim I understand, customer is first.

Thanks in advance for the support of the parse script!

andrescamino

I know you can...but when you add a batch of users...like 100 users with one click...it just creates user for you like username:ujfs45 password:je454j3... Ok I kind of get the code...but can you give me an example of the gps.txt? how would it look like? so i can understand how to pick the latitude, ...

andrescamino

I have worked before with User Manager, and it works fine, but when you create a batch of users you can't assign the username and password for yourself, it generates it for you and that's not basically what I want... 4095 characters is more than enough for me...could you give some guidance in how to...

andrescamino

Tks a lot SurferTim, what if I would like to import the username and password from a excel or notepad file...Can I do that?

andrescamino

Hello to all, I would like to create an array to add users and password to hotspot, this is what i've done but it doesn't work :global usuarios [andres;daniel;christian]; :global contrasena [andres;daniel;chritian]; :for i from 1 to 3 do={ /ip hotspot user add name=$usuarios($i) password=$contrasena...

andrescamino

It is sufficient with the in-interface, you don't have to put the WAN IP if you don't want it, another way to do this is without setting in-interface is

 / ip firewall nat add chain=dstnat protocol=tcp dst-port=8443 dst-address=wanAddress action=dst-nat to-addresses=privateIpAddress to-ports=8443

andrescamino

Thanks SurferTim

I checked out the other post

andrescamino

Hi SurferTim Thanks a lot...it actually works sending from a gmail account to another gmail account... I have another question...I used port 25 and whenever i want to send this to another accout /tool e-mail send to=yourname@hotmail.com subject="test" body="test" tls=yes i can't ...

andrescamino

Hi to everyone, I'm experiencing the same problem as tomwaterloo, and did all of the modifications as SurferTim said, but no luck. I've tried with this configuration: [admin@MKTStation] > tool e-mail print server: 74.125.65.109:465 from: "<andrescamino@gmail.com>" username: "andrescam...

andrescamino

Butch Evans gives classes online...but not sure if you can take the test certification with those classes

http://www.butchevans.com/catalog/train ... -c-21.html

If you are in USA...you can probably catch the MUM next week in Arizona and enroll to the training courses

andrescamino

have you gone through the mikrotik website??

search on training on the mikrotik website and you'll find a lot of places everywhere where you can assist to the training and also get the certification

Regards

andrescamino

Hello to all, I would like to know how to send an email from my RouterBoard, but seems like the email settings are wrong because it doesn't send emails This is what i have in settings [admin@MKTStation] > tool e-mail set server=208.97.132.223:25 from="acamino@rediamerica.net" For what i kn...

andrescamino

Hello to all I am new at scripting, I thought I understood but seems like not... I would like to add 100 ip address to the address list in firewall...and this was what I did :for e from 1 to 100 do={ /ip firewall address-list add list=algo address=1.1.1. . $e } then what i did was Selecting that scr...

andrescamino

Thanks a lot fewi...you always help me really quick!!

andrescamino

Hello to all, I am very new at scripting, I've been reading scripting examples and scripting manuals at the wiki http://wiki.mikrotik.com/wiki/Manual:Scripting and I can understand those pretty well...but i have no idea where to create the scirpt, and is that I open a new terminal and start [admin@M...

andrescamino

There is a easier way...you can print it by taking your .csv and create some fields in Adobe InDesign and print 4 each A4 page...

that would be a lot easier than coding..besides you can make it look better

andrescamino

you can also hit on "Make Suppourt.rif" and send it to support@mikrotik.com and explain the issue, they will send you the license and you can paste it on the RB, if they contact you after the license is expired you can reinstall trying by netinstall after you receive the license generated ...

andrescamino

Hi to all,

I couldn't figure out the problem, so I created a pptp tunnel and let the internal traffic pass through the tunnel and that way I can get into the pc in the internal lan at a different place

Thanks a lof for your help anyway

Regards

andrescamino

1 192.168.3.14/24 192.168.3.0 192.168.3.255 ether1

that was what i meant...and it is different because I was making some changes, but the actual network i am trying is the 192.168.3.0 the 1.0 was for taking it as an example

andrescamino

ip add print # ADDRESS NETWORK BROADCAST INTERFACE 0 201.218.22.68/24 201.218.22.0 201.218.22.255 ether5 1 172.16.15.14/24 172.16.15.0 172.16.15.255 ether1 ip firewall nat print 0 chain=dstnat action=dst-nat to-addresses=192.168.3.187 I've got nothing in the filter or mangle ip route print # DST-ADD...

andrescamino

Hello to all, I would like to enter to a PC wich is windows that is in a private network which ip address is 192.168.1.187, my first guess was this configuration: A RB450G which is has in one ether interface 192.168.1.25, and in other interface has 201.x.x.x (public ip address), the default route is...

andrescamino

Hi tehknox, What is the regexp of MSN messenger? because i've blocked the messenger but in other way, which is adding users to a address list and then blocking them for 25 seconds, but that means that everything else gets blocked, not just messenger...I've tried it with layer 7 but it doesn't work f...

andrescamino

thank you guys...

If I would have to choose between ECMP load balancing with masquerade, NTH load balancing with masquerade and PCC what would have the best performance in my RB493 ?

Best regards

andrescamino

hello to all, I was wondering if there is a way to do load balancing over 2 ISP providers just with these commands ip route add gateway=10.10.10.1,10.10.10.1,10.10.10.2 my question is that I have a lan with the network 192.168.1.0/24 and these providers WAN1: 10.10.10.1 is giving me 2Mbps and WAN2: ...

andrescamino

What is the error you get?

andrescamino

Hello to all, I would like to know how to solve a problem that is represented in the graphic attached to this post. I have a bridged wireless network and the last RB is a 450G which has 4 ethernet port bridged working with a IP public, what I am trying to do is basically split the bridge into a WAN ...

andrescamino

For creating a new subscriber / tool user-manager customer add login="NEW-Subscriber" password="qwerty" permissions=owner / tool user-manager router add subscriber=NEW-Subscriber ip-address=HOTSPOT-IP shared-secret=xxxxxx You can create more than one...there's no problem with the...

andrescamino

Hello Fewi... Thanks for your updates....I will try it and let you know. Chupaka.. That's what i've been doing...redirecting from RB to x86 but...and in x86 I am doing a web proxy with the rules of dst nat....but I can't browse..well..I haven't tried it by applying a masquerade rule in the RB after ...

andrescamino

one more thing...be careful to put your mac address first...so you don't get kicked out of the router forever

andrescamino

Have you tried going to the interface and select ARP: reply-only , and on the ARP list put all the MAC address you would like to work on with

that will work

andrescamino

Hello to all, I would like to redirect all the traffic incoming to the router to another Mikrotik PC for web proxy. Both have internet connection, the RB1000 and the Mikrotik PC, and this is the config I am using on RB1000: ip firewall nat add chain=dstnat protocol=tcp dst-port=80 action=dst-nat to-...

andrescamino

how are you creating credits and users??

give us an example of configuration and maybe we can see the error

andrescamino

another thing....

I was asking if you have the userman and hotspot under the same box....

if you do...you have to use the configuration above...and in case you can't access the userman..change the www port under ip service www to another port....

then it will work okay

andrescamino

do you have the hotspot and usermanager in the same box?

andrescamino

Check this out....

http://forum.mikrotik.com/viewtopic.php?f=10&t=42473

the solution is in here

andrescamino

I can not change the logo for User manager. When i specifiy ex: /mylogoUM.gif it shows me broken image placeholder. And When i try to find the default UM image file or folder, by ftp to MT RBoar 750G i don't see that folder where the default user manager shows keeps own logo file. Mmmmm Is User man...

andrescamino

How do you install that on MT RB 750G ? i upload all the four files cause i didn't know which one, and NOTHING. Still the same User Manager the old one. I rebooted, restarted still the same. Okay this is how I did it... First you have to take out the existing package....in other words...let the Rou...

andrescamino

For 700 series

.mipsbe

in your case the first link

About payments, the link I will sugest you to read is
http://forum.mikrotik.com/viewtopic.php?f=10&t=35718

Mikrotik people is giving feedback about the test version always

andrescamino

check this out, this link will give you the info you need to know to make your hotspot work with user manager

this link rocks

http://wiki.mikrotik.com/wiki/User_Mana ... ot_Example

andrescamino

As far as I know, you can do that without problem you just have to create different credits and different batch of users with limitations, and the uptime field has to be set to the time u want to give to your packages

andrescamino

Hello tombee79

U have to install the User Manager (Test version) u can download it from the first posts in this section, once you install that one, you will have a new menu with styles and u will be able to change your logo

Regards

andrescamino

http://l7-filter.sourceforge.net/layer7 ... /flash.pat

andrescamino

Hello to all...

it's done..jusf for anybody who would like to solve this

http://l7-filter.sourceforge.net/layer7 ... /flash.pat

andrescamino

Hello all,

I would like to know if there is a layer-7 firewall rule to block .flv on different websites like youtube or any other website?

Tks in advance

andrescamino

Let's say My ISP provider gives me 8Mb and i would like to know, what is the maximum amount of users that I can have with RB450G, RB493, RB1000, I see in some manuals that RB450 can process 82,500 pps and the RB1000 process 400,000 pps but if I can have a comparison, how many users would possibly us...

andrescamino

sorry chupaka....I thought it was transparent proxy...i see that is different the TPROXY

i'll try and let you know

tks in advance

andrescamino

Hey chupaka...

I tried already the proxy as a Transparent Proxy...but still don't limit the users...unless the users have as default gateway the RB1000...

any idea?

tks for your answers

andrescamino

hello rgpmikrotik

The rb750g has 80MHz Atheros 7161 CPU instead of with AR7240 CPU which means that the 750g can have more throughput

andrescamino

Hey chupaka...

tks for your quick answer....what is a TProxy?...the Mikrotik Web Proxy??

tks for your answers

andrescamino

Hello to all mikrotikers, I would like to know if there is any possibility to limit bandwith to customers if the customers are not using as a default gateway the mikrotik and instead they are using as a default gateway a proxy? this is how the network looks like the graphic attached... Is there any ...

andrescamino

Hello to all, I am facing the same problem and my situation is a bit different I have a mikrotik that has the public ip, and that is the one I can get, then i have another mikrotik in the private network the one who has the public ip has also a private ip in another interface and is making nat masqu...

andrescamino

Hello to all,

I am wondering what is the maximum amount of users that can be using some kind of limited traffic in queues tree by an RB450g, an RB1000, and RB493?

Thanks to all in advance

andrescamino

Now I am wondering if I want to bill customers to use the hotspot, can I still use the Mikrotik RADIUS solucion or do I need to get another system to integrate with Mikrotik's access points?

You can do it...there's no problem with that

andrescamino

by the way...User manager from Mikrotik (Radius Server) it's free!

andrescamino

hello thomsany, My recomendation, you can have the User Manager aplication installed on a PC with Mikrotik, and you should use Level 6 to have unlimited users connected at the same time. The instalation is pretty easy and it works great with the hotspot, and you can link as many hotspot just with a ...

andrescamino

Hola HaDez, Si existe un foro en español de Mikrotik, se llama masteringmikrotik.com y simplemente entras al foro te registras igual que acá y puedes empezar a recibir ayuda en español Hi HaDez, There exists a spanish Mikrotik forum, it's called masteringmikrotik.com and just have to register, same ...

andrescamino

Fewi,

Thanks a looooooooot you solved my problem and helped me keep a big customer..

you rock man thanks a lot

andrescamino

lol...that's for sure bad luck

andrescamino

Hello Chupaka

it worked now with the rule netmap when is 1:1
192.168.1.2-192.168.1.11 action=netmap to-address=201.218.35.2-201.218.35.4

is there any way to do the following configuration
192.168.1.2-192.168.1.5 action=netmap to-address=201.218.35.2
??

Thanks for your responses

andrescamino

Ok fewi, it's done.

I could do that, now i have another question,

Can I do the netmap somehow with this configuration 5:1

in other words, can I assign one ip public to one space of address like this:
201.218.35.2 netmap to 192.168.1.1-192.168.1.5 ??

thanks for your quick responses

andrescamino

Hey fewi, Thanks a lot for your quick answer, I have both ip address configured for the same interface, 201.218.35.2-201.218.35.11 for ether2, which is the one that is connected to the cisco router which gives me internet by the ISP, and the ether 2 has the ARP enabled, what can be the problem?? whe...

andrescamino

yeap, that worked

Thanks a lot network pro

andrescamino

hello to all, I`ve been having problems to implement the Action=Netmap in mikrotik. My scenario is the following: I have 10 clients, and all of them are under the private ip address space 192.168.1.2-192.168.1.11. If all of them want to download from rapidshare or meguapload, the conflict of the pub...

andrescamino

No, via Static IP... but thanks anyway, I did it with queue trees and address list but...just in case, do you know a way to attach an ip address to a mac? , beacuse I did it with the ARP list and it worked, but when I changed the IP at the client's side it worked too...even though it wasn't specifie...

andrescamino

Thanks a lot fewi, that solved the problem

u rock man

andrescamino

hello gurus,

I would like to know how to make a mac address work with just one specific ip address

Thanks for your help

andrescamino

you have to download the UM 4.6 test version, then go to the folder with all the packages, rename the UM test version with the actual name of the usual version, then delete the normal and paste the test version with the name of the normal UM and then you can work normally as you were working with th...

andrescamino

I think trial users has to do directly with hotspot, not with user manager. User mannager gets into action when a user id and password is being used, and then you can have as many users active with your user manager level license, the same for hotspot.

Andres

andrescamino

Hello, Can you give some guidance of how to limit bandwith and make QoS to different group of users. Specific situation will be, if I have 1M of bandwith and I would like to use a Business plan of 512k for 8 users, and 2 plans of 256k for 8 users each defining priority to the packets for each user w...

andrescamino

Hi staff,

Is it possible to edit the login page of the user manager test version? I mean....the logo and the text is done but that is changed once the user logs in....but the login page still has the Mikrotik logo...can that be done?

thanks for your updates...those are really helpful

andrescamino

It wasn't working because i was using it with Regular instead of Bypassed....

thanks anyway for checking the post

andrescamino

Hello to all gurus I have tried a wifi phone in a wireless network with mikrotik and it works perfectly fine. Now i've tried to make it work under a hotspot network, and the wifi phone doesn't have a graphical interface in order to put the username and password to pass the hotspot page, I decided to...

andrescamino

Hi Woodmi, If you would like users to connect to your hotspot and simulate a clean internet without the use of a hotspot page everytime a user close a session, there is an option in the hotspot tab called IP BINDINGS where you can specify the mac address and the ip u'r assingining to the user, and t...

andrescamino

Thanks for your quick response I have a hotspot server on a bridge interface on ether2 and ether3 in a RB433 that is the interface that has the hotspot server, then to the ether2 i connect a cable to another RB433 and that one has an static ip to a mesh interface (ether1 + wlan1) in the same network...

andrescamino

Hi to all mikrotikers,

Why is that 2 mesh nodes don't work if I put internet to both of them? is it a bug or is something wrong with the configuration?

andrescamino

Hi scott, the configuration i am using is the one I found from the wiki /interface mesh add disabled=no /interface mesh port add interface=wlan1 mesh=mesh1 /interface mesh port add interface=ether1 mesh=mesh1 (I am using cable from the hotspot server to the mesh gateways) # interface used for AP int...

andrescamino

Hello to all, I am killing myself trying to make a network to work, but i can't make it work, I'll try to explain my best mesh_network.JPG The image of the network is attached, I am trying to start the mesh network with two RB433 the hotspot server starts the network via DCHP server and the mesh is ...

andrescamino

can I put many gateways in the mesh all linked to hotspot?
I have found some delays in some of the RB433 that I have in the mesh, I would like to know if that is a problem by setting another gateway inside of the mesh?

thanks

andrescamino

Hi normis,

Thanks for your quick response, it has no limitation, but what about throughput for the users who are going to connect to the most remote ap? it will affect the throughput the quantity of hops that will have to pass until it gets to the gateway?
Thanks

andrescamino

Hello to all mikrotik people, I would like some recommendations for a network that we are trying to implement a mesh network in one of our labs we a mesh portal (gateway for the mesh), and we have applied so far 3 routers and a mesh portal, a total of 4 routers for the principal connection. What are...

andrescamino

Thank you sergejs I was not using the userman-test version.

andrescamino

Tks eneimi for your help...i'll work on that

andrescamino

Hello to all, I have a question about editing the web interface of user manager like the hotspot, I created the umfiles directory in the router but I can't find the Settings part in the customer web interface, like it is in thre wiki. Can you please help me with some guidance about this? Do I need a...

andrescamino

hey firewall that has to do with the uptime and credit limit: Like 1hour to expire 3days when you create the credit, on credit limit you write 3d (3 days) after that you go to add the batch of users and you write on uptime limit 1h (1 hour) then you will have your users to have 1 hour of internet wi...

andrescamino

Did you check the alogin.html and redirect.html file in your hotspot folder??

andrescamino

Anybody who can help me with this??....I don't know where I can find Settings in the customer web interface

andrescamino

hello to everyone at the forum I would like to know if I have to use the new test of the User Manager, because i am currently using the version 4.2 of the user manager, the normal one, not the test one, and i create different customers but i can´t see the settings part in the web interface of the us...

andrescamino

allright jandafields thanks for the help

andrescamino

Hello everyone at the forum, Is there a possibility that many users can connect with the same username ans password generated by the user manager like this example: I generate a user with an internet access of 1 hour, and a 2 users connect simultaneously with the same username and password but both ...

andrescamino

Hi to all

I was confused, I thought the credits time was the time for navigation, and that is basically the expiration date or time, and the uptime limit in the users thumbnail is the time the person has for navigation....

thanks anyway

andrescamino

Hello mikrotikers Where can I create the profile that eneimi says "specifying uptime-limit=74h and validity=7d" is that in one of the sections of the user manager like credits, sessions, users?? or is there in any other field? Also, can I create a validity for different credits? like 10h w...

andrescamino

Hello to all mikrotik gurus I actually have RouterOS 4.2 in a HP machine basically the main function I have in there is User Manager, in other end I have a RB433AH where I have a hotspot. I would like to know if I can do this in the User Manager...thi is the scenario: When I create different types o...

andrescamino

Thanks you all guys....it worked

andrescamino

Hi,

Is really any way to avoid making transparent the proxy and set the configuration to redirect to the port 3128 from the mikrotik router?

thanks

andrescamino

Hi kthameen,

I actually did it, i added the "transparent" after the port and saved it then restarted the squid but still is not working.
Do you know what would be the problem?, thanks for your help
best regards

andrescamino

Hi, I have a problem to redirect the mikrotik router to the port 3128 of the squid in another machine, I would like to know what do I have to change in my configuration: Initially I have a proxy server in CentOS with squid and Firestarter (which makes NAT), the port that squid is listening is 3128 I...

andrescamino

ok janisk got it...tks

andrescamino

tks ummar...i can see the files in the cache...
but i still don´t understand why I can´t reset the files
tks in advance for your hep

andrescamino

thanks for the link

andrescamino

hi,

I would like to know how can i block access to a specific website like....www.usbank.com.........I know it should be done via proxy, but I can do it just with the port like blocking rapidshare pages with the port 53, but how can I do block a specific website?

thanks

andrescamino

it works...

thanks man

andrescamino

you were right man...it works great

thanks for your help it´s working perfect just as you said

andrescamino

Hi, I have a question, I would like to use the usermanager with a RB433H and the hotspot on another RB433 with R52H, how should I do the config, I made it work with both in one RB433H with the IP of the hotspot 127.0.0.1 should I put the IP of the hotspot with the IP of the new equipment? or what sh...

andrescamino

Hi, I was wondering if I can use multiple hotspot with 1 user manager. I would like to use the same database of users, but at the same time I would like to create many different hotspot interfaces like providing for example to Hotel A and other hotspot to Hotel B, but the users from hotel A can also...

andrescamino

has anybody faced this problem before?.... I am checking the web proxy settings and I can see that it is enabled, but i don´t know how to make sure it is working... the only pages html that I can see are the ones of the login, status, etc of the hotspot but nothing related to other websites such as ...

andrescamino

Hi, I want to create a transparent proxy, I am following this commands ip firewall nat add in-interface=ether1 dst-port=80 protocol=tcp action=redirect to-ports=8080 chain=dstnat ip proxy set enabled=yes port=8080 Once I do that I write this command to reset the html pages in the proxy (I guess the ...

andrescamino

Hey felix,

Thanks for your advice, I did it, I had to change the html file of "alogin", just after the endif

there is a url called link-redirect....and it has to be changed to link-status and it works great just as you said.

Thanks a lot

andrescamino

okay felix, thanks

how do i redirect the users to the status page?
where should I change the code, in login or alogin or redirect file?

Thanks for your help

andrescamino

Hi Felix, Ok you explained really clear. Now I´ll change my question. How do I make a link at the user´s end to open the status? because the user won´t have the knowledge to go to http://hotspot-ip/status or can I put as a principal page in the users end the status page after they login to the hotsp...

andrescamino

Hi Felix, I have a question, I changed a little bit the script after the person logs in and created a link to another tab in google...my question is...once a do it...it actually accepts it but it goes automatically...i want to mantain the login page where appears the session time, and how much time ...

andrescamino

Hi, I was wondering if I can create some kind of link to open a new tab in the browser or new page because once the user logs in at the hotspot I can´t see what is the time that is left, or how can the user logout. I know that I can put in the web browser http://hotspot-ip/logout but that would be a...

andrescamino

hello,

i can help you man, free of charge, i had problems to do it too...
have you download it yet?

andrescamino

Hello guys, I finally did it, the problem was that I had to change the port in ip/services/www port 80, i had to change it to some other port as I red in other topic, and i did it with the port 808. I will start adding the users to see how it works, thanks a lot for your help, i will come with new q...

andrescamino

Hi, when i open the consolo I can see that the user manager is working (or at least I think it is), because i can see the properties, and I can see the admin user that comes for default, I also created another user called hotspot_admin, and I can see that with the shared-secret, my problem comes in ...

andrescamino

Hi Felix, I have another question, I think i am doing good with the configuration, but i still have a problem, I assigned the hotspot as a radius client and all that is done, but when I want to enter to the configuration via web browser, the manual says that i have to put this http://router-ip/userm...

andrescamino

Yes, it does, and I uploaded to the router with filezilla I was trying to create the admin user, but it comes with it already. I have a question, I am reading the wiki Mikrotik, about the configuration of the user manager, but I can´t understand one thing, it talks about a server and a client, and t...

andrescamino

Hi,

I downloaded all packages zip for 3.28, I selected the RB400, is in there that I can see all packages, is that the correct place to download the user manager?
thanks for your responses

andrescamino

Hello, I´m really new at mikrotik and I would like to know how to donwload the User Manager for version 3.11. I don´t mind in upgrading any other version but I would like to know where to donwnload it, I was reading another post where I can download it from Downlad-> Select System type->All packages...

Search found 198 matches