MikroTik

Myron

here too

Myron

come on? no help around here? because i already have 2 customers experience same problem..

my suggestion setup a transparent squid proxy.

Myron

I could not figure out.I have a hotspot network running on 450g v5.1 rOS.My wireless access is not secure(I don't use password).Somebody is trying to gain access on my network with clonning mac addresses.I am not sure that my network is secure or not. Your advises? i think the client is connected t...

Myron

Bypass the MAC address of the phone in the Hotspot.

thank you fewi.

Myron

hey guys need your help

i have 2 network office and hotspot now in office network i have a SIP server and then the wireless voip phone will be connect to hotspot how can i pass the sip port without authentication in hotspot?

thanks

Myron

i just want to create this session in my network. how to configure it as my wi-fi router? can i access internet from this router on my wi-fi devices like Laptop or mobiles? if you want your devices access login and password the mikrotik can control using hotspot. thanks yes i want this but how to d...

Myron

HI I have mikrotik v4 with hotspot 1 lan and 1 wan pppoe now, i need to set up another hotspot with another lan card Lan2 I set up the second hotspot with another pool address the problem i can not get internet to the new hotspot!! some device is working and some is not!! the i change the new hotsp...

Myron

i just want to create this session in my network.
how to configure it as my wi-fi router? can i access internet from this router on my wi-fi devices like Laptop or mobiles?

if you want your devices access login and password the mikrotik can control using hotspot.

thanks

Myron

just do as fewi said
aur aap lahore k kis area sy ho?
kuch sahi samajh nahi i mujhy fewi ki.
me from cantt.
where you from?

fewi is right, connect your linksys LAN to hub do not connect linksys WAN port and disable the dhcp server in linksys, also asign static ip of your linksys LAN.

Myron

Hi, I've been able to create remote access to pc's cameras and other devices behind a natted network/hotspot (RB750G) by using "bypass" mac rules with IP binding. and dst nat rules with "port forwarding". But, I cannot seem to enable "proper" remote access to a printer...

Myron

I want create VLAN on routerboard 750G. I ll put network cable on 1st port, and to 2nd and 3rd ports will be connected to different switches. And i want to share this connection (which is on 1st port) with 2nd and 3rd port. Could you please how to create this VLAN step by step. for example /interfa...

Myron

Then upgrade to 4.17 and you will from then on be able to upgrade to 5.0

awwww okies

thanks!

Myron

Have you updated the licence to the new 8-digit format?

What is the output of
Code: Select all
/system license print

heres the output

[myron@Kamote] /system license> print
software-id: "9CR1-V147"
upgradable-to: v4.x
nlevel: 5
features:

Myron

ohhh myyyy whats wrong? jan/01/1970 08:00:06 system,info verified user-manager-5.0-mipsbe.npk jan/01/2002 09:00:02 system,error license does not support new version of user-manager-5.0 jan/01/2002 09:00:02 system,info verified system-5.0-mipsbe.npk jan/01/2002 09:00:02 system,error license does not ...

Myron

hey guys

anyone here had an issue in RB450G after upgrading to version 5?

thanks

Myron

This depends on your DSL Provider and the MTU they give you. Typically, 1420-1440 works well, but if it is a true bridge DSL then 1500 should be fine. If it is a PPPoE session it would make a difference as well. the current situation is bridge mode and no ppoe session, ok will stick on 1500. thanks...

Myron

hey guys

what is the best and accurate setting MTU my mikrotik behind DSL connection.

thanks

Myron

Please specify your configration of /ppp server and /ppp client
also change your mrru=1600

anyway it works now i have just miss something in config, thanks

Myron

seth,

lots of people here are addicted in mikrotik in this room but without your network detail information no one can do magic for you, now post your configuration export it. maybe someone will do a trick for you

thanks

Myron

hey guys

im just little bit confuse in ppp profile limits >>>> only one (default) is this single from client connection?

thanks

Myron

hey guys i have a problem in pptp can someone please help? this problem was occur only in 2nd branch office they cant connect. 16:27:32 pptp,ppp,debug,packet <180.190.221.10>: sent LCP ConfRej id=0x7 16:27:32 pptp,ppp,debug,packet <pcomp> 16:27:32 pptp,ppp,debug,packet <accomp> 16:27:36 pptp,ppp,deb...

Myron

hi fewi

i have a problem client cant access FTP server if behind webproxy is there any treak to passtru FTP?

thanks

Myron

You're either not connected on layer 2, or turned off neighbor discovery on that interface on the router.

hehehe thanks fewi it works now i forgot to enable vlans interface in discovery interface

thanks

Myron

hey guys

before can auto detect mac address if i click the small box but now cant detect mac, what could be the problem?

Myron

Hello my friends, I`m using mikrotik V3.30, I use hotspot and is working fine, but when I setup webproxy it makes cache and works good and then the problem begins, my users can`t autenthicate with login and password when I activate the NAT rule that redirects to port 8080 (used by default by webpro...

Myron

guys i found this problem happen this morning my vlan3 hotspot dhcp network is 192.168.3.0/24 but the problem is some of mac user getting 192.168.1.1 i think this is from outside or someone plug a router in my network if i trace this show 6 hops, and if i ping its reachable. i have also 192.168.1.0/...

Myron

hello guys

i have two isp lines but the 2nd line is for backup only for example the line1 is the active gateway if this line1(isp1) down so the gateway route will go to 2ndline(isp2) and then if line1 is back online the connection will establish again, is there any guide or manual to do this?

thanks

Myron

according to http://routerboard.com/pricelist/downlo ... file_id=78 eth1 has POE

thanks troy

Myron

hello guys need your advice which port of RB450G has POE compliant??

thanks

Myron

im totally agree with edified, the problem is web-proxy cannot block blocking facebook via https

my co staff here at around 100 employees they have individual computers i dony want staff using facebook during office hours.

thanks

Myron

in my case, users could use only my routerboard as dns (I blocked forward of port 53 from lan), then I inserted static dns entries like http://www.facebook.com > 127.0.0.1

hello rodolfo can you please give some example

thanks

Myron

I haven't tried to do exactly what you are doing, but based on my previous experience perhaps you could substitute dst-host=https://facebook.com (leave out the www).

I admit my suggestion is only a guess.
ok i do try.

it doesnt work

Myron

I haven't tried to do exactly what you are doing, but based on my previous experience perhaps you could substitute dst-host=https://facebook.com (leave out the www).

I admit my suggestion is only a guess.

ok i do try.

Myron

I wasn't suggesting to use openDNS, just wondering if "https://facebook.com" makes any difference.

ahhh okey burley do you have any idea or trick to do this? im totally out of idea

thanks

Myron

I think I have seen this before while using openDNS. "www.facebook.com" did not work but "facebook.com" did work. Perhaps it is the same for your setup. no burley i dont want to use opendns filtering i have my web-proxy works fine it can block facebook.com or www.facebook.com th...

Myron

post a traceroute to yahoo.com from your computer and a print from your mikrotik routing table how ever it looks like your DSL modem is disconnecting hello sariao i found out the problem is in the streaming one of staff here in the office using listen grooveshark thats my mikbox keep disconecting i...

Myron

hello guys blocking of https://www.facebook.com in web-proxy doesn't work only port 80 (http://www.facebook.com) can block, i try to block facebook dst-address=(facebook host ip) port=443 or dst-host=https://www.facebook.com doesn't work either. is there any trick to block this? you guys try to bloc...

Myron

hey guys

It is possible multiple vlan and single SSID?

thanks

Myron

fewi and feklar it works now!! the problem is in the linksys switch you need to tagged the trunk port lol

i think this is quit deffrent in cisco catalyst...

Myron

ahh sorry fewi it was enable before during my vlan testing.

Myron

Guys i have my Linksys SRW224G4 and support 802.1Q but im struggling this damn switch i create a trunk between mikrotik ether2 to linksys switch giga port 23 and the port 4 is the member of vlan 20 and my laptop coneected to this port as well the problem it doesn't give an IP coming from dhcp vlan 2...

Myron

Hi! Say I want to create VLAN2, VLAN3.... VLAN2 IP: 192.168.1.0/24 VLAN3 IP: 192.168.2.0/24 etc.. IS it possible to create VLAN with Mikrotik router OS v4.16 and Linksys SRW2024 Switch? If anyone know pls tell me the procedure. Azad mohamad as i check the specs of your Linksys SR2024 the only suppo...

Myron

try this post by fewi add action=accept chain=forward comment=FTP disabled=no dst-port=20,21 protocol=tcp add action=accept chain=forward comment="" connection-state=established disabled=yes add action=accept chain=forward comment="" connection-state=related disabled=yes hope thi...

Myron

router deal with Vlans as interfaces so to enable vpn to pass to a VLAN you need to enable proxy-arp for this vlan

hi sariao thanks for response now i know what you mean my problem solved sorry to bother you guys, solved

thanks

Myron

Hello guys good morning to all I was planning to create a multiple Vlans example vlan10,20,30,40 and 50 in 1 interface now it come to my mind a little confuse, in my current RB setup i have ether1=wan then the rest all local port with different subnet now i have my vpn connected to ether2 which is t...

Myron

Hello guys i notice 4 days from now if my router tx/rx huge traffic and i ping yahoo.com suddenly >> destination net unreachable it occurs only if the latency reach to 1,700+, my router connected to DSL modem its a MTU issue? Reply from 72.30.2.43: bytes=32 time=1588ms TTL=54 Reply from 72.30.2.43: ...

Myron

Hello, I manage an hotel hotspot which have a basic configuration: ppoe dsl--->mikrotik RB750 fw 4.16--->a few APs wired to the mikrotik. hotspot was configured using the wizard on winbox, and I use external AAA radius auth. Well I configured the mikrotik as hotspot (which is installed on office), ...

Myron

hi normis my simple hotspot page here in 7stones Boracay Resort.

http://s1198.photobucket.com/albums/aa4 ... otpage.jpg

Myron

I use my radius for the hotspot only, not for login. Don't know if that will affect the accounting. Let me know if it still doesn't work. If you haven't enabled the radius logging, that might help. /system logging add topics=radius action=memory Hello Tim The symptoms still persist :D in radius onl...

Myron

Have you tried setting the radius timeout to a larger value? /radius print detail set X timeout=600ms Change X to the line number of the radius entry (0 if you have only one entry). thanks tim, the current value is 300ms but i change now to 600ms will see what happen next :D i get back back you soo...

Myron

any help?

Myron

Hello

Is there nay other way to delete all logs in usermanager instead deleting 1000 per page? i have 44000+ logs can someone give some tips or scripts in every 5 days all logs will be deleted.

Thanks

Myron

Hi fewi and the rest of mik team. i have some problem in this radius accounting log, before it works fine and client can login without this blue log but now a more than week i received this message radius accounting not sent: no response, but the client hotspot account can login. please check the sc...

Myron

ok thanks i will try..

Myron

Merry Christmas to all mikrotik addict

From Philippines

Myron

hello all i have strange problem with yahoo page, all site are works fine except yahoo.com some sort of erratic behavior, the page doesn't load complete or even the pictures does not load only but you can read the character text. anyone experience this kind of problem? ps: my english is bad merry Ch...

Myron

Hi to all expert

Can you please share your idea how to make a script example my WAN port i want to start my connection at 8AM and off in 5PM.

Thanks to all and Merry Christmas

Myron

Hello fewi if your there need some help here since im using mikrotik layer 3 router, because in ip/dhcp/network the gate is always .1 now my question is what if i use the 10.13.0.0/24 the gate is 10.12.0.1 and i dont use 10.13.0.1 gate so it possible the 10.13.0.0/24 can go outbound in internet? my ...

Myron

Hello, i just Receiver my RB750g and i will use it only as a VPN Server so i could connect my iPhone or iPad from outside. Does anyone has a newbi Tutorial how to enable the VPN Server so that i could access? I could use ipsec or pptp or l2pt. The Router is behind an avm 7390vdsl Router which will ...

Myron

Start Winbox. Login. Click on interfaces. Select ethernet tab. Double click on each interface. Set "master-port=none". Click "Apply". No typed entries at all. Is that not a gui interface? Let me know when you have done that. And normis is correct. This is a very complex piece of...

Myron

Hello

Everything is here http://wiki.mikrotik.com/wiki/Category:Manual hope this help

Thanks

Myron

hello people im just want to know if somebody here tested this kind of setup the hotspot controller is mikrotik but the access point is ruckus?? need some advice guys i have my incoming project now proposing 6 building in different area and style like a resort hotel.

thanks

Myron

hi guys i saw this in youtube what the hell mikromade is this hehe

cool utility http://www.youtube.com/watch?v=3ItXkNetREc

Myron

the new version of bittorent doesn't block

Myron

I just bought a RB450G last week and am now playing with it. So far I have gotten PTTP to work through tutorials on the internet. I can get my clients (built-in Windows client) and they can ping the router and the clients within the network behind the RB, but the clients behind the RB can't ping th...

Myron

Sure. Destination NAT can do that. Let's say the office network behind the ether2 interface is to use a DNS server at 1.1.1.1 and the engineering department behind the ether4 interface is to use a DNS server at 2.2.2.2. /ip firewall nat add chain=dstnat in-interface=ether2 protocol=udp dst-port=53 ...

Myron

Hello fewi :) i have some concern and question it is possible to point different dns servers. example, my RB450 has 5 ether port let say in ether2 (office network) >>> dst addrs to google dns and ether3 (engineering dept) >>> dst addrs to ultra dns. my concern is i want to divide specific port to bl...

Myron

I have set up several VPNs between MT RB750G devices. Only one of them is giving me some difficulty. The problem is that the tunnel works as long as you're passing traffic from one side to the other. After a period amount of idle time where no traffic is being passed, the connection drops. The only...

Myron

Here is the basic queue tree I have set up at home. Modify it to match your bandwidth and packet mark needs. Your LAN(s) is going to be the Download portion of the queue and the WAN(s) is the upload. You'll need a queue for each WAN(s)/LAN(s) to segment it the way you want to. /queue tree add burst...

Myron

Yup, capped it around 13M instead of 15M. Getting around 1.4-1.5MB/s instead of 1.5-1.6MB/s. Its worth trading up some speed for this kind of manageability though.

Thanks again for all your help!

hi ganniii would you mind to share your queue tree

thanks

Myron

Hey guys seems looks interesting this features a VPN bonding and mikrotik can do this?. and anyone have tested this kind of setup?

thanks

Myron

yeah fewi your probably correct i have strong feeling this client machine blocking the icmp request they are using windows 7, even i tried L2TP and configure properly but same issue, im going to investigate this issue and i get back to you soon fewi. thanks fewi the problem solved now some of there...

Myron

yeah fewi your probably correct i have strong feeling this client machine blocking the icmp request they are using windows 7, even i tried L2TP and configure properly but same issue, im going to investigate this issue and i get back to you soon fewi.

thanks

Myron

Hello fewi i have site to site VPN and both connected. the problem is from apps server side cant ping to client pc ip 192.168.5.10 . but from client pc to apps server 192.168.1.100 ping work fine even the tunnel ip can ping too, i add route both to local IP to reach both local, there is something ms...

Myron

Hi im new in the hardware of mikrotik.
Actually i have a routerboard 411U and i dont now how to connect to it to configure.

How can i do that???

Thanks

http://www.mikrotik.com/testdocs/ros/2. ... /basic.php

Myron

Hi I have tried to configure a VPN from my RB450G v4.11 to a Trustgate 160 Firewall using this guide witch is for a Zywall and have just changed the required configurations so that the matched in moth ends. http://www.potato-people.com/blog/2009/10/ipsec-vpns-for-mikrotik-routeros/ The Tunnel is up...

Myron

you still need to reboot it to apply this setting permanently

thanks normis for the assistance.

cheers

Myron

normis it seems the cpu seeting is change now :) but the box not yet rebooted [paradisegarden@ParadiseGarden Manila] /system routerboard settings> set cpu-frequency=680 [paradisegarden@ParadiseGarden Manila] /system routerboard settings> print boot-device: nand-if-fail-then-ethernet cpu-frequency: 6...

Myron

Hello Normis

Support Ticket#2010101366000127

thanks

Myron

hey guys i have my new 2 same rb750g the other one shows 400mhz only, this could be 680Mhz right? ][paradisegarden@ParadiseGarden Manila] /system routerboard> print routerboard: yes model: "750G" serial-number: "xxxxxxxxxxxx" current-firmware: "2.27" upgrade-firmware: &...

Myron

You could create two scripts, one to disable, and one to enable. /system script add name="EnableWebProxy" source="/ip proxy set enabled=yes" /system script add name="DisableWebProxy" source="/ip proxy set enabled=no" Then you could schedule these scripts to r...

Myron

I am using router os 3.3. The router is NATed to external public address and there is also a IP tunnel through which all our local IP gets internet access.Now i would like to configure HTTP proxy in the router.I followed following steps 1.Enabled HTTP proxy. The settings are enabled: yes src-addres...

Myron

You could use a NAT rule to redirect to proxy at specific times. In your case, you could try something like this: /ip firewall nat add chain=dstnat protocol=tcp dst-port=80 time=08:00:00-17:00:00,fri,mon,sat,sun,thu,tue,wed action=accept /ip firewall nat add chain=dstnat protocol=tcp dst-port=80 ac...

Myron

Hello people

I have my web-proxy and it works fine, it posible set a specific time? example 8AM to 5PM proxy is close.

thanks

Hi sorry admin for double post accidentally.

Myron

Hello people

I have my web-proxy and it works fine, it posible set a specific time? example 8AM to 5PM proxy is close.

thanks

Myron

Hello people

I have my web-proxy and it works fine, it posible set a specific time? example 8AM to 5PM proxy is close.

thanks

Myron

Mikrotik Hotspot Hotel Software Integration with the Web Interface.Mikrotik antennas available to guests in hotels and Internet service fees paid automatically adds the guest account, if necessary, to mention a web interface.Normally go to the reception guests can purchase Internet card on the card...

Myron

As an example, I will use 10.0.0.1/24 assigned to the interface on 1stRouter that is connected to the 2ndRouter. 2ndRouter is assigned 10.0.0.2/24 on the wan interface (connected to 1stRouter), and 192.168.0.1/24 on its lan interface (connected to the sip server). The sip server is assigned 192.168...

Myron

hello everyone can someone gv some sample idea how to forward port in the second router let say ex. i have 2 routers both router has src-nat, i know how to redirect port but my question what if two router connected and has both masquerade src-nat and the sip server is in the second router connected....

Myron

Queuing is where you need to be. Traffic Control is where all the Top Jobs are because it can be incredibly complicated. You should start with Queue Trees, and remember that the Queue only acts on Outgoing Traffic through an interface. MT confuses it a bit by using an Intermediate Queuing device (I...

Myron

Hi. i am new to the forum, someone pointed to mikrotik to find a solution for my issue. in my office we do have 2 adsl connections from different isps. Each of the connection needs its own router to work since it is mac address locked from isp. at the moment router A has ip address 192.168.1.1/24 a...

Myron

Hi All, I have multiple PCs sharing a single wifi connection (connected to an 8 port switch) . I have tried IP binding to allow 2 PCs bypass mikrotik log in page. I was wondering why it doesn't allow me to IP bind 2 PCs at the same time. Any ideas? try to bypass client MAC thanks Thanks a lot, mara...

Myron

Hi All,

I have multiple PCs sharing a single wifi connection (connected to an 8 port switch) . I have tried IP binding to allow 2 PCs bypass mikrotik log in page. I was wondering why it doesn't allow me to IP bind 2 PCs at the same time.

Any ideas?

try to bypass client MAC

thanks

Myron

ahhhhhh those double ip its appear only if im behind nanostation PTP(station ------- CPE), i came this morning at the office i connect my laptop direct to a switch its show 1 only :) C:\Users\Kamote>tracert yahoo.com Tracing route to yahoo.com [67.195.160.76] over a maximum of 30 hops: 1 1 ms 1 ms 1...

Myron

do you use Hotspot? also, post your /ip route print detail and /ip firewall nat print yup chupaka i have hotspot in ether4 /ip firewall nat add action=masquerade chain=srcnat comment=NAT disabled=yes out-interface=Ether1-WAN add action=masquerade chain=srcnat comment="10.2.2 NAT" disabled...

Myron

what should be your next hop after 10.11.0.1? hello chupaka this is the ip addresses in every port, my linksys switch connected to ether3 and the switch has no vlan only native setup /ip address add address=10.11.0.1/24 broadcast=10.11.0.255 comment="Office Network" disabled=no interface=...

Myron

hi to all gurus in my rb450g ether1=wan, ether2=servers, ether3=office_local (10.11.0.0/24), ether4=hotspot, im just wondering why my local ip shows double in windows tracert did i miss something wrong? c:\Users\Kamote>tracert yahoo.com Tracing route to yahoo.com [69.147.125.65] over a maximum of 30...

Myron

You can easily work around all of that by accepting packets that have a connection-state of 'related' and 'established' very high up in the ruleset (probably as the first two rules), and ensuring that the FTP helper is enabled under "/ip firewall service-port". The firewall has helpers th...

Myron

hello guys i notice some of FTP server doesn't open port 21, i have my drop rules and port 21 accept rules place before drop rules so meaning my port 21 can pass, my doubt is some of ftp server use port 21 as a dummy then change to any port before ftp establish connection? anyone have an idea? thanks

Myron

Above the rules you already have, put /ip firewall filter add chain=prerouting in-interface=ether3 action=accept add chain=forward out-interface=ether3 action=accept It should be: /ip firewall filter add chain=forward in-interface=ether3 action=accept add chain=forward out-interface=ether3 action=a...

Myron

Above the rules you already have, put /ip firewall filter add chain=prerouting in-interface=ether3 action=accept add chain=forward out-interface=ether3 action=accept hello fewi in ip/filter theres is no prerouting in chain correct me if i mistaken /ip firewall filter add chain=prerouting in-interfa...

Myron

Yes. The easiest way is probably to put a rule at the top that accepts all traffic in and out ether3.

ahhhh fewi can you please give some little bit example

thanks fewi

Myron

hey guys i have a question let say i have 3 ether ports in my rb and i have my rules settings in firewalls ex. ether1=isp ether2=local ether3=hotspot, now it is possible the ether3=hotspot is excemted in firewall only the ether2=local has rules in firewall?

thanks

Myron

Hi, I would like to know how can i block movies download, in just one interface of a mikrotik RB. Thanks. use mikrotik web-proxy for specific port something like this action=redirect chain=dstnat comment="web proxy allow to ether2 " disabled=no dst-port=80 in-interface=\ ether2-local prot...

Myron

hey guys need help here how to reset usermanager password?

thanks

Myron

if you want both vlans into the same broadcast domain then, yes, bridge them together.

wow thanks mrz for information u share

Myron

hi fewi i have my noobish question since i have no network certificate or proper training but im learning with my own self readings some forums etc etc now my question is how to communicate VLAN1 to VLAN2 ?? or need to bridge both vlans?? as my understanding VLAN can segregates broadcast domains :D ...

Myron

once you establish eoip tunnel then try to add local route of your eoip, mine work fine without any issue

hope this help

Myron

2 ;;; mark rudnicki router chain=prerouting action=mark-connection new-connection-mark=mark_rudnicki_router passthrough=yes src-address-list=00:11:6B:19:BC:A9 3 chain=prerouting action=mark-packet new-packet-mark=mark_router_levelone passthrough=yes connection-mark=mark_rudnicki_router You're marki...

Myron

hello jim

i setup resort network too (http://www.seawindresort.net/) one of my client here in the island running 750g + hotspot + usermanager(limit, max, burst etc) + radius and 10 picostation AP's so far so good work like a charm.

Myron

In a mangle chain that happens before queues (prerouting?) mark the packets based on MAC address and fire the queue based on packet marks. helo fewi i tried to mark the packets base on mac address but the packets doesn't moving, where did i wrong this config? actually this client mac address is und...

Myron

Hi to all, I am trying for days to setup a VPN server on Mikrotik RB433. I have succeeded to create the VPN server but I cannot make it work correctly. What I mean is: I have the DSL router connected on ether1 with static ip 10.x.x.10 / 27 I gave to the vpn server local-address 10.x.x.14 I gave to ...

Myron

hello chupaka ive notice this day my IPSEC shows expires ipsec-SA expires: ESP/Tunnel and then after few minutes initiates new phase 2 negotiation im using both 4.10 ROS,. or some sort of bug??

thanks

Myron

when i want to try connect vpn from windows machine to mikrtik error comes

post your ppp configuration jani.

Myron

Ok. can anyone tell me how to set queue for a target ip address? heres my simple example a target ip add burst-limit=1M/2M burst-threshold=256k/256k burst-time=15s/15s comment="" direction=both \ disabled=yes dst-address=0.0.0.0/0 interface=all limit-at=0/0 max-limit=256k/786k name=\ &quo...

Myron

i think is not possible, i wanted that too limiting queue in target mac... matbe some of mik user here has an idea if possible hehe

Myron

http://wiki.mikrotik.com/wiki/Manual:Create_Certificates That should work well for OpenVPN. hello fewi thanks for your quick response i have newly created certificates i saw in /file what is the meaning of request.pem and key.pem? to be honest this is my first setup of certificate hope you understa...

Myron

hi guys

is there any basic guide how to negotiate certificate between 2 router i have my IPSEC runs works well but in preshared key only, is there any step by step guide create certificate in every router.

thank you

Myron

I don't see how IPIP over IPSec makes any sense to use. One of IPSec's drawbacks is that it can only encapsulate unicast packets, which means that you cannot send broadcasts or multicasts over IPSec tunnels. Many routing protocols require multicast packets, and many other applications require broad...

Myron

hi gregg thanks for your videos and guidelines and i learn a lot your the man gregg

, my IPSEC works fine without any issue, now my question is what is the defrence between ipsec and ipsec+ipip tunnel? which more secure and more stable?

thanks

Myron

hi guys i have my web proxy using 8080 port ive notice there is someone from outside using and exploiting my 8080 port i saw in torch at WAN port and in graph the upstream and downstream is same figure and also consuming upload and download, i decided to change any port and it solved my problem, yo...

Myron

hehehe thanks hrvojie those proxyer cannot penetrate and it solved my problem my connection is back to normal

thanks

Myron

/ip firewall filter
add action=drop chain=input disabled=no dst-port=8080 in-interface=internet \
protocol=tcp

internet = your wan interface

dst=port or src=port?

thanks

Myron

/ip firewall filter
add action=drop chain=input disabled=no dst-port=8080 in-interface=internet \
protocol=tcp

internet = your wan interface

wow thanks bro!!

Myron

hi guys i have my web proxy using 8080 port ive notice there is someone from outside using and exploiting my 8080 port i saw in torch at WAN port and in graph the upstream and downstream is same figure and also consuming upload and download, i decided to change any port and it solved my problem, you...

Myron

fewi i did a several test and comparing site to site vpn pptp and l2tp ive noticed the l2tp was very stable and low latency compare to pptp

Myron

i saw the packets count in both netmap but the problem is from outside the ip xxx.xx.xxx.203 doesnt reply, i put 10.11.0.10 in laptop and i ping the xxx.xx.xxx.203 it work and reply im wondering this, can you please explain more bit blake hehe Can you post the output of '/ip firewall filter export'...

Myron

Hi, I was able to get this working. /ip firewall nat add chain=dstnat action=netmap dst-address=192.0.2.20 to-addresses=10.1.50.254 place-before=0 add chain=srcnat action=netmap src-address=10.1.50.254 to-addresses=192.0.2.20 place-before=0 Do you have another rule which may be matching before the ...

Myron

Hi, I was able to get this working. /ip firewall nat add chain=dstnat action=netmap dst-address=192.0.2.20 to-addresses=10.1.50.254 place-before=0 add chain=srcnat action=netmap src-address=10.1.50.254 to-addresses=192.0.2.20 place-before=0 Do you have another rule which may be matching before the ...

Myron

hi FEWI need some help :) i have my 3 public ip's the two xxx.xx.xxx.xx1 and 2 is currently use and the 3rd ip is available now im trying to netmap but it doest work did i miss something i follow this guide http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT my laptop is connected to ether3 subnet ...

Myron

hi guys found this site but its really cool WAN balance + VPN failover
Site-to-Site VPN Sub-Second Session Failover
http://www.peplink.com/index.php?view=f ... 88&path=34
so guys PCC has capabilities to do this?

thanks

Myron

L2TP by itself is not secure at all.

thanks fewi for quick response

i have some question sstp is available in 4.10?

thanks in advance

Myron

EoIP and pptp are unsecure. Best bet is SSTP or IPSec. Ipsec requires a lot of resources for encryption so IMHO SSTP is better. hi mr mrz how about L2TP stable and more secure too? another thing im trying to use sstp in service but does not shows only pptp, l2tp, async, ppoe and openvpn available i...

Myron

hey guy good day to all i test L2TP tunnel this morning and both router connected the problem is the pc client connected to remote-office i cant ping the home-office(mik1) local server but if i use ping tools in remote-office(mik2) ping is reachable, i did something wrong? or i will add routes in r...

Myron

hey guy good day to all i test L2TP tunnel this morning and both router connected the problem is the pc client connected to remote-office i cant ping the home-office(mik1) local server but if i use ping tools in remote-office(mik2) ping is reachable, i did something wrong? or i will add routes in ro...

Myron

I think Butch's script catches Limewire from the number of open connections. should be easy for someone to recommend something like that or go to http://www.butchevans.com I'll take that back: just tested it and it does not pick up Limewire but it does pick up Vuze right away. thanks for reply wis,...

Myron

heloo people

all p2p block except limewire how can we block this? i doubt that this limewire using encrypted p2p data, it is possible to block in web-proxy? can anyone give some tips

thanks

Myron

how about in blackberry?

Myron

Since I didn't register the license after upgrading the RouterOS, the license has expired and need to be reinstalled. :? But how to install the RouterOS again without the winbox? Or does any other thing I need to do to recovery my RouterBOARD? Thanks a lot. :) i think you need to install via netins...

Myron

hi to all gurus the default ip of switch is 192.168.1.2 and the rest of the port is belong to default vlan and the port 1 is trunk connected to mik ether2, i try several testing but no success, i have my layer2 switch has mane=vlan1 VLAN-id=10 and the port 6, 7, 8 belong to this vlan if i try to con...

Myron

add routes

hi bafh can you please give some example how to route hehe

thanks

Myron

3.30 or 3.0? Theres a massive difference.

ahhh sori for misposting, 3.30 i mean pada but the webproxy is working fine my only concern is the hits i have no idea is this normal or not?

thanks pads

Myron

For that amount of traffic I would rather use a dedicated server running Squid proxy.

I think the MikroTik web proxy only reports a hit if the object was cached. Could you perhaps state what RB you're using and which version of ROS?

hello pada currently using RB450G 3.0 ROS

Myron

hi to all expert my web proxy working fine but i saw in monitor shows no hits i this normal? [myron@Kamote] /ip proxy> monitor status: running uptime: 2w2d3h34m21s requests: 5342820 hits: 0 cache-used: 0KiB total-ram-used: 4860KiB received-from-servers: 130887613KiB sent-to-clients: 130726028KiB hit...

Myron

I have a ADSL2+ line and a Zyxel 660h-T1 v2 my router conf. is: Encapsulation RFC 1483 Multiplexing LLC VPI 8 VCI 35 Mode : routing Now I want to change "routing mode" to "bridge mode" because I want to use my RB1100 with direct public IP and I want to use the Zyxel modem like a...

Myron

and ask your ISP about those IPs =)

hi chupaka the problem been solved i found out the damn netgear router this router been use by other department office i tried to pullout then suddenly the 10.4 disappear.

thanks

Myron

Yes, there'd be an IP conflict. Presumably hosts on either side would prefer the host on their side as that ARP reply would come much sooner, I guess. You can use DHCP on both sides, just make sure the pools don't overlap. hi fewi good afternoon i try a several test both mik, i saw packets sending ...

Myron

Yes, there'd be an IP conflict. Presumably hosts on either side would prefer the host on their side as that ARP reply would come much sooner, I guess. You can use DHCP on both sides, just make sure the pools don't overlap. thanks fewi for quick response, i think the best solution as you said dont m...

Myron

There is no port. PPTP runs a control channel on tcp/1723 and data flows over GRE, which is IP protocol 47. EoIP, like PPTP, runs over GRE (IP protocol 47) but doesn't have a control channel. hi fewi i am new in mikrotik i have some question about the EoIP tunnel as i read the documentation http://...

Myron

hey guy i have strange ip 192.168.10.4 tcp and udp showing in torch at WAN Ethernet port can anyone please what the hell is this and where this come from? http://i623.photobucket.com/albums/tt318/iwantlemonjuice/104.jpg ether1 port = WAN and public static ip and nated ether2 port = 192.168.1.0/24 et...

Myron

maybe you miss something to configure your radius local ip, try to add ip router in usermanger 127.0.0.1 and put password and now in winbox you can see radius and add ip address 127.0.0.1 and your password same as you provide in userman router pass.

sori for my bad english

Myron

hey guys i have my hotspot running fine and works well but my problem is the 6 picostation assigned static ip individually is behind hotspot and natted, 6 pico is unreachable to ping, anyone can help how to passtrough even the hotspot network is natted.

ps: sori my bad english

thanks

Myron

i have this scenario. I got an ISP and i would like to put some html+jpg in my routerboard and some way when my ISP is down mikrotik will foward that picture or html to everyone saying SORRY THE SERVICE WILL BE DOWN FOR A WHILE. yeah is a good thing like gabak idea when the internet down is shows S...

Myron

me to please myronray.sy.evasco@hotmail.com

thanks thanks

Myron

You can add second subnet as /ip address to the local interface. If HotSpot universal client/DHCP/etc. are used, correct used-pool and add new subnet to it. arrrgg fewi sorry for my previous post i did a wrong explanation ^^ this is what i mean sergejs reply adding another subnet in the same ether....

Myron

read this info this way - have level 4 license and i will be able to install RotuerOS 5 when it come out (and all v6beta and rc versions)

level 4 will be enough for the router to handle.

ahhh thanks for the info janisk

Myron

hi to mik gurus i have bought new rb750g today my question is since the license level is 4 it is possible to upgrade to 5? [myron@Seawind Resort] /system routerboard> print routerboard: yes model: "750G" serial-number: "228F01AE21FD" current-firmware: "2.20" upgrade-fir...

Myron

Yes if you use VLANs. No if you don't.

thanks fewi for response can you give me a basic example this setup.. my current hotspot is working fine im planning to add another subnet for hotspot in same ether port.

thanks a lot

Myron

hi to all gurus

it is possible in 1 ether port let say 4 hotspot setup?

thanks

Myron

I noticed the interface names are not "normal". Is the router a RB750? If so, you need to remove all the local interfaces from the switch in "/interface ethernet". /interface ethernet set X master-port=none ADD: If you are doing these changes from one of the localnet ports (2-5)...

Myron

Netmap isn't required for this. That is for forwarding a range of ips. I would use srcnat and dstnat rules. /ip firewall nat add chain=srcnat action=src-nat src-address=10.13.0.2 to-addresses=x.x.124.203 place-before=0 add chain=dstnat action=dst-nat dst-address=x.x.124.203 to-addresses=10.13.0.2 p...

Myron

hello guys need ur help here , my isp provide me 2 public ip and the first ip xxx.xx.124.201 asign in my mikbox WAN ether1 the second ip is xxx.xx.124.203, now i have my freebsd box i want to map the second public ip in my freebox i olredy asign the xxx.xx.124.203 in my freebox, take look my config ...

Myron

http://wiki.mikrotik.com/wiki/Manual:Packet_Flow Destination NAT happens in prerouting. After that the packet's destination address has been rewritten and it goes into the forward chain. Change add action=accept chain=input comment="nano allow" disabled=no protocol=tcp src-port=12345 to a...

Myron

It doesnt go in the input chain, it is forwarding the traffic, so it goes in the forward chain.

thanks for response road but im accessing from outside

Myron

hey guys need your help i have my internal nano station ip and it works perfect if i disable the default rules but the problem is if i enable cant redirect the traffic to nano ip heres my config add action=dst-nat chain=dstnat comment="station side nano" disabled=no dst-address=\ xxx.xx.xx...

Myron

http://forum.mikrotik.com/viewtopic.php ... ilit=rb450

Myron

try set proxy arp

Myron

ok thanks chupaks

Myron

chupaka my big problem is i forgot to copy my old key and i deleted in files, oh my godness

Myron

i made this one and it could help a little limit for p2p user :D and you can adjust in pcq-rate in mangle /ip firewall mangle add action=mark-connection chain=prerouting comment=P2P disabled=yes new-connection-mark=\ small-connection p2p=all-p2p passthrough=yes add action=mark-packet chain=preroutin...

Myron

The pings were very slow - 1000+ms. The CPU usage was not very high, between 0-10%. I then saw that when I disconnected one of the local users on my lan, the problem went away and the pings stabilized on +-4ms. I contacted the user and asked what he's busy doing. Said he's sending out a large email...

Myron

hello mikrotik i have my old rb450 3.30 and before this router works stable without rebooting and i try to upgrade the license via update license key after upgrade and has a new license key i notice every 24 hours my router stop working, mikrotik is there any solution to back my old license key??? a...

Myron

It should be src-port. Since you use TCP port 1723 I presume you are using a PPTP tunnel. If you do that, you also need to create a firewall rule to let through all traffic via the GRE protocol. But I am not sure on this, first use TCP 1723 only, if that does not work add the GRE rule. And please r...

Myron

Myron, I'm a noob with VPN too, but I figured it is necessary to set rules that allow a VPN tunnel to be opened up. For IPSec this would be UDP port 500, and ipsec-esp protocol. /ip firewall filter add action=accept chain=input comment=VPN disabled=no protocol=ipsec-esp add action=accept chain=inpu...

Myron

set proxy-arp on interface with your local network /interface ethernet set <ethernet name> arp=proxy-arp hi janisk my VPN works fine if i disable drop rules >> action=drop chain=forward comment="" disabled=yes out-interface=Ether1-WAN if i enable the drop rules the outside client cant con...

Myron

hello guys one of my rb450g very strange issue in every 2 to 3 days the mik stops working all office, guest etc computer cant browse this 3rd time happen this issue, the way i solved the problem is to reboot the box :( :( :( i dont want to reboot the box in every 2 to 3 days, mikrotik staff can you ...

Myron

I thought the service in the radius section was supposed to be "hotspot". Does "login" service work for the hotspot too? Or is the "hotspot" under the "login" in that entry as well? in hotspot server profile i forgot to tick = use radius that is why the userm...

Myron

127 hehe

ohhh sori, but i change 127 still same problem

problem solved hehehe forgot to tick ip/hotspot/server profiles use radius

Myron

hey guys please what going on my hotspot i have a problem since i downgraded to 3.30 my generated account cant log in anymore, before in 4.5 its work fine! [myron@Kamote] /radius> print Flags: X - disabled # SERVICE CALLED-ID DOMAIN ADDRESS SECRET 0 login 172.0.0.1 123456 hotspot in usermanager defa...

Myron

RB450G. CPU sits at 20% or so, then I torch a busy Ethernet interface and CPU spikes to 100% and no output data. I had same problems on a RB133 RB433 RB411A RB450 . 3.28 3.30 4.4 4.5 having this same issue on Thoughts? Happy to provide additional data. 1.jpg 2.jpg same issue here sometimes when i r...

Myron

in general - yes

what type of connection is used?

one is cable internet and one is dsl no ppoe both just normal nat connection, anyway chupaks thanks reply

Myron

hey guys i test 2 isp with static public ip and it works in PCC setup, now my question is does PCC works in dynamic ip provided also of isp example:

2 defrent ISP with dynamic ip >>>>>> mik (PCC) >>>> client = it works??

thanks

Myron

yeah i notice too even the manual page at winbox is unrechable.

Myron

i wish i can go there

how about in the philippines no MUM?

Myron

hi gregg atlast the log shows invalid hehehe >>>>>>> invalid exchange type 243 from 98.237.177.6(500) is this someone/other IP's?

Myron

hi gregg i follow your ipsec video tutorial this afternoon and i try my 2 mik router with public static ip each, but it doesnt handshake the log shows nothing, router a ROS 3.30 <<<>>> ROS 4.2 or incompatible in deffrent version of ROS? Myron, If you went to system->logging-> and added IPSec to go ...

Myron

Im new so be easy on me! Got a 450 and learned to get a basic config up for local office, lights up as expected with green link light and bliking orange activity. Bought another that I thought was the same but turned out to be 450g. Now the only time i see a green light is when I plug my laptop int...

Myron

hi gregg i follow your ipsec video tutorial this afternoon and i try my 2 mik router with public static ip each, but it doesnt handshake the log shows nothing, router a ROS 3.30 <<<>>> ROS 4.2 or incompatible in deffrent version of ROS? Myron, If you went to system->logging-> and added IPSec to go ...

Myron

hi gregg

i follow your ipsec video tutorial this afternoon and i try my 2 mik router with public static ip each, but it doesnt handshake the log shows nothing, router a ROS 3.30 <<<>>> ROS 4.2 or incompatible in deffrent version of ROS?

Myron

ok, thanks fewi for advice the solution

Myron

hey guys i have a question my hotspot works fine in ether4 at the 10.12.0.0/24 now my pool range is 10.12.0.20-10.12.0.254, my problem is dhcp lease is almost full how do i expand my dhcp? ori will add >> next pool range? like 10.12.1.20-10.12.0.254 << is this correct?

please help me

Myron

mine in rb450g 4.4ROS:

Voltage: 22.1 V
88 C

is this normal????

i downgrade to 4.2 now the health is :

Volatge: 22.1
41 C

Myron

mine in rb450g 4.4ROS:

Voltage: 22.1 V
88 C

is this normal????

Myron

hey guys it is possible to redirect hotspot login page via VPN?
ex. my client pc connected to mik vpn when i open the webpage the hotspot login appear, its posible this kind of setup?

thanks

Myron

Maligayang Pasko at Manibagong Taon...

from Philippines

Myron

hey guy can someone have an idea how to priority VPN connection traffic

thanks

Myron

The routers should have the following routes: Router A (the one with an Internet connection): /ip route add dst-address=0.0.0.0/0 gateway=[WAN gateway] add dst-address=10.14.0.1/24 gateway=10.13.0.2 Router B: /ip route add dst-address=0.0.0.0/0 gateway=10.13.0.1 You really need to read up on TCP/IP...

Myron

any help?

Myron

I'm a little confused.

Are you removing the 0.0.0.0/0 route when adding the 10.14.0.0/24 route?

yeah, i replace this one (router-b side) ip route add dst-address=10.14.0.0/24 gateway=10.13.0.2

Myron

Hi Myron in router-a i can ping 10.13.0.2 but if im in router b it wont ping 10.13.0.1 using laptap connected to 10.14.0.0/24 If you're trying via a laptop connected to router b, then also check that your laptop has either a default route via 10.14.0.1 or has a route to 10.13.0.0/24 via 10.14.0.1. ...

Search found 253 matches