MikroTik

XTLMeth

I was able to pass the card through to a Linux VM running ubuntu 20.04 and it shows 1G but I can almost get 10G through it with iperf. I was hoping to be able have the card show up as vmnics. lshw -class network -short H/W path Device Class Description ===============================================...

XTLMeth

I am trying to use the CCR2004 PCIe card and have the pcie interfaces show up in VMWare 7 but it's not recognized. Is there a VMWare 7 driver available for this card?

XTLMeth

EoIP is causing my routerboard to crash when it's a part of a bridge. The same configuration works great on my RB4011. Is anyone else experiencing this issue?

XTLMeth

That worked. Thank you!

XTLMeth

I only see winbox 3.13 on the download page. Is there some other location I should be looking to get 3.14?

XTLMeth

I did read the release notes and I knew there were changes related to hashed passwords. I just upgraded another router and I can't login in using winbox/ssh/webfig when the router comes back up. It just says wrong password.

XTLMeth

After upgrading a couple routers to 6.43rc19 I can't login anymore. It's as if my accounts have been deleted. I know there were some security changes in the update but how do I fix my login issue?

XTLMeth

It is far better to run a dual stack if you can help it. One reason is when it comes time to shut ipv4 down and migrate completely to ipv6 now you have to reconfigure everything. Another reason is that using any kind of translation has the potential to break applications that don't work well with it...

XTLMeth

Does the fan increase speed with load or is the speed always the same?

XTLMeth

I am looking at buying a cloud core router but I am wondering how loud the fan is inside. I need to have something that has decent performance in a quiet environment.

XTLMeth

I didn't even notice the 951 was as small as the 750 but with wireless in it. Thanks for pointing that out.

XTLMeth

I think it be cool to have a small routerboard with 2x ethernet and a wireless radio. Kind of like what aruba has. http://www.arubanetworks.com/products/rap-2wg/ It doesn't have to have a big cpu or anything crazy but something small where you could deploy them cheaply in the field as a portable rou...

XTLMeth

In my case I'm doing a point to point with a /30 and I don't use the set default route option. My client side is a mikrotik server and my server side is a linux openvpn server. I have other windows clients connected to the same linux server for months but the mikrotik client router stops passing tra...

XTLMeth

I have seen the exact same behavior. The sad part is this issue won't have any priority as I have said before that everyone else seems to think that they have openvpn running without any issues. I have tried several different configs and have not been successful. I use pptp connections and they stay...

XTLMeth

I have had this problem for a while and even posted on this forum. Nobody cared. Everyone clames they have openvpn running without issues. In my case I have to reboot my routerboard about every 24 days to get it to work again.

XTLMeth

So I did what you said and sent the supout.rif into support. What's really interesting is after I installed the ROS5 beta the card started work but only for like 20 minutes. If I reset the routerboard it works again for a while then stops again. The macs are all wonky and resetting them doesn't put ...

XTLMeth

I assumed it was on by default when it was working but it died in the middle of a connection. Where do I go in the config to turn it on/off?

XTLMeth

So much for SSH port forwarding. I tried it and the SSH session died while using it.

XTLMeth

Has anyone tried this thing out? I bought one and it's not working. The ports show up but if I disabled I can't re-enable them and the macs are all weird. I tried to configure a port but doesn't show a link status.

XTLMeth

So now I restored to a previous config so all those funky routes I was playing with are gone but now I'm even more frustrated. I previously has this router setup to do PCC for 1 dynamic ip and 1 static ip. After I restored the backup config I proceeded to test the config by disabled or unplugging on...

XTLMeth

OH man you weren't kidding about messing with routes in winbox that were created from the CLI. After adding a few routes from the CLI then deleting them through winbox they are now stuck in the router. I rebooted the router and the routes that I deleted from winbox came back! So then I tried to dele...

XTLMeth

Is it intentionally designed that way for a reason? If not it still seems like a bug or an incomplete feature. It would be nice to be able to modify this with winbox. I find it funny that I say that considering I love CLI based stuff. I still have to put the gateway=ip%interface thing into practice....

XTLMeth

Example of what's happening. This is a mikrotik I have in the lab for playing around with. [admin@MikroTik] > ip route add gateway=24.116.80.1%ether1 routing-mark=table3 [admin@MikroTik] > ip route export /ip route add check-gateway=ping comment="" disabled=no distance=1 dst-address=0.0.0....

XTLMeth

I am running version 4.4 on all my devices. I tried the gateway=ip%interface thing but the issue I have is when ever the router is rebooted or the interface is disabled/enabled it goes back to gateway=ip and I have redo the routes. Is there a way to make that stick? If I use just the gateway=modema ...

XTLMeth

add action=accept chain=input comment="SSH to box from everywhere." connection-state=new disabled=no dst-address=216.161.237.201 dst-port=22 in-interface=e1_Wan limit=2/1m,0 protocol=tcp ---->> limit=2/1m This limits 2 new connection per 60 seconds. Keep scripties from hammering my ssh.

XTLMeth

I like mikrotik a lot but the openvpn is *not* stable and it is hard to get it to work with other openvpn daemons on other platforms. I have 2 mikrotiks with openvpn running. One of them is a server for ten users to vpn to the mikrotik router and the other is a mikrotik router that connects to a lin...

XTLMeth

So here's a problem I am having. I have 2 cable modems one with a 5mbit limit and one with a 10mbit limit. I have setup PCC with mikrotik before but never with 2 dynamic ips on the same subnet. Modem A: 72.24.169.111/23 with GW of 72.24.168.1 Modem B: 72.24.169.223/23 with GW of 72.24.168.1 LAN: 192...

XTLMeth

You're right I didn't read it all. I jumped the gun on that one guys. Sorry.

XTLMeth

http://forum.mikrotik.com/viewtopic.php?f=2&t=36232&start=0 <--- this was my post where I got it working. The issue for me was I was using PCC to load balance internet from the lan out to the internet and when I was dst-natting from the internet in the routing mark was fine but when the serv...

XTLMeth

Hey don't let that guy charge you from the above message unless you want it really really bad.

I did figure this out with help from this forum in another post and I would be will to help you get it working or send you my config and you may be able to work from that?

XTLMeth

Good idea. thanks.

XTLMeth

So I setup PCC with 2 ISPs and it's working great. Each ISP has different bandwidth limits. The cable connection has 5meg down and the DSL has 3meg down. I setup up mangle rules so that each connection stay within it's limit and that is working fine. I now have a new problem though. When I disable o...

XTLMeth

In short yes. If you are having issues with maxing out your cpu then getting a faster cpu will help you but it may not help you enough. I think you need to look at the bigger picture and that is you need to figure out where you bottlenecks are. It could be one of many things like cpu, memory, mother...

XTLMeth

There is nothing wrong with what you have setup however things like which network adapter or which motherboard can make a difference. The OS underneath is linux and unless mikrotik has changed anything in the drivers for performance you're going to find that different cards/drivers will have better ...

XTLMeth

BTW gre is protocol number 47 not number 43.

XTLMeth

Yep that makes sense. That was the link I have been missing the whole time. Thank you for explaining it.

XTLMeth

If I think I got this right what the no-mark does it prevent the dst-nat return traffic from getting tagged by the PCC rule which causes it to be sent out the wrong interface.

XTLMeth

Works. I also see what this does. I will keep playing around but I really appreciate your help on this.

Many thanks!!!

XTLMeth

ok so with those 2 forward rules in place 2 things have happened. I can't get to the router from the internet now and it always marks the connections from either interface was wan1_conn so it only works from the 72.24.x.x ip. From the conntrack table ----> 11 S protocol=tcp src-address=199.253.130.1...

XTLMeth

I added the new mangle rules for the forward table but the other PCC rules are exactly the same as what I have in there already so I didn't change them. I will try this now and see if it works.

XTLMeth

The mangle rules I have in the firewall at the moment are apart of the tutorial for PCC load balancing but I also need my dst-nat working for both wans. I will try a couple things to today to see if I can get it to work. I think the hardest part is walking through the packet flow and making sure you...

XTLMeth

OK a little more info. Here's what happening. When I'm comming in wan1 sometimes it's get's marked with wan2 marking instead so obviously the return packets are getting sent out the wrong interface on the reply. So how do I fix this??

XTLMeth

Do you think you could give me a little example. I'm struggling a little bit. Once I'm in the custom chain I have to mark my connections right?

XTLMeth

OK here goes. I setup PCC with 2 internet connections. wan1 is on ether1 with 72.24.205.34/24 as it's ip wan2 is on ether2 with 216.161.237.204/29 as it's ip lan is on ether5 with 172.16.5.12/22 as it's ip PCC is working great but now I need to get to step 2. I have a server behind the firewall and ...

XTLMeth

I would be careful doing any type of filtering on the bridge. As far as I known it's not stateful.

XTLMeth

So I was sitting around watching history channel and I was thinking about this whole issue. The idea is that if the socket is raw and the netfilter rules never see the packets how do we make them see the packets and that when I came up with a pretty cheesy way but it works. typical setup ether1---->...

XTLMeth

This is a linux thing not a mikrotik thing. I have been building fiewalls with linux for a long time and no matter what firewall rules I put in place dhcp still gets through whether it's a client or server on that local firewall.

XTLMeth

I had the same thing happen to me. Check your NATs then filter rules. Make sure DNS is getting through. My issue was my NAT was wrong. I could log in but would sit and not do anything after that. I'm writing this from my ipod touch logged into my mtik hotspot.

XTLMeth

I have nothing against mikrotik but I would advise you stay away from teh openvpn server. I have it deployed with 10 users and I have to reboot the routerboard every 28 days or so because openvpn just stops working. I have seen this a couple of times with other deployments as well so I know it's not...

XTLMeth

Some people call proxy arp pseudo bridging. When you have packet forwarding turned on with proxy arp it's almost like having a layer2 bridge except it's not a true bridge. When your pppoe server hands out an ip to your client user that user is going to try to find the gateway out to the internet but...

XTLMeth

I will give this a try. Thanks.

XTLMeth

OK I can try that out but is there a little example that someone could give me to get me on track. I have tried and failed for some reason. I only need an example for one wan and I can figure it out from there for the other internet connections.

XTLMeth

I guess no one has an answer.

XTLMeth

this configuration below is very simaler to how my linux firewall is configured right now. It's the closest I could get for mikrotik. /ip address print detail 0 address=172.16.7.254/22 network=172.16.4.0 broadcast=172.16.7.255 interface=br_internal actual-interface=br_internal 1 D address=72.24.182....

XTLMeth

So here is what is configured at the moment. This is my initial attempt. /ip address print detail 0 address=172.16.7.254/22 network=172.16.4.0 broadcast=172.16.7.255 interface=br_internal actual-interface=br_internal 1 D address=72.24.182.205/24 network=72.24.182.0 broadcast=72.24.182.255 interface=...

XTLMeth

I had a similar issue with an openvpn server with 10 users. The server worked for 24-48hour periods then it would just stop. I found that if I went into winbox and disabled the server then re-enabled it everything started working again. I believe it's due to a memory leak or some other issue. I have...

XTLMeth

I need to know how to do dst-nat from multi-wan to servers behind the firewall. I have this working with generic linux but for some reason I can't get it to work in mikrotik. The ips have been changed for this example but it gives you the idea. example: wan1 ips: 69.164.219.25/24 35.2.245.2/25 35.2....

Search found 57 matches