Community discussions

Search found 38 matches

by manuelritter
Mon Apr 23, 2018 4:00 pm
Forum: Announcements
Topic: Advisory: Vulnerability exploiting the Winbox port [SOLVED]
Replies: 204
Views: 165117

Re: Advisory: Vulnerability exploiting the Winbox port

Hi,

virus seems to download binary files (marchdom4.com/mikrotik/x86_64 marchdom4.com/mikrotik/powerpc marchdom4.com/mikrotik/mips)
Anyone knows what these binaries do and are they removed after RouterOS Update?

Kind Regards
Manuel Ritter
by manuelritter
Fri Apr 28, 2017 11:52 am
Forum: General
Topic: Tunnel performance / Route public IPv4 to external Site
Replies: 1
Views: 366

Tunnel performance / Route public IPv4 to external Site

Dear Community, we have one "main" network with bgp uplinks with thousands of IPv4 adresses available and some "islands", not connected to the main network directly, with non bgp uplinks to the internet and only few IPv4 adressess. Our solution to provide IPv4 adresses to our customers at these "isl...
by manuelritter
Wed Aug 26, 2015 1:27 pm
Forum: Forwarding Protocols
Topic: OSPF default route with static fallback issue
Replies: 2
Views: 706

OSPF default route with static fallback issue

Hello community, i have a problem with OSPF vs STATIC default routes. Normally, our routers get their default route via OSPF, distributed by one of our BGP Uplinks. These routes have a distance of 110 (OSPF default) Some routers also have slower, more expensive (cost per MBit 95% percentil) uplinks ...
by manuelritter
Wed Jul 17, 2013 10:22 am
Forum: General
Topic: NAT bug?
Replies: 2
Views: 622

Re: NAT bug?

Similar issue here i think. I got an issue that the CCR1036 with ROS6.1 ist NATing incoming ipsec connections to in-interface IP 09:18:16 firewall,info VPN forward: in:ether6 out:Ring, src-mac 00:26:0b:28:77:c0, proto 50, IPSEC_SRC->IPSEC_DST, NAT (IPSEC_SRC->ETHER6_PUBLIC_IP)->IPSEC_DST, len 112 I ...
by manuelritter
Wed Apr 03, 2013 1:37 pm
Forum: General
Topic: IPSEC / Nat issue
Replies: 3
Views: 2134

Re: IPSEC / Nat issue

IPSec is not mine, no access to configuration
by manuelritter
Wed Apr 03, 2013 4:44 am
Forum: General
Topic: IPSEC / Nat issue
Replies: 3
Views: 2134

IPSEC / Nat issue

Hello Community, i figured out a problem on RouterOS 6 (tile rc11 and 12 tested) [EXTERNAL IPSec Server] yyy.yyy.yyy.10 --- xxx.xxx.xxx.242 [R1] 192.168.1.1 --- 192.168.1.2 [R2] xxx.xxx.xxx.166 (some device pppoe device with ipsec client behind. Not mikrotik) If there is a IPSec Connection from xxx....
by manuelritter
Mon Sep 17, 2012 12:40 pm
Forum: General
Topic: Priorize ICMP
Replies: 2
Views: 1120

Priorize ICMP

Hello Community, i have a problem with icmp priority and queue trees. R1: One interface to internet, another to R2 R2: Reaches internet over R1 R1 config: /queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=1M \ max-limit=1M name=queue1 packet-mark=icmp-pkt parent=glob...
by manuelritter
Thu Sep 06, 2012 6:23 pm
Forum: General
Topic: Mikrotik VoIP issue with contrac enabled
Replies: 2
Views: 835

Re: Mikrotik VoIP issue with contrac enabled

Thanks for your reply,

missing outbound interface solved the problem. Bad misstake.

Best regards
Manuel Ritter
by manuelritter
Thu Sep 06, 2012 11:13 am
Forum: General
Topic: Mikrotik VoIP issue with contrac enabled
Replies: 2
Views: 835

Mikrotik VoIP issue with contrac enabled

Hello community, i have a RB1100AH with contrack enabled. If try outbound calls, i got the connection established but no voice. Inbound calls working fine. There is no NAT on RB1100AH that could affect the VoIP since i have an offical ip but if i disable contrack, voice on outbound calls is transmit...
by manuelritter
Mon Aug 27, 2012 7:18 pm
Forum: General
Topic: Router processor loads on 100% because of management process
Replies: 12
Views: 4437

Re: Router processor loads on 100% because of management pro

Same Problem on RB1100AHx2. Management ~50%, total CPU utilization ~70%-90% Very slow response in Winbox (one minute until ip->address shows addresslist), websites slow, sometimes timeout etc. After i deleted the device from Dude, from one second to another, everything was fine. Management ~0.5%, ve...
by manuelritter
Thu Nov 17, 2011 5:26 pm
Forum: General
Topic: Boot RouterOS with grub2
Replies: 4
Views: 1606

Re: Boot RouterOS with grub2

No idea for RouterOS with grub2? Got one step forward. menuentry 'RouterOS'{ set root='(hd0,msdos1)' linux /vmlinuz root=/dev/sda2 initrd /initrd.rgz } vmlinuz and initrd.rgz where found in root on sda1, system seems to be on sda2 Now it tries to boot, but got kernel panic No filesystem could mount ...
by manuelritter
Thu Nov 17, 2011 5:24 pm
Forum: The Dude
Topic: Disable Winbox Tool in Dude
Replies: 7
Views: 3720

Re: Disable Winbox Tool in Dude

UP

Anything new here?

Regards
Manuel Ritter
by manuelritter
Fri Nov 04, 2011 2:38 pm
Forum: General
Topic: Boot RouterOS with grub2
Replies: 4
Views: 1606

Boot RouterOS with grub2

Hello, for testing environment, i would like to have a computer with RouerOS and Debian 6 . Every system works fine, RouerOS on primary master (hd0) and Debian on secondary master (hd1) If i change the boot disk in bios, i can switch the OS, but i have no luck to do in grub2 I manually added this to...
by manuelritter
Fri Feb 04, 2011 4:10 pm
Forum: Forwarding Protocols
Topic: VPLS Problem - Peer1 vpls running, peer2 not
Replies: 2
Views: 1972

VPLS Problem - Peer1 vpls running, peer2 not

Hello, i build a test environment with 5 Mikrotik RB433. core: /ip address add address=172.16.0.1/30 broadcast=172.16.0.3 comment="" disabled=no \ interface=ether1 network=172.16.0.0 add address=172.16.0.5/30 broadcast=172.16.0.7 comment="" disabled=no \ interface=ether2 network=172.16.0.4 add addre...
by manuelritter
Tue Jan 25, 2011 5:45 pm
Forum: General
Topic: PPPoE IP Pools from Radius
Replies: 6
Views: 2276

Re: PPPoE IP Pools from Radius

What i understand from Framed-Pool is, that i could give the name of a pool already created on the router, right?
Or is there any other way?

Greetings
Manuel
by manuelritter
Tue Jan 25, 2011 5:07 pm
Forum: Forwarding Protocols
Topic: BGP Default Route Problem
Replies: 1
Views: 1022

Re: BGP Default Route Problem

What about this problem? Any solutions until today?
What about the new routing package? When will it be released?

Greetings
Manuel
by manuelritter
Tue Jan 25, 2011 5:02 pm
Forum: General
Topic: PPPoE IP Pools from Radius
Replies: 6
Views: 2276

PPPoE IP Pools from Radius

Is there any way to get pppoe ip pools from radius server?

We use freeradius and it would be much easyer than configure for each router manualy

Greetings
Manuel
by manuelritter
Fri Dec 17, 2010 1:27 pm
Forum: Forwarding Protocols
Topic: BGP Default Route Problem
Replies: 1
Views: 1022

BGP Default Route Problem

Hello, could any supporter please tell me, when you wuld fix the, in my opinion major, problem with default routes over bgp? I tried in 4.10-4.15 but nothing changes. There are some problems with default route distributed from BGP. We are working on a new routing package which will fix this problem,...
by manuelritter
Mon Jul 19, 2010 4:55 pm
Forum: Forwarding Protocols
Topic: BGP Aggregation does not work
Replies: 6
Views: 1925

Re: BGP Aggregation does not work

That it is,
thank you mrz.

And thank you Chupaka too, your answer with networks also works fine.

Greetings Manuel Ritter
by manuelritter
Sat Jul 17, 2010 11:28 pm
Forum: Forwarding Protocols
Topic: BGP Aggregation does not work
Replies: 6
Views: 1925

Re: BGP Aggregation does not work

On Router 1, there is redistribute-connected=yes redistribute-static=yes redistribute-rip=no redistribute-ospf=yes redistribute-other-bgp=no And every Route on Router2 comes over BGP, because there is no other Routing Protocol active (single router an no active users yet. I only tested BGP there) On...
by manuelritter
Sat Jul 17, 2010 2:19 am
Forum: Forwarding Protocols
Topic: BGP Aggregation does not work
Replies: 6
Views: 1925

BGP Aggregation does not work

Hello, i have 2 routers. Router 1 has many OSPF Routes (e.g. 10.1.192.1/32 10.1.193.1/32 10.1.193.0/24 etc.) Router 2 should receive Routes via BGP from Router 1, but aggregated to 10.1.192.0/18 My configuration: Router 1 [admin@Router1] > ro bg instance pr Flags: X - disabled 0 name="default" as=65...
by manuelritter
Tue May 18, 2010 9:42 am
Forum: Scripting
Topic: Complete DELPHI API client: update 4
Replies: 67
Views: 39288

Re: Complete DELPHI API client

ping works differently using api, than usual ping in terminal on api, you get result of how many pings sent, and how many you received back, so you have to set =count=<some number> allways or it will run until you issue cancel command to cancel your ping. Well, is there any way to get ping response...
by manuelritter
Thu Feb 11, 2010 12:43 pm
Forum: General
Topic: Filter PPPoE Routes in OSPF
Replies: 2
Views: 676

Re: Filter PPPoE Routes in OSPF

0 name="default" router-id=10.2.197.1 distribute-default=never redistribute-connected=as-type-1 redistribute-static=no redistribute-rip=no redistribute-bgp=no redistribute-other-ospf=no metric-default=1 metric-connected=20 metric-static=20 metric-rip=20 metric-bgp=20 metric-other-ospf=auto in-filte...
by manuelritter
Wed Feb 10, 2010 4:22 pm
Forum: General
Topic: Filter PPPoE Routes in OSPF
Replies: 2
Views: 676

Filter PPPoE Routes in OSPF

Hello, i tried to filter PPPoE Routes because we have > 2000 users and ~180 RouterBoards. My filter looks like this: 1 chain=ospf-out prefix=10.2.197.0/24 prefix-length=25-32 invert-match=no action=discard but the routes to hosts 10.2.197.1-10.2.197.254 do not disappear. I it correct that this rule ...
by manuelritter
Wed Feb 10, 2010 3:26 pm
Forum: Forwarding Protocols
Topic: Disconnect dynamic OVPN interfaces or OSPF over OVPN
Replies: 2
Views: 951

Re: Disconnect dynamic OVPN interfaces or OSPF over OVPN

That works great ... sometimes things are too easy :D
Thank you.
by manuelritter
Tue Feb 09, 2010 11:36 am
Forum: Forwarding Protocols
Topic: Disconnect dynamic OVPN interfaces or OSPF over OVPN
Replies: 2
Views: 951

Disconnect dynamic OVPN interfaces or OSPF over OVPN

Hello, i have an OVPN server on MikrotikRB600 RouterOS v3.30 (but same error on RB1000 ROS 4.3) Login for the Clients is user/pass based. Because we use OSPF over OVPN, i set an OVPN-Server interface for each login and added each interface on OSPF. But sometimes after clients reconnect, clients are ...
by manuelritter
Tue Feb 09, 2010 11:29 am
Forum: General
Topic: Windows OpenVPN Client with OvpnServer RB1000 v4.3
Replies: 4
Views: 5279

Re: Windows OpenVPN Client with OvpnServer RB1000 v4.3

What should i change and where ?
Sorry, but i dont know what to do, which dhcp pool you mean?
The default profile has no ip pool and the client login has one static ip.

Greetings
Manuel Ritter
by manuelritter
Mon Feb 08, 2010 6:30 pm
Forum: Forwarding Protocols
Topic: Ospf 3.10 BUG: Database Description packet has different mas
Replies: 21
Views: 10037

Re: Ospf 3.10 BUG: Database Description packet has different mas

Same error on RouterOS 4.5

[EDIT]
I had this error 2 times after the upgrade of both routers, but now it seems to be gone.
[/EDIT]
by manuelritter
Mon Feb 08, 2010 5:28 pm
Forum: Forwarding Protocols
Topic: Ospf 3.10 BUG: Database Description packet has different mas
Replies: 21
Views: 10037

Re: Ospf 3.10 BUG: Database Description packet has different mas

Hello,
i have the same error with ROS 3.30 on both Routers.

Any help?

Greetings Manuel Ritter
by manuelritter
Tue Jan 05, 2010 2:57 am
Forum: Forwarding Protocols
Topic: OSPF ROSv4.4 incompatible wiht v3.x?
Replies: 0
Views: 646

OSPF ROSv4.4 incompatible wiht v3.x?

Hello Community, i have replaced a RB600 Router (ROSv3.30) with another RB600 (ROSv4.4) I updated the new RB600 to 3.30, loaded an backup from the old one and then updated to 4.4 First error was, that the names of Ethernet Interfaces changed. ether1->ether2, ether2->ether3, ether3->ether1 or ether4 ...
by manuelritter
Fri Jan 01, 2010 5:29 am
Forum: Beginner Basics
Topic: IPv6 Network and IPv4 ISP
Replies: 6
Views: 5665

Re: IPv6 Network and IPv4 ISP

Hi, isn't it possible to "nat" ipv6 to ipv4? I know that i could use a IPv6 tunnel, but i have no public ip. Its a litle ISP which brings broadband internet over Wireless where no normal broadband internet is available. There is only one public ip for X clients. I only want to use IPv6 in my homenet...
by manuelritter
Thu Dec 31, 2009 6:55 pm
Forum: Beginner Basics
Topic: IPv6 Network and IPv4 ISP
Replies: 6
Views: 5665

IPv6 Network and IPv4 ISP

Hello Community, I installed ipv6 package on my RB433AH ROS 4.4 I could ping the router from any PC on my network, but how to configure that I could connect the Internet? The IPv4 Gateway of my ISP is 10.0.130.1, my Router is 10.0.130.30. I tried to add a IPv6 Route /ipv6 route add dst-address=::/0 ...
by manuelritter
Wed Dec 02, 2009 2:28 pm
Forum: General
Topic: Windows OpenVPN Client with OvpnServer RB1000 v4.3
Replies: 4
Views: 5279

Windows OpenVPN Client with OvpnServer RB1000 v4.3

Hello Community, i have RB1000 with ROS 4.3 running a OpenPVN Server. There are connected at least 20 Mikrotik Routers with User and Password auth and have no Problems. But if I connect a Windows Client, i got an Error on Client side. ERROR: There is a clash between the --ifconfig local address and ...
by manuelritter
Tue Nov 24, 2009 2:47 pm
Forum: The Dude
Topic: Disable Winbox Tool in Dude
Replies: 7
Views: 3720

Re: Disable Winbox Tool in Dude

I tried, but without Winbox, the Dude can not update Firmware. I think because without Winbox, there are no RouterOS informations, so the Dude could not select correct ROS Version (mipsle, mipsbe, powerpc). Is it possible to add the ability to say if Dude user has winbox disallowed, not to show winb...
by manuelritter
Tue Nov 17, 2009 12:32 pm
Forum: RouterBOARD hardware
Topic: Creating own Packages for RouterOS
Replies: 1
Views: 615

Creating own Packages for RouterOS

Hello community,
is it possible to develop own packages for RouterOS on Routerboard?
Which programming language is used and how to build a package?

Greetings
Manuel Ritter
by manuelritter
Sun Nov 15, 2009 9:51 pm
Forum: The Dude
Topic: Disable Winbox Tool in Dude
Replies: 7
Views: 3720

Disable Winbox Tool in Dude

Hello community, is it possible to disable Winbox or to disallow fore specific users to use Winbox tool? We have a couple of technicans an each should have an own login to see which technican did what. But The Dude needs Admin User for each Mikrotik e.g. to upload firmware, so that every technican w...
by manuelritter
Wed Sep 16, 2009 5:18 pm
Forum: General
Topic: Connect Windows Client to Mikrotik OpenVPN Server
Replies: 0
Views: 1458

Connect Windows Client to Mikrotik OpenVPN Server

Hello, i have an OpenVPN Server Running on RB1000 ROS 3.28 with user an password auth for clients (no cert or key) From RBs with ROS there is no problem , but on Windows Client i got Wed Sep 16 16:11:34 2009 ERROR: There is a clash between the --ifconfig local address and the internal DHCP server ad...
by manuelritter
Wed Sep 16, 2009 4:49 pm
Forum: RouterBOARD hardware
Topic: RB600 rebooting on ROS 3.28
Replies: 1
Views: 604

RB600 rebooting on ROS 3.28

Hello Mikrotik Community, i am running ROS 3.28 on some RB600 without problems, but one RB600 reboots every 3-5minutes. The only diefference to the running RB600s are many packet errors. Is there any Problem with this feture so that the RB600 is killed by packet errors. Same on ROS 3.27 With last st...