Community discussions

Search found 17 matches

by voljka
Thu Aug 08, 2019 12:33 pm
Forum: General
Topic: IPSec VPN tunnels not working when upgraded to 6.45.1
Replies: 5
Views: 2168

Re: IPSec VPN tunnels not working when upgraded to 6.45.1

That is a security feature that was developed since 6.44! You need to set both Remote and Local Peer IP! Before there was just remote peer IP!
Thanks for this comment, it saved me. can you point me to exact release note, where this feature was introduced? I'm unable to find it...
by voljka
Thu Feb 28, 2019 2:26 pm
Forum: Beginner Basics
Topic: IPSec VPN is established, but traffic isn't sent through it [SOLVED]
Replies: 6
Views: 6879

Re: IPSec VPN is established, but traffic isn't sent through it [SOLVED]

Note that router C required some static routes. It has automatic/dynamic routes to subnets 10.0.60.0/24 and 10.0.80.0/24 because it has interfaces on those nets. It doesn't automatically know about 10.0.85.0/24 nor 10.0.84.0/24, and because router C is my real internet gateway, it has a default rou...
by voljka
Wed Oct 31, 2018 10:40 am
Forum: General
Topic: IPv6 routing via SSTP IPv4 [SOLVED]
Replies: 1
Views: 389

Re: IPv6 routing via SSTP IPv4 [SOLVED]

Got it working. Take two MikroTiks and created lab setup on table, IPv6 routed just fine through SSTP tunnel. After that implemented in real life. Why this setup does not work from the beginning, I don't know. How to (from this forum copy-paste): 1)IPv6 over SSTP is possible. Make sure that ppp prof...
by voljka
Mon Oct 29, 2018 11:36 am
Forum: General
Topic: IPv6 routing via SSTP IPv4 [SOLVED]
Replies: 1
Views: 389

IPv6 routing via SSTP IPv4 [SOLVED]

Hello. Can anybody share example how to setup IPv6 routing over established SSTP VPN tunnel (running on IPv4)? SSTP tunnel between two MikroTik routers, both routers has IPv4 and IPv6 addresses. I have seen few posts in different topics, but was unable to get IPv6 routing to work. Currently I use 6t...
by voljka
Sun Mar 25, 2018 3:17 pm
Forum: General
Topic: SSTP VPN client fails to establish TCP session to Windows 10 host [SOLVED]
Replies: 8
Views: 1284

Re: SSTP VPN client fails to establish TCP session to Windows 10 host [SOLVED]

I did a rollback from 6.41.3 to 6.40.6 and problem gone! Congratulations, RouterOS writers, you have +1 bug in new bridge implementation, as I think. As I wrote in my first post, problem rised about new year, so no doubts, I did upgrade for newest and latest firmware on RB450G unit. Let me repeat ag...
by voljka
Fri Mar 16, 2018 1:32 am
Forum: General
Topic: SSTP VPN client fails to establish TCP session to Windows 10 host [SOLVED]
Replies: 8
Views: 1284

Re: SSTP VPN client fails to establish TCP session to Windows 10 host [SOLVED]

Latest capture was done on router. TCP out of order - is it ok for first packet was was intended to start tcp session?
by voljka
Thu Mar 15, 2018 11:59 am
Forum: General
Topic: SSTP VPN client fails to establish TCP session to Windows 10 host [SOLVED]
Replies: 8
Views: 1284

Re: SSTP VPN client fails to establish TCP session to Windows 10 host [SOLVED]

wireshark2.PNG
attached capture made on MikroTik when SSTP Client PC1 tried to connect to PC2 with RAdmin.
PC1 10.1.3.69 Radmin Client -> PC2 10.1.1.51 RAdmin Server
by voljka
Thu Mar 15, 2018 11:29 am
Forum: General
Topic: SSTP VPN client fails to establish TCP session to Windows 10 host [SOLVED]
Replies: 8
Views: 1284

Re: SSTP VPN client fails to establish TCP session to Windows 10 host [SOLVED]

Client sends SYN and server sends back SYN,ACK. But client sends SYN again, so it looks like it didn't receive the first SYN,ACK. If that screenshot is from server, then look where exactly the SYN,ACK gets lost (logging rules on MikroTik router can help you). sorry, forget to mention: wireshark log...
by voljka
Wed Mar 14, 2018 6:59 pm
Forum: General
Topic: SSTP VPN client fails to establish TCP session to Windows 10 host [SOLVED]
Replies: 8
Views: 1284

SSTP VPN client fails to establish TCP session to Windows 10 host [SOLVED]

hello. I got weird problem with Windows 10 PC and SSTP server on MikroTik router. Good scenario: PC1 (win10) on Internet can access PC2 (win10) behind MikroTik, when Remote Desktop or Remote Admin ports are NAT-ed from MikroTik Public IP to IP of PC2. Bad scenario: SSTP client on PC1 connected to SS...
by voljka
Thu Nov 09, 2017 4:06 pm
Forum: General
Topic: 6to4 tunnel over SSTP between two Mikrotik routers stops working
Replies: 3
Views: 362

Re: 6to4 tunnel over SSTP between two Mikrotik routers stops working

Temporary workaround:
set netwatch script to monitor remote ipv6 address. If address down, execute code: /ip firewall connection { remove [find protocol=ipv6] }
by voljka
Mon Aug 14, 2017 11:08 am
Forum: General
Topic: 6to4 tunnel over SSTP between two Mikrotik routers stops working
Replies: 3
Views: 362

6to4 tunnel over SSTP between two Mikrotik routers stops working

Hello. For a long time (almost a year) on different software versions we have one problem: 6to4 tunnel stops transfer traffic. It works right after creation, works for a week, may be months, but in the end it dies. There is no Rx data on 6to4 interface on both sides. The only possible solution - del...
by voljka
Mon Feb 02, 2015 3:38 pm
Forum: General
Topic: v6.26 will be released on 6th week of 2015, check the latest
Replies: 64
Views: 17906

Re: v6.26 will be released on 6th week of 2015, check the la

routeros-mipsbe-6.26rc20 - SSTP client Windows 8.1 update 1 works OK. But I found, what router request for certificate is impossible to sign with Windows 2008 CA (Web server offline cert template). Event viewer from CA server: Active Directory Certificate Services denied request 3532 because The req...
by voljka
Mon Feb 02, 2015 3:32 pm
Forum: General
Topic: RouterOS v6.25
Replies: 110
Views: 32535

Re: RouterOS v6.25

routeros-mipsbe-6.26rc20 - SSTP client Windows 8.1 update 1 - works OK.
by voljka
Thu Jan 29, 2015 5:37 pm
Forum: General
Topic: v6.26 will be released on 6th week of 2015, check the latest
Replies: 64
Views: 17906

Re: v6.26 almost ready for FULL RELEASE - please check lates

We are currently fixing last issues with 6.26:

- SSTP issues with Windows 8.1
routeros-mipsbe-6.26rc16 - SSTP with Win 8.1 - not fixed!!!!
by voljka
Thu Jan 29, 2015 5:31 pm
Forum: General
Topic: RouterOS v6.25
Replies: 110
Views: 32535

Re: RouterOS v6.25

We are aware of the problem, finally we repeated the problem.
Fix will be available very soon.
ROS 6.26 RC16 - SSTP problem with Windows 8.1 Client not fixed. On Client error 619.
On router: see attachment
by voljka
Tue Nov 23, 2010 3:38 pm
Forum: General
Topic: Wireless totally broken in 5.0rc4?
Replies: 21
Views: 3901

Re: Wireless totally broken in 5.0rc4?

Hi. We got a problem with 5.0RC4, and rolled back to 5.0RC3. Setup: Windows 2008R2 AD, NAP ( Radius) + Mikrotik 411AR with 5.0RC4. Wireless setup - Access point wtih two SSID: 1) WPA2 AES EAP (Radius auth) 2) WPA2 AES PSK (preshared key) When I install 5.0RC4, Windows 7 clients with Radius auth. can...
by voljka
Tue Oct 27, 2009 4:43 pm
Forum: General
Topic: Network Access Protection feature (Windows 2008)
Replies: 0
Views: 530

Network Access Protection feature (Windows 2008)

Hello. I'm interesting in NAP feature suport in Mikrotik OS (Wireless AP mode). I tested D-LINK DWL-3200 software (v.2.50) and want to see the same functionality in Mikrotik product. Do you plan to implement such feature? P.S. NAP - i mean EAPOL authentification and dynamic VLAN assigment by NAP (RA...