MikroTik

voljka

Hello everyone, I would like getting help with an issue in my microtik device. I created rules between two computers connected to my device in order to block every communication between them. As I wish there is no communication between the two computers (check ping between them). When I run an arp ...

voljka

hello. I noticed that deleting one area (Area 5) summary record with /18 mask and replacing it with several ( 1 x /22 and 4 x /24) records does not remove /18 route entry from router in other area (Area 2). added records appears in routing table, but deleted one still live. Area summarization was do...

voljka

Share are duplicated when it contain one capital letter. So, "Storage" became "Storage" and "storage". After reading Google a little: Windows will display \SHARE as \share, if some registry key is not set, and \Share as \Share. So, here we have some Mikrotik tweak for a...

voljka

may be mikrotik cloud services, software updates use certificates and frequently monitor crl list? if crl download goes over http you can sniff it out

voljka

I can access Mikrotik SMB share with direct ip address \\1.2.3.4 in File Manager address bar.
I do not see host Mikrotik in Network in File Manager.
Is this feature not implemented in Mikrotik ROS?

voljka

My experience with upgrading devices from Dude: Just click on one router at a time and "upgrade". Upgrading group failed miserably. Dude just send firmware to all routers without any sequence or delay. First router who get firmware (closest to Dude) immediately starts reboot, so f*ck all o...

voljka

Any ideas how to treat octet string which is not all zeroes? [oid(concatenate("1.3.6.1.4.1.9.9.138.1.2.5.1.3.",oid(concatenate("1.3.6.1.2.1.47.1.1.1.1.4.",array_element(oid_column("1.3.6.1.2.1.47.1.1.1",5,300,device_property("CustomField1"),"public")...

voljka

Hello. I need at least knowing advice on subject. Working code of course are welcome! :D Please advice, is described task can be done in Dude or not? 1)Create device "Watch server" in Dude (SNMP Agent, V2, public) - done 2)Create device "Repeater" in Dude (ping only, no SNMP) - d...

voljka

On my RB with v7 date has following format: [admin@R0B] > /system/clock/print time: 19:07:22 date: 2024-11-02 time-zone-autodetect: yes time-zone-name: Europe/Riga gmt-offset: +02:00 dst-active: no So, backup filename looks not correct. Can anybody adapt original script to 2024-11-02 format? Found v...

voljka

Hello. I have noticed, what Dude client may stop working and disconnects from server, if server does not have graphic image for network device. I think for some reason, during Dude upgrade or reboot, file was missed from disk (on router). Because of that client unable to retrieve it from server and ...

voljka

Problem solved. All routers interfaces, connected to external network (SDH) was set as tagged.
So, anything entered SDH as tagged packet must go through and out as tagged packet.
With this set-up, small ip packets go through ok. ARP works. :very-very-happy-smile

voljka

MT tag.png

CCR remove payload padding, when sending packet out from tagged port.

Ether 12 / VLAN_2005 - Incoming - 64/60
Ether 12 / VLAN_2003 - Outgoing - 60/56

So, when packet became less than 64 bytes it will be dropped by opposite side of ethernet link, IMHO. How to fix this?

voljka

on CCR2116 ether13 interface must be used only for management purposes, do not include it on any bridge I checked CCR2116 diagram, port 13 are directly connected to CPU, so it differs from ports 1-12. I am not a guru here, but i want to note, RB4011 sfp+ also has direct cpu link, so is it also mana...

voljka

CCR2116: Port 13 has 2 VLAN interfaces, each VLAN interface assigned to separate bridge, an IP address assigned to each bridge. Two bridges, two subnets. There are many pitfalls with this approach https://help.mikrotik.com/docs/spaces/ROS/pages/19136718/Layer2+misconfiguration , use a single VLAN-a...

voljka

APR rec.png hello. I have a very weird problem with CCR2116 device. - CCR2116: Port 13 has 2 VLAN interfaces, each VLAN interface assigned to separate bridge, an IP address assigned to each bridge. Two bridges, two subnets. - External switch with 2 trunk ports (21,22), one port (21) connected to CC...

voljka

hello. I have a very strange issue, where ping/tracert does not pass via L2 switch to connected router, but pass via transit OSPF router instead, if OSPF protocol active on IP interfaces. What is the reason for this? On network diagram, tracert from Router A (source ip from interface 12, source inte...

voljka

Router OS device firmware update via Dude fixed in 7.16 beta 2.

P.S. They really tried to hide it: "fixed map element RouterOS package upgrade functionality"

voljka

Hello. FYI: When Dude discovers device with telnet service and keeps polling telnet, this may kill device management interface. In my case device stops responding to telnet and http management. Traffic was unaffected. This is devices manufacturers response about device management lock-up issue: &quo...

voljka

Hello. Please look and maybe improve my solution, it works, but I think, it is not very pretty. I want to discover Motorola DMR Repeaters and map them to specific device type. These repeaters has several MAC OUI prefixes, issued to Texas Instrument company. Solution: 1) Dude function to get MAC addr...

voljka

hello. Is it possible to run PtP OSPF link between two Mikrotik routers without IP adresses on connected Ethernet ports?
MT has OSPF PTP Unnumbered interface type, but I was unable to get OSPF link with this type and without ip addresses on Ethernet ports.

voljka

I noticed, what: - there is considerable (sometimes) delay between moment when you press Discovery button inside device "Services" tab and moment, when Dude remove all unwanted, but discovered services. - button "Discover" became "Cancel" when pressed, and does not reve...

voljka

Dude_Discovery.png

Here is example of problem. I have device with all discovered services, but I want to have only part of them in Services tab.

voljka

Hello. Please help to solve following problem with device discovery: I have a network appliance, what can be 100% identified by SNMP query, and i created such query as probe. Also my appliance has ping, ssh, http and switch (services) probes active. I am unable to find such combo of probe properties...

voljka

Hello! I have an issue I couldn't find anything about when googling, hoping that someone here might point me in the right direction: When I log into The Dude as a local user (meaning: not a RADIUS user) I can see icons in our map just fine, but when I log in as a RADIUS user the icons won't show. S...

voljka

Hello. Question: How to disable dynamic interfaces, created by VPN tunnels/clients, when static interface binding are in place? Why I need this: SNMP trap generation for sstp-in_Branch_VPN_tunnel interface is possible, only when VPN tunnel use this static SSTP Server binding. If for some reason VPN ...

voljka

Hello. I want to know, what are power budget for SFP module in RB4011 and RB260GS models?
I am planning to test https://www.flexdsl.ch/extranetfiles/B ... VDSL2.pdf xDSL SFP, which has 3.3V, 700mA specs.

voljka

Hello. Lab setup for wireguard between two Mikrotik units, both with ver 7.1, default reset with default config. Wireguard configured by Mikrotik wiki. Problem: When under static route settings for remote network reachable via wireguard interface I set "Check Gateway: ping", traffic via wi...

voljka

That is a security feature that was developed since 6.44! You need to set both Remote and Local Peer IP! Before there was just remote peer IP!

Thanks for this comment, it saved me. can you point me to exact release note, where this feature was introduced? I'm unable to find it...

voljka

Note that router C required some static routes. It has automatic/dynamic routes to subnets 10.0.60.0/24 and 10.0.80.0/24 because it has interfaces on those nets. It doesn't automatically know about 10.0.85.0/24 nor 10.0.84.0/24, and because router C is my real internet gateway, it has a default rou...

voljka

Got it working. Take two MikroTiks and created lab setup on table, IPv6 routed just fine through SSTP tunnel. After that implemented in real life. Why this setup does not work from the beginning, I don't know. How to (from this forum copy-paste): 1)IPv6 over SSTP is possible. Make sure that ppp prof...

voljka

Hello. Can anybody share example how to setup IPv6 routing over established SSTP VPN tunnel (running on IPv4)? SSTP tunnel between two MikroTik routers, both routers has IPv4 and IPv6 addresses. I have seen few posts in different topics, but was unable to get IPv6 routing to work. Currently I use 6t...

voljka

I did a rollback from 6.41.3 to 6.40.6 and problem gone! Congratulations, RouterOS writers, you have +1 bug in new bridge implementation, as I think. As I wrote in my first post, problem rised about new year, so no doubts, I did upgrade for newest and latest firmware on RB450G unit. Let me repeat ag...

voljka

Latest capture was done on router. TCP out of order - is it ok for first packet was was intended to start tcp session?

voljka

wireshark2.PNG

attached capture made on MikroTik when SSTP Client PC1 tried to connect to PC2 with RAdmin.
PC1 10.1.3.69 Radmin Client -> PC2 10.1.1.51 RAdmin Server

voljka

Client sends SYN and server sends back SYN,ACK. But client sends SYN again, so it looks like it didn't receive the first SYN,ACK. If that screenshot is from server, then look where exactly the SYN,ACK gets lost (logging rules on MikroTik router can help you). sorry, forget to mention: wireshark log...

voljka

hello. I got weird problem with Windows 10 PC and SSTP server on MikroTik router. Good scenario: PC1 (win10) on Internet can access PC2 (win10) behind MikroTik, when Remote Desktop or Remote Admin ports are NAT-ed from MikroTik Public IP to IP of PC2. Bad scenario: SSTP client on PC1 connected to SS...

voljka

Temporary workaround:
set netwatch script to monitor remote ipv6 address. If address down, execute code: /ip firewall connection { remove [find protocol=ipv6] }

voljka

Hello. For a long time (almost a year) on different software versions we have one problem: 6to4 tunnel stops transfer traffic. It works right after creation, works for a week, may be months, but in the end it dies. There is no Rx data on 6to4 interface on both sides. The only possible solution - del...

voljka

routeros-mipsbe-6.26rc20 - SSTP client Windows 8.1 update 1 works OK. But I found, what router request for certificate is impossible to sign with Windows 2008 CA (Web server offline cert template). Event viewer from CA server: Active Directory Certificate Services denied request 3532 because The req...

voljka

routeros-mipsbe-6.26rc20 - SSTP client Windows 8.1 update 1 - works OK.

voljka

We are currently fixing last issues with 6.26:

- SSTP issues with Windows 8.1

routeros-mipsbe-6.26rc16 - SSTP with Win 8.1 - not fixed!!!!

voljka

We are aware of the problem, finally we repeated the problem.
Fix will be available very soon.

ROS 6.26 RC16 - SSTP problem with Windows 8.1 Client not fixed. On Client error 619.
On router: see attachment

voljka

Hi. We got a problem with 5.0RC4, and rolled back to 5.0RC3. Setup: Windows 2008R2 AD, NAP ( Radius) + Mikrotik 411AR with 5.0RC4. Wireless setup - Access point wtih two SSID: 1) WPA2 AES EAP (Radius auth) 2) WPA2 AES PSK (preshared key) When I install 5.0RC4, Windows 7 clients with Radius auth. can...

voljka

Hello. I'm interesting in NAP feature suport in Mikrotik OS (Wireless AP mode). I tested D-LINK DWL-3200 software (v.2.50) and want to see the same functionality in Mikrotik product. Do you plan to implement such feature? P.S. NAP - i mean EAPOL authentification and dynamic VLAN assigment by NAP (RA...

Search found 44 matches