MikroTik

reverged

Ensure you have bridge vlan-filtering enabled:

/int bridge set bridge vlan-filtering=yes

Otherwise bridge vlans have no effect.

I have forgotten to do this many times......

reverged

@normis

Can you answer 2 items for the FAQ:

1. Is there a simple test to know if a router is infected?
2. Upgrading to 6.37.5+ cures an infection or it only prevents infection?

reverged

I'm having the same problem. CSS106 2.4=>2.7 manual upgrade. I was able to upgrade after resetting, as mentioned above, but I reset the config using the 2.4 web interface. (switch is remote). Switch reverts to 192.168.88.1 and then upgrade works. Without a reset, I doubt Mikrotik can fix this, since...

reverged

As mentioned above, you need to add switch1-cpu to the vlan definition and egress tag lines for each vlan that needs a routed interface. This line: /interface vlan add interface=ether1-master-local l2mtu=1584 name=vlan34 vlan-id=34 adds a vlan interface for Routeros, but the switch can only interfac...

reverged

Yes, Mikrotik support replied to my email with: Please connect to device via serial console. Boot SwOS and choose "r - reset configuration". This should reset SwOS configuration to default. Also we will improve our manual. This switch is remote to me and the tech onsite has no console cabl...

reverged

If I factory reset the CRS326-24G-2S+, it defaults to RouterOS. OK, good. If I then set the boot to SWOS, it boots with the old SWOS config. Not a default SWOS config. A stupid engineer put a bad SWOS config on this switch and it is impossible to access using http. How can the SWOS config be reset t...

reverged

You can find most old versions of MT sw by changing the url:

https://download2.mikrotik.com/swos/2.0 ... 1s-2.0.bin

reverged

ACL might be able to do what you want. I have done some interesting things with ACL. Completely untested: acl_example.png If you've never worked with ACL, the light gray part is match condition and the medium gray is action (row that begins with "Redirect To") First entry says "If ing...

reverged

We received some of these today. It looks like this is a new design, which may explain why there has been no stock for months. The Taifatech CPU is gone and replaced with a STM32F107xxx. That's probably good long term. The switch chip is under a heat sink and since we need to ship, we didn't remove ...

reverged

Good news on gigabit. The one I skinned has a foil shield, drain wire and twisted pairs.

reverged

Mikrotik should be embarrassed to ship this thing. I'm still shocked. Who would think this is acceptable?

On the jack end, the 4 wires make 2 really tight 90's and then are soldered onto what looks like a connector intended for PCB's.

I'm going to tear down a gigabit and compare.....

reverged

We just had to replace a bunch of SXT injectors (beige/gray pigtail) since we had flapping and/or links at 10M on a campus style install with SXT Lite5 devices. After much swapping and experimentation we discovered replacing the beige/gray injector with either the white gigabit Mikrotik injector or ...

reverged

Take a look at the forwarding database with: /interface ethernet switch unicast-fdb print Make sure macs are on the vlan you expect - especially the pfsense intefaces. And make sure there are no bridges config'd in the CRS that could mess things up. Lastly, what version ROS? Early versions with CRS ...

reverged

You have trunk ports and access ports mixed up. Assuming your interfaces are all 2 digits.... Try this: # either use the interface names or check the numbers.....on my crs, ether3 is number 2 # also are the ports all renamed to have 2 digits? /interface ethernet set numbers=3,4,5,6,7,8,9,10,11,12,13...

reverged

send email to support.
there is a new test version of 6.13 that fixes this problem.
I had the same problem and it is now fixed with the test version.

reverged

I had the same problem; 1G would not link in sfp1.
But 10G did link so I used 10G in sfp2!

reverged

send an email to support.

I had this same problem on CRS226 v6.12.

support sent a link to a new test version that solved the problem.

reverged

same problem
6.5 worked OK, 6.12 does not.
Looks like ssh changed @ 6.10

Show stopper!
Just sent email to support.

reverged

5.25 has the same issue.
The previous dns entries remain in cache and you get them returned in order.
Only reboot solves this.

reverged

If you are using php and have access to the switch remotely, the mac address table (sort of) is available at: http://<switch url>/!dhost.b I use curl to retrieve it. The response is pseudo json, [{adr:'<mac>',prt:0x04,drp:0x00,mir:0x00},{adr:'<mac>',prt:0x04,drp:0x00,mir:0x00},{...},{...}...] adr: m...

reverged

Did I miss a newsletter on the 250 being end of life?

I'll miss it. The 260 is quite a bit larger.

reverged

I did something similar with RB250's using gigabit injectors for a 1000' run using v1.6 I had power in the middle and split it into 4 250' links, the middle feeding gig poe in both directions. Works perfectly. It's a fairly cheap solution. Be mindful of the vlan 1 issue with SWOS devices and I have ...

reverged

# Setup DHCP Network
/ip dhcp-server network add address=192.168.10.0/24 gateway=192.168.10.1

There is no dns server setting in the dhcp network. That could be a problem.

reverged

19ms is not unusual for pinging the switch management interface.

If you ping another device connected to the switch, you will see 1ms or less.

reverged

Is the hotspot page hosted on Mikrotik or external server?

Can you post the login page html?

Which smartphone OS has trouble?

I have many custom hotspot pages and smartphones work just fine.

reverged

In this business, "no news" is never "good news", so it would appear that Mikrotik has abandoned SWOS.

It has been over a year, almost 14 months, since 1.6 was released and there is no word on 1.7 or 2.0 or fixes to any of the outstanding issues/requests.

SWOS is Dead?

reverged

values reported can vary wildly if running metarouter guests. Just ignore readings given by '/system health' in this case. So disable voltage.ko when metarouter is enabled if they are worthless anyway and tend to cause unpredictable system behaviour. I agree with barkas here. Either make it an opti...

reverged

I'm seeing the same thing.
Are you running 5.21rc1?

-- Nathan

Yes and latest fw.

(A little out of sequence in this thread.)

reverged

... I have also noticed that once the "bad" router gets stuck in a freeze-up pattern, occasionally the health stats show some real bizarre numbers which get "stuck" there. For example, right now as I am typing this, the "bad" router is in the middle of one of its freez...

reverged

Could you please return some of them to MikroTik RMA warranty service for inspection?

I sent an email to support relaying your request.

reverged

Has anyone had trouble getting RBGPOE's to link at 1G? Has anyone had one stop linking at 1G over time? I have 10 pcs I ordered and 3 / 10 won't link at 1G even using a 3' patch cable between 2 RB250GS. The other 7 are fine. This is a high rate of failure out of box and it makes me worry about failu...

reverged

You might be able to do this using the ACL feature of the 250GS. Packets coming into the port matching the mac address of the AP management interface get a new vlan id of 50 assigned. Packets leaving the port going to the mac address of the AP management interface get the vlan stripped (assigned to ...

reverged

AHH! That makes sense.

I did have to netinstall before I shipped it out. Now I have to find another 450G.....

Thanks.

reverged

For future readers: that means mounting the yaffs2 filesystem of router os (I used openwrt running from RAM booted over network.) and renaming the 'voltage.ko' module. This worked like a charm for some reason ! It is now running for about a day and requesting phpinfo() from an embedded apache + php...

reverged

So why not try to work on the problem? I totally agree with you on the potential of MR. But to keep my answer short, WE are not working on the problem, we are fumbling arround, providing information to MT without getting anywhere. And as long as I don't get any proof that MT is working on the probl...

reverged

i am not very keen user of windows shares. Just do Start->Run and paste: \\192.55.195.201\Mikrotik You don't need to map the drive. I tested this image and have the same results, sort of. (using Winbox; RB450G; ROS 5.14; FW 2.39) If the MR memory size is initially set to 24M (or 32M) during import,...

reverged

I can get the same to thing to happen if I install a ROS metarouter.

erratic2.gif

This doesn't seem to happen to as great an extent when I reboot a ROS metarouter.

reverged

NathanA - Some good work and you are not crazy about the power supply theory. It has come up in other threads but there was no conclusion. What is the model number or brand of your 12V supply? How long is the dc cord? I have some observations to add. 450G, ROS5.14 I installed an OpenWRT mr. 16MB RAM...

reverged

sergejs and janisk, Can you detail the stable metarouter config used in your network? - Which device? - Which image (or ROS metarouter?)? - Which firmware/ROS version/packages? - export compact the config? - etc... Then, perhaps, others can test this config and see if there is stability. If stabilit...

reverged

I love this one: "If you're clueless and/or going to just trash me as some sort of a hacker then that'd explain why you skimmed the first post so badly and gave a useless reply." - that's what I get after re-reading all of the confusing posts and coming-up with any possible solutions. Con...

reverged

You posted this in the SWOS section, so you might get no help.

Look in the RouterBOARD Hardware section and you will see several threads about 751 problems.

I think there is a test fix posted there.

reverged

Go back to Feklar's first response. I repaired a large apartment network that had this exact problem. vlans or port isolation in the switch is the only answer. The SXT cannot block layer 2 traffic in the poweredge switch. You may see no more dhcp alerts, but it is happening in the switch. Getting th...

reverged

There may be several issues working against you here. Metarouter is not very stable - not that I can tell - in any RB. Someone correct me if they have a stable metarouter doing anything useful. Just check out the virtualization section and you will feel the pain. Well, more pain. I was very disappoi...

reverged

A simple solution:

/ip hotspot ip-binding add type=bypassed server=<hotspot instance name> mac-address=<mac> disabled=no

[/code]

More complex, but easier to manage, if you are using centralized radius, enable mac authentication and setup a mac user on the radius server.

reverged

Hi all, is any way to configure username to be case in sensitive? I am using Mikrotik 4.17 Thank you You can use the javascript toLowerCase() method to convert the username to lower (or upper case using toUpperCase() ) before login. A lot depends on your login page, but generally you could try some...

reverged

Yes, it is working. When I tested last night, I didn't use the global, but did a find for the file in the second script.

I then used the file index to get the file name, which included the ".rsc".

Late nights.....

reverged

I get the same result. I don't think it's the dst-path, I think it is a file handle issue.

Putting the export in one script and the ftp in another and then calling them separately from a third script works.

reverged

Try changing the winbox port from 8291 to something else.

/ip service print

get the number for winbox <num>

/ip service set <num> port=xxxx

reverged

http://wiki.mikrotik.com/wiki/Manual:IP ... rt_mapping

reverged

Some Airport devices can be routers or bridges. I run into this. There is a setting for this, but the Airport router complains about double nat and will sometimes revert back to bridging despite being set for router. If you have multiple publics you can 1:1 nat public:private. There's not much you c...

reverged

Beware the rb1100ah interface numbering may be different than the 450G. It was on v5.12

On 5.12,
/interface ethernet 0 is ether12
/interface ethernet 1 is ether13
/interface ethernet 2 is ether1

Had me confused for some time.

reverged

Your html has many errors, including: <INPUT CLASS="button" TYPE="image" src="img/top1.gif"/></a></center><div align="center"> <a </div> You have a </a> and no opening <a> You have a <a (partial) and no closing </a> Your body tag has attributes: "leftmarg...

reverged

vlans work on ports or bridges, it depends on what you want to do. Do you want guests to connect to the virtual AP, bridge to vlan 16 and then end up on a different port on the dlink? Then add vlan 16 to the RB port, also tagged on the dlink port and bridge the virtual AP to vlan 16 in the RB. Don't...

reverged

I have gotten much better performance from a 450G.

How are you testing it?

reverged

Don't put a forward slash before 'export' unless you want to export the entire config. Posting your entire config can be dangerous. [myrouter] /ip route> /export exports your entire config, not the '/ip route' section of interest. [myrouter] /ip route> export or [myrouter] > /ip route export exports...

reverged

http://cn24.net/SXT-Shield-50.jpg
ANTENNA reflector for sxt.
But we make it a little differently which even covers the sides of the SXT. havent taken a pic of that.

I get a 404 error. Is there another uri?

reverged

I once had a wise professor that gave 5 points for each problem if you draw just a simple picture. The exam had 4 or 5 problems, so you could easily get 20~25 points. Just make a picture. It was amazing how many students got less than 20 points. (100 is perfect) Draw a picture. It tells 1,000 words ...

reverged

May I reopen this topic and suggest the fact that more ram support would be of value? why? RouterOS doesn't use any RAM. It's not a 3D game I'm not arguing for more RAM, but I have seen the above statement made several times in this forum by MT and I'd like to understand what "any" means....

reverged

I'm eventually going to deploy a RB750 as a router for a small wireless network watching IP cameras at a remote site using Starband satellite for a back haul. As you all probably know, raw throughput on the uplink side of consumer grade satellite internet is only 21kBps, so the link is pretty slow....

reverged

It's difficult to predict what is wrong without all the pieces. Are you using a radius server or user settings? What actually happens when you login? Turn on hotspot and radius logging in the MT and you will see what is going on. Put an error_log in your php file. Something like: error_log(print_r($...

reverged

Ah, grasshopper. You must travel many roads to reach the answer.

I did not take this to completion.

reverged

The switch port that connects to the MT needs to be a trunk port.

tp link looks like vintage Linksys cli, so if the uplink is port 1, perhaps:

int ethernet e1
switchport mode trunk
switchport trunk allowed vlan add myvlanid

reverged

I just played around with this (on XP SP3 only) and found browsers handle the words differently. Add to that OS differences and this might take some testing. You can solve the dns issue by making an entry in the static dns for "logoff", but that is only part of the problem. OS: You have to...

reverged

You gave no details about your setup, but a clue is that md5.js is required for chap and not pap. A wild guess: You have login-by=http-chap and you need login-by=http-pap set, so including md5.js would break things. Leaving md5.js out should throw a js error in your browser, but the line: document.s...

reverged

It is sort of working for me. Although different browsers give different results. I added a domain in the dhcp network setup. This fixed Firefox. Windows will look for help.domain if you nslookup "help" It will look up "help" if you nslookup "help." Also, between experi...

reverged

I need to get signal to a few buildings that are close to each other, but don't have LOS to each other. They can all see the tower. A 25 degree beam is adequate to cover them all. That's ~0.5 mile diameter at 1 mile from the radio. I'm curious about the shielding comments. Do you put the RB711 in a ...

reverged

The built in dns server supports regular expressions for domain name. e.g.: /ip dns static add name=".*" address=5.5.5.5 Any dns request to the ROS dns server results in 5.5.5.5 The hotspot intercepts udp/53 already. Anything else won't make it through the hotspot, except walled garden ent...

reverged

You should also allow GRE protocol: /ip firewall filte add action=accept chain=input comment=PPTP disabled=no protocol=gre HTH, /ip firewall filter add chain=input action=accept connection-state=established add chain=input action=accept connection-state=related .... .... add chain=input action=acce...

reverged

Check this page: http://wiki.mikrotik.com/wiki/Switch_Chip_Features To use the switch on port 1, your RB needs to support switching on port 1 (750GL appears to, some support 2-5 only) and then: /int ethernet switch set switch-all-ports=yes It may default to "no", which means 2-5 only. Ther...

reverged

you can use it that way so long as all the other connecting cep's are within the beamwidth both vertical and horizontal Yea but not recommended. Why? The SXT has the same 32MB RAM and a 400 MHz CPU just as the OmniTik. And of course L4 ROS (after upgrade). What constitutes "a little more guts&...

reverged

The subject says it all. Upgrade an SXT to L4, and put it 30~70m on a tower.

Has anyone done this?

Aside from the weak plastic connectors, what else can go wrong with this?

reverged

I think the Zyxel has the printer driver native so it does the printing. I've never used this feature of userman, but: http://wiki.mikrotik.com/wiki/User_Manager/QA/How_to_create_timed_Voucher The batch method will let you setup and print a series, presumably. You'd need the printer driver installed...

reverged

It probably doesn't want to be at the bottom of the list.
Try putting the rule before the "drop" rule.

Rules are processed top to bottom in each chain.

reverged

You have the hotspot on ether3 and another network on ether1. So far, no trouble. You want to route between them. So far, no trouble. When you bridge ether1 and ether3, the hotspot can't work on ether3 and goes red. Don't bridge them, why would you? You want to route between these networks and use f...

reverged

The only other post I could find with a similar problem as I am having, after extensive searching, was this one, which had no answer. http://forum.mikrotik.com/viewtopic.php?f=7&t=7637 . I am trying to work with a similar setup, where I have a RB493AH sitting at the base of our tower, and use i...

reverged

Good Afternoon,

Can I include ether1 in Switch1 with the rest of ethers?

Regards

According to this:
http://wiki.mikrotik.com/wiki/Manual:Sw ... s#Features

No. 2-5 only.

reverged

vlan 1 is tagged or untagged on your Cisco? It will egress eth1 tagged.

A simple test would be to put an IP on each bridge in the correct subnet and try to access upstream elements.
Ping from Winbox is an easy test.
Then you can confirm the wired portion is correct.

reverged

I see on the Switch Chip Features page that this switch does not support a host table. Is this why it doesn't know what the correct port is or am I misunderstanding that? The switch chip has a forwarding database of 1k mac addresses, otherwise, it is not a switch, it is a hub and that would be real...

reverged

[admin@MikroTik] /ip firewall nat> print Flags: X - disabled, I - invalid, D - dynamic 0 chain=dstnat action=dst-nat to-addresses=192.168.0.1 to-ports=80 protocol=tcp in-interface=ether1-gateway dst-port=80 1 chain=srcnat action=masquerade protocol=tcp src-address=192.168.0.0/24 dst-address=192.168...

reverged

add chain=input action=accept protocol=udp in-interface=!<gateway> dst-port=53 
add chain=input action=accept protocol=tcp in-interface=!<gateway> dst-port=53 
add chain=input action=accept protocol=icmp in-interface=!<gateway>

reverged

I was under the impression that it does respect the order as my seconday has very few hits. Have you tried increasing the timeout on thefirst in case its too short and hitting the second? Thanks for the reply, but I don't belive that is the order because the main Freeradius server is local on the s...

reverged

Do you have input rules? Why allow any access to the router from the various lans? With few exceptions, I would block all but your management subnet or management port access to the router on the lan side. add chain=input action=accept connection-state=established add chain=input action=accept conne...

reverged

Each tile can independently run a full operating system, or a group of tiles can run a multi-processing OS, like SMP Linux. That is nice. I wonder if ROS will allow running a foreign OS on a tile? I didn't see Flash/RAM specs. I hope this doesn't go down the road of the RB100AH and get crippled by ...

reverged

If the access point supports a separate management vlan, use that.

Otherwise:

http://wiki.mikrotik.com/wiki/Manual:IP ... P_Bindings

reverged

Basically I want each subnet to be able to get to the internet and to anything else on their /24 subnet, but not talk to any other /24 subnet. Then the simplest would be to permit access to the internet and nothing else: add chain=forward action=accept connection-state=established add chain=forward...

reverged

Anyone found a solution to the Vista dhcp problem? I have been using vlan's with hotspot for some time and never had a problem until recently. I assign equal horizon to each bridge port to isolate traffic. The same problem is occurring, Vista clients request a lease with the Broadcast flag set and n...

reverged

Ok, then how do I get users to my status page other than typing in my hotspot address? Any type of redirecting available?

Put this in your login form:

<input type="hidden" name="dst" value="url of status page goes here" />

reverged

bump. I would really like to get this to work....

reverged

I use freeradius and MT hotspot. I have per user rate limits using Mikrotik-Rate-Limit. Turn radius logging on and verify that the rate limit makes it to your ROS device. You should see the authentication request and reply in the log. The radius attributes sent from the server will all be shown in t...

reverged

This does work quite well. I use it quite a bit. I have run into one problem with DHCP and broadcast storm detection on a switch. I run DHCP on the bridge interface and yes, I have the horizons all set the same, etc. DHCP clients that have the broadcast flag set (Vista, etc) will cause the MT to rep...

reverged

I'm trying to set up ssh keys in order to ssh from RB to an OpenWRT box without needing a password. This wiki article was consulted: http://wiki.mikrotik.com/wiki/Manual:System/SSH_client#Log-in_using_certificate I have created the key pairs on a Linux box and copied the public key to the OpenWRT ma...

reverged

Where are you located?

reverged

I was wondering if Winbox MAC based configuration will be available for SWos in the future? Having to set my pc to 192.168.x.x to get into the web interface is a bit cliche. One of Mikrotik's strengths is its lightning fast, always able to connect Winbox. Asked and answered: http://forum.mikrotik.c...

reverged

Does anyone else have this problem or its only me? It's not only you! The problem is improved, but not completely fixed with 1.6 The problem seems to occur if there is a high latency between the browser and the switch. i.e. I am on the US west coast and I have trouble managing switches on the east ...

reverged

what configuration you have? All problems about MR on PPC routers was resolved by adjusting configuration Can you elaborate on this? What specific configuration changes resolve MR issues on PPC routers? Is there a wiki of sorts? I had given up on Metarouter until mipsbe becomes stable. But if ppc i...

reverged

Does anyone know how many port CPU interfaces are in the RB1100AH and how they are wired? I know that ports 1-5 and 6-10 are in switch groups, so that implies a single interface from each group to the CPU, but what about ports 11-13? Are there 5 CPU interfaces such that traffic from switched ports {...

reverged

now i used the usb cable cd provided with it but i get this in my device manager so the com or port is not installed so that i can dial in to the router board Maybe a stupid question, but did you install the driver before plugging the device into the usb port? If so, unplug the usb, uninstall the d...

reverged

my question was to get the communication between the router and pc i need to have console cable connected to the routers console port.. then usb connverter connected to pc's usb port then one of the routers lan port connected to the laptops lan port. right? Yes. then do i connect to the router via ...

reverged

netinstall in the wiki

Once you have the serial console communication working, follow the steps in netinstall.

reverged

The RB console needs to connect to a serial port, not an ethernet port. The confusion is that Cisco uses an 8P8C (aka RJ45) connector for the serial port on some of their products. This is usually done as a cable with DB9 on one end and RJ45 on the other. Or as a DB9 to RJ45 converter and a rollover...

reverged

It works for me using version 1.6 w Chrome and FF

reverged

Not sure this is related, but I have seen some problems using some power supplies with some MT products. In particular, I have a box full of 12V supplies from Leader Electronics. 12V 1A. I use these for flashing and config. A bunch of them on a power strip waiting for a device. I have never had a pr...

reverged

I find that scripting is sensitive to the placement of do and else. It seems best to put them on the same line as the "if" and closing "}" :if ([/ping 8.8.8.8 count=5]=0) do={ :log info ("WatchDog connection Failed"); /interface ppp-client disable 3g-intertelecom-1; :de...

reverged

See the long, tiresome thread in here about OpenWRT metarouter on RB450: THREAD It is unstable. Reboots, lockups, etc. MT cannot narrow it down and it remains a mystery. I have never had a problem getting the image built, installed and running, it just won't run for long and the host hangs/reboots. ...

reverged

There are several threads about this in the SWOS section.

I think the switch chip in the 250 (or some combination of the chip and SWOS) only supports tagged vlans. It cannot tag some and not others.

You could simply add another vlan for the 192.168.0.0/24 subnet on E5.

reverged

Bugs/Issues: It is unclear what "LINK Enabled" does. Unchecking "Enabled" still shows a link even with reboot Is this a forwarding function and not an actual link function? If so, perhaps move it to Forwarding tab. Sort vlan appears to sort by string value, not integer value; i....

reverged

I ran into this problem today. I have a Lenovo T400 laptop and I cannot get NetInstall to use Gb, or 100M. I get no link at Gb and the file transfer with 100M is PAINFULLY slow. Like it would take more than 1 hour. I had to set the laptop to 10Mb full duplex to get the file to transfer at a decent s...

reverged

Can MT at least publish the formulas/assumptions used to generate the output? Things like cable loss values, any adjustments for connections, etc. I am seeing about 2~3dB difference between the MT site and my calculations. (my results are worse, which is good). It could be rounding somewhere. Also, ...

reverged

What he meant where LE architectures in general, not necessarily MIPS-LE, I guess.

Yes

le, is x86 and mipsle, both of the does not have MetaROUTER.

Interesting. I did not know le, and in particular x86, doesn't support metarouter! This saves me a hard lesson.

reverged

I can only repeat and clarify what I said in earlier posts: The whole MIPSBE series should be considered unusable in combination with Metarouter. Especially with the information available from MT and the fact that they aren't capable of fixing this problem in such a long time. @MT: This is not inte...

reverged

Does anyone know if this problem has been seen/reported on RB750GL?

I have, yet again, a useful purpose for a metarouter.

reverged

I'm newbie when it comes to VLAN's and tagging. I know this should be easy, but I've worked on it for days.... We're needing to take two seperate, untagged ethernet networks, combine into single bridge (Trango Apex 375mbps), and then seperate back out on the other end. I'm working toward this layou...

reverged

My Code $API->write('/ping',false); $API->write("=src-address=192.168.1.1"); $API->write("=address=192.168.1.2"); $API->write('=count=3'); $API->write('=interval=2'); $API->write('=ret='); its right? and don't know How to use src-address You need a 'false' as the second paramete...

reverged

This is disturbing as I was hoping only the RB450G had this problem

See this exhausting thread in the virtualization section...http://forum.mikrotik.com/viewtopic.php?f=15&t=35800

reverged

My phone is Android and I run a lot of hotspots, so I have used MT hotspot quite a bit with Android. My experience is that when the browser is first launched, Android pretends it is loading a page when it isn't - it is taking it from cache - especially if http://www.google.com is the homepage. If yo...

reverged

$API->write('/ip/arp/edit', false); $API->write("=.id=*2",false); $API->write('=value-name=mac-address',true); $API->write('=mac-address=13.13.13.13',true); '/ip/arp/edit' is not a valid api command; the mac-address above is not a mac address; the forth line never applies anyway as the th...

reverged

this script is ran on boot-up, so if there is no such interface ether1 you get no result. addition of the delay ensures that router is up and everything is initialized (drivers loaded) when you start to add configuration. That is what I suspected was wrong. The delay doesn't solve the problem compl...

reverged

Try removing "out-interface=bridge"

reverged

i think I found a work around. I found that this works: :delay 20s /ip address add address= ...... If I quickly Winbox by mac into the device after flashfig, there is no IP address and after about 10s the IP appears. I'm not sure if 20 seconds delay is required, it's just what I tried. It is the sam...

reverged

I have tried using flashfig with both an OmniTik and SXT both running 5.6. In both cases, I see the device in the list (SXT is reported as "Groove") In both cases flashfig reports "flashfigged" In both cases the cute song plays over and over and over....... In both cases the conf...

reverged

I have lots of RB250's in the field at < version 1.6 Upgrading is a pain as some of them need to be power cycled as I can't get the reboot button to do much of anything. Taking matters into my own hands, today, I tried: Upgrade the switch to 1.6 using the web interface and then: Open [url]http://<ip...

reverged

I have noticed a peculiarity with MT Discovery Protocol and v1.6. Perhaps the problem exists in earlier versions as well. I have not and won't investigate that. The MT discovery packets sent by the RB250GS are tagged with vlan 1. Which is strange, because I do not have vlan 1 in the vlan table. Is i...

reverged

tool e-mail send to=myhotspot@miodominio.it subject=[/system identity get name] body=[/ip hotsp ot active get 0] That will only get the first active entry, not all active entries. "0" means item 0 in the list. There are many ways to do this, but ....body=[/ip hotspot active print] Will qu...

reverged

Try this: # given ip/mask will produce the network address # tested on ROS v5.5 :local ip 10.10.10.200/25 :local mask 255.255.255.255 :local myip [:pick $ip 0 [:find $ip "/" -1 ] ] :local mymask [:pick $ip ( [:find $ip "/"] + 1) [:len $ip] ] :local bits (32 - $mymask) :set mymask...

reverged

@fewi: I know that acceptance factor all too well..... So the plot thickens. I had the tech connect locally and he couldn't load the hosts page. SyntaxError. He was on the same lan, so latency was not an issue. I then had him reboot using the button on the system page and the page refreshed and the ...

reverged

Wasn't that a problem back with 1.4, and an upgrade to 1.5 (you have to manually power cycle after the upload since the reboot button is useless) fixes that? I just tried "Reboot" on a switch running 1.5. When "Reboot" is pressed, there is a few seconds delay, then the page atte...

reverged

Rebooting the switch doesn't appear to reboot the switch. The uptime stays the same.

reverged

I always put the url inside quotes and escape the '?' i.e. '\?' even in scripts. Your real problem will be that fetch doesn't support https, afaik. http, ftp and tftp only. > /tool fetch url=https://www.yahoo.com failure: invalid URL protocol It's a major feature hole. One way to get around this is ...

reverged

Can you post the html? API uses newlines as a delimiter, so at a minimum, you will need to strip newlines from the html. There may be other common html characters that need escaping as well. I should have written: "My version of the php api class uses newlines as a delimiter....I changed that....

reverged

I tried the same and found that it works if you use .id rather than numbers. So: // get all the secrets $API->write('/ppp/secret/getall', false); //this is optional and will only return the .id's and names; you can add/remove properties $API->write('=.proplist=.id,name', false); // remove the 'false...

reverged

I, for one, never said the specs of the capacitor where to blame. I simply pointed out that not only did the manufacturer not change, the part number and series did change. Perhaps that was to make it easy to identify new vs. old. So now, many months and posts later, we have what appears to be an ac...

reverged

congo, reverged - sell the one cisco and for the money, buy a whole armada of new mikrotik devices, and expand your business. I have this vision of 8 RB250GS devices chasing a 24 port Cisco across the open seas...... I don't buy Cisco, and the Cisco switches I do manage won't sell for an armada's w...

reverged

Can you post the html?

API uses newlines as a delimiter, so at a minimum, you will need to strip newlines from the html.

There may be other common html characters that need escaping as well.

reverged

the problem was not with capacitors in general, but with a specific bad batch. we have changed the supplier, and there is no more problem. they look very similar to the previous ones, I think only the color and manufacturer info is different I think it is important to present accurate and complete ...

reverged

Would just like to throw in my 2 cents here, we would swap out all of our cisco switches if there was a 24 port mikrotik solution in a heart beat. So please do :-) Just for curiosity: why whould you do that? that's a weird question to be posted on a mikrotik forum. just like most people here, omall...

reverged

Without major changes this will not work and might never work. Which version of open-mesh firmware are you using? Is it ROBIN? What is your hardware? ROBIN uses olsr and each node is essentially its own router with dhcp, dns, captive portal, etc. There can be lots of nat layers. the mesh is formed u...

reverged

.... [23, 146] =status=can not connect >>> .....

This implies bw-test could not connect from the client to the server.

reverged

ip firewall filter set action=drop numbers=2 from php I think script is: $API->write('/ip/firewall/filter/set', false); $API->write("=action=drop",false); $API->write("=numbers=2"); "numbers" don't work in api, afaict. You have to find the ".id" of the filter...

reverged

<?php require('mikrotik.php'); $API = new routeros_api(); $API->debug = true; if ($API->connect('123.123.123.123', 'admin', 'root')) { $API->write('ip firewall filter add chain=input src-address=13.13.13.13 action=accept disabled=yes'); $READ = $API->read(false); $ARRAY = $API->parse_response($READ...

reverged

radtest shows the Framed-Route attribute being sent successfully from FreeRadius. Framed-route is sent in the access-accept (auth response) packet. Is that where you see it being sent with radtest? http://freeradius.org/rfc/rfc2865.html#Framed-Route Your log post is the acct packet, which doesn't u...

reverged

this works for me on 5.5 test build, should work on any 5.x version. getall was changed to alias of print some time when 4.x reigned. It does work! Of course, it is right there in the release notes.... As for the problem above, it appears there is a leading "/" missing: $API->write('syste...

reverged

Do you have any for my other question about allowing all trafic through the hotspot and not stopping pings or remote desktop for users like it is doing right now? I'm not sure what you are asking for. You want some users to bypass the hotspot? In that case, put their mac address in the hotspot bypa...

reverged

/system scheduler add disabled=no interval=20s name=schedule1 on-event=Limit_ChangeBand_to5 policy=\ ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api start-time=startup The on-event needs to be a valid ros command or commands like: log info hello /system script run "Limit_...

reverged

.....when i try to add hotspot 3 starting at 96- 159 with my default gateway of 95 it will take my default gateway automaticaly and make it 65 .... Hotspot 3 looks like a invalid subnet. In a /27, .96 is a network address with .97~.126 In a /26, .96 falls in .64 (.65~.126), so perhaps the reason th...

reverged

Nice job! And useful as well.

I just tried to use this on v5.4 and the user credit-xx functions are gone. ?

reverged

Change 'print' to 'getall'. 'print' doesn't work in API; AFIAK.

$API->write('/system/script/getall',false);

(I think that is the first time I have used AFAIK, IMHO, LOL.....)

reverged

In api you have to use queries, here are the examples: http://wiki.mikrotik.com/wiki/API#Queries this job can do . :put [/queue tree find name="wan-1"] :put [/queue tree find name="wan-2"] but can't to do this . :put [/queue tree find name~"wan"] how can i do ? It's no...

reverged

In the script check the run-count of the scheduler and then disable it. Something like the untested example below. :local cnt [/system scheduler get [/system scheduler find name=<scheduler-name>] run-count] :if(cnt>x) do={/system scheduler disable [/system scheduler find name=<scheduler-name>]} I t...

reverged

jsocket may do what you want, I've never tested it, but it looks interesting. It was released as beta in 2008 but doesn't appear to have been updated since then. Then there is jquery-websockets Why not just use webfig on version 5.4? I'd be careful using any sort of client side script. Anyone that c...

reverged

another million.

And add to the wish list:

variables that can hold more than 4096 characters.
output of fetch into a variable

Is it better to quote oneself or edit?

Anyway, I left off my list: https fetch

I usually setup an openwrt metarouter and use wget for this.

reverged

print doesn't work in api, you have to use getall:

"/system/resource/getall"
"=.proplist=uptime"

reverged

In the script check the run-count of the scheduler and then disable it. Something like the untested example below. :local cnt [/system scheduler get [/system scheduler find name=<scheduler-name>] run-count] :if(cnt>x) do={/system scheduler disable [/system scheduler find name=<scheduler-name>]}

reverged

Thanks for the reply, I need something like this : $API->write('/ip/firewall/nat', false); $API->write('=remove=where', false); $API->write('=src-address=222.222.222.222'); But I have no idea if its correct, would you please help me ? Regards. In order to remove an item, you have to retrieve it's ....

reverged

What version are you running?

I have remote syslog working for userman.
The only difference I see is I have the ip and port separate:

/system logging action
set ....   remote=x.x.x.x remote-port=514 ...

reverged

This is easy enough to do.
Is the src-address unique to a single nat or multiple entries?

if possible, post the output of:

/ip firewall nat print

reverged

I resolved my problem with this code: <?php require('routeros_api.class.php'); $API = new routeros_api(); $API->debug = true; if ($API->connect('111.111.111.111', 'login', 'password')) { $API->write('/system/script/getall',false); $API->write('=.proplist=name',false); $API->write('?name=miapi'); $A...

reverged

another million.

And add to the wish list:

variables that can hold more than 4096 characters.
output of fetch into a variable

reverged

$API->write('/system/script/run'); $API->write('=.id=miapi'); You are trying the run the script using its .id, but passing the script name as the parameter. run: :put [/system script find name=miapi] from the terminal and use the id returned in your api write. It should be something like *x More wo...

reverged

It looks like Sponge Bob face down....and a bike chain bracelet. I can't spot the roach.

The front seat of a car seems like a good place to disable electronics. No chance of static build-up.

Perhaps hide the mac address so the RMA is not refused!?!

reverged

@fewi: I've always wondered if horizon is more efficient than filters. Or is it essentially the same just much easier to configure?

reverged

Is there a way to delete unnecessary skin?

Cheers

skins are stored as files in /skins with the <skin name>.json

Just delete the file.

You can also download the file, edit it using a text editor and upload it back to the router.
This makes creating skins and cloning RB's easier.

reverged

I upgraded a 250 to 1.5 earlier today and I am seeing strange web interface problems. I tried to reboot the switch earlier today using the reboot button and it did not work. The uptime did not change. I have the switch connected to a web power switch and if I cycle power, the uptime resets but the r...

reverged

better use aut.rsc feature - using ftp you can upload file called <something>.auto.rsc script file will be automatically executed and log file for that will be saved on the router. It might be worth noting that the script does not execute immediately upon upload. It executes when the ftp connection...

reverged

@Feklar: When you bridge several VLANs together (especially when they share the same physical port) you need to set up a filter to block them from talking to each other. Without it things break down very very quickly and stop working altogether. Can you explain why things "break down very very ...

reverged

I made it through some of that document based on some fading German I picked up in Vienna -- then had to Google Translate it.... I'd suggest running Torch on the 750 port 2 and verify the correct vlan tags are being assigned by the Dlink. Click the vlan tick box and set the timeout to something reas...

reverged

@Pada: Are you running stock firmware on the Dlink or Open/DD WRT? I looked at the Dlink site and they have an emulator running so you can play with the device web config: http://www.support.dlink.com/emulators/dwl2100ap/210/HomeWizard.html I don't see a way to add vlan's nor a second ssid. This net...

reverged

Since all the VLANs are set up on port 5, how do I create another trunk port?

The 2 trunks I referred to would be setup on the switch.
1 connects to the 750 port 5 (as it does now), the other travels to building 2.

reverged

other ports are working fine, anyway... they replace me with a new one.. coz i need to use all those port .Did you request for replacement ?

I did not. I needed to do the install and could not wait for a spare.

Also, if I went through RMA, it would take forever.......

reverged

/interface bridge port add bridge="bridge1" disabled=no edge=auto external-fdb=auto horizon=\ none interface=lan1 path-cost=10 point-to-point=auto priority=0x80 add bridge="bridge1" disabled=no edge=auto external-fdb=auto horizon=\ none interface=vlan1 path-cost=10 point-to-poin...

reverged

I'm glad it worked out and thanks for the feedback. Sometimes I answer posts here and never hear back. I wonder "did it work or go horribly wrong?" If you replace the switch in building 1, then setup the trunk on the switch. Any traffic that goes through the switch will do so at wire speed...

reverged

This does work, I have done this many times with ROS. To start, you cannot put vlans on ports 2-4 and then bridge those vlans with port 5, expecting port 5 to be a trunk. ROS is not a switch (although there is a switch chip it is outside of ROS), and vlan tags are removed on ingress. If you want por...

reverged

You posted such a nice diagram I feel compelled to help! It is unclear if the devices in ports 2-4 are vlan aware and what needs to talk to what. Are the devices in 2-4 untagged and you simply want them to be tagged as vlan 20,30,40 when they cross the trunk? Or ports 2-4 need vlans 20-40 and you th...

reverged

Metarouter has no access to hardware i/o, only virtual eth ports -- and for good reasons. And you are not likely to get a hardware/memory/io address map from MT. RB is not an open architecture, otherwise we'd have all sorts of OS options. OpenWRT has limited support for RB and even then, getting a d...

reverged

Still missing switch config, port config, port vlan config, etc. I'm not sure I understand your question. The RB450 has virtually no switch config. There are no port vlan's. There are no rules, etc. It doesn't support those features of ROS. /interface ethernet switch set switch1 mirror-source=none ...

reverged

I have seen an RB450G with a single bad port.

I didn't need all 5, so I used it anyway.

In my case it was port 3.

Your laptop works fine on the other 4 ports?

reverged

I have tried: 4.11, 4.17, 5.1, 5.2. So I'm pretty sure this is expected/normal behavior. I'm simply looking for confirmation and perhaps a note in the wiki about it. I'd also like to know why it doesn't work. If the switch chip were incapable of passing tagged packets then vlans on the cpu would not...

reverged

I have configured an RB450 with ports 4 and 5 as slaves of port 3. I have used this config many times with vlans attached to port 3. Devices in ports 3,4,5 can therefore share the vlan id. It works fine. Recently I have a need to have the same setup AND allow the devices in ports 4 and 5 to communic...

reverged

Are you getting the message "no more sessions are allowed for the user <username>"? If so, it means that the shared-users setting on the hotspot is too small. Is shared-users on the hotspot setup the same as the userman? The default on the hotspot is 1. Set this to match the userman or hid...

reverged

I am using um on 5.1 with auth.net and hotspot. Is it possible to modify the page that is presented after completion of the transaction on auth.net? The page that the browser receives is not even a proper page. It is html, but only a fragment that would be better suited as an ajax response. It consi...

reverged

I need some help with this one. I have userman on 5.1 w/hotspot and auth.net working. It took some javascript and cookies to get everything the way I want it, and there are some unrelated issues, but that's OK. The big problem I'm having is the return url. I simply want to redirect user to the hotsp...

reverged

I'm running 5.1 and the folder is there as /umfiles

With UM Test on 4.xx the folder might be named something like "Test User Manager"

reverged

In the first example, port 4 is set to always strip on egress (exit) which means no vlan tags leave that port. Therefore, it can never be seen as tagged with vlan 10 when it reaches the Macbook. You might see the 750 dhcp leases showing "offered" for the Macbook. The 750 might be getting a...

reverged

Ditto on that. I sent an RB450 back under warranty on October 22, 2010. Not for capacitors, it was just plain dead out of the box/bag. It is exactly 6 months later and it has not come back. That is quite the deterrent. This return was more or less a test case of what the RMA process is like. Not a g...

reverged

v5.2 will be released tomorrow. Sorry about that webfig problem.

I keep checking back and this post still says "tomorrow".

Is the unit of measure an Earth day or Venus day?

reverged

Is this unique to the linux box? I had the same problem with hotspot and um. You cannot access the um pages from behind the hotspot using the default ports for http and https. Odd, but true. So, what I did was this: http://forum.mikrotik.com/viewtopic.php?f=13&t=50279 Or, change /ip services por...

reverged

I am successfully processing payments with 5.1 and Authorize.net, but there are a few quirks: I have 1 customer, to which the payments are associated. When I log in as that customer, I cannot see the payments. I see a screen with the correct number of lines, but only check boxes, no actual payment d...

reverged

Do the counters increment on that firewall rule? Is your version of php compiled with sockets enabled? I have used this and had no trouble. If the firewall counters increment then the server has sockets enabled. There is also API Studio that I have used. This will tell you if the problem is with the...

reverged

RE: webfig problem

I'm not sure if this is the same error, but this breaks webfig in FF. It remains stuck at "loading".....

From firebug:

missing ; before statement
http://<ip>/webfig/engine.js
Line 1

Of course, Line 1 is the entire file....

reverged

Do you have API enabled under /ip services ? It is disabled by default.

Do you have a firewall rule blocking input on tcp 8728?

reverged

I am using userman for the first time. Version 5.1 I have a custom hotspot login page that works fine and a link on that page to the userman signup page: https://domain/user/signup/publicID The signup page works fine from the WAN, but not from the hotspot. So I searched and read and read and read an...

reverged

Serial ports cannot be used for packet forwarding unless you have modems connected to serial ports. @MT What about ppp using a null modem cable? It works. @xezen: Is the goal to have a remotely controlled serial port or a remote serial connected network device? If the former, then there is an easie...

reverged

if i have metarouter with uptime of more than 2 weeks, and only reason why it is not higher is version updates. Then why not? I believe that is the problem - most of us could not get 2 weeks of uptime with MR running. I too gave up on MR some time ago. I ended up using a $50 Open-Mesh router reflas...

reverged

Yes, just add a 2nd radius entry.
The timeout is important and in my experience it is not very accurate.
I use 2~5 seconds, not the default 300mS.

reverged

Rather than bridge the physical interfaces, bridge the vlans. Your trunks have vlans 99 and 100 The rb interfaces should have those vlans added. Put new vlans 199 and 200 on the eoip interface. Bridge1 has interfaces vlan 99 and vlan 199 Bridge2 has interfaces vlan 100 and 200 Packets ingressing vla...

reverged

Schematic?

reverged

I think you can do this yourself just by reading this forum, the wiki and about 1 hour of experimentation. Besides, consultants (like me) are evil.... Some questions: All traffic from port 2, 3, 4 and 5 should be routed out to my ISP on port 1. All packets must keep their VLAN tags (because the ONT ...

reverged

OK, this might be a dumb question, Mikrotik, but why not post the source code, then anyone who wants it for Linux can compile it for their individual Linux package? If you are already giving it away, why not let us compile it for ourselves? Thanks! "He spoke the unspeakable!" I second thi...

reverged

Have you bridged ports 2-5? If not, do that and assign the lan ip 192.168.168.1/24 to the bridge, not port 2. All 4 ports are now bridged and the router has 192.168.168.1/24. 192.168.168.0/24 is now reachable on all 4 ports, assuming firewall settings are correct. You can restrict bridge traffic usi...

reverged

Be sure to upgrade to the latest version.
I couldn't get anything to work until v1.2

With 1.2 it will work as you desire.

reverged

Another 450 dead of capacitor attack today. I really, really, really wish MT would publish a serial number or mac list of affected production so I/we can be proactive about fixing this. This is ridiculous. MT cannot grow up until it figures out how to respond to issues like this. You cannot simply h...

Search found 270 matches