MikroTik

spookman

Excellent Sob, thanks for your help

spookman

So I have to put my hand up and apologize, and just say if I had included the complete details of my installation we might have fixed this much earlier. Sob and Kujo, I have to say thanks for your patience and effort in assisting, So to the real problem.... Well I forgot to mention that the link bet...

spookman

Thanks Sob, I am sure I tested ping the /29 addresses while running torch on the clan-290, but you have me questioning my self, so I give it a go again. With regards to the masquerading I am referring to our bound traffic and so currently if I masquerade the vlan-290 interface out bound internet tra...

spookman

If I torch the connection I am not seeing the traffic. As I said, I can disable first IP the the 2nd IP responds, if can re-enable the 1st ip and both will remain responding, after about 15mins, the 2nd ip stops responding.

spookman

Ok I have changed my setup, to consolidate the 2 Mikrotik's into 1 Mikrotik please see design below aswell as the config setup, I am still having an issue where only one of the ip's from the block 19.1.16.152/29 is accessible on the internet at a time. 2nd issue now is that all connection from inter...

spookman

Thanks Kujo,

That's not the issue, traffic flows into and out of the network, the problem is the public ip block 19.1.16.152/29 , only 19.1.16.153 is accessable from the internet, rest don't respond to ICMP. or anything

spookman

So I have removed RB1 from the infrastructure and setup RB2 to act as RB1 i.e. moved the vlan290 ont RB2, Still having the same issue, can access first IP but not the rest. Do I need to instruct the upstream ISP that I am using the entire /29 range, or is there something I need to setup like RIP or ...

spookman

Hi Sob,

To clarify, from RB1 I can ping the public IP's, but from the internet I can only ping the first one, the other 4 are not contactable.
I can see in the arp table all 5 ip's and their MAc's which is the same for all as expected, but only 1 of the IP's is ever accessible from the internet.

spookman

EDIT Design UPDATE please see post #8 Hi Guys hoping someone can assist I am having a problem in getting multiple IP's working on my mikrotik RB2, if a disable all of the 19.1.16.154-158/29 and cycle them 1 at time enabled and disabled only ever having 1 enabled at a time till I have done them all,...

spookman

Hi Guys, I hope someone can help, I have a situation were we are using a non-mikrotik AP with DHCP Server and we are looking to extend our LAN wirelessly by connecting a Mikrotik RB751G-2HnD, to the AP, we would like the mikrotik to the AP and relay the DHCP. I can get it to working routed, but then...

spookman

Quick question are these RP-SMA 5dbi antenna ?

spookman

Hey Guys, Here is the setup, I have 2 media players 1 connected physically and 1 connected via wireless and both connect to the RB71G-2Hn, The network storage device is connected directly to the router, now if I try and stream a 1080p multimedia file the physically connected works 100% but the wirel...

spookman

Hi, I did this without success, I have since managed to put 5.13 on with netinstall. However the netinstall I hod to try atleast 20-30times, before it took, each time it failed the error was related to trying to write to teh nand. I susepect I have a buggy nand and thus will be taking the router bac...

spookman

eventually afer many attemps I have manage to get 5.13 on the RB1200, and so far seems stable

spookman

Hey Guys, I am trying to re flash my RB1200 using netinstall 5.11 due to a corrupted nand, got to the point were the RB1200 PXE boots and get's an IP from the Netinstall, but I don't get the RB1200 showing up in netinstall. I have network cable "straight" connected directly from teh PC to ...

spookman

We have also notice that in the past when is was working that rebooting the router would result in the router going offline and not booting again, disconnecting and reconnecting the power would power it on again and start the boot cycle.

spookman

Hi Guys, I did an upgrade last night to ROS 5.12 on my RB1200, this went fine and the router return operational again. I then notice that there was a bootloader upgrade from 2.37 to 2.38, so I issued the /system routerboard upgrade After which the the router fails to boot, I have not had chance to c...

spookman

Hi Guys, I have currently a working setup of a 3 WAN PCC on a RB1200, everything has been running well for a while but recently we have noticed that due to growth on the network all our VOIP services are experiencing problems. I what to now implement QOS for the VOIP clients, giving them priority ov...

spookman

Hi fewi, here is my config /ip address add address=10.10.0.1/24 disabled=no interface=LAN network=10.10.0.0 add address=41.x.x.114/29 disabled=no interface=WAN1 network=41.x.x.112 add address=41.x.x.2/29 disabled=no interface=WAN2 network=41.x.x.0 add address=41.x.x.100/29 disabled=no interface=WAN3...

spookman

have exaclty the same issue,
my RB1200 is setup with PPC and std firewall rules to act as a NAT.

spookman

Ok Fewi, Thanks for putting me on the right track, I have now fixedthe issue, basically I was marking all traffic in the mangle table with a routing mark. and the only routes I had was routes with routing marks, I now looks like the router it's self doesn't do through the mangle table and thus not m...

spookman

Ok I think I have found sometinhg, the rotuer it's self has no default route, so if I add a route of 0.0.0.0/0 to WAN1 It all works, but how do I add it so that it so will failover with a failed route. Mangle rules only seem to apply to traffic not originating from the router is slef, like our dns t...

spookman

The Recirsive routes are for failover, the router is configured with PCC, we have 3 WAN (ISP) connections and then the LAN. All clients on the LAN side can resolved DNS using external DNS Servers, just not when using the router as a DNS server. All other aspects of the newtork and connectivity are f...

spookman

:put [:resolve www.google.com] failure: dns server failure /ip address print detail 0 address=10.10.0.1/24 network=10.10.0.0 interface=Local actual-interface=Local 1 address=41.x.x.114/29 network=41.x.x.112 interface=WAN1 actual-interface=WAN1 2 address=41.x.x.115/29 network=41.x.x.112 interface=WA...

spookman

BUMP..... Any more help pls guys, I'm stuck here

spookman

Hey Fewi, I tried that but still can't get it to work, here are all my rules /ip firewall filter add action=accept chain=input connection-state=established disabled=no add action=accept chain=input connection-state=related disabled=no add action=drop chain=input connection-state=invalid disabled=no ...

spookman

Hi Guys, I am trying to get DNS Cache with remote requests allowed working but so far no luck, I have the RB750 setup with PCC and some forwarding rules, but I can seem to get it working these are the only relvant snipets, the rest of my mangle, firewall and nat is standard stuff. /ip firewall filte...

spookman

Anybody ?

spookman

Thanks for the response but this didn't work, PCC is working and if users have thier DNS addresses setup to query and external DNS server it's fine that problem I have is we have over 100 clients and some of them have thier PC's DNS set to the router. which at present is not resolving DNS, if I from...

spookman

Hi Guys, I am trying to get DNS Cache with remote requests allowed working but so far no luck, I have the RB750 setup with PCC and some forwarding rules, but I can seem to get it working /ip firewall filter add action=accept chain=input comment="Std established" connection-state=establishe...

spookman

More issue,

hitting the webpages on 41.x.x.2 which points to 10.10.0.250 works fine,
but hitting 41.x.x.3 or 41.x.x.2 is not dstnat to the respective hosts.

Also how do I enable icmp on the external interfaces ?

spookman

Almost there just a few issues though, the hairpin nat is still not working correctly. I have had to add rules 0-3 at the top of nat to ensure that all internal mail/web traffic goes to the servers. /ip firewall address-list add address=10.10.0.232 disabled=no list=admin_hosts add address=10.10.2.10...

spookman

Sweet thanks fewi,

I'll test it out tomorrow and let you know.... thanks again.

spookman

thanks fewi /ip firewall address-list add address=10.10.0.232 disabled=no list=admin_hosts add address=10.10.2.10 disabled=no list=admin_hosts add address=10.10.0.0/24 disabled=no list=Internal add address=10.10.1.0/24 disabled=no list=Internal add address=10.10.2.0/24 disabled=no list=Internal add ...

spookman

Jeeez China, I hope the people who employ you are paying you well....... skillz dude, the internal part is working now thanks. Still one issue, the Hairpin NAT is still not working for me. Where do i put this in the list ? add chain=srcnat dst-address=10.10.0.250 src-address=list=Internal out-interf...

spookman

Ok something is not right in my config. Just to add I currently only have WAN3 connected WAN1 and WAN2 are not plugged in till I get this working. /ip route add comment="MWeb" dst-address=196.2.63.110/32 gateway=41.x.x.113 scope=10 add comment="Yahoo" dst-address=67.195.160.76/32...

spookman

Cool got it for the FQDN, I am still having a troblem with the routing though. here is the network layout. I have an internet router "RB750" @ 10.10.0.1 Various servers ftp,mail,http @ 10.10.0.0/24 we have another router "RB433" and from there out to various high sites and towers...

spookman

I only ask as we have around 20 subnets, which meas I'll need to add a rule for each subnet. I can see the issue with the WAN, and it would be a real issue as the server has fail to ban installed, so if 1 person get's the auth wrong then every one would be lockout out. what if I add - in-interface=L...

spookman

Ok I have found this article http://wiki.mikrotik.com/wiki/Hairpin_NAT And implemented like this /ip firewall nat add chain=srcnat src-address=10.10.0.0/24 dst-address=10.10.0.250 protocol=tcp dst-port=20,21,25,8,110,143,443 out-interface=LAN action=masquerade Can I note just do this ? that way ever...

spookman

Hi Guys, I have setup PPC on my R750 and mostly it seems to be working fine, I have a few issues though. Previously on the the edimax router if I added a static route to one of our internal networks, all traffic originating internally to another internal network would be routed via the edimax to the...

spookman

I found an easier way and it works without scripts, incase you are intrested

http://wiki.mikrotik.com/wiki/Advanced_ ... _Scripting

spookman

Awesome thanks fewi.

spookman

Thanks fewi & forne, I have managed to get it working and now understand why it works and works well. Another Question maybe for fewi or anyone that can answer. If I have multiple addresses on an interface like this (WAN1) 10.0.1.2 10.0.1.3 10.0.1.4 connection-mark & routing-mark & PCC a...

spookman

Thanks for the help guys, I found a soulotion which does not even require a script

http://wiki.mikrotik.com/wiki/Advanced_ ... _Scripting

spookman

forne, I have had a look but I can't see how it disables the failed route in my situation I have /ip route add check-gateway=ping comment=TO_WAN1 disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.0.0.1 routing-mark=to_WAN1 scope=30 target-scope=10 add comment=WAN1_BACKUP disabled=no distance=1...

spookman

Cool then why when I do the same from within winbox and I specify an interface it works....? Ok here is my problem, I am trying to write a script that will fail over when a link goes down, but as I don't control the xDSL modems (ISP does) I can't use the check-gateway, becuase if the xDSL line goes ...

spookman

Question with my setup at teh top of the post,

why does this not work

/ping 196.25.1.1 routing-table=GW1 interface=ether1

but if I omitt the interface it does
/ping 196.25.1.1 routing-table=GW1

spookman

Awesome thanks guys,

I assume then that the routes we create we just add the relivant routing marks ?

spookman

Hi all I have a RG750 configured with PCC and conencted to 2 upstream providers, every thing works great except when one the providers goes down the fail over does not happen. This is because the check-gateway only allows to check the next gateway, as I am connect to ISP controlled DSL modem I can't...

spookman

Ok can you give me an example ?

spookman

Strange, because by all the post I have read it seems that there are people out there doing this but no one can tell us how,

The routers then become useless if they can do nothing more comlpex than load balancing when you want to host servers behind them/

spookman

Come guys give us a hand here.

It would now seem when I try connecting to the ether2 on 443 the dst-nat is happening but it looks like it's returning on the wrong GW, I can't be sure though

spookman

arthurmitch, I am trying to do exactly what you are, I have 2 connections 1 from MWEB and 1 VODACOM. can you help me. I need load balancing with fail over, port forwarding and also if I access the external IP from internal it needs to work. could you send me you mangle,nat,filter,routes tables. Also...

spookman

Did you ever figure this out ?

spookman

Come Guys help me out here WAN IP: (ISP xDSL modems, we can't make the RG750 pppoe as the modems/routers are locked down) ether1 : 10.0.0.100 ether2 : 10.0.1.100 LAN IP ether1 : 10.10.0.100 1. We also have an internal email and webserver on 10.10.0.250 which needs to be accessible over WAN1 and WAN2...

spookman

Hi all, I need some help

I have intsall a RB433 and a few NanoStations as CPE's

I have now install freeradius and have it authenticating and working.

What I need to know is how do I setup the CPE's and the Mikrotik now to use the freeradius for authentication. ?

Thanks

Search found 56 matches