Community discussions

MikroTik App

Search found 201 matches

by leon84
Tue Jul 18, 2023 4:04 pm
Forum: General
Topic: Restoring Wireguard key pairs
Replies: 2
Views: 713

Re: Restoring Wireguard key pairs

Ah Ok. Thanks a lot
by leon84
Tue Jul 18, 2023 1:55 pm
Forum: General
Topic: Restoring Wireguard key pairs
Replies: 2
Views: 713

Restoring Wireguard key pairs

Dear all, I'm using Wireguard to allow connections of remote user with a unique central vpn hub. I configured a wireguard interface on hub and addedd peers attached to this interface for each remote client. All run correctly. The question is: if central hub fails and I would to replace it in wich wa...
by leon84
Fri Jun 09, 2023 6:36 pm
Forum: General
Topic: [Router OS 7.6] OpenVPN Server issue
Replies: 25
Views: 4148

Re: [Router OS 7.6] OpenVPN Server issue

Another thing. Is it possible there is some isse with MTU parameteres? Remote client use lte interface connected to Internet and I read "Actual MTU" to 1480. The MTU of OpenVPN client interface is 1500. I think this is an error it must be lowest than 1500. Right? Then I configured it to 14...
by leon84
Thu Jun 08, 2023 12:52 pm
Forum: General
Topic: [Router OS 7.6] OpenVPN Server issue
Replies: 25
Views: 4148

Re: [Router OS 7.6] OpenVPN Server issue

But I'm thinking ... Could it be some issues related to ip connection tracking like various tcp timeout or "loose" Tcp tracking ...
Is it possible that if if is a bug (I read a lot of similar issues in this forum) mikrotik doesn't correct it?
by leon84
Fri Jun 02, 2023 1:10 pm
Forum: General
Topic: [Router OS 7.6] OpenVPN Server issue
Replies: 25
Views: 4148

Re: [Router OS 7.6] OpenVPN Server issue

I think this is a serious bug. The ovpn-out1 interface remain in "link estabilished" status also if in IP->FIREWALL->CONNECTIONS there isn't a connection to vpn server.
by leon84
Wed May 31, 2023 2:44 pm
Forum: General
Topic: OVPN idle timeout not working?
Replies: 1
Views: 2954

Re: OVPN idle timeout not working?

Sorry,
Have you solved this issue? I have the same problem.
by leon84
Wed May 31, 2023 1:18 pm
Forum: General
Topic: [Router OS 7.6] OpenVPN Server issue
Replies: 25
Views: 4148

Re: [Router OS 7.6] OpenVPN Server issue

Any suggestions to resolve this issue without scripts?
by leon84
Fri May 19, 2023 10:22 am
Forum: General
Topic: [Router OS 7.6] OpenVPN Server issue
Replies: 25
Views: 4148

Re: [Router OS 7.6] OpenVPN Server issue

Nothing to do. I attach you also other screnshot of user "amur". As you can see when the problem occour it doesn't retry to reconnect to openvpn server and the interface ovpn-out1 remain in NOT REGISTERED MODE (fig. 1) without ip address but if you see details it tell "link estabilish...
by leon84
Mon May 15, 2023 11:12 am
Forum: General
Topic: [Router OS 7.6] OpenVPN Server issue
Replies: 25
Views: 4148

Re: [Router OS 7.6] OpenVPN Server issue

Dear Mickey, I want update you about my issue. Please consider the user "amur" that running Mikrotik Router OS 7.8. I configured in it's PPP profile an "idle timeout" of 20 seconds. For the moment when a VPN goes down it reconnect correctly. For the moment I don't have the issue ...
by leon84
Wed May 10, 2023 4:55 pm
Forum: General
Topic: [Router OS 7.6] OpenVPN Server issue
Replies: 25
Views: 4148

Re: [Router OS 7.6] OpenVPN Server issue

Thanks a lot. Now I configured and idle-timeout at client side. I will monitor it and I will report you. I've tried the config in RouterOS 7.7 and you're right about the cipher part. It looks like MikroTik added some more options in the newer version (how nice). Running in TCP mode means that any NA...
by leon84
Wed May 10, 2023 12:39 pm
Forum: General
Topic: [Router OS 7.6] OpenVPN Server issue
Replies: 25
Views: 4148

Re: [Router OS 7.6] OpenVPN Server issue

Sorry the version RouterOS hosting openvpn server is RouterOS 7.7 and I use only openvpn tunnel in TCP mode. The chiper I think is ok because I have about 50 tunnel running correctly. I have checked your server configuration but there are a couple of things that I want to check. Your OpenVPN Server ...
by leon84
Thu May 04, 2023 2:58 pm
Forum: General
Topic: [Router OS 7.6] OpenVPN Server issue
Replies: 25
Views: 4148

Re: [Router OS 7.6] OpenVPN Server issue

[Client configuratio] /interface bridge add name=bridge1 /interface ethernet set [ find default-name=ether2 ] poe-out=off /interface list add name=WAN add name=LAN /interface lte apn set [ find default=yes ] ip-type=ipv4 use-network-apn=no add apn=ibox.tim.it ip-type=ipv4 /interface lte set [ find d...
by leon84
Tue May 02, 2023 12:10 pm
Forum: General
Topic: [Router OS 7.6] OpenVPN Server issue
Replies: 25
Views: 4148

Re: [Router OS 7.6] OpenVPN Server issue

UP. I updated to the last firmware both client and server and I have the same issue.
Have you any idea?
by leon84
Wed Dec 07, 2022 11:59 am
Forum: General
Topic: [Router OS 7.6] OpenVPN Server issue
Replies: 25
Views: 4148

Re: [Router OS 7.6] OpenVPN Server issue

Please, in which way Can I manage this issue? Thanks in advance...
by leon84
Tue Nov 29, 2022 10:33 am
Forum: General
Topic: [Router OS 7.6] OpenVPN Server issue
Replies: 25
Views: 4148

[Router OS 7.6] OpenVPN Server issue

Dear All, I have OpenVPN Server active on Router OS 7.6 and remote clients running OpenVpn Client on Mikrotik Routerboard. Remote Client all use LTE link to connect to OpenVPN Server. I configured server to accept only one connection for each client. All run correctly but I have an issue with one re...
by leon84
Fri Mar 06, 2020 3:50 pm
Forum: Wireless Networking
Topic: How to extend WiFi coverage of mikrotik hotspot + radius ?
Replies: 0
Views: 3200

How to extend WiFi coverage of mikrotik hotspot + radius ?

Dear all, I have this scenario: 1) A central switch and two mikrotik access point connected to it through ethernet that cover all my environment. Both access point are configured in ap-bridge mode with same SSID and both access point have a bridge that include ether interface (the interface that con...
by leon84
Tue Feb 11, 2020 12:09 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Dear sindy, now I have system running correctly. The only problem I have is that after an lte interface become up relative sstp interface has a delay of about 2 minutes .... I noticed that when and lte interface become up and I disable and renable manually relative sstp interface it reconnect immedi...
by leon84
Thu Jan 16, 2020 3:43 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

I understand your explanation and this is very strange. Now the only problem I have is that after an lte interface become up relative sstp interface has a delay of about 2 minutes ....
by leon84
Thu Jan 16, 2020 2:54 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

I'm doing a lot of test and now I can confirm you that without src-nat it run correctly :-). But with this configuration I noticed that: 1) when an lte interface goes down and then become up the relative sstp-out interface can use also 2 minute before restabilish connection. In the log I see sstp-ou...
by leon84
Thu Jan 16, 2020 1:50 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Dear sindy, I think I solved! :-) I disabled this src-nat rule in table table : ip firewall nat print Flags: X - disabled, I - invalid, D - dynamic 0 X chain=srcnat action=masquerade log=no log-prefix="" Probably when there was an interface shutdown it has using not correct ip address to s...
by leon84
Thu Jan 16, 2020 10:25 am
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

So are you really sure that the transport connections (TCP sessions to ports 443 and 444 of the SSTP server) do use the paths you expect them to use? Sure. Each tcp session use different lte interface. OK. Before I start more speculations, try to replace the two type=unreachable routes with routing...
by leon84
Wed Jan 15, 2020 10:14 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

So are you really sure that the transport connections (TCP sessions to ports 443 and 444 of the SSTP server) do use the paths you expect them to use? Use the tool sniffer again while both LTEs are up and check that packets to/from SSTP server's IP address and port 443 use LTE1 and packets to/from S...
by leon84
Wed Jan 15, 2020 1:06 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Dear sindy, another log file information: When I shutdown interface lte1, sstp-out1 goes down (and it is ok) but also sstp-out2 for connection timeout: 12:02:36 interface,info lte1 link down 12:02:36 system,info device changed by admin 12:02:36 dhcp,info dhcp-client on lte1 lost IP address xxx.xxx.x...
by leon84
Tue Jan 14, 2020 7:51 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

What exactly means "continuous ping"? Something like interval=50ms ? If you don't run this "continuous ping" while shutting down the LTE, how do you check the transparency of the second tunnel? Sorry it is strange: now I have problem also with continous ping. Then: I'm connected...
by leon84
Tue Jan 14, 2020 7:36 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

In this case, and supposing the outer policy routing (of the SSTP transport packets) is correct as well, the only thing left which comes to my mind is that the processing of the shutdown of the LTE takes so much CPU that the handling of the pings is affected. How many pings are lost on the tunnel w...
by leon84
Tue Jan 14, 2020 6:50 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

As the first step I would check, using /tool sniffer quick , that the ping requests and responses really take the routes you expect them to take when both LTEs and their associated SSTP tunnels are up. It may be that there is some hole in your policy routing and the requests or the responses actual...
by leon84
Tue Jan 14, 2020 10:20 am
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Dear sindy, I have a question for you. I implemented two separate VPN tunnel sstp-out1 and sstp-out2 with a central SSTP Server. sstp-out1 connect to tcp 443 and sstp-out2 connect to tcp 444 port of the same server. On the server I have a dnat from 444 to 443. In this way I can apply routing mark be...
by leon84
Wed Dec 18, 2019 3:48 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Dear all sorry for the latency. Then I implemented 2 sstp tunnel (sstp-out1 and sstp-out2) to the same sstp-server having an ip public and accepting connection on TCP port 443 ant TCP port 444. In this way I can apply routing mark in mangle table using different TCP port. In the next step I added ro...
by leon84
Thu Nov 14, 2019 11:35 am
Forum: General
Topic: DHCP SERVER and relay
Replies: 0
Views: 811

DHCP SERVER and relay

Dear all I have this situation: A central switch without vlan managment serving LAN 10.235.3.0/24. Two Mikrotik Access point A and B connected to this switch with their ether1 interfaces. Each access point has: 1) one bridge in which there are ehter1 and wlan1 interface. I need simply to extend 10.2...
by leon84
Tue Sep 10, 2019 2:21 pm
Forum: Wireless Networking
Topic: wAP LTE kit 2.4 Ghz WiFi slow
Replies: 16
Views: 3985

Re: wAP LTE kit 2.4 Ghz WiFi slow

Any news please?
by leon84
Thu Aug 22, 2019 3:07 pm
Forum: Wireless Networking
Topic: wAP LTE kit 2.4 Ghz WiFi slow
Replies: 16
Views: 3985

Re: wAP LTE kit 2.4 Ghz WiFi slow

What do you think about wireless configuration I exported?
by leon84
Wed Aug 21, 2019 11:58 am
Forum: Wireless Networking
Topic: wAP LTE kit 2.4 Ghz WiFi slow
Replies: 16
Views: 3985

Re: wAP LTE kit 2.4 Ghz WiFi slow

At least post your configuration ... we can't guess which bands or 802.11 protocols you have enabled. /interface wireless export This is the configuration: /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik add authentication-types=wpa2-psk eap-methods="...
by leon84
Wed Aug 21, 2019 10:45 am
Forum: Wireless Networking
Topic: wAP LTE kit 2.4 Ghz WiFi slow
Replies: 16
Views: 3985

Re: wAP LTE kit 2.4 Ghz WiFi slow

I also used Tamasoft Throughput Test but I have always poor performance. Is it possible to have an ufficial answer by Mikrotik?
by leon84
Tue Aug 20, 2019 10:07 am
Forum: Wireless Networking
Topic: wAP LTE kit 2.4 Ghz WiFi slow
Replies: 16
Views: 3985

Re: wAP LTE kit 2.4 Ghz WiFi slow

Try to change manually the channel and see the results.

Regards.
I tried different channels...It seems to be the same :-(
by leon84
Mon Aug 19, 2019 12:37 pm
Forum: Wireless Networking
Topic: wAP LTE kit 2.4 Ghz WiFi slow
Replies: 16
Views: 3985

Re: wAP LTE kit 2.4 Ghz WiFi slow

Where is the iperf3 result then? How about signal levels and other information? Please post all the details
Dear normis have you any idea?
by leon84
Mon Aug 12, 2019 11:03 am
Forum: Wireless Networking
Topic: wAP LTE kit 2.4 Ghz WiFi slow
Replies: 16
Views: 3985

Re: wAP LTE kit 2.4 Ghz WiFi slow

Where is the iperf3 result then? How about signal levels and other information? Please post all the details
Any idea? Thanks
by leon84
Fri Aug 09, 2019 1:06 pm
Forum: Wireless Networking
Topic: wAP LTE kit 2.4 Ghz WiFi slow
Replies: 16
Views: 3985

Re: wAP LTE kit 2.4 Ghz WiFi slow

Where is the iperf3 result then? How about signal levels and other information? Please post all the details The iperf3 result are worse. I attach you an image. I have only 2 devices attached. Pc on the left and iphone 7 on the right. The last window show the test running iperf3 client on iphone 7 a...
by leon84
Fri Aug 09, 2019 12:46 pm
Forum: Wireless Networking
Topic: wAP LTE kit 2.4 Ghz WiFi slow
Replies: 16
Views: 3985

Re: wAP LTE kit 2.4 Ghz WiFi slow

internet ---> wAP ---*wifi*----> PC Download something on the PC and see the speed! BTest is not a good measure, because it has to generate random data for the test, which overloads the CPU and affects the speed. No. I would to try bandwith between devices connected to the same access point. I trie...
by leon84
Fri Aug 09, 2019 12:39 pm
Forum: Wireless Networking
Topic: wAP LTE kit 2.4 Ghz WiFi slow
Replies: 16
Views: 3985

Re: wAP LTE kit 2.4 Ghz WiFi slow

btest to device is not a good way to test anything. did you try actual download speed through the link?
Sorry in which way?
by leon84
Fri Aug 09, 2019 12:27 pm
Forum: Wireless Networking
Topic: wAP LTE kit 2.4 Ghz WiFi slow
Replies: 16
Views: 3985

Re: wAP LTE kit 2.4 Ghz WiFi slow

This morning I used also Btest from my pc to wap and in the best situation I had about 26 Mbps. This is very strange.
by leon84
Thu Aug 08, 2019 5:15 pm
Forum: Wireless Networking
Topic: wAP LTE kit 2.4 Ghz WiFi slow
Replies: 16
Views: 3985

wAP LTE kit 2.4 Ghz WiFi slow

Hi to all, I'm trying to apply the best configuration to wireless interface of wAP LTE kit but I have always a slow wifi connection. I have only 2 devices attacched to my wAP and they are: my pc and iphone 7 Both support 802.11n protocol; I installed iperf to test bandwith from iphone 7(client) and ...
by leon84
Fri Aug 02, 2019 1:27 pm
Forum: Beginner Basics
Topic: Interface Data Quota
Replies: 38
Views: 34152

Re: Interface Data Quota

Very good this script but it has a problem, I think. If the router is powered off in the day of dayresetlimit the counter reset never happens. Is it right? Hello For LTE: # /$$ /$$$$$$$$/$$$$$$$$ /$$ /$$ /$$ /$$ # | $$ |__ $$__/ $$_____/| $$ |__/ |__/ | $$ # | $$ | $$ | $$ | $$ /$$ /$$$$$$/$$$$ /$$ ...
by leon84
Fri Aug 02, 2019 12:38 pm
Forum: Scripting
Topic: How to write a script and do its debug
Replies: 3
Views: 4799

Re: How to write a script and do its debug

Thanks a lot!
by leon84
Fri Aug 02, 2019 10:17 am
Forum: Scripting
Topic: How to write a script and do its debug
Replies: 3
Views: 4799

How to write a script and do its debug

Is there an external tool that help in script writing? When I use directly winbox I don't have any debug method. I must insert some log output to check for example variables content. If there is a syntax error the script doesn't run but I don't know where is the problem.

Thanks in advance
by leon84
Tue Nov 27, 2018 1:55 pm
Forum: RouterBOARD hardware
Topic: ltap mini usb power LTE interface off
Replies: 7
Views: 5395

Re: ltap mini usb power LTE interface off

Sorry I have the same problem. In tech specifications Mikrotik declare a maximum consuption of about 9 W. I tried to power up with USB charger with an output of 2.4 A and nothing. I don't think the problem is the consuption.
by leon84
Tue Nov 20, 2018 6:09 pm
Forum: General
Topic: L2 MTU on RouterOs Cloud
Replies: 0
Views: 674

L2 MTU on RouterOs Cloud

Dear all, I installed RotuerOS Cloud Hosted on OpenStack. I think to have some problem with interfaces. L2 MTU value reported on ethernet interfaces is egual zero while MTU value is 1500. The Auto Negotiation fails and rate reported is unknown. Also if I disable autonegotiation and set manual veloci...
by leon84
Mon Oct 01, 2018 5:37 pm
Forum: General
Topic: How to change destination ip address
Replies: 14
Views: 3406

Re: How to change destination ip address

Dear sindy now run all correctly! The only change I made is: disabling and enabling ether1 interface and I think this operation solved the issue. Now I see packet also in lte1 interface!
by leon84
Mon Oct 01, 2018 4:32 pm
Forum: General
Topic: How to change destination ip address
Replies: 14
Views: 3406

Re: How to change destination ip address

Then: [admin@CELI] > /log print follow-only where topics~"firewall" and message~"rule" 13:29:58 firewall,info filter rule forward: forward: in:bridge1(ether1) out:lte1, src-mac 00:11:40:01:06:2a, proto UDP, 10.115.4.1:32000->10.230.10.3:32000, NAT 10.115.4.1:32000->(10.115.4.254:...
by leon84
Mon Oct 01, 2018 3:58 pm
Forum: General
Topic: How to change destination ip address
Replies: 14
Views: 3406

Re: How to change destination ip address

Dear sindy, on lte1 interface I don't see nothing. I don't understand what happens when mikrotik router receive udp packet on its ether1 interface. I attach you a sniffer on ether1 interface. As you can see packets are correctly received by mikrotik but I don't understand how it manipulate them. 1 t...
by leon84
Fri Sep 28, 2018 3:48 pm
Forum: General
Topic: How to change destination ip address
Replies: 14
Views: 3406

Re: How to change destination ip address

ip address print Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK INTERFACE 0 10.115.4.254/24 10.115.4.0 bridge1 1 D 192.168.90.153/30 192.168.90.152 lte1 2 D 172.17.10.56/32 172.17.10.1 sstp-out1 ip route print Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r...
by leon84
Fri Sep 28, 2018 1:38 pm
Forum: General
Topic: How to change destination ip address
Replies: 14
Views: 3406

Re: How to change destination ip address

/interface bridge add fast-forward=no name=bridge1 /interface ethernet set [ find default-name=ether1 ] comment=CYGNO speed=100Mbps set [ find default-name=ether2 ] speed=100Mbps set [ find default-name=ether3 ] speed=100Mbps /interface lte set [ find ] mac-address=XX:XX:XX:XX:XX:XX name=lte1 /inte...
by leon84
Fri Sep 28, 2018 1:25 pm
Forum: General
Topic: How to change destination ip address
Replies: 14
Views: 3406

Re: How to change destination ip address

Oh sorry. The new destination address is reachable through lte1 interfaces (please don't assume sstp-out1). In any case you assume that I reach 10.230.10.3 through lte1. From mikrotik device I ping correctly 10.230.10.3 through lte1. Well, I did not read carefully enough your problem description, th...
by leon84
Fri Sep 28, 2018 12:49 pm
Forum: General
Topic: How to change destination ip address
Replies: 14
Views: 3406

Re: How to change destination ip address

Hi sindy it is always a pleasure hear you. :-) In any case the ip firewall filter is empty :-). All traffic in input, output and forward is allowed. For the port ... oh yes it is redundant. :-) The most likely cause is that your rules in chain=forward of /ip firewall filter do not let the dst-nated ...
by leon84
Fri Sep 28, 2018 11:02 am
Forum: General
Topic: How to change destination ip address
Replies: 14
Views: 3406

How to change destination ip address

Dear all, I have a Mikrotik device with these interfaces: 1) eth1 used for internal lan (10.115.4.254/24) 2) lte1 that connect mikrotik device to internet (dynamic ip address provided by internet provider) 3) sstp-out1 virtual interface for a private sstp vpn tunnel At eth1 there is attached a singl...
by leon84
Thu Sep 27, 2018 6:15 pm
Forum: General
Topic: Information about SSTP encryption
Replies: 4
Views: 1629

Re: Information about SSTP encryption

Oh yes. For this reason at top of discussion I told that certificates are not mandatory for the encryption but obviously if I would a more secure implementation I need to have certificates. It is still being encrypted as you state and otherwise it would not deserve the first "s" in SSTP. ;...
by leon84
Thu Sep 27, 2018 3:12 pm
Forum: General
Topic: Information about SSTP encryption
Replies: 4
Views: 1629

Re: Information about SSTP encryption

Thanks.And why without certificates I have AES256-CBC in the encoding field?
by leon84
Thu Sep 27, 2018 2:04 pm
Forum: General
Topic: Information about SSTP encryption
Replies: 4
Views: 1629

Information about SSTP encryption

Dear all, I'm using two mikrotik devices and I'm implementing an SSTP tunnel. I wouldn't use any certificate on the client and on the server but only username and password authentication. The question is: without certificates the AES encryption is in any case implemented in the sstp tunnel ? Or for ...
by leon84
Fri Jul 20, 2018 2:00 pm
Forum: General
Topic: Reboot a RouterBoard
Replies: 6
Views: 1344

Re: Reboot a RouterBoard

Sorry,
now it's ok :-)
I didn't specify bus number.
by leon84
Fri Jul 20, 2018 1:44 pm
Forum: General
Topic: Reboot a RouterBoard
Replies: 6
Views: 1344

Re: Reboot a RouterBoard

Then,
in my routerboard I have power reset option but if I try to launch it do nothint. LTE interface is alway active.
by leon84
Fri Jul 20, 2018 11:28 am
Forum: General
Topic: Reboot a RouterBoard
Replies: 6
Views: 1344

Re: Reboot a RouterBoard

Dear sindy,
the routerboard RBM11G and RBM33G are not mentioned in that list. What it means? This routerboard doesn't require usb power reset?
by leon84
Thu Jul 19, 2018 3:18 pm
Forum: General
Topic: Trigger on interface down
Replies: 0
Views: 678

Trigger on interface down

Dear all,
there is a way to run a script when an interface goes down without check periodically interface?
Thanks in advance
by leon84
Tue Jul 17, 2018 11:50 am
Forum: General
Topic: Reboot a RouterBoard
Replies: 6
Views: 1344

Re: Reboot a RouterBoard

Great sindy! :-)
by leon84
Mon Jul 16, 2018 4:18 pm
Forum: General
Topic: Reboot a RouterBoard
Replies: 6
Views: 1344

Reboot a RouterBoard

Dear all,
is there a way to reboot a routerboard in the same way as disconnect and reconnect power supply?
I have a problem with RB411U. Some times the lte module installed on it become invisible to routerboard and software reboot doesn't resolve. Only the hardware reboot resolve the problem
by leon84
Mon Jul 16, 2018 3:23 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Sorry cindy,
do you know what is the correct way to distribute some routes when an sstp tunnel come up ? There is the parameter "routes" in PPP -> Secrects but it doesn't distribute the route to to remote sstp client? In which way Can I specify route in this parameter?
by leon84
Mon Jul 16, 2018 1:08 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Oh yes I used 2 Vodafone sim only as test. I will use 2 different operators like Vodafone and TIM that have indipendent network infrastructure. Redundancy always comes at a cost of complexity. So it is your decision what you prefer. I prefer simplicity of maintenance to simplicity of configuration. ...
by leon84
Mon Jul 16, 2018 12:43 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Dear sindy, now I have two tunnel sstp in this way: sstp-out1 with ip address 192.168.254.10 and remtoe sstp server as 192.168.254.1 sstp-out2 with ip address 192.168.254.9 and remote sstp server as 192.168.254.2 Now the route table of client is: Flags: X - disabled, A - active, D - dynamic, C - con...
by leon84
Fri Jul 13, 2018 3:49 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

I attach you also sstp-server route print :-) : [admin@SSTP-SERVER] > ip route print detail Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit 0 A S dst-address=0.0.0.0/0 gateway=public-ip gateway-s...
by leon84
Fri Jul 13, 2018 3:38 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Dear sindy, this is route print whene both sstp interface are connected. [admin@MikroTik] > ip route print detail Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit 0 A S dst-address=0.0.0.0/0 gatew...
by leon84
Fri Jul 13, 2018 1:25 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Very good! Now I have both sstp-out connected but I noticed that I have more latency in ping from 192.168.254.1 (sstp-server private ip in the tunnel) and 192.168.254.9 or 192.168.254.10. I have a latency of about 700ms but if I disable one of the sstp-out the latency go to about 70 ms. Have you som...
by leon84
Fri Jul 13, 2018 12:55 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Great! Now is running correctly! Now I try with failover! Thanks a lot!
This supports the idea in my post above, so add the masquerade rules and try again.
by leon84
Fri Jul 13, 2018 12:38 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

I'm using RouterOS 6.42.5 and this is output of ip firewall connections: [admin@MikroTik] > /ip firewall connection print detail Flags: E - expected, S - seen-reply, A - assured, C - confirmed, D - dying, F - fasttrack, s - srcnat, d - dstnat 0 C protocol=udp src-address=169.254.125.216:53141 dst-ad...
by leon84
Fri Jul 13, 2018 12:00 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Dear sindy, resetted router and reconfigured it for simplicity. Now this is the configuration and the only interface connected is sstp-out1 /interface bridge add fast-forward=no name=bridge1 add fast-forward=no name=bridge2 /interface lte apn add apn=mobile.vodafone.it name=lte1 add apn=mobile.vodaf...
by leon84
Fri Jul 13, 2018 11:14 am
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Dear sindy, I think I solved in this way: [admin@MikroTik] > ip route print detail Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit 0 A S dst-address=0.0.0.0/0 gateway=lte1 gateway-status=lte1 rea...
by leon84
Fri Jul 13, 2018 11:08 am
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Please, consider this new routing table because I thinl there is some issue here. I have always the same mangle routing mark as previous scenario but this new routing table. In this case if I disable "default-lte1" it use only default-lte2 and the only interface can connect is sstp-out2. I...
by leon84
Fri Jul 13, 2018 10:19 am
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

[admin@MikroTik] > ip firewall mangle print Flags: X - disabled, I - invalid, D - dynamic 0 chain=output action=mark-routing new-routing-mark=to-443 passthrough=no protocol=tcp dst-address=SSTP-SERVER-IP-PUBLIC dst-port=443 log=no log-prefix="" 1 chain=output action=mark-routing new-routin...
by leon84
Fri Jul 13, 2018 10:00 am
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Perfect. I add mangle rules in output chain and now I can see traffic counter on these rules but now only sstp-out1 can connect to server because it use default gateway. Then I disabled default gateway but there are the 2 specific rules to sstp-server public ip but they (sstp-out1 and sstp-out2) can...
by leon84
Fri Jul 13, 2018 9:40 am
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Dear sindy, congratulations for your knowledge :-). Great! I would to do a test also if I prefer a more simple configuration :-). In any case I have sstp server on TCP port 443 and 444 (When I receive SYN on 444 I forward it to 444). Then in client side I have sstp-out1 connected to 443 and sstp-out...
by leon84
Thu Jul 12, 2018 6:57 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

:-) Then I can use another port on server side and redirect traffic to the standard 443 port of sstp-server. In this way I could force sstp-out1 on lte1 and sstp-out2 on lte2. But the very important question is: suppose I configured all correctly; I have my service connected to 192.168.254.7; the tr...
by leon84
Thu Jul 12, 2018 6:12 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Perfect I think to understand. Then I should force sstp-out1 to use only lte1 and sstp-out2 to use only lte2. Right? In which way? With policy based route? Please check if I understood: I create 2 sstp-client interface and sstp server asssign (for example) 192.168.254.9 at one and 192.168.254.10 at ...
by leon84
Thu Jul 12, 2018 5:19 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Please check if I understood: I create 2 sstp-client interface and sstp server asssign (for example) 192.168.254.9 at one and 192.168.254.10 at another one. Then I create a bridge and add to the bridge both lte interface; I assign to the bridge an ip address for example 192.168.254.7. On server side...
by leon84
Thu Jul 12, 2018 4:19 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Actually I have a service that acquire realtime data from remote RBM33G through a unique SSTP Tunnel. This service is connected to a remote ip address 192.168.254.10 (sstp interface). I could implement second tunnel and assign to another sstp interface another ip, for example 192.168.254.9. My servi...
by leon84
Thu Jul 12, 2018 2:00 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Since years the problem of short outages of the primary path and the associated transient effects is solved by a "WTR timer" (Wait to Restore) which is used to delay the swicthover back to the primary path after it becomes OK. This is normally used to avoid falling back on false OKs, but ...
by leon84
Thu Jul 12, 2018 9:55 am
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

Re: RBM33G with 2 LTE module (how to manage failover)

Dear all, I realized a little script to manage failover but on lte interface is more complicated. I have a configure 2 routes and some firewall rule to allow ping to 8.8.8.8 only for LTE1 interface and 8.8.4.4 for LTE2 interface. Then I have 2 default routes, one through LTE1 (with distance 1 becaus...
by leon84
Tue Jul 10, 2018 2:12 pm
Forum: General
Topic: RBM33G with 2 LTE module (how to manage failover)
Replies: 63
Views: 9737

RBM33G with 2 LTE module (how to manage failover)

Dear all, I'm using RBM33G with 2 Huawei 909s-120 LTE module. I would to configure a failover internet connection on lte. Could you help me? I tried this one https://wiki.mikrotik.com/wiki/Advanced_Routing_Failover_without_Scripting but I didn't help me because with LTE interface I don't have a defa...
by leon84
Fri May 11, 2018 12:45 pm
Forum: Announcements
Topic: v6.42.1 [current]
Replies: 272
Views: 98657

Re: v6.42.1 [current]

Hi to all,
I updated RouterBoard 450 from 5.26 to 6.42.1 and now the routerboard doesn't boot. It reboot continously !
Can you help me?
Thanks
by leon84
Thu Dec 21, 2017 1:17 pm
Forum: General
Topic: RB953GS-5HnT-RP + LTE HUAWEI ME909s-120 Not Recognized
Replies: 12
Views: 4347

Re: RB953GS-5HnT-RP + LTE HUAWEI ME909s-120 Not Recognized

Please,
I'm trying to use Huawei ME909s-120 with RB411 but nothing. I have also changed capacitor n routerboard.
Dear Mikrotik, please, can you send me an official answer please? I bought a lot of ME909s-120and RB411 and I can't use it.
by leon84
Mon Dec 04, 2017 9:05 pm
Forum: General
Topic: Huawei ME909s-120 not recognized
Replies: 27
Views: 12986

Re: Huawei ME909s-120 not recognized

Is there someone that solved this issue on RB411U? I tried to change capacitor as suggested by Mikrotik support but nothing. The Huawei ME909s-120 is always not recognized :-(
by leon84
Wed May 14, 2014 1:28 pm
Forum: General
Topic: DHCP client problem
Replies: 1
Views: 934

DHCP client problem

Hi to all, I have this problem. I'm using an HUAWEI modem (installed on RB411 as an lte1 interface) and I receive on interface lte1 a dynamic ip address. The router run correctly but in certain condition I lose connection with routerboard and when it come back in the log I have a losed ip address on...
by leon84
Tue Feb 25, 2014 4:09 pm
Forum: Scripting
Topic: Interface address
Replies: 2
Views: 1207

Re: Interface address

perfect! thanks!
Try this from a command line. ":put" doesn't work in a script, but it will verify the rest of the script works.
:put [/ip address get [/ip address find interface=ether1] address]]
by leon84
Tue Feb 25, 2014 3:56 pm
Forum: Scripting
Topic: Interface address
Replies: 2
Views: 1207

Interface address

Why in ROS 6.10 I try to launch this command

/ip address get [/ip address find interface=ether1 ] address

I don't receive ip address of interface ether1 ?
by leon84
Wed Nov 27, 2013 4:51 pm
Forum: The User Manager
Topic: RADIUS + DHCP SERVER
Replies: 4
Views: 3156

RADIUS + DHCP SERVER

Hi to all,
can you explain me in wich way I can obtain this configuration?

I have 2 routerboard A and B
On A I would to have a Radius Server and a DHCP server.
On B I have the dhcp client that receive ip from dhcp server only after radius authentication

Thanks
by leon84
Wed Nov 27, 2013 11:44 am
Forum: Wireless Networking
Topic: Transparent bridge without wds
Replies: 17
Views: 10487

Re: Transparent bridge without wds

Oh yes sorry! 1 SSID 2 wifi. But I don't want this one becasue in case of new device and for example 4 ap the device view same SSID but different mac address and then ask you authentication different time for each ap. No. The SSID is the name of the network you see when searching a network via WiFi....
by leon84
Wed Nov 27, 2013 11:29 am
Forum: Wireless Networking
Topic: Transparent bridge without wds
Replies: 17
Views: 10487

Re: Transparent bridge without wds

Yes but for the mobile device are always 2 SSID because change mac address wlan.
We are talking about a bridge, a link. Point to point.

One board working as station, is not showing a SSID, only bridge and ap bridge modes
by leon84
Wed Nov 27, 2013 10:45 am
Forum: Wireless Networking
Topic: Transparent bridge without wds
Replies: 17
Views: 10487

Re: Transparent bridge without wds

But in this case the mobile devices doesn't view a unique WiFi SSID but 2 different wifi network.
Right?
I think bridge to station bridge
by leon84
Thu Sep 19, 2013 1:28 pm
Forum: Wireless Networking
Topic: Extends wifi coverage
Replies: 2
Views: 1351

Re: Extends wifi coverage

Hi to all, actually the only protocol that extends a wifi coverage is wds? wds to extend the coverage ....so .what is the issue?? In a building I would to have a total wifi coverage using 2 access point but for all remote devices this infrastructure must to be as a single access point( same SSID). ...
by leon84
Tue Jul 23, 2013 5:11 pm
Forum: Wireless Networking
Topic: Extends wifi coverage
Replies: 2
Views: 1351

Extends wifi coverage

Hi to all,
actually the only protocol that extends a wifi coverage is wds?
by leon84
Mon Jul 22, 2013 9:08 am
Forum: The Dude
Topic: Problem with DUDE ping probe
Replies: 4
Views: 5837

Re: Problem with DUDE ping probe

I solved disabling UAC ... thanks
by leon84
Fri Jul 19, 2013 4:22 pm
Forum: The Dude
Topic: Problem with DUDE ping probe
Replies: 4
Views: 5837

Problem with DUDE ping probe

Hi to all, I installed the dude 3.6 on Windows 7 Pro 64 bit. I added all mikrotik device to monitoring but I have this problem: The ping probe and only the ping doesn't work. If I open a windows terminal and launch manual ping it run correctly. If i try to run ping in the dude I receive the message ...
by leon84
Thu Sep 13, 2012 11:56 pm
Forum: The Dude
Topic: The dude tunneling
Replies: 2
Views: 1722

The dude tunneling

ok thanks a lot ...
by leon84
Thu Sep 13, 2012 5:11 pm
Forum: The Dude
Topic: The dude tunneling
Replies: 2
Views: 1722

The dude tunneling

Hi to all, I have wifi mesh network and on a MAIN router ( routerboard 450) I installed the dude server. This main router is also connected to an adsl. Now I access to the dude server with the windows dude client through the adsl connection but because I am not in the wifi network I can't access wit...
by leon84
Fri Sep 07, 2012 3:45 pm
Forum: Wireless Networking
Topic: BIG BUG- Unicast key exchange timeout
Replies: 130
Views: 129579

Re: BIG BUG- Unicast key exchange timeout

Hi to all,
I have your same problem. Is there a solution?
by leon84
Wed Jul 25, 2012 5:00 pm
Forum: General
Topic: mikrotik and novatel 3G
Replies: 1
Views: 914

Re: mikrotik and novatel 3G

up.
by leon84
Tue Jun 26, 2012 7:00 pm
Forum: General
Topic: mikrotik and novatel 3G
Replies: 1
Views: 914

mikrotik and novatel 3G

Hi to all, I'm using routerboard mikrotik with novatel 3g card and I use command listed in this page http://wiki.mikrotik.com/wiki/Huawei_EVDO but when modem is connected is impossible to know the signal strenght ... I have also another problem ... How can I set the 3g card for using only GPRS/EDGE ...
by leon84
Tue Jun 19, 2012 6:10 pm
Forum: Wireless Networking
Topic: 5.11 and WDS
Replies: 34
Views: 11894

Re: 5.11 and WDS

I had the same problem... Where Can I download this version ? Thanks Try out now the new test release that was made today. 36 hours without incident, and counting. Disabling a radio occasionally takes the RB offline (no response via ether1, one of the bridge ports) for ~30 seconds, and enabling a ra...
by leon84
Tue Jun 19, 2012 5:40 pm
Forum: Wireless Networking
Topic: WDS PROBLEM
Replies: 1
Views: 865

WDS PROBLEM

Hi to all this is my problem: consider this lan topology and my problem: I have a lan named LAN1 with address 192.168.0.0/24. 192.168.0.1/24 is Internet Gateway and DHCP... I added a mikrotik 433 (called MAIN ROUTER) in AP-Bridge mode to extend my network without cable. This AP have only a bridge wi...
by leon84
Thu Apr 19, 2012 4:28 pm
Forum: The Dude
Topic: Probe Thread
Replies: 339
Views: 407206

Re: Probe Thread

Hi to all, in which way I can have snmp information about all wlan interfaces? In particular, I would to change device color in the dude if a wlan interface (not in administrativly down) go down ... I think that I have to compare oid "iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.ifEntry.i...
by leon84
Wed Apr 18, 2012 3:34 pm
Forum: The Dude
Topic: wireless link state
Replies: 0
Views: 1097

wireless link state

Hi to all,
I'm configuring link between different routerboard in the dude and I added in the link label this one:
State:[Interface.OperStatus]

Is it possible that the dude change automatically the link color (for example in red) if the interface.operstatus became inactive?

If yes how is it possible?
by leon84
Wed Apr 11, 2012 4:29 pm
Forum: General
Topic: GPS USB
Replies: 1
Views: 1406

GPS USB

Hi to all,
which gps with usb connection can I use with mikrotik for system clock syncronization?
by leon84
Wed Apr 11, 2012 4:06 pm
Forum: Scripting
Topic: Serial data logging
Replies: 2
Views: 1185

Re: Serial data logging

Ok thanks ... I change with a script destination file for serial data flow. If i would also implement a file rotate like logrotate daemon ?
by leon84
Tue Mar 27, 2012 5:08 pm
Forum: General
Topic: linux packages on rotueros
Replies: 1
Views: 731

linux packages on rotueros

Hi to all,
is it possible to add software to routeros x86 version?
by leon84
Fri Dec 09, 2011 3:30 pm
Forum: General
Topic: NAT question ( is it a bug ?)
Replies: 30
Views: 5336

Re: NAT question ( is it a bug ?)

Hi Alexandro. thanks for the answer. Why in desttination nat I must use netmap function and not simply dst-nat? And why you use netmap only in dst-nat? I tried netmap in both (src-nat and dst-nat) but not only in dnat. Next week i try your configuration and tell you. thanks a lot.. Hi ip firewall na...
by leon84
Tue Dec 06, 2011 1:30 pm
Forum: General
Topic: NAT question ( is it a bug ?)
Replies: 30
Views: 5336

Re: NAT question ( is it a bug ?)

Hi to all, I think I solved the problem !!!! As I tell you I would to use RB1200 to replace a debian server with iptables. This morning I tell to me. If some src-nat run and other not run is it possible that is about arp cache???? Is it possible there is some server linux that have a timeout more lo...
by leon84
Mon Dec 05, 2011 1:02 pm
Forum: General
Topic: [RB 1100AH] Ethernet interfaces
Replies: 4
Views: 1548

[RB 1100AH] Ethernet interfaces

Hi to all,
RB 1100AH have 13 ethernet interfaces. I see that are grouped in 2 group that are 2 separates switch.

What it means? If I would to use, for example, ether1 and ether2 without switching function as a single router interface is it possible to eliminate it from switch mode?
by leon84
Fri Dec 02, 2011 9:09 am
Forum: General
Topic: NAT question ( is it a bug ?)
Replies: 30
Views: 5336

Re: NAT question ( is it a bug ?)

Hi William I checked arp proxy. There isn't.
The arp mode for interface ether10 is "enabled".
I think that this routerboard have some hardware or firmware problem....
by leon84
Fri Dec 02, 2011 12:33 am
Forum: General
Topic: NAT question ( is it a bug ?)
Replies: 30
Views: 5336

Re: NAT question ( is it a bug ?)

Hi William, the rule you quoted is for have the same ip address used by the router for its connections to internet. If I use masqureding function instead of src-nat and I have different ip public on the same interface which ip address it use? tge preferred source specified in route table? o it's ran...
by leon84
Thu Dec 01, 2011 7:54 pm
Forum: General
Topic: NAT question ( is it a bug ?)
Replies: 30
Views: 5336

Re: NAT question ( is it a bug ?)

Hi, tomorrow I check the problem of winbox and arp-proxy and feedback you. For the reset, I have already executed the step that you reported ... in the up of this thread you can see I only added ip address, nat rules without firewall and default route ... You reported part of manual ... but if I con...
by leon84
Thu Dec 01, 2011 12:38 pm
Forum: General
Topic: NAT question ( is it a bug ?)
Replies: 30
Views: 5336

Re: NAT question ( is it a bug ?)

Hi fewi, you must see this screenshot !!!!! This morning I powered on routerboard 1200 and this is the surprise: As you can see, I connected to RouterOs through ether10 that have ip address 10.245.5.239 while interface ether9 have a public ip address terminating with .100. When I run winbox for scan...
by leon84
Wed Nov 30, 2011 4:14 pm
Forum: General
Topic: NAT question ( is it a bug ?)
Replies: 30
Views: 5336

Re: NAT question ( is it a bug ?)

Hi fewi, I tried to use torch command. If I run on 192.168.0.1 "telnet public_ip" I see in torch tool on public interface an entry with: public_ip:23 -> 172.16.0.5:random_port It's clare. The packet from 192.168.0.1 arrive to public_ip and this respond correctly. The packet SYN,ACK from pu...
by leon84
Tue Nov 29, 2011 12:43 pm
Forum: General
Topic: NAT question ( is it a bug ?)
Replies: 30
Views: 5336

Re: NAT question ( is it a bug ?)

Hi fewi and hi to all, this morning I resetted the router and I only addedd this one: 1) I added ip addresses to interfaces ... 2) I implemented source and destination natting without firewall 3) I added default route... It's the same! It's incredible .... In particular only some private ip can comm...
by leon84
Mon Nov 28, 2011 8:36 pm
Forum: General
Topic: NAT question ( is it a bug ?)
Replies: 30
Views: 5336

Re: NAT question ( is it a bug ?)

perhaps in source and destination natting is necessary to specify input and output interface?
by leon84
Mon Nov 28, 2011 6:26 pm
Forum: General
Topic: NAT question ( is it a bug ?)
Replies: 30
Views: 5336

Re: NAT question ( is it a bug ?)

This is the configuration. The firewall is disabled... I only posted nat table ... The network in ip route are unrecheable beacause I disattached the router ... and another think ... I replaced my ip public with 172.16.0.0/24 ... I would to remember you that if I active only one ip address for examp...
by leon84
Mon Nov 28, 2011 11:32 am
Forum: General
Topic: NAT question ( is it a bug ?)
Replies: 30
Views: 5336

Re: NAT question

I did other tests ... I think the problem is router os BUG. I explain you ... I solved the problem simply activating one ip address on public interface ... and this'isnt normal. For example. If I activate ONLY 172.16.0.1/24 the src nat and destination nat run correctly ... If I activate ONLY 172.16....
by leon84
Fri Nov 25, 2011 10:00 pm
Forum: General
Topic: NAT question ( is it a bug ?)
Replies: 30
Views: 5336

Re: NAT question

I attach you a layout of network. Please, consider, 172.16.0.0/24 public ip addresses. I disabled firewall on router os and now I have only this configuration: ip firewall nat add chain=srcnat src-address=192.168.0.1 action=src-nat to-addresses="172.16.0.1" ip firewall nat add chain=dstnat...
by leon84
Fri Nov 25, 2011 4:07 pm
Forum: General
Topic: NAT question ( is it a bug ?)
Replies: 30
Views: 5336

Re: NAT question

I did an other test. I used a packet sniffer betwenn remote server and mikrotik router os and: - When I run "Telnet remote server" on 192.168.0.1 the remote server reply correctly. I see packets with source port 23 and ip address of remote host destinated to IP PUBLIC 1. - in public interf...
by leon84
Fri Nov 25, 2011 1:40 pm
Forum: General
Topic: NAT question ( is it a bug ?)
Replies: 30
Views: 5336

Re: NAT question

I have a new problem .... I would always do a NAT 1:1 but I would also providing a firewall then I use this configuration: ip firewall nat add chain=srcnat src-address=192.168.0.1 action=src-nat to-addresses="IP PUBLIC 1" ip firewall nat add chain=dstnat dst-address="IP PUBLIC 1"...
by leon84
Thu Nov 24, 2011 5:31 pm
Forum: General
Topic: NAT question ( is it a bug ?)
Replies: 30
Views: 5336

Re: NAT question

Oh thanks it's correct ... thanks a lot No. You have it completely backwards. You use whichever IP address isn't destination NATed to an inside host. The router can listen on ALL IP addresses configured on its interfaces, but will sometimes - when you configure destination NAT - send that traffic to...
by leon84
Thu Nov 24, 2011 4:21 pm
Forum: General
Topic: NAT question ( is it a bug ?)
Replies: 30
Views: 5336

Re: NAT question

mmm... I need destination natting only if I would to redirect my public preferred address to router itself right? In particular: If I want only that router os can communicate with internet I use only source nat. But If I would to connect via winbox trought Internet then I must enable destination nat...
by leon84
Thu Nov 24, 2011 3:00 pm
Forum: General
Topic: NAT question ( is it a bug ?)
Replies: 30
Views: 5336

Re: NAT question

I think, maybe, the solution for me is:

ip firewall nat add chain=srcnat src-address=127.0.0.1 action=src-nat to-addresses="IP PUBLIC PREFERRED"
ip firewall nat add chain=dstnat dst-address="IP PUBLIC PREFERRED" action=dst-nat to-addresses=127.0.0.1

Do you think it is correct?
by leon84
Thu Nov 24, 2011 2:58 pm
Forum: General
Topic: NAT question ( is it a bug ?)
Replies: 30
Views: 5336

Re: NAT question

Yes all ip public have internet access.
Do your public ip's all have internet access? What configuration do you have on your ip/route?
by leon84
Thu Nov 24, 2011 11:32 am
Forum: General
Topic: NAT question ( is it a bug ?)
Replies: 30
Views: 5336

Re: NAT question

maybe with src natting and destination natting to localhost ????
by leon84
Thu Nov 24, 2011 11:25 am
Forum: General
Topic: NAT question ( is it a bug ?)
Replies: 30
Views: 5336

NAT question ( is it a bug ?)

Hi to all, I would to have a NAT 1:1 in my network. I configured on my RouterOS 5.8 a public interface with 10 ip address and I would to redirect traffic to host in my lan. I added all 10 ip addresses on public interface of router and used this configuration natting: ip firewall nat add chain=srcnat...
by leon84
Tue Oct 04, 2011 1:03 pm
Forum: Wireless Networking
Topic: Aligment mode in RouterOS 5
Replies: 0
Views: 589

Aligment mode in RouterOS 5

Hi to all, up to Router version 4 I was able to do antenna aligment simply putting wireless mode in "aligment only" on both devices. Now with Router OS 5 when I try to do an aligment putting interface in aligment only and clicking "Align ..." button I view nothing ... What is my ...
by leon84
Thu Sep 15, 2011 12:26 pm
Forum: Wireless Networking
Topic: wds configuration
Replies: 1
Views: 1043

wds configuration

Hi to all, I must realize an array of access point to do a backbone ... In particular, each routerboard have 2 wlan interface and I must create one trasparent lan in which are visible device mac address... Each routerboard is attacched to the next routerboard : RouterA-wlan2 is connected to RouterB-...
by leon84
Thu Aug 11, 2011 10:19 am
Forum: RouterBOARD hardware
Topic: Routerboard with 3G and Wifi built in
Replies: 3
Views: 3147

Re: Routerboard with 3G and Wifi built in

Thanks for the answer ...
Can you recommend me about some 3G modem compatible for this RB411U ?
we don't sell 3G modems. We have models with miniPCI-e slot or USB port, depending on what kind of 3G modem you want to use. For example this offers both:

http://routerboard.com/RB411U
by leon84
Wed Aug 10, 2011 10:23 pm
Forum: RouterBOARD hardware
Topic: Routerboard with 3G and Wifi built in
Replies: 3
Views: 3147

Routerboard with 3G and Wifi built in

Is there a routerboard that have 3G modem and Wifi radio integrated ?
If no I would a small routerboard with this specifications:

one 3G modem
one radio wifi 802.11 b/g (2.4 Ghz)
one ethernet interface
support to external lcd panel

I don't need serial or usb interface...

Thanks
by leon84
Tue May 31, 2011 4:26 pm
Forum: General
Topic: Torch tool and ip name resolution
Replies: 0
Views: 746

Torch tool and ip name resolution

Is it possible that RouterOS resolve ip listed in torch tool?

Thanks
by leon84
Tue May 31, 2011 1:24 pm
Forum: General
Topic: Logging problem!
Replies: 1
Views: 678

Re: Logging problem!

up Hi to all, I would to log web-proxy ( ! debug), but while routeros 5.2 is logging and I want to change parameters about log files like "File count" or "Line for file" the logger goes down and stop logging. In this case to continue to log I must restart the router and the param...
by leon84
Fri May 27, 2011 12:23 pm
Forum: General
Topic: PCQ and burst
Replies: 6
Views: 7420

Re: PCQ and burst

thanks a lot The pcq-burst-threshold is value that switch the burst on/off. You want to set this value lower than the pcq-rate so that burst is only possible when the user have just start a connection. The user is then allow to reach the pcq-burst-rate for a duration specified in the pcq-burst-time ...
by leon84
Fri May 27, 2011 11:03 am
Forum: General
Topic: PCQ and burst
Replies: 6
Views: 7420

Re: PCQ and burst

Why pcq-burst-threshold 1M and not 2M? Is correct this new configuration for the new feature ? name="PCQ_Download" kind=pcq pcq-rate=2M pcq-limit=100 pcq-classifier=dst-address pcq-total-limit=1000 pcq-burst-rate=0 pcq-burst-threshold=8M pcq-burst-time=10s pcq-src-address-mask=32 pcq-dst-a...
by leon84
Thu May 26, 2011 1:31 pm
Forum: General
Topic: PCQ and burst
Replies: 6
Views: 7420

PCQ and burst

Hi to all, I'm using ROS 5.2 and PCQ queues to allocate the same bandwith to all users. I limit download and upload with "Rate" Parameter of pcq at 2Mbps. I would to do this one: When a user star a connection can use max 8 Mbps for 10 seconds. After this period the connection is limited to...
by leon84
Wed May 25, 2011 12:58 pm
Forum: General
Topic: RouterOS 5.2 Graphing
Replies: 1
Views: 712

RouterOS 5.2 Graphing

Hi to all,
is there documentation about tools->graphing ?

By default only resource graphs are activated but I don't see any graph ... why ?
by leon84
Mon May 23, 2011 4:20 pm
Forum: General
Topic: Ros 5.2 : webproxy for HTTPS
Replies: 2
Views: 1628

Re: Ros 5.2 : webproxy for HTTPS

Thanks for answer ... now it's ok ... thanks a lot
It only works for HTTPS when explicitly configured as a proxy in the client OS or browser. It doesn't work for HTTPS via NAT rules. That's inherent to HTTPS with all proxies, unless you have a wildcats cert for all domains that the client trusts.
by leon84
Mon May 23, 2011 3:02 pm
Forum: General
Topic: Logging problem!
Replies: 1
Views: 678

Logging problem!

Hi to all, I would to log web-proxy ( ! debug), but while routeros 5.2 is logging and I want to change parameters about log files like "File count" or "Line for file" the logger goes down and stop logging. In this case to continue to log I must restart the router and the paramete...
by leon84
Mon May 23, 2011 10:45 am
Forum: General
Topic: Ros 5.2 : webproxy for HTTPS
Replies: 2
Views: 1628

Ros 5.2 : webproxy for HTTPS

Hi to all,
in the documentation I read that webproxy run also for HTTPS ....
I configured it and redirect all traffic for port 80 to proxy and it run correcty.
When I redirect all traffic for port 443 it doesn't run.
Why?

Can you help me?
by leon84
Fri May 20, 2011 9:36 pm
Forum: General
Topic: Documentation RouterOS
Replies: 4
Views: 1049

Re: Documentation RouterOS

I'm sorry
Example: http://wiki.mikrotik.com/wiki/Manual:IP/DHCP_Server
Applies to RouterOS: v3, v4, v5+
by leon84
Fri May 20, 2011 9:14 pm
Forum: General
Topic: Documentation RouterOS
Replies: 4
Views: 1049

Re: Documentation RouterOS

I know this documentation but it is up to version 4. Can you confirm?
by leon84
Fri May 20, 2011 5:27 pm
Forum: General
Topic: Documentation RouterOS
Replies: 4
Views: 1049

Documentation RouterOS

Hi to all,
Where I find documentation for Router OS 5.2 ? wiki.mikrotik.com isn't upgraded ...
by leon84
Wed May 18, 2011 5:18 pm
Forum: General
Topic: Ftp or Scp on RouterOS 5
Replies: 1
Views: 774

Re: Ftp or Scp on RouterOS 5

I'm sorry ... I'm solved ... Sorry
by leon84
Wed May 18, 2011 5:15 pm
Forum: Scripting
Topic: Serial data logging
Replies: 2
Views: 1185

Serial data logging

Hi to all,
I'm logging data from serial port on my mikrotik. Te RouterOS create on compact flash a file named data that contains all serial data. I would to have more logging serial file, one for each day... Is it possible ? I have to realize a script?
by leon84
Wed May 18, 2011 4:46 pm
Forum: General
Topic: Ftp or Scp on RouterOS 5
Replies: 1
Views: 774

Ftp or Scp on RouterOS 5

Hi to all,
I use a Router mikrotik to acquire data from serial to internal compact flash. Is it possible to implement a service like ftp or secure cp to get this data ???
by leon84
Tue May 17, 2011 6:49 pm
Forum: General
Topic: DHCP Server leases
Replies: 9
Views: 1528

Re: DHCP Server leases

Yes i have control. In which way i can implement filters ?
Yes, if you have control over the physical network layout you can just make bridge filters for the relevant MAC addresses.
by leon84
Tue May 17, 2011 6:18 pm
Forum: General
Topic: DHCP Server leases
Replies: 9
Views: 1528

Re: DHCP Server leases

But if I put router B betwenn gateway "A" and the lan as bridge ???
Can I control the access?
If you don't control the gateway and can't make changes to it you cannot possibly prevent people from routing traffic through that gateway.
by leon84
Tue May 17, 2011 6:13 pm
Forum: General
Topic: DHCP Server leases
Replies: 9
Views: 1528

Re: DHCP Server leases

the problem is : I can't access to gateway router :-) Move DHCP to the gateway router, use static leases only and set add-arp to yes, and then set the ARP mode of the LAN interface to reply-only. That way only clients that received a lease from the DHCP server can make it into the ARP table of the g...
by leon84
Tue May 17, 2011 3:56 pm
Forum: General
Topic: DHCP Server leases
Replies: 9
Views: 1528

Re: DHCP Server leases

Ok but,
in hotspot configuration the router B must have a nat function ... right ?
I don't want NAT. I would that a single client in 192.168.0.0 network contact directly 192.168.0.1.
by leon84
Tue May 17, 2011 11:19 am
Forum: General
Topic: DHCP Server leases
Replies: 9
Views: 1528

DHCP Server leases

I have a gateway "A" that have ip 192.168.0.1 in lan 192.168.0.0/255.255.255.0. I have a router mikrotik "B" with ip 192.168.0.2 in the same lan that assign ip to client through dhcp server and only with a "static-only" mode. The router B doesn't have NAT function and t...
by leon84
Tue Mar 01, 2011 11:47 am
Forum: General
Topic: PCQ parameters
Replies: 1
Views: 796

PCQ parameters

Hi to all, I created queues tree attached to parent global-in and global-out. I would to divide in egual mode bandwith between users. I followed this article http://wiki.mikrotik.com/wiki/Manual:Queues_-_PCQ_Examples The question is: when I set pcq-rate to 700k for example and I launch a toch tool I...
by leon84
Sat Feb 26, 2011 6:25 pm
Forum: Wireless Networking
Topic: Transparent bridge without wds
Replies: 17
Views: 10487

Re: Transparent bridge without wds

I had some problems to realize transparent bridge without wds.
In particular, with a configuration posted I have only direction traffic:
the router station and it's lan can ping router bridge and it's lan while isn't the same in the other direction...
by leon84
Fri Feb 25, 2011 4:14 pm
Forum: Wireless Networking
Topic: Transparent bridge without wds
Replies: 17
Views: 10487

Transparent bridge without wds

Is it possible realize a transparent bridge without wds ? Example: I have RouterOS A e RouterOS B Router OS A implements a bridge that have 2 ports : ether1 and wlan1 (Wireless mode bridge) Router OS B implements a bridge that have 2 ports : ether1 and wlan1 (Wireless mode station) The ether1 of bot...
by leon84
Fri Nov 12, 2010 2:59 pm
Forum: General
Topic: What is this udp traffic ???
Replies: 1
Views: 895

What is this udp traffic ???

Hi to all, I have a RouterOS that allow my lan to connect to Internet with a simple NAT masquerading... The RouterOS have 2 interfaces : in (lan) and out (wan) In the "in" interface with a torch I have always a traffic like this: protocol UDP, src=255.255.255.255 dst=0.0.0.0, tx-rate varia...
by leon84
Fri Oct 22, 2010 7:09 pm
Forum: The Dude
Topic: Ping not working on Windows 7 Ultimate 64 bits
Replies: 10
Views: 11067

Re: Ping not working on Windows 7 Ultimate 64 bits

sorry i have the same problem... what is UAC ?
by leon84
Fri Oct 22, 2010 4:26 pm
Forum: The Dude
Topic: the dude ping problem
Replies: 7
Views: 6841

Re: the dude ping problem

I always launched the Dude Server as Windows Aministrator...
First try to run The Dude Server as Windows Administrator. This is discussed many times in this forum.
by leon84
Fri Oct 22, 2010 3:11 pm
Forum: The Dude
Topic: the dude ping problem
Replies: 7
Views: 6841

Re: the dude ping problem

I'm using Windows 7 x64... In which way I can check nic configuration through the dude server? Oh, that is strange then.. I have tested the same setup and I get responses from local and server running the Dude client on the Dude server. Have you checked your local nic configurations on the Dude serv...
by leon84
Fri Oct 22, 2010 2:00 pm
Forum: General
Topic: limit number of connections
Replies: 9
Views: 2624

Re: limit number of connections

ok thanks to all.
by leon84
Fri Oct 22, 2010 1:59 pm
Forum: The Dude
Topic: the dude ping problem
Replies: 7
Views: 6841

Re: the dude ping problem

But I have the server dude on the same machine where the manual ping with command line run correctly... It sounds like to me that there is a problem with communication for ICMP packets from your Dude server to the device. Do you have any firewalls inbetween your Dude server and the device? Is the de...
by leon84
Fri Oct 22, 2010 1:34 pm
Forum: The Dude
Topic: the dude ping problem
Replies: 7
Views: 6841

the dude ping problem

Hi to all, when I add a new device and active ping service I receive a "local problem". If I click with mouse right button on device -> tools -> ping, the ping fails if in the field "From" is selected server while the ping is ok if the field "From" contains "local&...
by leon84
Fri Oct 22, 2010 12:33 pm
Forum: General
Topic: limit number of connections
Replies: 9
Views: 2624

Re: limit number of connections

Right ... This is a problem...
you limit connection to 1 to a web serwer. A typical web browser opens several connections downloading HTML and pictures is separe connections, how would you solve this issue when limiting connection to 1 per HOST ?


?
by leon84
Fri Oct 22, 2010 10:58 am
Forum: General
Topic: limit number of connections
Replies: 9
Views: 2624

Re: limit number of connections

But I intented for example one connection for each host.
by leon84
Thu Oct 21, 2010 4:18 pm
Forum: General
Topic: Dell Perc raid controller and RouterOS
Replies: 1
Views: 1036

Dell Perc raid controller and RouterOS

Hi to all,
is it possible to install RouterOS 5.0 on servers Dell Poweredge 2950 or 1950 that have Dell Perc SCSI Raid or DELL Perc SAS RAID?
by leon84
Thu Oct 21, 2010 4:00 pm
Forum: General
Topic: pcq rate
Replies: 3
Views: 1150

Re: pcq rate

thanks a lot
by leon84
Thu Oct 21, 2010 10:49 am
Forum: General
Topic: limit number of connections
Replies: 9
Views: 2624

limit number of connections

Hi to all,
in which way Can I limit the numbers of connection between two host A and B ?

For example, if an user use a download manager it can do different connections to server for download a file. I would to limit this connection ad one.

Is it possible?
by leon84
Thu Oct 21, 2010 10:44 am
Forum: General
Topic: pcq rate
Replies: 3
Views: 1150

pcq rate

Hi to all,
what is the measure unit of pcq-rate? Byte/s or bit/s ?

What are limit and total limit parameters?
by leon84
Tue Oct 19, 2010 6:23 pm
Forum: General
Topic: torch tool and dns resolution
Replies: 0
Views: 940

torch tool and dns resolution

Is it possible that routeros resolve automatically the ip addresses showed in the torch tool?
by leon84
Tue Oct 19, 2010 6:18 pm
Forum: General
Topic: Laws and users traffic
Replies: 1
Views: 797

Laws and users traffic

Hi to all,
I would to say what laws are in the european community about logging of users traffic... In particulare in Italy...
Do you know this argument?

I'm using a dell server with on board routeros and my question is: Can I log each web proxy request?
by leon84
Tue Oct 19, 2010 4:51 pm
Forum: General
Topic: Double Internet Gateway
Replies: 3
Views: 1496

Double Internet Gateway

Hi to all, I would implement a redundant gateway in my routeros. In particular consider that I have a RouterBoard with 3 interfaces: eth0, eth1 and eth2 eth0 and eth1 have different internet link, while eth2 is the ethernet interface connected to my lan. I would to use eth0 as primary link to intern...
by leon84
Tue Oct 12, 2010 5:05 pm
Forum: Wireless Networking
Topic: WDS security
Replies: 1
Views: 940

WDS security

Hi to all, I would an information about WDS security... I have router A and router B in static wds mode... I use for A e B the same security profile. But I viewed that if I use different security profile the link is always on. Why? the security profile haven't effect in wds mode ? If yes in which wa...
by leon84
Thu Jul 01, 2010 4:10 pm
Forum: General
Topic: Web-Proxy: How to limit access to certain websites.
Replies: 2
Views: 2904

Web-Proxy: How to limit access to certain websites.

Hi to all,
I'm using RouterOS 4.9 and it's webproxy ion transparent mode.
I would to limit the access at my users to certain categories of website. Is it possibile? In which way?

In webproxy access list it is possibile to allow or deny access to a site but if I would categorize it???
by leon84
Thu Jun 24, 2010 8:23 pm
Forum: General
Topic: WebProxy + NAT
Replies: 4
Views: 940

Re: WebProxy + NAT

And is it possible to disable it?
proxy sends 'X-FORWARDED-FOR' field in the request
by leon84
Thu Jun 24, 2010 8:00 pm
Forum: General
Topic: WebProxy + NAT
Replies: 4
Views: 940

WebProxy + NAT

Hi to all, I'm using router os 4.9 web proxy configured to run on port 8000. It is a transparent proxy because I redirect all traffic to port 80 at port 8000. Today I visited a website and compiled a form for an information. The site administrator reply to my form request and at the end of his mail ...
by leon84
Wed Jun 09, 2010 3:39 pm
Forum: General
Topic: Layer 7 protocol
Replies: 4
Views: 5017

Re: Layer 7 protocol

Content? Can I have more informations about content matching please? the L7 filter doesn't work perfectly with so many traffics, in the sites suggested above you will find a list of protocol that tested works perfect, but i prefer dont use L7 it's "EAT" a lot of cpu, i allways try to block...
by leon84
Wed Jun 09, 2010 1:47 pm
Forum: General
Topic: Layer 7 protocol
Replies: 4
Views: 5017

Re: Layer 7 protocol

Thanks a lot.
I'm blocking messenger connection but I would to block also video or audio streaming. I used regexp of RTSP, FLASH, RtP but the traffic isn't blocked.

Can you help me?
by leon84
Tue Jun 08, 2010 5:05 pm
Forum: General
Topic: HotSpot Logging
Replies: 2
Views: 893

Re: HotSpot Logging

I configured debug topic and now is ok.
Thanks a lot
What is your configuration for /system logging?
HotSpot is usually logged with topic info.
You may use HotSpot together with debug topic to see additional information about the HotSpot.
by leon84
Tue Jun 08, 2010 4:11 pm
Forum: General
Topic: HotSpot Logging
Replies: 2
Views: 893

HotSpot Logging

Ho to all,
I would to log hotspot access and then i added in system logging the topic "hotspot" but this log file is always empty.
Can you help me?
by leon84
Mon Jun 07, 2010 3:11 pm
Forum: General
Topic: Layer 7 protocol
Replies: 4
Views: 5017

Layer 7 protocol

Hi to all,
I would to drop Windows Live Messenger connections. In which way Can I use layer 7 protocol?

Where I get the correct regular expression of messenger protocol?

And for others protocols?
by leon84
Fri Jun 04, 2010 1:40 pm
Forum: General
Topic: Pptp interface and firewall
Replies: 3
Views: 843

Re: Pptp interface and firewall

add-default-route=no on pptp client is necessary.
but through the firewall is it possible to do this limitations?
by leon84
Fri Jun 04, 2010 12:45 pm
Forum: General
Topic: Pptp interface and firewall
Replies: 3
Views: 843

Pptp interface and firewall

Hi to all, I configured a pptp server and I would that a remote client can only connect to the local network and not go to INTERNET through the VPN connection. I have router os with 2 interfaces: public and private. Public is directly connected to internet while private have an address in network 10...
by leon84
Fri May 28, 2010 4:37 pm
Forum: General
Topic: Bandwith Limitation
Replies: 10
Views: 1939

Re: Bandwith Limitation

There are some packet dropped in the queue... what it means?
by leon84
Fri May 28, 2010 4:27 pm
Forum: General
Topic: Bandwith Limitation
Replies: 10
Views: 1939

Re: Bandwith Limitation

see queue stats =)

also, add max-limit=10M to queue definion =)
What is difference beetween pcq-limit parameter and max-limit ? I specified only max-limit...
by leon84
Fri May 28, 2010 3:19 pm
Forum: General
Topic: Bandwith Limitation
Replies: 10
Views: 1939

Re: Bandwith Limitation

then create simple queue with those queue types p.s. you may use packet-mark=no-mark Then now I have : /queue type add name="PCQ_download" kind=pcq pcq-rate=0 pcq-classifier=dst-address pcq-limit=10M /queue type add name="PCQ_upload" kind=pcq pcq-rate=0 pcq-classifier=src-addres...
by leon84
Fri May 28, 2010 2:40 pm
Forum: General
Topic: Bandwith Limitation
Replies: 10
Views: 1939

Re: Bandwith Limitation

http://wiki.mikrotik.com/wiki/Manual:Queues_-_PCQ_Examples just set pcq-rate=0 and max-limit=10M Then I created two pcq queues in this way: /queue type add name="PCQ_download" kind=pcq pcq-rate=0 pcq-classifier=dst-address pcq-limit=10M /queue type add name="PCQ_upload" kind=pcq...
by leon84
Fri May 28, 2010 2:07 pm
Forum: General
Topic: Bandwith Limitation
Replies: 10
Views: 1939

Re: Bandwith Limitation

what difficulties do you have? =)

in general, you should create PCQ queue with Rate=0 and max-limit=10M
Can you add routeros command?
by leon84
Thu May 27, 2010 6:23 pm
Forum: General
Topic: Bandwith Limitation
Replies: 10
Views: 1939

Bandwith Limitation

Hi to all, I have internet interface of routeros connected at internet at 20 Mbps in download. In another interface I have my lan. I would to devide equally the bandwith at users but limiting total bandwith at 10 Mbps and not 20. In which way is it possible ? Certainly with queues but I had some dif...
by leon84
Tue May 18, 2010 2:41 pm
Forum: General
Topic: ROS 5.0 beta
Replies: 4
Views: 1521

Re: ROS 5.0 beta

What are other installation methods?
try to use different installation method but cd-install to install 5.0beta2 on x86 box.
by leon84
Tue May 18, 2010 2:26 pm
Forum: General
Topic: ROS 5.0 beta
Replies: 4
Views: 1521

ROS 5.0 beta

Sorry,
but I have installation problem of ROS 5.0 beta on x86 pc without raid controller.
When iso image boot from cd rom I have :
Loading linux .....
Loading initrd.rgz ......
ready
and then the computer is blocked.
I try on different pc but I have always the same problem.
Can you help me?
by leon84
Mon May 17, 2010 5:55 pm
Forum: General
Topic: SCSI and SAS support in RouterOS
Replies: 104
Views: 42910

Re: SCSI and SAS support in RouterOS

I have this server: 4 x Dell PowerEdge 750 4 x Dell PowerEdge 850 4 x Dell PowerEdge 1750 2 x Dell PowerEdge 1850 3 x Dell PowerEdge 2950 2 x Dell PowerEdge R310 I would like to run Mikrotik Router OS on these servers all with DELL Perc RAID controller. It is very important for me to have raid suppo...
by leon84
Sun May 16, 2010 6:42 pm
Forum: General
Topic: DHCP Server and static ip address
Replies: 4
Views: 3105

Re: DHCP Server and static ip address

The manual covers all of that: http://wiki.mikrotik.com/wiki/Manual:IP/ARP#Reply_Only Set the ARP mode for the interface to "reply only" so that it responds to client queries for its own IP address, but doesn't query for client ARP but instead uses the ARP table as is. http://wiki.mikroti...
by leon84
Sun May 16, 2010 5:29 pm
Forum: General
Topic: DHCP Server and static ip address
Replies: 4
Views: 3105

Re: DHCP Server and static ip address

Set the DHCP instance to add ARP entries for clients, a set the interface to disable dynamic learning of ARP.
sorry can you traduce it in router os command please?
by leon84
Sun May 16, 2010 2:42 pm
Forum: General
Topic: DHCP Server and static ip address
Replies: 4
Views: 3105

DHCP Server and static ip address

Ho to all,
I configured my dhcp server on router os 4.6 with a "static only" leases that I configured manually for each host.
In any case there is a possibility that a user can assign to its pc a static ip manually in my network bypassing dhcp server. In wich way Can I prevent this one?
by leon84
Wed Apr 07, 2010 11:47 pm
Forum: General
Topic: Firewall and limit parameter
Replies: 5
Views: 5665

Re: Firewall and limit parameter

ok and the burst? in any case in which way is it possible to log user traffic on mikrotik? Yes. When the rule matches, the action gets executed. In case of 'limit' it only matches when that traffic rate is exceeded, so when the average traffic rate is under the specified limit, the rule doesn't matc...
by leon84
Wed Apr 07, 2010 6:44 pm
Forum: General
Topic: Firewall and limit parameter
Replies: 5
Views: 5665

Re: Firewall and limit parameter

Sorry , but I don't understand... mmmm.... Can you explain with a pratical example? I have a rule that log all incoming tcp traffic with dport 80. At the interface I receive in total 15 packets in 25 seconds. I am under the limit then I don't have any entry in log file right? limit=50/min,3 means &q...
by leon84
Wed Apr 07, 2010 6:20 pm
Forum: General
Topic: Firewall and limit parameter
Replies: 5
Views: 5665

Firewall and limit parameter

Hi,
I'm using Router OS 4.6 and I don't understand about limit attribute in the filter table:

The configuration of limit has:

Rate 50/min
Burst 3

What this means?
I think:
The router log at maximum 50 packets at minute (only packets that respond at the rule)
And what is the burst?
by leon84
Wed Dec 02, 2009 12:18 pm
Forum: Wireless Networking
Topic: Docs about mesh networking
Replies: 1
Views: 809

Docs about mesh networking

Hi can I have some docs about mesh network with mikrotik?