MikroTik

electravis

Found the answer and it worked had to add that json file

viewtopic.php?p=979827

electravis

Apple IOS just came out a few days ago with an update so I am not sur eif this is part of the issue or not. On ROS 6.42 my https hotspot works fine no cert errors everything is perfect. As soo as I upgrade it to ROS 6.48 IOS device connect wont redirect get connect no internet error and then if I tr...

electravis

Thank you

electravis

I am trying to rename a file during the ftp upload process. I want to give it the date and timestamp of the upload time. However I cant seem to figure out the variable or if its even allowed on an ftp upload. The upload works fine if i give the file a static name but not what i am trying to do. :loc...

electravis

I am trying to see if there is a specific log file or option to turn on to be able to see what the user was typing in as a password for the guest login page. All I can see is the username login failed invalid username or password. I would like to be able to se what passwords they were trying to type...

electravis

I have noticed that the web interface on the graphs is broken when i try to view them in https. If I do http the graphs show up. We need to be able to do https currently on version 7.1.5

electravis

I have had this issue for sometime. This happens with Ruckus and Entrasys WLCs. My router is used as a hotspot when I have my bridge settings use ip firewall checked my aps will not be adopted into the controllers. I have disabled all fw rules during testing and the only way it works is to uncheck u...

electravis

Perfect that's what I was missing the first part of the upload director once I add home/user/ it worked.

Thank you

electravis

So I have been trying to upload a file from a tik to an ubuntu ftp server. I just keep getting status failed. I know the ftp is setup correctly as I can use winscp with ftp option and login and create files with my user. I know the tik can talk to the server if I put in a wrong user name it comes ba...

electravis

I am trying to write output of my wifi snooper in the log file of the mikrotik. I have found how to write it to a txt file whcih I could then send off as an email but that would create and entire new process. Is there a way to write it into log or can the log read the txt file i have created and put...

electravis

Im am looking at using a wAP 4G kit and a mobile hotspot. I have heard that not all cell carries will support a device just because it has their sim card in it. If there is anyone currently doing this with a TIK in the US and what provider are you using?
Thanks

electravis

Hope someone can give me a good answer. I need a small switch 8 ports or less take PoE in and that can do both VLAN and IGMP. On the ROS side it looks like I have to go with a CRS3xxx model per article https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge#Bridge_Hardware_Offloading Also to confirm ...

electravis

So I have come up with what I call a workaround in case anyone else comes down this path. Number 1 you cant use ~ in search values in API and issue is that's what you have to use to search for messages with a certain topic or message. However you can also search by the buffer using API allowed comma...

electravis

I was able to get my entire log file to print out but now Im tyring to refine it to once certain topics. Treid a few different ways but cant get it to work. Not sure if because searching through the logfiles you use the ~ vs = here is what I currently have in the code $topic = 'hotspot'; $apiParamAr...

electravis

Im trying to be able to view the log file with an API call. I tried log/print with no success. Is this even possible in the API

electravis

I am trying to make a simple API that when ran will take the input of the user's IP address and search for it in the host list get the mac address and make that address a stored variable to be used in additional API coding. My first step is just trying to get the Paramateres correct for the info to ...

electravis

can you explain what you did there? I can't seem to understad the logic I have the same problem - I want to redirect my users to my page after login - but the captive portal is turn off after login did you mange to "Fix" this problem ? Thanks , Sorry been a while since Ive been on and had...

electravis

I am having some issues with API login still. I have tried all that was mentioned in this form and nothing seems to be working. Has anyone had success and is able to step by step it? I updated the Basta AP.php file tried changing the variables and still nothing is working for me. Here is the API par...

electravis

I'm tiring to search through my host list for a specific IP address and have the details show up in my browser. This is the code I have that give me all devices in the host list. $API->write('/ip/hotspot/host/getall'); $ARRAY = $API->read(''); print_r($ARRAY); I have tried several solutions I have f...

electravis

So I thought maybe this will help someone else who may have got hacked and didn find it yet. Came across one router that was hacked had no way to get to it to reset it. Luckily I have it email me backup configs so after lots of searching and trial and error, I got this https://github.com/BigNerd95/R...

electravis

Im wondering if there is a better way to do the following. Im not up to 100% on SSLs so hoping so. I have a Ubuntu server that I created ssl key on and then registered with SSL cert provider. I then took the cert and the key and copied them to my tik and applied. This then allowed me to turn off htt...

electravis

So i am trying to figure out the following not sure if this is possible with vlan tagging. What I have are rb260 1 RB260 is at IDF port 1 goes to sw1 ----- port 2 goes to sw2 ----- port 3 is the uplink I want to add a tag 10 to all incoming traffic on p2. This traffic along with the untagged traffic...

electravis

I have gone ahead and setup a userman server on ros 6.42.12 I then setup a remote router to talk to the userman server. When I try to do the signup page even with out doing a pay for option i get error connecting to server. However the user name has been created and works if I go back to the main lo...

electravis

Any update to allowing ssh to run in a script? Today I needed this functionality for the first time and after a few hrs of failure i googled and found everyone else with the same issue.

electravis

Still trying to figure out the above anyone have ideas?

I have now come up with this but it still copies the file down does not delete it

/tool fetch address=[:resolve xxxx.xxxx.xxx] user=xxxxxx password=xxxxx port=xxxxx mode=ftp http-method=delete src-path=($cbname . ".rsc")

electravis

I had successfully got a freeacs server online and working and doing what i needed. Was just not real impress with the GUI and the interaction. I now have got a Genieacs online and working. However I can not get it to do what I want. I am trying to disable a port. When I do it the the gui i get and ...

electravis

So probably a real stupid question but I cant find the answer nor figure out how to reproduce it. When I do a background scan on a mikrotik some of the SIgnals have an A and some do not under their Flag. I know that means Active guessing for the most part means you can connect to them. But if there ...

electravis

Well I figured it out in case anyone else is in the boat i am in all the right device parameters can be found when you show your device you then just edit and add or delete from the two files index_parameters.yml and summary_parameters.yml

electravis

Hoping someone can give a little help. Got Genieacs installed and running and talking to my device. The issues I have is under listing of devices nothing is showing up in the values. I followed the above suggestion of editing the two config files. This then populated the Software Version field but n...

electravis

Sorry not real up on all the ssl cert stuff but if I uncheck under settings "crl download" the error stops and all seems to still work as expected. I cant really find any info on what crl download does and if i even needed it.

Any input.

Thanks

electravis

Thanks for the info all I got from them was an email with the plaint text of the cert and ca in the email. So what the called the web server certificate. I copied that into text file and saved that as my .cert file What they called the Intermediate CA. I copied that into text file and saved as .ca N...

electravis

I have imported a ssl cert I got from digicert in order to use www-ssl and api-ssl. I created the cert on a linux box. Everything is working as it should I get that my tik web page connection is secure and the api is running over my secure port. However I am still getting in the log files "got ...

electravis

Yes yesterday I found newer api code when working on a different problem which also resolved this issue as well.

electravis

Thanks for the info yesterday I found the latest API code which included all the ssl api options i needed. Got it working after that.

electravis

So here is what I have done seems to work pretty well. So after you login the user profile adds you to a firewall list which blocks the connectivy checker for 15 secs before removing the user from the list. So this allows the redirect to happen to the post page because you are online but fools the c...

electravis

So I am trying to add SSL to my API calls. I dont have a lot of experience in this part but I can tell from other posts its more then just change the port in the code I am using. I am using the base API from * RouterOS PHP API class v1.4 * Author: Denis Basta I think its in the socket variable that ...

electravis

So I have a file on a mikrotik server. The mikrotik client will connect to server download the file and run the config and delete the file locally. What I want to see is if it can also somehow delete the file on the ftp server mikrotik. Or is this something I will need to get the server to do? Here ...

electravis

So I am trying to call the active user in my hotspot through an API call. The problem I am having is that there is I can only get the first 100 or so before it terminates. How can I get the complete list of active hotspot users through an api call?

Thanks

electravis

Well hit it enough and looks like this did it for meon logout

/ip firewall address-list remove [find comment="$"mac-address""]

electravis

So I have made some progress. I have the on login portion script working how i want it does exactly what I need. /delay 5s /ip firewall address-list add list=LoggedIn address=$address comment=$address However on logout it just deletes all my entries in the address list. /ip firewall address-list rem...

electravis

That first answer is probably perfect but the second will probably help me as well since after they timeout I want to remove them from this list.

Thanks

electravis

So this is what I came up with but not working

:global username [/ip hotspot active find user=$user];
:global userip [/ip hotspot active get $username address];
/ip firewall address-list add list=LoggedIn address=$userip

Any thoughts

electravis

So Im trying to make a script hat after the user logs in here IP address gets added inot he firewall/address list. I cant seem to find or figure out wthat i use to get there current IP address at login Im guessing I need a global variable to assign the ip to just not sure the cmd to get the ip #dela...

electravis

So Im trying to make a script hat after the user logs in here IP address gets added inot he firewall/address list. I cant seem to find or figure out wthat i use to get there current IP address at login Im guessing I need a global variable to assign the ip to just not sure the cmd to get the ip #dela...

electravis

So I am trying tomake a script that will write to a file all of the hostpot user info. From what I can tell I would have to do a print detail, print stats, and print status to get all the info i need and then merge them together in database somewhere. If I use the API this is possible but API can no...

electravis

Reaching out to everyone hoping for a solution or answer that makes sense. Maybe i just dont understand the https hotspot and trying to do something you cant. So I add my godaddy cert to the tik. I then go to hotspot select the hotspot make it https and select the godaddy cert. I next go to services...

electravis

So I had same issue. What you need to do is make sure when you are doing your file configuration in free acs. You are giving it the name with .alter at the end. it shoudl then show under jobs with the name xxxx.alter . Hope this helps.

electravis

Yes its not so much the get to the login https screen as it is to force the guest into seeing the post auth page with advertisements after login. Most of the cells use a dumbed down version to get to the login screen and then after login immediately shut down and never do the redirect to the post au...

electravis

So got it working probably stupid oversight on my part but after rereading and reading what normis had posted elsewhere figured it out. Under files scripts you need to make sure you are saving it with the name ext .alter. After I figured that out FreeAcs s working like a champ for what I needed.

electravis

So got it working probably stupid oversight on my part but after rereading and reading what normis had posted elsewhere figured it out. Under files scripts you need to make sure you are saving it with the name ext .alter. After I figured that out FreeAcs s working like a champ for what I needed.

electravis

So got it working probably stupid oversight on my part but after rereading and reading what normis had posted elsewhere figured it out. Under files scripts you need to make sure you are saving it with the name ext .alter. After I figured that out FreeAcs s working like a champ for what I needed.

electravis

I am trying to get the FreeACS working with TR069 client protocol on the mikrotik. Every time I try and send a TR069_Script job to the mikrotik it resets the mikrotik to default. All I am trying to do at this point is just get it to rename the identity is there something I am missing? I save this /s...

electravis

First thanks for the how to thekitchen. I was able to get it up and running with the latest mysql and ubuntu. Problem that I am having is I am trying to run a script from what I understand this is what i do. First I make a real simple .alter file with system identity set name=test12345 in theory thi...

electravis

Has anyone had any lukc with this. I have followed the links and read up on stuff but have had no luck trying to update say the ssid on 5 aps through the dude in one click. I found this but am not sure how to create the tool "And you could also use the Dude to invoke a tool (read: executable or...

electravis

So I may have this all wrong but I thought that if i set a static dns enter that this is used first prior to resolving out over the world. So example I have a static dns that point back to the controller 10.0.0.1 if i set the name to say test.net it will actually resolve out to the test.net web site...

electravis

So figured it out

viewtopic.php?t=53748

electravis

We are implementing a chrome cast solution called Sonifi Staycast at a few of our properties. The problem I am having is with the hotspot. If I put the cleint in pass through mode then the sonfi server sees there arp request with the correct mac address of the device. If I have the device login thro...

electravis

Im trying to see if this is even possible. So what I am trying to get arouns is the error you get when trying to do a redirect on an https request. As far as I can tell its not possible. However is this maybe possible but not sure where to start. Can I create some type of firewall rule the rejects, ...

electravis

I was trying to test some throughput one day at a site and noticed that all my btest from IDF to MDF would come up at 500mx900m. I was testing from a 1100 just had an IP on it not cfg to a CCR 1036 full up hotspot with lott of mangle rules and firewall rules. Thinking I may had a config issue in my ...

electravis

So I think I have beaten this to death googled all I can google and read all I can I hope someone has an answer for me. I am doing a hotspot with https: redirect. What I have working is captive portal and default chrome browser will redirect to my login screen with no ssl errors works fine. As soon ...

electravis

Thanks for the input on the upload and download speeds. It sounds like from you experience I have done all I can to increase the performance and have it at the best it will go.
As a side not I purchase a 70$ dlink router just to make sure it didnt work better and got maybe 120 meg on the download.

electravis

I am trying to determine what I can truly expect for bandwidth on a few router boards. Each of the tests i have done show different outcomes and then lead me to different theories as to why. My setup is a 1100 dude edition as a head end router. I can do a btest to 1100 from pc using btest program. I...

electravis

I want to make sure Im not missing anything. Back a few revs ago there used to be hotspot user profile advertise option. Went to go look to play with it todya on latest ros and its gone. Google search was not helpful either. Has this been removed from newer ros or moved?

Thanks

electravis

I am revisiting some code I did a year or so ago trying ot see if there is a better less breakable way to do this. I want to have a hotspot redirect to a local login page even when there is no internet. Currently I have a static dns entry that a script enables " .*\.* " however if stuff do...

electravis

I am running router os with 2 hotspots on it different IP ranges folders and vlans. If I have mac cookie turned on then it allows you to login toone hotspot and then switch over to the other without having to login. Is there anything simple I am missing?

electravis

So I am trying to determine what the max number of user connected to a hotspot could be. Yes I know there is a lot that can go into this primary the cpu and what you have the hotspot all doing. Does anyone know of a windows application that can load and run multiple web requests out off none stop? i...

electravis

I am trying to setup a Advertise on my hotspot which does not see to be working. I didnt find many links on setting it up other then enable it and set your values. So i am not sure if i have missed something or have something turned off that needs to be on. I also notice I try to print out detail bu...

electravis

Just an updated I upgraded to the latest FW and I am now getting 800 meg speed tests much better.

electravis

So I hope someone can help me here I have looked all over and could not find a very good answer to this. I have 2 RB1100 connected to each other with cat6. I do a UDP BW test from one to the other and then get up to about 900 meg. I do a tcp test between the two I get 377meg one way or 277meg x 277m...

electravis

So any updates to this any word. Unifi is about to roll out with there version of it.

electravis

I am trying ot get it when someone types in say helpme.com it redirects them to a page of my choice. I thought doing a static DNS would work but I can only do it by IP address so it can not go to hlepme.com/help.html?

Any creative thoughts on this one?

electravis

Hoping someone can help me here. i think I got most of what I need from qtree working. However my main q has max limit of 10 meg. If I have 2 queues under it q-A has priority 2 with a 7M Limit AT q-b has priority 5 with 5M Limit AT. I would think with the above q-A would get full 7M and q-B would ge...

electravis

Ok so what we did is if there is no internet the user gets redirected to a std html page dished out by the tik. Seems to work for all devices we have tested. First we have a static DNS entry that is disabled 0 XR .*\..* 10.200.20.1 10s Next we have a a netwatch rule that will either disable it if in...

electravis

So here is what I am trying to do. I have a 30x5 line from ISP. I then have 4 networks running on my mikrotik. I want to be able to say that at any time each of my 4 networks will have a guaranteed 6x1 speed. However if networks 1-3 are not using there bandwidth then network 4 would have full access...

electravis

Thanks APE.
I will try it again with two different devices that maybe what I am missing as I am only testing with 1 device.

Also I am connecting an RB750UP at the idf and a crs125-24g-1s-RM at the mdf

electravis

Any thoughts on the bonding?

electravis

Tried layer 2/3 on the bond same result. Tried 3/4 and it caused a broadcast storm.

electravis

Found it. Under tools do a tourch on the bridge and it will show you everyones bandwidth

electravis

Unfortunately not they have several dummy switches through out the office.

electravis

I know in hotspots you can see how much bw each user is using. However is there a way to see the same type of info when the mikrotik is only acting as a dhcp server no hotspot enabled?

electravis

Ok so I have tried bonding every way till Sunday I think and still have issues. My setup is as follows. I have my mdf in one building and idf in another. I currently can only use P2P over the phone pairs to make a connection. Each line can get me about 50 megs. I want to bond this two P2P lines so I...

electravis

I was just seeing if they have made it so meta router can run on the multi core line RB1100 AHx2 I still get system resource errors and have latest router board installed on it?

Thanks

electravis

Ok yeah I see what you mean the cpu maxxes with the tcp but not udp. I thought was some sort of overhead issues. As for my script put the same bonding on two router boards and connect port 4 and 5 together or whatever ones you want. Rember the ports you use cant be in a bridge you add the bonding po...

electravis

Ok so i just bonded two ports on a 750 up. I do a bandwidth test from the router board. If i select udp I get about 180 meg across the line. However if I do a tcp test I get about 50 meg across the line. I have to be missing something otherwise why would I even bond two lines together?

electravis

Sorry here is the full error and I updated to latest packages. updated packages root@OpenWrt:/# opkg install http://openwrt.pantele.com.ua/trunk/metarouter/pack ages/Packages.gz Downloading http://openwrt.pantele.com.ua/trunk/metarouter/packages/Packages.gz. Still get this error Downloading http://o...

electravis

Thanks Van9018 thats what I was afraid of

electravis

Yes was missing a dns address thanks for the tip now however I get this error Downloading http://openwrt.pantele.com.ua/trunk/metarouter/packages/apache_2.2.14-1_meta Collected errors: * pkg_hash_fetch_best_installation_candidate: Packages for apache found, but incompatib configured * opkg_install_c...

electravis

I want to have two different BW Qs setup when they first login they get a 1x1 connection then if they want to opt into something they can they get to a 3x3 connection. I can not see how to get them to be able to change there BW on the fly if the chose to opted in. Any thoughts?

electravis

No port 80 defined in ip services. Is there anything special i need to do for it to go over the vpn from an external address?

electravis

I can not for the life of me install the packages on my ddwrt system keeps getting errors. Any help root@OpenWrt:/# opkg install http://openwrt.pantele.com.ua/trunk/metarouter/pack ages/apache_2.2.14-1_metarouter.ipk Downloading http://openwrt.pantele.com.ua/trunk/metarouter/packages/apache_2.2.14- ...

electravis

That was it thanks again

electravis

So I am trying to see if this is possible or not and if it is then how to do it. I have a VPN server doing L2TP connections. Each remote connection is another mikrotik. I can manage the tiks remotely when connected to the mane vpn server network. However I want to be able to manage this tiks behind ...

electravis

I think I already had that or is it somewhere else? Copyright (C) 2006 OpenWrt.org config interface loopback option ifname lo option proto static option ipaddr 127.0.0.1 option netmask 255.0.0.0 config interface lan option ifname eth0 option type bridge option proto static option ipaddr 192.168.80.2...

electravis

Ok so I setup ddwrt on a meta router. I can get to the ssh local over the tik through putty so i am good to that point. However i can not get to ssh when coming in remotely. I tired port forwarding and even chaging the ssh port in case 22 was still be caught through the miktoiks interface but no goo...

electravis

The one thing I found that was missing was adding a ttl for the static DNS. If you do not add one it will set it to 1 day which when your hotspot comes back online will mess you up.

electravis

Figured it out there was another post i found http://forum.mikrotik.com/viewtopic.php?t=86552 i also added to that one to be sure to add ttl if you leave it at 1 day can really mess you up.

electravis

I am trying to do the following

When the internet is offline have them user redirect to an internal page on the mikrotik. My problem is it will only work when there is a internet connection. It gets hung up on resoling the users original url.
Any help
Thank

electravis

How can I disable the open status page? I do not want this window to appear?

electravis

So I tried /ip firewall address-list

add address=1.1.1.1 list=Trusted
add address=1.1.1.2 list=Trusted
add address=1.1.1.3 list=Trusted

/ip firewall filter
add chain=input src-address-list=Trusted

And i still can get in from any ip address

Is there a block rule i need to do as well?

electravis

I am looking for a Mikrotik contractor with Radius and Linux experience. We need help setting up a radius server database which guest users can authenticate to. Really need them to be in the eastern time zone but definitely in the U.S.

I can go into more detail if any one replies.

electravis

So want to see if anyone has any thoughts or ideas on the following: I want to have aps out in the filed connected to an ISP either by themseleves or behind a router that I have no control over. I then want them to VPN tunnel back to my hotspot gateway to be able to authenticate. After they authenti...

electravis

I want to create a firewall rule that only allows certain external IP addresses to get to my firewall. The ips would not be in any range so I am not sure how to enter that into my src:address

Thanks

electravis

Yes the reset works from the command line. The reset button finally worked after holding the button in turn power off leaving the reset button pushed in applying power and waiting for it to double beep finally reset consistently.

electravis

Ok so i have two hotspots setup on my Gateway with different ip ranges. My problem is if I connect to one hotspot and login. I then connect to the other hotspot and shoul dbe directed to a different login page. However it still sees me as logged in from the first hotspot and automatically lets me ba...

electravis

I am trying to reset my router board with the reset button. Which currently is not working. I go into system/routerboard/settings. I then change it to enable reset. The setting will not take. I just reboot it without a reset and the option set back to no also tried changing boot delay and it will no...

electravis

Finally got it to take. I think the issue was I was using an RSC from a master router cfg trying to load it on this other router. Once I manually loaded the rsc then saved it off again from this router. i was then able to get it to take the rsc file and work.

electravis

Hello Normis I did it the way you said. I doubled checked my rsc file and there are values in it. I open netinstall get the routerboard to show up in there. I start off with everything unchecked. I check Configure script and select my rsc file. I click install wont work unitl I select a package. I s...

electravis

So I got to the point where the boards makes its sucess sound for several minutes. However after reboot. The rsc cfg is not on the mikrotik.

electravis

So I got my rsc file I just cant figure out how to tell it to load it n the netinstall program. I went through the instructions but could not find anything.

Thanks

electravis

Is there anyway that when you hit the reset button you can have the routerboard default back to some previous setting you want vs all the way back to factory default?

electravis

Through put has been tested on both TCP and UDP. Now I finally found a laptop that would get me the speed I would expect. I have no idea why it works and the others don't other then just something with the WiFI card setting that is not obvious to me.

Thanks

electravis

Ok so I have two users and user profiles setup. Each user could have 1000++ people logged in as it. I need to setup two different queues for the two user profiles. What i dont want is each user to create a temp simple queue. As I can have 2000++ queues and from past experience with more then 10 queu...

electravis

it is internal using btest to a mikrotik switch

electravis

No the upload and download tests are done independently.

electravis

here is the firewall filter rule

chain=forward action=drop dst-address-list=external-ip
out-interface=ether1 log=no log-prefix=""

hope that helps

electravis

So I may have a very basic question but cant find an answer. We will just use 802.11N for this and the test was done with 3 different types of access point models and 3 different computers. So I connect up to the AP at 150 meg. With this speed I would expect in a clean environment to get 75x75 meg c...

electravis

got it working here is my script if anyone wants # Set needed variables :global extinterface "ether1" :global ExtIpListName "external-ip" :global extgw "" :global extip "" :global oldextip "" # Grab the current IP address on that interface. :local ex...

electravis

Ok i have it almost up and running. I just not sure how to get this portion to work correctly not sure what brackets to use for the /24

/ip firewall address-list add list=$ExtIpListName address=$extip/24

electravis

Ok so it looks like its only garbing the first number of the network address. it will grab the entire number of the ip address. i have updated all router fw and os in case but still same issue any thoughts?

electravis

Thanks again do you or anyone have an idea why I am not pulling the network address? I used the value network but does not work.

Thaks

electravis

Thats exactly what I am trying to do. With your code below however if someone plugs this into a network with a lan range of some thing that is not to the standard then there would be a problem with the rule. lets pretend thats the only problem. This is why i would want it to check there network addr...

electravis

This would be for several tiks that may show up anywhere on anyone's network anywhere. I think I may have the begins of what I need but a little help this code looks like it will give me what I want but I cant get it to give me the network address. I can only get it to give me the ip address I have ...

electravis

Ok so still no go. This is what I want to try and do. I have a mikrotik that sits behind a simple dlink network with servers and such. Without any of the firewall drop rules if I type in the IP of one of my servers on the dlink i can get to it from behind the tik which is what I do not want to be ab...

electravis

If i do ""e.g. drop all packets coming from the WAN interface that target the router itself (i.e. all "input" packets), and drop all packets from the WAN interface that target an IP in the local network."" Then I also lose all internet traffic unless I did it wrong. I j...

electravis

Ok so here is what I hope to do in a script. 1. My wan pulls a dhcp address say 192.168.1.50. 2. I want to then add a rule in my firewall based on this ip. So that it ass a rule that it drops all packets from dst address 192.168.1.0/24 Then say it moves to a new location and pulls another address 19...

electravis

I have been getting complaints from my client about speed issues. There are typical over 1000 active users that I share the BW across 3 100x10 modems. I have very basic PCQ in place which I am sure is no longer enough for this growing customer. I have noticed huge amounts of dropped packets in the Q...

electravis

Ok just wanted to post in case anyone else ever has the problem.
I added http://www.gstatic.com/ to Walled Garden IP List
I then removed www.google-analytics.com from Walled Garden IP List and placed it into the Walled Garden.

electravis

Yes I have wire sharked the connection and cant see anything to add to the walled garden. I have also added http://www.gstatic.com/generate_204 to the walled garden but still have issues. As I said as soon as I disable this url www.google-analytics.com in my walled garden I have no problems connecti...

electravis

Ok so I have found this very odd issue not sure if anyone can help. On our hotspots we run Google analytic code for the login page for various reasons. This means I have to add two items into my walled garden for it to work www.google-analytics.com and ssl.google-analytics.com. Everything has been w...

electravis

Thanks that was it I had missed a line in my php that refrened ip server varibales. Once I changed that to my vpn address it worked like a champ.

electravis

So I have several Mikrotik routers in the field that then VPN back to a mikrotik. My problem is the API always wants to be run on the VPN mikrotkik and not the Mikrotik in the field. The only way I can get it to work is to port forward the API port to the mikrotiks in the field. This will not work o...

electravis

So I have several Mikrotik routers in the field that then VPN back to a mikrotik. My problem is the API always wants to be run on the VPN mikrotkik and not the Mikrotik in the field. The only way I can get it to work is to port forward the API port to the mikrotiks in the field. This will not work o...

electravis

so simple thank you it worked

electravis

I just purchased two of your new R11e-5Hacd radios and plugged them into my RB912UAG-2HPnD and the RB912 does not see this board it will see other boards I plug in. I have tried both updating the router os and router firmware but still will not see the new board.

electravis

Ok since I already had this remote routers vpn back to a office mikrotik. I put a test webserver in the vpn mix. I stillhave the same problem though. For my API code to work I have to port forward the API port down to my vpn IP address. My guess is my VPN server mikrotik is doing something with the ...

electravis

So I have some APIs in php that create my users with what ever they enter for a user name and room number. This all runs off of my linux server and runs well as long as the mikrotik is the head end router. As soon as I put it behind another router I have to port forward the api port down to this mik...

electravis

I have several hotspots that recently CPU has hit 100% due to users using 100++ open connection in my firewall. If I put the user in bypass or they auhenticate then whatever it was that was trying to get out gets out and all is well again. Most of these seem to be weather aps and facebook games that...

electravis

I am trying to see if there is some way to run the following from an api

ip hotspot active>> print where idle-time < 00:03:00

Whatever I try I get invalid sytax errors

thanks

electravis

So I came across this interesting problem the other day. I have SIP phones running at my office. In there cfg file where they are supposed to get the SNTP addreess. Sometime ago i noticed the time no longer correct. After much frustration I found the phones were pulling the SNTP address off the mikr...

electravis

So I have been trying to get User manager with hotspot working for sometime. Mikrotik support got a little further but I am still having great difficulties. I am trying to run both user manager and radius server on the same box. With a paid for solution. My first problem is even if i create a test u...

electravis

Anyone have any help. I too have this same issue everything works great but cant get my payment options to show up.

electravis

I am going to try and use this software. Accessmanager.in I just want to make sure the following before I create a test server.

1. Can a user create there own user name and password to login with.
2. Is there a pay for use option and if so what else do I need to set it up?

Thanks

electravis

Anyone ???

electravis

Ok so I am trying to setup my mikrotik to be able to take payments right now I guess paypal would be the simplest and go from there. I have my Radius all setup and working I can have a test user and login with him. However I want to have a login page come up and give the user an option to pay for us...

electravis

Well we are pulling apart the configs 1x1 so far for the DNS cpu maxing out we somehow had proxy-arp enabled on the hotspot we set it back to arp and that one is now working fine. When we figure out the L7 i will post back thanks.

electravis

I dont want to sound stupid but how is this going to help me. What am I looking for?

Thanks

electravis

I have sent several emails to support now and have had noting back.... I have over 2000 thousand aps in the field all with potential problem... I have still not heard anything and am still having my aps reboot because of the following error dec/27/2013 01:25:58 system,error,critical System rebooted ...

electravis

So I have probably about 150 mikrotiks gateway in the field. They all run great however every so often one or two like to max there cpu out. I have no idea why this would happen or where to look for this specific issue as it only seems to happen on certain GW and there configs look the same as the r...

electravis

I figured it out at some point we had checked under user profile transparent proxy not sure why we did that. As soon as I unchecked it the web proxy went back down to nothing.

electravis

Ok so here is what I am trying to figure out. I have two tags 10 and 20 coming into my 450G ports 2-5 are currently bridged and each tag goes to a separate hotspot on the 450G. All is well. Now I want to do the following. Still have tag10 traffic go to my hotspot say ports 2-4 bridged. Then i want t...

electravis

We have a hotspot running. The guest gets redirect to our login page to login. If I watch my cpu I see web proxy going up. However I do not have web proxy turned on. The only proxy is for the web redirection after authentincting they should not do any proxy anymore but they still do. If i turn my ho...

electravis

Ok so to be able to do web redirection webproxy must be running? However even after authenticating all traffic is still going through the web proxy which is then killing my cpu for 150++ authenticated users. Is there anyway to get around this?

electravis

Thanks for the info this will be very helpful but what if I want to have the remote side B pull dhcp from side A and see computers on side A IP range 100.0? Can I set up two pools 192.168.100.0 - 126 and 192.168.100.127-255? Also under the relay what would I put for the interface the tunnel? Thanks ...

electravis

I am trying to figure out how to setup and send DHCP requests over a VPN connection and what VPN connection to use. All i want to do is have my remote office mikrotik router vpn to my main office and then any computers that plug into my remote office router pull an IP address from my main office rou...

electravis

Not sure where to post this so I will start here. I am trying to find a way if I can grab the live data graph from the web interface under /webfig/#Interfaces.Interface1 at the bottom of this page is a real time graph. That I want to place on a different webpage? Anyone??

Thanks

electravis

I am trying to find out what the message disconnected, registered to other device in network means?

Thanks

electravis

I am trying to get the CPU function to work on the dude. The dude is insatlled on the mikrotik GW. My problem is it will not register the cpu load at all and generate error I have used the default settings to no avail Type: Function Agent: default Available:if(cpu_usage()>0, 1, -1) Error:if(cpu_usag...

electravis

I am trying to setup the Dude to send an email when the cpu process gets over 80% however I can not even get the dude to say my cpu probe is online. Any help?/ This is running on a RB 493G

thanks

electravis

Yes if I can have a script that sends me an email when cpu hit over 80% and what that percent is would be great.

electravis

Is there a way to have the mikrotik send out an email when the CPU load hits a certain percent?

electravis

Thanks for all your help!!!!!

electravis

Thanks I had been playing around with it and just set dst-address-type to be off and started to work for me. Is there a reason to put dst-address-type=!local or can I just leave it not set?

Thanks again for all your help

electravis

For this testing I tried to make it as easy as possible so I only have one mangle rule: 0 chain=prerouting action=mark-routing new-routing-mark=11.5 passthrough=yes src-address=192.168.11.5 dst-address-type="" hotspot=auth in-interface=Hotspot_BR Here are all my nat rules Flags: X - disabl...

electravis

Unfortunately this still did not work any more thoughts? I also tried moving the rule you gave me both to the top and the bottom and in between my other nat rules.

Thanks

electravis

I have been trying to do load balancing with a hotpsot for sometime now. Each time i come up with a new way it looks to work but then everything eventually goes out the default route. My latest and simplest attempt is to send a set range of IP out WAN1 and the other set out WAN2. This works fine unt...

electravis

I want to be able to set a certain range of DHCP IPS to go out ISP1 and a second set of DHCP addresses to go out ISP2. Any thoughts.

electravis

We have an environment using about 50 of the RB711-2hnd with outdoor 16 dbi arc wireless antennas. We have the radios turned down to 300 MW and spread out on channel 1,4,8,11 to minimize cross talk. The aps will seem to run fine for some time. Then all of a sudden people are connected to the aps get...

electravis

Ok so I have been at this for a bit playing with routes and no luck. I have a cisco router as my head end. I then want to connect a mikrotik behind the cisco on the lan side pulling a dhcp 192.168.3.x and connect up to my mikrotik vpn server at my office internal range 192.168.0.x. This part is done...

electravis

I have been trying to determine the best settings for the wireless. For the most part all the default settings seems to usually work well. However every so often they do not excellent signal and ccq put throughput just sucks. If I put a different ap in the area such as a rucks ap the problems go awa...

electravis

Anybody??

electravis

How can i configure the hotspot to ALERT users once their uptime limit is below 5minutes? and an option for them to recharge or add additional credit unit to the existing one before the hotspot log them Out.

electravis

What more info are you looking for? here is a detail print of my wireless settings R name="wlan1" mtu=1500 mac-address=D4:CA:6D:56:EC:76 arp=enabled disable-running-check=no interface-type=Atheros 11N radio-name="D4CA6D56EC76" mode=ap-bridge ssid="HOTAIR" area="&qu...

electravis

I have 4 high gain antenna on a pole. They are on channels 2,4,7 and 11. The snr from clients looks great 40+ snr the ccq looks great 80 or more. However the throughput sucks. I get TX at 54mbps and RX at 1mbps every so often it will jump up to 5 or 6 mbps and the user can browse for a few minutes t...

electravis

i had found out what the issue was my entire 14 range was masquerade before the masquerade rule of 14.100 once I moved the 14.100 rule above the 14 range rule everything worked.

electravis

I have tried setting up NAT per the mikrotik user guide however I have the following problem: I can get to my device externally with the natted address. However from internal to external it is still picking up the mikrotik wan address .230 and not the spare ip address .227 I have used the following ...

electravis

Thanks got it working

electravis

Ok so I have a simple vpn up and running between two Mikrotiks. They can ping each other and I can get to the remote winbox interface on the internal vpn address. Now what I am trying to do is be able to access the web interface of my APs over this VPN. They are all on ip range 192.168.10.0/24 how d...

electravis

Is there a parameter I can use to pass the user name and password through webfig to do auto ogin so to speak?

electravis

I am trying to figure out how to show more columns or remove columns in webfig?

Thanks

electravis

I am trying to see if there is anyway to password protect the graphs on a mikrotik?

electravis

I am trying to find out if you can use router os as a radius server? I have seen artciles online refrence to it but when I search the forums I see nothing. Can anyone shed some light?

electravis

No I dont disable on fail over because then check gateway would not work or am I worng in that thought? I tested again and this time the failover took about 2 minutes to work all the way I wanted it to. Then next test took 10 min. I have tried disabling ether 1 and rebooting but wouldnt go either. F...

electravis

Feklar any thoughts to my above question?

Thanks

electravis

Just to let you know .157 just started to respond.

electravis

Ok got that part working. Now my only issue is after the main wan connections fails the second back IP address .157 losses it remote access. Usually it take a minute or two before it comes back however now it does not look like it wants to respond anymore. I can still surf out from the address i jus...

electravis

Ok the last issue I have when I fail my main isp connection port one. The backup connection comes right up on both IPS however the Ip I am forwarding over to the internal dlink will not allow internet traffic to go out unitll I disable the nat forwarding rule for the dlink when it is going through m...

electravis

Any thoughts on the above

electravis

Ok so i thought I got it However it just fixxed the main failover portion. I still can not get failover with staict mapping to other devices behind my mikrotik to work below are the details you asked for. [admin@MikroTik] > ip address print detail Flags: X - disabled, I - invalid, D - dynamic 0 ;;; ...

electravis

In my testing I had turned off one of my input routing marks turned on and working fine... [admin@MikroTik] /ip firewall mangle> print detail Flags: X - disabled, I - invalid, D - dynamic 4 chain=input action=mark-connection new-connection-mark=wlan1_conn passthrough=yes in-interface=ether1 5 chain=...

electravis

Here is what I am trying to do. Two ISPs 192.168.10.x and 192.168.14.x I want to setup failover which I have done and is working. Now I want to have other devices behind my Mikrotik that get other static IPs in my range. So if I have a dlink behind my mikrotik at 192.168.0.50 i want to set it to NAT...

electravis

What I am tring to do is have a vpn connection. Mikrotik VPN server with 50++ mikrotik routers as vpn clients connecting up to the server. I have everything working the way I want expect for one thing. I would like to be able to bring up winbox and see all the Mikrotik vpn clients. My other attempt ...

electravis

Just in case anyone was wondering we had to upgrade to rb 1100ahx2 in order to have enough memory.

electravis

Ok following this arcticle I have my vpn up and running http://wiki.mikrotik.com/wiki/VPN_(any_type)_between_2_Mikrotik_routers_and_no_static_IP_addresses However I want to be able to open winbox up connected to my Server MT and be able to see all my Client MT show up. I have tried a few things but ...

electravis

I would have to say no. Out of every ten one simply falls off on me. Some have even broken during shipment. On the other had the cat 5 connector does seat much better in these then the metal ones.

electravis

I am trying to wds two mikrotiks togther and the wds link is getting assigned its own static IP address any reason why.

electravis

For sometime i have been battling poor CCQ nad TX rate. RX always seemed to work. It was to the point that an engenius access point was working better then my mikrotik AP. Today i went through the mikrotik and all of a sudden I changed Rate Selection from Legacy to advanced and bam all my number wen...

electravis

I think I got the just of it but what would be the best worst numbers to see? Before link becomes unusable?

electravis

I have some hopefully simple questions using mikrotik rb711 and an 802.11 b/g/n access point. When I look at the registration table some numbers do not make sense and or what is a good value range? TX/RX Signal shows 0/-74 why do I see a 0 for TX on my rb4ll I just see -73? TX/RX CCQ is this even wo...

electravis

Today I noticed my cpu on mikrotik RB493G running at about 100%. I went into the profile and noticed the web-proxy running at around 40%. Currently I have about 100 people logged in and 500 in the host list. This is not out of the ordinary for this location but this is the first time I have seen my ...

electravis

I have been looking through the forums trying to find out how to setup a dedicated backhaul link that will give me at least 100/100 such as the sxt 5-Hnd. I am using 2 router boards 433 with 5.8 FW. Wireless card I am using R52Hn but have tried others as well. Here is what I have tried and results N...

Search found 274 matches