Community discussions

MUM Europe 2020

Search found 23 matches

by vladoboss
Thu Dec 26, 2013 11:56 pm
Forum: General
Topic: Full funcionality of openvpn server on RouterOS
Replies: 1
Views: 638

Full funcionality of openvpn server on RouterOS

I want to use openvpn server on Mikrotik with multiple Mikrotik routers as clients. How can I propagate and receive routes automatically on openvpn server? I don't want to use Linux machine as a server because my company have bought large quantity on Mikrotik routers and I want to use unified soluti...
by vladoboss
Mon Feb 25, 2013 9:46 am
Forum: General
Topic: ipv6 routing now working
Replies: 22
Views: 3710

Re: ipv6 routing now working

For default GW I use: gateway=fe80::1%ether1
by vladoboss
Mon Feb 25, 2013 12:37 am
Forum: General
Topic: ipv6 routing now working
Replies: 22
Views: 3710

Re: ipv6 routing now working

OK problem solved. I ask my ISP to add static ipv6 route towards my WAN interface "ipv6 route 2a01:5b8:a1:8500::/64 2a01:5b8:a1:8500::11 eth0.500" and now everything is working :-) The problem was because my LAN wasn't in the same vlan with their ipv6 interface, so neighbor solicit wasn't able to re...
by vladoboss
Sun Feb 24, 2013 11:07 pm
Forum: General
Topic: ipv6 routing now working
Replies: 22
Views: 3710

Re: ipv6 routing now working

OK I contacted my ISP and the situation is folowing. They suggest me to use network 2a01:5b8:a1:8500::/56, but with no success. They told me that GW address is on my local vlan and their network is 2a01:5b8:a1::1/48. I put first 2a01:5b8:a1:8500::11/56 the second one 2a01:5b8:a1:8500::11/64 on WAN i...
by vladoboss
Sun Feb 24, 2013 1:53 pm
Forum: General
Topic: ipv6 routing now working
Replies: 22
Views: 3710

Re: ipv6 routing now working

You got me, I was hiding the real ip :-) The pool I got from my ISP is 2a01:5b8:a1:85::/56 In any case, it doesnt work this way. First when I add ::1/64 on bridge interface it didn't advertise anything from pool. Default gw defined as gateway=fe80::1%ether1 is accepted but I can't ping anything outs...
by vladoboss
Sat Feb 23, 2013 1:37 pm
Forum: General
Topic: ipv6 routing now working
Replies: 22
Views: 3710

Re: ipv6 routing now working

No it does not work this way. I cant even ping the pravious default gw ping6 2a01:5b9:a1::1 from router I didn't use ::1/64 as internal ip address beacuse it didn't advertise anything to LAN devices. Here is my settings /ipv6 address add address=2a01:5b9:a1:85::1/64 advertise=yes disabled=no eui-64=...
by vladoboss
Sat Feb 23, 2013 1:54 am
Forum: General
Topic: ipv6 routing now working
Replies: 22
Views: 3710

Re: ipv6 routing now working

I'm clearly aware that there is no NAT in IPv6.
And yes, everything is correct what you said about my needs for ipv6 network.
I have a static ip assignment.
by vladoboss
Fri Feb 22, 2013 8:59 pm
Forum: General
Topic: ipv6 routing now working
Replies: 22
Views: 3710

Re: ipv6 routing now working

I managed to solve the problem. I made a bridge between WAN and LAN interface and now I have ipv6 internet from my laptop. I'm network engineer, and this make no sense to me why I must create a brigde to get ipv6 routing. Nevertheless hope this will help some other martyr in ipv6 world :-) This is d...
by vladoboss
Sun Feb 17, 2013 11:43 pm
Forum: General
Topic: ipv6 routing now working
Replies: 22
Views: 3710

Re: ipv6 routing now working

I change the address to 2a01:5b9:a1:56:2::1/56 and it still ping. In the mean time I change the external address to 2a01:5b9:a1:85::/56 and internal to 2a01:5b9:a1:85::1/64 and for a short period of time I was able to ping and traceroute from 2a01:5b9:a1:85::1. Then I noticed that I cannot ping from...
by vladoboss
Sun Feb 17, 2013 9:50 pm
Forum: General
Topic: ipv6 routing now working
Replies: 22
Views: 3710

Re: ipv6 routing now working

No that way I can't ping anything from router. I suspect that my ISP router doesn't know where is network 2a01:5b9:a1:56:1::1/64 . 2a01:5b9:a1:56::1/56 is directly connected, and that is why it returns the ping. I see the packets from 2a01:5b9:a1:56:1::1/64 exiting the router via ether1 with torch, ...
by vladoboss
Sun Feb 17, 2013 7:15 pm
Forum: General
Topic: ipv6 routing now working
Replies: 22
Views: 3710

Re: ipv6 routing now working

Here is my autoconfigured ip adresses on my laptop: wlan0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000 link/ether 00:1f:3a:14:0c:f3 brd ff:ff:ff:ff:ff:ff inet 192.168.2.101/24 brd 192.168.2.255 scope global wlan0 inet6 2a01:5b9:a1:56:441:10fe:3e4d:ff54/64 scope global temp...
by vladoboss
Sun Feb 17, 2013 7:10 pm
Forum: General
Topic: ipv6 routing now working
Replies: 22
Views: 3710

Re: ipv6 routing now working

No, I have tried ping from my laptop first. I'm pinging from LAN ip address for easier test. If it works from my computer, it will ping from LAN ip address to.
by vladoboss
Sun Feb 17, 2013 4:06 pm
Forum: General
Topic: ipv6 routing now working
Replies: 22
Views: 3710

ipv6 routing now working

I have a native ipv6 addresing from my ISP, but I cannot route any traffic from LAN network. Here is my address setup: /ipv6 address add address=2a01:5b9:a1:56::1/56 advertise=no disabled=no eui-64=no interface=ether1 add address=2a01:5b9:a1:56:1::1/64 advertise=yes disabled=no eui-64=no interface=b...
by vladoboss
Sat Aug 18, 2012 2:33 pm
Forum: General
Topic: 6rd support?
Replies: 23
Views: 9492

6rd support?

Is 6rd planed for implementation anytime soon? http://en.wikipedia.org/wiki/IPv6_rapid_deployment
by vladoboss
Thu Feb 03, 2011 12:35 pm
Forum: General
Topic: Passwordless ssh login
Replies: 18
Views: 19359

Re: Passwordless ssh login

In new beta version this feature is enabled. For users that have key associated, password login is disabled.
by vladoboss
Fri Jan 28, 2011 1:09 pm
Forum: General
Topic: rsa key support in ssh?
Replies: 15
Views: 15628

Re: rsa key support in ssh?

My bad :-( Key is stored in /home/username/.ssh/ but it was not named by default name id_dsa so ssh client wasn't able to find it. I renamed the key and now everything is ok.
by vladoboss
Fri Jan 28, 2011 11:45 am
Forum: General
Topic: rsa key support in ssh?
Replies: 15
Views: 15628

rsa key support in ssh?

Is it planed rsa key support in ssh? I have zillion Linux machines on which I have one rsa key, and only for Mikrotik routers I have to use dsa key, which is somehow frustrating (have to specify path to dsa key on each login). I don't use putty, just in case someone suggest me to save my sessions, I...
by vladoboss
Fri Jan 28, 2011 11:33 am
Forum: General
Topic: OpenVPN - UDP?
Replies: 59
Views: 28070

Re: OpenVPN - UDP?

+1 for UDP
+1 for LZO
by vladoboss
Wed Oct 27, 2010 8:52 pm
Forum: General
Topic: ipv6 routing for LAN
Replies: 6
Views: 1330

Re: ipv6 routing for LAN

When using 6to4, you must have addresses in 2002:aabb:ccdd::/48 range, where "aabb:ccdd" is derived from IPv4 address. For local subnets you need /64, so it leaves you only "xxxx" part that you can change any way you want: 2002:aabb:ccdd:xxxx::1/64. Instead of 2002:c0a8:201::1/64 use e.g. 2002:551e...
by vladoboss
Wed Oct 27, 2010 7:38 pm
Forum: General
Topic: ipv6 routing for LAN
Replies: 6
Views: 1330

Re: ipv6 routing for LAN

Post the configuration you applied, at a minimum "/interface 6to4 export" and "/ipv6 export". Your descriptions are much too vague to even guess. Can you ping across the tunnel interface to the other side directly from the router? /interface 6to4 export # oct/27/2010 18:27:52 by RouterOS 4.11 # sof...
by vladoboss
Mon Oct 25, 2010 7:19 pm
Forum: General
Topic: ipv6 routing for LAN
Replies: 6
Views: 1330

Re: ipv6 routing for LAN

I followed this manual too, regarding Lan segment address block (I just convert my private ipv4 address to ipv6) but no success. I don't need ospf so I didn't follow this part. Only 6to4 tunnel and Lan segment.
by vladoboss
Sun Oct 24, 2010 10:24 pm
Forum: General
Topic: ipv6 routing for LAN
Replies: 6
Views: 1330

ipv6 routing for LAN

I managed my routerboard to ping ipv6 addresses on internet via 6to4 protocol. I was using this manual http://wiki.mikrotik.com/wiki/Manual:IPv6_Overview (section 6to4 tunnels). But how can I manage my LAN clients to get access to ipv6 internet? I tried to translate the LAN ipv4 address 192.168.2.1 ...
by vladoboss
Mon Feb 01, 2010 12:14 am
Forum: General
Topic: Passwordless ssh login
Replies: 18
Views: 19359

Passwordless ssh login

Is there any way to configure the Mikrotik router to accept login only with ssh key, no passwords? In Linux this option is available in /etc/ssh/sshd_config and you edit the following line like this: PasswordAuthentication no This is the most secure way of using ssh, as brute force password attacks ...