MikroTik

Gareth

I would also like to know how to do this. Anyone?

EDIT: I'm using User Manager 5

Gareth

Okay, so maybe the problem is that the "vouchers", "subscribers" and "holidaymakers" customers need to have owner permissions, because only a customer with owner permissions can be a subscriber . So based on this premise, I cleared the database and added all three as ow...

Gareth

Okay, so I've managed to get this working (sort of...) in the v5 user manager that I'm testing with. I have my customers set up like this: http://i.imgur.com/iuovh.jpg ... and my user was set up like this: http://i.imgur.com/afISr.jpg With this setup, if I went to http://10.1.1.10/user?subs=subscrib...

Gareth

Yes, the url I tried was http://10.1.1.10/user?subs=subscribers, where "subscribers" is the public id of the user's owner (customer)

Gareth

There is no such page /login.

Yes there is - it's on the hotspot. User first logs on to the Hotspot at 172.23.0.254/login and then tries to login to the user manager at 10.1.1.10/user, as described in the link you posted.

Gareth

Yes, users login via hotspot. Hotspot IP is 172.23.0.254 and it uses the user manager on router IP 10.1.1.10 as its radius server. User "gareth" is set up as a user at 10.1.1.10/userman http://i.imgur.com/cRJy9.jpg So, if I login as user "gareth" at 172.23.0.254/login and I proce...

Gareth

Okay, so I've discovered that users are supposed to be able to login and check their usage here, http://[my-router-ip]/user, but it doesn't work... it just says "invalid username or password" when I try it. Thoughts anyone? Am I doing something wrong? I've tried doing this with v4 and v5, ...

Gareth

Is there a URL that users can go to where they can see how much data / time they have used and how much they have remaining? I'm using v5.16.

If there is no URL, then are there some server variables I can use to display that information on the Hotspot status page?

thanks,

Gareth

Gareth

So I ordered the RB2011LS-IN and now I find that it only contains 61.4MB HDD space... WTF! This is what Mikrotik Sales said to me before I ordered: Hello, Thank you for interest in Mikrotik solutions! There are 512mb NAND memory available on RB2011LS-IN. Looking forward to hear from you soon! -- -- ...

Gareth

Try installing 4.x RouterOS demo on x86 box (into some VM for example), import your UM settings on this x86 box, then upgrade it to 5.x and then move UM settings from there to your RB2011. The following download links might be useful for you: http://download2.mikrotik.com/mikrotik-4.17.iso http://d...

Gareth

Hi, What is the best way to move User Manager from my RB750G (v4.6) to my new RB2011LS-IN (v5.16)? I have nearly 800 users on my 750G with less than 4MB space remaining. I've tried exporting the user manager setup to a rsc file and then importing it to the 2011LS-IN via the terminal, but a lot of th...

Gareth

I've find a way to do this using Hotspot user profiles, address lists, firewall mangle rules and pcq queues. Downsides are that you have to create a new hotspot user profile, mangle rules and queues for each account, and you end up with loads of mangle rules, which uses more CPU. I create the follow...

Gareth

I emailed Mikrotik Sales and they answered my question. It contains 512MB NAND memory.

Gareth

Hi guys, Does anyone know how much flash memory the RB2011LS-IN has? It is not mentioned on the datasheet. I ask, because I'm looking for a replacement for my 750G which has 4MB left out of an available 61.4MB. It's running a RADIUS server and I have to delete User Manager sessions once a month to p...

Gareth

I'm running v4.6 and when I add the code via the terminal I get an error with this piece of code: add action=add-src-to-address-list address-list=24-hour-list address-list-timeout="1d 00:00:00" chain=bad-host-detection comment="If seen 20 time in 30 seconds add to the one day block li...

Gareth

Wow... what a facepalm moment! I can't believe I didn't think of that. Thanks VERY much, Tim. Problem solved! EDIT: I should also point out that the reason it was working for some users, was because I had added a route to a small ip pool that I had been using for testing purposes earlier in the week...

Gareth

Hi, I hope someone can help me with this as I've been struggling with it for the last two days. I have two routers: A hotspot runs on Router A (172.23.0.0/24) and masquerades all traffic going to Router B (10.1.1.0/24). Router B connects to the Internet via an ADSL line. I connected a second ADSL li...

Gareth

I've tried that but still get the same result. Do you think my testing might be flawed? Could I be having trouble because I'm testing a call between two computers on a NATed network? You see, in an attempt to avoid over matching I configured my address list adding rule to ignore the public IP of my ...

Gareth

That's what I'm doing. I use the hex of my static public IP as the layer 7 protocol in the format mentioned above. I then have a mangle rule that adds IPs to an address list using that L7 protocol. Another two mangle rules mark all connections to and from those IPs and the 4th rule marks all packets...

Gareth

Just thought I'd mention that it's not as good as I originally though it was... it only seems to pick up the "Echo / Sound Test Service" calls, nothing else.

Gareth

You guys are over-complicating this :) It's a privately owned 3 star hotel in a small South African village by the sea where people go for their summer holidays. There is no 3G or ADSL available there and the guests just need basic Internet access to check their emails and do Internet banking. The h...

Gareth

Thanks fewi, I intend to implement firewall rules to secure the hotel's network, while still allowing access from the POS devices. I need to use NAT because a) I want to rate limit all of the hotel's office computers as a WHOLE at the hotspot router and it would help to have them all on the same IP ...

Gareth

The hotel would like their network to be private and separate from the wifi network which the guests will be using to access the Internet. Their private network is in the 192.168.0.0/24 range and they don't want it to be changed, my network is 192.168.1.0/24. Guests will not be using the Hotel's ban...

Gareth

I need some advice please. I need to connect a hotel to my wireless network and I'm testing the configuration before I install it. I'm installing a RB433 v4.17. The Hotel's office network is on ether1 and is NATed. ether2 connects to their existing WiFi network (for guests) which is on a different I...

Gareth

I don't see what's wrong with that configuration - looks like it should work. That's what I thought. I've been searching the forums and re-reading the wiki all day, but but I just can't see where the problem could be. Have you tried emailing support@mikrotik.com? Nope, but but I'll give them a buzz...

Gareth

I can also confirm that the problem is definitely with the pcq queue type. I just changed both the limit-at and max-limit values for the "basic_download" queue, to 256k. I tested again and found that it limited the user correctly. e.g. 7 name="basic_download" parent=Total_downloa...

Gareth

I've been at it all day but I can't get this to work. I've disabled every mangle rule and queue, except for the ones posted above, and I still have the same problem. The only thing I've discovered is that the user does not actually have maximum d/l speed, but rather around 3 times the speed of what ...

Gareth

Just to make sure I wasn't going mad, I downgraded to v4.17 and it worked fine. Then I upgraded to v5.5 again and it stopped working. Can you post your relevant configuration? It is kinda hard to guess at a root cause with only a vague description to go on. Sorry about that. Forgot rule #1! :) Here ...

Gareth

I set up QoS and PCQ user queues recently on the same router (RB433 v4.17). I tested it and it was working without any problems. I didn't implement it though, because I wanted to allow bursting for individual users and so I had to upgrade to v5.x first. But after the upgrade to v5.5 my PCQ user queu...

Gareth

Hi, I have a client router with static public IP of 192.168.1.5 on my Hotspot network. The router's private LAN network is in the 196.75.68.0/23 range. I use this NAT rule, which I found on the Wiki, to "hide" the client's private network from my public network: /ip firewall nat chain=srcn...

Gareth

As an earlier poster in this thread mentions, ROS seems to prefer the ASCII form to the hex form for certain characters, so just replace the \x29 in the pattern with the \) that it recommends. Ah, thanks. I must of missed that. I had been using the [\29] regexp, but wanted to try matching my entire...

Gareth

/ip firewall layer7-protocol print # NAME REGEXP 0 skypenack [\x4a\.\x3a\.\xda\.\xca] ... This regexp will match if the first seven bytes of the packet are /x4a, '.', /x3a, '.', /xda, '.', and /xca. We want to match the first four bytes with the IP address (there are no ASCII '.' characters between...

Gareth

I'd be really interested to find out if you found your problem, bigguns. I'm having the same problem on one section of my wireless network. i.e. failed to add dynamic host 00:27:22:08:0C:D8/172.23.0.82, ip 172.23.0.82: to-address is already used. Network layout is like this: MT Hotspot (433AH v4.6) ...

Gareth

if you don't want to use ip binding, then enable mac address authentication in your hotspot server profile and create user with the mac address of your dlink router under users. thanks, let say i have 5 Worksttaion inside behind router, this workstation will not ask hotspot login credential. is thi...

Gareth

Just out of interest - long weekend so can't access a lab until Tuesday - does it stop working when you remove the out- and in-interface qualifiers? I do not run Hotspots on software bridges so I am not entirely sure how that affects packet flow. As far as I can tell that's the only meaningful diff...

Gareth

Okay, I've run a few tests and I seem to have got it working! Here's the test configuration, for those who are interested: /ip hotspot user profile print name="multiuser" address-pool=hs-pool-2 keepalive-timeout=5m status-autorefresh=2m shared-users=unlimited address-list="multiuser&q...

Gareth

btw, just so I know. Is there a reason why the mangle in my first post doesn't mark all packets? have I done it wrong?

Gareth

Many thanks Fewi,

I came across that twice while I was searching for an answer, but I couldn't make sense of it and wasn't sure which part / parts applied to what I'm trying to do. I guess I've still got some learning to do....

Gareth

you have seen it on your mangel config and no traffic shows? The mangle does mark some packets in the first example, but not all of them. In the second example, the dynamically created mangle rules do not add packet marks when the user sends / receives data on the network. Look at IP 172.23.0.13 in...

Gareth

But prerouting is the only chain I can use that will mark a packet before it gets to the queue, or do I understand the packet flow incorrectly?

Gareth

btw, I've also tried changing the user profile to add a packet mark to all incoming and outgoing packets, like this: /ip hotspot user profile print name="multitest" address-pool=hs-pool-2 idle-timeout=none keepalive-timeout=5m status-autorefresh=2m shared-users=unlimited address-list="...

Gareth

Hi guys, I want to allow several users to login via Hotspot, but share bandwidth between them Setting the number of "shared users" in the hotspot user profile does not have the desired effect, so I decided to mark their packets and then queue them. I set up a test user profile that will ad...

Gareth

Thanks Fewi! Early testing suggests that it did the trick! I guess the thing that confuses me most about queues is that limiting "upload" or "download" does not always work in the way I would expect. e.g. When I set the upload limit of my queues on the 750G, it actually restricte...

Gareth

anyone?

Gareth

Hi, My global upload speed is severely limited, so I need to create a Queue / Queues on my 750G to give priority to traffic coming from my 433AH and going to the Internet. Emails being sent from the Mail Server to the Internet need to be a lower priority. Diagram: http://i1222.photobucket.com/albums...

Gareth

Wireless clients cannot connect to the Internet unless I bridge eth1 and wlan1 together

The two RBs (on the right) communicate on the 172.23.0.0/24 subnet. Wlan1 on which I've set up the DHCP server, is on the 192.168.2.0/24 subnet.

Gareth

I'm tearing my hair out with this. Simplified layout of the desired setup: http://www.wildcoastholidays.com/net-layout.png My network has grown quite large and available I.P. addresses are becoming scarce, so I've decided to configure one of my Wireless Routers to run as a second hotspot and DHCP se...

Gareth

My wireless network is connected to the Internet via a 4Mbps ADSL line (D/L limit of 4Mbps and an U/L of only 0.4Mbps). P2P is a big problem for me, because too many users uploading at the same time can cause problems with time sensitive things like Skype. Too many users downloading at the same time...

Gareth

OK, so I created a user profile for the 3 users who share the same login name and I changed the incoming and outgoing packet marks, for that profile, to "rate_test_mark". This created two dynamic mangle rules to add the packet marks to the packets. I also assigned the new profile to the lo...

Gareth

That's OK, I'll give your suggestion about packet marks a try. Will let you know how that turns out.

Thanks!

Gareth

I created a user profile called 'std-users' with a rate limit of 2048k and a maximum of 3 shared users. Then, in the user manager, I created a login name and set it's 'group' field to 'std-users'.

Is this not the correct way of doing it?

Gareth

Hi, I want to create a user profile with a rate limit of 2048k and 3 shared users for each login name. If all three shared users download at the same time, then I don't want their collective download rate to exceed 2048k. Is this possible? I've tried it, but when I monitor the active users in Winbox...

Gareth

It shouldn't issue that many ips to one mac by default. Check "/ip hotspot print detail" and see what "addresses-per-mac" entry is. Should be two. BTW, that is the same result when a router with clients is connected to the hotspot also. I'm not sure what 'addresses-per-mac' is s...

Gareth

Something strange seems to be going on with my DHCP server. I haven't changed any settings on it (RB433Ah 4.6) since I installed it new 4 months ago. Can anyone help with these problems? 1. Up to 60+ I.P. addresses for one client: I have a public network where users connect and login through the Hot...

Gareth

I've figured out a workaround...

I connected my PC to the Eth 1 port (which is damaged) and changed the speed to 10Mbps / Full Duplex. I was then able to establish an ethernet connection and upgrade to RouterOS 3.30 as per the Netinstall wiki.

Gareth

btw, one other factor that may be complicating things is that I'm unable to connect to the routerboard using its POE (ethernet 1) port as this was damaged by a power surge. Eth ports 2 + 3 work just fine though. I just read in this thread that having a fried Eth 1 port will prevent Netinstall from w...

Gareth

What I notice is that there is no activity on the ethernet connection. A few packets are sent, but none are received.

I have checked the firewall, but it's not blocking Netinstall.

Gareth

Thanks for your help.

I've upgraded to v2.18, but it's still doing the same thing as it did in my first post. eg.

trying bootp protocol............................................................................. failed

Gareth

thanks, but how do I do that?

It just hangs when it gets to this point... how do I send the data file across?

xmodem receiver ready, waiting for data...
press <Ctrl>+X several times to cancel transfer

Gareth

The routerboard was running ROS 2.9.50. I tried updating it to v3.30 via LAN cable but it failed and I've been unable to access it ever since. I have followed the steps listed here , but every time I reboot the RB I see the following happening in the terminal viewer: RouterBOOT booter 2.11 RouterBoa...

Gareth

Thanks,

That's everything I wanted to know. I was just worried about causing disruptions and possibly locking myself out of the router...

Gareth

I want to create an "Input" firewall rule that blocks all ports on the RB except for the ones that are needed for normal operation of the network, hotspot logins and admin access etc. e.g. I will add these ports to an address list and then block all ports that are not on the list. Q: Is th...

Gareth

It turns out that this was the problem: http://wiki.mikrotik.com/wiki/Fix_Broke ... an_Upgrade

Gareth

I'm trying to copy the log but am having a few problems When I click "log" in winbox I see some entries between 15:10 and 18:54. But when I do a "/log print" those entries are missing. I've set log lines to 2000, could this be affecting it somehow? Also, how do I print the whole ...

Gareth

Okay. Switching one of the interfaces onto a different frequency did improve CCQ for APs linked to that interface and the problem has not reoccurred in its entirety... yet. However, I still continue to experience problems, as the RB seems to be disconnecting APs at random for minutes on end. e.g One...

Gareth

It works fine most of the time, so probably is not damaged then.

I'm going to try changing one of the interfaces to a different frequency today, to see if it solves the problem. Will update later.

Many thanks,

Gareth

Gareth

I'm not aware of any interference in the area and all but two of the 9 APs that connect to this base station (RB532) have good signal and CCQ. My RADIUS server runs on a RB750G which is connected to the RB532. At the same time that this happens, my PC's firewall alerts me to Port Scanning attacks or...

Gareth

First this happens 17:03:12 wireless,info 00:80:48:47:63:07@Office-Town: disconnected, no beacons received 17:03:13 wireless,info 00:02:6F:44:16:84@Office-Town: disconnected, no beacons received 17:03:13 wireless,info 00:0C:42:1F:2D:A1@Office-Farm: disconnected, no beacons received 17:03:13 wireless...

Gareth

It happened again at almost the exact same time as it did yesterday. I wasn't able to log in and see what was going on, but about a minute after it started, the firewall on my pc alerted me to a port scanning attack from the RB532: Somebody is scanning your computer. Your computer's UDP ports: 4099,...

Gareth

Thanks guys. I've set the timeout to 6 hours as recommended and have scheduled the calea and gps packages to be disabled on next reboot. I think I'll stick with the others, especially the ups one, power outages are a frequent occurrence here... I'm sure it's P2P though. I've been logged in during tw...

Gareth

It just happened again, only this time it carried on for about 30 minutes. No one, including myself was able to log in and in the end I had to pull the plug out to get it to restart. This is very frustrating and I'm losing customers as a result. Does anyone have an idea what it could be, or where I ...

Gareth

I'm having a problem with the RB532 (RouterOS 4.5) at my base station. The CPU will sometimes jump to 100% and might stay that way for a few seconds or for minutes on end. It happens at irregular intervals as well. There was not a lot of traffic when I took this screen shot at 6:45AM this morning. O...

Gareth

Can the user manager log be kept in a separate file, visible in Winbox's file list, that can then be easily deleted. Deleting hundreds of thousands of entries with the methods described on this forum takes forever and is extremely unfunny.

Gareth

I've tried all the methods mentioned above. None of them work. The CPU sits at 100% for hours, no one can log in (RADIUS server not responding) and when I finally abort the script, I find that absolutely nothing, not even 1 log entry has been deleted. The only way I've managed to delete them is via ...

Gareth

use this script
/tool user-manager database clear-log

I get the following error when i try that:

bad command name clear-log (line 1 column 29)

Gareth

I'm running User Manager 4.6 on a 750G and the hard drive has been filled in no time at all with 168,000+ log entries. I've tried deleting them through the web interface but this is proving too time consuming. I can't find the answer in the User Manager Wiki. Through searching this forum I've found ...

Search found 76 matches