Community discussions

Search found 91 matches

by dominicbatty
Mon Jan 30, 2017 12:08 pm
Forum: Announcements
Topic: v6.38.1 [current]
Replies: 73
Views: 24105

Re: v6.38.1 [current]

Oh dear, it turned into one of those mornings. Upgraded device to 6.38.1 only to discover the problem with VLAN on a bridge interface not working, pushed onto 6.39rc20 where this all came right and must be fixed but now I'm finding a 4 port Ethernet switch trunk link between 2x CRS226-24G-2S+ device...
by dominicbatty
Tue Oct 25, 2016 10:08 pm
Forum: Announcements
Topic: v6.37.1 [current] is released!
Replies: 144
Views: 38209

Re: v6.37.1 [current] is released!

Further to my previous post, my CRS226 is definitely struggling to maintain an "up" status for my fibre SFP module for any version after 6.36.3. If I downgrade back to 6.36.3 it works great and is extremely stable and has been for some time, if I push it to 6.37.1 it's all over the place. The fibre ...
by dominicbatty
Fri Oct 07, 2016 6:33 pm
Forum: Announcements
Topic: v6.37.1 [current] is released!
Replies: 144
Views: 38209

Re: v6.37.1 [current] is released!

I am seeing the loss of a remote CRS224 switch, which is linked to the network via a fibre SFP module. If I take the unit back to 6.36.3 it works fine, upgrade to either 6.37.1 or 6.38rc10 and it does not appear to allow traffic over the SFP module link. If I connect to the remote switch directly it...
by dominicbatty
Mon Apr 25, 2016 5:33 pm
Forum: Beginner Basics
Topic: VLAN trunk is not passing traffic - config attached, can anyone take a quick look?
Replies: 1
Views: 529

VLAN trunk is not passing traffic - config attached, can anyone take a quick look?

Hi guys, can anyone give me some help with a VLAN configuration on a CRS. Three ports being tested ... ether22 and ether23 - traffic comes in untagged and gets tagged to VLAN=1000 ether24 - traffic leaves the router tagged. If I connected devices to ether22 and ether23 they can see each other but if...
by dominicbatty
Fri Apr 01, 2016 7:17 pm
Forum: General
Topic: VLAN Configuration appears overly complicated ... anyone give me some simple answers?
Replies: 0
Views: 401

VLAN Configuration appears overly complicated ... anyone give me some simple answers?

Hi, I've had a CCR226-24G-2S+ for a couple of months and I've already had one go at trying to configure my VLAN configuration on the device and I just have a few questions now I am getting more into it I was hoping someone could just give me a couple of yes/no's on the attached questions. Winbox > S...
by dominicbatty
Thu Feb 12, 2015 2:12 pm
Forum: General
Topic: IPv6 Routing Mark in Firewall > Mangle Rules
Replies: 49
Views: 10788

Re: IPv6 Routing Mark in Firewall > Mangle Rules

it's already a difficult push for people to move to IPv6, however, it's going to be impossible if the IPv6 facilities are not at the very most basic level equivalent to the IPv4 facilities, you would assume addressing this issue would be one of the most important things facing Mikrotik at the moment?
by dominicbatty
Fri Nov 14, 2014 1:46 pm
Forum: General
Topic: Mikrotik Router SIP Connection Blocked.
Replies: 76
Views: 37889

Re: Mikrotik Router SIP Connection Blocked.

I am also having the same problem with a multiple routing scenario and I can see what is happening but cannot explain why, I'm not sure if it's a bug but perhaps someone could see if they think it should be logged. 2 interfaces with public IP addresses 1.1.1.1 and 2.2.2.2 Local SIP server on private...
by dominicbatty
Sun Jul 20, 2014 11:57 pm
Forum: General
Topic: v6.16/v6.17
Replies: 187
Views: 46675

Re: v6.16/v6.17

Our sstp is from windows clients to an RB2011. I'll throw some data through it this week and let you know how it stands up.
by dominicbatty
Sat Jul 19, 2014 1:26 am
Forum: General
Topic: v6.16/v6.17
Replies: 187
Views: 46675

Re: v6.16/v6.17

Our sstp vpn is extremely stable on 6.15, cannot comment on performance as application that runs over it uses only minimal bandwidth.

It looks like 802.11ac support is hardware related and is supported by 6.16 OS.
by dominicbatty
Thu Jul 10, 2014 6:43 pm
Forum: General
Topic: v6.15 released
Replies: 302
Views: 103457

Re: v6.15 released

thanks for the update, the problem I have is knowing which ones to clear but I've plumped for the whole lot which seems to be working ok.
by dominicbatty
Thu Jul 10, 2014 11:35 am
Forum: General
Topic: NAT Session Question
Replies: 4
Views: 948

Re: NAT Session Question

I know but the problem is as follows ... Interface 1 - normal traffic Interface 2 - VOIP traffic Interface 2 goes down, I can therefore detect all connections that had a source IP address associated with interface 2 and delete them so this would be ok. Interface 2 comes back up, I know have an estab...
by dominicbatty
Thu Jul 10, 2014 11:15 am
Forum: General
Topic: NAT Session Question
Replies: 4
Views: 948

Re: NAT Session Question

yeah, thanks for this. It appears running

/ip firewall connection tracking set enabled="no"
:delay 1
/ip firewall connection tracking set enabled="auto"

appears to reset the list for me.

Thanks for your assistance.

Regards, Dominic.
by dominicbatty
Wed Jul 09, 2014 11:08 am
Forum: General
Topic: NAT Session Question
Replies: 4
Views: 948

NAT Session Question

Hi, I have an odd NAT session problem I was wondering if someone might be able to give me a little guidance on. I link to my VOIP provider by making a connection from an internal address through the firewall which is NAT'd to my external IP and a session created to my VOIP provider. Lets say for exa...
by dominicbatty
Tue Jul 08, 2014 2:57 pm
Forum: General
Topic: v6.15 released
Replies: 302
Views: 103457

Re: v6.15 released

Has anyone tested the reported long term routing-mark issue in any of the v6.16 rc versions yet and is it perhaps fixed? The reason I ask is that we have routing marks that route our VOIP(SIP) traffic up another line via a mangle rule and a route with a routing mark set to pick these up and send it ...
by dominicbatty
Wed Jun 25, 2014 12:15 pm
Forum: General
Topic: v6.15 released
Replies: 302
Views: 103457

Re: v6.15 released

you should log that query with Mikrotik support, with that amount of incredible detail I'm sure you'll get an answer in no time ... ;-)
by dominicbatty
Mon Jun 23, 2014 10:56 pm
Forum: General
Topic: v6.15 released
Replies: 302
Views: 103457

Re: v6.15 released

it would be better if within RouterOS you could control the DNS enablement and also the TTL directly on a per device basis.
by dominicbatty
Mon Jun 23, 2014 10:39 pm
Forum: General
Topic: v6.15 released
Replies: 302
Views: 103457

Re: v6.15 released

Won't that only be until the DNS entry expires?
by dominicbatty
Mon Jun 23, 2014 9:43 pm
Forum: General
Topic: v6.15 released
Replies: 302
Views: 103457

Re: v6.15 released

Hi everyone, just a quick heads up with some issues I have been having on 6.15. I am not sure it is specifically 6.15 related but it is down to some configuration changes I have made whilst on 6.15. We have always used a single IP per interface but have recently started using a single WAN IP and an ...
by dominicbatty
Fri Jun 20, 2014 11:39 pm
Forum: General
Topic: v6.15 released
Replies: 302
Views: 103457

Re: v6.15 released

For anyone with sntp client issues take a look at the release notice for the version.
by dominicbatty
Fri Jun 20, 2014 10:37 am
Forum: General
Topic: v6.15 released
Replies: 302
Views: 103457

PPTP/L2TP/SSTP client problems between Mikrotik devices

Is anyone seeing PPP issues between routerboard devices in 6.15. I have an RB2011UAS-2HnD (6.15 firmware 3.16) (client) connecting to a RB2011UiAS (6.15 firmware 3.16) (server) Making connections from the client router to the server router. PPTP clients - will not connect at all. SSTP and L2TP clien...
by dominicbatty
Thu Jun 05, 2014 7:26 pm
Forum: General
Topic: Possible Alternative to OpenVPN
Replies: 3
Views: 1715

Possible Alternative to OpenVPN

With all the moans and groans over OpenVPN on these forums, and what appears to be little further development of the features included within RouterOS, I came across this today and wondered if it might be a viable alternative?

https://www.softether.org/
by dominicbatty
Mon Jun 02, 2014 5:32 pm
Forum: General
Topic: VRRP promotion/demotion query
Replies: 0
Views: 525

VRRP promotion/demotion query

Hi, has anyone else experienced the following problem and if so would opinion suggest this is a bug, I'd like to canvas opinion on the topic. I have two routers with a shared VRRP interface Router 1(R1) - priority 100 Router 2(R2) - priority 50 So the "live" router is R1. If I decide to do a firmwar...
by dominicbatty
Thu May 01, 2014 2:22 pm
Forum: General
Topic: Cisco SPA VPN
Replies: 0
Views: 374

Cisco SPA VPN

Has anyone successfully connected a Cisco SPA phone to RouterOS using the built in Cisco VPN that comes with the phone?

Thanks, Dominic.
by dominicbatty
Sun Feb 23, 2014 11:44 pm
Forum: General
Topic: v6.10 released
Replies: 248
Views: 82465

Re: v6.10 released

I had routing mark problems in 6.9 and 6.10 but on checking routes some of the "check gateway" fields were not set and setting these to "ping" appears to have solved the problem.
by dominicbatty
Wed Feb 19, 2014 6:44 pm
Forum: General
Topic: v6.10 released
Replies: 248
Views: 82465

Re: v6.10 released

My RB2011UiAS-RM keeps locking up and stops routing any traffic or being available to connect to. Only solution is a reboot and it comes back up ok. I have auto supout turned on but I am not getting that so it must think it is working ok .. Does anyone have any suggestions as to what I can do to log...
by dominicbatty
Mon Feb 17, 2014 11:27 pm
Forum: General
Topic: v6.10 released
Replies: 248
Views: 82465

Re: v6.10 released

upgraded RB2011UiAS-RM to 6.10 - looking ok with the exception of all L2TP/IPSEC tunnels that won't come up.
by dominicbatty
Mon Feb 17, 2014 11:23 am
Forum: General
Topic: Bonding Query/Options
Replies: 3
Views: 761

Re: Bonding Query/Options

Hi, thanks for your reply, following my post I did some testing between two mikrotiks and what you have stated is correct, VLAN=1 and "normal" traffic do not interact so I understand now my issue. The problem, I think was that I was confused by the Netgear (my switches) implementation of VLAN where ...
by dominicbatty
Fri Feb 14, 2014 7:03 pm
Forum: General
Topic: 6.9 breaks routing marks?
Replies: 27
Views: 4594

Re: 6.9 breaks routing marks?

the odd thing is that it works fine for about 24 hours then I come in the following morning and all my VOIP traffic is going up the main line so I reboot and hey presto, all working again. I'll try and see if I can downgrade and get something together for support. Are other people having this proble...
by dominicbatty
Fri Feb 14, 2014 1:42 pm
Forum: General
Topic: 6.9 breaks routing marks?
Replies: 27
Views: 4594

Re: 6.9 breaks routing marks?

Can anyone confirm that they are working this through with Mikrotik support as I have also discovered the same problem in 6.9 and I see no merit in logging the issues with Mikrotik if someone in this forum is already on the case.
by dominicbatty
Thu Feb 13, 2014 11:23 am
Forum: General
Topic: Mounting Problem
Replies: 2
Views: 603

Mounting Problem

Hi,

I am trying to install an R11e-2HPnD card into a BaseBox5 (RB912UAG-5HPnD-OUT) but the R11e does not come with the screw required to secure it to the RB912 board.

Can anyone tell me what size screw this needs to be and if it should have been delivered with this mounting screw?

Thanks, Dominic.
by dominicbatty
Fri Feb 07, 2014 3:51 pm
Forum: General
Topic: Vodafone Sure Signal Booster
Replies: 7
Views: 2015

Re: Vodafone Sure Signal Booster

forget it, turns out the Vodafone sure signal only works if you can get 1500 byte MTU out to the internet.
by dominicbatty
Thu Feb 06, 2014 11:16 am
Forum: RouterBOARD hardware
Topic: Dual Band Office Access Point
Replies: 4
Views: 1970

Re: Dual Band Office Access Point

I'm not sure I follow, a basebox5 will have three available interfaces, a 5Ghz wireless interface and an ethernet interface on from the board and a 2.4 Ghz one from the additional card. For all intents and purposes it will be no different to a router with 3 ethernet ports if you want to think about ...
by dominicbatty
Wed Feb 05, 2014 4:59 pm
Forum: General
Topic: Bonding Query/Options
Replies: 3
Views: 761

Bonding Query/Options

So I have an RB2011UiAS with ... interface bonded1 (MTU=1508, mode=802.3ad) with slaves ether1 + ether2 (MTU 1500, L2 MTU 1598) I have a VLAN (MTU 1508) on bonded1 so I can push PPPoE traffic via the switch to my BT FTTC modem at MTU 1500 - this all works fine and I get full 1500 MTU to the internet...
by dominicbatty
Mon Feb 03, 2014 6:40 pm
Forum: General
Topic: Vodafone Sure Signal Booster
Replies: 7
Views: 2015

Vodafone Sure Signal Booster

Hi, has anyone managed to get a Vodafone Sure Signal 3G booster connected and working behind a RouterOS device, it is supposed to make an IPSEC connection to the Vodafone network over the internet but nothing I do appears to allow it to work. Any help will be gratefully received.
by dominicbatty
Fri Jan 24, 2014 2:22 pm
Forum: Wireless Networking
Topic: Use of Multiple Chains / Aerial Selections
Replies: 0
Views: 1177

Use of Multiple Chains / Aerial Selections

I was wondering if someone could give me some advice. We have, for some time had an RB751G-2HnD (802.11b/g/n, 20Mhz, WPA-PSK2, AES) to service the general wireless requirements of our office (laptops/phones etc.) and also to use for our Cisco SPA VOIP phones which also run over wireless. The problem...
by dominicbatty
Fri Jan 10, 2014 1:20 pm
Forum: RouterBOARD hardware
Topic: Basebox 5 - will card fit?
Replies: 2
Views: 1090

Re: Basebox 5 - will card fit?

Thanks for that. Dominic.
by dominicbatty
Thu Jan 09, 2014 6:04 pm
Forum: RouterBOARD hardware
Topic: Basebox 5 - will card fit?
Replies: 2
Views: 1090

Basebox 5 - will card fit?

Does anyone know if a R11e-2HPnD will fit physically in a Basebox5 given the larger heat sink on it?
by dominicbatty
Wed Jan 08, 2014 6:36 pm
Forum: RouterBOARD hardware
Topic: Dual Band Office Access Point
Replies: 4
Views: 1970

Dual Band Office Access Point

Hi, I'm thinking of using the Basebox 5 along with an R11e-2HPnD to build a dual band wireless access point in my office. I just had a couple of questions ... 1. the obvious one being, does this sound like a good plan and if not what would others advise using for the same dual band access point? 2. ...
by dominicbatty
Thu May 09, 2013 9:29 pm
Forum: General
Topic: IPv6 support for L2TP/PPTP/SSTP etc.
Replies: 12
Views: 6443

Re: IPv6 support for L2TP/PPTP/SSTP etc.

aha, that will explain it.

Is this something that is planned to be done, it's going to be difficult implementing IPv6 without this type of thing being supported. If you have any timescales that would be helpful.

Thanks, Dominic.
by dominicbatty
Thu May 09, 2013 3:52 pm
Forum: General
Topic: IPv6 support for L2TP/PPTP/SSTP etc.
Replies: 12
Views: 6443

IPv6 support for L2TP/PPTP/SSTP etc.

Hi, I have been trying to use an IPv6 address as the connection address when configuring an L2TP-Client interface but it gets reported as being an invalid address by winbox. I tried a number of other clients, SSTP, PPTP etc. and none of them will accept an IP6 address. I've got the IPv6 package inst...
by dominicbatty
Wed Nov 28, 2012 7:25 pm
Forum: General
Topic: FTTC Bonding
Replies: 4
Views: 1729

Re: FTTC Bonding

Hi, yes I see packets coming down both links but I csannot tell if either are causing retries, I know if the download lines work individually then they are fine, I'm not sure if there is something wrong with the download logic at the A&A end but then if that was the case why are my lines not working...
by dominicbatty
Thu Nov 22, 2012 11:46 am
Forum: General
Topic: FTTC Bonding
Replies: 4
Views: 1729

Re: FTTC Bonding

Hi Celticcomms, RouterOS with three ethernet interfaces at 1500 MTU, 2x interfaces linked into the BT Openreach provided FTTC modems using ethernet cables, the other linked into the LAN. 2x PPPoE connections at 1492 connected via the BT modems to A&A (ISP). Single IP block (/29) at A&A selected to r...
by dominicbatty
Wed Nov 21, 2012 7:09 pm
Forum: General
Topic: FTTC Bonding
Replies: 4
Views: 1729

FTTC Bonding

I'm after any pointers with the following if anyone fancies a challenge ... download bandwidth is roughly specified for information but you'll get the gist. I've tried an RB493G and a VMWARE based RouterOS installation with the following and found the same results. 2x FTTC lines, 150m from cabinet. ...
by dominicbatty
Thu Oct 11, 2012 5:59 pm
Forum: Wireless Networking
Topic: Multiple Virtual AP Problem
Replies: 6
Views: 7350

Re: Multiple Virtual AP Problem

I've resolved this problem. When you create the first Virtual AP it offsets bit 2 of the MAC address of the primary wireless interface to create a unique MAC address for the Virtual AP. It does this each time you create a brand new Virtual AP giving each one an individual MAC address. However, what ...
by dominicbatty
Thu Oct 11, 2012 5:37 pm
Forum: Wireless Networking
Topic: Multiple Virtual AP Problem
Replies: 6
Views: 7350

Multiple Virtual AP Problem

I have an RB751G-2HnD with an active wireless connection as follows. name="wireless" mtu=1500 mac-address=D4:CA:6D:67:C0:71 arp=enabled interface-type=Atheros AR92xx mode=ap-bridge ssid="abaca-hidden" frequency=2412 band=2ghz-b/g/n channel-width=20/40mhz-ht-above scan-list=default wireless-protocol=...
by dominicbatty
Fri Sep 28, 2012 1:55 pm
Forum: General
Topic: IPv6 Routing Mark in Firewall > Mangle Rules
Replies: 49
Views: 10788

Re: IPv6 Routing Mark in Firewall > Mangle Rules

Your reply is gratefully received, this topic commenced in March 2012 and I think there are some earlier posts on the topic as well. There are obviously a lot of frustrated users left wondering how/what they were going to do to implement IPv6 but this now gives some clarity. Are you stating that the...
by dominicbatty
Fri Sep 28, 2012 1:32 pm
Forum: General
Topic: IPv6 Routing Mark in Firewall > Mangle Rules
Replies: 49
Views: 10788

Re: IPv6 Routing Mark in Firewall > Mangle Rules

Yeah, it's such a shame that something this important has been missed from IPv6 with no real acceptance or indication by Mikrotik of this being any sort of problem or issue they plan to address. Ignorance doesn't make problems go away, it just annoys people. They should indicate their plans and why ...
by dominicbatty
Tue Sep 18, 2012 7:26 pm
Forum: General
Topic: IPv6 Routing Mark in Firewall > Mangle Rules
Replies: 49
Views: 10788

Re: IPv6 Routing Mark in Firewall > Mangle Rules

bump, same problem, bit rubbish!
by dominicbatty
Tue Sep 18, 2012 4:36 pm
Forum: General
Topic: RB1000 SSTP, major disconnect issues
Replies: 11
Views: 3335

Re: RB1000 SSTP, major disconnect issues

I've just received word from Mikrotik support that my 100% CPU issues with SSTP have been found and fixed in 5.21 RC1 for which they have sent me a download link to try. Might be worth you trying as well, email me dominic at abaca.co.uk if you want a copy of the link as I don't really know if I shou...
by dominicbatty
Tue Sep 18, 2012 3:46 pm
Forum: General
Topic: IPv6 Routing Mark in Firewall > Mangle Rules
Replies: 49
Views: 10788

Re: IPv6 Routing Mark in Firewall > Mangle Rules

Hi gr0mit, When I trialled this I setup an L2TP tunnel to A&A over IPv4 so the tunnel IPv4 traffic was marked and thus round robin balanced up multiple lines then I routed my IPv6 traffic through this L2TP tunnel hence by the nature of going through the tunnel operated the same way and was load bala...
by dominicbatty
Mon Sep 17, 2012 4:19 pm
Forum: General
Topic: RB1000 SSTP, major disconnect issues
Replies: 11
Views: 3335

Re: RB1000 SSTP, major disconnect issues

I also have some issues with SSTP reported to support, which appear to be the SSTP running at 100% for no reason which is resolved by stopping and starting the SSTP server on the router. Disconnecting users has little effect and I've also seen SSTP-connections coming back in without users. Mikrotik ...
by dominicbatty
Wed Sep 12, 2012 1:45 pm
Forum: General
Topic: 3 line MLPPP working; but speed issue
Replies: 29
Views: 5211

Re: 3 line MLPPP working; but speed issue

Hi James, out of interest, did you get to the bottom of your issues?

Regards, Dominic.
by dominicbatty
Fri Aug 17, 2012 12:04 am
Forum: General
Topic: 3 line MLPPP working; but speed issue
Replies: 29
Views: 5211

Re: 3 line MLPPP working; but speed issue

James, out of interest, who is your ISP?
by dominicbatty
Tue Aug 07, 2012 4:22 pm
Forum: General
Topic: Support for PPPoE MTU > 1492 (via RFC4638 PPP-Max-Payload)
Replies: 18
Views: 5282

Re: Support for PPPoE MTU > 1492 (via RFC4638 PPP-Max-Payloa

Also, from the Mikrotik support option above, I think the MRRU option is only related to MLPPP link isn't it?

This is going to become a massive issue shortly as the BT FTTC roll out goes through in the UK and every man and his dog with Router OS is going to start asking about RFC4638.
by dominicbatty
Tue Aug 07, 2012 4:18 pm
Forum: General
Topic: Support for PPPoE MTU > 1492 (via RFC4638 PPP-Max-Payload)
Replies: 18
Views: 5282

Re: Support for PPPoE MTU > 1492 (via RFC4638 PPP-Max-Payloa

There appear to be lots of replies on the net simply stating that you just have to up the ethernet interface to 1508 and the PPPoE interface to 1500 and this should solve the problem. However, the BT supplied VDSL modem requires the inclusion of the RFC4638 PPP-Max-Payload Tag in the PADI and PADR p...
by dominicbatty
Fri Jun 08, 2012 2:05 pm
Forum: Scripting
Topic: Problem using :PARSE
Replies: 1
Views: 500

Problem using :PARSE

Hi, I was wondering if anyone might be able to tell me why the following script would report "expected variable name (line 1 column 6). It is clearly complaining about the "item" variable but I don't understand why? Can't I use :set in the :parse command? :local item "xxxxxx"; :local command [:parse...
by dominicbatty
Wed Jun 06, 2012 4:23 pm
Forum: General
Topic: IPv6 Routing Mark in Firewall > Mangle Rules
Replies: 49
Views: 10788

Re: IPv6 Routing Mark in Firewall > Mangle Rules

I actually per packet round robin my IPv4 traffic up my three ADSL lines to Andrew and Arnold, equally they per packet round robin the data down to me in the same way. To achieve this I have to use mangle to mark each packet per block of 3 with router1, route2 and route3 then the routing table picks...
by dominicbatty
Wed Jun 06, 2012 3:52 pm
Forum: General
Topic: IPv6 Routing Mark in Firewall > Mangle Rules
Replies: 49
Views: 10788

Re: IPv6 Routing Mark in Firewall > Mangle Rules

no real way to achieve this without this functionality. I'm going to use an L2TP tunnel over my IPv4 bonded link to tunnel my IPv6 in for the time being until this can be sorted.

It's a shame, was hoping to be live for World IPv6 day today but alas, no joy.

Dominic.
by dominicbatty
Tue May 29, 2012 8:59 pm
Forum: General
Topic: l2tp rx errors. what can i do?
Replies: 1
Views: 679

Re: l2tp rx errors. what can i do?

Hi just wondered if you found a solution to your problem, I have something similar I cannot solve. Thx. Dominic
by dominicbatty
Tue May 29, 2012 8:56 pm
Forum: RouterBOARD hardware
Topic: rb750 rx error
Replies: 5
Views: 2281

Re: rb750 rx error

Did you find the problem, I have something similar. Thx. Dom.
by dominicbatty
Thu May 03, 2012 1:55 am
Forum: General
Topic: IPv6 Routing Mark in Firewall > Mangle Rules
Replies: 49
Views: 10788

Re: IPv6 Routing Mark in Firewall > Mangle Rules

any news .... this is a really important feature that gives us increased bandwidth and resilience over our ADSL circuits, was it just missed from the IPv6 implementation, is it removed for good reason or is it planned to be done in the future.
by dominicbatty
Wed Mar 21, 2012 12:57 am
Forum: Scripting
Topic: Automatic backup script
Replies: 5
Views: 4634

Re: Automatic backup script

no worries. TBH I use email in most of my scripts for failover monitoring and other such stuff ... glad you are sorted. Dominic.
by dominicbatty
Tue Mar 20, 2012 12:30 pm
Forum: Scripting
Topic: Automatic backup script
Replies: 5
Views: 4634

Re: Automatic backup script

I'd start by simply replacing the "from=$namE" with "from=<a known address>" to see if it's a function call or variable issue. You could also try a ":log info $namE;" right before the call to see what is actually in the $namE variable in case you have something wrong there. I also think in my script...
by dominicbatty
Mon Mar 12, 2012 4:33 pm
Forum: General
Topic: IPv6 Routing Mark in Firewall > Mangle Rules
Replies: 49
Views: 10788

IPv6 Routing Mark in Firewall > Mangle Rules

Hi, does anyone know if there is a plan to implement the "action=mark-routing" and "new-connection-mark=<routing mark> in IPv6, firewall, mangle rules. Our IP services are served by multiple links so we round robin packets up the links to the ISP who provide us with native IPv6 addresses. It's just ...
by dominicbatty
Sun Mar 11, 2012 1:00 pm
Forum: Scripting
Topic: Replace and Command with a Variable
Replies: 2
Views: 639

Re: Replace and Command with a Variable

that's a great help rock, thanks for your reply. Dominic.
by dominicbatty
Fri Mar 09, 2012 2:36 pm
Forum: Scripting
Topic: Replace and Command with a Variable
Replies: 2
Views: 639

Replace and Command with a Variable

Hi, I was wondering if anyone could answer me the following. Take a command that populates a local variable "link1interfacestatus" with the current status of a pppoe-client interface with a name of "bob". :set link1interfacestatus [/interface pppoe-client get [/interface pppoe-client find name="bob"...
by dominicbatty
Tue Jan 24, 2012 11:51 am
Forum: General
Topic: Export compact (new in v5.12)
Replies: 76
Views: 35297

Re: Export compact (new in v5.12)

excellent and much needed addition .... thanks Mikrotik!
by dominicbatty
Wed Nov 02, 2011 5:24 pm
Forum: Wireless Networking
Topic: 3G Modem Support
Replies: 0
Views: 1005

3G Modem Support

Hi, I thought it might be useful to post the following information regarding my experience of recently installing a 3G USB modem into a Routerboard. RB493G The RB493G does not supply 5V on the USB port so I have a cable from this USB port to a USB powered hub. ZTE MF-112 plugged into the powered hub...
by dominicbatty
Mon May 09, 2011 12:40 pm
Forum: General
Topic: v5.2 released
Replies: 161
Views: 29787

Re: v5.2 released

We do use a number of mangle rules doing route marking for outbound traffic?
by dominicbatty
Mon May 09, 2011 12:28 pm
Forum: General
Topic: v5.2 released
Replies: 161
Views: 29787

Re: v5.2 released

No, we don't use OSPF .... we also seem to be having the same issues in v5.0 as well this morning.
by dominicbatty
Mon May 09, 2011 11:41 am
Forum: General
Topic: v5.2 released
Replies: 161
Views: 29787

Re: v5.2 released

Came in this morning after monitoring v5.2 all weekend with no obvious problems to find as soon as the users started routing traffic through it, it started jumping up and around >95% CPU load and started dropping packets. I've dropped back to v5.0 to see if I can establish if it is a configuration c...
by dominicbatty
Sat May 07, 2011 1:05 am
Forum: General
Topic: v5.2 released
Replies: 161
Views: 29787

Re: v5.2 released

Interesting comment about the lock up on the 493. My 493G has been having problems since moving from 5.0 to 5.2 with CPU peaking really high and giving me quite serious packet loss for short periods of time. I just noticed I've also got an autosupout today as well. I downgraded to 5.1 but looking at...
by dominicbatty
Sat Apr 30, 2011 9:57 am
Forum: General
Topic: v5.2 released
Replies: 161
Views: 29787

Re: v5.2 released

the distance for the routes, routing mark and non-routing mark are both 1. I thought that ECMP was done by having multiple gateways under a single route and then it selecting them in turn? I tried increasing the distance of the default route but this does not seem to have any effect.
by dominicbatty
Fri Apr 29, 2011 6:58 pm
Forum: General
Topic: v5.2 released
Replies: 161
Views: 29787

Re: v5.2 released

I think there may be still be routing issues in v5.2 associated with routing marks. I've only just noticed this and it might also be apparent in prior versions, I'll check next week but perhaps someone could clarify what is happening below. If I mark all "OUTPUT" traffic from the router in the mangl...
by dominicbatty
Tue Apr 26, 2011 11:40 am
Forum: General
Topic: Routing Issue with IPSEC L2TP
Replies: 0
Views: 531

Routing Issue with IPSEC L2TP

Hi, I was wondering if someone could explain the following behaviour and why it might be happening. 2x internet interfaces I-1 and I-2 L2TP IPSEC VPN from remote sites connecting into I-2 Remote site ip address is R-1 1. If I set the default route for the router to gateway=I-2 then the incoming conn...
by dominicbatty
Mon Feb 21, 2011 10:31 am
Forum: General
Topic: Routing Marks in Output Chain for IPSEC
Replies: 1
Views: 988

Re: Routing Marks in Output Chain for IPSEC

Just for information, whatever was causing this problem was still apparent in v5.0rc9 but has been solved with v5.0rc10

Cheers, Dom.
by dominicbatty
Mon Feb 21, 2011 10:30 am
Forum: General
Topic: Routing Problem with Routing Marks
Replies: 1
Views: 868

Re: Routing Problem with Routing Marks

Just for information, whatever was causing this problem was still apparent in v5.0rc9 but has been solved with v5.0rc10

Cheers, Dom.
by dominicbatty
Thu Feb 17, 2011 5:26 pm
Forum: General
Topic: Routing Problem with Routing Marks
Replies: 1
Views: 868

Routing Problem with Routing Marks

Hi, could someone tell me if I am missing something. 2 internet links on an RB493G router (both PPPoE if it makes any difference), link 1 is the default gateway for the router. i.e. 0.0.0.0/0 using link1 as the gateway. Incoming L2TP IPSEC connections coming in through link1 work fine and connect wi...
by dominicbatty
Wed Feb 09, 2011 1:59 pm
Forum: General
Topic: RouterOS v5rc8
Replies: 110
Views: 19758

Re: RouterOS v5rc8

Interesting problem .... I just added the IPv6 package to me seemingly stable v5.0rc8 493G routerboard and all my L2TP IPSEC VPN's to my remote sites did not come back after a restart. I then set it to uninstall the IPv6 package, rebooted and they all came back straight away. Just to confirm, I didn...
by dominicbatty
Mon Feb 07, 2011 7:07 pm
Forum: General
Topic: Routing Marks in Output Chain for IPSEC
Replies: 1
Views: 988

Routing Marks in Output Chain for IPSEC

Hi, I'm just after a little bit of help regarding a routing problem I have. I have two connections to the internet via gateways 1.1.1.1 (on interface I-A) and 2.2.2.2 (on interface I-B) and I have two IP routes as follows 0.0.0.0/0 to 1.1.1.1 bound to routing-mark="R-A" 0.0.0.0/0 to 2.2.2.2 bound to...
by dominicbatty
Tue Oct 26, 2010 2:36 pm
Forum: General
Topic: Ping in script problem
Replies: 55
Views: 13041

Re: Ping in script problem

I cannot believe this is still broken in RC2, I logged this originally in Beta4. My entire fail over scripting is based on the use of this /ping command which only works under the schedule once on the very first call to it, after which fails to work. I appreciate that they are working on "more serio...
by dominicbatty
Thu Oct 07, 2010 12:41 pm
Forum: General
Topic: Sangoma S518 Cards x4 - Anyone want them
Replies: 0
Views: 340

Sangoma S518 Cards x4 - Anyone want them

Hi guys, I've come across 4x Sangoma S518 cards in my cupboard that I don;t want and it seems a shame to sell them if someone can use them, if anyone is based on the UK and wants them then let me know. Cheers, Dominic.
by dominicbatty
Thu Sep 23, 2010 11:38 am
Forum: General
Topic: RouterOS v5 RC1
Replies: 82
Views: 18654

Re: RouterOS v5 RC1

/ping is still not working under scripts in the RC1 release (except for the very first time it is used), I'm not sure that going to an RC1 and not beta7 is strictly correct if there are things that worked perfectly in a previous version that have not yet been resolved in a beta version, upgrades are...
by dominicbatty
Tue Jul 27, 2010 4:21 pm
Forum: General
Topic: RouterOS 5 beta 5
Replies: 22
Views: 6400

Re: RouterOS 5 beta 5

the /ping command in Beta5 only works in the scheduler the very first time it is used ... i.e. Script that does .... :log info ("ping result1=" . "$[/ping 8.8.8.8 count=3]"); :log info ("ping result2=" . "$[/ping 8.8.8.8 count=3]"); :log info ("ping result3=" . "$[/ping 8.8.8.8 count=3]"); Reboot th...
by dominicbatty
Tue Jul 13, 2010 5:18 pm
Forum: General
Topic: RouterOS v5 beta4 released
Replies: 48
Views: 11221

Re: RouterOS v5 beta4 released

ok, Mikrotik have confirmed this is a known problem to be resolved in v5.0 beta 5. No timescale at the moment for the beta 5 release.
by dominicbatty
Tue Jul 13, 2010 3:44 pm
Forum: General
Topic: RouterOS v5 beta4 released
Replies: 48
Views: 11221

Re: RouterOS v5 beta4 released

That last sentence had too many v4's in it and should read ...

I don't have a v4.xx router to try and I only started beta testing v5.0 at beta4. It would be handy if someone could test on a v4.xx platform for me.
by dominicbatty
Tue Jul 13, 2010 3:43 pm
Forum: General
Topic: RouterOS v5 beta4 released
Replies: 48
Views: 11221

RouterOS v5 beta4 released

Has anyone noticed that the ping command does not return any response when used in v.5.0 beta 4 under some conditions. I have a script ... :log info ("ping result=" . "$[/ping 8.8.8.8 count=5]") which should put "ping result=5" into the log file if it runs ok. If I run this script using "/system scr...
by dominicbatty
Wed Jul 07, 2010 6:41 pm
Forum: General
Topic: RouterOS v5 beta4 released
Replies: 48
Views: 11221

RouterOS v5 beta4 released

Found a workaround for the Mikrotik ... with thanks to <Chaos> for his input. Run the SSTP server on port 4430 (not 443) which will bind it to both IP addresses on the router 1.1.1.1 and 1.1.1.2. Use dstnat to forward traffic for 1.1.1.1:443 to the internal web server at 192.168.1.1:443 Use dstnat t...
by dominicbatty
Wed Jul 07, 2010 12:44 pm
Forum: General
Topic: RouterOS v5 beta4 released
Replies: 48
Views: 11221

RouterOS v5 beta4 released

Is it possible to bind the SSTP server to a specific IP address. The problem is that it has ro run on port 443 as this is the only acceptable port that a windows client can connect into as there is no way to change this in windows. It is also the port that HTTP SSL must run on for secure web sites. ...
by dominicbatty
Wed Jul 07, 2010 12:35 pm
Forum: General
Topic: RouterOS v5 beta4 released
Replies: 48
Views: 11221

RouterOS v5 beta4 released

I've run into a problem with the SSTP server in the new v5. The SSTP server runs on port 443 and it has to run on this port as Windows clients can only connect on port 443 as there is no configuration option in Windows to connect to any other port as this is considered the default for HTTP SSL. The ...