MikroTik

maximt

I have router CRS125-24G-1S but there no ACL.
How can I use FDB to make whitelist of static MACs? I think I just need set default "action" to "drop" on port, but I cant find out how to do it.

maximt

i have rb metal and rb groove with broken ethernet ports, but wireless have worked, they still connects to AP as clients. now i want use this like wireless-repeater (wds or mesh), but i cant connect to device by mac-telnet (device have no ip-address). have this RB contacts for serial ports? or there...

maximt

it useful, +1

maximt

proxy redirect.

maximt

my bash script (used sshpass tool) #!/bin/bash CMD="/system identity print ; /ip address print ; " USER="admin" PASS="123" #ip = NET.C.D NET="172.16" C_FROM=2 C_TO=2 D_FROM=1 D_TO=254 ASYNC=1 for C in $(seq $C_FROM $C_TO); do for D in $(seq $D_FROM $D_TO); do ...

maximt

i am using the rb750 as bridges to managing vlans, all works fine but i have a lot of strange traffic in network. what i need: ether1 - tagged (incoming vlans 10 and 20) ether2 - tagged (outcoming vlans 10 and 20) ether3 - untagged (vlan 10) ether4 - untagged (vlan 10) ether5 - untagged (vlan 20) wh...

maximt

i use command /system upgrade download-all reboot-after-download=yes to upgrade. after reboot i see message: Firmware upgraded successfully, please reboot for changes to take effect! pkg 6.17 force upgraded RB firmware, but not reboot router to take new version. current-firmware: 3.04 upgrade-firmwa...

maximt

new day and +5 devices dead.
there should be official warning "dont upgrade to 6.17 your CPE and other remote devices"

maximt

i install 6.15 to dead router (via netinstall)
and now i see:
current-firmware: 3.18
upgrade-firmware: 3.16

seems like 6.17 tried update firmware to 3.18 and died.. after recovering i have ROS 6.15 with Firmware 3.18

maximt

RB SXT 2nD r2 5 devices from ~100 have bricked up after upgrade 6.15 to 6.17. no leds blinking, only beep signal on boot. recovered by netinstall with lost config. and 1 device just partly broke config (dhcp server, dns). i upgrade each firmware release and it first time in my practice //update toda...

maximt

there is no logging topic for rstp, how can i log topology changes?
there is snmptrap oid?

maximt

brefly: how can i use rstp on one vlan?

maximt

i have rb750up with tagged vlan. now i trying to make link backup loop (only one vlan-id) but rb750up did not pass BPDU to my vlan.. rb750up config vlan: ether5-tagged is tagged port /interface vlan add interface=ether5-tagged l2mtu=1594 name=vlan-20 vlan-id=20 add interface=ether5-tagged l2mtu=1594...

maximt

i have router with NAT. i need filter udp except allowed ports like dns. i have added to filter->forward chain to "allow my port" rules and "drop all" rule at chain' end. seems to works fine but whats is it? out:ipip, proto UDP, 10.0.0.6:58366->1.2.3.4:13958, [b]NAT[/b] (10.0.0.6...

maximt

http://wiki.mikrotik.com/wiki/SwOS#Rein ... S_firmware
helped

maximt

i have RB260GS with SwOS 1.9 i try upgrade firmware to 1.12, i press "upgrade" button but here is nothing happend, i refresh page and now i see only empty page with "loading" message. i has reset switch by "reset" button, now switch have default ip-address but still bro...

maximt

"walled garden" in hotspot package seems to good works with https.
maybe there is way to catch https without webproxy?

maximt

i need to make whitelist of domain.
i ran webproxy and add "allow" rules to access list, but proxy works only with http.
how can i make it work with https?
i not need to dig query path or page content, just check domain on first connection

maximt

I need manage users by their src-address to block or redirects.
But I need add rule per each user.
can you add Src\Dst Address List classifiers to Web Proxy Rule?

think it would be very useful for managing users groups by scripts, api, firewall.

proxy.png

maximt

I have script to upgrade my devices: /system upgrade download-all reboot-after-download=yes Now I need use other script for upgrade firmware and as a result - 2 times reboot my device. Can you add new option to "/system upgrade download-all" like: /system upgrade download-all reboot-after-...

maximt

I have simple script to make supout, send this to mail and reboot device: /system sup-output name=$supFile; /tool e-mail send file=$supFile to=$supMail subject=$supMailTitle; /system reboot; but it seems /tool e-mail send is a async command.. after a supout is made, device silently gone to reboot an...

maximt

/system upgrade upgrade-package-source export

there is no passwords
i need distribute these settings with passwords

maximt

try to "print oid"

maximt

my bad. vpn exports fine.
but how i can export\import settings in
/system upgrade upgrade-package-source
?

maximt

I need to upload same configuration to multiple devices.
I use CLI export\import but i cant get passwords for vpn and autoupgrade service..
There is any way to export\import passwords of some ROS services?

maximt

i have three devices with similar problem
console time by time has crashed
also some scripts leads to console crash (like on screenshot)

maximt

i have similar proplem with wifi AP Metal 2SHPn (but on ROS 6.5)
support says there is console crashing bug

maximt

how can i to block a arp requests between my wireless clients connected on same wlan interface? my wan (ether1) and lan (wlan1) bridged to bridge1 i need pass a arp from wlan1 to ether1 and from ether1 to wlan1 but not wlan1 to wlan1 default-forwarding disabled but clients authorized via access-list...

maximt

I wrote two helper functions to store values in environment as global vars. but there is bug - you can pass variables to functions. Waiting for 6.3... :global setHashValue do={ :global hashSetter [:parse ":global $1$2 $3"]; $hashSetter; } :global getHashValue do={ :global hashLastValue nil...

maximt

is there any associative array, hash, map?

maximt

I have upgraded my router to routeros 6.2 and my scripts stop working. example: :foreach que in=[/queue simple find] do={ :local queName [/queue simple get $que name]; :local queComment [/queue simple get $que comment]; :log info "$queName ; $queComment"; } script print name but not commen...

maximt

i have got vpn router with interface in 192.168.0.0/16 subnet
but my new ISP have gateway in same subnet -192.168.0.1/24

there is any way to make routing from 192.168.0.0/16 to 192.168.0.1/24 ?

lan: ether1 - 192.168.0.2/16
wan: ether2 - 192.168.0.3/24 - gateway 192.168.0.1

maximt

thanks, ssh2_sftp works fine

maximt

create supout for 6.0rc12 x86, sent to email (and log-file too) file has been created with name: name="'my.cfg'to" type=".cfg'to file" size=0 creation-time=apr/06/2013 15:06:06 contents="" Apr/06/2013 15:06:06 ssh,debug cmd: scp -pt 'my.cfg'to full log at attachment

maximt

6.0rc12 x86 same script, same result /file print detail 0 name="skins" type="directory" creation-time=apr/03/2013 15:46:48 1 name="'my.cfg'_j" type=".cfg'_j file" size=0 creation-time=apr/03/2013 15:56:50 contents="" 2 name="'my.cfg'\9{G1;yH&quo...

maximt

i have simple php script to upload configs to my routers by ssh2 script working fine with all my unix servers, but not with mikrotik (5.24 x86, mipsbe) $conn = ssh2_connect( '10.10.10.1', 22 ); issh2_auth_password($conn, 'admin', '123'); ssh2_scp_send($conn , '/home/ftp/mt/my.cfg', 'my.cfg'); after ...

maximt

thanks for answer in general, i need limit total connections to 100 (from 1 user) and no more 10 per anyone dest-address /ip firewall filter add action=drop chain=forward src-address=192.168.1.0/24 comment="no more 100" connection-limit=10,32 disabled=no protocol=tcp add action=drop chain=...

maximt

yes, but i need limit connections to 10 per ANY dest-address

maximt

is there any way to limit connections per one dst-address for each user?

example: each user can open maximum 10 connections to 1.2.3.4:80

maximt

there is possible to use "(unknown)" value in scripts like: /queue simple remove [find parent="(unwnown)"]; ? now i do that like :foreach que in=[/queue simple find ] do={ :local queName [/queue simple get $que name ]; :local queParent [/queue simple get $que parent ]; :if ( $que...

maximt

i have pptp server with radius autharization, simple queue created by mikrotik-rate-limit attribute.
there is has any way to prioritize traffic without using queue tree?
or way using simple queue to shaping and queue tree for prioritization-only?

maximt

anyone?

maximt

I need universal repeater with one wireless interface
but my clients have no wds
if i will set my AP by this manual http://wiki.mikrotik.com/wiki/Wireless_WDS_Mesh (model 2), can my clients without wds connecting to this AP?

maximt

there is possible have one ip on bridge1 and vlan interface?

maximt

same trouble on rb433 (ROS 5.15)
client's mac added to access-list, but after 3-4 days client lose connection with message "Data from unknown device" until i have reboot router or until i have run scanning

maximt

i want to buy SXT-5HPnD (RouterOS lvl 3)
superchannel option is available on license level 3?

maximt

rb411 (ROS 5.15) with r52Hn wireless card (http://routerboard.com/R52Hn)
i did set tx-power to all-fixed-rates = 24, but current-tx-power tells maximum tx power (including real and total) =22dBm
same effect with tx-power=manual

how i can increase tx-power or where i can see actual value?

maximt

"via local" this is "keyboard"... my router is PC x86... someone from coworkers check router's heartbeat by typing this trash on keyboard

maximt

router on MT5.14 is connected to adsl ISP by pppoe. my users are connected by pptp.
router have installed routing-pkg, but i doubt - do i need this pkg?

maximt

but why "via local" , not "via ether1"?

maximt

What does this message mean?

system,error,critical login failure for user   via local

i guess "local" is serial port, but i have no connections to serial port

maximt

i have wireless bridge (setup by this manual http://wiki.mikrotik.com/wiki/Pseudobridge): MyRouter -> AP1 (RB411) -> AP2 (rb433) -> clients AP1: ether1 and wlan1 bridged to Bridge1 AP2: wlan1 and wlan2 bridged to Bridge1 i need pass 2 vlans from MyRouter to AP2. i guess how to configure AP2. somethi...

maximt

hi
i have br433ah with two wireless cards, one of these cards seems dead..
i want to buy a new R52Hn to replace that, but what about license?
do i need change my license-key?

maximt

how can i get swr value on routerOS (rb411\433 with rOS 4.16)?
there is any command like "t s 14" of dlink(bluebox)?

sorry for my bad english.
i have big mistake in thread http://forum.mikrotik.com/viewtopic.php?f=7&t=52863
of course i mean MT's analog of dlink's command

maximt

there is some analog of "t s 14" command of BlueBox fw for d'link AP?

WLAN Access Point wlan1 -> t s 14
SWR -> ProbePower: 20 dBm,  MeassureTxADC : 14

or any other way to measure quality of connection between antena and AP?

maximt

is there a syntax like this?

:local badip {192.168.0.2;192.168.0.5};
/ppp active remove [find address in badip];

maximt

rb433 with 2 wlan cards. wlan1 and eth1 setted to bridge1 with ip 192.168.30.10/24 ISP connected by wlan1 (ip 192.168.30.1, setted as default gateway) clients connected to wlan2 (ip 192.168.40.1/24) add to nat rule /ip firewall nat add action=masquerade chain=srcnat comment="" disabled=no ...

maximt

yes.. packets are catched by rule but redirect not happens

maximt

dont working..
works only when nat enabled

maximt

my AP is transparent bridge, not router, and dont have NAT

that sample working without nat?

maximt

there rb433 as wireless AP but NOT hotspot
how can i make redirect to my page for user with ip not in my allowed list?

maximt

may be you need join interfaces to bridge
http://wiki.mikrotik.com/wiki/Category:Bridging

maximt

maybe but pseudobridge is on ~25% faster

maximt

mpls works great. thanks again

found fourth method: http://wiki.mikrotik.com/wiki/Pseudobridge

seems to simplest way
but what about performance?
what choose: mpls or pseudobridge?

maximt

thanx, looks good following all instructions, see tunnel is runned rb411 with: ether1=192.168.88.1/24 wlan1=192.169.99.1/30 rb433 with: ether1=192.168.88.2/24 wlan1=192.169.99.2/30 mpls ldp neighbor pr Flags: X - disabled, D - dynamic, O - operational, T - sending-targeted-hello, V - vpls # TRANSPOR...

maximt

need to build transparent bridge on wi-fi (point-to-point). 15km one AP is RB411 second is RB433 there two way: http://wiki.mikrotik.com/wiki/Transparently_Bridge_two_Networks http://wiki.mikrotik.com/wiki/Transparently_Bridge_two_Networks_without_using_WDS_%28EoIP%29 how do that in better way? need...

maximt

can somebody confirm this bug?

maximt

sorry missed to say

routerOS 4.10

maximt

ppp active print Flags: R - radius # NAME SERVICE CALLER-ID ADDRESS UPTIME ENCODING 0 R user1 pptp 192.168.3.2 10.0.10.23 17h53m2s MPPE128 stateless 1 R user2 pptp 192.168.1.11 10.0.10.46 6h11m59s 2 R user1 pptp 192.168.1.12 10.0.10.23 36s 3 R user3 pptp 192.168.2.4 10.0.10.132 12s as you see here ...

maximt

but i have just one router and one login can be used by two user at same time my pptp config /ppp profile set default change-tcp-mss=yes comment="" dns-server=192.168.1.2 local-address=10.0.10.1 name=default only-one=yes \ use-compression=no use-encryption=no use-vj-compression=no /interfa...

maximt

i use pptp+radius(utm) in ppp-profile set only-one=yes option. but 1 ppp user can set 2 and more connection from many computers each user has unique ip (assigned by radius) why do two identical ip are working in vpn network? for natting used masquarade /ip firewall nat add action=masquerade chain=sr...

Search found 71 matches