Community discussions

Search found 120 matches

by mhoppes
Tue Sep 10, 2019 10:09 pm
Forum: General
Topic: PowerBox Short Circuit
Replies: 0
Views: 245

PowerBox Short Circuit

Hello, I've experienced the short circuit error on the PowerBox in previous firmware version when I was powering the unit via PoE, but this is something new. The option to avoid the short-circuit on long cables doesn't exist any more with new software versions. I have a PowerBox that I'm trying to u...
by mhoppes
Mon Apr 24, 2017 3:02 am
Forum: Forwarding Protocols
Topic: MikroTik and MPLS
Replies: 2
Views: 703

MikroTik and MPLS

I am completely confused about MikroTik and MPLS; can someone clear this up for me? My understanding is that if I have two paths from site A to site B I can use OSPF equal cost routing to set costs to, example, 50 and traffic will flow over both paths via hashing, or round robin. If I then turn up a...
by mhoppes
Thu Jan 07, 2016 6:48 pm
Forum: General
Topic: Traffic Shaping Question
Replies: 2
Views: 680

Re: Traffic Shaping Question

Anyone?
by mhoppes
Wed Jan 06, 2016 8:49 pm
Forum: General
Topic: Traffic Shaping Question
Replies: 2
Views: 680

Re: Traffic Shaping Question

I've now looked at PCQ... but contrary to what they are called, they appear to be more Per *ADDRESS* Queues, not Per *CONNECTION* Queues. What I really want is a way to rate limit each connection going to somewhere. So IP range 192.168.1.0/24 coming into my network can establish a stream of 3megabit...
by mhoppes
Wed Jan 06, 2016 4:20 pm
Forum: General
Topic: Traffic Shaping Question
Replies: 2
Views: 680

Traffic Shaping Question

/queue simple add name=test target=10.0.0.0/24 max-limit=256K/512K \ interface=ether2 Am I correct in thinking the above will limit traffic from any IP in 10.0.0.0/24 to downloading at 512k and uploading at 256k? If that's correct, the next question is: Is that TOTAL for that subnet? Or by connectio...
by mhoppes
Fri Oct 02, 2015 4:50 am
Forum: General
Topic: 6.24 - bridged traffic mode / system crash / port flap unrecoverable on heavy traffic
Replies: 3
Views: 837

Re: 6.24 - bridged traffic mode / system crash / port flap unrecoverable on heavy traffic

Anyone? This was a major bug that took down the network. I can't afford to "try things" to see if it's fixed.
by mhoppes
Thu Sep 10, 2015 3:07 pm
Forum: General
Topic: 6.24 - bridged traffic mode / system crash / port flap unrecoverable on heavy traffic
Replies: 3
Views: 837

Re: 6.24 - bridged traffic mode / system crash / port flap unrecoverable on heavy traffic

I have not tried upgrading... this just happened last night. I don't mean to be snarky with this reply, but does the current 6.x branch fix an issue similar to this? I can't risk my network going down because of an issue like this again, and frankly issues like this are exactly why I left the MikroT...
by mhoppes
Thu Sep 10, 2015 1:52 pm
Forum: General
Topic: 6.24 - bridged traffic mode / system crash / port flap unrecoverable on heavy traffic
Replies: 3
Views: 837

6.24 - bridged traffic mode / system crash / port flap unrecoverable on heavy traffic

For some time I've said that MikroTik devices aren't production ready for use as core equipment. I decided, against my better judgement, to use an HX2 as a traffic shaper on a small network with about 100 subscribers. Total network throughput is around 150-180megabits at best. The MikroTik was runni...
by mhoppes
Mon Jun 15, 2015 1:46 am
Forum: General
Topic: Traffic Shaping Groups
Replies: 2
Views: 672

Re: Traffic Shaping Groups

I should probably have included... I now how to setup the bridge and turn on firewall mangling, just not sure of the firewall rules to setup to do this.
by mhoppes
Mon Jun 15, 2015 1:45 am
Forum: General
Topic: Traffic Shaping Groups
Replies: 2
Views: 672

Traffic Shaping Groups

I'm looking at setting up a MikroTik device in bridge mode to perform basic traffic shaping on my network. My desired setup is: eth0 and eth1 are part of bridge0 I create three different groups for traffic shaping, we will call them: "Slow" "Fast" "ReallyFast" Slow = 1megabit/1megabit Fast = 5megabi...
by mhoppes
Mon Jan 14, 2013 11:13 pm
Forum: General
Topic: Sub VLAN interface?
Replies: 13
Views: 3863

Re: Sub VLAN interface?

It seems... in my case... the issue is that if I assign an IP address to the Ethernet interface (e.g. eth1) it does not properly propagate out on the PVID of the network. Where-as if I assign the IP to the VLAN ID of the network then it works.
by mhoppes
Mon Jan 14, 2013 10:29 pm
Forum: General
Topic: bug with reset-configuration on 4.17
Replies: 1
Views: 581

Re: bug with reset-configuration on 4.17

Can anyone confirm how to fix this? I also am seeing this issue.
by mhoppes
Mon Jan 14, 2013 10:25 pm
Forum: General
Topic: Sub VLAN interface?
Replies: 13
Views: 3863

Re: Sub VLAN interface?

So I swear I've done that numerous times and it hasn't worked... tried it just now and it worked as expected.
by mhoppes
Fri Jan 11, 2013 9:17 pm
Forum: General
Topic: Sub VLAN interface?
Replies: 13
Views: 3863

Re: Sub VLAN interface?

That is exactly my problem. I can assign the IP to the VLAN but can never manage to ping or access that IP.
by mhoppes
Fri Jan 11, 2013 5:36 am
Forum: General
Topic: Sub VLAN interface?
Replies: 13
Views: 3863

Re: Sub VLAN interface?

For example: Following these instructions: add name=VLAN2 vlan-id=2 interface=ether1 disabled=no add address=10.10.10.3/24 interface=VLAN2 The device will pass traffic through the VLAN and to the appropriate ports... however, it will not respond to pings to that IP address from another device on the...
by mhoppes
Thu Jan 10, 2013 8:46 pm
Forum: General
Topic: Sub VLAN interface?
Replies: 13
Views: 3863

Re: Sub VLAN interface?

Ok. Then I'm doing that part right. I'm using the CLI. I can post an example when I get back to the office. How do I assign a gateway to an IP on a VLAN interface? Maybe that's the only thing that's missing. Basically what I have done is assigned the IP to the VLAN interface and then put a route in ...
by mhoppes
Thu Jan 10, 2013 4:10 pm
Forum: General
Topic: Sub VLAN interface?
Replies: 13
Views: 3863

Sub VLAN interface?

I've tried several different ways but haven't been able to get this to work. What do I need to do to assign an IP address to a VLAN interface? I've assigned IPs to the VLAN but I can't access it. Conversely, how do I assign multiple IPs with VLANs to an interface? Eg. Eth0 has vlan1 with IP 10.10.10...
by mhoppes
Thu Sep 13, 2012 12:52 am
Forum: General
Topic: What do you all think of the EdgeRouter?
Replies: 21
Views: 3452

Re: What do you all think of the EdgeRouter?

Before everyone get's on Ubiquiti train lets not forget that UBNT is publicly traded company with many investors trying to unload the stock due to counterfeit fiasco. Last I checked the "fiasco" was way overblown and now that the shorts are taken care of people are buying stock and the price is goi...
by mhoppes
Thu Sep 13, 2012 12:49 am
Forum: General
Topic: What do you all think of the EdgeRouter?
Replies: 21
Views: 3452

Re: What do you all think of the EdgeRouter?

I am very very very intrigued . I'm probably one of the lucky ones . Don't really have too much trouble with my mtk hardware , but unfortunately my loyalty stops with the finance department here.I hope to see the MTK boys step up their game Oh gawd.Please tell me those are SFP slots on the side of ...
by mhoppes
Wed Sep 12, 2012 9:42 pm
Forum: General
Topic: What do you all think of the EdgeRouter?
Replies: 21
Views: 3452

Re: What do you all think of the EdgeRouter?

Maybe it will be like AirOS, hit apply and wait for restart :lol:
Mmmm. Nope. It's a real time system. You hit apply and the change is made without dropping anything. Research before you bash ;)
by mhoppes
Wed Sep 12, 2012 7:31 pm
Forum: General
Topic: What do you all think of the EdgeRouter?
Replies: 21
Views: 3452

What do you all think of the EdgeRouter?

Looks like Ubiquiti is getting ready to launch the EdgeRouter, and the stats looks really good compared to many MikroTik devices, or even some Cisco devices! http://www.youtube.com/watch?v=PgjKvJ2rdJY&feature=plcp http://www.ubnt.com/edgemax What are people's thoughts? http://tolly.com/ts/2012/Ubiqu...
by mhoppes
Thu Jul 19, 2012 3:32 pm
Forum: General
Topic: VLAN Root
Replies: 1
Views: 847

VLAN Root

I have a MikroTik RB450G that I am trying to connect to some Cisco switches. The problem I'm running into is that when I connect the MT the Cisco complains of: *Apr 11 15:13:41.822: %SPANTREE-2-PVSTSIM_FAIL: Blocking designated port Gi1/0/21: Inconsitent superior PVST BPDU received on VLAN 300, clai...
by mhoppes
Tue Apr 03, 2012 4:36 pm
Forum: General
Topic: BUG : 5.11/5.12 Password Silently Drops Characters
Replies: 4
Views: 1077

Re: BUG : 5.11/5.12 Password Silently Drops Characters

No one's going to reply to this? I can confirm it still exists.
by mhoppes
Wed Feb 15, 2012 6:29 pm
Forum: General
Topic: Bridge Issue/Question
Replies: 5
Views: 1273

Re: Bridge Issue/Question

You show ether3 in the bridge group, which conflicts with the desired configuration you posted. An oversight, I'm sure. Onto the bridge... this gets fun. When you add an IP address to an interface, it belongs to that interface. However, if you then stick that interface into a bridge group, the IP a...
by mhoppes
Wed Feb 15, 2012 5:29 pm
Forum: General
Topic: Bridge Issue/Question
Replies: 5
Views: 1273

Re: Bridge Issue/Question

A little more info would help. /interface bridge print /interface bridge port print /ip firewall nat print [admin@MikroTik] /interface> bridge print Flags: X - disabled, R - running 0 R name="bridge" mtu=1500 l2mtu=1524 arp=enabled mac-address=00:0C:42:CA:FA:AB protocol-mode=none priority=0x8000 au...
by mhoppes
Tue Feb 14, 2012 9:45 pm
Forum: General
Topic: Bridge Issue/Question
Replies: 5
Views: 1273

Re: Bridge Issue/Question

48 hours and no response from either the forum or support? What a great way to encourage people to start using the Ubiquiti EdgeOS when it comes out.
by mhoppes
Mon Feb 13, 2012 7:09 pm
Forum: General
Topic: BUG : 5.11/5.12 Password Silently Drops Characters
Replies: 4
Views: 1077

BUG : 5.11/5.12 Password Silently Drops Characters

It seems in the 5.11/5.12 firmwares that using the character ( in passwords causes problems. Recently I tried to set the password to something using this and it seemed to accept it but then I couldn't log in to the router using the password entered.
by mhoppes
Sat Feb 11, 2012 11:15 pm
Forum: General
Topic: Bridge Issue/Question
Replies: 5
Views: 1273

Bridge Issue/Question

I've tried this on Router OS 5.11 and 4.x, both have the same result... so I'm assuming I must be doing something wrong -- but looking for advise as I'm drawing a blank. My current config is like so on an RB450GS: Port 1 - [Internet Connection] Port 2 - [DHCP+Nat 192.168.88.1/24] Port 3 - [DHCP+Nat ...
by mhoppes
Wed Feb 08, 2012 8:14 pm
Forum: General
Topic: Simple Queues Will Not Apply to Interface
Replies: 16
Views: 13693

Re: Simple Queues Will Not Apply to Interface

What's new in 5.10 (2011-Dec-09 11:49):

*) snmp - provide extended interface statistics when availabe;
isn't that the thing you're looking for?..
Why yes... yes it is! I had no idea that was added in 5.10. Thanks for pointing that out!
by mhoppes
Wed Feb 08, 2012 6:43 pm
Forum: General
Topic: Simple Queues Will Not Apply to Interface
Replies: 16
Views: 13693

Re: Simple Queues Will Not Apply to Interface

"friends don't let friends bridge their networks" xD
I'd be glad not to bridge -- if MikroTik supported SNMP graphing of switched interfaces! That's THE only reason I bridge. If there was some way to stay switched every MT switch in my network would be switched only.
by mhoppes
Tue Feb 07, 2012 3:42 pm
Forum: General
Topic: Simple Queues Will Not Apply to Interface
Replies: 16
Views: 13693

Re: Simple Queues Will Not Apply to Interface

In case anyone else has this problem.... you do have to have /interface bridge settings and then the ip-firewall set to yes
by mhoppes
Thu Jan 26, 2012 7:40 pm
Forum: General
Topic: Simple Queues Will Not Apply to Interface
Replies: 16
Views: 13693

Re: Simple Queues Will Not Apply to Interface

Do you have ethernet ports set to a master port? (you shouldn't if you want to limit traffic) Nope... Flags: X - disabled, R - running, S - slave # NAME MTU MAC-ADDRESS ARP MASTER-PORT SWITCH 0 R Office 1500 00:0C:42:B1:B8:F7 enabled none switch1 1 R Roof 2.4 CPE 1500 00:0C:42:B1:B8:F8 enabled none...
by mhoppes
Thu Jan 26, 2012 6:52 pm
Forum: General
Topic: Simple Queues Will Not Apply to Interface
Replies: 16
Views: 13693

Re: Simple Queues Will Not Apply to Interface

Ok, I tried this (on a different device that I can test on) add name="test" interface=Office max-limit=3M/3M Flags: X - disabled, I - invalid, D - dynamic 0 name="test" dst-address=0.0.0.0/0 interface=Office parent=none direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-li...
by mhoppes
Thu Jan 26, 2012 6:22 pm
Forum: General
Topic: Simple Queues Will Not Apply to Interface
Replies: 16
Views: 13693

Re: Simple Queues Will Not Apply to Interface

e.g. turning this to a yes?

[admin@a] /interface bridge settings> print
use-ip-firewall: no
use-ip-firewall-for-vlan: no
use-ip-firewall-for-pppoe: no
by mhoppes
Thu Jan 26, 2012 5:46 pm
Forum: General
Topic: Simple Queues Will Not Apply to Interface
Replies: 16
Views: 13693

Re: Simple Queues Will Not Apply to Interface

Per this post:

http://forum.mikrotik.com/viewtopic.php?f=2&t=40275

Do I need to enable something for this to work?
by mhoppes
Thu Jan 26, 2012 5:34 pm
Forum: General
Topic: Simple Queues Will Not Apply to Interface
Replies: 16
Views: 13693

Re: Simple Queues Will Not Apply to Interface

Ok, I tried this (on a different device that I can test on) add name="test" interface=Office max-limit=3M/3M Flags: X - disabled, I - invalid, D - dynamic 0 name="test" dst-address=0.0.0.0/0 interface=Office parent=none direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-lim...
by mhoppes
Thu Jan 26, 2012 3:10 pm
Forum: General
Topic: Simple Queues Will Not Apply to Interface
Replies: 16
Views: 13693

Re: Simple Queues Will Not Apply to Interface

I have tried this once some years ago and it worked. I am not sure if the queue would capture traffic from your interface since it is encapsulated in another interface, which is "bridge1". Try if the queue works if you specify: interface=bridge1 . as for upgrading/downgrading, of course you can. Ju...
by mhoppes
Thu Jan 19, 2012 11:56 pm
Forum: General
Topic: Simple Queues Will Not Apply to Interface
Replies: 16
Views: 13693

Re: Simple Queues Will Not Apply to Interface

I have tried this once some years ago and it worked. I am not sure if the queue would capture traffic from your interface since it is encapsulated in another interface, which is "bridge1". Try if the queue works if you specify: interface=bridge1 . as for upgrading/downgrading, of course you can. Ju...
by mhoppes
Thu Jan 19, 2012 3:14 pm
Forum: General
Topic: Simple Queues Will Not Apply to Interface
Replies: 16
Views: 13693

Simple Queues Will Not Apply to Interface

I spent a good 30 minutes this morning trying to get rate limiting working on two interfaces using Simple Queues... all to no avail. Can anyone enlighten me as to what I might be doing wrong? /queue simple add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both disabled=no \ interfac...
by mhoppes
Mon Jan 16, 2012 3:54 am
Forum: General
Topic: VLAN ACL Question
Replies: 8
Views: 2055

Re: VLAN ACL Question

Why not?
A /24 is the entire 255.255.255.0 subnet.

Oh I guess it will sort of work. I was thinking a /23 was invalid since everything was /24, but I guess it does encompass two subnets in one rule.
by mhoppes
Mon Jan 16, 2012 3:45 am
Forum: General
Topic: VLAN ACL Question
Replies: 8
Views: 2055

Re: VLAN ACL Question

You need something more like this assuming you are using /24. /ip firewall filter add action=drop chain=forward disabled=no dst-address=10.200.92.0/23 src-address=10.200.91.0/24 /ip firewall filter add action=drop chain=forward disabled=no dst-address=10.200.91.0/23 src-address=10.200.93.0/24 /ip f...
by mhoppes
Mon Jan 16, 2012 3:29 am
Forum: General
Topic: VLAN ACL Question
Replies: 8
Views: 2055

Re: VLAN ACL Question

Nope the firewall is the simplest way. OK. I tried the firewall and it seemed to block more than it should have (e.g. no Internet access). The network is setup as such: Router: 10.200.91.1 - VLAN1 10.200.92.1 - VLAN2 10.200.93.1 - VLAN3 Is there an easier way than making a rule on each VLAN specifi...
by mhoppes
Mon Jan 16, 2012 12:44 am
Forum: General
Topic: VLAN ACL Question
Replies: 8
Views: 2055

Re: VLAN ACL Question

Seriously? Not even a hint of a link somewhere?
by mhoppes
Fri Jan 13, 2012 6:39 pm
Forum: General
Topic: VLAN ACL Question
Replies: 8
Views: 2055

VLAN ACL Question

If I have 3 VLANs on a MikroTik and I want to prohibit traffic from one talking to another, what's the best way to do that?

Obviously I can setup firewall rules, but before I do this I wanted to see if there was a simpler way, or a simple set of firewall rules that might do it?
by mhoppes
Fri Dec 02, 2011 1:51 pm
Forum: General
Topic: EoIP/PPtP on Two DSL Connections?
Replies: 0
Views: 330

EoIP/PPtP on Two DSL Connections?

If I'm using two DSL connections (not bonded at the CO) can I get EoIP to work over both of them at the same time? I know (at least I'm pretty sure) I can do load balancing over two connections if I'm just going out... but can I get a PPTP/EoIP connection to work that way?
by mhoppes
Wed Aug 03, 2011 4:10 pm
Forum: General
Topic: rb450 reboot problem
Replies: 50
Views: 9082

Re: rb450 reboot problem

mhoppes,
have you reported them to support?
Yes. All issues were reported. If not by me by others in the forums.

Interestingly at one point there was a thread about 5.x not being ready for stable release. That thread was erased!
by mhoppes
Wed Aug 03, 2011 3:56 pm
Forum: General
Topic: rb450 reboot problem
Replies: 50
Views: 9082

Re: rb450 reboot problem

This bug has been fixed starting from v5.0. It is recommended to upgrade to latest version.
I will as soon as it becomes stable. Last I checked there were numerous bugs affecting routing and dhcp and arp.
by mhoppes
Thu Jul 21, 2011 5:29 pm
Forum: General
Topic: Queue Help
Replies: 17
Views: 2435

Re: Queue Help

never mind, I see the string setting here. Thanks for the direction.
by mhoppes
Thu Jul 21, 2011 5:24 pm
Forum: General
Topic: Queue Help
Replies: 17
Views: 2435

Re: Queue Help

This seems to have done it. I guess I was still somehow working under the trial system as opposed to truly logging in as another user. Now, the only question I have (which isn't a necessity) is, using this shaping method is it possible to allow bursting? I don't see a setting for that in ip hotspot ...
by mhoppes
Thu Jul 21, 2011 4:18 am
Forum: General
Topic: Queue Help
Replies: 17
Views: 2435

Re: Queue Help

I will give this a try and report back. I think I may have still been using the trial user somehow because of the Mac statement. So with what you just gave me it should limit each *instance* of a user using that username to 1meg correct? As opposed to limiting all users using that username to a tota...
by mhoppes
Thu Jul 21, 2011 2:46 am
Forum: General
Topic: Queue Help
Replies: 17
Views: 2435

Re: Queue Help

Fewi, I forgot... we are actually using user authentication, very similar to how you suggested. For some reason I thought we were using the trial system. I think I did this when we were first setting up so we could use cookies for authentication "stickyness". Here is the code: <tr> <td align="center...
by mhoppes
Wed Jul 20, 2011 10:01 pm
Forum: General
Topic: Queue Help
Replies: 17
Views: 2435

Re: Queue Help

Two different approaches: a) use what I call an auto login. It's an HTML login page crafted to automatically submit credentials to the router, which logs the user in, and then redirects them to a page saying "Free Internet sponsored by ABC Corp". I can post steps for that. This replaces the trial f...
by mhoppes
Wed Jul 20, 2011 9:34 pm
Forum: General
Topic: Queue Help
Replies: 17
Views: 2435

Re: Queue Help

Alright, thanks for the reply. I've literally read about 10 queue documentations in the wiki and haven't gotten anything to work yet. The problem I saw, when I tried what you suggested, was that my users don't log-in (it's an open hotspot) with all users using the "trial" feature to authenticate. Th...
by mhoppes
Wed Jul 20, 2011 5:55 pm
Forum: General
Topic: Queue Help
Replies: 17
Views: 2435

Re: Queue Help

Let me try this question a different way. In the hotspot profiles there is a rate-limit value. (/ip hotspot profile). Is that rate-limit per LOGIN to the profile or for the ENTIRE profile? (e.g. does the entire profile get only 1 meg if that's what I set, or does each user get 1 meg whom uses that p...
by mhoppes
Thu Jul 14, 2011 6:57 pm
Forum: General
Topic: Queue Help
Replies: 17
Views: 2435

Queue Help

I have never touched MikroTik queues before, so I'm hoping someone can at least point me in the right direction. SCENARIO: * I have a 50Meg backbone to my MT Router. * The MT Router is handing out DHCP to clients behind it. * I want to: **** Allow users to use the full 50 meg for a period of time (e...
by mhoppes
Tue Jun 28, 2011 9:39 pm
Forum: General
Topic: RB450G 4.16 - Unresponsive
Replies: 1
Views: 303

RB450G 4.16 - Unresponsive

I have an RB450G running release 4.16 of the routerboard software. Today for some reason it seemed to stop passing traffic. I was not able to access it from any of the ports. It is configured as only a switch (no routing). The log did not show any Ethernet drops or other issues. A device connected t...
by mhoppes
Fri Jun 03, 2011 8:57 pm
Forum: General
Topic: rb450 reboot problem
Replies: 50
Views: 9082

Re: rb450 reboot problem

What SNMP bugs? Have I missed something? Apparently - you missed the thread that MikroTik deleted :shock: the ENTIRE THREAD dedicated to how 5.x wasn't production stable and should be removed from the 'stable' download area. http://forum.mikrotik.com/viewtopic.php?f=13&t=51372 http://forum.mikrotik...
by mhoppes
Fri Jun 03, 2011 1:47 pm
Forum: General
Topic: rb450 reboot problem
Replies: 50
Views: 9082

Re: rb450 reboot problem

Are the snmp bugs fixed in 5.4?
by mhoppes
Thu Jun 02, 2011 5:30 pm
Forum: General
Topic: rb450 reboot problem
Replies: 50
Views: 9082

Re: rb450 reboot problem

I had the same problems on many different routerboards (493ah, 443ah, 411u,...). The problem has been solved for my routers in 5.2. They can reboot without shutting down, so watchdog is usefull again.
Sadly - 5.2 is not a stable firmware, so we can't upgrade to it yet.
by mhoppes
Thu Jun 02, 2011 3:48 pm
Forum: General
Topic: rb450 reboot problem
Replies: 50
Views: 9082

Re: rb450 reboot problem

For that matter can someone explain HOW / WHY this is happening? How can a reboot command get confused with a shutdown command? We've had to disable all watchdogs on our systems because the systems would shutdown instead of reboot if the watchdog kicked in!!! And as of right now the 5.x series is wa...
by mhoppes
Mon Mar 28, 2011 4:02 pm
Forum: General
Topic: rb450 reboot problem
Replies: 50
Views: 9082

Re: rb450 reboot problem

Seriously... no updates?!?! I'm scared stiff to reboot an RB at a remote site right now until we figure out why this is going on. Hello, MikroTik... ANYTHING?
by mhoppes
Mon Mar 28, 2011 3:55 pm
Forum: General
Topic: v4.17 released
Replies: 9
Views: 2158

Re: v4.17 released

So the, "I wanted to reboot the router, but it shutdown instead" issue wasn't fixed in this release?
by mhoppes
Mon Mar 28, 2011 3:37 am
Forum: General
Topic: QoS to throttle long running downloads?
Replies: 1
Views: 432

QoS to throttle long running downloads?

Is there a way (with the fair queues) to give priority to new traffic over old traffic... either limiting the old long running download when something else wants bandwidth, or reducing a long running download to X bits/second when it has been running for Y time?
by mhoppes
Thu Mar 17, 2011 9:23 pm
Forum: General
Topic: rb450 reboot problem
Replies: 50
Views: 9082

Re: rb450 reboot problem

Do we have any update on this?
by mhoppes
Fri Mar 04, 2011 3:20 am
Forum: General
Topic: RB450G slow throughput
Replies: 21
Views: 9674

Re: RB450G slow throughput

Theres something terribly wrong with your setup, this board has quite powerfull CPU which is able to bridge at least 600MBps without conntrack or QoS using big packets, no way its only 1.5MBps... Thanks... you're the first breath of sense I've seen in this conversation. As far as I knew, the bridge...
by mhoppes
Thu Mar 03, 2011 2:57 am
Forum: General
Topic: Repeated ARP Requests for non-existent hosts
Replies: 4
Views: 1225

Re: Repeated ARP Requests for non-existent hosts

Could someone not cause a DoS by repeatedly pinging addresses that aren't assigned?
by mhoppes
Thu Mar 03, 2011 1:08 am
Forum: General
Topic: Repeated ARP Requests for non-existent hosts
Replies: 4
Views: 1225

Re: Repeated ARP Requests for non-existent hosts

I understand both of those points. I was asking if there is any kind of negative ARP cache. There's no reason to keep ARPing for a host that isn't on the network.
by mhoppes
Wed Mar 02, 2011 10:23 pm
Forum: General
Topic: Repeated ARP Requests for non-existent hosts
Replies: 4
Views: 1225

Repeated ARP Requests for non-existent hosts

Greetings, My Routerboard is consistently making ARP requests for non-existent hosts on my network. That is, I own the IP block, but there is nothing assigned to the IP in question. As far as I can tell something on the Internet is making a request or pinging this IP. However, I'm a little confused ...
by mhoppes
Wed Mar 02, 2011 5:36 pm
Forum: General
Topic: RB450G slow throughput
Replies: 21
Views: 9674

Re: RB450G slow throughput

"I find it to be a HUGE oversight on the part of MikroTik/RouterOS that when I enabled switching only (no bridge) I lose visibility of graphing throughput on each port" Ofcourse, its because the switch is HW switch so once you enable it, it doesnt go through the CPU and doesnt slow it down. If you ...
by mhoppes
Tue Mar 01, 2011 2:00 pm
Forum: General
Topic: rb450 reboot problem
Replies: 50
Views: 9082

Re: rb450 reboot problem

my configuration is very simple, i have bridge interface, pppoe server and thats all Can you try to disable bridge/-s and PPPoE server/-s on by one and check whether you can reproduce this problem? I tested configuration you described with RB450G v4.16/2.29 and reboot is successful. We don't have P...
by mhoppes
Mon Feb 28, 2011 3:48 pm
Forum: General
Topic: rb450 reboot problem
Replies: 50
Views: 9082

Re: rb450 reboot problem

Before or after said reboot? Since we can't do it while it's off :)
by mhoppes
Mon Feb 28, 2011 3:46 pm
Forum: General
Topic: RB450G slow throughput
Replies: 21
Views: 9674

Re: RB450G slow throughput

Here's what I've got, which I believe is correct, but just wanted confirmation: Flags: X - disabled, R - running, S - slave 0 R name="Level3" mtu=1500 l2mtu=1524 mac-address=00:0C:42:AC:58:84 arp=enabled auto-negotiation=no full-duplex=yes speed=100Mbps master-port=none bandwidth=unlimited/unlimited...
by mhoppes
Mon Feb 28, 2011 1:58 pm
Forum: General
Topic: rb450 reboot problem
Replies: 50
Views: 9082

Re: rb450 reboot problem

Em
Can anyone post console output after reboot command as requested by sergejs?
No, because there is none. The system just shuts down.
by mhoppes
Mon Feb 28, 2011 5:29 am
Forum: General
Topic: rb450 reboot problem
Replies: 50
Views: 9082

Re: rb450 reboot problem

The boards simply shutdown rather than reboot.
by mhoppes
Mon Feb 28, 2011 5:26 am
Forum: General
Topic: rb450 reboot problem
Replies: 50
Views: 9082

Re: rb450 reboot problem

Are you by any chance using microSD flash with these units that are failing to reboot?

Tom
No.
by mhoppes
Mon Feb 28, 2011 5:09 am
Forum: General
Topic: RB450G slow throughput
Replies: 21
Views: 9674

Re: RB450G slow throughput

Why do you say it will be severly limited? I have a few RBs running bridged and we've seen no problems.

So then I did everything right, but the ports still show associated to "switch1" even though there is no longer a master port linking. Is that normal?
by mhoppes
Mon Feb 28, 2011 4:54 am
Forum: General
Topic: rb450 reboot problem
Replies: 50
Views: 9082

Re: rb450 reboot problem

We too are seeing this. We don't use Winbox. I was terminated in the one time and the box just sat at a blank screen instead of rebooting.
by mhoppes
Mon Feb 28, 2011 4:46 am
Forum: General
Topic: RB450G slow throughput
Replies: 21
Views: 9674

Re: RB450G slow throughput

Thanks for all of the input so far. Unfortunately, it appears in switch mode I lose the complete ability to see distinct statistics for each port and can't run CALEA. That won't fly. So, going back to bridge mode, do I need to yank the ports off the switch? Or do they stay? Eg when port 1 is a membe...
by mhoppes
Wed Feb 16, 2011 8:08 am
Forum: General
Topic: New switch feature bridge with fancy name?
Replies: 6
Views: 1286

Re: New switch feature bridge with fancy name?

I have this question as well.... it seems I lose visibility on the ports when I bridge. I have no graphs any more to show how much traffic is going through them. Is there a work around for this? Please clarify whether you use bridging or switching. It is normal that only master-port of a switching ...
by mhoppes
Wed Feb 16, 2011 5:13 am
Forum: General
Topic: New switch feature bridge with fancy name?
Replies: 6
Views: 1286

Re: New switch feature bridge with fancy name?

Please take a look at Port switching paragraph . Why are there now port statistics other than on the master port? What statistics do you mean? I have this question as well.... it seems I lose visibility on the ports when I bridge. I have no graphs any more to show how much traffic is going through ...
by mhoppes
Tue Feb 15, 2011 11:39 pm
Forum: General
Topic: Graphing Throughput on Switch Ports
Replies: 0
Views: 310

Graphing Throughput on Switch Ports

Is there something special I need to do to allow Cacti or MRTG to graph the throughput of each switch port on a MikrotTik? I only seem to be able to graph the WAN port and the 'Main' Switch port. Which doesn't really help me know what is going through the rest of the ports. I was able to graph each ...
by mhoppes
Mon Feb 14, 2011 4:13 pm
Forum: General
Topic: RB450G slow throughput
Replies: 21
Views: 9674

Re: RB450G slow throughput

Yes kill the bridge and please report the results. When you slave ports, you are using the switch chip hardware to create a layer 2 switch. The CPU is not used. When you bridge, you are using the CPU to do the same thing. I suspect you are creating a loop where the CPU and the switch chip are fight...
by mhoppes
Sun Feb 13, 2011 10:54 pm
Forum: General
Topic: RB450G slow throughput
Replies: 21
Views: 9674

Re: RB450G slow throughput

My Interface configuration is as follows: 0 R name="Level3" mtu=1500 l2mtu=1524 mac-address=00:0C:42:AC:58:84 arp=enabled auto-negotiation=no full-duplex=yes speed=100Mbps master-port=none bandwidth=unlimited/unlimited switch=switch1 1 R name="Wireless-Backhaul" mtu=1500 l2mtu=1524 mac-address=00:0C...
by mhoppes
Sun Feb 13, 2011 7:34 pm
Forum: General
Topic: RB450G slow throughput
Replies: 21
Views: 9674

Re: RB450G slow throughput

Are you using the default config or did you roll your own? If you rolled your own and didn't properly clear the default config, that could be your problem. BTW A proper clear is "system reset-configuration" from the CLI. You can't properly clear it from Winbox unless you open a terminal and run tha...
by mhoppes
Sun Feb 13, 2011 12:41 am
Forum: General
Topic: Bandwidth Test Questions
Replies: 5
Views: 749

Re: Bandwidth Test Questions

I can confirm this issue as well. Tried a bandwidth test in RoS 4.16 and it doesn't work. I did an `nmap` of udp 2000 and it says closed. I've tested in every way I can think- making sure firewall filters are off, with and without auth, a few different Routerboards. Edit: Also when I set the protoc...
by mhoppes
Sat Feb 12, 2011 4:15 pm
Forum: General
Topic: RB450G slow throughput
Replies: 21
Views: 9674

RB450G slow throughput

I have a RB450G which is setup in router mode utilizing the first port as the Internet facing side and the other 4 ports as the local side. When I pass traffic from the Internet to any of the four ports locally I'm getting the full speed I'd expect (20meg). However, when I try to pass traffic from o...
by mhoppes
Mon Feb 07, 2011 10:32 pm
Forum: General
Topic: Bandwidth Test Questions
Replies: 5
Views: 749

Re: Bandwidth Test Questions

The Mikrotik bw test will only run between two MT routerboards. Is that what you're trying to do?
Yes that's what I'm trying to do, and I've turned off authentication.
by mhoppes
Sat Feb 05, 2011 7:30 pm
Forum: General
Topic: Bandwidth Test Questions
Replies: 5
Views: 749

Bandwidth Test Questions

Here's another question from a MT noob. I have two MT boxes, one setup as a router one setup as a switch. Both are firewalled to only allow administrative access from our office IP block. I'd like to use the bandwidth tests built into the MT boxes, but haven't been able to get them to work. For test...
by mhoppes
Fri Feb 04, 2011 7:05 pm
Forum: General
Topic: Firewall rules on a router?
Replies: 3
Views: 383

Re: Firewall rules on a router?

from external to internal interface is forward chain. Input chain is only for packets which destination is router itself. Thanks. So if I understand correctly this: 0 chain=input action=accept protocol=icmp 1 chain=input action=accept protocol=tcp src-address=208.xxx.xxx.xxxx 2 chain=input action=a...
by mhoppes
Fri Feb 04, 2011 4:33 pm
Forum: General
Topic: Firewall rules on a router?
Replies: 3
Views: 383

Firewall rules on a router?

I'm fairly new to the MT system (coming from a Cisco background). I have several MTs configured as switches in my network, but am just installing the first MT as a router. My question is, right now my firewall is this: Flags: X - disabled, I - invalid, D - dynamic 0 chain=input action=accept protoco...
by mhoppes
Thu Feb 03, 2011 11:36 pm
Forum: Wireless Networking
Topic: Whitespace
Replies: 7
Views: 1260

Re: Whitespace

I was just curious if anyone is aware of anyone currently making, or who will be making whitespace enabled radio cards for MikroTik devices? I think UBNT is making a card but I can't remember for sure you may want to check their site. They are talking about it, but it is still a ways out... just th...
by mhoppes
Tue Feb 01, 2011 3:44 am
Forum: Wireless Networking
Topic: Whitespace
Replies: 7
Views: 1260

Whitespace

I was just curious if anyone is aware of anyone currently making, or who will be making whitespace enabled radio cards for MikroTik devices?
by mhoppes
Tue Jan 04, 2011 10:17 pm
Forum: General
Topic: RB450G - How to reset to defaults?!
Replies: 6
Views: 2304

Re: RB450G - How to reset to defaults?!

115200
That would be the issue.
by mhoppes
Tue Jan 04, 2011 9:58 pm
Forum: General
Topic: RB450G - How to reset to defaults?!
Replies: 6
Views: 2304

Re: RB450G - How to reset to defaults?!

Have you verified baud rate too?
9600?
by mhoppes
Tue Jan 04, 2011 8:42 pm
Forum: General
Topic: RB450G - How to reset to defaults?!
Replies: 6
Views: 2304

Re: RB450G - How to reset to defaults?!

Use the console cable to gain access. You can issue "/system reset-configuration" from the CLI.
Except that when I try the console cable I get garbage characters on my screen.. have verified 8-N-1 as my settings.
by mhoppes
Tue Jan 04, 2011 7:22 pm
Forum: General
Topic: RB450G - How to reset to defaults?!
Replies: 6
Views: 2304

RB450G - How to reset to defaults?!

I have an RB450 which I've reset on several occasions, never an issue. Today I tried to reset an RB450G and can't seem to manage to make it cooperate. When I press the reset button in and then power it up the green and blue lights come on but never go out, and the unit never issues DHCP or lets me a...
by mhoppes
Fri Oct 29, 2010 10:18 pm
Forum: General
Topic: Using Mikrotik as a Router AND Switch?
Replies: 8
Views: 1799

Re: Using Mikrotik as a Router AND Switch?

OK, I'm not understanding something (or trying to do something the RB can't do). [admin@Indigo Router] /interface ethernet> print Flags: X - disabled, R - running, S - slave # NAME MTU MAC-ADDRESS ARP MASTER-PORT SWITCH 0 R Internet 1500 00:0C:42:57:E5:66 enabled 1 R Community AP1 1500 00:0C:42:57:E...
by mhoppes
Tue Sep 21, 2010 3:48 pm
Forum: General
Topic: DHCP Failing after being up for a week
Replies: 1
Views: 368

DHCP Failing after being up for a week

Greetings, My RB450 is having a strange problem with DHCP. After being on for a week, it offers DHCP addresses to clients, but fails to bind to anything it offers to. A reboot solves the problem. When the issue is happening the web interface shows: Address MAC-Address Client-ID Dynamic Status 192.16...
by mhoppes
Sat Sep 18, 2010 12:01 am
Forum: General
Topic: Using Mikrotik as a Router AND Switch?
Replies: 8
Views: 1799

Re: Using Mikrotik as a Router AND Switch?

Yes, the document I linked to shows that. To get ether1 as WAN and ether2, ether3 and ether4 switched for the LAN you just set the master-port of ether3 and ether4 to ether2. At that point they all behave like one layer 3 interface for your LAN, and traffic between them is switched. All layer 3 con...
by mhoppes
Fri Sep 17, 2010 11:40 pm
Forum: General
Topic: Using Mikrotik as a Router AND Switch?
Replies: 8
Views: 1799

Re: Using Mikrotik as a Router AND Switch?

http://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features#Introduction Possibly. Depends on what version of the RB450. If you have a menu item named "/interface ethernet switch" then you do have a switch chip. I do.... So pardon the question, is there a document on what I need to do to split things...
by mhoppes
Fri Sep 17, 2010 11:27 pm
Forum: General
Topic: Using Mikrotik as a Router AND Switch?
Replies: 8
Views: 1799

Re: Using Mikrotik as a Router AND Switch?

Some RouterBOARDs have integrated switch chips - you just set the master-port of ether4 to ether3 and the two are switched at wire speed. If your RouterBOARD doesn't have a switch chip or you're running on x86 you can add a bridge and add ether3 and ether4 to the bridge, and configure everything on...
by mhoppes
Fri Sep 17, 2010 9:04 pm
Forum: General
Topic: Using Mikrotik as a Router AND Switch?
Replies: 8
Views: 1799

Using Mikrotik as a Router AND Switch?

My Mikrotik has several ports on it. One is the WAN Internet port and the others are LAN. I have a remote wireless setup and would like to setup the Mikrotik in the following fashion (if possible) to cut down on the amount of separate pieces of equipment I need to have running: PORT 1: WAN PORT 2: L...
by mhoppes
Fri Sep 10, 2010 9:39 pm
Forum: General
Topic: RB750 HotSpot - Stops HotSpotting....
Replies: 2
Views: 811

Re: RB750 HotSpot - Stops HotSpotting....

Doing a '/ip hotspot export' would be the correct command to see what the state of things are. If you post the results of that command we might be able to spot what is going on. I don't think the command you listed will actually ever give you any results. What is your chosen login method(s)? Do you...
by mhoppes
Fri Sep 10, 2010 9:01 pm
Forum: General
Topic: RB750 HotSpot - Stops HotSpotting....
Replies: 2
Views: 811

RB750 HotSpot - Stops HotSpotting....

I'm using an RB750 as my hotspot router. It provides a captive portal and asks users to log in. However, after being up for about a week, it will stop asking users to log in and just lets anyone through without showing the splash page. /ip hotspot active print shows nothing Any ideas on where I can ...
by mhoppes
Thu Sep 02, 2010 7:52 pm
Forum: General
Topic: Really Struggling to get a port forward rule working
Replies: 11
Views: 1768

Re: Really Struggling to get a port forward rule working

It would still be preferable to separate out customer and management traffic, not just for your purposes but also quite in general - right now everyone behind the Hotspot can also connect to the management functionality of the AP. The most simple method for that is to use VLANs on the access points...
by mhoppes
Thu Sep 02, 2010 7:22 pm
Forum: General
Topic: Really Struggling to get a port forward rule working
Replies: 11
Views: 1768

Re: Really Struggling to get a port forward rule working

Well, yes. The Hotspot would block things. It's generally speaking a horrible idea to run services behind a Hotspot. If there's any way you can move the service to a separate network you should do so. If you can't, bypass the server: /ip hotspot ip-binding add address=192.168.88.2 server=all type=b...
by mhoppes
Thu Sep 02, 2010 7:05 pm
Forum: General
Topic: Really Struggling to get a port forward rule working
Replies: 11
Views: 1768

Re: Really Struggling to get a port forward rule working

Those rules should work. Ensure the device has a route back through the RouterOS device to get back to the source of the connection, ensure it's actually listening on port 82, and that it doesn't have a host firewall blocking the traffic. The router looks to be set up correctly at this point. Ahhhh...
by mhoppes
Thu Sep 02, 2010 7:04 pm
Forum: General
Topic: Really Struggling to get a port forward rule working
Replies: 11
Views: 1768

Re: Really Struggling to get a port forward rule working

Those rules should work. Ensure the device has a route back through the RouterOS device to get back to the source of the connection, ensure it's actually listening on port 82, and that it doesn't have a host firewall blocking the traffic. The router looks to be set up correctly at this point. Ahhhh...
by mhoppes
Thu Sep 02, 2010 6:56 pm
Forum: General
Topic: Really Struggling to get a port forward rule working
Replies: 11
Views: 1768

Re: Really Struggling to get a port forward rule working

If I take out this line: chain=dstnat action=dst-nat to-addresses=192.168.88.2 to-ports=82 protocol=tcp in-interface=Internet dst-port=82 I get an instant 'cant connect' when I try to access the port. With that in, I get a timeout - so it's like its doing something, but either the device I'm forward...
by mhoppes
Thu Sep 02, 2010 6:41 pm
Forum: General
Topic: Really Struggling to get a port forward rule working
Replies: 11
Views: 1768

Re: Really Struggling to get a port forward rule working

Still no go =\ [admin@Indigo Router] /ip firewall nat> print Flags: X - disabled, I - invalid, D - dynamic 0 chain=dstnat action=dst-nat to-addresses=192.168.88.2 to-ports=82 protocol=tcp in-interface=Internet dst-port=82 1 chain=srcnat action=masquerade out-interface=Internet [admin@Indigo Router] ...
by mhoppes
Thu Sep 02, 2010 6:18 pm
Forum: General
Topic: Really Struggling to get a port forward rule working
Replies: 11
Views: 1768

Re: Really Struggling to get a port forward rule working

/ip firewall filter # delete all existing rules remove [find] # allow all packets that belong to connections that have already been OK'd by the packets establishing them not having been dropped add action=accept chain=input connection-state=established add action=accept chain=input connection-state...
by mhoppes
Thu Sep 02, 2010 5:32 pm
Forum: General
Topic: Really Struggling to get a port forward rule working
Replies: 11
Views: 1768

Really Struggling to get a port forward rule working

I've looked through the tutorials, the manual, and this forum and I am still at a loss for what is wrong with my port forwarding rules. Here are my assumptions: * I need to enter a rule to forward the port in dst-nat * I also need to enter a firewall rule to allow that port inbound from the Internet...
by mhoppes
Tue Aug 17, 2010 10:04 pm
Forum: General
Topic: Captive Portal Timeouts
Replies: 8
Views: 1380

Re: Captive Portal Timeouts

Enable HTTP-PAP instead of HTTP-CHAP - you don't care that the password is clear text since there's no secret for logging in as everyone is supposed to get free service.
That worked... thanks!
by mhoppes
Tue Aug 17, 2010 9:10 pm
Forum: General
Topic: Captive Portal Timeouts
Replies: 8
Views: 1380

Re: Captive Portal Timeouts

As a workaround, maybe try an automatic login. Write a login.html that submits an existing username and password to /login - same functionality (no one has to provide credentials), but you're out of trial mode and to the router everyone is just authenticated, albeit without the customer having to i...
by mhoppes
Tue Aug 17, 2010 7:23 pm
Forum: General
Topic: Captive Portal Timeouts
Replies: 8
Views: 1380

Re: Captive Portal Timeouts

Add the 'cookie' login method - if they do get logged out, the browser will automatically log them back in. I think that's cleaner than keeping stale connections around forever. Agreed - and I've got that turned on and have 67 cookies on the 'cookie print' screen. 1 name="hsprof1" hotspot-address=1...
by mhoppes
Tue Aug 17, 2010 6:43 pm
Forum: General
Topic: Captive Portal Timeouts
Replies: 8
Views: 1380

Re: Captive Portal Timeouts

Add the 'cookie' login method - if they do get logged out, the browser will automatically log them back in. I think that's cleaner than keeping stale connections around forever. Agreed - and I've got that turned on and have 67 cookies on the 'cookie print' screen. 1 name="hsprof1" hotspot-address=1...
by mhoppes
Tue Aug 17, 2010 6:23 pm
Forum: General
Topic: Captive Portal Timeouts
Replies: 8
Views: 1380

Captive Portal Timeouts

I'm fairly new to MicroTik boards (though so far they've lived up to everything I've heard about them [good]). I've been configuring a captive portal system for a hotspot application and have it working well, with the exception of one item. Users are able to connect and if they stay connected can us...
by mhoppes
Thu Jul 29, 2010 9:36 pm
Forum: Beginner Basics
Topic: /ip hotspot profile
Replies: 1
Views: 568

/ip hotspot profile

Maybe this is a dumb beginner question, but I can not for the life of me figure out how to assign the trial hotspot user to any profile other than default.... can anyone offer any insight? See below: admin@Indigo Router] /ip hotspot profile> print Flags: * - default 0 * name="default" hotspot-addres...