MikroTik

Ripper

How to redirect users from adress-list to park page .... I've idea that it has to be pushed thru msftconnecttest.com like page and block all other pages but how to do it right ... To change msftconnecttest.com page to mine i think i have to override dns record of that page but how to do it for just ...

Ripper

how to make WIFI authorization page it should open any page i want before real webpages from internet? I need someway to run captive mechanism to push my page to user.

Ripper

Is any way to redirect all web trafic from adress-list to some parking page (https://blababla.com/noacces.html) I've tryed to play with redirect to web-proxy but just http requests works fine all other https pages (most common) rooling till no access .... Is any way to do it right (custom pariking p...

Ripper

There is no way to update it many billing code made to control that router and I've no time now to fix all isues after update (it should be many changes at any new update).... which part of config you want to share to you ? You can close topic i found answer gateway was limited by shaper rule queque...

Ripper

I've problems with gateway ping time and pinging from MT router it self pings jumps to 1000-3000 ms sometime it drops .... but no problems with pinging from INTERNAL network to global WWW and LOCAL pinging just any ping the router (CPU LOAD <= 50% CHR 6.42.10). There are several VLANS with same conf...

Ripper

That issue got TP-LINK routers DUID new each time ...

I've disable DHCPv6 becouse of that ...

Ripper

Yes it get link local gateway but ... (look at my routetabels posted above) problem that there is no route to global adress that users get at LAN behind router ... and no internet at all ... to make it work ... (direct pc connection works) if i make static IPV6 (with global gateway adress from that ...

Ripper

I have a question how to cast default route gateway to client if i didnt put static gateway it trying to use link local adress of mikrotik router of that interface and didnt get router to internet ( ... how to cast global ipv6 adress of Mikrotik from that interface ... Routing table with WAN SLAAC m...

Ripper

Community lost interest to tread but problem isnt fixed ...

Ripper

But unux machine works ... ? windows machine too (direct connect without router) But two different router has same issue (TP-LINK and ubnt) has to ping to keep alive ... radvd interface eth1 { AdvSendAdvert on; # Note: {Min,Max}RtrAdvInterval cannot be obtained with radvdump AdvManagedFlag on; AdvOt...

Ripper

IP is static all is good with it SIT didnt down (UP router SIT ipv6 ip reachable no proble all the time)...half test ipv6 routers down (unreachable) half still works ... I don't understand that magic trick to make link alive i have to ping gateway from router WTF for exaple 2a01:xx:yyyy:7700::1 ? an...

Ripper

After some time static Router going unreachable ... so ipv6 down no wan ping no lan ping ... from world ... have to reboot router to make it alive again ...

Ripper

Still issue with routing i have to always ping router to keep its alive (static route to subnet with check gateway (wan router) by ping keep it alive ... But strange ... And im still think how to use one prefix per router ... No two as now.

Ripper

You mean that if you use static WAN config for TP-Link, it doesn't allow SLAAC for LAN? Hmm, I don't have any explanation why it shouldn't be possible. If I look at the emulator you posted a link to earlier, I'd say it should work. After several routers reboots it allow me to put extra subnet as pr...

Ripper

I got few more questions At exaple of tunnel brocker config for MT is - Add address 2a01:xx:zzzz:105::2/64 to sit1 (advertise=no) (advertise=YES) recomended - Add default route (dst-address=::/0 gateway=2a01:xx:zzzz:105::1) dst-address=2000::/3 recomended should I ignore it ? And just update info my...

Ripper

its already set 0 A S 2000::/3 2a01:xx:zzzz:105::1 1 reachable sit1 ubnt router was several times rebooted and changed ipv6 adress at lan1 from 2a01:xx:yyyy:77::/64 to 2a01:xx:yyyy:7700::1/64 and ubnt router start to be rechable from outside world ... and add route A S 2a01:xx:yyyy:7700::/56 lan1 1 ...

Ripper

Server IPv6 address 2a01:xx:zzzz:105::1/64 Client IPv6 address 2a01:xx:zzzz:105::2/64 bind to sit Routed /48 IPv6 network 2a01:xx:yyyy::/48 IPv6 DNS server 2a01:xx::1 that tunnel broker config ... I've change miss at sit ipv6 to 2a01:xx:zzzz:105::2/64 not to /48 writen before but it doesnt change an...

Ripper

2a01:xxx:xxx:4000::/56 added at research stage ... It doesn't make anything in fact... Xx/48 required by tunnel brocker. I can ping any gateway from outside ... I can reach linux web server at lan1 interface by ipv6 ip. But cant reach any router ... Just ping inside vlan... Ive add ubnt router devic...

Ripper

That config

ipv6route.png

firewall.png

adressv6.png

Ripper

Ping LAN IPV6
AND WAN IPV6

But just from MT console ping ....
I doesnt ping from WORLD or from PC from other VLAN

Ripper

There is strange format have to write with zeros

Not :: at the end but ::0000 and it will aplay

Ripper

Static ipv6 is present ... Many first wave ip6 routers from tplink have such interface newest has ipv6 dhcp/slaac auto option but i dont have it to test ... 80 procent ipv6 real routers has such interface that im described old ipv6 Support. Ive test emulator it works for me.

Ripper

There is no such option https://emulator.tp-link.com/Archer_C7/Index.htm (hardware version v1) and tplink 940v3 such interface and 840n

Ripper

I cant write here anything ... Just defaults ::
If write here ip of mikrotik at vlan100 it gives an error 51000 at change it back to ::

Ripper

Ive done all test before writing with beginning configuration that ive described at first post. .. and if i connect notebook windows or Ubuntu directly without router to vlan100 all was automatically assigned and works well ...ipv6 web open and ipv6 speedtest and webtest done ... Also i can ping tha...

Ripper

Yes.
Ive made vpn test connection to same sub with prefix declaration from pool and all works thrue VPn to mikrotik all online test done without issue. All ips was auto configured and dynamic route auto added at roting

Ripper

Ive bind [*]2a01:xx:xxxx:1000::73 to WAN of Client Router at vlan 100 2a01:xx:xxxx:1000::1 Mikrotik Router vlan100 2a01:xx:xxxx:1001::/64 to LAN of client Router i've add Static Router 2a01:xx:xxxx:1001::/64 gateway vlan100 Mikrotik can ping 2a01:xx:xxxx:1000::73 for 1-2 min then timeout .... but Ca...

Ripper

I've made pools 2a01:xx:xxxx:1000::/56 /vlan100 2a01:xx:xxxx:2000::/56 /vlan200 .... I've bind ipv6 adress on vlans 2a01:xx:xxxx:1000::1/64 -> vlan 100 from pool v6vlan100 (CANT BIND 2a01:xx:xxxx:100::1/64 ERR POOL PREFIX) 2a01:xx:xxxx:2000::1/64 -> vlan 200 from pool v6vlan200 .... I've made static...

Ripper

I've tryed to enable DHCPv6 that router recive nothing at all ... Structure Main Router MT got 2a01:xx:xx:400::/64 at vlan interface that looks to clients TP-LINK Router I want that client recive something below 2a01:xx:xxxx:400:: to recognize it for example 2a01:xx:xxxx:400:1:: and LAN network from...

Ripper

It's lattest firmare for not cheapest router Archer C7 v1 i've tryed for newer Archer C50v4 (more cheaper) its have same IPv6 setup page .... (TP-LINK 940N V3 i think have same setup page) Give me advices I will try to check it ... i've no experience at v6 after router ... i've use it as endpoint an...

Ripper

I've setup that way but it doenst work ... static2.png static.png that configuration recived without router DHCP is on. . . . . . . . . . . : No Auto tuning is on. . . . . . : Yes IPv6 Address . . . . . . . . . . . : 2a01: xx: xxxx: 400: b413: fa26: d310: eaa3 (Basic) The local IPv6 addr...

Ripper

At many TP-link routers 1-2 year old with ipv6 support no SLAAC option just DHCPv6, PPPoE, Tunnel 6to4 and STATIC IP... So as I've understand I have to declarate /56 for each end user router ? As I don’t have SLAAC option at router I have to use Static V6 ip configuration I've enter IPv6 Address: I'...

Ripper

I've a problem with opening https pages thru tunnel ... http works well ping too ...

MT 6.42.1

pppoe-cyfra 1480
sit 1280

same tunnel brocker at other RB with native ipv4 connect works well same as HTTP and HTTPS

Ripper

I've made src-nat rule with dst-adress 10.4.1.40 dst-port 37777 action masquerade but nothing writes at logs with 10.4.1.30 goes to 10.4.1.40 but there is some info with WAN to LAN access with global rule. I fix it ... any way we need src-nat (I've remove WAN ip from rule) rule before than I can con...

Ripper

I got device with hardware port isolation so client cannot get each one directly just can reach mikrotik router... I have NVR inside that network and I have to make it reachable.... How can I reroute traffic thru mikotik ... mikrotik can reach each client... I need to do some sort of nating inside n...

Ripper

I've single NAT masqurete to out interface wan1 so there is no at each vlan but its works from it ...

Ripper

config is quite big because of working system ...
You can check it by your self without my config make 2 interfaces each make separate vlan than need to make route role between them .. each vlan got his own dhcp nat ip (as gateway) filter is clear without rejection ...

Ripper

I want to remaind that question is routing between vlan's but all other is working ... internet and so on is working .

Why is treaceroute report that rejected
2 pc (10.4.10.100) 3.132 ms !X 5.970 ms !X 5.938 ms !X

Ripper

It was already configured similar to posted above ... LAN1 -> vlan3 set ip to that interface LAN2 -> vlan4 set ip to that interface Nothing at firewall because of no effect at all ... but if I want to block its works ... will read wiki ... And by the way its not hardware routeros device its CHR ...

Ripper

I've got different separate physical interfaces which is vlan3-lan1 vlan4-lan2... 1 vlan3 (10.3.10.1) 0.811 ms 0.369 ms 0.532 ms 2 pc (10.4.10.100) 3.132 ms !X 5.970 ms !X 5.938 ms !X I don't see 10.4.10.1 gateway at road here ... looks like its droped ... but if ping I've got responds from 10.4.10....

Ripper

How to make routing between VLANs without making bridge. I've got VLAN3 10.3.10.0/24 gateway 10.3.10.1 VLAN4 10.4.10.0/24 gateway 10.4.10.1 ping from VLAN3 to VLAN4 OK PC from that network responds (mabe fake respond because of strange ping 2-3 ms which is quite big. traceroute doesn't work how to m...

Ripper

WHY THAT THING DOESNT WORK VIA PHP API queue simple print where name~"user" disabled via console its returns 2 rows as expected. Then I've tried to do it thru php $ARRAY = $API->comm("/queue/simple/print", array( ".proplist"=> ".id", "~name"=> "...

Ripper

OK about capslock ...
You can close that tread I've found solution and everything is working ... =)

Ripper

HOW TO FIND ITEM BY COMMENT (UNIQ COMMENT) $ARRAY = $API->comm("/ip/firewall/filter/print", array( ".proplist"=> ".id", "?comment"=> "BEST USER", )); print_r($ARRAY); expect ID THAT USER TO REMOVE THAT ITEM NEXT BUT RECIVED *CA WHAT IS THAT ? I FOUND...

Ripper

ok will make 2 different request ( ....

Ripper

I need to take all raws which contain "K92-2" (it can be K92-2, K92-2-U, K92-2-W). Some time its just one raw some time its two. $ARRAY = $API->comm("/queue/simple/print", array( "?name" => "$result " )); That code return data just if $result[code] its exact s...

Ripper

I've redirected tcp 80/8080/3128 ports to 8080 web proxy ... and tried to test performance via speedtest without 95/95 (max of current connection) with web-proxy -75/80 why its so weak ? Second question proxy override gateway ip to internal ip that is not good how to fix it ? And one more question h...

Ripper

Cant understand how its works ... Need block all input connections except provided services listed below ... but its not override block rule .. /ip firewall filter add chain=input comment="connection-state=established" connection-state=\ established add chain=input comment="connection...

Ripper

I don't say rocket M i say rocket dish antenna ... boards same each side

Ripper

Both channels selected distance 7km clear LOS(visually and linkcalculator) Rocket30 dish each side power 17dbm

Ripper

Distance is changable just in one side ... so i set it there +1km to actual but it don't help ...

chanel speed limited by 180 don't know why ...

Ripper

I will try and post you soon

Ripper

I've already used superchannel i can't configure to more precise becouse of heavy snow now i cant reach device now ... when i set low noise floor level -128 ... my signal level boosed from -65 to that levels ... Now i get 100 mbit mixed traffic torrent (limit of uplink as before differenc just level...

Ripper

almost same

Ripper

I will be tryed it tomorow and will replay ...
I've read that there more peoples with troubles like my in same boards ... probably i need software update or ... it hardware issue ...

Ripper

RB/911G-5HPnD each side 7km bridge with rocket dishes RO 5.25 on eye clear LOS and calculator say same signal on default power level -50 Signal at 17dbm from -65 to -67 to chains is close to each one -65 second near -67 Noise floor -112 bridge wds dynamic mesh, nv2, wmm and dfs off, 2 chains set, ad...

Ripper

Should i disable STP on UBNT-UBNT bridge ?

Ripper

RSTP/STP disabled at mikrotik router side it's enabled on UBNT-UBNT wds bridge thet port is in bridge mode too.
At ubnt side STP enabled, aloso mikrotik connected to L2 switch loopback detection off...

Ripper

Yes cose at direct link no issue with that ... ISP -Mikrotik x86 5.23 - ubnt (bridge WDS) -TP-LINK 841 / 941 / 1043/ Asus N16 no images at google play and youtube ... no images at appstore and sometimes don't download anything ... troubles with itunes on PC won't connect too. other things seems to w...

Ripper

Appstore, googleplay, youtube have no images in preview of apps and videos ...
how can i fix that

Ripper

Still actual ...
If anybody need extra info plz post what exactly.

Ripper

I found way to make it work ... but till next reboot or manipulation with Eoip tunnel interface ... Disable eoip reboot mikrotik main side then enable it everything will work till next reboot or enablind disabling that interface again ... how to do that correctrly to work fine after reboot ... worse...

Ripper

I've got two seperate located offices ... I've made EoIP connection between each of MT routers throue Intetnet. then i've created bridge where i've add eth1 (LAN1) port and eoip tunel to remote side ... All service i've rebind to bridge interface. I've made thame thing at remote side exapt disable a...

Ripper

Main side X86 system 1G internet link white IPv4 Remote side 450G 100 mbit link white IPv4 latency 1-2 ms pocket loss 0% Thrue EoIP tunnel pocket loss 2-3% speed described above. Both networks use same internal ip subnet. I need connect Remote side to main side with all services that running at main...

Ripper

Still actual is any advices ?

Ripper

I have about 2% pocket loss to remote gateway thrue EoiP (Internet have 0% loss between each other) In one tread TCP speed about 5 Mbit If run many torrents about 200 connection i can get 80 Mbit with cpu load about 25-30% 450G board (100M link) Other side is x86 system and it's has no trouble to hi...

Ripper

I've make configuration same way but it doesn't work ... i can't ping anything but gateway ip's 10.10.10.1..... DHCP doesn't work ipv6 adress asign but not ipv4 ... can ping remote internet adreses from main router but can open any website can see in winbox form remote router main with mac and so on...

Ripper

First question i have fix by my self through com port reset button doesn't help ...

Second question still actual i can get acess to remote network ...

Ripper

First Question how to reset to default configuration 450G? try to hold reset button while booting doesn't help ( Second Question how to realise that senario Internet-MT1-LAN1(NAT DHCP DNS ....) 10.10.10.1 /24 I EoIP Tunnel I Internet-MT2-LAN2(tunneled to LAN1 with all services transparently with gat...

Ripper

How do you enabled ch2 ? on 751?

Ripper

I have latest firmware WPA2 AES ...
what antenna should i choose

periodically CPU 100% due to flash it can be?

Ripper

how to configure right wireless part of that device because wifi speed really low up ti 15 mbits to 802.11n close to ap ...

in internet speed 100 mbit wifi max 15 lan part don't tryed yet...

Ripper

I have home router TP-LINK 1043ND with stock firmware (latest)... I have trouble with connection to X86 based latest (5.14 RS) thru winbox and web interface but same time no trouble to MIPS devices... It's waiting for long time then told me ROUTER disconnected.... I've setup custom firmware to that ...

Ripper

Modem works for 5 days then lost connection again and script can't wake up it....

Ripper

There ara log from routers before shutdown ... Jan/02/2002 19:15:49 async,ppp,info 3g-intertelecom-1: terminating... - modem hunged up Jan/02/2002 19:15:49 async,ppp,info 3g-intertelecom-1: disconnected Jan/02/2002 19:15:59 async,ppp,info 3g-intertelecom-1: initializing... Jan/02/2002 19:15:59 async...

Ripper

yes it helps

Maybe there are any tricks too boost RB/751 weak wifi side ?

Ripper

Yes it can probably be solution because all 4 check boxes is checked I will try it and I will post subscribe.

Ripper

I've make exactly my screen shot of what i've got

Ripper

It's disabled so i cant chose anything !

Ripper

it looks like that

Ripper

I have a problem with connecting to RB/751 it ask me for username and password ...
if password i think i knew but I must to do with username ...

At windows PC there no problems I'm just enter the password and everything is work.

Ripper

sure it set to disk ... but after shutdown it 100% cleared

Ripper

ok but why it cant reboot to fix it i do watch dog two layer script with to checks it tries to disable and re-ennable connection if it fails it router reboot command but it want work it do scripts with dyndns dynipv6 + watch dog so i don't think that it so goes to GPRS all times i check personal inf...

Ripper

Let me clear ... I have some domains and only one ip ... Have different protocols and ports. I need to do firewall redirect to internal ip if domain my1.domain.com http port 80-> jump to 10.10.10.251 http port 80 my2.domain.com udp port 27015-> jump to 10.10.10.250 udp port 27015 my3.domain.com udp ...

Ripper

Ssh and telnet service is tuned off ... so i cant check 80 port NATed web server and it works ok and some other NATed services too ... but some with custom port http load only header like it gives some limitation data to load ... from other pc it works good ... i tried to delete all data at APPS and...

Ripper

How much it cost half price of that device ? =)

Ripper

I ask reseller to get antennas but he say that antenna has not regular port so it is very difficult to find antenna for it ...
...

my 1043ND give's me 90+ Mbits (9,6 Mb/s torrent) thru one wall (ferroconcrete) signal 5 bars but that device gives at 1m 30- Mbits.

Ripper

I use before Asus WL500gpv2 with custom firmware and it works perfectly to me at our new setup we try to use MT as I see it was big mistake .

Ripper

If there any way to do redirect or jump on internal ip ....
for ex. in domain (domain.com) in protocol upd int port 999 do jump to internal ip 10.10.10.100 with same port and protocol ??

Is there any solution ?

Ripper

I check that situation by checking thru one wall ... it won't help tried to check thru many walls 2 aps in same position 1043ND works much better as the connection rate and actual download rate ... I can't understam how can it be with 1w transmitter range must much better ...

Ripper

first of all that device wont connect 300/300 or even 150/150 on ideal conditions -99 noise floor distanse minimum signal ideal -60db ++ .... and I not shure that it works at 1w power ..... first thing that tels me about that that device with 100mw trasmiter show same signal rates but works much bet...

Ripper

form 60/135 to 135/150 noise floor -99 .... tryed distance from 1m to 25-30m (signal worse then 1043ND with transmitter 100mw)

Ripper

http://www.speedtest.net/result/1635920656.png with advanced HT AMPDU 1-3 Problem that it's 1m results i bought that device to cover from 2nd floor 3 floor 40-50m building 1W power and so on ... TP-link has only 100 mW and works much better ... (i haven't tryed it that bulding I've tryed it at home...

Ripper

http://www.speedtest.net/result/1635896147.png Advance was set before so I set legacy and disable encryption at all... Buy that device to replace ADSL modem-router ZTE but as I look that thing don’t worse it.... I want to buy that because I use before 750g nice thing but now I’m disappointed I buy ...

Ripper

I knew that so i set WPA2 AES

Ripper

wired

Ripper

http://www.speedtest.net/result/1635821451.png it speed with 300 mbit usb steak 2m from router 40mhz ... 2 chains select WPA2 AES signal http://s07.radikal.ru/i180/1112/f1/d6b2f24b918e.png What's wrong with it distance 1m (-19dmb) i cant reach even speed tp-link 1043nd with 20-25m thrue 3-4 walls ....

Ripper

After firmware update 750g is down ... i haven't that issue with other updates.

Ripper

I have strange trouble 1 pc I can connect to any winbox or gui except one ... put that’s one ip I can ping and shared services is working.... to that pc i connect from any other pc from the web ...

Why so?

Ripper

something wrong with 3 row ...
Ok i understand "name_of_connetion"

now it's working

Ripper

Seems to not working.... It not says to log ok or failed.... How to check right syntax is any debug or something like that ... I can’t understand what’s wrong with it... Logic is Ping some address if failed disable ppp connection and with 5sec delay re-enable it... Try again ping if still failed do ...

Ripper

:if ([/ping 8.8.8.8 count=5] = 0) do={ :log info ("WatchDog connection Failed"); /interface ppp-client disable 3g-intertelecom-1; :delay 5s; /interface ppp-client enable 3g-intertelecom-1; :if ([/ping 8.8.8.8 count=5] = 0) do={ /system reboot; } } } else={ :log info ("WatchDog connec...

Ripper

How to bind ipv6 address to MAC ... because everytime gives different IP.

Ripper

That's router is very bad to work with 3g modem it's randomly fails to connect and even watch dog don't help ...

It randomly disconnect and cant softwarely reconnect we need to turn off them and turn on it again.

Ripper

How to make DHCP v6 works if I get pool /48

how should you add it to ipv pool then add to DHCP v6 pool

Ripper

What about perfomance ... how ppts and mbit it possible to get from 750G at 800 mhz? I need to transfer around 200-300 mbit totally is it possible at that hardware ... from x86 i don't worry it quadcore 3Ghz Cpu if I need i can post it even to 6 core ... so it wont be problem I fear a bout 750 perfo...

Ripper

I have Working MT x 86 devices with all services running... I have one more with internet MT 750G throughput 200 mbit I want to connect that MT thru internet to first one and share all those services. What optimal way to do that ... first idea is VPN ... but need to find optimal fast solution with m...

Ripper

Interesting will be possible 3x3 Mimo antennas with gain for about 26-34dbi. Becouse 16dbi max 2-3km

Ripper

How does it work...?

I have DHCP server wich give to costumers ip's from pool...
I have IPv6 6to4 up...
Then I found option ipv6 binding I have added some rows ipv6 ip from neighbors and client mac ... but it has status waiting and never seen choice working DHCP....

Ripper

I Have latest 5.8 software on new 751U-2Hnd so how to shutdown usb port ... Is there way to check first (writed up script and if it fails for 3 times at row run router reboot or shutdown usb port and than turn it on again) I have no access to MT router its 300 km away from me and it very difficult t...

Ripper

How to write right script to check connection alive? I've made script witch ping 8.8.8.8 for 5 pockets if he 0 pockets from 5 it will hung down ppp connection then wait for 3 sec and redial.... But now connection is down and mikrotik as I think can't reconnect.... maybe modem are freezes or somethin...

Ripper

There is Axesstelpst EVDO software which get info from all qulcomm chips ... maybe there will be any nessesary info to fix that problem at next versions.

Ripper

I have don't touch anything but it start working ... very strange ...

I have any trouble agan i will post

Ripper

Sorry for misunderstanding.
Problem that I can’t load any page on end pc except one page ukr.net (I don't know why is loading) if attache modem to pc everything is working...

DNS at pc is working I can ping any page and get right IP address and respond...

Ripper

I have 3g usb modem UM175 I have setuped ppp connection thru usb1 and my modem has been connected (entered login password phone to call disable call on demand)... I can ping any ip from router console. I can ping any ip from PC (wireless connection to router) I can't open any page at router (err con...

Ripper

I have usb Pantech UM 175 3g Modem
first issue that modem reports only usb 1.1 connection instead of Usb 2.0
Second while connected i can get any info about signal power or connection type from modem ...

info and data channel is 0

is any way to setup modem to work right

Ripper

Is any way to do load balancing between two usb 3g Modems (UM175) conneted to RB751U-2HnD USB port via usb 2.0 HUB ?

Ripper

i dont block i need to set priority

Ripper

Is there any garanted way to determinate that kind of traffic as utorrent and skype now I'm trying to do that through l7 rules using that strings for utorrent \x7F\xFF\xFF\xFF\xAB very few amount of data detected as utorrents I add some extra string to do more ^(bittorrent protocol|azver$|get/scrape...

Ripper

How to do that right

Ripper

Should I apply multi-queue-ethernet-default to each simple queue to to advance and Total if I shaping by ip by general rule? Or its just enough to apply to interface. apply it on interface that has several tx/rx queues displayed in '/system resource irq' other way it will not bring you any improvem...

Ripper

Should I apply multi-queue-ethernet-default to each simple queue to to advance and Total if I shaping by ip by general rule?
Or its just enough to apply to interface.

Ripper

I have several VLAN each vlan is branch of my network it may be switch or server or something else...

Main goal to link it together with one single subnet same DHCP and NAT...

LAN it's interface where connected all wlans .. (some pc not at VLAN some in VLAN's) so i join it all together to bridge

Ripper

/interface bridge add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes \ disabled=no forward-delay=15s l2mtu=65535 max-message-age=20s mtu=1508 \ name="bridge1" priority=0x8000 protocol-mode=rstp \ transmit-hold-count=6 /interface bridge port add bridge="bridge1&qu...

Ripper

i have trouble with dhcp work under bridged vlans

Some at logs without success some can’t get ips at all with no warning

Ripper

after recreating rules is seems to be much better 50% of trafic is download 30% p2p 20% web download =)

Thanks

Ripper

Most of all traffic genereted by uTorrents with uTP protocol ...

so i don't think that

^(\13bittorrent protocol|azver\01$|get/scrape\?info_hash=)|d1:ad2:id20:|\08'7P\)[RP]

will help me

tor and EDonkey not used in our country =)

uTorrent is about 40-50% of all traffic

Ripper

still no solution of that

Ripper

How to mangle utorrents traffic ... default l7 rule /ip firewall layer7-protocol add comment="" name="\B5TP" regexp="\\x7F\\xFF\\xFF\\xFF\\xAB" /ip firewall mangle add action=mark-connection chain=forward comment="" connection-state=new disabled=no \ layer7-pr...

Ripper

Thanks a lot ...

Ripper

so what should i write to command line to enter right rule?

Ripper

when i enter [\\xbc] via commandline it add [\xbc]

as I understood trouble is that must be [\\xbc] for right detection ?

Ripper

52   ;;; SKYPE
     chain=prerouting action=mark-connection new-connection-mark=skype 
     passthrough=yes layer7-protocol=skypenack 

53   chain=prerouting action=mark-packet new-packet-mark=SKYPE passthrough=no 
     connection-mark=skype

 1 skypenack                             [\xbc]

Ripper

seems to be ... but to much data from 2 days 40Gb traffic

it's going about 30% skype 50% utp 20% other ....

i think it's too much for skype

Ripper

I have about 10-15 connection via skype l7 rule from one user is it right ?

some of them is bittorrent ?

Ripper

how to write ip macthing rule ?

Ripper

I have ip 188.xxx.xxx.xxx what i should to write there

Ripper

/ip firewall layer7-protocol add name=skypenack regexp="\\xd5"

/ip firewall layer7-protocol add name=skypenack regexp="[\\\\|\\xd5]"

doesn't work to me .... on MT5

Ripper

give me plz working regex for skype2skype calls for mt 5

Ripper

ok i will be logging at web server side ...

Ripper

It’s second time for a month that i can't login to ROS:

can't from:

winbox
webfig
ssh

it's do like wrong password 1 time after reboot it still work
On time it crashes with cyclically reboot at disc check step.

Ripper

how to do that or it will be better to do loging on web server side?

Ripper

It’s very small It’s something like log files which return current date and time and what it it’s done... For example ##START JOB CURENT DATE 01 OCT 2010### ###Disable users### -- Disable user 1 -- Disable user 2 -- Disable user 3 -- Disable user 4 ###Ordering new month### -- User 1 - 20$ -- User 2 ...

Ripper

/tool fetch mode=http address=ip_adress host=domain_name src-path=/path/script.php keep-result=yes dst-path=([:pick [/system clock get date] 0 3] . "-" . [:pick [/system clock get date] 4 6] . "-" . [:pick [/system clock get date] 7 11] . ".html"); it's runs and stays ...

Ripper

is any way to add info to current file without rewriting ...

couse my script runs each 24h to don't produce many files ...

Ripper

Help to marking traffic uTP and other p2p which generate uTorrent’s to give him lowest priority...

Ripper

to execut that command

dst-path=([/system clock get date].html/])

a need to get date dote html

Ripper

fixed through reinsta'l from CD with save old parametrs....

Ripper

I have os crash it wan't load ... each time it goes to fcsk check it sad error fix and reboot ... but after reboot i have same issue ... i need any way to make backup of config to reinstall ... http://s60.radikal.ru/i170/1009/59/5f6b7b4a8c27.png Thanks alot for any advice ... P.S. it works under VM ...

Ripper

Thanks a lot that was useful.

Ripper

how execute command in PHP API

 queue simple disable P40-34-9-2

i've tryed that way

$API->write('/queue/simple',false);
$API->write('=disable=P40-34-9-2');

but it sad unknow command

any solution ?

Ripper

ON 3.3 thats works perfect SSH function routeros_Connect($host, $username, $password) { if (!function_exists("ssh2_connect")) die("function ssh2_connect doesn't exist"); $methods = array ( 'kex' => 'diffie-hellman-group1-sha1' ); $shell = ssh2_connect($host, 22, $methods); ssh2_a...

Ripper

At MT3.3 my billing (PHP module ssh2) works fine ... with same settings it couldn’t connect via SSH to MT5b6 With API PHP it tried to connect «Connection attempt #5" times and sad ERROR... I had same shit with 3.3 while i fined method diffie-hellman-group1-sha1 after that everything goes fine.....

Ripper

What happened with SSH protocol earlier i used R3.3 now upgrade to 5b6 and my PHP self-made billing cannot connect to MT via SSH... $methods = array ( 'kex' => 'diffie-hellman-group1-sha1' ); $shell = ssh2_connect($host, 22, $methods); I've tried your PHP MT API but no luck too... http://wiki.mikrot...

Ripper

What about ROS5 it wont connect as ROS 3.3

$methods = array ( 'kex' => 'diffie-hellman-group1-sha1' );
$shell = ssh2_connect($host, 22, $methods);
any advices ?

Ripper

Need virtualization cause

It’s not one RouterOS installed

Ubuntu for web and media server

And

Game server

So there are 3 OSes.

Ripper

still actual

Ripper

by the way i'm using exsi exsi net cfg http://s006.radikal.ru/i215/1009/14/05332b859e65.png mikrotik net cfg http://s04.radikal.ru/i177/1009/20/cc4f48339421.png exsi port config WAN LAN1 LAN2 http://s41.radikal.ru/i093/1009/9a/1fd10dca57f7.png LAN1 http://s001.radikal.ru/i195/1009/63/0ba67c65c644.pn...

Ripper

So is better to give 3 corese and and one to hypervisor ?

Ripper

I don't use pppoe

i just use simple querys and php engaine to admining it ...

Ripper

Pingin self geteway 7.7.7.1 64 byte ping: ttl=64 time=5 ms 7.7.7.1 64 byte ping: ttl=64 time<1 ms 7.7.7.1 64 byte ping: ttl=64 time=1 ms 7.7.7.1 64 byte ping: ttl=64 time=7 ms 7.7.7.1 64 byte ping: ttl=64 time<1 ms 7.7.7.1 64 byte ping: ttl=64 time<1 ms 7.7.7.1 64 byte ping: ttl=64 time=8 ms 7.7.7.1...

Ripper

Everything is fine load about 1-10% until something happens and load jumps to 30-40% and never goes down until reboot of routerOS ... and also it doesn't depend to traffic load even if traffic is low load still 30-40% ... how can i solve that ...

V3.30 L4 CPU Athlon II x4 all 4 core to Microtik...

Ripper

I've 3 eth ports eth1 - WAN eth2 - LAN eth3 - LAN I need to join together eth1 and eth2 like a switch.... whis union DHCP setting and GATEway and so on ... each user from eth2 must see pc from eth3 and eth3 to eth2 too.... I’ve tried to join eth2 and eht3 to bridge ... i give bridge 1 IP and noIP to...

Ripper

I've tried routeros under exsi but i have trouble with large responds time due low freq witch is given by exsi ....
there are no way to improve that without VMware-tools which is not available under mikrotik router os ...

Is there any suggestions about that ?

Search found 164 matches