MikroTik

zizobaddy

As a network admin sometimes when we are stuck we reach out to colleagues for ideas or advice. I'm sorry, my magic crystal ball sometimes is unreliable and I can't use it in mystery problem solving. But I see that you recently found the export function, after 9 years "of forum". PS: spend...

zizobaddy

Since you talk about "customers", chances are high that you've got some bandwidth shaping rules (using queues) in place. If so, it's what @bpwl suggests - that client has attracted (willingly or unwillingly) a traffic volume his contract doesn't allow. So that traffic arrives via the upli...

zizobaddy

/export hide-sensitive file=anynameyouwish

May point to other config issues...........

Thank you
i haven't seen that before i will give it a try
Thanks alot

zizobaddy

Please do not quote unnecessarily. Use "Post Reply", thanks. Can simply your device under attack and the firewall block packets, or simply your interface receiving some packet from other vlans, etc. Can be anything without more details. Thanks for your reply I suggest attacks of some devi...

zizobaddy

Ask your network administrator. Or the one with the networking skills. On thing common in every post i read on MikroTik forum is that i person who believes he/she knows all will make a comment that is actually not in anyway helpful or contributive As a network admin sometimes when we are stuck we r...

zizobaddy

Just packet drop, (very normal in IP, even in a single UDP or TCP stream) ? (queue full or packet reached end-of-life/TTL value, device cannot handle volume, congestion, ...) RX packets number is off screen capture. But you actually hide almost everything. (What MT ? SFP speed, ether4 speed, routed...

zizobaddy

The input traffic is higher because there's some housekeeping stuff happening.

Thanks for you reply

any pointer towards the right direction?

allow remote connection for DNS is off, no webproxy etc

Thanks

zizobaddy

Screenshot (26).png

zizobaddy

Hi All I currently have 3 /22 prefixes and 2 routers at 2 different locations Location 1 is connected to ISP1 and i am announcing 102.A.A.A/24 Location 2 is connected to ISP2 and announcing 102.A.B.A/24 , 102.A.C.A/23, and the other 2 /22 prefixes However i will like to have 102.A.A.Z/30 at Location...

zizobaddy

Hello everyone I have an issue with making my ipv6 work Parameters WAN ipv6 Ptrfix (Eg). 2a07:5f97:6::/48 Cisco GW (border router): 2a07:5f97:6::1/48 Mikrotik 2011( where the ip is needed as lan):2a07:5f97:6::2/48 GW and Mikroitk is over vlan Pings from outside the network to 6::2/48 works fine LAN ...

zizobaddy

Hi Guys This happened during a slight rain (no recorded lightning or thunder) It also affected the though switch the 2 mantboxes where connected and also the RB3011 as well as surge protector Affected devices are Router RB3011 (burnt): Powered with POE now and working but port 2 -5 is not responding...

zizobaddy

Anyone??

@normis

zizobaddy

Hi

Does anyone knows if QRT5 AC can do 155Mbps over 4KM

with the config below the best i can do is about 110Mbps-120Mbps

Screenshot (63).png

zizobaddy

Thanks for your input

Done that NO significant difference

Can QRT5 deliver 155Mbls over 5km?

Whats the max bandwidth you can get from QRT5?

zizobaddy

Hi Guys I setup a PTP link using QRT5 over 5km for 155Mbps I cant however go beyond 75Mbps Day and 100mbps Night (Bandwidth between AP and Station) I have changed between Frequencies, Channel width and protocol This is the best so far Below is my config Screenshot (57).png Screenshot (56).png

zizobaddy

What i need is how do i cache http content for all hotspot users

zizobaddy

Any advice?

Still need help

zizobaddy

Hi All

Web proxy on x86 works fine with our hotspot however i wish for it co cache hotspot users content

Any advice

zizobaddy

What will you buy for karma? Isn't the good feeling that you helped to someone enough for you?

It gets me 1 reputation which is better than 0 " It cost noting to give" so why being bothered about me asking

zizobaddy

Yes use netmap or dstnat

zizobaddy

How vlan can secure all radios on your network? I use ubiquiti so i created a managment VLAN which is 99 so all radios are on this VLAN as a brigde2 What this will do is that all clients connected will still get their ip from the router and all but only computers on VLAN 99 can login to the radio.

zizobaddy

Any advice on what to do?

zizobaddy

Hi All I recently configured a VLAN (99) to secure all radios on my network It works fine My only problem is I cant ping even the router VLAN IP (Gateway) from my normal Lan network however if i use a device on the VLAN i have access i.e LAN (Default Vlan) 10.0.0.0/16 (Internet and all ping works fi...

zizobaddy

Good to hear

Dont forget to give karma

zizobaddy

Good to hear

Dont forget to give karma

zizobaddy

Are you testing by connecting to the wlan2 AP?

also try to set your limit @ on the advanced page

as for the bandwidth sharing once this works we move to the next phase

I basically had this issue for years i solved it by creating a parent queue an the users join the queues as slaves

zizobaddy

Dear All, im read a lot about how to setup a Hotspot, maybe to much, it confused me. I have the folowwing configuration. eth1 - LAN with IP Pool 10.10.0.0/20 eth2 - WAN1 PPOE dialup (moin provider) eth3 - WAN2 get IP by dns from router (not setup now) (failover provider) pppoe-out1 linked to eth2 N...

zizobaddy

Hi mikrotik ccr1016-12g can't access to external smtp servers. After two month of properly work and upgrade to 6.31.2 I have no more aceess to external smtp servers (outgoing 25 port) Who can help me, where to send "supout.rif" file? Have you confirmed if port 25 is not blocked by your ISP?

zizobaddy

you can use pptp os l2tp with IPSEC

Set IP on the VPN sever router E.g local=192.168.1.1 remote=192.168.1.2

it will work

PPTPconnction without IPSEC too will work just that less secured

zizobaddy

http://netitng.blogspot.com.ng/2015/09/ ... cache.html

Taught to share

zizobaddy

Can't connect with winbox. http://deem.ru/temp/2015-07-27%2015-16-59_RouterOS_WinBox_Error.png That is most likely a VM software config issue. Depends on how you set up your virtual NIC and how it is connected to the host PC. VirtualBox has NAT by default, configure it to use Bridge or reconfigure ...

zizobaddy

Hi IPANetEngineer, Thanks for your explanation, but could you tell why this setting is not working. Here is an screen shot of my Nat settings: https://dl.dropboxusercontent.com/u/98203359/Demas/RB-Nat.JPG in the 8th rule: to-address=192.168.0.5 to-port=22[/quote] Hi this is the rule ip firewall nat ...

zizobaddy

It appears you are specifying src-port instead of dst-port in the nat matching rules. The source port of the host coming in from the internet is difficult to match on because it is normally different every time a new connection is made. Here is a good illustration of src-port vs dst-port and how th...

zizobaddy

What's new in 6.30.2 (2015-Jul-22 11:17): *) pptp & l2tp - fixed problem where android client could not connect if both dns names were not provided (was broken since v6.30); *) lcd - fix crash (and 100% cpu usage) when interface gets removed from "stats-all" screen *) tool fetch - fix...

zizobaddy

https://www.youtube.com/watch?v=9YeUqyyP0Cs
Did just change the Browsend and works?

Looks like the same that is happening to me... (with the diference im with http, and he is with https)

Sorry Alxis

I just saw your post

Have you been able to resolve your problem?

If not let me know pls

zizobaddy

NO i am not sending to Exchange I set the dude up and a physical computer here and the email system works However i need it to be setup on a widows 7 PC in my cloud network for an independent result. That is where i get invalid from address Is it a bug that has to do with virtualization? Kindly help

zizobaddy

Please i am trying to setup dude to send emails which i have done before

However when i test the settings i get "invalid FROM address"

My From address is actually a valid address on my mail server

server ip has also been configured

Please any idea?

zizobaddy

Dear All I wish to have shared bandwidth plan on my network e.g. 10Mbps 192.168.121.100 1mbps 192.168.121.101 1mbps 192.168.121.102 1mbps 192.168.121.103 1mbps 192.168.121.104 1mbps 192.168.121.105 1mbps 192.168.121.106 1mbps 192.168.121.107 1mbps 192.168.121.108 1mbps 6Mbps 192.168.121.200 2mbps 19...

zizobaddy

Hi

i have been online for about 6hr just to find dude package for my 2011uias

uptill now nothing

zizobaddy

Thanks for you advice

could you pls guide me through to to go about it using pppoe

zizobaddy

Well to put it plain - it simply cannot work this way. Subnetting doesn't work this way. The only possibility to do this is to bridge your WAN and LAN interfaces, which would put all your clients directly on your uplink. You can still do limited traffic flow manipulation and NAT with "Use IP f...

zizobaddy

Dear All

I have been asking this question for awhile and i have not gotten any acceptable answers yet.

Please find attached the network diagram

Currently i use netmap

I wish to be able to assign public ip to some clients while others will be behind nat

Please advice!!!

zizobaddy

Hi

I will let you know when im done setting up

As for B - C please do this static route

e.g

A = 10.0.0.1/24

B = 11.0.0.1/24

C = 12.0.0.1/24

B
ip route= destination= 12.0.0.0/24 gateway= 10.0.0.1 preferd src= 11.0.0.1

This will work

zizobaddy

Thank but not really what I was looking for This is the system I have However if ISP1 is having issues or downtime at their own end so far the gateway is replying it will not switch to the ISP2 Im thinking of a system where I can watch the internet on a particular interface and when Internet is not ...

zizobaddy

Thanks for your reply Basically what i want to achieve is to have different shared pakages as expalined below Internet source 10M 5M shared (10 clients) 3M shared ( 8 Clients) 1.5m Shared (5 Clients) 512k shared (2 Clients) What i noticed is that only the rule at the top works others below doesnt

zizobaddy

Hi

Thanks it works

Please how do i go about havin different packages

1. 1mb shared

2. 512kbps shared

What i did was to have 1.5mbps dedicated then the 2 packages had parent from 1.5mb

But only any package that is higher works

zizobaddy

Hi Please i have 2 sources of internet 1. 10.0.x.x------------->41.x.x.x---------->41.x.x.x--------> 4.2.2.2 2. 192.168.x.x -------------172.16.x.x---------->197.211.x.x-------4.2.2.2 i wish to have a fail-over in case "a" cannot reach the INTERNET then it switches to "b" to get ...

zizobaddy

Thanks it worked perfectly

zizobaddy

Please how do you share bandwidth between 2 users in router 6.x for example

Bandwidth 1mb

User A 512kb
Useb B 512kb

If use A is not using its 512kb the user B can have 1mb

zizobaddy

Hi

Thanks for your help

Quick one pls "w1" is the wan interface ryt?

zizobaddy

please check the details in this post

http://forum.mikrotik.com/viewtopic.php?f=2&t=82932

zizobaddy

Hi All Please i am trying to achieve the image below Ncc Visio.jpg Site 1: Is in New York for example. Its the backbone for their network controls all other 3 sites in terms of services and currently use ABC as their ISP (with public IP) 41.xxx.xxx.xx9 Site 2: Is in Atlanta It serves as a backup to ...

zizobaddy

Dear all I currently have a project which is interconnecting 4 different remote sites at different geographical locations However i will have to use different ISP with public IP Address. I intend to use VPN to permanently connect the 4 routers together so that they can all be in the same network. Pl...

zizobaddy

Dear All

I have been trying to configure unlimited speed for lan connection when queues are enable how ever its the very old walkthrough i see around

Please does anyone know how to go about this in the v6.9 router os?

zizobaddy

?????

Please can u explain better example will be much appreciated

Thanks

zizobaddy

Hi

I have a server we remotely connect to and all users are behind queue

I wish to have all users connect to the server at full speed and queue should only shape traffic going to the internet

i have tried several but it didn't work please does anyone know how to go about this

Thanks in advance

zizobaddy

0 ;;; Public Mask to NSL Server (src) chain=srcnat action=src-nat to-addresses=41.xxx.xx.x src-address=10.0.1.20 1 ;;; Win Server to NAT chain=dstnat action=dst-nat to-addresses=10.0.0.10 dst-address=41.xxx.xx.x 2 ;;; Public Ip to VoIP (NETMAP) chain=dstnat action=netmap to-addresses=10.0.1.27 dst-a...

zizobaddy

Hi

Please i got this mail from a new client

"Can you please exclude our both peers from then nat rule? Peers: 173.xx.x.xx and 178.xx.xxx.xx (public IP from a remote connection to their new site)
This 2 addresses MUST be reach the cisco router without Nat!"

Please can you help

zizobaddy

Hi

i have a mikrotik router with 2 wan's

using mangle as routing mark to rout some users to the second port works well

however i have a client that also uses mikrotik router but routing mark on his IP stops him form accessing the internet

please advice

zizobaddy

Thanks waver

it works i forgot to add the Public IP to my address list

Please has anyone figure out how to assign public ip without nat

zizobaddy

Thanks for your help

However it didn't work

I created a /30 network and assigned it

I also did the dstnat and srcnat rule

however anytime i check what is my ip it still shows my routers ip

zizobaddy

What i have here is 1 interface connected to the internet and the other to all my clients (/16) for the config you shared with me i used just the ip of my server as a case study using the Internet intrface as both in and out interfaces in the 2 nat rules However i still get my routers ip and not the...

zizobaddy

Thanks once again Pls find below the red inks Hi, You need rule NAT: First is pass the publi IP to your client. For this, configure chain: dstnat Source address: 0.0.0.0/0 Destination addres: your client public IP Input interface: your interface from internet (DO YOU MEAN PUBLIC INTERFACE) Action: d...

zizobaddy

Thanks alot waver

However kindly help me check your second rule again because i keep getting error "outgoing input does not match input and prerouting chains (6)"

Thank you

zizobaddy

Hi i had this problem about 1 year ago and i can tell you its a proxy thing (thanks to Should you wish to keep using proxy add this to you Firewall filter /ip firewall filter add action=drop chain=input comment="Block Open PROXY" disabled=no dst-port=8080 in-interface=wan protocol=tcp src-...

zizobaddy

Dear All I wish to forward a block of public IP to a client on my network and my Enkompass server. Below are the things i have done 1. Net Map works perfectly for clients who require public ips and doesnt mind me forwarding it 2. IP routing 41.XXX.YY.Z/27 (Public Interface) 41.XXX.YY.Z/30 (local int...

zizobaddy

zizobaddy

Hi

i recently moved from pc to RB

im currently using RB450g v6 and i installed dude 4.0rc on it

How ever i get connection failed error: targeted machine actively refused it

Please help

zizobaddy

HI all

This is quite simple

Firewall>Nat> add chain=dstnat dst-address=the public ip protocol=tcp action netmap to-addresses= the local ip to-ports=0-65535

Dont forget to add the public ip on your own address list

Hope this helps

zizobaddy

thanks for your reply Im using a pbx behind NAT with no stun "if you are using pbx you must do static nat on your router, 5060 (SIP) and udp for RTP. input chain allowed udp what you did it is not needed because voip traffic must pass through the router (forward chain)." How do i go about ...

zizobaddy

Hi I have 2 wan ports 1. Internet 2. Voip Using routing mark i successfully route all voip calls to the VoIP WAN but the first issue i had was voip calls was going through but no audio from firewall filter i added>input>udp>accept now there's one way comm (receiver hears me but i cant hear) i have t...

zizobaddy

Hi I have 2 wan ports 1. Internet 2. Voip Using routing mark i successfully route all voip calls to the VoIP WAN but the first issue i had was voip calls was going through but no audio from firewall filter i added>input>udp>accept now there's one way comm (receiver hears me but i cant hear) i have t...

zizobaddy

My dude is not working with os6

zizobaddy

Yes it looks like the attack on the router. Run torch to see what traffic is using all bandwidth and set up proper firewall.

Okay will do that now but firstly i have changed my IP address and the traffic has gone down pls how do i prevent this in the future using firewall or any means

zizobaddy

Please Im lost and confused

HELP!!!

zizobaddy

I also logon using my public ip and disable all lan and other interface except from wan wot i got was still

zizobaddy

Hi all
Im Screwed

I have a dedicated 1MBps the graph on my outgoing interface shows i,m pulling the said bandwidth but the client are not even using up to that now complaining about slow network

Please see the images attached to see

I touched it still cant find PLEASE HELP!
B

zizobaddy

Pls do you have any in mind??

zizobaddy

Dear Feklar

Thanks for your post will look into it now

However the link http://forum.mikrotik.com/viewtopic.php?f=13&t=58935 answers some of my questions too

Will get back to you should in case i get stuck

zizobaddy

Dear All I have Successfully configured PIP mapping using NMap and dst-nat The issue i have now is that when the clients i assigned the PIP to searches for IP it shows my router IP instead of the PIP assigned to them Today i got an email from my isp saying Subject: email abuse report for 41.xxx.xxx....

zizobaddy

it seem that your usb modem provider filtering on port tcp 1723 or gre protocol.

Any Suggestion??

zizobaddy

Hi I recently set up a PPTP VPN on my router. When connected to the network locally everything works fine But when connected to the network via my Public IP i receive "Error 619" using both usb modem or another network with different Public ip. The connection hits my router from the log it...

zizobaddy

Hi

What are the services running on the PC @i5 and i7

Lets start with that

zizobaddy

Thank hasibi

However is 192.168.11.0/24 your lan address

also on the simple queue will i include the source address

Note: i have more than 1 plan i.e 512k 256k and 1mb

Thanks again

zizobaddy

Hi All Please don't bother about this post again i have done it and just require all to know what i did Since the setting on each of the clients router is that its a dhcp server by default the destination ip will change when communicating with my network what happened is simple when some one login u...

zizobaddy

Im very sorry for my late reply

Im using simple queues

zizobaddy

Hi

Is it possible to use the userman for hotel billing in an isp settings

What i wish to do is that when a user logs in it should not ask for password from any body until the time expires

Please Advice

zizobaddy

Hi

Please how can i exempt local content from going through queue

I have a client on my network who has 2 sites when the transfer files between the to sites or use remote desktop it consequently slow internet usage down

Kindly advice please

zizobaddy

Yes the are i have a block of 16

which i wish to give out 4

Azeez

zizobaddy

CBrown

Thanks a lot

However how do i go about this?

Thanks

zizobaddy

Hi

I recently started a mini ISP business and 1 of my clients wishes to have needs 4 public IPs

For future use i also will like to know how i can assign Public IPs in blocks i.e /30, /29, /28

I currently receive 16block from my ISP

How do i please do this?

Attached is a sample diagram i'm using

zizobaddy

Hi awa1123

Sorry for the late reply

Kindly explain your problem

zizobaddy

Dear all

All of a sudden i cant log on using ssh, telnet, putty, http or winbox to my mikrotik again it bounces back with error "connection refused"

i have rebooted and also done system reset but it the same i can ping but can not connect

Please advice

zizobaddy

Thanks All

Will work on that

zizobaddy

Please i need a reply

zizobaddy

Dear All Please how do you view what website a user/client has visited. From the cache i can only see what websites all the client has visited i like to narrow this down so as to trace and diagnose security threats in my clients network Secondly how do you view the log for the past month or year Tha...

zizobaddy

You don't need a script to achieve this

From your win box

Ip>>>HOTSPOT>>>>SERVER PROFILES>>>>(PROFILE NAME)>>>>>LOGIN

uncheck cookie

Hope this helps
Dont forget to karma

zizobaddy

Thanks Alot

zizobaddy

Please one quick question

After i apply the mangle settings and i want to give access to subcribers who paid for acces for 2-3 computer

What would you suggest

Thanks alot

zizobaddy

Thanks alot

will try and get back to you soon

zizobaddy

Dear All Kindly guide me through this scenario How do i block the use of router to illegally retransmit my network Here i have noticed some customers use routers one end connected to my network and using it as a router the enable DHCP thereby having access through my link to their place I will prefe...

zizobaddy

Thanks Alot for the info

zizobaddy

Actualy i do not have any switch which i can use for Vlan

I intend using the mikrotik it self

My main target is to enable webfiltering and queues for the Network (10.5.50.0/24)
other users i intend not to blok will be on the vlan

zizobaddy

Thanks for your reply i now understand better Please how do i solve this i have 10.5.50.0/24 network on my network interface to the lan i am looking for a way to create a virtual network on same NIC so that i can apply queues and web filtering for users on 10.5.50.0/24 while executive users will be ...

zizobaddy

Thanks guru for your quick reply however the link you sent is a basic hotspot setup in the scenerio i was tryin to explain the mikrotik sit on VLAN 1 as a client to the network and has only one interface there are also other users on the same vlan such as DHCP server dns and computers the normal sce...

zizobaddy

Dear Friends I have the connetion decribed bellow Internet ---->Firewall-------->Layer3 Switch---> Switch ( VLAN 1-54) Vlan 1---------->AP--------->users DNS DHCP EXCHANGE SHARE POINT Mikrotik in vlan 1 to 54 we have a total of about 1200 users on a 20mb internet bandwidth i wish to configure the mi...

zizobaddy

hi

kindly help with the config for a successful caching in os v5

i have tried but didnt work out pls help

thanks

zizobaddy

Final Picture

zizobaddy

At first it didnt work then i turn off the hotspot and it started workin then later put it on
After like 5 min it stopped again

I pinged my DNS but no reply after that i turned it off again then it worked find below the pictures also note th interface used

zizobaddy

Thanks I have done as adviced and this is the result [admin@MikroTik] > export # jan/03/1999 12:01:50 by RouterOS 5.0beta1 # software id = T399-9C1Q # /interface ethernet set 0 arp=enabled auto-negotiation=yes cable-settings=default comment="" disable-running-check=yes disabled=no full-dup...

zizobaddy

I thinks if it is the dns it will not even work when the hotspot server is off Kindly give me a step by step guide right from reset so that i will do same and revert back Thank you for your help I seriously thinkits has somfing to do with the firewall cos the firewall connection is not establishing ...

zizobaddy

Thanks for your reply What I did was to run the hotpot widazrd which automaticaly added dhcp roue andadresses togeda wit the pool as well as dns After wards I tried browsing the hotspot page pops den login with admin and then try surfing the internet it den dispalys no page found but if I type in an...

zizobaddy

Here Netwrk 1.0/24 is on hotspot likewise 0.0/24

0.0/24 is not connected yet as i am still tryin to let 1.0/24 work 1st

hotpot doesn't even automatically redirect to login page
kindly assist

zizobaddy

Thanks for your reply Please find below as asked # sep/13/2010 22:27:53 by RouterOS 5.0beta1 # software id = T399-9C1Q # /interface ethernet set 0 arp=enabled auto-negotiation=yes cable-settings=default comment="" disable-running-check=yes disabled=no full-duplex=yes mac-address=00:04:75:D...

zizobaddy

Hi,

My clients doesnt have access to the internet as soon as my hotspot is on

when it is off or when i am using the ip binding everything works well

I have tried everything the only thing i noticed is that people using the hotspot cannot access the internet

Kindly assist

Baddie

Search found 115 matches