MikroTik

winxp2000

I've same issue. my routerboard is RB951Ui-2HnD and the version is 6.11. After connected the L2TP IPSEC VPN from internet few hours, it hanged frequently. did anyone has this issue or updated the newest version 6.12 to solved this problem? I got the same problem, my RB951Ui-2HnD was very unstable. ...

winxp2000

Much more problem was found in ROS 5.11 version.

I suggest you downgrade to 5.8.

winxp2000

This release may be still got some bug.

After I upgrade from 5.7, my company found the network delay change to so big.

The traffic show very big.

error.jpg

winxp2000

1- From right way, upgrade your version to newest 4.11

2- If you use 2.9, upgrade to 3.2 or 3.3 will much more change.

3-I do not know any problem of your said in this artile, what's problem with your MT?

winxp2000

He said the 5.0beta can find the intel 82559 nic but can not use it normal.

winxp2000

10 Gigabit will be the top hot topic in this year.

I also hopt MT can support 10 Gigabit nic.

winxp2000

Dear MT's manager or Admin

Could you give me or show the China 2010 MUM's catalog?

For 10th April, 2010 is a Saturday I will think about travelling to attend this MUM.

But I hope the content can let us know before we take the travell cost.

winxp2000

I had test it. When I setup a MT in DELL R200 server, it fail for the SATA DVDROM can not be supported by MT 3.3. Then I installed the ESX 4.0. You can choose the SATA HD in the VM configuration page. Then upload the ISO to VMware ESX 4 storage(Local HD). Build up a new VM use inside ISO file. The N...

winxp2000

No, it can get the max bandwidth you setting for him.

winxp2000

I think the host meaning is using ROS in a VM ware software condition.

I make a VM to install ROS 3.XX version, it work normal.

The VM version is VM workstation 6.XX.

winxp2000

very helpful article

winxp2000

I got the same issue before about the PCQ limited speed.

May be it was the PCQ bug about dynamic limited speed.

I use the PPPOE solution to resolve it.

winxp2000

Any one can show a really case for us in use the MPLS?

I hop it can work normally in the job.

winxp2000

limit per dest address connections

It should not limit by your router.

It should make in the server that your want to access.

winxp2000

Off course it can work together.

Search it in the MT's manual online, you will find the answer

winxp2000

I had got the answer for this case.

Simple and effect!

winxp2000

I change it in noon :global ppp_network1 :global ppp_network2 :if ([/interface pppoe-out1 get [find name=pppoe-out1] running]=true) do { :set ppp_network1 [/ip address get [/ip add find interface=pppoe-out1] network] :set ppp_network2 [/ip route get [find comment=ppp] gateway] :if ($ppp_network1 != ...

winxp2000

Hello every one in here: I got a fix ip and a pppoe ip from my ISP. I build a soure ip route to use them. But the pppoe IP will change when the MT reboot. So I write a script about it, but it can not work Can any body help me? :global ppp_stat1 :global ppp_network1 :global ppp_network2 /interface pp...

winxp2000

The same answer as above. If customer access the local site not pass the router (Just local IP access) You can not block it in MT. But you can change the local site IP address to other subnet (eg. 10.10.10.X /24) You can add a static route to allow your loacal user pass it. Then the user must pass t...

winxp2000

Block his MAC address.

winxp2000

why did you use the same subnet in the case?

As 2 Wan interface card, you can define 2 different IP address to them.

winxp2000

Hi dsobin

Could you post the detail rules in this case?

winxp2000

Did you see the P2P requirement geting connection?

After you firewall rule work, the P2P requirement just be syn sent and never come to connection state.

winxp2000

add name="pcq-download" kind=pcq pcq-rate=0 pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=2000
add name="pcq-upload" kind=pcq pcq-rate=0 pcq-limit=50 pcq-classifier=src-address pcq-total-limit=2000

pcq-rate=0 I think this rules can not wokr in rate 0 bit

winxp2000

Thank the above idea.

I really want to known whether the rules can work well?

winxp2000

It is a normal funtion about PPPOE.

You can dial 2 PPPOE in a same time, but sure the default gateway not select.

And then, make 2 ip /32 address which got from PPPOE as a gateway.

You can add a route rule as 0.0.0.0/0 gateway1, gateway2 by manual.

winxp2000

Could you post you setting detail of the simple queue ?

We can not see any issue about you simple queue from your picture.

winxp2000

Could you post your firewall rules ?

MT allow ping in different line.

I think you must make some firewall rule to stop it. (May be ICMP drop)

winxp2000

Please check your network interface card.

One by one test them.

winxp2000

1- Try the newest version of MT

2- PCI-E X16 can compatible with X8 X4 X1

winxp2000

All of above friends, why you try to share the DNS cache from MT?

It will make you resolve DNS ip faster than useing the ISP dns ip ??

I try the DNS cache setting in MT in lots casese test.

It work normal as same as the setting of ISP ip.

winxp2000

When you make the NAT rule, try S-Nat = your internet pool.

Such as 222.216.115-222.216.115.228/24

winxp2000

Use PPPoE to log them in and handout a /32 Ip address

I do think so and made it successfully in few companys network.

You do not need care the user's network setting before.

Just give them a account of PPPOE.

After they dial-up to you MT, it will get a /32 bit subnet code.

winxp2000

1- MT support internal PCI modem is so little. Suggest you choose the single modem.

2- Even you chooese the single modem outside, you can make the MT dial-up for you.

But you need change the modem mode to bridge.

winxp2000

if you need

it will work

winxp2000

Please post your setting of your web-proxy

I suggest you checking your DNS setting in MT.

winxp2000

Hacker?

hehe

winxp2000

Use the List funtion

like the picture

winxp2000

I realy want to know whether the 3.0r1 resolve the problem?

winxp2000

It is impossible.

As the fellow said above, the TCP packet need back way from out way.

winxp2000

Which version license of MT you bought??

Only support 5 clients?

winxp2000

Drop network share port TCP 445 / TCP 139 / UDP 137 /UDP 138

winxp2000

To winxp2000 - in this forum your picture gallery should start with Mikrotik products :wink: :wink: :wink: : http://www.routerboard.com/rb44.html Hi you see The RB44G use the PCI interface to setup a 4 ports NIC to a 4G? PCI slot just 32bit and it supports 33MHz only So, it's speed is 133MB/s(33MHz...

winxp2000

Correct - 255.255.255.240 -> 11111111.11111111.11111111.11111000 -> /28 if you have x.x.x.154/28 Network/first address is:x.x.x.144 Broadcast/last address is: x.x.x.159 Gateway must be from the range of x.x.x.145 - x.x.x.158, but you have x.x.x.81 It is the reason why you can not tourch the gateway...

winxp2000

Hi MarTux:

When your remote client got the ip ......60

Whether it can PING successful to your local IP??

winxp2000

Hi aras:

Did you see the LAN circle in you picture.

It may be cause your issue by the LAN loop.

You can try breaking down the CISCO and test DHCP.

winxp2000

1- Upgrade your version to 2.9.43(I suggest you do not use any crack software)

2- see the picture

winxp2000

This picture will help you in very intuitionistic

winxp2000

You can see it from manual http://www.mikrotik.com/testdocs/ros/2.9/root/queue.php

winxp2000

In MT beta 3.0 has the interface bonding funtion

You can try it

winxp2000

I like this one.

INTEL 82546GB

winxp2000

Or this one D-LINK DEF-580TX

winxp2000

You can use the multi-port NIC

winxp2000

Default gateway in MT just leave only one.

So in you situation you should cancel the default gateway.

Using the policy routing in you MT.

winxp2000

It may be cause by same chip between your pci NIC and intergrated mainboard NIC chip.

Suggest you add a intel chip NIC.

winxp2000

Intel chip mainboard all support by MT. But as we known, the NIC integrated in mainboard has 2 type. One type is true NIC chip(such as intel 100/pro) Other type is now prevailling soft-NIC, it work depend on your operation system(windows XP /2003). So I suggest you add a single NIC after you buy a m...

winxp2000

You can use the simple queue to limite your customer.

winxp2000

PPPOE just change the mode that customer connect to MT

Everything sames as the lan setting.

winxp2000

I bought a TP-LINK 650 PCI wireless card

It work normal in MT.

winxp2000

What tpye 108M wireless network card can support by MT ?

I check it in hardware list, just found the 11M wireless card to support.

Any one could tell me the tpye you used in MT?

winxp2000

I have establiched a PPTP tunnell between to mikrotik devices. I can map network drives and do just about anything but i cannot get a new workstation to join and active directory domain through the tunnel. I have turned off all firewall rules to no avail. I have set the workstations DNS setting to ...

winxp2000

Hello I have configured routeros to connect to a sonicwall firewall vpn. The remote peer is established and the SA's are installed and the policies are dynamic. Problem is I can ping from the Sonicwall to the private network on the routeros but cannot ping from routeros to sonicwall Local Network 1...

winxp2000

Please update to the 2.9.43

As you know the MT ROUTER is a legal software.

Do not ask the informal question in forum.

winxp2000

I've tried but doesn't work...

Triac

In 2.9.X version, you can mark the connection and mark routing packet =====> routing table

Then you can use the 2 GW in a /24 subnet.

winxp2000

the downlink type is through proxy ? or full route? or vpn? for three cases I have solutions but please tell me whati s the type of connection you hgave regards, Hi maroon Could you sent the solution copy to me? Two type of them Do you mark the packet ? or just mark the port to differentiate the up...

winxp2000

I do not sure why you like to make? 2 TEL + 2CNC wan line ? LAN 192.168.0.0/23 ?? Why use policy routing by scr-address ?? (SCR-IP) In china line, make you route table and it work fine 2 wan just use NTH mark new connect in same ISP will work fine. Do not need so intricacy. By the way: Why not ask s...

winxp2000

Normis

You gave me a good support

Let me member the small different between them.

I love MT better

winxp2000

It not need any srcipt for limit

just make a simple queue will work fine

winxp2000

Equis

could you tell me your mailbox address

I want to ask some OSPF question to you

winxp2000

You can add a simple queue for every IP in you lan

And limit them download speed.

I think it will make your customer feel more comfortable than stop P2P and other connection

winxp2000

Simple que let us make it by IP

It also can work with PCQ and marking packet priority.

Queue Tree not limit by IP

But it same working with marking packet adn priority

So I puzzle whether I should chooes when I want to limit the customer download speed in LAN

winxp2000

Thank you for you advice, Sergejs.

What I meaning is

When I want to limit customer download speed in my network

Which type queue is the better way to make it?

Simple que or Quer tree

winxp2000

in you MT firewall set input chunnel drop

>ip fir fil input
>add chain=input acction=drop

winxp2000

2.9.26, 2.9.27, 2.9.6 and 2.9.7？？？？？？？？？？？

hehe

Why don't you try to install the newest version 2.9.42 ??

I do not think you will find any question after install it.

Where did you download such version as above?

winxp2000

You can search it in WIKI web site

as follow site page

http://wiki.mikrotik.com/wiki/Bandwidth ... and_Queues

winxp2000

What's the different between Simple que and Queue tree

Some day I was asked a question as it

Check the config and manual

found the Simple queue can make the same funtion as Queue tree

So ............Any one can tell me the different of them

winxp2000

I think MT work as well as a router

But it still has a good ability limited lots types flux in your network.

Use simple queue limite by IP address

Use Queue Tree limite by marked packet.

Use PCQ limite by fifo or pipo

..............

winxp2000

OK usrox: As you know you make a PPTP to a network But I do not known what tpye Ip you got from MT You can run the command in Winxp command windows as follow: c:\ipconfig/all may be you will find the ip and subnet as 192.168.111.X 255.255.255.255 Ok the problem is here The solution just change the V...

winxp2000

guaidetian

Thank you your mind of cabined subnet.

I will try your way.

May be it is a simple way to work.

But I can tell you

the seting :

and then chang your route list
dst-add 0.0.0.0 gateway 192.168.0.2,192.168.0.3,192.168.0.4

it is not a good method of multigateway.

winxp2000

Christian Meis

I need it work in my real network

3.0 just beta version

How I can get it?

Could you send me a copy to test?

Thank you!

Legou_he@dell.com

winxp2000

Matt:

I try the bonding but sorry it fail to make it

Ptsip:

You do not known the situation of my

same subnet and same gateway make the 2rh line can not work normal.

So I just NAT twice for it

winxp2000

Matt:

Thank you again

I change the first post.

The ip address of them are fix.

Do not need change.

Can you sure the Interface Bonding will work in my network?????

Such this case ??

winxp2000

Now time in my local just middle night

I will try to use the Bonding tommorrow

But I think it can not work.

As you known

The the bonding interfaces need set a IP

So, how to do after it?

NAT all packages from the the bonding interfaces to the gateway??????

Does it work??

winxp2000

Now I just can use the NTH + 2th router plan to make it ------line1 ----> MT 1----make NAT only-----> MT 3 ------line2 ----> MT 2----make NAT only-----> MT 3 ------line 3------> MT 3 -----make NTH load balance -------> Local net user Such setting work now! http://bbs.routerclub.com/attachments/20070...

winxp2000

Thank you mneumark.

Bonding is a technology that allows to aggregate multiple ethernet-like interfaces into a single virtual link, thus getting higher data rates and providing failover.

I just open the link of manual

but it can not work in my local lan

winxp2000

can anybody help me?

or no one known how to use it?

winxp2000

Whether should I NAT other 2 ip for twice and make the different IP to use?

winxp2000

as the title (A school network about 1000 students) My ISP give me 3 IP 222.23.110.165/28 222.23.110.166/28 222.23.110.167/28 They have a same gateway 222.23.110.161 how can I use them in my MT? the 3 WAN is static IP from ISP, but they are same subnet and use the same gateway. Now it only 1 line wo...

winxp2000

in a Domain do the any client can ping to MT lan ip? if them work them can use the MT network you can build a PPPOE server in you intranet by MT. then your client can access the network you wanted ======================== on the other side if you want it cross the different subnet access the other i...

winxp2000

as the up layer give you answer

winxp2000

The key words of DNS setup

allow-remote-requests=yes

If it was not set

may by appear such problem as yours

winxp2000

Which VPN you used in your lan?

the compress option in the VPN server setup of MT

winxp2000

he want to make the 2rd MT for the proxy

winxp2000

Check the manual for PCQ

it would make your image to realize!

winxp2000

I do not known why you got such problem?

Your lan used DHCP?

or do not set the fix IP for customers?

if you like share file in your lan

set the same lan for your customer(do not need the gateway)

winxp2000

3M = 60 client?

Too many client require in same time

You can limit client speed(64kbit/s) and limit count(such as 20/s)

May be it can help you resolve the problem

In my client company I setup 10M and connect 200 client.

All client feel fast!

winxp2000

Thank you for your answer. What I meaning is that after I make the dynamic DNS cache ip to static ip in my MT, it would make my NAT speed faster than befor? HTTP require---> MT --->DNS resolve the web site to IP---->MT NAT the require to target IP. Such as http://www.abc.com =1.2.3.4 when I first ac...

winxp2000

cmit Thank you for your answer. What I meaning is that after I make the dynamic DNS cache ip to static ip in my MT, it would make my NAT speed faster than befor? HTTP require---> MT --->DNS resolve the web site to IP---->MT NAT the require to target IP. Such as http://www.abc.com =1.2.3.4 when I fir...

winxp2000

You can make the MT as a PPPOE server

Give the user a account and allow it login in one ip once.

winxp2000

Hi cmit

1- Could you ensure the static DNS will faster than the dynamic?

2- Where the static DNS address save in MT?

Dose it save in memory?

winxp2000

Do you sure the end user download file all by P2P software? As we known, lots download tools use the fix model connection to the destination. Such as flashget (http://www.flashget.com/index_en.htm) I means that P2P software also use the normal http + p2p protocol downloading, so you can not limited ...

winxp2000

which radius can support by MT?

Who can give me a successful case?

winxp2000

His meaning is you build it by yourself.

Different network condition need different type VPN.

L2TP will fit for company customer.

winxp2000

You can try the MSS value= 1400 to test

winxp2000

SETUP 4 MT as first router and get different gateway

Then use 5th MT to route it

hehe

Just a advice

winxp2000

You can limit it when you created it

such as:

name="ABC" local-address=pppoe_pool remote-address=pppoe_pool use-compression=no use-vj-compression=no
use-encryption=no only-one=default change-tcp-mss=yes rate-limit=256k/500k dns-server=218.85.157.99,202.101.103.55

winxp2000

Thank your great support

I try it in my network now!

The hacker stop his action

So I need time to review the rule~~!

But, I must say Thank you for your reply

winxp2000

I made it before(I saw it in viki 1 year agao) add chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list address-list="port scanners" address-list-timeout=2w comment="Port scanners to list " disabled=no add chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ac...

winxp2000

I made it such as follow add chain=forward src-address=10.127.0.0/16 action=accept comment="" \ disabled=no add chain=forward src-address=192.168.0.0/24 action=accept comment="" \ disabled=no add chain=forward src-address=0.0.0.0 dst-address=0.0.0.0 protocol=tcp \ src-port=0-6553...

winxp2000

No body can help me?

Or no other way to handle such situation?

winxp2000

I add a notices

When the attack starting

The WAN link RX packet will arrive 15000~18000 packets/S

It will make the MT CPU hung to 100% and whole network down.

winxp2000

http://www.routerbbs.com/attachment/Mon_0701/59_6865_21817d24b47e6a8.jpg My MT has beed attacted now It camouflage from 1.X.X.X 200 IP connected to my MT How I can stop it? I did such operation add chain=input protocol=tcp src-port=0-65535 dst-port=80 action=drop \ comment="" disabled=no ...

winxp2000

why set the pcq-rate to 0????

Search found 113 matches