MikroTik

sashavl

Sorry, but what "fancy" features ASA has that Tik can't do?

sashavl

And u should use multicast over wireless to stream.

sashavl

Too close. I tested couple days ago UBNT Nanobeam and had same problem. Lowering output power level fixed problem.

sashavl

Devices are too close. Lower output power.

sashavl

That's still not implemented.

sashavl

Better to block all connections which has connection-bytes more then 5-10MB.

sashavl

It's not issue, that's normal what are you talking about.

To prevent that block all IP's from VPN pool which you give to clients.

sashavl

That would be nice.

sashavl

You usually do that by making one-TO-one NAT on your gateway. If you really want some node to have public IP you need to route it to next hop.

sashavl

Forget about mesh and wds, wait for CAPsMAN release.

sashavl

They said by the end of 2014.

sashavl

You're doing it wrong. You must have one parent queue-tree, and then icmp as one child with priority and all of the rest traffic as another child. In that config Tik gives priority to traffic in queue with priority, but that works ONLY when max-limit is reached.

sashavl

Sometimes it needs to pass some time before static DNS entries start to reply.

sashavl

Because dst-natted connections are initiated from "outside" (from WAN). You must allow it in input and forward chain.

sashavl

Put global-total instead. And one more thing, those guys don't read manual. For queue priority to work you must have max-limit set.

sashavl

I don't understand that multicast-fdb. how is it used and for what we can use it?

sashavl

Please tell us more what Apple device you used and what IOS version it uses? I don't know anything about client device. i've tested CAPsMAN on hotel wireless system in the middle of the night :). The controller manages the power of each access point, and tunes it to deliver the best signal to the u...

sashavl

Hi,

is it possible to send telnet output via mail? Actually, i only need way to export telnet output to file, is there any way Mikrotik can do that?

Thx

sashavl

Then you will have standard security - as usual

sashavl

Don't use port 22 for ssh.

sashavl

Two interface with local ip and put every with one wan in VRF.

sashavl

One thing is SSID broadcasting, and another is what you get over it. Sure you make multiple configurations in CAPsMAN and put them on different CAPs. That would make what you want. But then you need to make somehow (over vlan or something) that hotspot 1 is accesible from first and hotspot server 2 ...

sashavl

Chupaka wrote about stopping some major DDoS some time ago. Try to find that post.

sashavl

No, that's bad solution. Add new rule with dst-address of xbox and action accept, and put that rule first.

sashavl

Get rid of hot spot. It doesn't work properly. Some mobile devices has problem to autenticate, other needs to re-authenticate from time to time... also if you don't put 443 in walled garden if first page is https it will show you error etc etc.

sashavl

Tested CAPsMAN last night on RB2011 and one RB411UAHL. Everything worked but Apple devices couldn't connect (or had disconnects from time to time) to wlan interface managed by CAPsMAN.

sashavl

Roaming is NO1 thing which controller needs to provide. Without that it's pointless.

sashavl

Only stateful vpn creates interfaces.

sashavl

What is your filter order? In order to move filter rules they have to be orderder by number.

sashavl

but with PIM I have all IGMP groups wich coming to OLT and CPU on 100% That IGMP switch can be a problem. Also, PIM is little more complicated for configuration. It has something called Rendezvous Point, and all traffic is forwarded to it. Did you check this: http://www.tiktube.com/video/JpfG3eIJaC...

sashavl

Interesting, for me it works (but with VLC player).

Wait, you are receiving whole multicast (500Mbps) to the router? Then something is wrong between routers.

sashavl

PIM will listen to OLT's IGMP request in very same way as IGMP - beleive it or not. OLT send IGMP request to join some multicast group (you know how it works). PIM (beleive or not) will process that request also.

sashavl

So you would rather make your customers angry and waiting mikrotik to do something?

Did you try PIM? (and don't tell me that your devices doesn't support it because PIM listens to IGMP requests in exact same way).

sashavl

Well am trying to help you... so what did you try? Remove upstream interface and put it back it igmp proxy. Remove downstream interface then put it back. Test when forwarding will be restarted. That will help you to make script, or even help mikrotik to fix problem. Did you try to auto reboot your r...

sashavl

Find way to start igmp proxy without reboot, then make script to do that and put it on event "on up" in netwatch for upstream interface.

What exactly is problem with fast-leave enabled?

sashavl

Janisk, make igmp snooping on routerboard's with switch chip. That will stop all problems with multicast.

sashavl

Where you see that? That's normal if ports are in master/slave relationship.

sashavl

Finnaly wireless controller.

sashavl

Finnaly someone who understand switch chip vlan's. @dasiu Thank you.

sashavl

Hi, i have CRS125-24G-1S-RM with basic configuration, dhcp client, nat, dhcp server, only 2 allow rules (input and forward) in firewall, pptp (bridged) and bridge (and ports in it) with ip adress. Problem is computers in bridge can't ping (or netbios - fileshare access) each other, both computers ha...

sashavl

ly3nml:
It is solved in MT OS v.6.8:

sashavl

*) fixed multicast forwarding on CCRs - How we can see what this exactly means?

sashavl

Am planning to use CCR1036-12G-4S for multicast routing and hotspot system. Does CCR1036 has any known issues with "IGMP proxy"? I know it has problems with PIM. Disconnects, random drops, is it working at all? Is it better to use RB1100?

Thank you.

sashavl

Ordered ten CRS-125 and one CCR1036-12G-4S (to be border) for hotel multicast (igmp) IPTV and hotspot system.

Working now with Mikrotik for over 10 years and i really hope CCR will not dissapoint me this time.

sashavl

does the router sends it by broadcast?

Only when sends "query" (checking who is receiving what). Hosts then reply with membership report.

Did you try with "igmp-proxy"?

sashavl

I have basic request, but it can be very useful.

From time to time i wish i can hide "disabled" interfaces in winbox "Interface list" menu. I think this can be useful when working with new CCR switches and even 2011 RB's.

Thank you.

sashavl

Hi,

what you think, can we somehow simulate igmp snooping by using l7 and scripting?

thx

sashavl

Can i use only IPSec for connecting two remote sites (2 LAN networks over internet without L2TP or PPTP)?

Thanks.

sashavl

Yes, possible. You're right, thank you again.

sashavl

I knew smb uses 137-139 and 445 tcp ports, but also thought it must be on same L2 network... don't know where i get that. I read all the time on internet how people have problems with file sharing over router in different subnets... ok, thank you.

sashavl

Why am suprised? Broadcast shouldn't pass L3 device, so how ARP gets to another subnet?

sashavl

I tryed to use windows file sharing between host (Win 7 Pro) and virtual os (Win XP Pro) running in VirtualBox. They were connected over ROS v6 also running in VirtualBox with this ip configuration: Win 7: 192.168.10.10/24 Gateway: 192.168.10.1 Win XP: 192.168.2.10/24 Gateway: 192.168.2.1 ROS: 192.1...

sashavl

DNSCrypt - new OpenDNS feature, we now have to use client for mac or windows, it installs proxy on local comp which makes encrypted dns requests for you, i think it would be easy to implement this in routeros beacuse it already has dns server, some of the modded router firmwares already has it tnx f...

sashavl

from last night i have very poor signals with compex wlm54gp-23 on rb532a, i think it's because of lightning and diversity switch die, does somebody know how to do remove diversity and where is it on card? i see some 24c32 chip on card, is this diversity?

thank you

sashavl

i have problem with simple queue, rx is simply not limited while tx is ok, back to 4.17 and everything ok,

i sent mail to support@mikrotik.com

sashavl

signal quality, and keep alive timeout setting in pppoe server

Search found 56 matches