MikroTik

greek

+ I am finding too

greek

I has the same problem :( RBM33G with 2 lte interfaces (one interface in vrf) and 2 wireguard interfaces (one interface in vrf) But peers both interfaces works only in main vrf. I can create Route Rule: "dst-ip-of-peer lookup only in VRF table". In conntracks i see requets + answers, but n...

greek

This topic is already 10 years old and nothing done. Very bad

And +3 years additional

greek

THIS WORKED FOR ME, PROBLEM [SOLVED] In my case "quick set" opened window was causing disconnection. As soon as connect I hit "ESC" key to close windows opened in WINBOX, PROBLEM was solved Thank you very much! It's really work for me Additional advice: Try to press ESC or (Ctrl...

greek

Right answer is:

/ip route vrf set [find routing-mark=clientVRF] interfaces=([get [find routing-mark=clientVRF] interfaces], "newVlan");

It's because [get [find routing-mark=clientVRF] interfaces] is array, not string.

greek

Works for me, if in your script you try to add new interface to the VRF right after it is created, then make sure that you add some delay or check if interface exist. Interface may not appear right away if CPU has some load. No, it's not working. I have same problem. /ip route vrf add interfaces=pp...

greek

I have big problems with wAP-LTE and R11e-LTE cards. I use MultiAPN function with same APN (example present in wiki https://wiki.mikrotik.com/wiki/Manual:Interface/LTE#Passthrough_Example ): 1st APN profile APN=MyApn user=user1 pass=pass1 passthru=no 2nd APN profile APN=MyApn user=user2 pass=pass2 p...

greek

/interface lte firmware lte upgrade=yes
This command helps me.

But i used another sim-card without login+pass auth

LTE with Auth began work only after upgrade.

greek

No, 2 times restart no help =(

greek

Tell me please, how to do it for Win7 Pro ?

greek

Thank! It works fine.

This is seem to mistake in wiki page

greek

Hi!

WIKI: https://wiki.mikrotik.com/wiki/Manual%3AIP/DNS#Notes

I am trying to test wiki example:

Code: Select all

/ip dns static add name=".*\\.example\\.com" address="127.0.0.1"

But i saw answer:

Code: Select all

failure: bad name

What's wrong?

greek

Nobody knows?

greek

greek

And also I am trying to find cli-command for this filter:

greek

Hi!
Help me find CLI-analog of this filter:

How i can print connections with port range of dst-addresses?

greek

Спасибо a lot.

I am also think about script to check l2tp-connection state and removing connection from conntrack table.

But i am still hope to find native solution (without scripts).

greek

Yes, you are right.

And i have no idea, how to reconnect l2tp via new wan.

greek

Hi!
How to direct output l2tp-connection to new WAN after disconnect\reconnect?

I have 2 routing tables.
I try to catch 1 packet of new l2tp-connection in mangle output with "connection state = new" option, but not seen any packets.

How to solve?

greek

Using a 24V power supply on a RBM11G My R11e-LTE-US consumes 50ma at peak. Board pulls 60ma idle and 110ma when modem is tx/rx My R11e-LTE with RBM11G do not detecting after reboot (no LTE interface after reboot, no usb device in system - recources - usb). Only hard power reboot (power jack switch ...

greek

++ me too

greek

+100!

greek

I real need this feature very much too :( I need passing phone number from L2tp session in LNS mode to radius: 73.047827 10.110.198.1 → 10.110.197.157 L2TP 154 79526009820 Control Message - ICRQ (tunnel id=44370, session id=0) 73.048965 10.110.198.1 → 10.110.197.157 L2TP 269 test_mtik PPP CHAP Contr...

greek

Hi! My question is about LNS-mode autentification thru Radius. Can i see the cellular phone number in Radius requests? This number placed in ICRQ-packets from LAC (I see it in Wireshark): 205.608691 10.110.198.8 → 10.110.197.157 L2TP 154 79526619820 Control Message - ICRQ (tunnel id=83, session id=0...

greek

greek

Hi. Is it possible to use MAC (or mac-cookie) auth strongly before HTTPS? Now MAC auth starts in the same time with HTTPS redirect to login page. Client succesfully log in thru MAC-cockie (use RADIUS), but browser trying to open log-in page. Mobile phone (Android) makes first trying connect to WiFi-...

greek

I use this variant of script: /interface ppp-client info ppp-WAN do={ :if ([:len $"access-technology"] > 0 ) do={ :global lte $"access-technology" ; :global signalstrengh $"signal-strengh"; :global itog ($lte." ".$signalstrengh); :log warn $itog; :quit; } }

greek

And after reading this topic my final variant: /interface ppp-client info ppp-WAN do={ :if ([:len $"access-technology"] > 0 ) do={ :global lte $"access-technology" ; :global signalstrengh $"signal-strengh"; :global itog ($lte." ".$signalstrengh); :log warn $it...

greek

I use this variant: /system script add name=lte owner=admin policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive source=":local i 0;\ \n/interface ppp-client info ppp-WAN do={\ \n:set i (\$i+1);\ \n:if (\$i=5) do={\ \n:global lte \$\"access-technology\" ;\ \n:global signa...

greek

Thanks for your help! It works! My script has name QTY_Signal /interface ppp-client info ppp-out1 user-command="AT^HCSQ\?" do={ :if ([:len $manufacturer] > 0 ) do={ :set HCSQ $"manufacturer" /system script job remove [find script=QTY_Signal] } } Try this script: /interface ppp-c...

greek

Dear Mikrotik, we really-really need this functional :) Please, implement this. What problem do you have and want to be solved? Also, make sure you bark up the correct tree, e.g. when you don't want NAT. The NAT is happening in the Huawei, so you should ask them to fix that. We need to get ip addre...

greek

The best thing would be when mikrotik is importing the ncm driver from the e3372 stick. ;) Its working really nice with openwrt. I am using OpenWRT with the NCM Driver and ppp is working fine and as i know the 150mbit would be possible, but if the e3372 is in ppp modem modus lte reachs only 30 mpbs...

greek

Go to IP - Services menu, click telnet and click Disable-button (with red cross)

greek

Good day.

How i can auth pptp-users on Radius1 and l2tp on Radius2 ?

greek

Hello. I want to put temporary ip-addresses to users, who fogot enter usernames: 18:43:47 l2tp,ppp,error <10.10.198.3>: user authentication failed (Example error with non-empty username: 18:41:55 l2tp,ppp,error <10.10.228.128>: user 105323 authentication failed ) How to create ppp-account with empty...

greek

Where is placed "IP - Firewall - Raw" menu ?

greek

Yes, it's possible since 6.35.4 (may be early)

greek

Hi.
Does proxy auth works in LNS mode?
I see in WireShark all ProxyAuth attributes is sent to Mikrotik, but authorization starts only in additional ppp lcp phase.

What is analog of Cisco command 'no lcp renegotiation always' in mikrotik?

greek

Please, turn back "Exit" button. It's very useful button, one of main in paradigma of Winbox managment (all functional buttons in one place, at left). Or do it as configurable option.

ps: [X]-button at top-right is no comfortable for me.

greek

I use 912UAG-2HPnD with Cinterion PLS8-E (LTE module inside), ppp-client mode.

After reboot LTE module use only 3G mode with signal -55..-63.

Module go from 3G to LTE mode in ~30-120 minutes after reboot.

How to troubleshoute the reason of this non-LTE long time mode?

(Russia, Megafon)

greek

And It's happening the same to me.

How to set different keepalive timeout for 2 hotspots, which use the same userman for authorizing users?

greek

Thak you for answer.

But i need to mark every 2nd connection for every uniq (src_ip+dst_ip) every 2 minutes.

I think about combination of parameters "per connection classifier" and "Dst limit", but i cann't find right combination.

greek

Hello.

Help me, please, how to mark every 2nd connection to one host (every N minutes)?

greek

No answer yet

greek

Good day. I use CoA with PPP with parametr "Mikrotik-Rate-Limit", when i need to limit speed for my l2tp-user. It creates new simple queue rule. Examle: echo -e user-name = 45@tst, Mikrotik-Rate-Limit=64k/64k | radclient -x 172.x.y.z:3799 coa mypass When i need to disable limit, i use this...

greek

I have PC with Win8.1 I use some VLAN interfaces (created by realtek utility) When i disable all interfaces except one NetInstall works fine. But when i enable all interface NetInstall does not work. WireShark shows me that my devices cann't find bootp server. How to run Netinstall on dedicated inte...

greek

I have the same problem.
Disabling EoIP in bridge ports solve trouble, but not solve problem.

greek

Is it feature realy insecure?
Somebody can take any already logged mac-address from the air and set it on the own wi-fi adapter.

greek

Is it done?

greek

You have got to solve this problem? I have the same problem.

greek

Thank you for answer!

I have more than 40 almost identical profiles with minimal diferences and i need to change range

numbers=1-5,7,9,20-37

Can i do it easy ? (Without numbers=1,2,3,4,5,7,9,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37)

greek

Hello. How to make this command more shortly? /ip hotspot profile set 1,2,3,4,5,6,7,8,9,0,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33 http-cookie-lifetime=1h May be /ip hotspot profile set number=1-33 http-cookie-lifetime=1h or /ip hotspot profile set number={1..15,16..33...

greek

Can you please tell us what you are trying to do? Global target is different shaping of ports-in-bridge. I want to mark packets from WAN side to specific port-in-bridge (and back). I use simple rule for this purpose. /ip firewall mangle add chain=forward in-interface=ether1 log=yes out-bridge-port=...

greek

Good day. Default configuration. WAN = ether1, LAN = Bridge1, NAT Rule: /ip firewall mangle add chain=forward in-interface=ether1 log=yes out-bridge-port=wlan1 out-interface=bridge1 Counter of packets = 0, log is empty. Laptop is connected to wlan1, internet works fine. Why it's not work? ps: /ip fi...

greek

Why first and last figures in output chain are not a parallelepiped as in original scheme?

As i know, parallelepiped has concretic mining in flowchart http://en.wikipedia.org/wiki/Flowchart

greek

Any idea?

[Ticket#2014041166000279] with no answer

greek

Hello. I have a simple default config: wan-(nat)-bridge(ether,wlan) I try to mark all packets to bridge port (wlan). I do it in bridge src-nat chain. I have "use-ip-firewall" checked. "Packet flow scheme" say to me, that next hop will be "Postrouting" ( http://wiki.mikr...

greek

Thank you, fixed - see updated my post.

Why last block in output chain is "Bridge Adjustm"?
In original scheme it's "Routing Adj."

And why "Simple queues" blocks is absent in "Input" and "Postrouting" chains ?

greek

you'll notice there isn't any difference in the src/dst. So what I had to do was mark the src, in my case wlan30 and then mark the dst, in my case vlan30. Thank you for answer. wlan30 and vlan 30 are both bridge ports of same bridge ? You mark src and dst interface in "Bridge - Filter\Nat"...

greek

I'm in the same situation my brother. I need to change the route of a packet is entering a port of my "RouterOS" and out through another. In your case, you want to do exactly that with these packages marked? I want to shape vlan in bridge. I have a little success, i found place where i ca...

greek

Good day. Help me please. I want to mark incoming and outcoming packets from vlan, which is a port in bridge. I enable "Use IP Firewall" and "Use IP Firewall for VLAN" settings. I try: /ip firewall mangle add chain=forward out-bridge-port=vlan10 action=accept it's not work, packe...

greek

How to see fdb (hosts, mac) table in CRS125-24G-1S-2HnD ?

greek

Copper SFP-module OptiCin stopped working in v6.10 (but working good in v6.7), just not running in CRS125-24G-1S-2HnD

greek

CRS125-24G-1S-2HnD
Copper SFP-module "OptiCin SFP-RJ45 Complies with 21 CFR 1040.10 and 1040.11"

It was working good in ROS v6.7, but now it's doesn't work in 6.9 and 6.10 (not running, letter R in interfaces list is absent)

Vendor Serial: TD35140144

How to fix it?

greek

Thanks a lot! It's works!

greek

Anybody know how to insert $mac-address in email body?

greek

Good day. I modifyed my login.html file in new design and it's work. Then i rename login.html to oferta.html and it's not work. I create new login.html with "Hello" and button, which redirect to oferta.html. When i click Login button in oferta.html -> i just redirecting to login.html If i ...

greek

Good day.

Tell me please, what is cisco bpdu guard analog in RouterOS?

How i can disable port in bridge, when i get enemy bpdu-packet (thru this port)?

(I want just to close port, not filtering bpdu packets)

greek

the version 6.6 not working vlan on the bridge . if disable enable starts to work. After rebooting everything is repeated In my case vlans are death on bonding interface. Disable/enable doesn't help - only VID change and back, turns to live again. V 6.5 doesn't have this serious bug (!!!). I confir...

greek

Tell me please, how to show correct VRF for EoIP link-net ?

When i create new eoip, i write remote ip.
This ip placed into vrf.
The same ip placed into another vrf.

How make eoip-tunnel to correct vrf ?

greek

Hi, ohara, you are right. Will be waiting v6.5 soon

greek

Just reopen this menu.

greek

DNS menu is locked after v6.4 update

Workaround new:

1. Just close menu and reopen them.

Workaround (old):
1. new terminal
2. /ip dns set servers=8.8.8.8,8.8.4.4
3. Close DNS menu
4. Open DNS menu, ip - DNS
5. Now dns menu is unlock

greek

DNS bug!

DNS menu in winbox is obscured too.

Workaround:
reset dns-servers thru terminal ( /ip dns set servers=8.8.8.8 ) and reopen dns menu (ip - dns)

May be it will be worked in SMTP-client menu too ?

greek

I am interesting too.

And how many sstp connections (2mbps per sstp-connection) can be terminated on CCR1036 ?

greek

I hope to find more easy way than parsing log, but thank you for answer. (This level of scripting too difficult for me)

greek

I need uptime of the physical link ether1. No system uptime.

greek

Very strange workaround, but it's work: :if ([/interface bridge port find where point-to-point-port=yes] != "") do={ :if ([/interface bridge port get number=[/interface bridge port find where point-to-point-port=yes ] interface] = "work") do={:put "in_bridge"} } else={:...

greek

Try:

[greek@RT] >  :if ([/interface bridge port get  number=[/interface bridge port find where point-to-point-port=yes  ] interface] = "work") do={:put "in_bridge"} else={:put "not_in_bridge"}
in_bridge
[greek@RT] >

greek

miks69, have your interface static name or not?

greek

krakenant, Thanks a lot! It's Very usefull example for me!

ps: Maybe, can you help me in neighbor topic: http://forum.mikrotik.com/viewtopic.php?f=2&t=74534 ?

greek

:local INTNAME ether1
:put [/interface bridge port find where interface=$INTNAME]

Thanks! How i can use into the scripr "empty answer" of this example?

if [/interface bridge port find where interface=$INTNAME] == "empty?" do={} else={} ?

greek

Thank you! I'll try to test this script!

greek

Hello.

How i can check is eth port into bridge already or not? In script.

greek

Good day.

Tell me please, how i can see uptime of the ethernet port in RouterOS?
(Whithout searching in log)

greek

I am interesting too.

greek

Upgrade RB1100AHx2 from 5.25 to 6.0

I see broblem with Bridge between vlan interface and physical interfaces. Arp - ok, dhcp -ok, ping ip on bridge int - Ok, ping thru bridge - NOT Ok.

Downgrade to 5.25 is solving problem. I was testing it 2 times.

More detail try to post in 2-3 days.

greek

I am interesting the same question. Is some new oid present?

greek

Additional info: Mikrotik: /interface ethernet set 0 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited disabled=no full-duplex=yes l2mtu=1598 mac-address=D4:CA:6D:00:00:00 master-port=none mtu=1500 name=\ ether1-gateway speed=1Gbps interface ethernet print Flags: X - disabled, R - runni...

greek

I have the same problem between Cisco2960 with 2 Gigabit ports and RB951G-2HnD auto + auto = no link manually: 10full + 10full = 10full 100full + 100full = 100full 1000full + 1000full = no link Cisco + notebook = 1Gbit/s RB951G + notebook = 1Gbit/s RB951G + Dlink DGS 3627G = 1Gbit/s 3 different cabe...

greek

*) sstp server - removed test mode which allowed running server without certificate;

Oh, why ?

greek

Thanks for answer!

I use just "default" type.

I need reply from mikrotik-ospf-router (by 224.0.0.5) very much for diagnostik my real network.
I wrote trouble ticket in support about it.

greek

Tell me please, your mikrotik ospf-router answer to ping 224.0.0.5 when link is up ?

greek

Good night! I made simple ospf scheme: http://wiki.mikrotik.com/wiki/OSPF-examples#Simple_OSPF_configuration All is working, i can see all neighbors and all routes. But i am trying ping 224.0.0.5 and 224.0.0.6 and cann't see answers. Is it normal? Can you help me and try to ping this addresses in yo...

greek

Tell me please, is mikrotik answer on 224.0.0.5 ping ?

I made simple ospf-scheme with 3 routers (mikrotik), all working, but mikrotik does not response on pinging 224.0.0.5

greek

It's bug.

Support said that this will be fixed.

greek

Attempt to find workaround is not working too. Trying send 1 ping only for 3 times (i am wait 9 reply * 3 ping): [greek@IPv6Test-2] > :for i from=1 to=3 do={ ping 224.0.0.5 interface=vlan1204p1 count=1 ; }; HOST SIZE TTL TIME STATUS 10.232.5.13 56 255 1ms sent=1 received=1 packet-loss=0% min-rtt=1ms...

greek

[greek@IPv6Test-2] > ping 224.0.0.5 interface=vlan1204p1 count=1000 <...> 10.232.5.1 56 255 932ms 10.232.5.13 56 255 0ms 10.232.5.16 56 255 0ms 10.232.5.10 56 255 0ms 10.232.5.12 56 255 3ms 10.232.5.14 56 255 4ms 10.232.5.17 56 255 15ms 10.232.5.11 56 255 21ms <...> sent=113 received=1000 packet-los...

greek

Good day.

Tell me please, how to include ping sequenses number in ping output?

I need it for analyzing ospf-routers answers on multicast ping.
Thank you for answers.

greek

I've the same problem. Can anybody troubleshout this ?

greek

Normis, how to enable pin-code on lcd in v6.rc2 ?

greek

Regarding the LCD question posted earlier, I made a mistake. The PIN and basic configuration abilities are only added in RouterOS v6rc2 (will be released this week) _________________________________________________________________ [admin@MikroTik] /system package> pr Flags: X - disabled # NAME VERS...

greek

There are multiple ways how you can 2) using $interface, $mac-address and $address variables in dhcp-alert Is it correct? : /tool e-mail send from=test@gmail.com to=test@gmail.com tls=yes subject=DHCP-alert body=" $address $interface $mac-address " It isn't work :( [greek@12345Router] > /...

greek

Ok. Now 6rc1 is present in Download section of the site.

p.s: 6rc1 + /interfece wireless spectral-scan = reboot RB2011UAS-2HnD-IN

greek

Ok, i know it, but in v6rc1 i cannot find this option.

In wiki phrase about lcd and pincode was cut out (but this phrase is saved in google cache)

greek

if they would enable it to have a sort of pincode
It does have PIN code ability, and can configure IP addresses and other settings. It can do that already!

How we can set up new pincode? Or activate it?

I cann't find settings.

greek

Good day. My cellular op sends to me (on my 3g dongle in 751u) messages on russian language. Any decoders can not decode it! This is one of messages: [greek@PapaRouter] /tool sms inbox> pr # PHONE TIMESTAMP MESSAGE 0 sms_web Sep/29/2012 00:09:50 GMT +4 proverka 2 sms_web Sep/29/2012 00:11:27 GMT +4 ...

greek

I have the same problem. PPTP + IPv6 (only) + Windows7 = only link-local address Win7 does not see remote-ipv6-prefix, only link-local. Debug shows only l-l address : 23:08:46 pptp,ppp,debug,packet <------>: rcvd IPV6CP ConfReq id=0x5 23:08:46 pptp,ppp,debug,packet <interface-identifier 5815:32f0:1a...

greek

I have the same promlem!

I found i little workaround:

but it works very unstable! This functoin return "timeout" after 2-3 hours working.

How to fix this problem whith "left" symbols on the end of value?

greek

1. Create VLAN 100 on interface Ether1 (for usability set name as "vlan100p1" [vlan 100 at port 1]) 2. Create VLAN 101 on interface Ether1 (vlan101p1) 3. Create VLAN 200 on interface Ether2 (vlan200p2) 4. Create VLAN 201 on interface Ether2 (vlan201p2) 5. Create VLAN 101 on interface Ether...

greek

Hello. I found how to do it in version 2.5: [MikroTik] bridge> print ip: discard ipx: discard appletalk: discard ipv6: discard arp: discard other: discard priority: 1 (c) http://www.mikrotik.com/documentation/manual_2.5/Basic/Bridge.html And how to do it on version 5.14 ? Thank you for answers.

greek

You need use chain "dns64 + nat64". Your pс ask dns64 dns64 ask aaaa-query if site have not native aaaa-addres (with ipv6)=> dns64 return special-maked aaaa-answer to your pc, which contain special-maked IPv6 address (prefixForNAT64+ipv4address) Browser of your pc sent GET request for this...

greek

I am interesting this questions too.

greek

I have created a film with a demonstration of two problems drag-n-drop functions: dragging items and files. Problem with drag and drop files, I partially solved and showed it in the video. http://www.youtube.com/watch?v=M4cu_JEBAm4 To resolve issue with items, I propose a partial solution to the key...

greek

I have the same problem. WinXP Professional 32bit. Problem with drag-n-dropping files I solved by using Ctrl+C and pressing Paste icon into WinBox window. But sorting of ip-firewall rules is very big problem whithout d-n-d function. :( Tested WinBox 2.2.15 and 2.2.16 (IP connection , MAC connection)...

greek

Admins have 2 targets for p2p traffic:

1. Blocking
2. Shaping

And that targets has principial differents.

Your way is good for blocking traffic.

But it can be considered as a special case of the marking of traffic.

greek

I am sorry for my bad english. I have one thing about additional detection bittorrent traffic. Torrent-programs use one port for incoming connection. Part of this connection is detects by default p2p-rule of Mikrotik. (But big part not detect :( ) I suggest to remember the port with connections whic...

Search found 117 matches