MikroTik

cybercoder

I can only think of VLANs and using secondary router as a switch, Yes, I know that. but MikroTik doesn't have special software to stack routers It's "Mikrotik certified consultant" asking us? I just want to be sure for this. Someone asked me and i got suspected to may be there's new produ...

cybercoder

Is possible stack two routerboards and make a huge port router?
Then is possible to manage QOS,Hotspor, ... from one of them as master router?

I'm thinking to Switch port & VLAN

cybercoder

This question may be weird, but someone asked me and i got thinking.

Is possible to auth wireless via radius without mac-auth or using hotspot
e.g. using generated username in Radius as dynamic pre-shared key??!!!

cybercoder

Is the train the trainer program stopped? I'm thinking to attend it when announce near IR.

cybercoder

Do not ask how to configure,
do yourself.

Thanks for suggestion, it was amazing. I did install configure & use it.
It can resolve IP addresses to DNS names in messages bodies too.

Thanks a lot

Warm Regards

cybercoder

I need a proxy analyzer on Microsoft Windows 2008 R2 to works as a remote log server and get the proxy logs from a Mikrotik routerOS and can map the Internal network IP addresses to Computer names (fetch from a MS-Windows DNS Server) and get me a nice GUI with a lot of analyzing and reporting tools....

cybercoder

I saw this model :CCR1036-12G-4S-EM in routerboard.com

The question is, can i use it to 1 SFP traffic in and 3 stm-4 traffic out? and is this device stable enough to replace a CISCO Catalyst switch with that?
Isn't any SFP+ port support model of CCR?
Regards

cybercoder

I got suspected to the switch CAM table which between SXT and 750GL, changing the IP address range from 192.168.10.0/24 to 172.16.255.248/29 (because wasn't access to restart switch physically!) solved the problem

cybercoder

According to my network diagram, There's a RB750GL with 3 active Ethernet ports Ether1: connected to a SXT5HND on it's Ethernet port, through a layer2 switch. Ether4: connected to a 3com layer2 switch Ether5: connected to a cisco router as gateway for intranet (which connected to a iDirect satellite...

cybercoder

After i read your first post, it seems you need to balance the load of input web traffic and do failover. The standard way is use DNS load balancing: Imagine google web servers, when you want to access google.com it may have different IP addresses in each request. This feature is called DNS load bal...

cybercoder

Thanks for your attention, but i didn't ask how block yahoo, i asked why it not works ("Not ("!")" of a L7 Rule) of-course it will block with IP address blockage! It will use firewall in IP layer! or i know how to except in the regex string without using logical NOT in filter Rul...

cybercoder

This is my configuration on RouterOS: /ip firewall layer7-protocol add name=Yahoo regexp="^.*(yahoo).*\$" /ip firewall filter add action=drop chain=forward layer7-protocol=Yahoo src-mac-address=\ F0:E7:7E:54:57:2E This will block the yahoo url properly, but when i'm using "not" (...

cybercoder

With special thanks to Mr Hamed Zolghadri (CCIE #36789)
He explained to me if right side PE router import both VRF tables to a customer router then there is conflict between IP addresses and it is natural.

Seems "airtonarantes", you said something like that and i did get misunderstand.

cybercoder

do you think there is anyone to do cost for sniffing information like these? what is the reason behind this hack?!

cybercoder

http://forum.mikrotik.com/viewtopic.php?f=2&t=42698

cybercoder

Why you migrated from Cisco?!!!

there is very Cisco proprietary options! it would very hard to reconfigure

cybercoder

the RD will detach when IP packet Going out from P network to C networks. there's no Route distinguisher on any Customer Edge routers. pinging 10.10.10.1 from right side customer network will not have correct result (i think) logically I think i should prepare 5 routers and test it in near future. R...

cybercoder

/ip firewall nat chain=dstnat action=redirect to-ports=80 protocol=tcp dst-port=80 packet-mark=G1 chain=srcnat action=src-nat to-addresses=[color=#800040]XX.XX.XX.XX[/color] protocol=tcp packet-mark=G1 if change first rule to : chain=dstnat action=dst-nat to-addresses=173.194.40.50 to-ports=80 prot...

cybercoder

Dear Mr Shahbazian
Tell me if there was MTCINE exam in Iran. I just need do exam. there's no problem with me and the course. implementing BGP & MPLS is the parts of my job in Cisco and MTK, Here is a deep conceptual view and no need to sit.

Regards

cybercoder

I had a VM file with ROS 3.3 which it was working with Hyper-v and Legacy Network card, properly. But today i upgraded that VM to version 6.0 with formatting disk and installing ROS from ISO file

and now it's not working and there's no ROS version 3.3 anymore!

cybercoder

yes, but imagine that if a packet sending from one of right side networks , and want to call with 10.10.10.1 then what will happen?

cybercoder

Jinx, It's awesome challenge accepted and legen ... wait for it ... dary

cybercoder

dunno. but significant portions of MikroTik consumers are Non-Christian[and very likely viewing this forum]. also some of them quite offensive[as typical for all Abrahamic religion, including Christianity itself, in past]agains others, sadly. point is, some people, forget thats seriously based on a...

cybercoder

Thanks all,
It can bee web site logo for those days too, but decision can make by Mikrotik not i !!

cybercoder

That was i already doing and it worked until last update! but now console first download a file with this address which not downloadable with http standard headers! http://piflc.xboxlive.com/vortex/logbinary.ashx after download this file then it decide to download main cab file but it's don't accept...

cybercoder

I think node.js is useful in this scenario, it will make a daemon for you by listening on ports and do your commands
http://www.nodejs.org/

cybercoder

Use Snort's -r <filename> option to read a pcap capture file, whether from Snort, TCPDump, Ethereal, or any other program that creates a libpcap format file you can use sniffer (traffr) in background with screen (you said urself) and then with -r switch of snort analyse the files but you need a time...

cybercoder

All lines like it in IR, i think i should start upgrade operation in night and wait for complete until tomorrow afternoon!

cybercoder

My DSL Internet is very unstable in download time without download managers, so when every time i wanted to update my Xbox 360 game console, i used routerOS web-proxy for finding downloading files and change the download.xbox.com address to my web server via DNS and download it with downloadman and ...

cybercoder

if RDs not propagate to C router (unique VPNv4 Address), then what thing make difference between same addresses on C routers?
excuse, but there is misunderstand for me.

cybercoder

Thanks 4 ur reply MRZ
is it mean the RD(s) propagated to C routers ?

cybercoder

I think it should do conflict, or there is a table (like VRF table) on C router. but i have not enough intsruments to test it.

cybercoder

Yes but there's no labels on C routers!
how can PE router map 10.10.10.1 to correct unique VPNv4 address?

cybercoder

cybercoder

Untitled-1.jpg

With according to the diagram picture i attached, how PE-2 router will find customer A want to communicate with Maria not Jason??!!?!

cybercoder

you should use API port Teddy.

cybercoder

I searched the local markets and no one heard about that but however i replaced the board with new one and it is working about 4 days without problem.
i didn't pin Mini-PCI s to board only pushed in slots!
when it want to work it will work!

cybercoder

Dear Edmunds
isn't better to give an exam chance in one of engineering levels (only 1) to whom passed the MTCNA exam with more than 80%?

(with that i can do MTCINE exam test without hard sits

)

cybercoder

I can't find ferrit tape here in markets normis. is the old video tape rolls good for this? i can buy an old video tape and scrap it. ( which brand is better? sony or panasonic? he he

)

cybercoder

i will get someone up the tower and get down that box tomorrow, thanks normis

cybercoder

I don't think having 3 X radio cards in one board is a good idea as interference will cause a issue,

There's 3 slots that mean 3 Radio cards can support! there's no problem with other 433AH(s).

The last step is to change the whole of routerboard! remove the problem!

cybercoder

There is a 433AH with 3 mini-pci cards (2* DBII F50 PRO + 1 * XR5 ) with a voptech POE 24v 2A the XR5 is connected to a 29.5db kenbotong parabolic antenna, and 2 F50(s) is connected to 23dbi Flat Antennas. all connected bye LMR400 pigtail cable. When i turned the routerboard first time, i just enabl...

cybercoder

There's a routerboard 750g connected to a cisco 800 series router which connected to service provider with ATM over IP. when i change the constant bit rate (cbr) of virtual circuit (on ATM) to 512 (it means 512kb/s), then the rb750g will ping correctly but winbox will not work from the world and the...

cybercoder

Please upload the apk file some where

cybercoder

Thanks Janisk for light answer

cybercoder

I just installed the ROS 3.2 on Hyper-v in 2k8R2 and set the physical interface to virtual machine, but the routerOS not identified any ethernet interface, isn't there any additional driver or something like that for old routerOSes?

cybercoder

if there's specific ip address for a subdomain, then you can block the IP address from layer 3 filter rules. but if not you could use regular expressions and layer 7 protocols to mark that specific packets and then drop theme from firewall rules.

cybercoder

Completely Mikrotik rewritten web-proxy (no Squid or another pre written source code used)

It's so light. thanks for this important note.

cybercoder

are you sure it is rewritten and not origin in squid?
please send a link to me to read, i can't find anything about proxy essential changes.

thanks

cybercoder

developed, i said "engine"
http://www.mikrotik.com/documentation/m ... proxy.html

cybercoder

I think there is need to patch firewall for tproxy support in near future. RouterOS uses squid as proxy engine, but need to support more features of that e.g : refresh patterns and ... always we have uniform traffics like windows update, WSUS downloadings and etc ... If it's done, i'll dive into my ...

cybercoder

Bonding could be used only on OSI layer 2 (Ethernet level) connections. Thus you need to create EoIP interfaces on each of the wireless links.
http://wiki.mikrotik.com/wiki/Bonding_Examples

cybercoder

Bonding could be used only on OSI layer 2 (Ethernet level) connections. Thus you need to create EoIP interfaces on each of the non Ethernet level links.
http://wiki.mikrotik.com/wiki/Manual:Bonding_Examples

cybercoder

& weather type & accuracy in alignments is very important in long range links.

cybercoder

There's multiple types of load balancing (redundant links & fail over & ... ), you could first select yours and there's sample scenarios in Mikrotik wiki like this one: http://wiki.mikrotik.com/wiki/Load_Bala ... e_Gateways
search the wiki will have good results.

cybercoder

Try to produce simple sheet of your network and post here first, we can't say anything without light approach of your network

regards

cybercoder

0 chain=prerouting action=mark-packet new-packet-mark=connection passthrough=yes protocol=tcp 1 chain=prerouting action=mark-packet new-packet-mark=conn passthrough=no packet-mark=connection You should Mark the connections first, then the packets of those connection! when you don't allow to pass th...

cybercoder

i am online by yahoo messenger : vahid_yid

cybercoder

are there count up for your specific mangle?

cybercoder

chain=prerouting src-address=192.168.0.140 action=mark-connection new-connection-mark=GroupBC passthrough=yes
chain=prerouting connection-mark=GroupBC action=mark-routing new-routing-mark=GroupB passthrough=no

Replace mangles with these optimal mangle.

cybercoder

i mentioned to the second mangle you sent :

1 chain=prerouting action=mark-packet new-packet-mark=conn passthrough=no packet-mark=connection

change the passthrough to yes

cybercoder

allow to pass the traffic through the router in second mangle chain, i think it will work

the second is meaning number 1 not 2

cybercoder

yes yse the error message is true the routing mark only works in routing time! i made mistake

cybercoder

set the use of IP FIREWALL on bridge to enable first, if it didn't work then change the specific policy route's mangle chain from pre-routing to forward , too. study the packet flow diagram will help you to make your own policy implementation decisions well. http://wiki.mikrotik.com/wiki/Manual:Pack...

cybercoder

It is possible only when a connection established behind of NAT ( I think << may i make mistake >> the Microsoft calling it Secure NAT for this reason ). when you are using NAT (overlay NAT), there's do PAT too. for example 192.168.X.Y are using Z.Z.Z.Z:abcd to connect over the net, when you now whi...

cybercoder

Use frequency usage tool to find a noise free frequency. Then set constant (start from 6Mbits) your data rate in wireless, to avoid rate flapping. you can handle the data rate in 802.11N in HT MCS tab too, but remember to set rate to configured in data rate tab

cybercoder

Don't forget to give karma when useful.

cybercoder

Send a request to that company, i think they will (should) assist you to assign public IP address on Mikrotik device, when they didn't gain permission to you to access to your DSL router!

cybercoder

You should set the D NAT/PAT on your DSL Router not on mikrotik.

cybercoder

In Iran sometimes i buy this : http://www.shabakeh-mag.com/ magazine and read. ( about 10 years )

cybercoder

oh, and the Mikrotik has not public IP Address?
Where's the devices in your network, can you draw a simple sheet of your network?

cybercoder

sorry, i made the mistake in words, RB750UP is the correct
but if you need gigabit ports you could purchase a routerboard with USB ports anf Gigabit Ethernet.
look at www.routerboard.com

cybercoder

if there's no many connections in same time, the regular SOHO routers will useful, but if you need web cache you need a usb port and storage too. I think RB750GL is a good selection.

good luck

cybercoder

What is the Radius server and how the stats of the radius in routerOS, some times records stick in active users table in radius when the user disconnected, and this fault happen. the parameters between radius and PPPOE profile and radius & PPP Authentication & Accounting (interim update) is ...

cybercoder

i added the winbox access rule to that post

and thanx for the karma, friend

good luck

cybercoder

There's super professional guys like Butch Evans or Greg Sowell or Dennis Burgess in US. all of those are Mikrotik certified trainers and consultants.

cybercoder

it seems there's a redirect loop
what is this 99.88.77.66 ? for where?

cybercoder

you're welcome
don't forget to give karma

and secure your router for attacks.

cybercoder

yes, i opened your router's web page from home

cybercoder

i forgot the winbox and i added it's port to that post

cybercoder

please remove the IP addresses you wrote because of your security reasons.

good luck and don't forget the karma

cybercoder

ok ok i found your firewall now just allow the established connection from the world this means bidirectional connection will start when request just started from your lan enter this codes in terminal: /ip firewall filter add action=accept chain=input disabled=no dst-port=22 protocol=tcp place-befor...

cybercoder

and last step :

/ip address print

there should be an address with D (dynamic) flag because of DHCP Client

cybercoder

please send output of

/ip route print

command too

cybercoder

I copied the configuration and i'm reading, please delete the above post because of your security reasons

good luck

cybercoder

open new terminal and run this command:

export

then mark all result in the window and right click and copy, then paste them here
we will see what is your router configuration and how it should edit and fix

good luck

cybercoder

3 way now i have in mind in this time: 1- both static route on both RouterOS will help you 2- use BCP on both routerOS 3- use NAT But i will describe first (Static Routing) ON Mikrotik with IP Address : 10.100.1.X /ip route add disabled=no distance=1 dst-address=192.168.88.0/24 gateway=172.16.101.2 ...

cybercoder

you mean if the source address is 99.88.77.66 then redirect to your internal web server if i understood your purpose right the rule is : /ip firewall nat add action=dst-nat chain=dstnat disabled=no dst-port=80 protocol=tcp src-address=99.88.77.66 to-addresses=192.168.1.1 to-ports=80 The above rule w...

cybercoder

I want the router you showed in facebook page, with 2 wireless antennas and alot ethernet ports.
when it will release?

cybercoder

You can find nearest certified consultant here: http://www.mikrotik.com/consultants.html

good luck

cybercoder

How we can hide some or all certificates from the list in public profile view, dear Normis?

cybercoder

iBGP does not guarantee loopfree routing

Yes it is. In standard iBGP, split horizon rules will help to achieve this. but when you are using route reflectors in AS(s) there's difference.

cybercoder

Nice too

That was very more fantastic if the TP Link's ethernet connector being in other side

cybercoder

you should use IP routing no NAT! add this static route on your cisco router!, and don't forget to enable ip routing in cisco router in configuration mode: ip routing ip route X.110.13.65 255.255.255.192 X.110.13.2 i don't remember you should use subnet mask or wildcard mask. please test your self g...

cybercoder

Geeeeeeeeeeenius

cybercoder

there's multiple scenarios described in Mikrotik wiki, just search "load balancing" in http://wiki.mikrotik.com will show you methods.

good luck

cybercoder

/ip route print where !bgp !ospf

cybercoder

You can close the 53 port for both udp and tcp for all except your local users and the DNS Servers. you can make address list and use quick. some thing like this : use access list like this : /ip firewall address-list add address=192.168.10.0/24 disabled=no list=Allowed2DNS add address=173.145.18.64...

cybercoder

any one don,t know that how this option active?

Are you sure the router's wireless card is in AP-Bridge mode!?!?

cybercoder

send a support ticket to mikrotik, that's very special problem!
upgrade the router to 5.14 may helpful.

cybercoder

yes, you can use destination NAT (dnat/dPAT) to achieve this.

see the port mapping section :
http://wiki.mikrotik.com/wiki/Manual:IP ... rt_mapping

Good Luck

cybercoder

The standard 802.11 can't use to bridge with 802.3 ethernet, There's better use WDS Transparent bridge in replacement of psudo-bridge http://wiki.mikrotik.com/wiki/Transparently_Bridge_two_Networks you can use Dynamic Mesh and AP Bridge when you want to make bridge between more than 2 devices. good ...

cybercoder

hiding the IP is not the security thing, it is not true logically and will no help to secure your network! study the network security essentials, and train the real world security issues will helpful, i think this the right but hide the public IP address behind the nat? (if it possible) like erase t...

cybercoder

if there is possible to use faked MAC Address on iPad, you can use PPPTP or L2TP for those group, I think iPad & iPhone & android support the ppptp & l2tp

cybercoder

You need to have enough knowledge in conceptual programming and coding in one of languages which routerOS have API in them. Or employ a professional programmer. Then you can apply your technical policies in the layers of application.

cybercoder

I think there's some routers (Made for Mikrotik)

cybercoder

if there is a big conference saloon, you can use Omni or Sector Antennas to arrange high cover and low costs. but using WDS may help you prevent frequency overlaps, some.

cybercoder

There's no tree access control system on RouterOS to allow you to select many features and assign permissions to users on them.
But you can do it by using API and make your own interface for your necessity.

cybercoder

You can make (leased DHCP Addresses) Static, to prevent automatic ip change.

cybercoder

I mean "All users be in equal QoS situation" ( Signals send from radius )

cybercoder

There's 500 Dynamic simple Queue made from radius on routerOS.
the question is : is difference between first q and last q ? (simple q is sequential)
if yes how can bypass it? (the soultion)

cybercoder

detach the usb drive and check it if there is no problem with no usb, format the storage and try again.

this is very simple i think you did it not?

cybercoder

I saw this too
when i activated the debugging and Starting PPPOE Server/Client it debugs, but when disabled them the debugs won't stop! what was it debug?

You can test this on 5.12

cybercoder

i want to create ip with only one port not 254 and i have gateway with 192.168.1.1 how to make 192.168.1.254.thanks

if i understood, you want to assign 192.168.254 to the interface which connected to 192.168.1.1 but you want 192.168.1.2-253 be not in your subnet mask? i understand correctly?

cybercoder

did you use the nand as storage for Web-Proxy or user manager or ... ?

cybercoder

I also need to find a rule to give the Polycom maximum traffick (when a video con is in progress.) and throttle all pptp connections (incoming), hotspot traffick (outgoing) and local proxy connections listening on ether 2 and ether 3 (Outgoing) You can assign a simple queue for the Polycom address ...

cybercoder

there is not possible to assign same IP Addresses to more than 1 interface
You can bridge that interfaces and assign a unique IP Address on the bridge
But remember the bridge will allow bypass bidirectional traffic on all interfaces, normally.

cybercoder

someone give me a karma please

cybercoder

there is a little bug:
when you set the router to factory settings (

/system reset-configuration

)
after reboot and click on remove configuration button, the settings is still there!

i tested it on a regular RB750

cybercoder

i know you worked hard on it and that was not induction, just my idea.
please don't be upset from me normis.

cybercoder

thanx fo reminding, i forgot bandwitdh test tool

cybercoder

sorry to say this but i should say:
may be it is very useful for newbies but hopeless for professionals.
it is like fast foods. (eat and run)!
and psychologically like ubnt airOS!

cybercoder

Also, tarpit does not make any sense for UDP connections, as there are no connections when talking about UDP as it can be sent no matter what other end is responding. Yes i know the UDP is connectionless yanisk! the purpose was what can do with udp flood attacks, I hadn't enough time, also changed ...

cybercoder

Today i saw a udp flood attack on one of my mikrotik routers, there's no tarpit in UDP what should i do?
block just count up the packets! there's no stop received flooded packets!

is effective by using limitations?

cybercoder

hmmm, i did that with a peplink balancer before but need that with mikrotik

cybercoder

I want to balance traffic incoming and outgoing from/to web server
is that possible in regular IP networks: -request sent to web server from a line but reply it through another line? (when line full)

what is the best plan i can do using routerOS? (PCC or ...)?

cybercoder

Normis, i did waterproof SXT (s) with fishing tank paste, and a layer of electrical wires paste. and all holes is closed, they are mounted vertically.
i think they will explode in next summer!

how correct vertical mount?

cybercoder

if you are connected to hotspot, you can allow direct connection to router by set the address in walled garden.

cybercoder

is there Hotspot server on that mikrotik OS?

cybercoder

1- you can set the parent proxy in the ROS, that should point to your SQUID machine's IP address.
2- you can forward your network traffic to Squid machine and use the squid as transparent proxy.

cybercoder

you can use softwares for this reason. like online application at www.mywificoverage.com or Motorola PTP Link planner and etc.
they will give you approximate vision.

cybercoder

you should learn how initialize nstreme dual first: http://wiki.mikrotik.com/wiki/Nstreme_dual_Step-by-Step

cybercoder

disable IP Firewall on bridge
export your queue to ROS commands syntax, and puth them here.

cybercoder

Hi Normis,
Isn't the time you take a hand on mikrotik website interface? that's very regular and monotonous.
I think the time of WEB 2.0 3.0 4.0 ... (

)
if you need help i am here for pre-designs.

cybercoder

I don't understand how this can help with my problem

I saw this before, because of very low bandwidth on encryption mode (with some carrier in some countries because of some fuc... gov... policies ), appear of winbox buttons and lists is not correct.

cybercoder

are you running winbox in MAC mode?
reboot the router and test it again.
using in secure session mode and normal mode and compare them
uncheck the Load Previous session and run winbox.

cybercoder

what is the reason of my karma decrease on this topic?

cybercoder

the layer 7 protocol (Application layer), just sign which matches with the regular expressions. you should affect on the packets (or connections) in the layer 3, but which packets signed by layer 7 protocol.

cybercoder

epic

I didn't think like that! I just designed it on free time as a little gift!
you can use it as replacement of wiki logo, for this days. that seems be fun.
if you need the PSD source file just tell me

cybercoder

This is my christmas gift to all of Mikrotik users around the world.
be Happy.

cybercoder

/ip firewall nat
add action=masquerade chain=srcnat disabled=no dst-address=!192.168.1.11 \
    src-address=10.0.0.0/24

if you want to use more than 1 ip address you can use Address lists

cybercoder

Are you sure the routerOS will up in first try?
isn't there any auto reboot when you turn the router on?

cybercoder

flush the dns cache on the router and on the client, may fix it. i saw something like this before.

cybercoder

I used hotspot on 750G with ros 5.11 in a workshop for a ISP engineers, I assigned Router IP(v4) address in walled garden and walled garden IP as (allow), but when openning the userman page the '411 page not found error' was appeared, by disabling Hotspot the userman page opened successfully. downgr...

cybercoder

5745 very noisy sometimes, because of 5470MHz-5825 is default frequency ranges of new UBNT products (AirOS) which always found in all areas!

good luck tomorrow

cybercoder

/ip firewall nat add chain=dstnat protocol=tcp dst-port=80 action=dst-nat to-addresses=X.X.X.X to-ports=80

The X.X.X.X is the IP(v4) address of your Apache web server.

cybercoder

First : select best frequency by using Frequency usage tool in both area.
Second : set channel width to 20Mhz
Third : use Nstream (Mikrotik compliant)

and see the results.(like CCQ and ...)

cybercoder

/radius add accounting-backup=no accounting-port=1813 address=127.0.0.1 \ authentication-port=1812 called-id="" disabled=no domain="" realm="" \ secret=123 service=login timeout=3s /user aaa set accounting=yes default-group=full interim-update=0s use-radius=yes Userman...

cybercoder

check is there a user with that username in USERS menu?

USERS and CUSTOMERS is diverse

cybercoder

I think you should assign a profile to user
check the Log of userman, it will be very helpful.

cybercoder

I think you should assign a profile to user in userman.
check the log of userman.

cybercoder

I think you can do it with mangling and PCC.

cybercoder

Those clients only associated to AP and association is not require IP address or send them.
You should assign them IP address via Static IP assignment on their stations or using DHCP ( if you want assign IP address to their wlan interface).

cybercoder

check the Walled Garden & Walled Garden IP

cybercoder

and which method you are still using?

cybercoder

no , i Don't Have any Bridge on Ether 4 (That Ether Connect to a Switch and Servers)

I didn't say on specific ethernet port, I asked are there any bridge?

and dasiu pointed to the right thing : you should input the client IP address as Target in simple queue.

cybercoder

there's only 6 routers

- you can use static routing
- you can use RIP
- you can use OSPF with one AS and one Area

good luck

cybercoder

is there any bridge ?

cybercoder

is the router act as local DNS (cache) server ?

cybercoder

can you upload apk file here? the android market is not accessible from some countries.

cybercoder

I saw a pppoe network, used 0.0.0.0 as local PPPOE server address

, but i don't know the PPPOE Server is on a Mikrotik ROS or not.
is this possible on RouterOS?

cybercoder

Thanx dear normis for reply
Auto-upgrade feature is nice, it takes packages from where we put before. can it check official mikrotik repository for new packages?

regards

cybercoder

I saw that script but i think a tiny interface like roterboard upgrade is more beauty and useful for newbies.

This is just a idea.

cybercoder

is good idea? just a click and latest npk package download directly from mikrotik routerOS repository in web site in to the routerboard. ( when routerboard connected to the Internet )

cybercoder

i disabled ip firewall on bridge and solved!

cybercoder

Please read the post carefully! when i added the NAT to routerOS the simple queue(s) don't show and control the download of the dynamic PPPOE interfaces. this is the rate limit syntax is sending by radius as attribute: "128k/128k 256k/256k 64K/64K 20/20" i read packet flow diagram of route...

cybercoder

I have a PPPOE server on a RouterBoard and the pppoe users authenticate via a Radius server and radius server assign them a simple queue and a invalid IPv4 address. the routerboard was forwarding pppoe traffic (by proxy-arp enabled if) to a linux machine and there i had source NAT and etc. yesterday...

cybercoder

You can use 2 or 3 Sector Antenna with high power to cover most of the area.
if signal in some places be low, then you can use indoor AP's to cover that places.

I think you can decrease the costs by this method.

cybercoder

Print both wireless interface exports (console) in this forum so we can see what you are exactly doing Please see the link in my previous post you can also check frequency usage in the target area and see which one has lowest noise and usage too. I did that, frequencies are free and not used. I use...

cybercoder

According to this article : http://wiki.mikrotik.com/wiki/Transpare ... o_Networks
When i set one SXT in bridge mode at 5805 freq, and anorher SXT (wds station) at 5180 freq :
the signal strenght is -90 - -92 db
But when both sxts at 5180 freq, the signal strenght is -64db

cybercoder

I used Transparent bridge with 2 RB SXT5HND station-wds in 5180 supper channel and bridge in 5805 there's signal strength in -90db! when i set both in 5180 freq there's signal strength at -64db I did that for learn addresses in that mode automatically to save valid IP(v4) addresses. what's the probl...

cybercoder

No, I think each user connected to a ppoe server, receive an ip address. This ip is "connected" to the server and can be pinged.

That's right. but about user's antenna, my purpose was our Access Points!

cybercoder

A-to avoid broadcasts, it is betterto bind a different pppoe server to each eth I thinks so, but when i want to access each antenna for configuration, needs to bridge it's ether port with my ether port! B- I did downgrade the router to ros 5.5 and reset system to factory settings (system-reset-conf...

cybercoder

A:I have 5 ubnt2.4Ghz antennas and 2 rb433AH each have 3 minipci cards & Antennas. All of this antennas LAN (Ether) is in a RB1100AH from ether1-7 and I bridged this ports. a PPPOE server is running on RB1100AH. is this method is true? or I should use same PPPOE servers on each ETHER ports? B: T...

cybercoder

we can't really give certification to people we never met. we have to see how you work in reality in a class before we give you our approval. please correct your slogan on logo to "routing the world we met before" that's not logical. some specialist persons may be sick and can't sit on th...

Search found 175 matches