MikroTik

Jacka

Hello,
I need hostname "hello.website.com" to forward to 192.168.10.25:5520 in my LAN. How to accomplish that on my mikrotik?

Thank you.

Jacka

Solved. Had an accept rule above that couldn't find. Thank you.

Jacka

Hi all, I'm undertaking some security improvements on my Mikrotik router and I'm running a port scanning software from a remote host to see what ports are open from outside. Although I drop port 53 udp/tcp, the scanner shows that the port is open. How come? Thank you. Yes, I have enabled "Allow...

Jacka

Thank you all for explanation.

Jacka

You can't do it because RAW does not differentiate "forward" packets from "return" packets. Only connection state machine can do that.

What about "accept" rule from LAN before the drop rule? It will help?

Jacka

Add "connection-state=new". Thank you, that did the trick. But, what about the same firewall rule but used for RAW? There is no "connection-state" option. /ip firewall raw add action=drop chain=prerouting comment="KP block" in-interface=PROVIDER log=yes protocol=tcp sr...

Jacka

Hi all, I've created a new filter rule to block all incoming connection to my router from a specific country, except connections to 465 and 587 port. But at the same time I can't reach websites from that country, this rule blocks outgoing connections too. What I'm doing wrong? Thank you. Rule: /ip f...

Jacka

No need to portforward since you use VPN...
Also, PPTP is not safe... it should not be used...
Have you configured your routes for both sites ?

I've configured Route just for Router No.2 because connections will go from router 2 to router 1.

Jacka

Hi all, I have installed a routerboard in a new branch. Configured a VPN (PPTP) connection to the main Mikrotik Router and now all our apps work just fine. Now I need to allow access to the File Server (Windows Share) \\172.23.20.20 how can I accomplish that? I need to port forward 137, 138, 139, 44...

Jacka

Solve it. In Routerboard settings I've changed enable-jumper-reset to YES. Then I was able to reset the device by button. Thank you all. *By the way, tried Netinstall, but didn't worked. I can see the device it says Ready, I press the install, nothing happens and after about 10 second it shows Ready...

Jacka

What is the output of /system routerboard settings print ? [user@RB2011] > /system routerboard settings print auto-upgrade: no baud-rate: 115200 boot-delay: 2s enter-setup-on: any-key boot-device: nand-if-fail-then-ethernet cpu-frequency: 600MHz boot-protocol: bootp enable-jumper-reset: no force-ba...

Jacka

Depends on how you lost the access. It's possible to disable the reset button, or to set a certain time for it.

I've lost/forgot the password. I want to reconfigure the device from scratch, how can I enable the reset button?

Jacka

Hi all, I've lost access to the admin username and at the moment I have access only to a username belonging to Local group, within Winbox I cannot reset the Routerboard. So, I've tried to use the reset button, tried several methods, pushing the pin after and before turning power on, after, waiting f...

Jacka

Please export full wireless configuration. Thank you for posting. This is everything what wireless export gives me: [admin@MikroTik] > interface wireless export /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik add authentication-types=wpa2-psk eap-methods=...

Jacka

speeetest.com gives me same results. My AP is not performing to well and this is a issue. Can someone give me an advice? What's wrong in my config?

Jacka

Hi all, I cannot get good wireless performance from my Mikrotik board, I'm standing with my Notebook (that uses Qualcomm Atheros AR956x adapter) next to the router and all I can get is ~55Mbps using Mikrotik Bandwidth Test app. Can someone point me to what I changes I need to make in my config so I'...

Jacka

Hi all,

I know that CCR1009-8G-1S-PC is not being produced already but I need exactly this model. Could you please point me to someone that might still have it in stock? I've searched on ebay and many other websites but without luck. I'm willing to buy it.

Thank you in advance.

Jacka

Hi all, I have two RB2011UiAS-2HnD configured as AP at the same location (about 5m from each other), both serve about 15 users each. It used to handle quite well all connections but the location has been populated with many AP and the interference is now the main problem. Sometimes it happened that ...

Jacka

The script works very well! Thanks IntrusDave, you are a Wizard Master!

Then, what I'm doing wrong? Can smb help me out. Thank you.

Jacka

The script is still operational ? It's not working in my case. The is no code inside the script...

Jacka

The solution has been posted so many times already: do not use direct IPsec tunnels, use GRE or IPIP tunnels over IPsec transport. Setup /30 addresses on the tunnel, and set BGP peers to eachother. Put the local networks in BGP networks. Everything will just work without having to fight with NAT. U...

Jacka

I still have no solution

Anyone? Smb said I need to make some route rules, but I know routes aren't used in IPsec. For example clients from router 1 connects without issues to router 2 without any route rules.

Jacka

Hello, We've got 3 Routers. 1. Router 1 has IPsec connection with Router 2. Clients connect from Router 1 to Router 2 server. 172.22.50.0/24 -> 172.120.100.22 2. Router 3 has IPsec connection with Router 1. Clients from Router 3 connect to Router 1 server. 172.190.20.0/24 -> 172.22.50.200 If Router ...

Jacka

These rules yield the same result as a normal firewall DROP rule. Every packet still needs to be inspected by the firewall before marking them to be blackholed, even after the address exists on the ddoser and ddosed list.

Could you please share the rules without using the firewall? Thank you

Jacka

Thanks for explanation.

Jacka

Can someone post the complete rules for fighting DDoS using "blackhole" ? The rules below are ok ? Smb was saying there should be any mangle rule so it work better. /ip firewall filter add action=jump chain=forward connection-state=new jump-target=detect-ddos add action=return chain=detect...

Jacka

Hi, First of all thank you for this great script. I have a few questions: 1. Why there are 2 schedules? And if there are 2 it can't have the same name as in your example. /system scheduler add interval=1d name=UpdateBlackList on-event="/system script run updateBlacklist" policy=ftp,reboot,...

Jacka

Hi all, I need better wireless performance in my 2 floor office, I know it has two 4dBi antennas can I replace them with other more powerful ? I know there are 9dBi antennas that can be connected using an adapter. Thank you. Here is my current config, maybe I can change something in settings to boos...

Jacka

Solved it.

I had a port forward rule using port 8000 enabled.

/ip firewall nat add action=dst-nat chain=dstnat disabled=yes dst-port=8000 protocol=tcp to-addresses=192.168.0.250 to-ports=2135

Disabled it and everything works now.

Jacka

Hi all, At work I've setup ECMP load balacing with 2 providers. I don't understand why but some radio stations won't play at work, but work just fine from other networks, for example at home where I have just one providers. What could be the problem and how to fix it? Thank you. For example this rad...

Jacka

Anybody?

Jacka

What I did on the second mikrotik (Access Point). 1. Disabled all interfaces except Ethernet1 (first LAN port) and WLAN 2. Configured DHCP Client on first port to get IP from main router. 3. Configured Wireless 4. Configured DHCP on wireless interface I ping yahoo.com on mikrotik terminal and I get ...

Jacka

Route: admin@MikroTik] > ip route print # DST-ADDRESS PREF-SRC GATEWAY DISTANCE 0 ADS 0.0.0.0/0 188.222.229.1 1 1 ADC 188.222.229.0/24 188.237.249.174 ether1-gateway 0 2 ADC 192.168.1.0/24 192.168.1.1 bridge-local 0 [admin@MikroTik] > DNS: [admin@MikroTik] > ip dns print servers: dynamic-servers: 17...

Jacka

Hello, I've just setup a new RB951Ui-2HnD, Wi-Fi works, LAN works - PC can see each other, I can ping WAN IP like Google ans Yahoo, Skype works, BUT websites doesn't open. What I'm doing wrong? Please help me out solve this issue. Thank you. *I receive WAN IP through Dhcp-Client. [admin@MikroTik] > ...

Jacka

Anybody ?

Jacka

PPTP_1 and PPTP_2 are both 172.23.241.250/32 ? A packet from 192.168.88.0/24 destined to 172.23.241.250 will first have it's routing mark set to PPTP_1, but then the next mangle rule changes that mark to PPTP_2 and the packet will go out on PPTP_2. No no, sorry I've made a mistake, I edited the fir...

Jacka

Hi all, I created a set of rules that you can see below, everything works fine, no complaints. 1. PPTP client (mikrotik) - connected to a PPTP Server 2. /ip firewall nat add action=masquerade chain=srcnat out-interface=PPTP 3. /ip firewall mangle add action=mark-routing chain=prerouting new-routing-...

Jacka

Hi all, We have 2 Mikrotik devices, RB1100AHx2 acts as the main router, now I want to add RB2011UiAS-2HnD as Wireless Access Point. RB2011UiAS-2HnD should have it's own network 192.168.3.0/24 with DHCP enabled. Now in practice, I will connect the UTP cable on Port 1 (RB2011UiAS-2HnD) and for example...

Jacka

Hi all,

In the old version of RouterOS you can go to the web management and automatically create basic firewall rules. What is the procedure in the latest RouterOS versions? What are the basic firewall rules, can someone post them here? Thank you.

Jacka

Hi all, Currently I'm using RB2011UiAS-IN for different tasks: Router, NAT, Firewall, Web Proxy, VPN Server (PPTP) for now about 30 PPTP connections, Two WAN (100Mbps) Load Balancing, some Mangle rules. The router behaves well but very soon, in about 3 weeks the PPTP connections will grow to about 5...

Jacka

Anybody?

Jacka

Hi all, I have a PPTP Server on my Mikrotik board (RB2011UiAS), almost all users connect using Windows PPTP client. The most of times everything is fine and everything works as supposed to but from time to time some users can't connect to my PPTP Server, Windows gives them Error: 806. I manage to &q...

Jacka

It asks for user/pass because you have ticked "WPA EAP" and "WPA2 EAP".
If don't want to run authentication via a RADIUS server, simply untick those two options and you're fine.

-Chris

This is what I wanted to know, thank you.

Jacka

This is your wpa Pre shared key that you have configured in security profile

As I understand the WPA key is the Password, what is the Username?

Jacka

Hi all, When I want to connect to my Mikrotik AP for the first time sometimes it asks for Username and Password if I cancel the connection and double click again it will ask for Security key (as it should). Why does this happen? What Username and password I need to enter? http://i.imgur.com/6udG97G....

Jacka

Thank you all for posting. I've turned off "hw protection mode" and "adaptive noise immunity". About the SSID, I think that it doesn't matter if I use characters because... An SSID may be any combination of ASCII characters (i.e., any combination of letters, numbers, punctuation ...

Jacka

Hello, update to 6.12 and see what happens

I see no changes for wireless in the changelog, don't see any reason to upgrade you just gave me a standard answer that is no help for me.
If smb could give a hint where should I dig I would really appreciate.

Thank you.

Jacka

Hi all, I have a problem, not all devices would connect to my Mikrotik AP, for example at the moment I have to clients with their notebooks and none would connect to my AP. Why does this happen? And how to solve this issue? Thank you. http://i.imgur.com/1SR91cQ.jpg http://i.imgur.com/HA6xbiS.jpg htt...

Jacka

I don't know how this spectral scan works, what is the best frequency too choose from in my case ? Thank you http://i.imgur.com/sY8QySR.jpg [admin@MikroTik] > interface wireless spectral-scan number: wlan1 FREQ DBM GRAPH 2385 -79 :::::::::::::::::::::::::. 2391 -79 :::::::::::::::::::::::::.. 2397 -...

Jacka

Issue solved, had to add this rule:

/ip firewall mangle add chain=output dst-address=192.168.3.0/24

Jacka

Try to run "ipconfig /all"
To see all ip config including dns settings.

http://i.imgur.com/yX8Znfk.jpg

Jacka

I receive IP from DHCP, I cannot ping gateway 192.168.3.1 but I can ping external IP's for example 8.8.8.8 but websites won't open, it's a DNS issue? In IP -> DNS my dns servers are 8.8.8.8 and 8.8.4.4 In IP -> DHCP Server -> Networks I've added DNS server 8.8.8.8 to 192.168.3.0/24 network but still...

Jacka

I've read a few tutorials about how to setup an AP on MikroTik and I've noticed that almost in all of them LAN and WLAN need to be bridged and in this case it will work, but I don't want to bridge them because it will have same network, but I want WLAN to have different network and different DHCP Se...

Jacka

Post your entire export You posted only some parts from your router configuration. Please make a support output file and send that to support@mikotik.com. Check if you get an IP address on the client and you are able to ping the gateway and check if you can resolve DNS names by pinging some www sit...

Jacka

Alright. Looking at that you don't need to add a Masq rule since you masq all outbound traffic. What you do need to add is some rules to filter to block traffic between your two networks. I will make that rule, is not a problem, the problem is that I get no internet the connection is only "Lim...

Jacka

You have nothing in filter? I have, but I didn't think it is important... [admin@MikroTik] > ip firewall filter export # feb/12/2014 08:58:43 by RouterOS 6.9 # /ip firewall filter add chain=input comment="Allow Ping" icmp-options=0:0 protocol=icmp add chain=input comment="Allow Ping&...

Jacka

Post your current export so we can see what you have done. Then yes... looks reasonable. Basically add a masq rule, then add firewall rules to block cross talk. Either that block by default and then allow what you want. -Eric Thank you for posting. Here are my current rules: [admin@MikroTik] > ip f...

Jacka

Hello, I've just become owner of a RB2011, being my first MikroTik with Wi-Fi I don't have too much knowledge configuring it. I want a simple AP to share my internet... My current config is a PCC load balancing having 2 providers, now I need to: 1. Enable Wi-Fi interface, select ap-bridge mode ?! 2....

Jacka

Issue solved!
I just want everyone to know that a simple backup on RB750 and then restore on RB2011 will WORK without an issue at all, I had headaches with export that will not import properly. Don't know why I didn't try backup/restore first of all.

Good luck to all.

Jacka

I'm trying now to go the other way, edited "export verbose" and removed mac-addresses and added wireless intrefrace and other stuff that RB750G doesn't have but when running this command: /system reset-configuration no-defaults=yes run-after-reset=config.rsc nothing happes after reboot. No...

Jacka

Hi all, I wanted to move my config from my RB750G to RB2011UAS-2HnD-IN, RB750 with RouterOS 5.26 shows nothing about interfaces when doing /export compact. Then I decided to upgrade to v6.0 although I didn't wanted because is uses more RAM than v5, from 32MB I have about 9MB left and if something at...

Jacka

If you don't need MPLS/VPLS for anything, then yes, you can remove it. IMO, it really doesn't hurt anything to leave all the default packages. I used to be a bit of a nazi about removing unused packages, but with 100's of devices, it got to be a little annoying, especially when it was time to actua...

Jacka

Hi all, I've disabled a few packages that I don't use: wireless, hotspot and ipv6, but I don't know if I can disabled mpls, don't want to break my config. I use my route for: 1. Routing 2. PCC Load balancing + failover 2. Firewall 3. VPN 4. Proxy 5. DHCP 6. Queues My question is, can I disable this ...

Jacka

Hello, My LAN has this network address 192.168.0.0/24 on LAN1 interface, there is another LAN2 interface that has this network address 172.23.241.0/24. Now, I have PPTP Server on Mikrotik and users that connect through VPN receive an IP from network address 172.23.241.0/24. I would like VPN clients ...

Jacka

in firewall just set up rule that will check TCP protocol chain forward src-address=!192.168.0.200 action=drop Not so easy. If I add the rule below I can't telnet mail.domain.com 25 from outside, the port is closed. /ip firewall filter add action=drop chain=forward disabled=no dst-port=25 protocol=...

Jacka

Hello, I want outgoing e-mails to be sent only by my mail server (local server, IP: 192.168.0.200) and to deny use of port 25 from other IP's in my LAN. To avoid spam being sent from compromised PC's. What is best way to accomplish this ? If someone could help me with the firewall rules I would real...

Jacka

My next question is if I choose RB2011, because of different hardware configuration 10 ports and not 5 like in RB750G, restoring the backup from 750 to 2011 will it work without an issue ? The first 5 ports in 2011 will be the same as it is in 750? Thank you.

Jacka

Hello, At the moment I use RB750G, I am satisfied with this board it suited my needs but I already feel that I need more RAM, almost all the time I have about 8% of free RAM left and if there is a bigger load on the router it might reboot unexpectedly and I really don't like this situation. What my ...

Jacka

Thank you Caci99, I think I will add a route on clients machines If there is no other way.

Jacka

To solve it, you either assign an IP from the same network, or you add manually a static route in windows. In order to add a static route you would need to add the gateway on the pptp client, but assign it a metric=2. I can't assign an IP from the same network as I don't administer the other side o...

Jacka

Hi all, My Mikrotik is connected to another office using IPsec this connection is used so my users wold have access to this IP 172.20.XXX.10, if IPsec is dropped user can't have access to 172.20.XXX.10 and the program that they work with is not operating. Now, other users from different companies co...

Jacka

Hi all, Opened a new office in another City, we have there 2 computers both are identical (clone), now I have to to make a VPN connection to the central office Mikrotik PPTP Server. I've entered on the first PC remotely, quickly entered the IP of my PPTP Server and that's it all good, the connection...

Jacka

Hi all, Tried a few VPN clients none of them work properly, can't even connect, please advice a good free VPN client for Windows. VPN provided by Windows is not an option for me although it works, but I another client. Thank you. What clients don't work: http://img7.imageshack.us/img7/3652/vpnlo.jpg

Jacka

Hi all, At the moment I'm using Webproxy to block access to specific websites and file types download, but the Webproxy is using a lot of RAM, aprox. 11MB and because of this the router sometimes reboots itself because of the low memory. I'm thinking of shuting down the Webproxy and use L7 RegExp fi...

Jacka

add a scheduler with this
Code: Select all
{
local mem [system resource get free-memory ]
if ($mem < 5120 ) do={/system reboot }
}

Thank you!

Jacka

Hello,

Need a script that will reboot the router when memory goes lower than 5MB.

Thank you

*RB750G

Jacka

Hello,

Today when I logged in on my MIkrotik I've noticed that the CPU is running at 100%, using Profiles I saw that "flash" is using 95%.
What is flash and why did this happen ?

Thank you.

Jacka

Anyone ?

Jacka

It would help if you showed your mangle rules and routing table. My config: /ip firewall mangle add action=accept chain=prerouting disabled=no dst-port=80 protocol=tcp add action=accept chain=prerouting disabled=no dst-address=192.168.0.0/24 add action=accept chain=prerouting disabled=no dst-addres...

Jacka

Just add entry to the routing table: ip route add dst-address=92.11.11.200/32 gateway=x.x.x.x where x.x.x.x is the default gateway of the WAN connection, you want to route to. If you want to block connection from LAN1, I suppose to use the firewall rule. Already tried this, it doesn't work, it goes...

Jacka

Hi all, My situation: interface1: LAN1 (192.168.0.0) interface2: LAN2 (71.40.116.0) interface3: WAN1 (77.45.45.120) interface4: WAN2 (88.30.30.0) In order to make IPSec connection to a another device I need to ping this IP 92.11.11.200, this IP is reachable only from LAN2 network and has to go out t...

Jacka

Hello again, Tried many things but still couldn't move from ECMP to PCC load balancing, because when using PCC websites won't load and I thing I just found what the problem could, the problem is when Webproxy is enabled (transparent mode). My question is, how to configure PCC so it would work fine w...

Jacka

Hello, Don't know who made the script below (thank you) just found it using search on this forum. I think it works, didn't tested yet. I just need your help to change it a bit for my needs. I need to add this: after the Installed-SA are flushed it should ping 10.0.1.2 five times. Thank you. :local I...

Jacka

Same here. If someone could come with a solution we would really appreciate, thank you.

Jacka

I set the level to unique, nothing changed.

Jacka

BUMP, anyone ?

Jacka

@Jacka: Post your configuration (peer, policy and proposal). What equipment is in the main office? Are lifetimes/lifebytes equal on both ends? Are you using DPD? Do you use Netwatch to keep trafic running? Post your configuration (peer, policy and proposal) [admin@MikroTik] > ip ipsec peer print de...

Jacka

Yes, I use the latest version 5.21. Is there a workaround of my problem ? My own workaround is that i no longer use ipsec on mikrotik. Too unreliable. Try sstp instead. It appears to be more stable. The main office requires IPsec tunnel, can't do nothing about it. I have another issue with IPsec, s...

Jacka

Yes, I use the latest version 5.21.
Is there a workaround of my problem ?

Jacka

Hi all, I established a IPsec VPN tunnel to link with the main office but every XX minutes it keeps disconnecting so I have to flush Installed SAs and the reconnect again manually. Why is this happening ? Need some help. 13:17:25 ipsec,debug,packet delete payload for protocol ISAKMP 13:17:25 ipsec,d...

Jacka

Website aren't opening...

Some screenshots...

Jacka

Your masquerade rules look fine, but why are they so down the order? Number 25 and 26. Usually they are on top. So far your config looks good, so everything should work fine. Are you still having problems? Can you see the distribution of the packets in the interface table? The distribution should n...

Jacka

what are your masquerade rules?

25 ;;; Added by webbox
chain=srcnat action=masquerade out-interface=Orange

26 chain=srcnat action=masquerade out-interface=MTC

Jacka

Caci99 wrote: The blue route is normal. It is a backup route if the the other one fails, it has distance=2 which means that if the route with distance=1 will not work, this one would take the job, and the color will change as well to normal. I don't want the second route to be the backup route, I w...

Jacka

You didn't answer to my question, both routes work at the same time ? Or the second route works only if the first one is down.

Jacka

/ip firewall mangle add chain=prerouting dst-address=??????? action=accept in-interface=LAN1 /ip firewall mangle add chain=prerouting dst-address=??????? action=accept in-interface=LAN1 In the rule above what IP's should I use ? Static IP or the Gateway IP ? What's up with the NAT rule you gave me ?...

Jacka

Caci99, mixig thank you! I've changed the passthrough value yes to no where you told me, but as you can see in the print screen one route is "blue", why is that ? Some websites would open some wouldn't! And another question is, I don't know what I should I put in mangle dst-address the gat...

Jacka

Hi everyone, Upgraded today to RouterOS v5.21 and with this upgrade I wanted to finally move to PCC load balacing, because as many said ECMP is outdated. I followed the example from wiki but the routes aren't working properly don't know what I'm doing wrong if you could help me I would really apprec...

Jacka

Hi all, I have 2 providers (load balancing) and sometimes when I want to check my traffic with one provider I can't enter on that website, because that providers allows connection only form it's own network but the connections goes through the other Provider (denied). Please help me make a rule so I...

Jacka

Yep. But you should still backup first. Yes, I have a backup already, thank you. Dont forget to update the FW too while your at it. I should: 1. Upload all *.npk files 2. /system routerboard upgrade that's it ? Thanks. hmm.. you whant that router for 40$ work with full 5 gigabit ?? :D I'm not talki...

Jacka

it's in version 5. try to upgrade

Will my configuration stay intact ? If I'll do it.

Jacka

Tools -> Profile will tell you!

I don't have such an option.

Winbox v4.11 on RB750G

Jacka

....some RouterOS facility

Could you tell me please what kind of RouterOS facility ?

Jacka

check tools/profile and have a look on whats using most CPU Can't you see ? Uploading a file takes 100% CPU. There is no need for a tool to understand this. What config do you have? If you have bridge also then check so that your not sending the bridge traffic through the FW unless you need to. I w...

Jacka

Hi all, Why RB750G is using 100% CPU when uploading with 30Mbps or more ? It happens when downloading with high speed of 60Mbps or more...All other connections being dropped or being very slow. Can't understand RB750G can't handle 30Mbps upload or what ? And this a single connection upload, I'm not ...

Jacka

you can check your arp list>> IP arp

This is what I needed, can't understand how I missed this option, thank you.

Jacka

http://www.robtex.com/as/as15169.html?tab=bgp

Jacka

Hi all,

On the router I see only IP's that were allocated trough DHCP (IP>DHCP Server>Leases), how can I see all the IP's that are connected to the router using manual IP settings ?

Thank you.

Jacka

You will also need a route with that specific routing mark. But that's basically how to do it. If performance is a concern modify mangle to be this. /ip firewall mangle add chain=prerouting src-address-list=Allow action=mark-connection new-connection-mark=WAN2 passthrough=yes connection-state=new a...

Jacka

I'm not sure and I really can't understand right now, but I think the code below works: /ip firewall address-list add list=Allow address=192.168.0.100 /ip firewall mangle add chain=prerouting src-address-list=Allow action=mark-routing new-routing-mark=WAN2 passthrough=no Any tweaking or thoughts wou...

Jacka

Hi all.
I have ECMP load balancing with 2 providers, both providers are used at the same time, but sometimes I need to enter a website with a specific Provider (IP), can someone help me with a rule that will fit my needs ?
Thank you.

Jacka

Because some parameter usage depend on what protocol is selected. For example there are no icmp options for TCP protocol.

I understand, thank you.

Jacka

You have to make two rules, one for each protocol.

I understand, don't know why RouterOS doesn't have such an option. Thank you anyway.

Jacka

Hi all.

A quick one.

How to add 2 protocols, for example TCP and UDP in a port forward rule ? In Winbox I can't do it, I have to choose only one protocol.

Thank you in advance.

Jacka

I've called my provider and they said that I don't need a gateway so they didn't want to give me, I know why, because the gateways are dynamic so it keeps on changing... I did what you said, it gave me this gateway : 217.XX.164.44 but it was unreachable Another thing looked into Addresses list, the ...

Jacka

The dst-address is set like this for both provider:

73.88.149.0/24
88.230.11.0/24

gateway: WAN1 and WAN2

Jacka

Yes, my fault.

Just one thing, for one provider I know the gateway, for the second I don;t have it because I don't know it, it's a PPPoE connection, only login and pass (and maybe DNS) is needed, nothing else.

Jacka

Had other troubles on my mind, didn't have the time to work with the router...now back to what I was testing... I tried the rules you gave me, I've change the interface to IP: [admin@MikroTik] /ip route> add dst-address=8.8.8.8 gateway=73.88.149.13 scope=10 check-gateway=ping [admin@MikroTik] /ip ro...

Jacka

Unfortunately it doesn't work.

I get unreachable message for: add dst-address=0.0.0.0/0 gateway=8.8.8.8,8.8.4.4

add dst-address=8.8.8.8 gateway=WAN2 scope=10 check-gateway=ping - reachable
add dst-address=8.8.4.4 gateway=Arax scope=10 check-gateway=ping - reachable

Jacka

I think it should look like this: /ip route add dst-address=8.8.8.8 gateway=Orange scope=10 check-gateway=ping add dst-address=8.8.4.4 gateway=Seti scope=10 check-gateway=ping add dst-address=0.0.0.0/0 gateway=8.8.8.8, 8.8.4.4 The scope value is important. The IP 8.8.8.8 and 8.8.4.4 are those of th...

Jacka

First, it is a matter of choice whether you will use ECMP or PCC configuration for loadbalancing. PCC was introduced to fix some problems with ECMP. ECMP has some problems with connections that require authentications (MSN, facebook, etc). In case you find no problems in your network with ECMP, and...

Jacka

The article you point out at first sight describes a better way for failover than the one I recommended. But I haven't tested it, and do not have a way to test it now. I can attempt to clarify some your questions. The IP of Host1 and Host2 are not your IP-s, but rather those of http://www.google.co...

Jacka

I will post a script which I found in this forum a couple of years ago, a little modified. You, see both routes are MAIN/Primary, thank you very much for your script but I would like to use routing firewall without scripting and today I've found this article: http://wiki.mikrotik.com/wiki/Advanced_...

Jacka

For the failover to work properly you would need a script. The script will be executed every, say, 10s or 15s and it will discover if google.com (or any other webpage or server) is reachable or not. What kind of connection to the ISP do you have? Static IP or PPPoE. You can post at least your route...

Jacka

can smb help me configuring routes for fail-over for two providers ? Both providers should be active at the same time (balancing) if one route fails all the traffic should go through the other one. some times it happens that both routes are reachable, but there is internet only with one provider, an...

Search found 125 matches