Community discussions

MUM Europe 2020

Search found 439 matches

  • 1
  • 2
by joshaven
Wed Oct 18, 2017 6:17 pm
Forum: Virtualization
Topic: Virtualization, Live Migration and CHR
Replies: 0
Views: 832

Virtualization, Live Migration and CHR

I'm running CHR on Citrix XenServer but it crashes when live migrating to another machine. Is there an alternative solution to XenServer Tools that can allow the guest to move between hosts without locking up? Does this work with other virtualization solutions?
by joshaven
Wed Aug 24, 2016 6:25 pm
Forum: General
Topic: Auto Updated Blacklists
Replies: 15
Views: 1968

Re: Auto Updated Blacklists

CloudFlare has been working out very well and I am glad to have implemented it. My lists are now much closer to the end users due to the CDN. When testing from locations around the US and internationally it has been at least doubling the speed of accessing my lists and the caching has been very effe...
by joshaven
Wed Aug 24, 2016 2:44 am
Forum: General
Topic: Auto Updated Blacklists
Replies: 15
Views: 1968

Re: Auto Updated Blacklists

i'm using spamhaus, shield, openbl, malc0de, emerging threats and 8 honeypots in 8 different datacenter around the US. Also, the 200+ Mikrotik routers i manage report back what is hitting them. Are you interested in working together on this? I've been itching to expand my sources for a while now an...
by joshaven
Wed Aug 24, 2016 1:44 am
Forum: General
Topic: Auto Updated Blacklists
Replies: 15
Views: 1968

Re: Auto Updated Blacklists

You should contact another user here - IntrusDave who is also doing a similar thing. Perhaps you can pool your resources and have an even larger detection surface. I think we are already pooling our resources without knowing it. Upon a spot-checking of his list, it looks like he is using Spamhaus a...
by joshaven
Wed Aug 24, 2016 1:17 am
Forum: General
Topic: Auto Updated Blacklists
Replies: 15
Views: 1968

Re: Auto Updated Blacklists

I've looked into it for my service and it's just not a path that I want to go down. DNS can not deliver subnets, and breaking out a single class A into separate IP's would make the overall bandwidth skyrocket. The interesting thing about the DNS solution is that the router can be instructed from a ...
by joshaven
Tue Aug 23, 2016 7:53 pm
Forum: General
Topic: Auto Updated Blacklists
Replies: 15
Views: 1968

Re: Auto Updated Blacklists

You can write the zone to a textfile on the server after you have retrieved it and then send a reload command to Bind to activate this zone. I do it by simply taking a fixed header, then catting the list of addresses via a sed command that transforms the addresses in <tab>IN<tab>A<tab>ipaddress lin...
by joshaven
Tue Aug 23, 2016 7:42 pm
Forum: General
Topic: Auto Updated Blacklists
Replies: 15
Views: 1968

Re: Auto Updated Blacklists

For the single-address blacklist openbl, you could consider setting up a DNS name like openbl.joshaven.com with the A records for that list. Then a user of 6.36 or higher can just create an address list item with that domain name to receive the uptodate version of the list without any scripting and...
by joshaven
Tue Aug 23, 2016 7:37 pm
Forum: General
Topic: Auto Updated Blacklists
Replies: 15
Views: 1968

Re: Auto Updated Blacklists

For the single-address blacklist openbl, you could consider setting up a DNS name like openbl.joshaven.com with the A records for that list. Then a user of 6.36 or higher can just create an address list item with that domain name to receive the uptodate version of the list without any scripting and...
by joshaven
Tue Aug 23, 2016 6:58 pm
Forum: General
Topic: Auto Updated Blacklists
Replies: 15
Views: 1968

Auto Updated Blacklists

For years I have provided a dynamic blacklist as a free service for MikroTik users who would like to subscribe to well maintained blacklists. Due to its popularity (over 6000 daily requests) I have recently upgraded my server environment to increase availability & reduce latency for users anywhere a...
by joshaven
Wed Feb 03, 2016 6:03 pm
Forum: RouterBOARD hardware
Topic: hAP ac lite - missing 5G after netinstall of 6.34
Replies: 3
Views: 1009

Re: hAP ac lite - missing 5G after netinstall of 6.34

Thanks a million... that was the info I needed.

For others: My resolution was to disable wireless-fp and enable wireless-cm2 under /system packages. After a reboot my interface was back. Seems that the wireless-fp package and the 5g interface are not yet friends at least not with 6.34. 8)
by joshaven
Wed Feb 03, 2016 9:42 am
Forum: RouterBOARD hardware
Topic: hAP ac lite - missing 5G after netinstall of 6.34
Replies: 3
Views: 1009

hAP ac lite - missing 5G after netinstall of 6.34

Anyone else having issues with the 5G wireless card disappearing after a netinstall on hAP ac lite?

Also, and probably more important... anyone know how to get the interface back?
by joshaven
Tue Jan 05, 2016 4:55 pm
Forum: General
Topic: Are there plans to support Wi-Fi Aware
Replies: 0
Views: 812

Are there plans to support Wi-Fi Aware

Are there plans for MikroTik to support proximity services for Wi-Fi devices?

http://www.wi-fi.org/discover-wi-fi/wi-fi-aware
by joshaven
Thu Dec 17, 2015 7:07 pm
Forum: Scripting
Topic: Auto Updated blacklists from Spamhaus, OpenBL & DShield
Replies: 16
Views: 4843

Re: Auto Updated blacklists from Spamhaus, OpenBL & DShield

I'm not sure exactly what you are wanting to accomplish. Hit me off list at support@joshaven.com so we can discuss your need a little better.

FYI, I published not only the lists but the code I use to generate them so maybe you just need to look a the script I am running?
by joshaven
Thu Dec 17, 2015 7:04 pm
Forum: General
Topic: Can't get port forwarding to work
Replies: 14
Views: 4365

Re: Can't get port forwarding to work

kryptonite, what is stopping the request from coming in on WAN1 and leaving on WAN2? It may be not be port forwarding that is the problem. dst-nat aka port forwarding is a rewriting of the destination of the packet header. All it does is say what was once destined for the router ip is now destined f...
by joshaven
Sat Sep 12, 2015 7:16 pm
Forum: General
Topic: Odd behavior with Bridging a VLAN interface
Replies: 2
Views: 618

Re: Odd behavior with Bridging a VLAN interface

Honestly, I haven't revisited the problem. I should be looking into this again soon. I see that MikroTik made changes relating to bridges and VLANSs with a recent software change so here is to hoping it was a bug that has been resolved. :D What's new in 6.32 (2015-Aug-31 14:47): ... *) bridge firewa...
by joshaven
Sat Aug 15, 2015 1:21 am
Forum: General
Topic: Odd behavior with Bridging a VLAN interface
Replies: 2
Views: 618

Odd behavior with Bridging a VLAN interface

I have a switch that is tagging traffic from an AP to VLAN 23 through ether1 (trunk port) to my MikroTik. When I create a VLAN 23 on ether3 (e3v23) and install the gateway IP on the e3v23 interface everything is peachy-keen. I can then create a bridge (br-v23) and add the e3v23 interface to the brid...
by joshaven
Tue Jan 27, 2015 6:54 pm
Forum: General
Topic: Winbox 3 RC
Replies: 639
Views: 129392

Re: Winbox 3 RC

I have updated my packages for the convince of any Mac users out there. Winbox 3.0rc1 for Mac is freely available here (packaged with wine): http://joshaven.com/resources/tools/winbox-for-mac/ Thank you very much for including the nice little checkbox that allows the launcher to remain open when lau...
by joshaven
Sat Oct 11, 2014 12:33 am
Forum: Wireless Networking
Topic: Migrating to Nv2
Replies: 5
Views: 1325

Re: Migrating to Nv2

Just setting the wireless protocol to nv2 is enough. You can also use the nv2 pass phrase key if you want encryption.
by joshaven
Fri Oct 10, 2014 11:36 pm
Forum: Wireless Networking
Topic: Migrating to Nv2
Replies: 5
Views: 1325

Re: Migrating to Nv2

The NV2 protocol doesn't cause trouble. The trouble is that the use of another radio in the same frequency space will be noise to the other radios. Choosing NV2 or 802.11 or any other protocol will give you the same interference.
by joshaven
Thu Oct 09, 2014 7:16 pm
Forum: Wireless Networking
Topic: interface wireless vlan-id and tagged-modes
Replies: 1
Views: 2720

Re: interface wireless vlan-id and tagged-modes

I believe these features are part of the wireless-fp so you can find the docs under the CAPsMAN page... http://wiki.mikrotik.com/wiki/Manual:CAPsMAN For your convenience I grabbed some interesting info for you from the page: "vlan-id -- VLAN ID to assign to interface if vlan-mode enables use of VLAN...
by joshaven
Thu Oct 09, 2014 5:34 pm
Forum: Forwarding Protocols
Topic: multihoming and source address of outgoing icmp messages...
Replies: 20
Views: 7286

Re: multihoming and source address of outgoing icmp messages

This is a bug, not a feature. I can understand making a feature request but I don't think this is a bug. As far as I know RouterOS is functioning as designed. The router is choosing the outbound IP based on the route table because the packet is originating with the router and being sent to the dest...
by joshaven
Thu Oct 09, 2014 4:12 pm
Forum: Forwarding Protocols
Topic: multihoming and source address of outgoing icmp messages...
Replies: 20
Views: 7286

Re: multihoming and source address of outgoing icmp messages

have not seen a solution for this. Pretty annoying. I believe janisk answered this... Mark the packets and return via the same interface. Other then that, I think you would have rewrite the reply but NAT would only address IPv4 traffic... Maybe there isn't another answer for this because there isn'...
by joshaven
Thu Aug 07, 2014 9:19 pm
Forum: Scripting
Topic: host removed limiting address per mac
Replies: 7
Views: 4627

Re: host removed limiting address per mac

I am assuming that your talking about outdoor wireless. Running 802.11 in a outdoor fixed wireless environment is very problematic. (One of the main reasons is the hidden node issue: http://bit.ly/1zX8Uzi ). To get around this very problematic issue you would need to run a prosperity protocol like N...
by joshaven
Mon Jul 28, 2014 6:11 am
Forum: Wireless Networking
Topic: How do Virtual AP's Scale
Replies: 2
Views: 721

Re: How do Virtual AP's Scale

It is just one possible solution to an experimental network that I'm looking at.
by joshaven
Sun Jul 27, 2014 10:53 pm
Forum: Wireless Networking
Topic: How do Virtual AP's Scale
Replies: 2
Views: 721

How do Virtual AP's Scale

I am interested in knowing how the Virtual AP scales. For instance would an RB2011 run any differently with 4000 hidden SSID's then it does with 2 hidden SSID's? My question is not specifically about the number of SSID's but rather about how RouterOS scales with Virtual AP's. Secondarily, if anyone ...
by joshaven
Sat Jul 19, 2014 5:01 am
Forum: General
Topic: PPPoE Server Routerboard
Replies: 5
Views: 1170

Re: PPPoE Server Routerboard

The PPC chip is much better then the MIPSBE so the step from RB2011 to 1100AHx2 is an extreme one. I would only use an RB2011 for a startup tower of 10 or so clients. The 1100 could handel 100 easily.


Joshaven Potter
http://joshaven.com
Sent from my iPhone using Tapatalk
by joshaven
Fri Jul 18, 2014 3:24 pm
Forum: General
Topic: DNS Cache check is this normal?
Replies: 2
Views: 782

Re: DNS Cache check is this normal?

At first glance they look fine to me too


Joshaven Potter
http://joshaven.com
Sent from my iPhone using Tapatalk
by joshaven
Thu Jul 17, 2014 5:06 am
Forum: Beginner Basics
Topic: any help please?
Replies: 2
Views: 608

Re: any help please?

I would expect you could use simple queue and a pcc queue type to limit the speed.


Joshaven Potter
http://joshaven.com
Sent from my iPhone using Tapatalk
by joshaven
Thu Jul 17, 2014 4:58 am
Forum: General
Topic: Throughoutput using v6.15 and wireless-fp
Replies: 16
Views: 2707

Re: Throughoutput using v6.15 and wireless-fp

I would suspect that the difference will be noticed in the wireless connections. What are your modulation and CCQ on the connections?


Joshaven Potter
http://joshaven.com
Sent from my iPhone using Tapatalk
by joshaven
Thu Jul 17, 2014 4:53 am
Forum: General
Topic: OSPF and Radius behavour
Replies: 2
Views: 767

Re: OSPF and Radius behavour

DLNoah is right. I think it is also helpful to note that the source address is determined by the route that is matched to send the packet out of the router. Again, you can specify the source address of the radius request in your radius settings that also what I did. Joshaven Potter http://joshaven.c...
by joshaven
Sun Jun 15, 2014 1:29 am
Forum: Beginner Basics
Topic: Rate Limit PCQ vs Simple Queue
Replies: 9
Views: 4498

Re: Rate Limit PCQ vs Simple Queue

For simple queues... I use radius with the Mikrotik-Rate-Limit param which is handed out by freeradius. I am also pulling the user info from our billing system.

Usage info here: http://wiki.mikrotik.com/wiki/Manual:RADIUS_Client
Look for: Mikrotik-Rate-Limit
by joshaven
Sun Jun 15, 2014 1:22 am
Forum: Beginner Basics
Topic: Rate Limit PCQ vs Simple Queue
Replies: 9
Views: 4498

Re: Rate Limit PCQ vs Simple Queue

For VoIP (we run our own VoIP server) I match any traffic coming or going to our VoIP IP range. I split this traffic into VoIP management and VoIP traffic. I also match any network management traffic and UDP or TCP bandwidth tests and any traffic with an existing DSCP bit. I then use the tree queue ...
by joshaven
Fri Jun 13, 2014 11:33 pm
Forum: Beginner Basics
Topic: Rate Limit PCQ vs Simple Queue
Replies: 9
Views: 4498

Re: Rate Limit PCQ vs Simple Queue

I don't have much experience with the CCR but I expect that it will work very well for you. The PPC chip is much better then the MIPSBE so don't underestimate the 1100AHx2 based upon seeing a performance wall with the 2011. Even if the 1100 wasn't dual core and wasn't much faster per core just the c...
by joshaven
Mon Jun 09, 2014 5:52 am
Forum: General
Topic: PPPoE issues
Replies: 3
Views: 1475

Re: PPPoE issues

You don't need multicast for pppoe. I suspect that the wireless is dropping and the tunnel is dropping with it. Try a longer keep alive timeout which may give the wireless a chance to reconnect before dropping the pppoe tunnel. You may have better luck with WDS on the wireless so it is truly bridgin...
by joshaven
Sat May 31, 2014 3:31 am
Forum: Beginner Basics
Topic: Rate Limit PCQ vs Simple Queue
Replies: 9
Views: 4498

Re: Rate Limit PCQ vs Simple Queue

The router I pictured was a local router so that router only passes a bit over 40Mbps (7 day chart attached). I have an RB1100AHx2 right next to it that does distribution traffic peaking up to 300Mbps but that router isn't doing PPPoE or Simple Queues. It is however using the Queue Tree for QoS for ...
by joshaven
Thu May 29, 2014 6:59 pm
Forum: RouterBOARD hardware
Topic: Forward port and forward ip
Replies: 1
Views: 908

Re: Forward port and forward ip

Your matching more then you need to with (dst-address-type=local) and not matching the original destination address... Try: /ip firewall nat add chain=dstnat protocol=tcp dst-port=3389 dst-address=10.10.10.1 action=dst-nat to-addresses=192.168.0.10 comment="Forward RDP from 10.10.10.1 to 192.168.0.1...
by joshaven
Thu May 29, 2014 6:50 pm
Forum: General
Topic: ISP gives wrong ip address
Replies: 2
Views: 1156

Re: ISP gives wrong ip address

First I would question what is updating the no-ip.com dynamic dns service. I would suppose that it is your PC... if this is the case then the reason that the PC fixes things is actually because it is updating no-ip.com. The solution in this case would be to get something that is always on to do the ...
by joshaven
Thu May 29, 2014 6:37 pm
Forum: Beginner Basics
Topic: VLAN - No connectivity - DHCP Working
Replies: 1
Views: 626

Re: VLAN - No connectivity - DHCP Working

I'm not sure if this will be helpful but at a first look of your config the thing that stands out is the master and slave naming of you interfaces... Are you using a combination of the switch chip along with bridging? If you are try removing the switch config and use only bridging. You shouldn't nee...
by joshaven
Thu May 29, 2014 6:15 pm
Forum: Beginner Basics
Topic: mikrotik as AP and tplink as cpe
Replies: 2
Views: 1115

Re: mikrotik as AP and tplink as cpe

For short distance CPE's you should use SXT's either the 5GHz or 2.4GHz depending on the frequency you need. For longer distance you will need something with the proper gain. If your doing outdoor wireless you really need something that is using a protocol that is designed to deal with some of the c...
by joshaven
Thu May 29, 2014 6:02 pm
Forum: Beginner Basics
Topic: Rate Limit PCQ vs Simple Queue
Replies: 9
Views: 4498

Re: Rate Limit PCQ vs Simple Queue

I've had hundreds of users using simple queues on an RB1100AHx2 on both RouterOS 5.x & 6.x without any trouble. Unless your pushing the limits of your hardware then do what ever works best for you and don't worry about what is the best performance wise because you'll be spending your time splitting ...
by joshaven
Sat May 24, 2014 7:20 am
Forum: General
Topic: Load balance two ISP in seperate locations
Replies: 3
Views: 725

Re: Load balance two ISP in seperate locations

Use mangle rules to add routing marks to the packets that you want to go over each upline connection. Then have. Default route with the appropriate routing mark point to each uplink. I recommend using PCC to add routing marks by connection so that you don't end up sending traffic from one connection...
by joshaven
Mon May 19, 2014 4:22 pm
Forum: Beginner Basics
Topic: Redirect external ip to internal ip
Replies: 1
Views: 828

Re: Redirect external ip to internal ip

Use the dstnat chain and the dst-nat action


Joshaven Potter
http://joshaven.com
Sent from my iPhone using Tapatalk
by joshaven
Tue Apr 08, 2014 3:59 pm
Forum: Beginner Basics
Topic: how make normal (no proxy) internet
Replies: 3
Views: 1114

Re: how make normal (no proxy) internet

You need to setup the same things that are in the. Default config. Then change the IP address DHCP network & ip pool. Check your ip firewall NAT rule and ensure it is matching your interface and not the 192.168.88.0/24 network.


Joshaven Potter
http://joshaven.com
Sent from my iPhone using Tapatalk
by joshaven
Sat Apr 05, 2014 7:26 pm
Forum: RouterBOARD hardware
Topic: HELP IP-FAILOVER WITH LOAD BALANCING
Replies: 12
Views: 4285

Re: HELP IP-FAILOVER WITH LOAD BALANCING

i need 4 wan folover
You should use PCC load balancing... here is a great writeup that should help:
http://mum.mikrotik.com/presentations/US12/steve.pdf
by joshaven
Wed Mar 26, 2014 8:08 pm
Forum: Wireless Networking
Topic: I have a stupid IDEA
Replies: 18
Views: 3538

Re: I have a stupid IDEA

SXT or QRT are both 2.4GHz integrated antenna products. http://routerboard.com/RBSXT2nDr2 http://routerboard.com/RBQRTG-2SHPnD You can also use a third party enclosure like: http://www.rfelements.com/en/products/enclosures/stationbox-mikro/ http://www.itelite.net/en/Katalog/24-GHz-80211-bg//MRA24012...
by joshaven
Wed Mar 26, 2014 5:43 pm
Forum: Wireless Networking
Topic: I have a stupid IDEA
Replies: 18
Views: 3538

Re: I have a stupid IDEA

Joshaven I need your advice here is my topology Site1 (all cables going in) 1 cable -> site1 -> (50m FTP awg 24) -> NSM2 (24v max:0.5a) -> ( 30m FTP awg 24) -> NSM2 (24v max:0.5a) 2 cable -> site1 -> (45m FTP awg 24) -> NSM2 (24v max:0.5a) -> ( 32m FTP awg 24) -> NSM2 (24v max:0.5a) 3 cable -> site...
by joshaven
Tue Mar 25, 2014 11:51 pm
Forum: Wireless Networking
Topic: I have a stupid IDEA
Replies: 18
Views: 3538

Re: I have a stupid IDEA

What I did was to power the line with 48 AC and use adapter on each device. the adapter is something like input:48AC to 24DC 0.5A I believe it is ok? Is it ? That will be fine as long as you sizing the wire properly. Please reference this calculator: http://www.nooutage.com/vdrop.htm At 48v I would...
by joshaven
Tue Mar 25, 2014 2:37 pm
Forum: Beginner Basics
Topic: Problem connecting mikrotik router with broadband connection
Replies: 11
Views: 6842

Re: Problem connecting mikrotik router with broadband connec

If you want to use your isp dns be sure that use-peer-dns is checked or add it manually use-peer-dns=yes in the same way as the default-route option. If you want your own/google dns then set them on the dhcp server if you have one or from webinf ip-dns/manually /ip dns set allow-remote-requests=yes...
by joshaven
Mon Mar 24, 2014 7:09 pm
Forum: Beginner Basics
Topic: Problem connecting mikrotik router with broadband connection
Replies: 11
Views: 6842

Re: Problem connecting mikrotik router with broadband connec

The issue is that you setup the PPPoE on the wireless interface then plugged the internet connection into a wired interface. Edit the PPPoE Client and change the interface to match the interface that the broadband provider is plugged into. The script you used must have been for having the PPPoE over...
by joshaven
Mon Mar 24, 2014 6:11 pm
Forum: Wireless Networking
Topic: I have a stupid IDEA
Replies: 18
Views: 3538

Re: I have a stupid IDEA

I ran some calculations (see attached) they are a little over simplified because the calculations I am using are the sum of all of the distances of the wire listed in the post... This means I am budgeting the power loss as if all of the draw was at the furthest point which is not the case. I am pret...
by joshaven
Mon Mar 24, 2014 3:38 pm
Forum: Wireless Networking
Topic: I have a stupid IDEA
Replies: 18
Views: 3538

Re: I have a stupid IDEA

Another option would be to run carrier wires along with the Ethernet cable that carried the power with larger connectors. You can get multi-amp 27v power supplies pretty easily. Then use a mikrotik Poe splitter to inject the power close to the radio.
by joshaven
Sun Mar 23, 2014 3:25 am
Forum: Scripting
Topic: How to find IP with Google automated queries
Replies: 10
Views: 5108

Re: How to find IP with Google automated queries

It sounds like your going to need a little more help then you'll generally get from the user forum. Let me know if you would like some detailed help. You can get my contact info from my website.


Joshaven Potter
http://joshaven.com
Sent from my iPhone using Tapatalk
by joshaven
Sun Mar 23, 2014 2:56 am
Forum: Forwarding Protocols
Topic: Routing filters between BGP and OSPFv3
Replies: 2
Views: 1242

Re: Routing filters between BGP and OSPFv3

Can you use iBGP to pass just the desired routes to the next router then redistribute into OSPF without an OSPF filter?


Joshaven Potter
http://joshaven.com
Sent from my iPhone using Tapatalk
by joshaven
Sun Mar 23, 2014 2:51 am
Forum: Wireless Networking
Topic: I have a stupid IDEA
Replies: 18
Views: 3538

Re: I have a stupid IDEA

You can get a multi-port passive PoE injector. Search the Internet for something like: WS-POE-8-ENC


Joshaven Potter
http://joshaven.com
Sent from my iPhone using Tapatalk
by joshaven
Sun Mar 23, 2014 2:45 am
Forum: General
Topic: 6.x on CCR [Invalid]
Replies: 20
Views: 6137

Re: 6.x useless on CCR

I would suspect a config issue. Have you tried netinstalling the newest OS to be sure you have a clean slate then applying your config not from a binary backup?


Joshaven Potter
http://joshaven.com
Sent from my iPhone using Tapatalk
by joshaven
Sun Mar 23, 2014 2:35 am
Forum: Forwarding Protocols
Topic: Howto on a redundant and secure BGP (full table) setup
Replies: 1
Views: 1200

Re: Howto on a redundant and secure BGP (full table) setup

Nice work, thanks for sharing.


Joshaven Potter
http://joshaven.com
Sent from my iPhone using Tapatalk
by joshaven
Sun Mar 23, 2014 2:28 am
Forum: Wireless Networking
Topic: Is it possible no one can help me?
Replies: 11
Views: 1970

Re: Is it possible no one can help me?

It also seems odd that your only showing two modulations do you have most of the others disabled? I would go back to the default modulations if you have them customized.


Joshaven Potter
http://joshaven.com
Sent from my iPhone using Tapatalk
by joshaven
Sun Mar 23, 2014 2:25 am
Forum: Wireless Networking
Topic: Is it possible no one can help me?
Replies: 11
Views: 1970

Re: Is it possible no one can help me?

The rx CCQ being so low means that much of the information your radio is receiving is not usable. I would suspect an antenna issue or some reflection issues. Do you have something large near by that the signal could be reflecting off of? I don't think its interference because your signal to noise le...
by joshaven
Sun Mar 23, 2014 2:13 am
Forum: Beginner Basics
Topic: how to merge 4 internet connections on RB951Ui-2HnD
Replies: 3
Views: 1525

how to merge 4 internet connections on RB951Ui-2HnD

PCC load balancing is described on the wiki:
http://wiki.mikrotik.com/wiki/Manual:PCC

Joshaven Potter
http://joshaven.com
Sent from my iPhone using Tapatalk
by joshaven
Sun Mar 23, 2014 2:10 am
Forum: RouterBOARD hardware
Topic: HELP IP-FAILOVER WITH LOAD BALANCING
Replies: 12
Views: 4285

HELP IP-FAILOVER WITH LOAD BALANCING

You must increase you max UDP packet size. I recommend 4096. You will have truncated answers with 512. Also you will end up with DNS amplification attacks against your router if you have an open DNS. Either block UDP 53 from wan or limit it. Connections are unidirectional so you don't need to match ...
by joshaven
Sun Mar 23, 2014 1:55 am
Forum: General
Topic: cpu 100% hotspot with 190 users
Replies: 4
Views: 922

Re: cpu 100% hotspot with 190 users

I would get a dual core router that is PPC, tile, or x86. Get the best hardware that you have a budget for.


Joshaven Potter
http://joshaven.com
Sent from my iPhone using Tapatalk
by joshaven
Sun Mar 23, 2014 1:50 am
Forum: Wireless Networking
Topic: MTCWE
Replies: 24
Views: 5875

Re: MTCWE

In case you haven't read them yet, MikroTik publishes test content outlines: http://www.mikrotik.com/training/


Joshaven Potter
http://joshaven.com
Sent from my iPhone using Tapatalk
by joshaven
Tue Mar 18, 2014 3:11 pm
Forum: General
Topic: multi WAN NAT for different LANs
Replies: 5
Views: 1939

Re: multi WAN NAT for different LANs

A vlan would give you layer 2 seporation but it wouldn't help you sort traffic between upline providers. The bottom like is that you need a default route with a routing mark then you need to add a routing mark to all traffic that you want to use that route through a mangle rule. You could choose the...
by joshaven
Mon Mar 17, 2014 4:21 am
Forum: The Dude
Topic: What is the ideal hardware/software Dude setup?
Replies: 5
Views: 4958

Re: What is the ideal hardware/software Dude setup?

I have had great luck running the dude 4 beta on windows server 2003 and Windows XP. I would expect it to run well on 7 as well. I almost always run the dude on virtual servers either vmware esxi in a production environment or when just using my computer it's on parallels because I'm a Mac user. I h...
by joshaven
Mon Mar 17, 2014 4:10 am
Forum: Wireless Networking
Topic: Antena A ( wireless client) Antena B ( hotspot ) ?
Replies: 23
Views: 5357

Antena A ( wireless client) Antena B ( hotspot ) ?

Yes if you setup rx and tx on both chains you could attach each chain to its own antenna and point them in different directions. For example an omni for the hotspot and a directional outdoor antenna for a client. All connections would come into the same WLAN network card so you may want to setup byp...
by joshaven
Mon Mar 17, 2014 4:00 am
Forum: Wireless Networking
Topic: Wireless disappear
Replies: 1
Views: 627

Re: Wireless disappear

It sounds to me like you have some form of config bug going on. I would either reset to factory settings and reconfigure it or do a netinstall and reconfigure it. I would not use a binary backup but you could shortcut the reconfiguration by using: /export file=backupFromExport The netinstall is bett...
by joshaven
Mon Mar 17, 2014 3:54 am
Forum: Beginner Basics
Topic: Port mapping with WebFig 5.25
Replies: 2
Views: 1133

Re: Port mapping with WebFig 5.25

You should specify a source address of your public ip or an in interface because your dear-NAT rule would match more traffic then you would expect.


Joshaven Potter
http://joshaven.com
Sent from my iPhone using Tapatalk
by joshaven
Mon Mar 17, 2014 3:47 am
Forum: Scripting
Topic: host removed limiting address per mac
Replies: 7
Views: 4627

Re: host removed limiting address per mac

If your using encryption then make sure your not using WPA with tkip. UBNT has issues with tkip which could be the cause. If this is the case then simply changing to WPA AES should solve your issue.


Joshaven Potter
http://joshaven.com
Sent from my iPhone using Tapatalk
by joshaven
Mon Mar 17, 2014 3:38 am
Forum: General
Topic: multi WAN NAT for different LANs
Replies: 5
Views: 1939

Re: multi WAN NAT for different LANs

Another approach that you may want to consider is PCC load balancing. This would match each connection with a different WAN rather then breaking it up by internal subnets. You can probably achieve a more even distribution of traffic this way. This is however assuming you don't need to associate spec...
by joshaven
Fri Mar 14, 2014 11:29 pm
Forum: Wireless Networking
Topic: Some questions regarding a WISP setup.
Replies: 26
Views: 7048

Re: Some questions regarding a WISP setup.

What are the EIRP limits for pmp links on each frequency band?
by joshaven
Fri Mar 14, 2014 8:09 pm
Forum: Wireless Networking
Topic: Some questions regarding a WISP setup.
Replies: 26
Views: 7048

Re: Some questions regarding a WISP setup.

If I use a dual chain MIMO AP. Then simply disable the chain0 on half CPEs and chain1 on other half CPEs, will I be able to reach 80-100 CPEs per AP? CPEs will be SXT lite5. AP will be RB912. The AP only talks to one client at a time so disabling a chain will only slow down the communications which...
by joshaven
Fri Mar 14, 2014 6:45 pm
Forum: Beginner Basics
Topic: Mark the connection problem?
Replies: 5
Views: 988

Re: Mark the connection problem?

I have three lines, second-and third-line did a pcc, do pcc always remaining after the relevant part of the default route line to go up, not even made ​​a packet to flow straight down the plant, we should get these flows where to go. I don't understand what your trying to communicate. Pasting a con...
by joshaven
Fri Mar 14, 2014 5:08 pm
Forum: Beginner Basics
Topic: Mark the connection problem?
Replies: 5
Views: 988

Re: Mark the connection problem?

I would suppose that is traffic that is not part of the connection but rather "related" traffic. Difficult to understand. Per the documentation, the connection states are: established - a packet which belongs to an existing connection invalid - a packet which could not be identified for some reason...
by joshaven
Fri Mar 14, 2014 4:41 am
Forum: Scripting
Topic: Auto Updated blacklists from Spamhaus, OpenBL & DShield
Replies: 16
Views: 4843

Re: Auto Updated blacklists from Spamhaus, OpenBL & DShield

If you don't trust my server as a source then you can run the script on your own server. I provided the info for that already.
by joshaven
Fri Mar 14, 2014 12:53 am
Forum: Scripting
Topic: Auto Updated blacklists from Spamhaus, OpenBL & DShield
Replies: 16
Views: 4843

Re: Auto Updated blacklists from Spamhaus, OpenBL & DShield

Why do that outside RouterOS? The Scripting has more power to do that better!!! Reasons to not do it with RouterOS: 1) To not overload the sources with thousands of request for thousands of routers that may be requesting the files. 2) Because I have yet to see an example of parsing the source text ...
by joshaven
Fri Mar 14, 2014 12:33 am
Forum: Scripting
Topic: Auto Updated blacklists from Spamhaus, OpenBL & DShield
Replies: 16
Views: 4843

Re: Auto Updated blacklists from Spamhaus, OpenBL & DShield

You could do this all in perl. Run it on the web server and let the routerboard hit the script and download the file. I may have some time if anyone would be interested. Sent from my SCH-I545 using Tapatalk This could be easily done on demand but one of the reasons I am using a script run with cron...
by joshaven
Fri Mar 14, 2014 12:17 am
Forum: Scripting
Topic: Auto Updated blacklists from Spamhaus, OpenBL & DShield
Replies: 16
Views: 4843

Re: Auto Updated blacklists from Spamhaus, OpenBL & DShield

So do you scheduled this EXE to run on a regular basis and put the text files on a web accessible server to download into your routers on a regular basis? One of the main reasons I wrote the scripts that I did was to have my address lists self maintaining.
by joshaven
Thu Mar 13, 2014 10:29 pm
Forum: General
Topic: bandwidth test - lost packets during receive but not send
Replies: 2
Views: 2284

Re: bandwidth test - lost packets during receive but not sen

It is normal to get packet loss with UDP bandwidth on Rx tests because of the way the test works. The remote end is getting packet loss on the Tx testing but it is not being reported to you with the tool... I would wager that testing from the remote end will show you the same results. If your having...
by joshaven
Thu Mar 13, 2014 10:12 pm
Forum: Wireless Networking
Topic: Slow performance of OSPF/MPLS network
Replies: 7
Views: 3045

Re: Slow performance of OSPF/MPLS network

Your going to be a lot better of with NV2 then 802.11. It will help fix some rate flapping issues that your bound to see with 802.11 (rate flapping meaning the modulation changing up and down which will cause high veneration in latency and decrease your CCQ). Also your signal levels are not great bu...
by joshaven
Thu Mar 13, 2014 9:32 pm
Forum: Beginner Basics
Topic: Mikrotik router with broadband connection
Replies: 2
Views: 2665

Re: Mikrotik router with broadband connection

Yes the MikroTik is a very good solution for broadband internet. You can even connect both your leased line and your broadband connection the mikrotik at the same time and split the traffic however you want to. The MikroTik is extremely flexible however it is also very easy to configure incorrectly....
by joshaven
Thu Mar 13, 2014 8:40 pm
Forum: Scripting
Topic: Auto Updated blacklists from Spamhaus, OpenBL & DShield
Replies: 16
Views: 4843

Re: Auto Updated blacklists from Spamhaus, OpenBL & DShield

This is a nice solution.
How are you parsing the source text files into RouterOS add statements?
You posted additions (without a script) then you posted script statements that will remove in a loop.
by joshaven
Thu Mar 13, 2014 7:59 pm
Forum: Wireless Networking
Topic: Some questions regarding a WISP setup.
Replies: 26
Views: 7048

Re: Some questions regarding a WISP setup.

The graphs say it all, 29 clients of which 10 clients are on 1500K, the question I would ask is how long before they have to be moved to higher bandwidth package for no extra turnover? I have seen AP bandwidth increase just because customers demand a minimum speed at peak usage hours and then as th...
by joshaven
Thu Mar 13, 2014 6:28 pm
Forum: Wireless Networking
Topic: Some questions regarding a WISP setup.
Replies: 26
Views: 7048

Re: Some questions regarding a WISP setup.

Attached is a listing of a tower showing the bandwidth speeds provisioned and a three day usage graph covering these customers... Make your own judgements about bandwidth overselling. As you can see 131Mbps has been provisioned on this tower... if the 12x multiplier is correct then we would need to ...
by joshaven
Thu Mar 13, 2014 5:40 pm
Forum: Scripting
Topic: Auto Updated blacklists from Spamhaus, OpenBL & DShield
Replies: 16
Views: 4843

Auto Updated blacklists from Spamhaus, OpenBL & DShield

In case anyone is interested in scheduling updated blacklists based on maintained lists I have a writeup written a detailed howto: http://joshaven.com/resources/tricks/mikrotik-automatically-updated-address-list/ It consists of a script to download, remove the old entries & add the new ones for any ...
by joshaven
Thu Mar 13, 2014 5:09 pm
Forum: General
Topic: Best Practise VLAN configuration
Replies: 6
Views: 1317

Re: Best Practise VLAN configuration

I generally add VLANs to interfaces then add the vlan interfaces to bridges. For instance I would create a bridge called VLAN5 then create a VLAN interface called e6v5 which would be ether6 vlan 5.... then add e6v5 to the VLAN5 bridge... I would continue this process until I have all of the VLANs pr...
by joshaven
Wed Mar 12, 2014 3:21 pm
Forum: Beginner Basics
Topic: PPTP VPN Problem
Replies: 5
Views: 1254

Re: PPTP VPN Problem

I would guess that your issue is with routing. Check the route tables on the computers to be sure that they are routing the traffic through the VPN.


Sent from my iPhone using Tapatalk
by joshaven
Wed Mar 12, 2014 3:17 pm
Forum: General
Topic: Belgium WISP / EIRP limitations
Replies: 15
Views: 3205

Re: Belgium WISP / EIRP limitations

Radio Mobile will give you propagation maps showing how far your signal will reach in your environment with your settings. You will need 30db of signal above your noise floor for full modulation you will also need to know your radios sensitivity.


Sent from my iPhone using Tapatalk
by joshaven
Wed Mar 12, 2014 3:03 pm
Forum: General
Topic: Strnge DNS Cache entries from China
Replies: 5
Views: 1368

Re: Strnge DNS Cache entries from China

I would say it is likely that your DNS has been being used in DNS amplification attacks. See this link for more info: https://www.us-cert.gov/ncas/alerts/TA13-088A


Sent from my iPhone using Tapatalk
by joshaven
Wed Mar 12, 2014 5:38 am
Forum: RouterBOARD hardware
Topic: Operating temperature wireless devices
Replies: 1
Views: 730

Re: Operating temperature wireless devices

The max CPU temperature should be listed on the product page however it's probably 60C like most of the mikrotik equipment.
by joshaven
Wed Mar 12, 2014 5:31 am
Forum: General
Topic: Product Recommendation and Guideline
Replies: 1
Views: 480

Re: Product Recommendation and Guideline

You can get your answers from some freeware software called Radio Mobile. The learning curve is a bit steep so let me know if you would like me to get you some propagation maps. It is possible to use an SXT at 10km but I suspect that you would be better off with an external high gain antenna at this...
by joshaven
Wed Mar 12, 2014 5:15 am
Forum: General
Topic: VLAN-based QoS on RouterOS
Replies: 1
Views: 1065

Re: VLAN-based QoS on RouterOS

You are not providing enough information. QOS isn't something you just turn on and if it is on some devise then it is probably just prioritizing based upon Class of service. Any traffic that is outside of your network probably has had the DSCP bits changed because it is common practice to distrust a...
by joshaven
Wed Mar 12, 2014 5:00 am
Forum: Beginner Basics
Topic: Mark the connection problem?
Replies: 5
Views: 988

Re: Mark the connection problem?

I would suppose that is traffic that is not part of the connection but rather "related" traffic.
by joshaven
Wed Mar 12, 2014 3:54 am
Forum: Beginner Basics
Topic: Routing traffic coming from websites
Replies: 1
Views: 552

Re: Routing traffic coming from websites

This can be done with a layer 7 match. However you may want to use virtual hosts or a reverse proxy like haproxy.
by joshaven
Wed Mar 12, 2014 3:51 am
Forum: General
Topic: Best Practise VLAN configuration
Replies: 6
Views: 1317

Re: Best Practise VLAN configuration

This config sounds very confusing. Is your goal to bridge all of the vlans together?
by joshaven
Wed Mar 12, 2014 3:42 am
Forum: Beginner Basics
Topic: ros mark connectivity issues?
Replies: 1
Views: 533

Re: ros mark connectivity issues?

This post doesn't make since. I am guessing its a translation issue please ask the question again.
by joshaven
Tue Mar 11, 2014 6:02 pm
Forum: Wireless Networking
Topic: Some questions regarding a WISP setup.
Replies: 26
Views: 7048

Re: Some questions regarding a WISP setup.

One major caution I have for you is that your talking about customer installs. Customers will not know enough about the interface to login and get signal levels nor will they know that a -50 is a better receive signal then -80. The problem is that you'll end up with lower signal levels then if you h...
by joshaven
Tue Mar 11, 2014 3:32 am
Forum: General
Topic: Some issues with my CCR1036-8G-2S+ and RouterOS
Replies: 10
Views: 1600

Re: Some issues with my CCR1036-8G-2S+ and RouterOS

Sorry but I'm out of ideas here without looking at it myself. I hope you get something from file submissions.
by joshaven
Tue Mar 11, 2014 12:51 am
Forum: Wireless Networking
Topic: Some questions regarding a WISP setup.
Replies: 26
Views: 7048

Re: Some questions regarding a WISP setup.

Well, I am not able to convince my self to simply use WPA2 since the key will be easily know by a customer and than an attacker can listen to all unencrypted web traffic. Why would I even bother with encryption and take the performance overhead if it is not secure. Might as well leave the network o...
by joshaven
Mon Mar 10, 2014 9:16 pm
Forum: Wireless Networking
Topic: Some questions regarding a WISP setup.
Replies: 26
Views: 7048

Re: Some questions regarding a WISP setup.

I am not sure I fully understand your situation... however I think it is entirely reasonable to use standard WPA or WPA2 for a connection between customers and your infrastructure equipment. You don't have an obligation to secure the wireless data. The only party that can truly be responsible for th...
by joshaven
Mon Mar 10, 2014 6:01 pm
Forum: General
Topic: Some issues with my CCR1036-8G-2S+ and RouterOS
Replies: 10
Views: 1600

Re: Some issues with my CCR1036-8G-2S+ and RouterOS

Have you tried nexthop-choice=propagate which will: "try to propagate further the nexthop received; i.e. if the route has BGP NEXT_HOP attribute, then use it as the nexthop, otherwise fall back to the default case"? "set-in-nexthop (IP address;) set gateway value to the specific IP address[es]. Vali...
by joshaven
Sun Mar 09, 2014 8:24 pm
Forum: Wireless Networking
Topic: RB2011 - big latency
Replies: 2
Views: 1478

Re: RB2011 - big latency

If you have clients with pore modulations connected then that could explain your latency. What is the condition of each wireless client when your having latency? You could confirm that you have both chains enabled for send and receive as well as using B/G/N. If you wanted you could disable the lower...
by joshaven
Sun Mar 09, 2014 8:15 pm
Forum: General
Topic: Some issues with my CCR1036-8G-2S+ and RouterOS
Replies: 10
Views: 1600

Re: Some issues with my CCR1036-8G-2S+ and RouterOS

If synchronize=yes or default-originate=if-installed is used, the attributes of the announced route will be taken from routing table.

Hope this helps. Otherwise it may be helpful if you post configuration snippets.
by joshaven
Sat Mar 08, 2014 6:15 pm
Forum: Wireless Networking
Topic: 5.4kms point to point link
Replies: 4
Views: 1127

Re: 5.4kms point to point link

Remember: Radio mobile do not observe buildings.
Radio mobile has buildings under their land cover data. It is displayed on the map in light blue by default. I'm not saying that the simulations are perfect but I have found them very helpful.

Land Cover info:
http://www.g3tvu.co.uk/Land_cover.htm
by joshaven
Fri Mar 07, 2014 11:09 pm
Forum: General
Topic: Limiting throughput on just P2P?
Replies: 7
Views: 2641

Re: Limiting throughput on just P2P?

I would be surprised if BGP is doing that to you unless your dropping and re-establishing the full routing table. I am supposing that your checking the log & interface stats to see if your having interface issues. Check the status tab under the BGP peer. I have received just under 6 million updates ...
by joshaven
Fri Mar 07, 2014 10:30 pm
Forum: General
Topic: Limiting throughput on just P2P?
Replies: 7
Views: 2641

Re: Limiting throughput on just P2P?

This was my only queue on the edge router. We do have speed queues on the local routers that are simple queues as well but they match on the interface (we are using PPPoE). If you going to try running this on the same router that your using to limit speed to customers then your going to need to doub...
by joshaven
Fri Mar 07, 2014 10:25 pm
Forum: Wireless Networking
Topic: Some questions regarding a WISP setup.
Replies: 26
Views: 7048

Re: Some questions regarding a WISP setup.

Email me if you are interested in having a phone conversation regarding these questions. I can help you with a lot of areas including creating RF propagation simulations that will show you your approximate coverage area with the various configurations and hardware that you are considering. josh (at)...
by joshaven
Fri Mar 07, 2014 10:09 pm
Forum: Beginner Basics
Topic: RB750GL RouterOS vs OpenWRT
Replies: 4
Views: 2206

Re: RB750GL RouterOS vs OpenWRT

My vote is strongly in favor of RouterOS over OpenWRT and I have run both.
by joshaven
Fri Mar 07, 2014 10:07 pm
Forum: General
Topic: Limiting throughput on just P2P?
Replies: 7
Views: 2641

Re: Limiting throughput on just P2P?

Wow, that is embarrassing... I hope I didn't mess you up and cause you to limit your entire network to those slow speeds... Your absolutely right, calling it P2P is not enough to match P2P traffic. I copied this from a disabled rule that was working before the RouterOS version 6 upgrade... The simpl...
by joshaven
Fri Mar 07, 2014 9:41 pm
Forum: RouterBOARD hardware
Topic: Router RB2011UAS-2HnD Concurrent users
Replies: 2
Views: 2110

Re: Router RB2011UAS-2HnD Concurrent users

I cannot fully answer your question because I have never run a setup that is similar to your request however I can say that your limitation will be in hardware capability, if your running a high number of user and your resources are only moderately consumed then your fine. I don't recommend running ...
by joshaven
Fri Mar 07, 2014 9:30 pm
Forum: General
Topic: How to mangle a continuous uploading traffic to https server
Replies: 1
Views: 956

Re: How to mangle a continuous uploading traffic to https se

I think it can not be done exactly as you are specifying. I don't know how you would average a speed per second over 2 minutes. Without the 2 minute requirement you could mark the connections meeting your other criteria like this: /ip firewall mangle add chain=postrouting protocol=tcp dst-port=443 o...
by joshaven
Fri Mar 07, 2014 9:16 pm
Forum: General
Topic: Fiber optic PtP link
Replies: 4
Views: 1401

Re: Fiber optic PtP link

It should be possible. I would expect that one of these would work depending on if your using single-mode or multi-mode:
http://routerboard.com/S-85DLC05D or http://routerboard.com/S-31DLC20D

These would work well in either a MikroTik router or switch
by joshaven
Fri Mar 07, 2014 9:08 pm
Forum: General
Topic: Limiting throughput on just P2P?
Replies: 7
Views: 2641

Re: Limiting throughput on just P2P?

Below is how you could create a PCQ for equal access along with limits. This limits P2P tgo 768k download & 64k upload for the entire network and allows 128k/64k for each user. You'll probably want to adjust the target interface along with the speeds to better fit your use case. This is a very heavy...
by joshaven
Thu Mar 06, 2014 10:20 pm
Forum: Wireless Networking
Topic: 5.4kms point to point link
Replies: 4
Views: 1127

Re: 5.4kms point to point link

I could do a link path analysis with various configurations using the radio mobile software (http://www.ve2dbe.com/index.html) which would give you a fairly accurate estimate of the signal quality of the link. Otherwise I recommend getting as close as you can with this tool http://www.ubnt.com/airli...
by joshaven
Thu Mar 06, 2014 10:01 pm
Forum: General
Topic: IP address priority script, how to do?
Replies: 1
Views: 659

Re: IP address priority script, how to do?

I really don't know the circumstances of your issue but you probably could crate a packet mark and a couple of HTB queues to accomplish this. Note: I just typed this out and have not tested the config so if your having issues then check the commands out because they may have typo's or such. This app...
by joshaven
Tue Mar 04, 2014 7:15 am
Forum: Beginner Basics
Topic: how to set bandwidth per user
Replies: 1
Views: 469

Re: how to set bandwidth per user

by joshaven
Tue Mar 04, 2014 7:13 am
Forum: General
Topic: 2 PPPoE clients + 2 NAT on one private
Replies: 1
Views: 602

Re: 2 PPPoE clients + 2 NAT on one private

In your prerouting chain of the mangle add a connection mark based on the source address then add a routing mark to every packet that has that connection mark. Then add a default route that matches each routing mark for each uplink.
by joshaven
Thu Feb 20, 2014 5:54 pm
Forum: General
Topic: Exchange behind the Routerboard: queue is full
Replies: 18
Views: 6100

Re: Exchange behind the Routerboard: queue is full

routeros dns server does not only reply mx records when asked for this type. it also puts all other types like a or ns in the response. exchange server gets confused with this. there is a setting in the outgoing tranport to use external dns server. this will solve the problem but dont ask me why. C...
by joshaven
Thu Oct 10, 2013 7:18 pm
Forum: Wireless Networking
Topic: Vlan tagging in Point to Point with SXT Lite 5
Replies: 17
Views: 7911

Re: Vlan tagging in Point to Point with SXT Lite 5

In the Ubiquiti ones you can specify the "Management VLAN: Enable" then in the "VLAN ID:" box enter a number. VLAN management is also very easily accomplished on the MikroTik but the need is much more complicated then VLAN management as I understand the problem. The remote Site B needs to add VLAN ...
by joshaven
Wed Oct 09, 2013 2:13 pm
Forum: Wireless Networking
Topic: Vlan tagging in Point to Point with SXT Lite 5
Replies: 17
Views: 7911

Re: Vlan tagging in Point to Point with SXT Lite 5

What is the one click in ubiquity?
by joshaven
Tue Oct 08, 2013 6:44 pm
Forum: Wireless Networking
Topic: Vlan tagging in Point to Point with SXT Lite 5
Replies: 17
Views: 7911

Re: Vlan tagging in Point to Point with SXT Lite 5

Thanks for the response. Will give it a try. Its complicated as compared to other products. This scenario can be easily achieved in other products like ubiquity's Nano Bridge, Airgrid etc. Just we have to create point to point link and tag the traffic with desired vlan. Will update on this. By the ...
by joshaven
Tue Oct 08, 2013 6:31 pm
Forum: Wireless Networking
Topic: Vlan tagging in Point to Point with SXT Lite 5
Replies: 17
Views: 7911

Re: Vlan tagging in Point to Point with SXT Lite 5

The complication is not due to the network design that I am proposing given my understand of your need not the product. The complication is that you cannot both keep tagged traffic together with untagged and keep them separate at the same time. If you need both layer 2 networks on the same back-haul...
by joshaven
Tue Oct 08, 2013 5:50 pm
Forum: Wireless Networking
Topic: Vlan tagging in Point to Point with SXT Lite 5
Replies: 17
Views: 7911

Re: Vlan tagging in Point to Point with SXT Lite 5

OK... I think I have a solution. The Untagged Network The SXT at site B should have the management IP on the "bridge1" interface which should have WLAN1 as the only port memeber. WDS should be using bridge1 as the default bridge. This means that there is no access from SiteB to the management networ...
by joshaven
Fri Oct 04, 2013 7:19 pm
Forum: Wireless Networking
Topic: Vlan tagging in Point to Point with SXT Lite 5
Replies: 17
Views: 7911

Re: Vlan tagging in Point to Point with SXT Lite 5

Will any traffic go over the SXT connections that is on any other VLAN?
by joshaven
Fri Oct 04, 2013 1:40 am
Forum: Wireless Networking
Topic: Vlan tagging in Point to Point with SXT Lite 5
Replies: 17
Views: 7911

Re: Vlan tagging in Point to Point with SXT Lite 5

Adding a single VLAN interface on each would not do what your wanting. If you wanted to fully bridge VLAN 300 across you would need to add a VLAN 300 to both ethernet interfaces and to both wireless interfaces and add all four vlan interfaces to a bridge. I suspect that you just want to recieve VLAN...
by joshaven
Thu Oct 03, 2013 11:55 pm
Forum: Wireless Networking
Topic: connectivity problems while selecting data-rate
Replies: 3
Views: 1122

Re: connectivity problems while selecting data-rate

Rate flapping can be in issue but I haven't found it to be a problem with recent releases of RouterOS. For fixed outdoor installations we run NV2 and have found the rates to be very stable and we do not limit the rate selections at all. For standard in-home we use 802.11n and also don't limit modula...
by joshaven
Thu Oct 03, 2013 7:03 pm
Forum: Wireless Networking
Topic: connectivity problems while selecting data-rate
Replies: 3
Views: 1122

Re: connectivity problems while selecting data-rate

The wireless data-rate is not a good way to control speed in your network. If you want to limit the speed of one or more of the wireless devices then you would be much better off using queues. Communication at lower data rates means slower communication but it doesn't use fewer resources, in fact it...
by joshaven
Thu Oct 03, 2013 6:02 pm
Forum: Wireless Networking
Topic: Vlan tagging in Point to Point with SXT Lite 5
Replies: 17
Views: 7911

Re: Vlan tagging in Point to Point with SXT Lite 5

You need to add a VLAN interface to the bridge in the router. If you want to bridge VLAN 300 all the way across then you'll have to have a VLAN 300 interface on each physical interface that the traffic will be crossing... in that case you will want a "VLANBridge" which has members like: "E1-V300" & ...
by joshaven
Mon Sep 16, 2013 11:52 pm
Forum: Beginner Basics
Topic: Vlan setup question
Replies: 27
Views: 12755

Re: Vlan setup question

Yes the MikroTik switch will allow you to use VLAN's at the switch. However I personally don't use VLAN's in my home even though all of the equipment I am using is VLAN capable and I run a business in my pole barn off the same network. I cannot think of any reason to use VLANS in a small network.
by joshaven
Fri Aug 23, 2013 5:04 am
Forum: Beginner Basics
Topic: help... 3 days with no sleep already!!!
Replies: 5
Views: 1296

Re: help... 3 days with no sleep already!!!

Are you doing NAT for all addresses at the edge router?
by joshaven
Tue Aug 20, 2013 12:09 am
Forum: General
Topic: Load balancing with one wan dhcp? Possible?
Replies: 6
Views: 2331

Re: Load balancing with one wan dhcp? Possible?

Here are the basic steps: Match your inbound traffic in the prerouting chain that doesn't have a connection mark based upon the source address and add a connection mark. This makes it so that you will properly return something that originated from the outside world ( If this ever even happens ). Thi...
by joshaven
Mon Aug 19, 2013 4:58 pm
Forum: Wireless Networking
Topic: Point to Point link required bandwidth 25Mbps
Replies: 5
Views: 1596

Re: Point to Point link required bandwidth 25Mbps

Sorry, I wasn't familiar with the notation you used for the locations. I assumed you were using Decimal notation (16.35433) rather then Degrees Minutes and Seconds (16º 35" 43.3'). Here are the adjusted path's. As long as the paths are as clear as they look you should be fine. I am not seeing much v...
by joshaven
Sun Aug 18, 2013 5:39 am
Forum: General
Topic: Load balancing with one wan dhcp? Possible?
Replies: 6
Views: 2331

Re: Load balancing with one wan dhcp? Possible?

You don't have to specify a public ip to use PCC.
by joshaven
Fri Aug 16, 2013 4:05 am
Forum: Forwarding Protocols
Topic: CCR BGP Full Route Problem
Replies: 7
Views: 2895

Re: CCR BGP Full Route Problem

Are your advertisements being received properly by your upline?
by joshaven
Fri Aug 16, 2013 4:03 am
Forum: General
Topic: Load balancing with one wan dhcp? Possible?
Replies: 6
Views: 2331

Re: The best way to load balance with one wan ip assigned(dh

Use PCC and assign more connections to the larger connection. http://wiki.mikrotik.com/wiki/Manual:PCC With PCC split into 4 streams and set the first 3 streams to have the same connection mark and the last to have a different mark. This will split 1.5:6 you can get fancier with the split but I'm no...
by joshaven
Wed Aug 14, 2013 4:51 pm
Forum: Wireless Networking
Topic: Point to Point link required bandwidth 25Mbps
Replies: 5
Views: 1596

Re: Point to Point link required bandwidth 25Mbps

This link should work with the following hardware: RB912UAG-5HPnD-OUT http://routerboard.com/RB912UAG-5HPnD-OUT 30DBi ARC-DA5830SD1 http://www.antennas.com/dish-antennas-2/dual-pol-dish-antennas/ RPSMA-NM-240-36 http://www.ispsupplies.com/categories/Our-Picks/RPSMA-NM-L240-36.html All of the above h...
by joshaven
Wed Aug 14, 2013 3:59 pm
Forum: General
Topic: Cuestion about PPPoE server
Replies: 4
Views: 572

Re: Cuestion about PPPoE server

Yes in the same segment. As I understand the PPPoE service will pick up the requests somewhat evenly. Unlike DHCP you can have multiple PPPoE servers on one Layer 2 network. I have not ever had a need to do this so I don't have experience with it but I have read quite a bit on MikroTik and PPPoE and...
by joshaven
Wed Aug 14, 2013 3:40 pm
Forum: Forwarding Protocols
Topic: multihoming and source address of outgoing icmp messages...
Replies: 20
Views: 7286

Re: multihoming and source address of outgoing icmp messages

I would think that the natural IP to respond would be the IP that received the request. The job of NAT is to change source IP's. Therefore it doesn't sound like a hack to me. It sounds strange to me that Cisco would receive info on one IP and respond from another. Are you sure that Cisco isn't rewri...
by joshaven
Wed Aug 14, 2013 4:48 am
Forum: General
Topic: Site to Site VPN - Name Resolution issue
Replies: 1
Views: 638

Re: Site to Site VPN - Name Resolution issue

Is the remote mikrotik using an external DNS? I wonder if it is sometes being queried and not answering as desired.
by joshaven
Wed Aug 14, 2013 4:34 am
Forum: Forwarding Protocols
Topic: multihoming and source address of outgoing icmp messages...
Replies: 20
Views: 7286

Re: multihoming and source address of outgoing icmp messages

You can use src NAT on ICMP to change the originating ip. You'll probably want to match the src addresses on the rule so as to not to match ICMP passing through the router.
by joshaven
Wed Aug 14, 2013 4:29 am
Forum: Beginner Basics
Topic: Proxy - Access Lists by username
Replies: 1
Views: 469

Re: Proxy - Access Lists by username

You need to read up on hotspot.
by joshaven
Wed Aug 14, 2013 4:27 am
Forum: Wireless Networking
Topic: Point to Point link required bandwidth 25Mbps
Replies: 5
Views: 1596

Re: Point to Point link required bandwidth 25Mbps

I am willing to do some path analysis for you if you like. However for a 20km I would recommend a 2' or 3' dish and an rb911 radio board and a good enclosure. If you would like more info on the hardware I can send that as well. If the path is good then you can easily get over 50Mbps. What country ar...
by joshaven
Wed Aug 14, 2013 4:17 am
Forum: General
Topic: HALP! Mangle
Replies: 3
Views: 846

Re: HALP! Mangle

That looks like it should work to me. My guess is that the issue is in the routing table. Can you post the touting table?
by joshaven
Wed Aug 14, 2013 4:11 am
Forum: RouterBOARD hardware
Topic: RB951Ui-2HnD POE
Replies: 7
Views: 3745

Re: RB951Ui-2HnD POE

Have you verified that pins 4&5 are - an 8&9 are +24VDC after your power cross over?
by joshaven
Tue Aug 13, 2013 10:48 pm
Forum: General
Topic: FTP connection problem from load-balancing
Replies: 11
Views: 3746

Re: FTP connection problem from load-balancing

PCC will help you load balance both the upload and download on any TCP traffic that you initiate. The only way you can load balance incoming requests is to somehow load balance the IP address that the remote end is going to use to initiate the connection. If the remote end uses your IP from ISP A th...
by joshaven
Tue Aug 13, 2013 10:29 pm
Forum: General
Topic: Router getting NAT somehow confused
Replies: 11
Views: 1914

Re: Router getting NAT somehow confused

The traffic will be returning to the same IP that it is sourced from so I expect that it is not flowing out the better connection. I don't know enough about your traffic to tell you the best way. Here is something that should work for you but I am making a bunch of assumptions: * Create an address l...
by joshaven
Tue Aug 13, 2013 6:18 pm
Forum: General
Topic: Cuestion about PPPoE server
Replies: 4
Views: 572

Re: Cuestion about PPPoE server

By PPP I am amusing you are referring to PPPoE not PPTP VPN. An RB1100-AHx2 ( Dual 1GHz PPC Chip ) can handle 300 easily but I suspect it cannot exceed 1000 PPPoE Terminations. I've not tried but I would expect the CCR to handle 3000 connections. We terminate PPPoE at each location so as to spread t...
by joshaven
Tue Aug 13, 2013 5:49 pm
Forum: General
Topic: Router getting NAT somehow confused
Replies: 11
Views: 1914

Re: Router getting NAT somehow confused

No marking, no nothing, the router is pretty much "out-the-box", with just that one additional route in the IP > Routes section. The uplink chosen will be choose via the routing function. The miens of communication between the firewalling functions which are identifying the traffic and the routing ...
by joshaven
Tue Aug 13, 2013 5:35 pm
Forum: General
Topic: Router getting NAT somehow confused
Replies: 11
Views: 1914

Re: Router getting NAT somehow confused

If your sure your traffic is going through the proper connection then you can try disabling the SIP helper:
/ip firewall service-port disable sip
by joshaven
Tue Aug 13, 2013 5:32 pm
Forum: General
Topic: Router getting NAT somehow confused
Replies: 11
Views: 1914

Re: Router getting NAT somehow confused

How are you identifying and marking your VoIP traffic? I wonder if you aren't getting some of the VoIP traffic over each link. We identify VoIP traffic based upon either the source or destination being our VoIP server subnet. However if I didn't control the VoIP server subnet then I would probably b...
by joshaven
Tue Aug 13, 2013 5:19 pm
Forum: General
Topic: FTP connection problem from load-balancing
Replies: 11
Views: 3746

Re: FTP connection problem from load-balancing

Thanks for advice. 2nd instruction you said to send over one connection. Does it will work loanbalancing from ftp download or upload. Also can you please give me example of doing routing mark rule ..please FTP is TCP traffic which means that it has a connection. It isn't then so much about upload o...
by joshaven
Tue Aug 13, 2013 5:10 pm
Forum: General
Topic: FTP connection problem from load-balancing
Replies: 11
Views: 3746

Re: FTP connection problem from load-balancing

http://mum.mikrotik.com/presentations/US12/steve.pdf You put one fine detailed PDF document there. Nevertheless I think I found an error on the second page from the end. There you descirbed a isuse with assymetrical connections and created 4 PCC mangle rules Shouldn't these rules be 4/0, 4/1, 4/2 a...
by joshaven
Tue Aug 13, 2013 4:28 pm
Forum: General
Topic: FTP connection problem from load-balancing
Replies: 11
Views: 3746

Re: FTP connection problem from load-balancing

In order to not send your FTP over multiple connections you can: 1) Use PCC (per connection classifier). The connection tracking keeps track of what belongs to that one connection and the PCC load balances across your internet uplinks on a per connection basis rather then a per packet equal cost or ...
by joshaven
Wed Jul 31, 2013 5:09 pm
Forum: Beginner Basics
Topic: Want to merge 3 LANs.
Replies: 3
Views: 1009

Re: Want to merge 3 LANs.

If your security concerns are high (like millions of dollars of liability high) then I would recommend creating an IPSEC VPN tunnel. However, an IPSEC VPN is an order of magnitude more complicated to setup. As I understand, the main security concern with a PPTP VPN is that the initial connection (if...
by joshaven
Mon Jul 29, 2013 10:02 pm
Forum: Beginner Basics
Topic: Want to merge 3 LANs.
Replies: 3
Views: 1009

Re: Want to merge 3 LANs.

If I were trying to connect three locations and did not have really high security concerns then I would setup each location with its own subnet and create a VPN ring where each router knew how to reach each network directly. If you don't separate the three locations by subnet then you will likely en...
by joshaven
Mon Jul 29, 2013 3:51 am
Forum: Beginner Basics
Topic: Simple Tree vs Queue Tree for Home Network QOS
Replies: 3
Views: 879

Re: Simple Tree vs Queue Tree for Home Network QOS

I would use the queue tree. Set a queue on your WAN interface then two child queues one for the sync data and the other for everything else. Then you'll need to add packet marks in the post routing chain of the mangle feature so that you can identify the traffic to match it up to the queues. Set th...
by joshaven
Mon Jul 29, 2013 1:27 am
Forum: General
Topic: Need help to route PPTP client from specific WAN
Replies: 6
Views: 3062

Re: Need help to route PPTP client from specific WAN

Hi joshaven thanks for your replay. but i need to route my pptp from one of my WAN connection (i have 2 WAN). so that i use 1 WAN for pptp and use other as simple use. i hope you understand my problem. You still need to add a route mark to the traffic that you want to go through the pptp connection...
by joshaven
Sun Jul 28, 2013 6:01 am
Forum: Beginner Basics
Topic: Simple Tree vs Queue Tree for Home Network QOS
Replies: 3
Views: 879

Re: Simple Tree vs Queue Tree for Home Network QOS

I would use the queue tree. Set a queue on your WAN interface then two child queues one for the sync data and the other for everything else. Then you'll need to add packet marks in the post routing chain of the mangle feature so that you can identify the traffic to match it up to the queues. Set the...
by joshaven
Sun Jul 28, 2013 5:40 am
Forum: General
Topic: FTP connection problem from load-balancing
Replies: 11
Views: 3746

Re: FTP connection problem from load-balancing

You probably need to be using PCC load balancing. I am not sure but I am guessing that the issue is that the FTP connection is ending up split between the two when it shouldn't be. If that is not the issue the. Possibly try both passive and active FTP modes.
by joshaven
Sun Jul 28, 2013 5:36 am
Forum: General
Topic: Need help to route PPTP client from specific WAN
Replies: 6
Views: 3062

Re: Need help to route PPTP client from specific WAN

Create a mangle rule in the prerouting chain that matches the traffic that you want to go through the pptp with an action of adding a routing mark. Then create a route for 0.0.0.0/0 with the same routing mark that has the pptp interface as the gateway.
by joshaven
Wed Jul 24, 2013 8:50 pm
Forum: Beginner Basics
Topic: configure users use internet from specific connection.
Replies: 8
Views: 1325

Re: configure users use internet from specific connection.

can you please help me with this ?

http://forum.mikrotik.com/viewtopic.php?f=2&t=75086
Sorry, the hotspot feature is my biggest MikroTik weakness and cannot tell from what you posted what the solution would be.
by joshaven
Wed Jul 24, 2013 3:59 pm
Forum: Beginner Basics
Topic: configure users use internet from specific connection.
Replies: 8
Views: 1325

Re: configure users use internet from specific connection.

/ip firewall mangle add action=mark-routing chain=prerouting new-routing-mark=ISP_A passthrough=no src-address=192.168.2.2-192.168.2.20 add action=mark-routing chain=prerouting new-routing-mark=ISP_B passthrough=no src-address=192.168.2.21-192.168.2.40 /ip route add distance=1 gateway=ether1-ISP_A ...
by joshaven
Tue Jul 23, 2013 6:33 pm
Forum: Beginner Basics
Topic: Vlan setup question
Replies: 27
Views: 12755

Re: Vlan setup question

If you want your router to function between the ISP and the ISP provided router then you very well may not be able to do that without some crazy NAT rules which would be similar to a man in the middle (hack) approach. One thing you can do is bridge all used ports together and monitor the traffic. Wi...
by joshaven
Tue Jul 23, 2013 4:57 pm
Forum: Beginner Basics
Topic: Vlan setup question
Replies: 27
Views: 12755

Re: Vlan setup question

This conversation is overly complicated for the need here... Lets assume that the ISP is giving you three DHCP assigned IP addresses on the three VLANS that they are communicating on. Rename your external interface to WAN ( or translate the rest of my instructions accordingly ). Create three virtual...
by joshaven
Mon Jul 22, 2013 11:29 pm
Forum: Beginner Basics
Topic: Vlan setup question
Replies: 27
Views: 12755

Re: Vlan setup question

What is purpose of the VLAN's? The provider delivers Internet, IPTV and VOIP on VLAN's to me. To use them, you have to take them apart. The router of the provider does this standard. However, it is not possible to set DHCP or DNS itself. Is the traffic coming from NTU VLAN already tagged traffic? T...
by joshaven
Mon Jul 22, 2013 9:12 pm
Forum: Beginner Basics
Topic: Vlan setup question
Replies: 27
Views: 12755

Re: Vlan setup question

If I read the graphic correct, the interface belonging to vlan 4 is supposed to accept untagged traffic and to tag input traffic to vlan 4. As far as I know if vlan 4 is assigned that interface, the input traffic should be tagged and output traffic is tagged with the vlan is. This is not as desired...
by joshaven
Mon Jul 22, 2013 5:00 pm
Forum: Beginner Basics
Topic: Vlan setup question
Replies: 27
Views: 12755

Re: Vlan setup question

VLAN 4 and 6 should be untagged... As far as I know... :) I am not sure what you mean by VLAN 4 & 6 being untagged. The only untagged VLAN is VLAN1 which is the same as not having a VLAN. If you mean ports 2 & 3 should accept untagged traffic and should be able to communicate with devices on the sa...
by joshaven
Mon Jul 22, 2013 3:30 pm
Forum: Beginner Basics
Topic: Vlan setup question
Replies: 27
Views: 12755

Re: Vlan setup question

The difference to the pictures is that VLAN 4 and 6 should be connected to port 2 to 4. Is this even possible? Yes it is possible. Create Ether2-VLAN4 and Ether3-VLAN4. Then create a VLAN4-Bridge interface that has Ether2-VLAN4 and Ether3-VLAN4 as port members. Then do the same for VLAN 6. /interfa...
by joshaven
Sat Jul 20, 2013 5:20 pm
Forum: General
Topic: Router route config question
Replies: 3
Views: 677

Re: Router route config question

If two interfaces are bridged then they are in the same layer two network and devices can ping one another when they are in the same subnet. If the interfaces are nt bridged then they need to be in different subnets and use the router as a gateway between the two layer two and two layer three networ...
by joshaven
Sat Jul 20, 2013 6:59 am
Forum: General
Topic: RB1100AH Fans
Replies: 2
Views: 875

Re: RB1100AH Fans

I'm almost positive they would be 40mm fans. The x2 has 40mm and its the same sized router.
by joshaven
Sat Jul 20, 2013 6:56 am
Forum: General
Topic: Trying to isolate access between networks on 751U
Replies: 1
Views: 409

Re: Trying to isolate access between networks on 751U

In the ip firewall filters setup a rule that identifies the traffic and drop it. You may find it easiest to match source traffic of 10.x.x.0/24 an destination of 10.y.y.0/24 and drop that or you can match based on source and destination interfaces or bridge interfaces. There are other ways to match ...
by joshaven
Sat Jul 20, 2013 6:46 am
Forum: Beginner Basics
Topic: DHCP Pool for xxx.xxx.0.0/22 for Model
Replies: 1
Views: 711

Re: DHCP Pool for xxx.xxx.0.0/22 for Model

Router OS is a software defined routing platform and an issue like DHCP pool size would be a software level thig. So the answer is that a pool size for a /22 is absolutely fine. The thing your going to want to watch closely is your memory and more importantly your CPU load on that router. If your no...
by joshaven
Sat Jul 20, 2013 6:32 am
Forum: Beginner Basics
Topic: configure users use internet from specific connection.
Replies: 8
Views: 1325

Re: configure users use internet from specific connection.

You need to identify the traffic with the ip firewall mangle feature and add a routing mark to the traffic. Then you need that connectons route to have the matching routing mark.
by joshaven
Sat Jul 20, 2013 6:28 am
Forum: Beginner Basics
Topic: get 2 WANs static IP (from provider) on one interface
Replies: 1
Views: 664

Re: get 2 WANs static IP (from provider) on one interface

Yes you can have multiple ip's on any interface. You may need to do some routing things to return traffic over spicific ip's though the return ip will be chosen based upon the route table.
by joshaven
Sat Jul 20, 2013 6:13 am
Forum: Beginner Basics
Topic: Vlan setup question
Replies: 27
Views: 12755

Re: Vlan setup question

You need to add a virtual vlan interface on any of the ports that need to use that vlan. I believe you can add a vlan to a bridge or a bridge to a vlan. Think of the vlan as an interface. If you need vlan 4 on ether1 then create an ether1-vlan4 interface. If you need ports 2 & 3 to both have vlan7 t...
by joshaven
Sat Jul 20, 2013 5:59 am
Forum: General
Topic: Router route config question
Replies: 3
Views: 677

Re: Router route config question

The router will automatically route traffic between any subnets you have on your router. If you want multiple ports on the same subnet then you need to either have them all port members of the same bridge or use the switch settings if available on your hardware. If your traffic leaving your router t...
by joshaven
Tue Jul 16, 2013 4:23 pm
Forum: SwOS
Topic: RB250GS SNMP DUDE ISSUE
Replies: 5
Views: 3471

Re: RB250GS SNMP DUDE ISSUE

Thank u for your reply. Does the version on the dude snmp.profile has to be the same as the trap version on the second figure? And what about the contact info and location are the obligatory?? I have generally have the dude set to SNMP version 2c because I have that set to the default in my copy of...
by joshaven
Mon Jul 15, 2013 8:15 pm
Forum: SwOS
Topic: RB250GS SNMP DUDE ISSUE
Replies: 5
Views: 3471

Re: RB250GS SNMP DUDE ISSUE

hello joshaven. could you please post screen shots on how to set snmp between mirkotik routerboard and the dude??
by joshaven
Mon Jun 24, 2013 4:26 am
Forum: Forwarding Protocols
Topic: how/where to define next hop ip address for traceroute
Replies: 12
Views: 5169

Re: how/where to define next hop ip address for traceroute

You could probably NAT the reply to change the reply address. The way a trace rout works is that multiple packets are sent to the final destination with too short of ttl times so the packet expires at each hop along the way. When the packet arrives expired at a router the router will generate a repl...
by joshaven
Thu May 23, 2013 4:13 pm
Forum: The Dude
Topic: how active the dude can manage without a slow network
Replies: 4
Views: 1311

Re: how active the dude can manage without a slow network

see attached screenshot with a representation of how many devices and usage...
by joshaven
Thu May 23, 2013 2:33 am
Forum: General
Topic: Dual WAN, both have static IP's
Replies: 1
Views: 742

Re: Dual WAN, both have static IP's

Add a static rout to each and use the ping check gateway. Then add anther default route to each that has a router mark also with check gateway. That way the routes with the PCC mark will be followed unless the GW is not accessible in which case the route will become unavailable. If the PCC route is ...
by joshaven
Thu May 23, 2013 1:12 am
Forum: The Dude
Topic: how active the dude can manage without a slow network
Replies: 4
Views: 1311

Re: how active the dude can manage without a slow network

I know its fine with a few hundred (300 or 400). I've never reached a limit.
by joshaven
Wed May 22, 2013 7:30 am
Forum: General
Topic: Packet mark / tos problem
Replies: 14
Views: 1425

Re: Packet mark / tos problem

Packet marks disappear between routers tos is preserved. A route mark is just a software thing in the mikrotik. The tos is part of the packet header.
by joshaven
Tue May 21, 2013 7:21 pm
Forum: General
Topic: Packet mark / tos problem
Replies: 14
Views: 1425

Re: Packet mark / tos problem

Does MK1 need to run in router mode? It sound to me a lot like my home network. I have an office in my barn without a direct internet connection and a house with internet. I have a bridge connecting the two locations so that I can have internet at both locations. I have the bridge configured as a tr...
by joshaven
Tue May 21, 2013 6:37 pm
Forum: General
Topic: Packet mark / tos problem
Replies: 14
Views: 1425

Re: Packet mark / tos problem

Do you have an internet connection connection to both locations or just one of them? Is MK2 running as a router or a bridge? If your goal is to simply have internet at the location that the MK2 router is at then you can just be sure that UBNT M5, MK AP Bridge WDS and MK 2 area all in the same layer ...
by joshaven
Tue May 21, 2013 5:10 pm
Forum: General
Topic: Packet mark / tos problem
Replies: 14
Views: 1425

Re: Packet mark / tos problem

Do you have two gateways of which your MikroTik is doing NAT for both? If so you probably want to use NAT rather then mangle. Packet marks do not stay with the packet. You cannot pass a routing mark between routers. If I had two ajacent routers I would use two layer2 networks to pre-sort the traffic...
by joshaven
Tue May 21, 2013 3:49 pm
Forum: General
Topic: Packet mark / tos problem
Replies: 14
Views: 1425

Re: Packet mark / tos problem

I am sure that adding the condition of dscp=6 does work. Are you trying to separate DSCP6 traffic from to one IP to go out one gateway and non DSCP6 out another gateway? I cannot infer from your examples what your goal is. Earlier you said you want all traffic from one IP to go to one place. I would...
by joshaven
Tue May 21, 2013 3:41 pm
Forum: General
Topic: MT RB751U-2HD stops transmitting until after reboot
Replies: 5
Views: 3923

Re: MT RB751U-2HD stops transmitting until after reboot

How do i check the arp table on the Mt router. Go to IP Arp: joshaven@10.220.12.2 (Albright-RB1100AHx2) - WinBox v5.20 on RB1100AHx2 (powerpc).jpg You talked about putting the modem in bridged mode how?. You'll have to check with the modem manufacture or vendor. Generally you can manage them with a...
by joshaven
Tue May 21, 2013 2:29 pm
Forum: General
Topic: Packet mark / tos problem
Replies: 14
Views: 1425

Re: Packet mark / tos problem

Do you have a route with that name? Also do you have traffic going else ware?
by joshaven
Tue May 21, 2013 2:25 pm
Forum: General
Topic: MT RB751U-2HD stops transmitting until after reboot
Replies: 5
Views: 3923

Re: MT RB751U-2HD stops transmitting until after reboot

It sounds to me like an arp issue or possibly a DHCP issue on the modem. You could check your ip arp table on the router under the working and not working condition. However if you put the modem in bridge mode I think you would bypass the issue all together.
by joshaven
Tue May 21, 2013 4:43 am
Forum: General
Topic: MT RB751U-2HD stops transmitting until after reboot
Replies: 5
Views: 3923

Re: MT RB751U-2HD stops transmitting until after reboot

I would try putting the modem in bridge mode and running DHCP or pppoe or whatever the modem is doing directly on the router. If you cannot do that then figure out if the wired and wireless are both having the issue and also see if the router is loosing its ip connectivity with the modem.
by joshaven
Tue May 21, 2013 4:33 am
Forum: General
Topic: Firewall Rules?
Replies: 3
Views: 423

Re: Firewall Rules?

Your exact wording makes it a bit of trouble but its real easy to do similar things. Like add an ip that isn't in an exclusion list to a ban list when it has more then 5 concurrent smtp connections. You can also ban if in fifth smtp then add to fifth smtp if already in fourth on new tcp state and so...
by joshaven
Tue May 21, 2013 4:21 am
Forum: General
Topic: DHCP Server - Any way to hand IP's out based on MAC address
Replies: 2
Views: 678

Re: DHCP Server - Any way to hand IP's out based on MAC addr

Can you seporate the DHCP networks by using vlans? If all of one Macs of one type are coming from one device like one AP then you probably could tag everything from that device. If not then maybe you could get creative with bridges and bridge filters. At any rate I would bet that the trick will be s...
by joshaven
Tue May 21, 2013 4:14 am
Forum: General
Topic: Packet mark / tos problem
Replies: 14
Views: 1425

Re: Packet mark / tos problem

I don understand the purpose of rule 4. Can you post your desired outcome? It looks like your rule set would change all traffic to have DSCP 6.

Also it seems that all traffic from one ip will use a custom routing table called route1
by joshaven
Tue May 21, 2013 3:59 am
Forum: Forwarding Protocols
Topic: Any combination of hardware/software ready for production?!
Replies: 5
Views: 1627

Re: Any combination of hardware/software ready for productio

I am very happy with 5.20-5.25 for production use. We use many of each of the following in production: 493ah, 711, 2011, & 1100ahx2. We also have a hand full of 1200's but we find ports 9 & 10 to be problematic so I won't be buying any more of them.
by joshaven
Fri May 10, 2013 12:35 am
Forum: Beginner Basics
Topic: Config Help
Replies: 9
Views: 1415

Re: Config Help

You can look at how your BGP advertisements are working here: http://lg.level3.net/bgp/lg_bgp_main.php If both ISP's are accepting your routes and your routes to them are correct then I don't know how it would be a BGP issue. It could be a firewalling issue however: Check to see if you are dropping ...
by joshaven
Wed May 08, 2013 2:59 pm
Forum: Beginner Basics
Topic: Config Help
Replies: 9
Views: 1415

Re: Config Help

I am not sure what you mean by IPX, do you mean the Novel protocol IPX (http://en.wikipedia.org/wiki/Internetwork_Packet_Exchange)? All BGP is doing is communicating routes. If enabling BGP is breaking something then I would suppose that your not advertising a route or not receiving route advertisem...
by joshaven
Tue May 07, 2013 6:17 pm
Forum: General
Topic: Two LAN interfaces and Pref. Source
Replies: 3
Views: 984

Re: Two LAN interfaces and Pref. Source

Given the subnet length of /24 both 192.168.0.1 and 192.168.0.2 are within the same subnet. This means that they should be in on the same network. You can bridge two LAN ports together by creating a bridge which you may choose to call LAN. Then both ports can be added to to that LAN bridge. You can ...
by joshaven
Tue May 07, 2013 6:30 am
Forum: Beginner Basics
Topic: Config Help
Replies: 9
Views: 1415

Re: Config Help

It sounds like you got it. You could call your upline and have them watch your routes and then ensure that you are not attempting to advertise something you shouldn't then try to advertise a private or something to ensure your filter is right. Or if you have a couple of routers you can build your ow...
by joshaven
Mon May 06, 2013 4:34 pm
Forum: Wireless Networking
Topic: Wireless how-to?
Replies: 8
Views: 1391

Re: Wireless how-to?

Don't specify the to-address. You don't want to masquerade as 0.0.0.0 you want to masquerade as your public address. By default it will masquerade as the address that is associated to the default route that it is following when leaving the router (your public).
by joshaven
Mon May 06, 2013 2:38 pm
Forum: Wireless Networking
Topic: Wireless how-to?
Replies: 8
Views: 1391

Re: Wireless how-to?

Are you masquerading all traffic going out of the router to the Internet? Check ip firewall NAT.
by joshaven
Fri May 03, 2013 8:57 pm
Forum: Beginner Basics
Topic: Config Help
Replies: 9
Views: 1415

Re: Config Help

See attached route filters
by joshaven
Fri May 03, 2013 8:47 pm
Forum: Wireless Networking
Topic: Wireless how-to?
Replies: 8
Views: 1391

Re: Wireless how-to?

AP Bridge is good. Yes leave the Default Authenticate and Default Forward enabled which is default. You can edit the default security profile and set the mode to dynamic keys... check the WPA PSK & WPA2 PSK boxes and set the shared keys for both. Use AES unless you must use TKIP. Only use EAP if you...
by joshaven
Fri May 03, 2013 2:43 pm
Forum: General
Topic: strange problem - packets going out to WAN2 with src of WAN1
Replies: 4
Views: 934

Re: strange problem - packets going out to WAN2 with src of

That sure is an odd issue and I'm glad you got it working. I haven't ever had to reset and reapply so that's a good trick to know.
by joshaven
Fri May 03, 2013 2:39 pm
Forum: Beginner Basics
Topic: Stuck noob Queues
Replies: 3
Views: 619

Re: Stuck noob Queues

The mikrotik rate-limit can be handed back via radius to create a simple queue to manage speed dynamically.
by joshaven
Fri May 03, 2013 6:04 am
Forum: Beginner Basics
Topic: Config Help
Replies: 9
Views: 1415

Re: Config Help

You can creat a route filter to drop all announcements except for your IP's and use the filter on your bgp interfaces to ensure you only announce your ip space.
by joshaven
Fri May 03, 2013 6:00 am
Forum: Beginner Basics
Topic: Stuck noob Queues
Replies: 3
Views: 619

Re: Stuck noob Queues

It sounds like you need quite a bit of help in regards to details. I run a wisp with a similar setup but much larger scale. If you want to contact me directly email me. I think I could send you a few config scripts I use and have an hour long Skype conversation to get you going.
by joshaven
Fri May 03, 2013 5:54 am
Forum: General
Topic: Two LAN interfaces and Pref. Source
Replies: 3
Views: 984

Re: Two LAN interfaces and Pref. Source

With two LAN's you need two subnets. If both ip's are on the same LAN and the router has to choose the source ip I believe it will always choose the lowest.
by joshaven
Fri May 03, 2013 5:44 am
Forum: Wireless Networking
Topic: Wireless how-to?
Replies: 8
Views: 1391

Re: Wireless how-to?

I think you want two subnets no NAT. You also want hotspot.
by joshaven
Fri May 03, 2013 5:40 am
Forum: General
Topic: Routing over PPTP tunnel
Replies: 1
Views: 503

Re: Routing over PPTP tunnel

You could match the packets with a mangle rule and set the action to add a route mark.

Then creat a route entry for all traffic to your normal Internet gateway and set the route mark as a match on the route.

When a packet has the same routing mark as the route then this route will be primary.
by joshaven
Fri May 03, 2013 5:34 am
Forum: General
Topic: How to choose between two uplinks for some destinations
Replies: 4
Views: 617

Re: How to choose between two uplinks for some destinations

Traffic always follows the most spigot (specific... darn iPhone keyboard) route. Just add a route to the destination subnet an set the gateway to the desired ip or interface.
by joshaven
Fri May 03, 2013 5:32 am
Forum: General
Topic: scripts work fine, if there's one static default route entry
Replies: 2
Views: 525

Re: scripts work fine, if there's one static default route e

I would guess that it has to do with what IP the script is sourcing from. Is it possible that the script is using a private IP that you are not masquerading? You could NAT any traffic with a src ip of that router from your gateway if this is the issue.
by joshaven
Fri May 03, 2013 5:24 am
Forum: General
Topic: strange problem - packets going out to WAN2 with src of WAN1
Replies: 4
Views: 934

Re: strange problem - packets going out to WAN2 with src of

Do you have any mangle rules that may be altering anything? I am a bit confused about some of your wording regarding the source an destination of the traffic that isn't working right. Are you saying the traffic is originating from your ata and going out the pppoe interface rather then the l2tp? Traf...
by joshaven
Wed May 01, 2013 9:23 pm
Forum: Scripting
Topic: Mikrotik DUAL WAN Load Balancing using PCC method
Replies: 7
Views: 14814

Re: Mikrotik DUAL WAN Load Balancing using PCC method

OK, but what is with the script? the code: add chain=prerouting dst-address=192.168.1.0/24 action=accept in-interface=Local add chain=prerouting dst-address=192.168.2.0/24 action=accept in-interface=Local must be added then for any Local port (say Local1, Local2, Local3...) so that the script is wo...
by joshaven
Wed May 01, 2013 8:36 pm
Forum: Scripting
Topic: Mikrotik DUAL WAN Load Balancing using PCC method
Replies: 7
Views: 14814

Re: Mikrotik DUAL WAN Load Balancing using PCC method

You don't need to do anything to put them together if your routing. The interfaces route by default when an IP address is assigned to the interface. You'll see a route entry in the routing table with a "D" in front of it which means that it is a dynamic route. If a packet enters ether1 and is destin...
by joshaven
Tue Apr 30, 2013 8:13 pm
Forum: Beginner Basics
Topic: RB2011L-IN Console [resolved]
Replies: 4
Views: 959

Re: RB2011L-IN Console

I'm glad that helped.
by joshaven
Mon Apr 29, 2013 5:02 am
Forum: Scripting
Topic: Mikrotik DUAL WAN Load Balancing using PCC method
Replies: 7
Views: 14814

Re: Mikrotik DUAL WAN Load Balancing using PCC method

if all of the interfaces are on the same switch chip then you can set the other interfaces to have the master port set to the first lan port... ie: ether2 could be the lan port, ether3 could be set to have the master port be ether2, etc. Alternatively if they are not all on a switch port you can cre...
by joshaven
Sat Apr 27, 2013 6:19 am
Forum: Beginner Basics
Topic: RB2011L-IN Console [resolved]
Replies: 4
Views: 959

Re: RB2011L-IN Console

Check under packages and see if you can remove it. I've never run the dide on a routerboard so its just a guess.
by joshaven
Fri Apr 26, 2013 10:25 pm
Forum: Wireless Networking
Topic: RB433 to UBNT 802.11N loop
Replies: 7
Views: 2108

Re: RB433 to UBNT 802.11N loop

I have had many issues with WDS between UBNT and MT. On WDS on MT I prefer 4.17 if using 802.11n, 3.30 if using A/B/G. Also, the newest UBNT firmware, 5.5.4 if memory serves, introduced a bug with a WDS link I have, AGM5 to RB333 5GHz WDS ROS 3.30. I went back to 5.3.5 and it works fine again. I ha...
by joshaven
Fri Apr 26, 2013 4:22 pm
Forum: Beginner Basics
Topic: Burst Time Calculation
Replies: 13
Views: 19246

Re: Burst Time Calculation

hi, this speed's (8 mb,16mb) showing to customer only they want to check speedtest via speedtest.net web page or another one.normally they used 1200kbps or 2400kbps sustained. we don't want to maintain higher speed to customer , all dsl user's will be use same internet pool but we should save their...
by joshaven
Fri Apr 26, 2013 4:03 pm
Forum: Beginner Basics
Topic: Burst Time Calculation
Replies: 13
Views: 19246

Re: Burst Time Calculation

i think he's trying to achieve what Comcast is doing with PowerBoost I looked up PowerBoost What is PowerBoost? PowerBoost is a patent-pending Comcast network technology that enables you to experience faster connection speeds while you are downloading and uploading large files to the Internet. Powe...
by joshaven
Fri Apr 26, 2013 2:22 pm
Forum: Wireless Networking
Topic: RB433 to UBNT 802.11N loop
Replies: 7
Views: 2108

Re: RB433 to UBNT 802.11N loop

I would recommend using all mikrotik. If the bullets are the only thing that connect to the ap the. Use nv2. Beyond that some older UBNT firmware did pretty badly with layer 2 bridging. I guess it's possible that you had a loop all along but the old bridges were not bridging well enough for it to be...
by joshaven
Wed Apr 24, 2013 5:27 pm
Forum: Beginner Basics
Topic: Burst Time Calculation
Replies: 13
Views: 19246

Re: Burst Time Calculation

I am a bit unclear of your need so I want to restate it in my words to see if I understand. One speed plan 8Mbps Maximum Throughput, 1200Kbps sustained traffic. A second speed plan of 16Mbps Maximum Throughput, 2400Kbps sustained traffic. If this is correct then the speed plan is not complicated, al...
by joshaven
Wed Apr 24, 2013 2:17 pm
Forum: Beginner Basics
Topic: Burst Time Calculation
Replies: 13
Views: 19246

Re: Burst Time Calculation

It doesn't work on times per day. It's more like it recharges. When a user doesn't use the traffic at all the 10 second average goes to 0 so the next time traffic is requested then it will be at the burst speed. If the burst time is extended to longer like an hour then its averaging over an hour and...
by joshaven
Tue Apr 23, 2013 11:58 pm
Forum: General
Topic: Exchange behind the Routerboard: queue is full
Replies: 18
Views: 6100

Re: Exchange behind the Routerboard: queue is full

Nowadays, you can really work with it. Maybe you can. I've not tried 2012 but it seems as of 2008 that the trajectory is to hide things even more. The disease that infected the control panel in windows 7 has seemingly spread to IIS and other MMC controlled tools in Server 08. Why the advanced site ...
by joshaven
Tue Apr 23, 2013 11:34 pm
Forum: Beginner Basics
Topic: Burst Time Calculation
Replies: 13
Views: 19246

Re: Burst Time Calculation

Hopefully this will help
by joshaven
Tue Apr 23, 2013 5:02 pm
Forum: Wireless Networking
Topic: bandwidth limitation
Replies: 9
Views: 1718

Re: bandwidth limitation

I've never used simple queues with hotspot users so that may very well be true. My simple queues come from PPPoE.

Good to know.
by joshaven
Tue Apr 23, 2013 5:00 pm
Forum: General
Topic: Exchange behind the Routerboard: queue is full
Replies: 18
Views: 6100

Re: Exchange behind the Routerboard: queue is full

If your server is doing full lookups and it is able to answer DNS then your router isn't causing any problems for it... so something is wrong on your server because the router would not be selectively bothering your DNS. It would either allow DNS through it or it wouldn't assuming that you were not ...
by joshaven
Mon Apr 22, 2013 10:09 pm
Forum: General
Topic: Connection between pptp users and ipsec network.
Replies: 4
Views: 907

Re: Connection between pptp users and ipsec network.

It looks like no... I don't see the option, plus normis seems to be answering no in this chain:
http://forum.mikrotik.com/viewtopic.php?f=10&t=28131
by joshaven
Mon Apr 22, 2013 6:08 pm
Forum: General
Topic: Can a routerboard be used to be a serial cable over IP?
Replies: 1
Views: 513

Can a routerboard be used to be a serial cable over IP?

The use case is controlling a water pivot (farm equipment in the middle of a field) over an IP network. The equipment is serial on both ends and originally designed to communicate over a phone line but has been used also over priority 900MHz serial equipment. I am interested in using our IP network ...
by joshaven
Mon Apr 22, 2013 5:01 pm
Forum: General
Topic: Where to mark packets in mangle?
Replies: 5
Views: 1655

Re: Where to mark packets in mangle?

Whenever possible you only want to queue on egress. When you queue on ingress your taking a packet that you have already received and delaying or discarding them. One case that queuing on ingress is useful is when you want to drop unimportant traffic in order to ensure that important traffic always ...
by joshaven
Mon Apr 22, 2013 4:21 pm
Forum: General
Topic: Exchange behind the Routerboard: queue is full
Replies: 18
Views: 6100

Re: Exchange behind the Routerboard: queue is full

Properly configuring your DNS forwarders in the windows server is not a workaround, it is proper configuration. Your windows server should either be doing full lookups or it should be forwarding to servers that are doing full lookups. Otherwise I would not be surprised to have issues from time to ti...
by joshaven
Mon Apr 22, 2013 4:11 pm
Forum: Wireless Networking
Topic: bandwidth limitation
Replies: 9
Views: 1718

Re: bandwidth limitation

I've never noticed a static queue that was at the top move based upon new dynamic queues. You should be able to do this without the script. You can manually move a static queue to the top by dragging it in winbox.
by joshaven
Mon Apr 22, 2013 4:08 pm
Forum: RouterBOARD hardware
Topic: RB2011UAS-RM Enough for 50 Mbps FIOS and VPN?
Replies: 15
Views: 5507

Re: RB2011UAS-RM Enough for 50 Mbps FIOS and VPN?

Great to hear... Just to be clear, that was with the RB2011 Right?
by joshaven
Mon Apr 22, 2013 3:38 pm
Forum: General
Topic: PPPoE problem - is my mikrotik broken?
Replies: 4
Views: 809

Re: PPPoE problem - is my mikrotik broken?

I would run export compact to get my entire config in text mode. Then run netinstall to do a wipe and reinstall on the routerboard. Then I would re-apply my config one piece at a time making sure that I understood and wanted the config that was being applied. If that doesn't work then I would expect...
by joshaven
Sat Apr 20, 2013 6:31 pm
Forum: General
Topic: PPPoE problem - is my mikrotik broken?
Replies: 4
Views: 809

Re: PPPoE problem - is my mikrotik broken?

Have you tried checking the dial on demand option?

Also, are you using 5.24? I would recommend running the newest stable os and also upgrading the firmware if you haven't.
by joshaven
Sat Apr 20, 2013 6:27 pm
Forum: General
Topic: Where to mark packets in mangle?
Replies: 5
Views: 1655

Re: Where to mark packets in mangle?

I could be wrong but I am pretty sure I only use the prerouting chain and the mark stays until the packet is remarked or the packet leaves the router.

You should be able to test by adding a mark and the create a passthrough counter in the post routing chain and see if they both increment.
by joshaven
Sat Apr 20, 2013 6:24 pm
Forum: General
Topic: Exchange behind the Routerboard: queue is full
Replies: 18
Views: 6100

Re: Exchange behind the Routerboard: queue is full

Try setting the DNS forwarder setting to your ISPs primary DNS and googles publi DNS:
http://technet.microsoft.com/en-us/libr ... s.10).aspx
by joshaven
Sat Apr 20, 2013 3:14 pm
Forum: General
Topic: PPTP user do not find share file of local lan pc
Replies: 3
Views: 815

Re: PPTP user do not find share file of local lan pc

Click start then choose or type "run" which will pop a box up that you can type in. Then type \\192.168.1.10 (or what ever the ip of the share is.) and press ok. It will show you the resources available on that device which you can right click on and choose connect or map or something.
by joshaven
Sat Apr 20, 2013 3:05 pm
Forum: General
Topic: Exchange behind the Routerboard: queue is full
Replies: 18
Views: 6100

Re: Exchange behind the Routerboard: queue is full

You should check to see what DNS your server is using, I am assuming that it is forwarding the DNS to the routerboard. Make sure that the max size of the UDP reply on the routerboard is large enough, I use 4096. You could try setting the DNS forwarders to your ISP DNS. Also you can try googles publi...
by joshaven
Sat Apr 20, 2013 2:56 pm
Forum: General
Topic: Share available bandwidth among "X" clients equally
Replies: 6
Views: 1153

Re: Share available bandwidth among "X" clients equally

The PCC setting allows you to split connections up. Set the action of the PCC rule to mark routing. The routing mark allows you to make a route that any traffic with that mark will see whereas anything without that mark will ignore routes with marks. The routing mark is basically a routing table. Do...
by joshaven
Sat Apr 20, 2013 4:37 am
Forum: General
Topic: PCC failover question
Replies: 1
Views: 455

Re: PCC failover question

PCC is connection aware so new connections would remain on the existing path. The only way to change that would be to reestablish the tcp connection.
by joshaven
Sat Apr 20, 2013 4:32 am
Forum: Beginner Basics
Topic: Burst Time Calculation
Replies: 13
Views: 19246

Re: Burst Time Calculation

Burst time is the time that you want the router to track over. You could set the burst for 2 times your bandwidth target for a time of 5 seconds. This would mean that it will burst until the average over the last 5 seconds reached twice your limit. The max limit is the max that you want to provide n...
by joshaven
Sat Apr 20, 2013 4:24 am
Forum: General
Topic: PCC with web proxy and 2 wan
Replies: 1
Views: 694

Re: PCC with web proxy and 2 wan

I would guess that the proxy is causing your packet matching to be broke. Try PCC on output chain ( just a guess)
by joshaven
Sat Apr 20, 2013 4:19 am
Forum: Beginner Basics
Topic: combine two pppoe client in RB750up
Replies: 3
Views: 858

Re: combine two pppoe client in RB750up

If your ISP supports pppoe multi link then yes you should be able to combine them. Otherwise your probably stuck with load balancing which isn't all that bad. Read up on PCC on the wiki.
by joshaven
Sat Apr 20, 2013 3:57 am
Forum: General
Topic: Need help to rout youtube traffic
Replies: 3
Views: 745

Re: Need help to rout youtube traffic

You could try adding a connection mark on new tcp connections in conjunction with a layer 7 match for YouTube.com. Then add a routing mark to the packets with that connection mark. Then add a route to the dsl interface that has that rioting mark.
by joshaven
Sat Apr 20, 2013 3:46 am
Forum: General
Topic: RB751G-2HnD switch
Replies: 1
Views: 553

Re: RB751G-2HnD switch

Make sure the ports are linking up at 100mbps and that your using switching not bridging. You switch by setting the master port option. You bridge under the bridge section. Bridging should work fine but switching is more efficient.
by joshaven
Sat Apr 20, 2013 3:42 am
Forum: SwOS
Topic: RB250GS SNMP DUDE ISSUE
Replies: 5
Views: 3471

Re: RB250GS SNMP DUDE ISSUE

First ensure you have your snmp community string right and are using v1. Then try snmp walk. Use the beta version of the dude. If your still having trouble let me know and I'll screenshot my settings for you.
  • 1
  • 2