MikroTik

undecided

Hi all, I would like to divert connected users after connecting to wifi to a welcome/splash page. I tried Fewi's post on using the hotspot auto-login method, which works well for desktops/laptops but not for mobile devices.(likely due to the changes on mobile OS security. I have come across a method...

undecided

I too now have the same issue, CCR1036 v6.41rc32, was previously stable release and had the issue hence updated to rc32 in hope it solved it...

Some have said that they reverted to 6.8...that's far too old now, surely this should have been fixed by now?

undecided

Hi all, I've got a problem with users not authorizing with my Mikrotik hotspot database. I'm using the built-in radius with MAC auth, I have 1000's of user accounts and have currently 300+ active. Every time I reboot the router I get only around half my active users re-authenticating, if I look unde...

undecided

Hi all, I'm trying to bring my new CCR online, I have 128 public IP's on my WAN interface, if I set my src NAT rule to Masquerade everything works correctly. However when I set it to SAME (IP-range), all outgoing traffic grinds to a halt, I've tried changing from SAME to SRC-NAT with the same range ...

undecided

Hi all, Resurrecting my old post here, I'm finally in the change over from pfsense to Mikrotik and trying to get the same internal src IP to always use the same public IP, I've created a src NAT rule with "SAME" under action and specified my IP range, but this seems to make each connection...

undecided

Awesome!

undecided

We need this! +1

undecided

Hi all, I have 2 questions. 1. If I use "same" NAT with address range, will my customer always receive same NAT IP? or is it just per connection if source and destination are the same? I want my customers to always get same NAT IP for whatever connection they initiate..will "same"...

undecided

Thank you guys,

FeklarI didn't even know the "same" option existed even though I looked through that list so many times, thanks for pointing it out!

undecided

Hi all, I use NAT through my WAN interface with Masquerade, at the moment I have a block of 5 IP's, and obviously with Masquerade the first IP is always used. If I set the NAT to SRC-NAT and specify the range of 5 IP's then users randomly get one of the 5 IP's, the problem is that the user IP keeps ...

undecided

HI all, so I had my mikrotik directly connected to the internet, my usermanager is configured with paypal, I've configured an SSL cert, previously when payments were made through paypal they were authorized/successful and the credit amount was added to the user account. I have since placed a pfsense...

undecided

And it looks like others have the same issue but so far I too cannot find a solution/workaround...
http://forum.mikrotik.com/viewtopic.php?t=79219

undecided

Hi all, it works if I create the account before the user attempts to authenticate. However if the user attempts to authenticate before I create the login account, it obviously fails but thereafter I create the account and even if I reboot the client it does not attempt to login again. The client the...

undecided

So I currently use PCC mangle rules, and I use NAT on my WAN interfaces, however I do not use "masquerade" instead I use "src-nat" and specify a range of public IP's to use. Will fasttrack work on this setup? I have no way to test and I'm reluctant to upgrade and test it on my li...

undecided

Thanks both, I think it's the routing rules, the PCC and firewalling currently configured on my primary router is a working config with two WAN's, I will check both your suggestions and revert. Thanks!

undecided

Bump, Anyone have an idea for me?

undecided

Hi all, I'm trying to add additional WAN connections on my RB1100, I have all ports in use using PCC, now I want to add an uplink router and change the weighting on the primary router to spread my WAN connections over the primary router and the uplink router. I have created a /30 subnet to connect a...

undecided

Thanks Pukkita for the helpful answer.

undecided

Thanks Pukkita, So I would route over the /30 subnet to the second router(no NAT), but if I have 10 WANS balanced with PCC on router 1 and another 3 WAN's with PCC on router 2, would it still work? I guess I must change the "weight" so that more connection go out the new WAN on router 1? I...

undecided

Hi all, I have a RB1100 13 port router....I currently use port 1 for my LAN and the remaining ports for WAN, I have PCC balancing over my WAN's. Obviously I now cannot add any further WAN links, is there a way to link two routers RB1100 routers so they both respond on 1 LAN gateway IP address? I don...

undecided

Hello, I have a Mikrotik cloud core router and I will be using the hotspot payment gateway with Authroize.net. I've spoken with Authorize.net and they tell me I do not need PCI (Payment Card Industry) if I use them for the card payments, i.e. they host the payment transactions. Will this still work ...

undecided

Actually would this cause problems with my PCC rules? I have two WAN interfaces, both with 5 usable Public IP's.

If I NAT sections of my subnet then PCC would be redundant right?

undecided

Thats sounds like the best way, thanks for the idea

undecided

Thanks, has anyone had success with a netmap like 256:5

Is this doable?

undecided

When I use the range option with src-nat then I have customers complaining about their IPTV systems not loading, I'm not sure if this is because it uses a different public IP address for each session the user attempts. When I set this to masquerade it works fine. So now the question is, does the mas...

undecided

I want to masquerade/nat the intermal lan subnet to the 5 public WAN addresses i have on my wan interface. I would like it to randomly select one of the 5 public addresses(they are in one public subnet) per internal address. So like a "many-to-5" nat translation.

undecided

Hello, I used to have one public IP address, I then requested an additional 5 usable, so now my WAN subnet is a /29 So for example, the public IP's 1.1.1.1 to 1.1.1.4 chain=srcnat action=src-nat to-addresses=1.1.1.1-1.1.1.4 out-interface=ether1 At the moment I am using src-nat, will this keep changi...

undecided

Thanks for that information, I'm not sure what would be considered low latency, but if I do a ping from any of my sites to my central site I get around 50ms

Is this workable for radius to operate ok with do you think?

undecided

Thank you Janisk would the 3mb connection between sites handle the traffic when I have many users at the satelite sites connecting? I mean all their session information will need to be transmitted back to the usermanager/radius at my central site, do you guys have any idea how much traffic the sessi...

undecided

Hi, I have 5 separate ISP subnets, each with their very own mikrotik core routers. I want to implement hotspots for each site, but I want all the hotspots to talk back to my main site for the usermanager. Is this possible? My main site runs a RB1100 and the smaller sites run RB750's, upload in my co...

undecided

Thats great. Thank for your help its much appreciated!

undecided

Anyone with anything I can try? or point me in a particular direction with this? thanks

undecided

Are you using usermanager? if so then besides the uptime setting created in the profile limitation, you also need to set the validity on the profile page and set this to the same time..then from first login the clock begins. http://wiki.mikrotik.com/wiki/User_Manager/Profiles see section on validity...

undecided

I'm running 6.15 an seeing this error, Mikrotik Support do you have anything for us?

undecided

Guys, having some trouble routing, I have a vlan(ether1) on subnet 10.12.1.0/22 which runs my hotspot, I then have subnet 172.16.0.0/16 for my private customers running directly on ether1. From my hotspot subnet I can ping my 172.16.1.254(gateway address) on the physcial interface but cannot ping an...

undecided

Well seems I've found a working trick....not sure if it will cause me any issue but it seems to be working ok for now. First I had to set the hotspot IP POOL to NONE. Then instead of setting the hotspot=auth in the PCC rule, I set it on the OUTPUT mangle rule...seems to be working correctly, lines a...

undecided

Anyone with any suggestion I can try?

undecided

Still failing after regenerating the filter and NAT rules, I now see the dynamic rules created and have re-created my static rules after the dynamic ones...still cannot get this working....anyone?

undecided

Found it

http://forum.mikrotik.com/viewtopic.php?f=2&t=51570

undecided

Just realized I'm missing all the "dynamic" hotspot NAT rules...how do I recreate these?

undecided

Hello, I have a couple of Mikrotiks supplying internet in separate locations. One router is working as a hotspot and is also doing PCC load balancing over 2 WAN's. I set the PCC output rules to "hotspot = Auth" and it works fine.(I know you can also set the prerouting PCC rules as such) Th...

undecided

OK, so I've done a bit of search and read on the subject and was just looking for a bit of confirmation from some of the experts here. I currently use DST-NAT, my private LAN uses class b scheme, and I nat this out one public IP. I will now be expanding this to 8 public IP's and have seen that netma...

undecided

Thanks but I do not use a hotspot.

undecided

OK, simpler request here, there are a few posts on how to configure PCC with Proxy... none seem to work very well, when it does work, I get half the webpage loading and page loading takes quite some time. So I currently have PCC using "src-address" as the classifier. Is there no simple way...

undecided

Anyone interested in lending me some direction here please?

undecided

Ok, so after further testing I am able to configure a transparent web proxy and then create a DST NAT for a particular IP to be redirected to my proxy, at which point i redirect them to my payment reminder...works great. BUT On my production router I have 4 WAN PCC, and the only way to get a transpa...

undecided

Hi all, I have a mikrotik that is configured with PCC, four WAN links, NAT'ing private to public. No hotspot. I'm a WISP, and up until now when a customer does not pay their bill I simply cut their internet connection. What I would like to do is redirect all their http to my website where I will hav...

undecided

Normis,

Email sent, please provide further instructions.

Thanks

Normis, I still have not heard anything back? What do I need to do?

undecided

Normis,

Email sent, please provide further instructions.

Thanks

undecided

Not sure what email you are refering to but I have not been offered a replacement key. The only correspondence I have received is from a guy called Sergejs saying "As this is new installation, you need to purchase new license." and "Install MikroTik RouterOS on the same disk, then sof...

undecided

So my HDD goes faulty and I have to pay for a new license?! dumbfounded.

undecided

Guys I purchased a Level 6 license after installing RouterOS onto a PC....after I started having issue with constant reboots(suspected HDD) I converted it to a VM...and it asked again for a new license key as it detected it was on new hardware...fair enough. I emailed support and was told that they ...

undecided

Thank you Janisk, I see what you mean about the "action=src-nat". But how do i seperate the traffic so that internet traffic only goes down IP1 and SMTP only goes down IP2? i currently have PCC load balancing across 4 wan links, I dont want to create a mangle rule that disrupts this. So th...

undecided

Currently have my mikrotik configured with one wan interface called "wan", I've been assigned a public IP address/subnet which is a 30 subnet...so just the one usable IP address. My router is set to NAT/Masquerade out interface "wan". My ISP will now issue me a few more IP's, so ...

undecided

Kalimera Skot! Your script is exactly what I've been after for a long time, however I can't seem to get it to work. My hotspot is configured to use usermanager, so not sure if this is the reason it does not work. From my router I can send test emails, I also see that on the log, I get "user jus...

undecided

Thanks Surfer Tim,

Unfortunately I know little of scripting, and I copy/pasted this script from elsewhere. What exactly should I be logging and hopefully you can give me the command that I should insert?

Your help is very much appreciated!

undecided

What is the last entry you see in the log? /log info "$user just logged in, triggered On Login script"; or /log info "[HOTSPOT] - $user - checking if user is in Address List - attempt $counter of $limit"; or... The last entry I see is "[HOTSPOT] - $user - logged in, matches...

undecided

guys, I need help with this script I found, I've copied and pasted it here as I have it on my mikrotik...it logs that the user has logged into the hotspot and that it matches the name, nothing further gets logged and I do not receive an email. Can someone please help and parse through my script and ...

undecided

Samir, In my case since it is not for a free user, and I need to match the name would the below work? /log info "$user just logged in, triggered On Login script"; :local emailaddress "fusionpavlou@googlemail.com"; :local timeout 30d; :local nameFilter "rtl"; if ([:find ...

undecided

Thank you for your script, I will give it a try!

undecided

Hi guys, I'm trying to generate an email for when a particular set of users login to the hotspot. I have created a standard hotspot and have created a customer account, all users created by this customer have "rtl" in the username. I've also configured email on my router(Rb750) and this is...

undecided

Hi, I'm having the same issue running an RB1200 with v6.1. I haven't solved it yet, so if you find anything please let me know.

Thanks

undecided

Thank you, I shall check out your script now.

undecided

Hi Guys, i have found this article on dynamically updating an address list for all youtube IP's. However the script does not create the address list. http://adminsline.wordpress.com/2012/08/03/mikrotik-youtube/ I'm not experienced at all with how scripting works, and I'm guessing my problem is that ...

undecided

Thank you, that's a great explanation!

undecided

What would you set this at on a q-tree for a 16mb adsl line? Limit at 14, and Max limit at 16?

undecided

Thanks Andrew, this forum seems awfully quiet though! Can anyone help here please, there is obviously something elementary that I'm not doing correctly. It's quite difficult when the documentation for implementing layer7 queues is a version old....unless unlike me you're a ROS expert who doesn't nee...

undecided

Try first to mark connection, after that packet.

Are you meaning put the pcc rules after the packet marking rules?

Does anyone else have any suggestions?

undecided

I don't want to mark connection as I have PCC running load balancing which is already marking connections.

undecided

Have a few mangle rules to mark packets with layer 7. Such as below to mark bittorent /ip firewall mangle add action=mark-packet chain=prerouting comment=bittorent_p2p disabled=no in-interface=cyta6 layer7-protocol=bittorrent new-packet-mark=bittorent_in passthrough=yes Then for the queue /queue tre...

undecided

I'm using ROS v6 and the "global-in" and "global-out" as described in the layer7 wiki are now replaced with just "global". However after modifying the script and changing global-in/global-out with just global, it does not queue traffic at all, and I've confirmed that th...

undecided

Can anyone else weigh in on this, pcc is newer than nth correct? And is therefore better for load balancing as I understand it. I will try nth if it's deemed better for performance. But my burning questions here are, do I need to create the mangle rules shown in the layer7 wiki to all my internet in...

undecided

Thanks Spri, that would be awesome! didn't realise NTH was better as the mikrotik wiki suggests pcc...If I read it right.
Appreciate the help man!

undecided

Hello all, So a few questions regarding the wiki on setting up layer7 qos, http://wiki.mikrotik.com/wiki/Basic_traffic_shaping_based_on_layer-7_protocols My current setup is using a rb1200 as my core router, I have 5x wan adsl ports, all 16mb down and 1mb upload. I cuurently have pcc load balancing ...

undecided

OK, so I've installed the dude package onto my router, and I have configured the "/tools e-mail" to use SMTP authentication with to gmail, which I have successfully tested by sending an email which was received. I then open the dude on my workstation and connect it to my router IP address ...

undecided

Thanks mate, I had tried a few times using the winbox interface and just couldn't get it right, once I've run your command and I can see the rules in winbox I will tweak to suit and then create one for UDP as well.

Thanks a mil!

undecided

thanks, but I have searched and like I said I have found and implemented loads of queue and load balancing rules, also connection limiting, but my particular question I cannot find a definitive answer hence my visit to the forum to seek out the help of someone who knows and someone who is kind enoug...

undecided

Bump, please help, any info would be great!

undecided

Hi all, my current setup is as such, load balancing three ISP connections, I have simple queues for all three connections configured so that http and port numbers up to 1024 take priority, anything else is lower priority, this seems to work quite well. I used to have connection limiting where if an ...

undecided

What? not enough colours?

undecided

Couple of questions, I currently have a network which I'm expanding and about to throw in a hotspot...and a transparent proxy cache server too! See my beautifully crafted multi-coloured diagram. My questions are with such a setup, will my queues on the head-end router continue to work as required af...

undecided

Does a hotspot need to be masqueraded? I have a RB750 one port is configured with subnet 192.168.1.* and other port is configured with 172.16.*.*, I then have an upstream router as my head-end router which connects to the internet, 172.16.1.254. What I have at the moment is my hotspot on 192.168.1.*...

undecided

Hi all, I have a RB750, I've followed http://wiki.mikrotik.com/wiki/User_Manager/Hotspot_Example to configure as best I can. At the moment, I have created a customer and user under usermanager, I do not have any users under hotspot users, I've got the hotspot server and usermanger both on the same I...

undecided

"will you connect some l3 setop box after CPE to convert multicast stream to TV or live TV only." Yes In bridging mode once you enable multicast stream on Base it will automatically start pushing traffic on all WDS which results in High latency. Ok, my Access points are not in WDS, just re...

undecided

Hi, it's in bridging mode up until the users home router which nats, does it need to be in routing mode on the CPE? Do I need to use PPPOE in routing mode?

undecided

Hi all, I'm not looking for configuration details, I just want to know what is and isn't possible with routeros and networking in general. I hope someone can help. I currently run a wireless ISP, and have recently begun installing IPTV. At the moment I do not install the IPTV for my wireless custome...

undecided

Anyone that can help with some info on this?
thanks

undecided

Hi all, first let me explain my objective. I want to prioritize regular traffic over P2P(including encrypted), I understand that the best way to achieve this is through layer 7 protocols and instead of limiting P2P specifically I need to give a higher priority to regular traffic....which has led me ...

undecided

Guys I'm still battling to work this one out, do I HAVe to use a public DNS when using PPC with two different ISP wan links? Or can I set the client dhcp to use my mikrotik as the DNS server, and then set each ISP's DNS on the router? will it then intelligently assign the correct DNS server depednin...

undecided

go for PCC configuration with correct routes and you will be fine if one of the links go down. You can look topics about that in here and on wiki Thanks! found it here http://wiki.mikrotik.com/wiki/Manual:PCC So just had a quick read, so can I configure my mikrotik router as the dns server, and thi...

undecided

Hi, I want to know if this is possible with routeros. I currently have just one WAN link to my ISP, this is a 4MB business line, I would like to add a second line to different ISP and this will likely be a 8MB line. My questions are, if interface bonding wont work, and NTH is my only option, if one ...

undecided

No body else ever experience this or have an idea as to what may cause it?

undecided

What is the CPU utilization? Are there any queues filling up? The packets are either getting delayed by QoS, or the router is too busy being a proxy to respond to ping, which is low priority. Depending on the size of your network consider putting in a dedicated proxy, such as Squid. Thanks again Fe...

undecided

Please, does anyone have an idea for me here? thanks

undecided

Anyone seen this or know what would be causing it, speedtests show a ping time of 240ms when trans web proxy is on, once turned off the ping times are 40ms.

any suggestions what woudl cause this? I don't want to turn off my proxy as I'm using it for web access data retention.

thanks

undecided

Thanks Fewi.

What is CoA?

Does anyone else know what the est way to track who has visited what site?

thanks

undecided

undecided

thanks for the help thus far, I've managed to get it working, I disabled pppoe encryption and it seems to work correctly now. I have two further question: 1. When I disable a connected user in user-manager, the user can still browse the internet, I have to remotely reboot his CPE device to get him d...

undecided

Guys, I've setup pppoe and have no dhcp configured on the routerboard, but have created a pool under the IP menu, which is used by pppoe. BUT when I connect with pppoe on my winddows 7 PC, i get an the last ip address configured in my pool....but don't get a gateway, dns and the subnet is set to 255...

undecided

So I have another router which is just a hotspot, it's a 750, I have two questions: First off, I've got radius and user-manager running on the 750. The hotspot is configured, except I cannot see the signup option for new users, I've configured my customer account with a public ID of 31, and when i u...

undecided

Thanks Fewi, this has worked, changing 255.255.0.0. to 172.16.0.0. Also the IP on the master port has worked as you suggested.

thanks for the help!

undecided

Thanks for helping Fewi, I will try it when I get a chance. I believe I was also setting the network parameter incorrectly...I was setting the netmask, i.e .255.255.0.0, when I should have been setting it as 172.16.0.0

Live and Learn!

thanks again.

undecided

You assign your IP to the master port. Post the output of "/ip address print detail", "/ip route print detail", "/interface print", "/ip firewall export", and an accurate network diagram. Thanks for your response Fewi, I don't have access to the RB right now ...

undecided

Can anyone help here? Where do I assign the gateway IP if I'm using the first 5 ports as a switch? If port 5 is the master? Do I set port 5 with my gateway IP? The clients on the switch are on 17.16.*.*, I want to e able to set a gateway of 17.16.*.* but don't know where to set it......... please an...

undecided

Just tried something else and still failing here. I've now turned off the master port and instead I've bridged the first 5 ports and given the bridge the gateway IP address of 172.16.1.254, I have three client devices connected to ports 1 through 3 with IP's in the 172.16 range, they can all ping ea...

undecided

HELP PLEASE!! I'm trying to configure this beast and it's making a laughing stock out of me. I'm using ports 1 through 5 as switch ports, port 5 being the master, ports 1 through 4 have access points plugged in on the 172.16.*.* subnet, I then have port 9 configured with my public IP address but can...

undecided

Hi just wanted some information regarding configuring a hotspot to support a few routed networks. I currently have a routerboard > Tower AP > CPE > Client AP, the hotspot identifies a connection at the client AP and prompts for a login, any subsequent connection on the same Client AP is allowed pass...

Search found 107 matches