MikroTik

MTeeker

Hi Normis, I may have missed it, but is it possible at all if the RBwAPG-60ad kit can be simply deployed without any further configuration on a non-MikroTik router? For example, plugging one unit to a LAN port of any router, then link wirelessly with the remaining unit as IF a continuous Ethernet ca...

MTeeker

Well, pcunite's post on QoS on VoIP is so comprehensive that I have come across on same topic. So thank you.

For reasons of security over IT, I would not use a server located in Israel. I have nothing against them though. Truth be told.

MTeeker

Perhaps, the linked article by Duxtel Australia may give you much clearer info on QoS for VoIP.

https://shop.duxtel.com.au/article_info ... cles_id=10

Good luck.
Peter F.

MTeeker

First some numbers. Depending on codec used but the best codec G.711 requires 128Kilobits per second for each VoIP phone's conversation (i.e. 64Kbps in each direction) to ensure Quality of Service (QoS). Assuming 30 VoIP phones are used concurrently at times, a total bandwidth of 3.84 Megabits/s wou...

MTeeker

hi, why this problem not solved?
please provide best solution.

It's been working since the last few updates as I recall.

MTeeker

I realise it's an old thread. But RB3011UiAS-RM configured as CAPsMAN, together with WAP AC as CAP, would be a far better solution than RB3011UiAS-2HnD-IN, IF it had been created and as people expected. I arrive at the above conclusion based on the capability of RB2011UiAS-2HnD-IN and WAP AC (i.e. t...

MTeeker

Just updated to 6.39 from 37.5. on RB2011UiAS-2HnD-IN. It went smoothly. It's nice to see IP Cloud (DDNS) starts working again. It has been broken for a quite while.... It could be irrelevant but I always ensure that all filename.npk (extracted form relevant zip), when placed under Files List tab, a...

MTeeker

Your scheme of having three devices functioning like routers (based on your drawing) in a network is kinda, using a metaphor, having three traffic cops doing the traffic directing at the same junction. More confusion is likely to be the case as car drivers do not know which cop to listen to when app...

MTeeker

Hello! I have learned that the OpenVPN within Mikrotik has some lacks (e.g. push route, etc)... BR Holger Add a route to your OpenVPN script for each of the networks behind the router (with OpenVPN server) that you want access. E.g. route 192.168.100.0 255.255.255.0 172.16.100.1 Where: 192.168.100....

MTeeker

I meant the mesh may work against the desirable ....

(Sorry for being sloppy).

MTeeker

I am not using Fast-Path (IP/Settings/Allow Fast pat) in case you still need an answer. I'd imagine you could have turned it off and see how the quality of VoIP calls is under that scenario. Failing that, I suspect the unavoidable latency from inside a dynamic mesh may work again the desirable (i.e....

MTeeker

My firewall has other priority specs (specifications) including VoIP-related and acceptance of established and related connections. This tends to produce conflicts such as hits and misses with specs configured under Simple Queue. Fast Track neutralises these priorities so I don't use it. Not specifi...

MTeeker

I don't think Simple Queue alone works well for QOS for VoIP. QOS for VoIP basically involves two simple steps. First, identify and mark the intended traffic for prioritisation; Secondly, set the priority specification. Here is a basic example: 1. Identify & Mark traffic /ip firewall mangle add acti...

MTeeker

Perhaps, it may be seen as only a cosmetic hiccup, but the Slave flag also switches place as well.

Here is a picture: http://imgur.com/a/gB1nc

MTeeker

....I am not sure if i know how to do that. I don't know much about Mikrotik configuration. Any link that might help me set up this? To start with, here is a link that gives some good background to your issues. Your project will involve several steps along the way. http://www.voip-info.org/wiki/vie...

MTeeker

Sorry, I was wrong. And did not expect an old thread to be revived. :-) As per OpenVPN site, TAP can not be used with Android or iOS devices. I used a free and open source app called Tunnelblick on Mac to connect to OpenVN server. Since Tunnelblick has both TAP and TUN drivers, hence my confusion. F...

MTeeker

If I am not wrong, I think you misunderstood LACP. Borrowing a metaphor. LACP is like having more than one two-way road. You will certainly experience less congestion on the road due to having more than one, from A to B. But it does not make your car faster than what is currently the speed limit on ...

MTeeker

By design, the letters in hexadecimal codes are not case sensitive as you know.

On MikroTik router, it's automatically converted into capitals for easy identification especially when reading scripts. I think.

MTeeker

I had a similar experience earlier. In updating RouterOS, my firewall rules were changed and rearranged in order to take advantage of features in the new version (I think it was 6.30 in my case) but my DNS service was accidentally exposed that led to my upstream leak. When leaking, it showed a highe...

MTeeker

change:
dev tun (for Android client) to dev tap (in the client script for Windows or iOS connection ).

also change:
Mode: ip (for Android) to Mode: ethernet (under /ppp OpenVPN sever setting)

MTeeker

In my opinion, there is always a trade off b/w advanced features and having a simple control panel. It's kinda having and enjoying the features of a 747 Boeing while preferring a simple control panel, say, of a single-engine Cessna. My understanding is Quick Set is designed for simple config and, pe...

MTeeker

i do not want to give internet access to those PCs so not assigning GW. I am not familiar with proxy, but taking a step back. I would stop Internet access on PC3 and PC5 using firewall rule while still giving these PC gateway addresses to enable ping. /ip firewall filter add action=drop chain=forwa...

MTeeker

Is there any way to connect as OpenVPN client to UDP 1194 port ? I think you missed the point that unless and until MikroTik implements it, a MikroTik router (as OpenVPN server) accepts only tcp protocol for openVPN connection. Default protocol for OpenVPN is 1194 (UDP) and this is not working ? As...

MTeeker

this two options can decide who can see server ip and mac address from win box I think it's more of device-centric issue, i.e. has to be done from the device which you want hidden. Otherwise, it's done via firewall rule as Jarda mentioned. However, if it's a MikroTik router, you can disable its, sa...

MTeeker

This is precisely the limitation I have with using Fasttrack. My upstream connection is maxed out at 2.4mbps (while I have a much bigger downstream pipe at 100mbps). I have 2 VoIP connections on my network. With Fasttrack running, FSF on VoIP conversations became negative. We have no problem hearing...

MTeeker

Sorry I can't offer an answer to your query as I can't figure it out for my similar requirement. I abandoned Fasttrack (for the time being) due to required QoS for my VoIP. I think the concept of Fasttrack is fine by itself. And MikroTik's effort is to be commended. However, traffic on a freeway at ...

MTeeker

I was given an hAP Lite at last MUM in Melbourne and did not know about mAP2n specs at all. So thanks for that info. Cheers.

MTeeker

For me, I think hAP lite is a perfectly suitable for on-the-road needs, more than for a household with more demands that are likely to stretch its capacity. Viewed in this way, standing up does no more useful purposes than 'sitting down' of the original case. As for being the traffic cop at home, I'...

MTeeker

Dst-port from outside, not src-port. Thanks for that. Over 24 hours only 195 Bytes were captured (i.e. rejected) under the tcp rule. None under udp protocol however. I thought more would have been captured if they were these main causes. It's not so hard to guess the reason as the symptoms are repe...

MTeeker

So look at the traffic what is it... Use torch. My guess is that you are part of dns amplification attack. Don't you have your dns service available to public, do you? You're very knowledgeable and sharp with your diagnosis. Thanks to you, I learned a few more lessons. I had a few DNS accounts for ...

MTeeker

I cannot reconcile between the high upstream bandwidth with the combined total upstream of individual interfaces. Even when I turned off all devices except 2 VoIP phones and a ovpn connection so I can identify and isolate the issue. It's even weirder when my nominal maximum upstream is 2.4mbps. In t...

MTeeker

Thanks for that explanation. I got mixed up.

MTeeker

@ jarda, I decided not to use Fast Track for the time being. Much along your reasoning but with less knowledge than you have. I am thinking about a potential flaw at the conceptual level. Imagine a convoy of delivery trucks arriving at my University gate, using a metaphor. The gatekeeper checks the ...

MTeeker

Thanks for the reply.

I have just now been able to isolate a local issue with my ISP which has nothing to do with Fasttrack effects, measured via Speedtest indicator.

Red face. Sorry for barking at the wrong tree.
Cheers

MTeeker

Would you be able to run a Sppedtest (Ookla) on your wired device and comment on it?

Many thanks.

MTeeker

Perhaps it's a trivial thing. But it does not make sense. When Fasttrack is engaged under 6.30.4, Speedtest.net (by Ookla) does not indicate a better performance that I would expect. In fact, it gives much lower performance than my nominal bandwidth 100mbps/down and 2.4mbps up. Does anybody have the...

MTeeker

I think the only remaining option for you is doing a Netinstall to cure any remnant of broken codes of RB911 at start up.

I suspect that it will fix the issue and allow subsequent rebooting.

MTeeker

From what I can see, the main constraint of Fasttrack is Qos of VoIP queue priorities. Simply because Fasttrack does not enlarge an existing bandwidth pipe, it only removes processing at internal 'checkpoint' to speed up delivery. From this angle though, the intended working of QoS of VoIP (using ma...

MTeeker

Jarda , I tried to post where Fast Track was discussed but the thread was closed. It crossed my mind that it was somehow a bit odd as your sharp eyes detected it. :-). My VoIP queue tree is based on mangle marking packets at pre-routing chain. And while Fast Track was on, my conversation was broken...

MTeeker

Unless I missed something, is my recap of Fast Track aspects below correct? Please chime in. Especially Jarda. FAST TRACK: Objective : Just to recap the issues in respect to Fast Track feature from 6.29 (from memory). How : To speed up subsequent incoming traffic packets ONCE the initial few from SA...

MTeeker

I did not specify a remote address in my PPP secret.

However for local address, if not specified, the vpn connection will get an IP from DHCP server. If specified, the connection will assume that as fixed IP. DHCP is not needed in that case.

Glad that it's working out for you.

MTeeker

You need to add a route to each network behind the ovpn server in order to access it, e.g.

route 192.168.1.0 255.255.255.0 10.0.0.1

where 192.168.1.0 is the local network address behind the ovpn server, its subnet mask then the gateway IP of open VPN.

MTeeker

Thanks for the hint.

Have just reported this issue of OpenVPN broken in 6.31 to MikroTik.

On a related issue. If Fast Track allows traffic to bypass firewall, does this mean that QoS settings such as for VoIP no longer works. Just wondering.

Regards

MTeeker

Hi Normis, (not sure if you are the recipient of this) Issue: OpenVPN is broken in 6.31 on my RB2011UiAS-2HnD (mipsbe) Attempts to connect to router (v6.31) via openVPN is no longer possible. Same result from various devices, PC, Android and smartphone. Connection via OpenVPN works previously on 6.3...

MTeeker

DynDNS update script not working after update to 6.30
One has 6.29 and script works fine, second has 6.30 and script is not updating DynDNS with new IP.

Not sure if you are aware but there is a built-in dynamic DNS feature using the router's serial number.

/IP Cloud.

Neat and simple.
Cheers

MTeeker

...(I get the VPN to work when I am home; it doesn't when I am on the road). Not sure if it applies in your specific VPN case. However if you can connect via VPN at home but not on the road, it seems your firewall needs to allow a range of specific IPs from remote location to be able to connect via...

MTeeker

So, I am still having policy issue with my VPN ..... If you consider using OpenVPN using MikroTik as server instead, I can offer you a detailed step-by-step instruction. Note that Microsoft, a member of the consortium behind the development of PPTP, specifically recommends against its use. As for L...

MTeeker

We did try to hire a professional to write our manual. I think it is appreciated by all, and thanks to MikroTik for trying. It ended in disaster, because indepth RouterOS knowledge is required to do this. I would not suggest a professional communicator WITHOUT a basic knowledge of networking fundam...

MTeeker

I was given this unit at MUM Australia last month. Janis told me it costs $22. Cheap was the first word that came to my mind. I had to temporarily put it on my home network while my RB493G was out of action due to a bad power supply. I was really surprised to see it handles my home traffic fine. Eve...

MTeeker

When it was editable by anyone, it only brought mistakes and problems. Currently we give edit rights to select people who have shown interest (trusted trainers with good knowledge). Hi Normis, With respect to those who are an expert of a subject, the knowledge transfer of that subject (to other peo...

MTeeker

That's interesting. Hmm. Video streaming over openvpn connection from my home NAS was definitely much smoother. From G3 connection on mobile phone. The only change which I am aware of was my redoing of netinstall on RB493G. But this was due to my first misdiagnosis of its faulty power supply. Two at...

MTeeker

on which miktotik model have you tested?

RB493G

MTeeker

The idea is to "fasttrack" some specific machine without slowing it's traffic for processing. Let's say you have a network of users, you have firewall and queues for them. But then you have a VIP customer (or your own PC) that you will not filter or slow down, and you want the best available speed ...

MTeeker

I got the answer to my own question at bottom of last post. OpenVPN server cannot accept dev tun (i.e. Android device) and dev tap (i.e. Windows) as clients concurrently. Use Ethernet mode for Windows-based device connection, and IP mode for Android devices. VPN providers must have different OVPN se...

MTeeker

Since the reply to my query was so overwhelming, [cough, cough], I feel my patience was tested to the limits at times with using MikroTik. But I love its value and full of features. I also wish some gentle push with appropriate efforts by MikroTik to make its products even more valuable in terms of ...

MTeeker

Initially I had same problem accessing LAN behind router even I had the routes specifically added in the client.ovpn script. e.g. route 192.168.1.0 255.255.255.0 172.20.1.1 (172.20.1.1 is the ovpn server IP address) In the end I added this: add chain=forward action=accept src-address=172.20.1.0/28 i...

MTeeker

Nobody has ever used an Android tablet to connect to MikroTik's OpenVPN? Like to securely access the LAN behind it?

MTeeker

V6.20 minor bug?

Time, Date, CPU, Memory and Uptime indicators disappear when Winbox is next opened.

It's minor thing but if it can be fixed, it would be great.

I am running the latest version of Winbox. I don't think it works on the previous version of Winbox either.

Many thanks.

MTeeker

Hi, I wonder if anyone has successfully managed to do so and would be so kind sharing their knowledge and point me in the right direction. You see, I have successfully connected to my RB493G via OpenVPN and also the LAN behind it, using my WIN7 PC. I also can connect via OpenVPN to a USA-based VPN s...

MTeeker

Thanks.

Let me try your suggestions fully and I will report back.

MTeeker

I need some kind help to complete this set up at home.

If it works as described in here: http://wiki.mikrotik.com/wiki/Wireless_repeater

It should work for the connection b/w the gateway and repeater (extender) by cable?

Thank you in anticipation.

MTeeker

I have dhcp running on RB493G. Both on ethernet and wlan. RB411A has static IP on ether1, connected back to RB493G. I have set a static DNS on RB411A and can now see the DNS on the ipconfig /all but still unable to get an outside link from the laptop connected via RB411A. I was of the understanding ...

MTeeker

I can't see the DNS entry from the result of ipconfig /all as you pointed out.

But I do have the DNS entries setup in RB411A.

Besides, Tool/Ping from inside of RB411A returns the ping?? I am lost.

MTeeker

. (2nd post by accident deleted)

MTeeker

Can somebody kindly help a person (that's me) willing to learn while out of work?

Thanks.

MTeeker

I want to extend the Wifi range of the (main) MikroTik RB493G by having the RB411 (in bridge mode) set up as an extender. It's connected to RB493G via ethernet cable. I believe that I can extend the wifi range of RB493G this way. As I understand, this setup is not WDS since it uses cable as backhaul...

MTeeker

Does anybody know of a case that allows more than one wireless card to be fiitted properly onto RB493G, pls.

With Mikrotik's CA/493 case, only one wireless card can be fitted without touching the case from the inside.

Many thanks

MTeeker

'And I'm in the process of getting a motherboard replacement in order to bring the box back into life. When ready, I will report on the speed testing of my Mikrotik bonding with HP 1810G switch . I have finally managed to get a replacement motherborad and all that jazz. But I am afraid that I may d...

MTeeker

Although mentioned in my last post, I am unable to report on the speed of my bonding at this time. (This reply is only a courtesy). The ASUS motherboard BIOS refused to boot up after a firmware flash that I started but somehow got hung halfway in my attempt to eliminate potential bottlenecks. And I'...

MTeeker

Thanks fewi, You made me think about my 'method' of testing over the last couple of days. Let me get back to your question once I have done some proper tests and once I sorted out some personal issues. A week or two at least. That way we know for sure. And perhaps others may benefit from it as well.

MTeeker

I thought you might be one of those helpful people who answer my query. :D I did what you suggest. Rebooted RB493G a few times and in between rebooting my HP1810. But I can't see any improvements in the traffic. In fact, it is a couple of MBytes lowwer than when I ran just one single cable b/w HP an...

MTeeker

I tried Mikrotik bonding method before. The traffic b/w hosts on my network became slower than before bonding. On this, I am not sure if my VLAN setting is incorrect and 'interferes' with the bonding. Here is an extract: # jun/17/2011 05:59:41 by RouterOS 5.4 # software id = # /interface ethernet se...

MTeeker

Pls ignore this post and refer to my later post of 12:22 June 15.

I earlier thought this post was lost in transit, hence my second post above.

Appreciate your interest.
Thank you.

MTeeker

Dear Gurus, I am confused and need some help, please. I understand that it's possible to increase throughput b/w RB493G and a capable switch that understands link aggregation (i.e. 802.3ad). • Given HP 1810G being a VLAN and link-aggregation capable switch, what would be the best way to achieve this...

MTeeker

I need some help with setting up link aggregation b/w RB493G and HP 1810G switch. I am confused. MikroTik offers 802.3ad link aggregation by way of bonding. This method, according to some people, uses CPU cycles of routerboad hence rendering it less effective. Instead, some guru suggested to use a s...

Search found 75 matches