MikroTik

opalit

I must be doing something wrong, I cannot get it to work, still assigning from pool even though I am using MAC address in Dalo Radius, do you use MAC as password as well and in this format 00:27:

opalit

Thanks that looks like what I did before /ppp secrets has use radius ticked as i use it with the PPPoE, question why do I need that ticked for DHCP? I use FreeRadius/Dalo Radius and I think I assigned the IP's using the MAC address last time I tried JUst been having a try and they were still not con...

opalit

Not sure how to do this but it is what I want to do. I did do it with radius a few years ago but something went wrong and customers were not getting internet, took ages to get everything back to working, so not tried since, my reason for having another go is that we had a massive DDOS attack last we...

opalit

Hi, I have a number of customers about 200 on my network most are assigned a public IP using Radius but some people have factory reset their routers and as such are assigned a local IP from the DHCP on my main Microtik CCR router so they can continue to access the internet, the same dhcp assigns loc...

opalit

I Used a SFP to RJ45 Media converter fitted with another RJ45 module to connect it to a 100Mps router and it worked fine

opalit

I have discovered the problem, it will only communicate with gigabit ports on other devices when used in a Ubiquiti UDM-Pro and the ports on the other routers I was connecting too only had 100Mbps ports, that is why it was not working, now it is connected to a BT smart hub it is working, need to put...

opalit

I have plugged it in to a Ubiquiti UDM-Pro so I can use the built in failover backup but it will only communicate with MikroTik devices, ( Routers Switches ), it will not communicate with anything else i.e. TP-Link routers, not even a Cisco router, is it faulty or is this by design?

opalit

It is an S-RJ01, see picture

IMG_20220730_160739_resized_20220730_040856995.jpg

opalit

I have an S-RJ01 plugged into a router and it will not work when connected to a TP-LINK router LAN PORT, it will work if connected to a MikroTik router LAN port, nothing else has a problem getting an IP address and allowing connection to Internet

opalit

I have a PowerBox Pro and POE auto is not working when voltage is 54v, ( I use 54v to 24v adaptors for the radios ) it works when Voltage is 24v, unfortunately 24v does not work over the cable length, any idea's why, works when power is forced on.

opalit

I have a 60Ghz link to a mountain mast, yesterday it simply stopped working, I had no communication with it and it was not showing in Winbox search, it has by default 192.168.88.200 on AP and 192.168.88.100 on the station, so I set 192.168.88.99/24 gateway 192.168.88.1 on my network PC network card,...

opalit

Mikrotik are supposed to be bringing out a Netpower 16P
You can already find and purchase this product...

Not yet seen the 16P for sale

opalit

] So you had to climb the mast after all??? [/quote] Yes and at 72 years old, and suffering with a virus infection, no mean feat I can tell you. I have just dug out the old SXT's and Sextants to create a simulation of the links to the mountain, so I can practise what you say in some of these posts M...

opalit

The solutions in the manual only work with direct cable connection not with wireless links That is actually wrong... It all depends on the Bonding Mode used... The bonding does not know if it has an Antenna connected to it or a wire, so it is up to you to perform a correct implementation of the bon...

opalit

The EdgeSwitch manual doesn't mention any type of port aggregation, the EP-S16 has LAG ( Link Aggregation Groups ), and supposedly with load balancing

opalit

have not found any solutions by googling yet. The solution is where it should be, in the Manual :D ARP monitoring sends ARP queries and uses the response as an indication that the link is operational https://wiki.mikrotik.com/wiki/Manual:Interface/Bonding#ARP_Monitoring Notice though, that this mod...

opalit

There are pro's and cons to be the one and only. I'm lucky I've always had other people able to climb the mast instead of me when necessary so far. Get well soon. That thing is tricky, you think it's over and then it strikes the second time. But I've just done a test here, and although @nerdafterda...

opalit

I think I will be one of the first in the queue for the NetPower 16P

opalit

That thing is tricky, you think it's over and then it strikes the second time.

And the third time over the last 5 weeks

opalit

My 8 Port Ubiquiti does not have LAG ( Link Aggregation Groups ) so cannot test Bonding and failover. Well, you could still test using the "real" switch up there, as the LAG can have a single active link (or even a single link at all, but the EdgeSwitch's configuration seems to require at...

opalit

Sure there is no coordination and the links obviously will not share the traffic equally. However am sure it would help to a certain point...

My 8 Port Ubiquiti does not have LAG ( Link Aggregation Groups ) so cannot test Bonding and failover.

opalit

@Zacharias, responding to various points: i said LACP between Mikrotik and Ubiquiti in case the later supports it... This makes us 4 Antennas and not 2 as you said... And the antennas would not play any role in the actual LACP process except the ptp connection of sites... We have share of bandwidth...

opalit

@opalit the E for the Ubiquiti means it excluded and my backup link port is excluded from the default Group ? @sindy, if i wanted to implement the exact same thing with a 24port Mikrotik switch,i would add all 24 ports in my Bridge, then i could let e.g. the 12 first ports with PVID 1 the rest 12 w...

opalit

I see... Can you sum up the overall changes you had to do as far as the VLANs are concerned ? Switched S16 to Legacy mode, ( easier ), create a VLAN ID 100, change the U on the secondary link port to E ( Exclude ) on default VLAN ID 1, change the corresponding ports setting from E to U on VLAN ID 1...

opalit

I am at the moment to ill to go up to the mast to fix if I screw up. Yes that would be bad am sure :D I have 10 Live AP's and one data only link on the S16 so cannot risk a screw up, I do have a Pico radio on the back of the S16, so I do have a way back in without climbing the mast if I scew up.

opalit

I turned off my simple QoS queue so I could get fast track back on. I thought that would help. @sindy i said LACP between Mikrotik and Ubiquiti in case the later supports it... This makes us 4 Antennas and not 2 as you said... And the antennas would not play any role in the actual LACP process exce...

opalit

No changes anywhere but on the edgeswitch. The whole exercise is just to partition the edgeswitch into two virtual switches using the vlan 2 which will imitate the powerbox. Just trying this at the moment, I have created a VLAN ID 100 on the EdgeSwitch, excluded the link from VLAN ID 1 and added Un...

opalit

Thanks, everytime I have played with VLAN's live, ( they seem to work on the bench ) I end up getting in a mess and locked out, so I have a couple of questions. Do I have to add VLAN's to the AP Radios that are connecting to the Edgeswitch and the customers CPE's connecting to those AP's or just cre...

opalit

OH, this will not be easy to do on a very hot live link, I think I will have to split them manually by installing a PowerBox Pro connected to one link and some of the radios connected in to that.

opalit

Well, you could use LACP, 802.3ad protocol between the Mikrotik and the Edge switch, if the Ubiquiti supports the protocol as well, you will have to check that out... Also my concern is that CCR1009 will not support the protocol in hardware level... It would be best to use the CCR as router and a C...

opalit

I am trying to bond two PTP wireless links to a mountain site that I have and use to distribute broadband around the community, I have a MikroTik RB1100AHx4 ( soon to be replaced CCR 1009 ), one link uses two LHG 60G's and the other uses two Ubiquiti Lightbeam AC GEN 2's, this link is only used if t...

opalit

You don't need to use a public subnet between routers, you can use 10.x.x.x or 100.64.x.x ranges. Then you can put a single IP on the Router that has the PCs using a new bridge as a loopback and NAT to the single IP. Just replace the /30 route with a /32 route. You probably can, I am lost at this. ...

opalit

Got it working, I sub-netted a /30 range from my /26 range, then setup static routes through the AHx2 to the PowerBox Pro, setup nat on the PB pro and the PC's connect to the internet and when i do what is my IP, I get the /30 IP i have issued.

This is not ideal because I am using 4 IP's

opalit

Not sure I understand how your setup looks but I mainly see three options 1) Static routes (or dynamic) 2) Bridges & VLAN 3) VPLS or EoIP tunnels. I need to route one of my public IP's through to the powerbox Pro WAN, if the PowerBox pro was connected to the AHx4, assigning an static IP with a ...

opalit

This is probably basic stuff for many of you but I am struggling, I have an RB1100AHx2 and an AHx4 and a power box pro router and I need to route a public IP through to the Power box pro. The RB1100AHx4 is the main router and has on the WAN one end of a /30 from the ISP, I have a /29, /26 and a /25 ...

opalit

Daloradius is a web program for administering the FreeRadius database, it is very good, but there may be occasions when manual administration may be necessary.

opalit

I have a RB1100AHx4 setup as a router and on it I have PPPoE server configured, the server communicates with a FreeRadius server on another Linux machine which checks authentication and returns the Framed_IP-address ( the assigned Public IP ), t has been working for sometime like this. I now need to...

opalit

You can set the RADIUS to send a Framed-Pool attribute to any unknown devices. Make sure to have such address pool on the Mikrotik router, so the DHCP will use that address pool for unregistered devices. http://i63.tinypic.com/2mfm45h.png Where do I enter unknown, do I create a user called unknown ...

opalit

I have an RB1100AHx2 when I use the PPPoE client, it will not connect if I use a service name other than service1, i.e. service 2. I am connecting to a RB1100AHx4 running a PPPoE server and I have 3 services assigning IP's from different ranges to clients via a Freeradius server running on another m...

opalit

Just realised I have my Linux radius server in a virtual machine running on the network, I could put a port forward to that, it has iperf.

opalit

I know that, but the supplier will not accept there is something wrong with cable unless tested with iperf, so I think iperf on comp and port forwarded might be the way to go.

opalit

About all I can do it a comp but that will not prove the line, no-way can I disconnect 200 Users, while I test the line.

opalit

No version for MikroTik

opalit

I suspect a fibre line fault but the supplier needs iperf running at my end to test the line, how can he do a line check to the MikroTik router, we have a 200Mbps wires only circuit and my router is an RB1100AHx4

opalit

I am trying to setup SNMP so my supplier can monitor the line, they only have setups for Cisco and Draytek routers one of the IP addresses are x.x.x.0/0.0.0.255, x being the numbers and 0.0.0.255 being the wildcard, how do I represent the wildcard? Does anybody know how to replicate Draytek or Cisco...

opalit

Thanks to support, I now have the link staying up, it is a 840.44m link, whilst still not 100% in alignment it is working OK. I upgraded to the Beta 6.44.Beta20 firmware and ran command /interface w60g align wlan60-1 and adjusted to get the lowest RSSI reading which is now -51 I also replaced the mo...

opalit

After running /interface w60g align wlan60-1 on AP side and getting "connected no". I left it a bit and it started running, however it says tx-sector-info: centre, I would have thought this means it is pretty much in alignment, I have cherry picker coming this weekend to have another go, n...

opalit

Form supout.rif files - RSSI signal on one side is way off. Latest beta version includes align mode - for easier alignment. it would help us improve, if we get some user feedback. To use align mode run on both sides: /interface w60g align wlan60-1 RSSI and sector information will change rapidly, ad...

opalit

Did you solve this, I believe it is possible and works on my setup after a fashion, however the database reports show thousands of access reject messages for clients that are not in the database, the DHCP server then assigns these clients an IP from the pool. This may be less of a problem when I hav...

opalit

OK, thanks, in that case I probably will not need it, I have enough adjustment.

opalit

Is there a built in 5 degree angle for which it is to compensate for or is it just to give extra range to adjustment

opalit

errrrr I am a dumbo one of them brain freezes.

opalit

Is the built in 5 degrees angle up or down, ( I am assuming down ), i.e. fit at the bottom of the mounting bracket, there is up down movement on the bracket but I suspect that might be where my problem is, not enough adjustment to give me the height.

opalit

at a ripe old age of 71, I am struggling to take this VPLS stuff in, I will get it eventually but these days takes me a little longer. From the presentation it is not quite what I am trying to do unless I have not understood it, at both end I have 2 interfaces in bridges, these interfaces are connec...

opalit

What are we supposed to do with the 5 degree angle corrector, where does it fit, how is it used.

opalit

What is meant by FD

opalit

The Greg Sowell tutorial is for full duplex, not really wanting that, need to bond the two bridged interfaces together with failover, this is easy with two switches and cables between but with the wireless links the RB still thinks the link is there when one goes down. Why don't do FD and uses the ...

opalit

Can this be done and can anybody help, I am trying to bond 2 wireless links together with failover, I have a RB at each end of the 2 links, one is up on a mountain and one is at the main site where the fibre comes in, I am struggling at the moment with supplying bandwidth to the mountain transmitter...

opalit

The Greg Sowell tutorial is for full duplex, not really wanting that, need to bond the two bridged interfaces together with failover, this is easy with two switches and cables between but with the wireless links the RB still thinks the link is there when one goes down.

opalit

I have just been to site to have a look at a configuration of a PowerBox I screwed up, and cannot even get to management at site, everything is working except I cannot log on, cannot even see MAC address with Winbox but I can see the CAPS connected to the PowerBox but not the Box itself, while it is...

opalit

That is not a test mode though, that will revert to previous configuration if you screw it up, Ubiquiti kit has a test mode, if you screw up and cannot access the unit, it reverts to previous config and you are back in.

opalit

MikroTik, is there any chance of a test mode, before applying a configuration being incorporated, I have to travel a 30 Mile round trip to site to re-configure because I made a mistake configuring a Powerbox router, apart from that my customer has been off-line all night and this morning and cannot ...

opalit

Can anybody help, I have two wireless links from my masts on the mountain, I have an RB2011 RM up there and two wireless links down to my workshop where the fibre cable comes in and connected to a RB1100AHx4, the AHx4 connects to an AHx2 which is connected to the two wireless links, at the moment I ...

opalit

I hope this is OK, I purchased an ideal length of Din rail off eBay for mounting Powerboxes on walls, rather than buy a long length and keep having to cut it down, costs me more in time cutting it down, than buying these pieces

https://www.ebay.co.uk/itm/282084559231

opalit

I am using 64800 frequency, if there is a unit out of alignment it is probably the AP end as this was put up first and a cherry picker is required again to make any adjustments. By the way which is the AP, I assumed the one labelled Master was the AP and this has wlan60-1 and wlan60-station-1 but th...

opalit

One end is on a pole on my house the other is on the mountain at the back of the house, elevation is 13%

opalit

That is what I was looking at, first to get close I used eye site, then I used the LED's, then switched to my laptop for fine tuning.

opalit

Firmware is 6.43.4 before this firmware was put on there was no link at all, The alignment only shows on one unit, there is no /interface wg60 align command anymore, the alignment showing is .6 up .6 right which is pretty close., will send support files.

opalit

I do not know how I can get it much better than .6 up and .6 right

opalit

They are not good enough to use on their own which is what I need so I can free up some 5Ghz channels

opalit

If that is the case I think I will send them back as not fit for purpose.

opalit

MikroTik claim 1.5 kilometers so at 840m it should be working fine, alignment is shown as .6 right and .6 up, I have tried to get better but slightest movement knocks it out.

opalit

I have used /Interface Bond but before doing that I removed the two interfaces ether1 and ether2 from the bridge then after adding them as slaves to bonding1, I have balance rr selected as mode, I then added the bonded interface to the Bridge, the throughput drops to virtually zero when the two cabl...

opalit

Help Please, I am trying to bond two wireless links together because the LHG60 link is not reliable enough drops when raining and I need some resilience and redundancy, I also need some extra throughput. What happens is when I connect the second link transmitter it just pulls down the throughput to ...

opalit

I have setup a new 60Ghz link using 2 x LHG-60's bought as a kit, the link was good -64db over 840.44m but as soon as it rains the link goes down.

opalit

Just set up a link using a pair of LHG 60's supplied as one kit, initially they did not work, I updated the firmware 6.43.4 and the link came up, it is 840m, RSSI is -64DB, alignment is 0.6 up and .6 right, PHY Rate 1155.0Mbps, SIGNAL 40, MCS 4, TX Sector 62, RX Sector 96. Everything seemed perfect ...

opalit

The AHx4 with the latest firmware is installed now and I am using layer 7 and other methods as I have public IP's for all my customers and registered to them now, so it is not as critical as it was to block it, they have been warned about illegal distribution.

opalit

Sorted this problem now, I had to delete the slaves under CAPsMAN and recreate them, it is strange but the new ones created look identical to the ones I deleted.

opalit

Help, I have setup 4 x RBcAPGi-5acD2nD Duel Band cAP's to a PowerBox Pro, the Pro was initially setup as a router running CapsMan and everything works fine, as there was already a router on the Network I decided to set the Pro up as a Bridge and set up a VLAN on the router ID 100 and setup a VLAN on...

opalit

I have used Netinstall on this device in the dim and distant past without any problems, I am using eth13, will try disabling firewall and all unused ports. This RB1100 AHx2 has been replaced by an RB1100AHx4 and after it was taken out of main service it was reset to factory without any problems, wha...

opalit

It is even worse, I cannot even netinstall anything, it does not show up in order to do it, I can still use the router by manually configuring it but cannot upgrade, downgrade or load backups

opalit

I think my RB1100AHx2 routerboard has been compromised, I cannot restore any backup or do a reset with no configuration, how can I check this out?.
It is on version v6.3.1, I know there are later versions but that is the versions of my backup, I will upgrade once I get the backup in

opalit

I have an RB1100AHx2 that has been replaced by a AHx4 so decided to use the AHx2 for my local router, I have set up PPPoE connection and it works fine until I enter the service, I have 3 ranges of IP's and I use the service entry to assign IP's from the different ranges using radius via the AHx4 rou...

opalit

I am using MAC, I am using the connection I used to get in before IP were assigned, just realised it is not discoverable, I am connecting with a saved connection with the MAC already in.

I will leave it like that so I have a back door.

opalit

I have a PowerBox Pro configured as a Router and running CapsMan I am trying to block winbox input to the unit via WAN port which is sfp1, I have the following rule but it does not seem to work. chain=input action=drop in-interface=sfp1 log=no log-prefix="" I have also tried chain=input ac...

opalit

I have a PowerBox pro ( controller ) and two dualband cAP's ac RBcAPGi-5acD2nD and when the power is disconnected they do not reconnect without a factory reset to put them back in to cAP mode. any idea what might be wrong, they are working fine until there is a power outage.

opalit

No, I did not miss setting the country, the country is UK, I also have two Sextants and the frequencies are there on the sextants.

opalit

I have a pair of SXT 5HnD's had them for sometime and I wanted to use one for a CPE so I could run CapsMan on it, but I find loads of Frequencies missing 5500 to 5700, why is this.

opalit

I will give that a try, each router would have their own static IP, issued to the PPPoE connections by my radius server when their WAN ports 11 and 12 are connected to my main router which is a RB1100AHx4, they both have different LAN subnets one is 192.168.0.0/24 and the other is 192.168.1.0/24 , w...

opalit

Is it possible to have the 2 five port banks of switches on an RB1100AHx2 emulate 2 masquerading nat routers via port 11 and port 12.

I have tried it out both banks return the same IP when one does Whats My IP in Google, the LAN's are on different local ranges as are the IP's on WAN ports 11 and 12.

opalit

Before I do that, I decided to export the full script from the ahx2 and remove user manger references, I reset the ahx4 with no default configuration set, then imported the script, it imports it but finishes wanting me to enter an interface, gone through the script not sure what interface it wants m...

opalit

I am trying to get an RB1100AHx4 working, which is replacing my Trusty RB1100AHx2, which has a faulty port, probably a dry Joint, I have copied all my scripts across and the configuration looks the same, I have checked all the menu and sub menus and they look the same, however I cannot get any data ...

opalit

Help Please, I am Switching over from RB1100AHx2 to RB1100AHx4 and have copied all my scripts across, modified the layer-7 protocols etc. added extra for bit-torrent blocking ( tested on AHx2 ) everything seems OK, so I swapped them over and nothing is working, nothing, except I can log on to it. I ...

opalit

It is working and still working on my old router which I have not yet replaced, it blocks the use of the BitTorrent program, all the Layer7 examples I have tried are doing nothing.

opalit

It was blocking, it was showing next to the filter how much traffic it was blocking, I am very disappointed it has been removed, it should be our choice if we want to use it or not.

opalit

I know it has been removed my RB1100AHx2 is on v6.31, I have no reason to change firmware, it has been working without problems for at least 6 years, I am having my fibre line updated to 200Mbps on a Gigabit bearer so need to upgrade the router and so I purchased a RB1100AHx4, my thinking is that it...

opalit

in the firewall filter section P2P missing on my new RB1100AHx4 Dude edition, I get a message that it is obsolete and to use layer 7, it is there on my old RB1100AHx2 and been working perfectly for last 6 years how can I replicate it using layer 7., I need to block bittorrent

opalit

Does anybody know the physical size of RB2011UAS-RM mainboard, since firmware 6.41 All the ports can be bridge to the same bridge or different bridges., I want to move the switch to the pole and fit inside a waterproof box, to reduce cable length the bridging will allow me to switch in redundant lin...

opalit

There is No Master/Slave settings under Interface tab on an RB2011UAS-RM to make them in to 2 separate switches, is this correct, firmware is v6.41

opalit

I have one model of Router a TrendNet TEW-731BR that will not connect using PPPoE it tries but drops out after 30 sec., in the Encoding Column of connections Tab, it is the only router that shows MPPE 128 Statefull/none every other router has a blank entry, so I am assuming it is trying to connect u...

opalit

Me neither but it does stop it and causes all PPPoE connections to drop, hence the panic

opalit

The original post says that your router is pinging the gateway. Then later you say that somebody else (from iran) is pinging your router. Which one is it? It all started because of flood pings from Iran and Germany slowing down the network. According to the logs it initially looked as if the RB was...

opalit

Do you think that one thread is not enough? http://forum.mikrotik.com/viewtopic.php?p=503535#p503535 Trolling comments are not useful, if you do not know the product or have nothing constructive to add do not comment. If you look at 'jarda's' amount of posts it looks to me he is a more advanced use...

opalit

Do you think that one thread is not enough? http://forum.mikrotik.com/viewtopic.php?p=503535#p503535 Trolling comments are not useful, if you do not know the product or have nothing constructive to add do not comment. If you look at 'jarda's' amount of posts it looks to me he is a more advanced use...

opalit

Do you think that one thread is not enough?

http://forum.mikrotik.com/viewtopic.php ... 35#p503535

Trolling comments are not useful, if you do not know the product or have nothing constructive to add do not comment.

opalit

It depends on your agreement with the isp. Kindly get in touch with them and clarify your needs and their approach. I am sure you can reach a working result. I have, it is what they do and there was nothing in the agreement about this. My last question was has anybody else come across this?. I do n...

opalit

Thanks for all you help, I have solved the problem, my ISP's gateway router is pinging my router, when I drop the reply type 0 or drop the input type 8 or accept with a limit, the internet was dropping out. I have put an accept with both source and destination being mine and the ISP's router before ...

opalit

I wonder why you hadn't asked your isp before you asked here...

I did not know that the new ISP was doing that, previous provider one did not.

opalit

Problem is now solved, the internet providers gateway was pinging my WAN port, if I blocked it, by blocking all pings the internet stopped working, by putting in an accept rule for the gateway and then the block rule I can block all icmp reply's type 0 for the rest of the internet. I have never come...

opalit

this should drop all pings without affecting your internet connection: /ip firewall filter add action=drop chain=input comment=Ping protocol=icmp Re-checking the logs, it is replying to the gateways ping on the wan, if I block this ping the internet stops working, I can block all ping from elsewher...

opalit

My Internet provider is constantly pinging WAN port IP from the gateway about 3 pings every few seconds, blocking it blocks all internet access, which is why I have been having trouble with no internet when pings are blocked, I have never come across this before, so I am wondering if it is normal or...

opalit

there is also an option in radius server - called routes. If there is only one spesific - customer - its easy to do this by adding just one customer in ppp - secrets. there you have the route option. There is also possible to do this with the framed-route parameter from radius. There is also a lot ...

opalit

/ip route add dst-address=xxxxx src-address=yyyyy Thanks for this, I did try that rule some time ago but for some reason at that time it did not work and I had to use 2 radius servers with different login details for the different users, even that did not work as it should some users were not getti...

opalit

Is your current solution acceptable for you or still not so much?

I would like to block all ping replies but no solution offered on the forum sees to work, everything tried so far stops the internet working.

opalit

Does anybody know if it is possible to have a RouterBoard accept a connection from a PPPoE user but have that connection route via a different router that is not configured as an access controller.

If you know how to do it can you please help.

opalit

So stop responding to them.. That is why I am trying to block pings, as posted elsewhere on this site, every time I try to block pings or turn off icmp type 0, echo reply, the internet stops working and all my customers PPPoE connections start dropping out. At the moment it is restricted to 5 And t...

opalit

I am getting hammered with pings from Iranian and German IP addresses as well.

opalit

Maybe you have netwatch enabled ?

No not enabled, as far as I am aware, I have nothing enabled that should be pinging the gateway.

opalit

Is it normal for my RB1100AHx2 to ping the gateway even though check gateway is not enabled, i.e. not set to ping or arp.

opalit

blocking ICMP on the input chain only affects the router. the question is, who is being abused: the router or some hosts behind it. forwarding ICMP storms is just like forwarding anything else, no extra impact, if your router handles x pps traffic, it will not care whether it's ICMP or anything els...

opalit

Please try the link. I'm sure that 8:0 is a ping request but the ping replay is 0:0 19 ;;; 8:0 and limit for 5pac/s | Echo Request chain=ICMP action=accept protocol=icmp icmp-options=8:0 limit=5,5 20 ;;; 0:0 and limit for 5pac/s | Echo replay chain=ICMP action=drop protocol=icmp icmp-options=0:0 li...

opalit

> /ip firewall filter add chain=input protocol=icmp action=drop in-interface=WAN > > If I use this command it blocks all internet access from other routers that have internet access via this router Yes. ICMP is much more than ping, and by blocking ICMP in general you also block useful mechanisms. Y...

opalit

I am trying to block pings on the WAN port of my RB1100AHx2 which due to a supplier change now connects direct to Internet with it own static IP of through another router and I am getting massive ping attacks on the WAN. I have searched the knowledge base and keep getting the following command as a ...

opalit

The CPU was at 27% that is all not over worked just because they are connected does not mean data going through. There is a limit of PPPoE connections on level 5 license, it is supposed to be 500 on Level 3 200 not 112, It is working fine on the RB1100AHx2 with the same configuration, so it is not a...

opalit

In the middle of the night I backed up all the configuration of the RB2011UASRM by exporting each section to .rsc files and restored on to my old RB1100AHx2 with 5.25 on it ( if it is not broke do not fix ) having first made sure the interface names matched those of the RB2011 done this a few times ...

opalit

Already tried creating a secret in the PPP section and removing it from the radius, I tried it with both Dynamic assigned IP from pool and static assigned IP address, exactly the same problem under addresses it shows DI and it is in red and no route created, so it nothing to do with radius, again ev...

opalit

Everything looks OK in the Logs, user 112 and 113 are identical except for user name and assigned IP, what is different is the router table, no route has been assigned for user 113. I can switch off user 112 and reboot user 113 so it becomes 112, and it works, switch on the old 112, it becomes 113 a...

opalit

There are 10 IP's left in the pool 3 are reserved, almost all the IP's are statically assigned via the Radius server Framed-IP Address attribute, these were all assigned top down 254-14, pool runs from .4 to .13, inclusive therefore the pool cannot overrun the static IP's Because the MikroTik takes ...

opalit

I have a RB2011UAS RM and when any user after total of 112 are connected they show in red and invalid under /ip addresses and cannot connect to internet, if I remove a user and then remove the one in red, the one in red connects OK, if I then connect the one that was OK invalid.

opalit

I keep getting under addresses tab DI <Address> <Network> pppoe-<User Name> and it will in red and user cannot connect internet, user is connected PPPoE server and assigned an IP, it is intermittent and random users, I brought one router back to workshop even changed its login details no different, ...

opalit

I have a number of Ubiquiti radios as bridged units and TP-Link Routers in customers houses configured as PPPoE clients, the PPPoE server is on a RB2011 firmware 6.1 at the moment, has been 6.3 made no difference to this problem. When I look at Active Connections I have noticed that the MAC addresse...

opalit

Hi opalit, please enable debug logging for "pppoe" and "interface". Maybe you'll get some helpful additional information. And again, please tell us your RouterOS version and your RouterBoard firmware version. AFAIK, there were port flapping issues in the past. Ape Running firmwa...

opalit

Hi, do you see ethernet port status changes in the router's log? Did you notice connection drops? What RouterOS, whar RouterBoard firmware? To what kind of device ether1 is connected to? Ape I am getting severe dropouts which effect PPPoE users more than others. Not noticed anything in log other PP...

opalit

I have a RB 2011UAC-RM and I am seeing a momentary gaps in traffic, it is consistent as it moves of too the left another one appears, see image.

I have a RB1100AHx2 and when I replace the 1100 with it, I do not see the gaps in traffic.

opalit

Does anybody know of a Free syslog server that actually works with a routerboard, Syslog Watcher works great but is only a demo and Cisco ASA Log Server works only on XP and does not log date and time.

opalit

I have a RB110AHx2 and I have a number of users on PPPoE, and had for a couple of years, this morning however under Active Connections -> Uptime, the uptime for some users has started counting down.

opalit

A such cable should be in the package content of RB2011.

My god so it is, it was stuck underneath, so I did not see it when I lifted out the cardboard.

opalit

I have a RB751G-2HD and I have a USB disk attached for saving the log files to.

I noticed that RB2011UAS RM and some core routers have a Micro USB, I assume I could do the same that if I could get a cable, does anybody know what type the cable is and where I might get one in UK.

opalit

Ok, I thought you had a problem. And I think it is caused by misunderstanding, not by
possible firewall issues. But when all is OK, good for you!

I have a problem with the new firmware not the old firmware I have been using for the past 4 1/2 years

opalit

Blocking ICMP is not the same as blocking PING! ICMP is much more than PING! Many firewall operators do not understand that and cut themselves in the thumb. ICMP = Internet Control Message Protocol. This is also used for things like determining the MTU of the next hop. As you are using PPPoE, your ...

opalit

When you are in an environment using PPPoE (and thus issues with different MTU) then blocking all ICMP is a perfect recipe for big trouble. Don't do it... I have been blocking all incoming pings on the WAN port for 4 and 1/2 years now and not had any problems at all, until I started using the 2011U...

opalit

ICMP is not just PING! Blocking all ICMP is an extremely bad idea, and may inhibit communication when the MTU of your link is less than that of your local network. At the very least put such a rule later in the chain than permit ESTABLISHED and RELATED rules. I will try it in the middle of the nigh...

opalit

the following command prevents internet access on RB2011UASRM

/ip firewall filter
chain=input action=drop protocol=icmp log=no log-prefix=""

I would expect this rule to just block pings.

opalit

Anybody know how to flash a RB2011UAC-RM, I was having some trouble with radius server hogging a request, so I downgraded the firmware to the version I thought was on it when I got it. After that it just keeps going on and off and I lose connection to it, so I need to flash it using netinstall to up...

opalit

I have 2 Routerboards an RB1100AHx2 and a 2011UAS, both are routers to different Internet routes I have them configured to use Freeradius, server which uses MySQL and Daloradius I need to have different users go out over different routers, so I set the NAS Identifier as a user check attribute along ...

opalit

I have 2 routers both connected to the internet, on one Router 1 the WAN is set to *.*.137.243/28 and the other Router 2 has *.*.137.242/28 on its WAN, both are connected to the same switch and connected to the backhaul router which has *.*.137.6 /27 on the WAN and *.*.137.241/28 on the LAN Router 1...

opalit

interesting. Did you send supout file mikrotik support ? I wonder , Why would router do such a thing ? No it is well out of warranty Very strange as there is no login associated with the changes, I do not no if it is connected to the changes but it is no longer working as it has been for almost 12 ...

opalit

Anyone know if queues created by PPPoE Server authenticated with Radius or DHCP authenticated with Radius have a large overhead?

opalit

this is not normal. You can use remote syslog and should review log everyday. you don't use close service. (Ssh, api, api-ssl, telnet etc) and define the absolute MAC address for winbox or ssh etc remote access. for example /ip firewall filter add action=drop chain=input comment="Winbox Access...

opalit

I am nearly there with this, the network settings can specify the gateway and the customers router now gets the correct IP, Netmask, Gateway and DNS settings but there is still no route to internet. However the only way I can get a return route from the internet is by putting in a static route in to...

opalit

I have a number of client routers that connect to the Network, initially I used DHCP, then started to use PPPoE configured on a bridge, the overhead was to much and everything slowed down when I got to about 100 Users, now thanks to ZeroByte, it is no longer on a bridge, I use FreeRadius for authent...

opalit

My logs show my WAN link went down last night, then came straight back up, then the next 5 entries are as follows. "system, info MikroTik1: item removed" "system, info MikroTik1: item removed" "system, info MikroTik1: item added" "system, info MikroTik1: item added...

opalit

I have an RB2011UASRM, it has 2 x 5 port banks what appear as separate banks. I have tried to use them as if they are separate, I have configured one as a NAT router with a public IP *.*.137.242/28 on the WAN and Local subnet on LAN, the first port on the bank is the WAN and the others switched toge...

opalit

P.S. If I put local IP on the wlan1 and NAT on the Wan would that not screw up the routing for the PPPoE nope - suppose you put 10.10.10.1/24 on the wlan, and dhcp server. You can have NAT with exactly this one and only NAT rule in the entire system: /ip firewall nat add chain=srcnat src-address=10...

opalit

This will depend on each wireless device's ability to create a tagged in-band management VLAN. The Mikrotik portion is straightforward - Create a bridge, and call it "Mgmt" - put the management network on this interface e.g. 10.0.0.1/24 Now choose some vlan tag e.g. 10 - Every interface w...

opalit

That makes sense, thanks a lot, when I get all the PPPoE configured routers working, I will probably be back regarding VLAN on Mikrotik for the radio management. Thanks a million. There's a thread going on about that right now - and it's got some good answers, especially if you have UBNT gear - som...

opalit

That makes sense, thanks a lot, when I get all the PPPoE configured routers working, I will probably be back regarding VLAN on Mikrotik for the radio management.

Thanks a million.

opalit

P.S. I thought everything was OK, but when I go into /ip route there is an dynamic route to wlan1 that is unreachable Sure - nobody's attached to wlan1 right? Only when an interface is active will a dynamic connected route be active. If I add wlan1 to a bridge on its own and assign the LAN IP to th...

opalit

P.S. If I put local IP on the wlan1 and NAT on the Wan would that not screw up the routing for the PPPoE nope - suppose you put 10.10.10.1/24 on the wlan, and dhcp server. You can have NAT with exactly this one and only NAT rule in the entire system: /ip firewall nat add chain=srcnat src-address=10...

opalit

P.S. If I put local IP on the wlan1 and NAT on the Wan would that not screw up the routing for the PPPoE nope - suppose you put 10.10.10.1/24 on the wlan, and dhcp server. You can have NAT with exactly this one and only NAT rule in the entire system: /ip firewall nat add chain=srcnat src-address=10...

opalit

I do not suppose there is anyway to get the Wi-Fi working without a bridge. By the way it also works by assigning the profile local IP to the LAN port, although I have done what you said and assigned it to WAN, I just tried it. If you want to use the WiFi as a local administrative access while on-s...

opalit

I do not suppose there is anyway to get the Wi-Fi working without a bridge. By the way it also works by assigning the profile local IP to the LAN port, although I have done what you said and assigned it to WAN, I just tried it. If you want to use the WiFi as a local administrative access while on-s...

opalit

I also have the following ranges to supply to customers routers, *.*.138.0 - 128 /25, 126 Useable IP's and *.*.138.128 - 192 /26, 62 usable IP's .129 to .191, these are the addresses I am trying to assign to customers routers using a PPPoE server and I can do it no problem with a bridge configured,...

opalit

You can PM me with your un-edited configuration. (removing any passwords / private keys / etc. would be okay - just don't change any IP addresses / mac addresses / etc.) /export compact You can right-click the terminal window and choose "copy all" Also - explain in general terms what your...

opalit

I'm not PPPoE expert, but once I tried it in past just had to write some Route rules...

I have just got it to work without a bridge on a test unit which has NAT on the WAN, but on a public routed system, I can not make it work.

opalit

People say you can do PPPoE without a bridge ( the bridge causing slowdown ) on an RB, well I have tried and I can not make it work, even bought a new RB951-2HnD to play with, so I do not screw up my live stuff. I have no trouble making it work with a bridge, I have multiple RB's all communicating w...

opalit

I am trying to set up multiple routers as NAS on the Network with one Radius server but only one of them seems to authenticate and it authenticates all users, I have tried setting NAS identity in Radius to that of each route that the user must use, but still the same router authenticates the users. ...

opalit

I think you've let this get more complicated than it needs to be. I don't see how removing a LAN side bridge could kick you out if you're coming in from the WAN side. If you have 3 interfaces that you want to all be served by the same pppoe service, then yes, use a bridge - and connect the 3 interf...

opalit

[quote="ZeroByte"]I think you've let this get more complicated than it needs to be. I don't see how removing a LAN side bridge could kick you out if you're coming in from the WAN side. I was coming in from LAN and forgot to set a local IP on the interface there was one on the Bridge. So wh...

opalit

Thanks a lot ZeroByte, I must have had a brain freeze of something, it was just the static route from MikroTik to the IP address, static works now, believe it or not I have never used the static routing of public IP's on the MicroTik before, I went straight in to PPPoE. on a bridge. or 1:1 NAT on my...

opalit

Ok - so if you're 100% certain the IP addresses are set correctly (make sure the network=____ is correct too - if you change IPs this can get messed up) on each interface and the IP/Mask/default GW is correct on the client devices, then it's time to look for more exotic things - arp is enabled, no ...

opalit

I will get back to you with the info you asked after I have done the tests, I am not using DHCP to assign the PPPoE addresses on this router they are all setup in Daloradius/Freeradius server. I had to assign a bridge before the built pppoe server would work, so how do you black hole it?. This route...

opalit

Thanks a lot for the help. What you say is similar to what I have done, except I am using the 138.125/25 on the LAN interface of the router as the gateway for anything connected to the other ports of the switch, I want to assign 138.1 to 138.124 to customers CPE's as single static IP addresses on th...

opalit

The ranges I have been given by the ISP are *.*.137.240 - 255 /28 or 255.255.255.240, 14 useable IP's which are .241 - .254, the gateway on upstream router is 137.241 mask is 255.255.255.240 Other Ranges are *.*.138.0-128 /25 mask is 255.255.255.128 ( 126 usable ) and *.*.138.128-192 /26 mask is 255...

opalit

Typo keys did not respond to my light touch, :- the WAN is *.*.137.242/28

And yes it should be straight forward, try as I may it will not work, as I said if I set it up as PPPoE server no problem

opalit

Hi I have a problem with routing, I am trying to route to a router connected to the internet, I have 5 subnets in 2 public ranges and on this router 2 subnets of 2 ranges are being used, one on the WAN and one on the LAN and 2 subnets on one range on the upstream router. I have a static IP on the WA...

opalit

I am trying to use PPPoE with 2 MikroTik routers and I have it working with 2 seperate installs of Freeradius and Daloradius, the 2 routers connect to the same backhaul and have different public IP ranges going to them, the WAN's are on the same range different IP's. One router is natted and has one...

opalit

Where is 6.17, not on downloads page, also can not find VPN wizard in 6.16 as claimed in newsletter

opalit

i forget my usermanager password

login to RB using putty on port 22 or something.

execute /tool user-manager customer print , you will see your customer login name and password

opalit

I finally got in to user manager on my Mikrotik RB2011UAS Router, and imported database and deleted users I don't want on this router, I have configured a new user but it will not work, I can point radius settings to my main network Radius Server that uses Daloradius, the user connects, if I point i...

opalit

Problem solved must use userman in url not usermanager

opalit

Code: Select all
/tool user data
clear-log
y
rebuild
y
and reboot....

Just tried this, still give invalid login name or password

opalit

I have 2 x MikroTik Routers and I can not login to user-manager on either of them with web browser, it used to work have hundreds of users setup and they all work as PPPoE clients, but I can not login to add more. One of the routers is an RB1100AHx2 that I have been using for the last 3 years I have...

opalit

For some reason I can no longer log in to user-manager on either of my RB 1100 Routers

I have been to /tool user-manager customer print and the login name and password I am using is correct.

I have restored from a backup that was working but I am having the same problem

opalit

No I have not done any upgrades, but last weekend, low and behold it let me log in, you can see from the post how long it has been out of action. I have no explanation everything looks fine, have updated the users to match my Dalaradius entries on the main radius server, I only use the user manager ...

opalit

I have a IPSEC VPN tunnel, between 2 offices, an ASA5505 at main site, and NETGEAR VPN router at remote and the tunnel is fine and I can log on to the RB750 using web or winbox from remote side of tunnel but try as I may, I can not route to a subnet through the RB750. I can however route to the subn...

opalit

in v6 we have now a custom channels feature, where you can define much wider channel. http://wiki.mikrotik.com/wiki/Manual:Wireless_Advanced_Channels To enable this, you must email support and sign a form that you will use this feature according to local law. Hi normis, Unfortunately this extra is ...

opalit

I have been using the user manager over 2 Years now and for some reason I can no longer log in, everything seems to be working just can not log in. If I login using putty on on port 22 then go to /tool user-manager customer print , it shows I am using the correct login name and password. I have trie...

opalit

Anybody know how many PPPoE users a RB1100AHx2 can handle, I am having a problem with more than 140 as soon as I put on any extra the speeds drop off even for existing users.

I can add the extra users as DHCP users and they are not affected.

opalit

I am experiencing a lot of problems with wireless devices connected to the RB751-2HnD. I bought 3 units, in 2 different periods of time (2 when they became available several months ago, and one which arrived today). Local distributor said the last one is a new revision. They are all configured as a...

opalit

Try with no country set in wireless setting. No 40Mhz on its own channel setting only 20/40 HT Above or Below Tried a few countries like Brazil, US, Korea and no_country_set they are all the same. I found an old link, see if it helps you http://forum.mikrotik.com/viewtopic.php?f=3&t=46858 Thank...

opalit

Try with no country set in wireless setting.

No 40Mhz on its own channel setting only 20/40 HT Above or Below

Tried a few countries like Brazil, US, Korea and no_country_set they are all the same.

opalit

For some reason over the last couple of days my RB1100AHx2 is not allowing more that about 5Mbps through it when using PPPoE even though the queues are showing 10Mbps. As soon as I switch them to DHCP, I get the full bandwith that the customers CPE is set to which in this case is 12Mbps. There have ...

opalit

paste both end configuration from this command: /interface wireless export P.S. How does one set a 40MHz channel width, there only seems to be 20/40 above or 20/40 below, I do not want it above or below. Again ... 40mhz channels are not for Europe ... If you really want to use different frequencies...

opalit

paste both end configuration from this command:

ros code
/interface wireless export

P.S.

How does one set a 40MHz channel width, there only seems to be 20/40 above or 20/40 below, I do not want it above or below.

opalit

paste both end configuration from this command:

ros code
/interface wireless export

Apologies, I had not entered it in the scan list correctly, it works now THANKS.

Any idea what range I can get with a pair of these.

I am trying to get 10Mbps over a distance 17.5k

opalit

paste both end configuration from this command:

ros code
/interface wireless export

They are disconnected at the moment, will do it when I have time to rig them up again

opalit

You must also add 5840 to the "scan list" setting on the client end, otherwise it doesn't know which frequency to look at.

I have done that, no other frequency except those that are shown in bold type will work.

opalit

Yes, if you personally have a license, it means that UK in general has 5.8 restricted. In this case, change wireless mode to "superchannel" and your frequencies will be unlocked. This mode is for people who have licenses outside their country default regulations. I have done that but the ...

opalit

which country have configured ? as 5.8Ghz is not allowed in all countries you can't configure it with the wrong setting.

I am in the UK and I have a licence for 5.8MHz

Search found 242 matches