Community discussions

MikroTik App

Search found 167 matches

by jacekes
Thu Oct 31, 2019 12:40 pm
Forum: Announcements
Topic: v6.45.7 [stable] is released!
Replies: 104
Views: 41897

Re: v6.45.7 [stable] is released!

Thanks Emils!
by jacekes
Thu Oct 31, 2019 11:26 am
Forum: Announcements
Topic: v6.45.7 [stable] is released!
Replies: 104
Views: 41897

Re: v6.45.7 [stable] is released!

Why do both v6.45.x and v7beta keep appearing in turns in the development channel?
by jacekes
Mon Nov 23, 2015 6:34 pm
Forum: General
Topic: VRF routing table leakage? SMIPS issue?
Replies: 6
Views: 945

Re: VRF routing table leakage? SMIPS issue?

:-O
Now I'm shocked.
I swear I've seen it working properly...
by jacekes
Mon Nov 23, 2015 9:09 am
Forum: General
Topic: VRF routing table leakage? SMIPS issue?
Replies: 6
Views: 945

Re: VRF routing table leakage? SMIPS issue?

Do you mean only smips?
I've been using VRF's on mipsbe, x86 and powerpc since early routeros v5 and it always worked fine.
by jacekes
Sun Nov 22, 2015 11:59 pm
Forum: General
Topic: VRF routing table leakage? SMIPS issue?
Replies: 6
Views: 945

Re: VRF routing table leakage? SMIPS issue?

I mean version 6.33.1 of course...
by jacekes
Sun Nov 22, 2015 11:56 pm
Forum: General
Topic: VRF routing table leakage? SMIPS issue?
Replies: 6
Views: 945

VRF routing table leakage? SMIPS issue?

Hi, I've been recently doing some basic labs using: - GNS3 running a couple of Cisco 3745 and 7200VXR - RB941 hAP lite RouterOS ver 6.31.1 The topology of the lab network is not really important, the point is I needed a VRF - a pair virtual ciscos had BGP sessions with the main routing table of the ...
by jacekes
Wed Sep 16, 2015 3:00 pm
Forum: Wireless Networking
Topic: cAP2n Questions [SOLVED]
Replies: 2
Views: 809

Re: cAP2n Questions [SOLVED]

Are you sure the default route is properly set on the CAP's?
by jacekes
Mon Jul 20, 2015 2:07 pm
Forum: General
Topic: RouterOS v6.31rc7
Replies: 1
Views: 1762

Re: RouterOS v6.31rc7

Yep, something's changed on the website.
Until now there were links to "6latest" package files, without any info about the version of the file.
Now v6.31rc7 is openly available on the website, and the "6latest" link still directs to v6.31rc6.

Won't the "6latest" links be updated any more?
by jacekes
Tue Apr 07, 2015 9:42 pm
Forum: Wireless Networking
Topic: log: no beacons received
Replies: 2
Views: 1210

Re: log: no beacons received

No, I haven't tried it. I will. Thanks for the hint. The area is maybe 50 x 30 m ant the route looks like this: /--------\ | | \---\ | | | X | | | | | | | | \----/ X is the access point location, about 4 m above ground level, about 3 m above the station antennas. The access point has a panel antenna...
by jacekes
Tue Apr 07, 2015 12:55 pm
Forum: Wireless Networking
Topic: log: no beacons received
Replies: 2
Views: 1210

log: no beacons received

Hi, I know this topic has already been mentioned meany times before, but it seems there was no solution found yet. I have about 25 RB Metal 5SHPn wireless stations. These stations are located in a magazine hall and they are mounted on trolleys which move slowly along a looped route, slower than walk...
by jacekes
Sat Jan 17, 2015 9:33 pm
Forum: Wireless Networking
Topic: SSID Problem
Replies: 16
Views: 2548

Re: SSID Problem

Export the configuration from your neighbor's CPE and compare it with yours.
by jacekes
Wed Jan 07, 2015 2:07 pm
Forum: General
Topic: tow wan connection
Replies: 5
Views: 1356

Re: tow wan connection

You're welcome. :)
by jacekes
Wed Jan 07, 2015 2:06 pm
Forum: Beginner Basics
Topic: Connec two networks (routers) via LAN ports
Replies: 4
Views: 979

Re: Connec two networks (routers) via LAN ports

Happy to hear that. :-)
by jacekes
Mon Jan 05, 2015 5:44 pm
Forum: Wireless Networking
Topic: SSID Problem
Replies: 16
Views: 2548

Re: SSID Problem

Yes, now I get it.

After what Uldis had written I really wonder how those other two manage to connect. :D
by jacekes
Mon Jan 05, 2015 5:23 pm
Forum: Wireless Networking
Topic: SSID Problem
Replies: 16
Views: 2548

Re: SSID Problem

that the others use is 6.16 and 6.18. I have also tested those ones and the result is the same.
You mean it connected on the older version or not? :-)
by jacekes
Mon Jan 05, 2015 4:46 pm
Forum: Beginner Basics
Topic: connecting to wireless modem ( Tp link ) by router 951
Replies: 2
Views: 1197

Re: connecting to wireless modem ( Tp link ) by router 951

What kind of IP address do you get from the wireless DSL modem? Public or private?
Is the DSL modem acting as router or bridge?
by jacekes
Mon Jan 05, 2015 4:43 pm
Forum: Beginner Basics
Topic: Connec two networks (routers) via LAN ports
Replies: 4
Views: 979

Re: Connec two networks (routers) via LAN ports

I see you're using the best network-diagram software ever! I also like it very much! ;-) The easiest way - add a secondary IP address from the 192.168.88.0/24 network on the LAN interface of the Sagemcom. I don't know that device, maybe it's possible. If you're not able to do that, this should work:...
by jacekes
Mon Jan 05, 2015 4:23 pm
Forum: Wireless Networking
Topic: SSID Problem
Replies: 16
Views: 2548

Re: SSID Problem

Hmmm... I'd try the same software version as on the connected ones.

What versions do you use?
by jacekes
Sun Jan 04, 2015 6:55 pm
Forum: Wireless Networking
Topic: using "connect list"
Replies: 3
Views: 1749

Re: using "connect list"

There's no need to configure anything extra on the AP.
And yes, these rules will forbid the station to connect, when these conditions are met.
by jacekes
Sun Jan 04, 2015 1:17 pm
Forum: General
Topic: HW suggestion: Router (2*WLAN, Gbit Ethernet)
Replies: 16
Views: 2741

Re: HW suggestion: Router (2*WLAN, Gbit Ethernet)

Nope, CRS109-8G-1S-2HnD-IN doesn't have 2 radios. Two antennas ≠ two radios. ;)
by jacekes
Sun Jan 04, 2015 12:23 pm
Forum: Beginner Basics
Topic: how to upload a script for storage in the script repository
Replies: 1
Views: 741

Re: how to upload a script for storage in the script reposit

Encapsulating it into a "/system script add" command is the right way. It's also worth remembering you might need to escape special characters in the script source.
by jacekes
Sun Jan 04, 2015 12:08 pm
Forum: General
Topic: tow wan connection
Replies: 5
Views: 1356

Re: tow wan connection

No, you have only marked routing, based on a connection mark, that has never been applied. You have no mangle rules with action=mark-connection and these apply the connection mark. I would try adding these before your existing rules: /ip fire man add chain=prerouting in-interf=ISP1 action=mark-conn ...
by jacekes
Sat Jan 03, 2015 8:42 pm
Forum: Beginner Basics
Topic: how many marks on a packet
Replies: 5
Views: 2288

Re: how many marks on a packet

As far as I remember, one mark of each type can be used.
So a packet can have a packet mark, be part of a marked connection and be routed accordingly to a routing mark.
by jacekes
Sat Jan 03, 2015 8:06 pm
Forum: Wireless Networking
Topic: SSID Problem
Replies: 16
Views: 2548

Re: SSID Problem

It's probably simple: guifi.net is the company website address, so the customers in range can check it out and request services. Ripoll-Catllar-Remei are probably the places, which are in range, or the place where the AP is located. Probably to make it easier to connect new customesr for the radio t...
by jacekes
Sat Jan 03, 2015 7:50 pm
Forum: Wireless Networking
Topic: How to do this?
Replies: 9
Views: 1893

Re: How to do this?

Weird. Should be possible. What version are you running?

The other possibility is to add vlan subinterfaces on wlan and ether interfaces of all SXT's and bridges to connect them.
by jacekes
Sat Jan 03, 2015 7:44 pm
Forum: Wireless Networking
Topic: SSID Problem
Replies: 16
Views: 2548

Re: SSID Problem

The 32-character limit is defined in the 802.11 standard.
Your AP does not comply to that limit. You should change the SSID.
by jacekes
Sat Jan 03, 2015 7:36 pm
Forum: General
Topic: tow wan connection
Replies: 5
Views: 1356

Re: tow wan connection

I guess the incoming connections from the internet don't get marked properly, so the outbound traffic from the server in such a connection uses the wrong (ISP1) default route. You use connection marks in /ip firewall mangle, but I don't see any rule where you would apply these connection marks to th...
by jacekes
Sat Jan 03, 2015 7:30 pm
Forum: General
Topic: PoE Gear
Replies: 2
Views: 760

Re: PoE Gear

When I needed managed PoE, I used Ubiquiti's ToughSwitch PoE Pro. They were quite good, but used to freeze once in a while. As far as I remember, they were also not fully transparent for GRE. Out-of-the-box PoE? Used them many times. Never analyzed whether the devices which broke down did it because...
by jacekes
Sat Jan 03, 2015 7:23 pm
Forum: Beginner Basics
Topic: Firewall help [SOLVED]
Replies: 3
Views: 757

Re: Firewall help

Do you accept established and related connections on forward chain? If not, you should.
by jacekes
Mon Dec 29, 2014 6:34 pm
Forum: Wireless Networking
Topic: How to do this?
Replies: 9
Views: 1893

Re: How to do this?

MTU, not L2MTU.
You don't need to add all the vlans on SXT devices. You only need to add these, which you need, for example for management access.
by jacekes
Sun Dec 28, 2014 4:38 pm
Forum: Beginner Basics
Topic: clarification requested basic firewall
Replies: 1
Views: 649

Re: clarification requested basic firewall

Yes, it is.
by jacekes
Sun Dec 28, 2014 2:25 pm
Forum: General
Topic: Test racks
Replies: 75
Views: 26805

Re: Test racks

Nice racks. Lately I've been thinking about a way to organize my home lab. I have a couple of devices (some 433's, 411'a and 333's, some PCEngines boards and a 951-2n), none of them is rackmount, most of them don't even have any enclosure. Until now all that stuff is lying around on the desk altoget...
by jacekes
Sat Dec 27, 2014 11:23 pm
Forum: Wireless Networking
Topic: How to do this?
Replies: 9
Views: 1893

Re: How to do this?

Red wire? :-o Actually there's much more writing about it, than configuring... RB951 building 1: create a bridge interface for each vlan add IP addresses to the bridge interfaces and configure respective DHCP server instances create VLAN sub-interfaces on the interface towards the SXTAC add the subi...
by jacekes
Sat Dec 27, 2014 3:18 pm
Forum: Beginner Basics
Topic: How to enable the being ping from outside
Replies: 7
Views: 6858

Re: How to enable the being ping from outside

Remove the "place-before=[find chain=input]" and paste the command again. It should be added wothout any errors.
Than open IP->Firewall->Filter in winbox, in the top-right corner choose "input" from the drop down box, and then move the last visible rule as the last one before the first dropping rule.
by jacekes
Sat Dec 27, 2014 12:42 am
Forum: General
Topic: USB/Serial port for UDP connection
Replies: 5
Views: 1805

Re: USB/Serial port for UDP connection

PPTP won't work. Needs TCP handshake on port 1723.
PPPoE sounds better - try to setup a PPPoE server on one side and a PPPoE client on the other. Then establish the TCP (special login or remote access/RFC2217) inside the PPPoE.
by jacekes
Sat Dec 27, 2014 12:03 am
Forum: Beginner Basics
Topic: Radius Server
Replies: 4
Views: 1234

Re: Radius Server

I wonder if you really need a radius server or usermanager at all.
You can create hotspot accounts in /ip hotspot user. I don't see any limit for these.
by jacekes
Fri Dec 26, 2014 10:27 pm
Forum: Beginner Basics
Topic: Radius Server
Replies: 4
Views: 1234

Re: Radius Server

If you use an external radius server, you will only be limited to 200 active hotspot sessions. There are several scenarios to deploy a radius server, depending on the needs, google it. I can't tell which scenario will be the best for you. On Mikrotik you will need to add the radius IP and ports to /...
by jacekes
Fri Dec 26, 2014 10:13 pm
Forum: General
Topic: USB/Serial port for UDP connection
Replies: 5
Views: 1805

Re: USB/Serial port for UDP connection

I can fully understand the need for the serial connection, nothing unusual. I think you might try some kind of UDP tunneling, but unfortunately I can't help you here, I'm no good when it comes to tunneling. Or if everything else fails, you could put another computer before the serial device, open a ...
by jacekes
Fri Dec 26, 2014 10:09 pm
Forum: Beginner Basics
Topic: How to enable the being ping from outside
Replies: 7
Views: 6858

Re: How to enable the being ping from outside

The default settings on RouterBOARD block all input from WAN.
Hmmm... not all, at least not for all boards. As far as I remember the default firewall settings for 75x and 951 allow ICMP on the input chain.
by jacekes
Fri Dec 26, 2014 7:16 pm
Forum: Beginner Basics
Topic: How to enable the being ping from outside
Replies: 7
Views: 6858

Re: How to enable the being ping from outside

That depends on your firewall settings. Do you drop icmp requests?
by jacekes
Fri Dec 26, 2014 7:14 pm
Forum: General
Topic: USB/Serial port for UDP connection
Replies: 5
Views: 1805

Re: USB/Serial port for UDP connection

Hmmm... The "no TCP" limitation is really troublesome here.
There are functions like:
* System -> special login (redirect telnet / ssh session to serial port for a specified user);
* System -> ports -> remote access (also a form of telnet session redirection),
but they all work over TCP.
by jacekes
Tue Dec 23, 2014 9:29 am
Forum: General
Topic: Remote access
Replies: 3
Views: 895

Re: Remote access

Hi, what kind of router is it? I would check the firewall first, routers like RB75*, RB95* have a default firewall setup, which prevent from accessing the router from the WAN interface. In IP->firewall->filter, chain input the last rule probably is a drop rule for in-interface=ether1-gateway. I prop...
by jacekes
Mon Dec 22, 2014 2:43 pm
Forum: Wireless Networking
Topic: Multiple Networks Via One Sector AP
Replies: 4
Views: 1100

Re: Multiple Networks Via One Sector AP

It's possible to use more than one address on one interface of the router - one public and one private. Use the public address as the gateway for premium customers and the private for basic customers. It's a very simple way to do it, the clients are not separated in terms of L2. There are several mo...
by jacekes
Mon Dec 22, 2014 2:23 pm
Forum: General
Topic: How to Block "Hola Better Internet" Add In
Replies: 3
Views: 4594

Re: How to Block "Hola Better Internet" Add In

I don't know how this addon works, I'd install on a known computer and examine what's visible in torch on the router. Then try to come up with a proper blocking rule.
by jacekes
Mon Dec 22, 2014 2:15 pm
Forum: Beginner Basics
Topic: Problem with pppoe + ddns + port redirection
Replies: 2
Views: 646

Re: Problem with pppoe + ddns + port redirection

Are you sure it's the resolving that fails? I doubt it... Try nslookup myserver.org from a computer inside the local network and also :put [:resolve myserver.org] on your mikrotik router. Try to use http://(your current public I address) from inside the network. If the name resolves ok, I would try ...
by jacekes
Mon Dec 22, 2014 1:41 pm
Forum: General
Topic: Validate Dynamic IP: Port Knock or other?
Replies: 3
Views: 1086

Re: Validate Dynamic IP: Port Knock or other?

It's possible to knock a TCP port from Mikrotik.
Use /system telnet <destination IP> port=<port number>
Unfortunately there's no way to execute it with a short timeout.
by jacekes
Mon Dec 22, 2014 1:28 pm
Forum: Beginner Basics
Topic: Regarding https sites not redirected to hotspot portals
Replies: 2
Views: 1106

Re: Regarding https sites not redirected to hotspot portals

It should work also for secured sites.
Check if you have a redirect rule for dst-port 443 in IP -> firewall -> NAT. This rule should be dynamic and automatically added by the hotspot dialog.
by jacekes
Mon Dec 22, 2014 1:20 pm
Forum: Beginner Basics
Topic: Configure router to use its public IP address to access Inte
Replies: 1
Views: 527

Re: Configure router to use its public IP address to access

If it was Mikrotik instead of Cisco, I think I'd know how to do it. ;) I'm not a cisco Cisco expert, but: 1. you can replace the private 192.168.1.0/24 subnet with a public /30 subnet, this will surely work 2. you can set up a loopback interface on the firewall router with a public IP address, confi...
by jacekes
Mon Dec 22, 2014 1:03 pm
Forum: Beginner Basics
Topic: Mixing Brands
Replies: 2
Views: 593

Re: Mixing Brands

But it's worth to mention that wireless equipment shouldn't be mixed.
You can build a wireless bridge with MT on one side and UBNT on the other, but you won't be able to use vendor-specific protocols, which provide much better effectivity. The same with sector and clients.
by jacekes
Thu Dec 04, 2014 9:38 pm
Forum: General
Topic: firewall optimization vs CPU usage
Replies: 0
Views: 737

firewall optimization vs CPU usage

Hi, I am recently helping a small wireless ISP optimize the configuration of their edge router. The ISP is using a RB1200 with RouterOS v6.20. They have a little more than 200 customers, the traffic reaching 50 Mb/s at peak. Mangle and Queue tree is used to limit customer traffic. CPU usage reaches ...
by jacekes
Wed Nov 12, 2014 12:31 pm
Forum: Beginner Basics
Topic: Combining 5 natted networks on one CCR router
Replies: 2
Views: 686

Re: Combining 5 natted networks on one CCR router

I think you need to address the 192.168.x.0/24 subnet gateways on the SFP interfaces and add firewall rules to NAT each 192.168.x.0/24 to a single 1.1.1.(x+1)/29 address, that is:
/ip fire nat add chain=srcnat src-address=192.168.x.0/24 action=src-nat to-addresses=1.1.1.(x+1)
by jacekes
Thu Nov 06, 2014 7:56 pm
Forum: Beginner Basics
Topic: NAT with routed subnet (/28 via a /30) on one device
Replies: 2
Views: 916

Re: NAT with routed subnet (/28 via a /30) on one device

The second NAT rule is proper. What subnet mask have you configured on the bridge-routed interface? The rest of your config looks ok. What do you mean by "but traffic returned to the RB2011 didn't make it back to the test device at .23"? For example when you sent ping from 172.16.0.23 to 30.30.30.73...
by jacekes
Thu Nov 06, 2014 3:37 pm
Forum: General
Topic: NAT Masquerade problem in 6.20.1
Replies: 4
Views: 2003

Re: NAT Masquerade problem in 6.20.1

Show the configs of the interfaces on both sides and the NAT rule. A schematic, including IP addressing, would be very helpful. It's difficult to help you, when you don't even say what you want to NAT.
by jacekes
Wed Nov 05, 2014 9:18 am
Forum: General
Topic: Log TCP connection
Replies: 14
Views: 3719

Re: Log TCP connection

In my case it was 100 GB of cleartext logs per 1000 customers yearly.
When packed with ZIP using strong compression the amount went down to about 6 GB.
by jacekes
Tue Nov 04, 2014 10:18 pm
Forum: General
Topic: Log TCP connection
Replies: 14
Views: 3719

Re: Log TCP connection

On the router, which is translating the CPE private addresses to public addresses.
Yes, log to a remote server with a large disk or a matrix.
by jacekes
Tue Nov 04, 2014 9:30 pm
Forum: General
Topic: Log TCP connection
Replies: 14
Views: 3719

Re: Log TCP connection

Do not enable remote logging on each CPE, it makes no sense.
Enable logging on your edge router, the one, that's doing the NAT.
by jacekes
Tue Nov 04, 2014 12:28 pm
Forum: Beginner Basics
Topic: Public and Private IP together
Replies: 3
Views: 781

Re: Public and Private IP together

Yes, you can add a third address on an interface.
To set up a VLAN go to interface->vlan and click add. Configure the VLAN ID, and attach the vlan interface to an ethernet interface.
by jacekes
Mon Nov 03, 2014 10:50 am
Forum: Beginner Basics
Topic: Public and Private IP together
Replies: 3
Views: 781

Re: Public and Private IP together

There's no need to use VLANs.
You can set up two IP addresses on the ether3 interface to be the default gateways. The public address will be the gateway for the computers with public addresses. The private address will be the gateway for computers with private addresses.
by jacekes
Mon Nov 03, 2014 10:37 am
Forum: Beginner Basics
Topic: Bridge settings
Replies: 10
Views: 2214

Re: Bridge settings

No, you only need to add the ethernet interfaces to the bridge.
You should be able to see the MAC addresses of the PCs in Bridge->Hosts.
by jacekes
Sun Nov 02, 2014 4:27 pm
Forum: General
Topic: Log TCP connection
Replies: 14
Views: 3719

Re: Log TCP connection

Don't mirror anything. Use RouterOS logging and a syslog daemon on a server. Enable logging on the NATing rule (in RouterOS 6.20) or in older RouterOS versions add a rule: /ip fire filter add chain=forward proto=tcp connection-state=new action=log and move it to the top of the list. You will also ha...
by jacekes
Sun Nov 02, 2014 10:47 am
Forum: Beginner Basics
Topic: Is it possible to setup a VPN route like this with RB2011?
Replies: 14
Views: 2411

Re: Is it possible to setup a VPN route like this with RB201

A bridge works in layer 2, without routing, in the same subnet. So you're doing routing, not bridging.
Check if the RB2011 masquerades the 192.168.88.0/24 network, by default it does.
by jacekes
Sun Nov 02, 2014 10:42 am
Forum: Wireless Networking
Topic: how to save&send all activity on mikrotik, logs,bandwidth et
Replies: 3
Views: 1826

Re: how to save&send all activity on mikrotik, logs,bandwidt

From my experience from a much larger wireless ISP:
* Set up a linux server.
* For logs use Splunk.
* For bandwidth graphs and device monitoring and email notifications use Cacti.
* Set up bash scripts to collect device backups over FTP to your server
by jacekes
Sat Nov 01, 2014 11:30 pm
Forum: Wireless Networking
Topic: PC - Router as basestation
Replies: 11
Views: 2087

Re: PC - Router as basestation

Some people here claim to have ~70 customers using NV2 on radios like NetMetal. And I guess it's possible in a carefully and professionaly maintained network, but I have never acheived that much. I have observed problems when having more than 30 clients on one interface, but the signal parameters va...
by jacekes
Sat Nov 01, 2014 10:52 am
Forum: Wireless Networking
Topic: is their better NV2 stability in ros 6.x then 5.26?
Replies: 10
Views: 1978

Re: is their better NV2 stability in ros 6.x then 5.26?

I can also suggest setting the data rates and/or MCS static.
by jacekes
Sat Nov 01, 2014 10:48 am
Forum: Beginner Basics
Topic: PPTP pool size
Replies: 8
Views: 1961

Re: PPTP pool size

Oh, so there's more config than just the PPTP? :D Basically, you have had overlapping addresses - LAN interface address overlapped with remote and local addresses in PPTP. I guess you should fix the overlapping the way I suggested in the previous post and then change src-address in the masquerade an...
by jacekes
Sat Nov 01, 2014 12:50 am
Forum: Wireless Networking
Topic: is their better NV2 stability in ros 6.x then 5.26?
Replies: 10
Views: 1978

Re: is their better NV2 stability in ros 6.x then 5.26?

I don't understand. You say the CCQ went up after the client disconnected? So the CCQ is 95% when there is no client? :D
by jacekes
Sat Nov 01, 2014 12:47 am
Forum: Beginner Basics
Topic: PPTP pool size
Replies: 8
Views: 1961

Re: PPTP pool size

Set the local-address and remote-address pool to something completely different, for example:
local-address 172.16.105.0/24.
remote-address 172.16.205.0/24
Addresses in pptp can and should be from completely different subnet, than interface address.
by jacekes
Sat Nov 01, 2014 12:42 am
Forum: Wireless Networking
Topic: is their better NV2 stability in ros 6.x then 5.26?
Replies: 10
Views: 1978

Re: is their better NV2 stability in ros 6.x then 5.26?

CCQ at 90-95% is very good.
What kind of stability problems do you have? Do the links disconnect, lose packets or do you mean unstable signal parameters?
by jacekes
Fri Oct 31, 2014 11:12 pm
Forum: Wireless Networking
Topic: PC - Router as basestation
Replies: 11
Views: 2087

Re: PC - Router as basestation

You want to connect 250 clients to one sector or to one tower (with many sectors)? I would suggest 8 sectors. 250/8~=30 customers per radio interface. That's possible, with NV2 can be quite efficient. I once managed a tower with 8 sectors + 5 point-to-point links to other towers. The spectrum was al...
by jacekes
Fri Oct 31, 2014 10:52 pm
Forum: Wireless Networking
Topic: PC - Router as basestation
Replies: 11
Views: 2087

Re: PC - Router as basestation

A PC won't manage so many clients too.
I guess you should use more sectors, narrow angle sectors.
by jacekes
Fri Oct 31, 2014 10:51 pm
Forum: Beginner Basics
Topic: PPTP pool size
Replies: 8
Views: 1961

Re: PPTP pool size

What interface do you address with 192.168.100.1/23?

Do you use PPTP tunnels to connect customers?

Paste the output of:
/interface print
/ip address print
by jacekes
Fri Oct 31, 2014 10:30 pm
Forum: Beginner Basics
Topic: PPTP pool size
Replies: 8
Views: 1961

Re: PPTP pool size

Do you use the pool for local-address or remote-address?
Doesn't the /23 pool overlap with some other address space you use?
by jacekes
Fri Oct 31, 2014 10:27 pm
Forum: Wireless Networking
Topic: PC - Router as basestation
Replies: 11
Views: 2087

Re: PC - Router as basestation

Using PCs as routers/base stations - this is the origin, where RouterOS comes from. There were times, when the only possibility to use RouterOS was to install it on a x86 PC. Later came RouterBoards. Using a powerful PC with RouterOS makes sense when you want to do a lot of queueing or firewalling. ...
by jacekes
Fri Oct 31, 2014 8:07 pm
Forum: Beginner Basics
Topic: VPN from vista
Replies: 2
Views: 863

Re: VPN from vista

You've supplied very little details. What kind of VPN connection are you trying to use? PPTP? SSTP?
by jacekes
Fri Oct 31, 2014 12:59 pm
Forum: Wireless Networking
Topic: Mikrotik 433AH Max concurrent users can handle?
Replies: 4
Views: 1836

Re: Mikrotik 433AH Max concurrent users can handle?

"400-500 users" is not possible with "low price". Hell, I guess it's not even possible with expensive solutions at that range.
by jacekes
Fri Oct 31, 2014 9:19 am
Forum: Beginner Basics
Topic: Is it possible to setup a VPN route like this with RB2011?
Replies: 14
Views: 2411

Re: Is it possible to setup a VPN route like this with RB201

What sort of VPN do you want to use? PPTP? SSTP? OpenVPN? IPSec?
Should the PC_VPN be able to access computers in the 192.168.88.0/24 network?
Should it be able to access internet? Or should all the traffic from that computer be tunneled out through the VPN?
by jacekes
Thu Oct 30, 2014 9:32 am
Forum: Wireless Networking
Topic: How to block an internal IP from using internet via router?
Replies: 1
Views: 2214

Re: How to block an internal IP from using internet via rout

/ip firewall filter add chain=forward src-address=(the IP you want to block) out-interface=(your WAN interface) action=drop

This rule will drop traffic originated by an internal IP address going out your WAN interface
by jacekes
Thu Oct 30, 2014 9:22 am
Forum: Beginner Basics
Topic: How to change public ip's when users login and logout...
Replies: 6
Views: 1112

Re: How to change public ip's when users login and logout...

/ip firewall nat add chain=srcnat src-address=(private address pool) action=src-nat to-addresses=(public address pool)

This rule gives per-session NAT. But it's a very bad idea.
by jacekes
Thu Oct 30, 2014 9:20 am
Forum: Beginner Basics
Topic: Multiple LANs
Replies: 5
Views: 1138

Re: Multiple LANs

DSL internet connections are in use, probably with very little upload bandwidth, so the VPN connections would be very slow. Connecting the offices via radio gives significantly more bandwidth.
Moreover, the DSLs are probably also unreliable.
by jacekes
Wed Oct 29, 2014 4:32 pm
Forum: General
Topic: Change public IP every 60 sec
Replies: 3
Views: 944

Re: Change public IP every 60 sec

You can do it by scripting if you need the timing.
Of course you realize it's going to interrupt all outbound TCP sessions every 60 seconds?
by jacekes
Wed Oct 29, 2014 3:08 pm
Forum: Wireless Networking
Topic: Static public ip on lte interface
Replies: 8
Views: 5925

Re: Static public ip on lte interface

What kind of IP address do you get on your LTE interface? Public or private?
Is the connection in Vodafone based on PPPoE?

This issue can be pretty complicated. If you get your proper public address on the modem, you could access your router through port forwarding, if it's configurable on the modem.
by jacekes
Wed Oct 29, 2014 9:17 am
Forum: Beginner Basics
Topic: Network printer issue
Replies: 1
Views: 630

Re: Network printer issue

Use port forwarding - described here: http://wiki.mikrotik.com/wiki/Forwardin ... nternal_IP
by jacekes
Tue Oct 28, 2014 10:54 pm
Forum: General
Topic: PPPoE Public Routed subnet config
Replies: 5
Views: 1993

Re: PPPoE Public Routed subnet config

I guess MrYan suggested addressing the .105/29 address on the bridge2 interface.
It can work, but it's far from correctness...
by jacekes
Tue Oct 28, 2014 9:28 pm
Forum: Beginner Basics
Topic: Hello I have a problem In the pppoe-out1
Replies: 5
Views: 986

Re: Hello I have a problem In the pppoe-out1

PPPoE-out interfaces don't have MAC addresses.
PPPoE is a layer above MAC layer.
by jacekes
Tue Oct 28, 2014 8:01 pm
Forum: Beginner Basics
Topic: How to change public ip's when users login and logout...
Replies: 6
Views: 1112

Re: How to change public ip's when users login and logout...

How many public IP addresses do you have?
You can even change public addresses even on a per-tcp-session basis by just simply setting up src-nat with a public subnet configured as the to-addresses. But I guess this is highly unrecommended.
by jacekes
Tue Oct 28, 2014 7:17 pm
Forum: Beginner Basics
Topic: Hello I have a problem In the pppoe-out1
Replies: 5
Views: 986

Re: Hello I have a problem In the pppoe-out1

Please try writing better english. It's very difficult to understand you.
by jacekes
Tue Oct 28, 2014 4:46 pm
Forum: General
Topic: Access PPPoE ip address over subnet
Replies: 5
Views: 1191

Re: Access PPPoE ip address over subnet

Post the output of /ip route print and /ip firewall nat print
Can the PPPoE clients access internet or WAN through the CRS?
From what you've written by now, it should all work properly.
by jacekes
Tue Oct 28, 2014 10:39 am
Forum: General
Topic: PPPoE Public Routed subnet config
Replies: 5
Views: 1993

Re: PPPoE Public Routed subnet config

The cisco config is not really helpful. ;) Please check your PPPoE connection status if your local address gets a /29 subnet mask. If yes, 1:1 NAT could be a quick solution - translate a private address of a host to a public address from the /29 subnet. There are probably better solutions, but I can...
by jacekes
Tue Oct 28, 2014 10:27 am
Forum: General
Topic: Access PPPoE ip address over subnet
Replies: 5
Views: 1191

Re: Access PPPoE ip address over subnet

I guess you're not being clear enough. You are connected to the same router as the PPPoE clients? Why are you trying to masquerade your traffic when it can simply just be routed? Do the PPPoE clients have any firewall? Are the IP addresses of PPPoE clients properly visible in the status of PPPoE con...
by jacekes
Mon Oct 27, 2014 11:38 pm
Forum: Beginner Basics
Topic: How do i set different bandwidth in Day/Night in PPPoE
Replies: 3
Views: 1526

Re: How do i set different bandwidth in Day/Night in PPPoE

So you've got a PPP profile for each tariff? For example profiles like DL1M_UL256k, DL2M_UL512k and so on? If yes, I would suggest writing two scripts. The first script to set the daytime bandwidth to all PPP profiles and the second to set the nighttime bandwidth. Then schedule the scripts to run at...
by jacekes
Fri Oct 24, 2014 3:03 pm
Forum: Beginner Basics
Topic: Link 2 different networks
Replies: 6
Views: 1200

Re: Link 2 different networks

That's not the way it works, you can't configure it on the Mikrotik router. When the computers from the 192.168.20.0/24 network try to communicate with the 192.168.1.0/24 subnet, they don't have it in their routing tables. So they forward the traffic onto the default gateway, 192.168.20.1. That rout...
by jacekes
Fri Oct 24, 2014 2:28 pm
Forum: Beginner Basics
Topic: Link 2 different networks
Replies: 6
Views: 1200

Re: Link 2 different networks

Ok... Do the computers in the 192.168.20.0/24 network have their default gateway set to 192.168.20.254? DO these computers have the firewall enabled? If yes, what kind of firewall is it? Can the computers ping each other inside the 192.168.20.0/24 network? From the terminal of the router run ping 19...
by jacekes
Fri Oct 24, 2014 1:53 pm
Forum: Wireless Networking
Topic: How to configure d link wi -fi router?
Replies: 2
Views: 967

Re: How to configure d link wi -fi router?

This is a forum dedicated to Mikrotik. Please try http://forums.dlink.com/
by jacekes
Fri Oct 24, 2014 1:52 pm
Forum: General
Topic: Strange DNS behavior
Replies: 5
Views: 1897

Re: Strange DNS behavior

I guess the winbox tools->ping part is able to resolve a name which is not in FQDN format, whereas ping in command line is not.
by jacekes
Fri Oct 24, 2014 1:16 pm
Forum: Beginner Basics
Topic: How do i set different bandwidth in Day/Night in PPPoE
Replies: 3
Views: 1526

Re: How do i set different bandwidth in Day/Night in PPPoE

What kind of bandwidth limiting do you use? Simple queues, queue tree or rate-limiting configured on the ppp profiles?

You can find some examples in the Wiki, for instance here: http://wiki.mikrotik.com/wiki/Limit_Dif ... _and_Night
by jacekes
Fri Oct 24, 2014 12:59 pm
Forum: Beginner Basics
Topic: Multiple WANs connection
Replies: 2
Views: 921

Re: Multiple WANs connection

1. Add two default routes - one for each ISP. The default route that is listed on position numer 1 should have routing-mark=ISP2 configured. 1 In IP Firewall Mangle you should add a rule in chain prerouting, for the 2nd ISP's subnet as src-address to apply the routing-mark ISP2 to the connections. S...
by jacekes
Fri Oct 24, 2014 12:53 pm
Forum: Beginner Basics
Topic: PPPOE cant connect
Replies: 2
Views: 749

Re: PPPOE cant connect

What RB device do you use?
Post the output of /interface export and /ppp export.

Is your pppoe-client supposed to be using vlan 6?
by jacekes
Fri Oct 24, 2014 12:50 pm
Forum: Beginner Basics
Topic: Link 2 different networks
Replies: 6
Views: 1200

Re: Link 2 different networks

Your ether3 port is still a port of bridge-local.
Go to Bridge -> Ports and remove ether3 from the list or disable it.
by jacekes
Fri Oct 24, 2014 12:47 pm
Forum: Wireless Networking
Topic: How do you "slave" a MikroTik to an access point?
Replies: 13
Views: 2808

Re: How do you "slave" a MikroTik to an access point?

That's weird. What software verison of RouterOS do you use on your 411?
by jacekes
Tue Oct 21, 2014 4:45 pm
Forum: Wireless Networking
Topic: How do you "slave" a MikroTik to an access point?
Replies: 13
Views: 2808

Re: How do you "slave" a MikroTik to an access point?

Use only authentication-types=wpa-psk,wpa2-psk and check what happens then.
by jacekes
Tue Oct 21, 2014 4:42 pm
Forum: Wireless Networking
Topic: RB411+R52-350-set frequency-which is absent in list
Replies: 2
Views: 923

Re: RB411+R52-350-set frequency-which is absent in list

Try to set frequency-mode=superchannel country=no-country-set on the wireless interface.
by jacekes
Fri Oct 17, 2014 11:49 am
Forum: General
Topic: Router got disconnected automatically
Replies: 1
Views: 691

Re: Router got disconnected automatically

Is there any packet loss when you ping the router from the computer?
Are you connected directly when it happens, or are there any devices in the middle?
by jacekes
Fri Oct 17, 2014 9:48 am
Forum: Wireless Networking
Topic: How do you "slave" a MikroTik to an access point?
Replies: 13
Views: 2808

Re: How do you "slave" a MikroTik to an access point?

Post the output of /interf wirel sec exp com (remember to remove the password ;))
Have you selected the configured profile on the wireless tab?
by jacekes
Fri Oct 17, 2014 9:43 am
Forum: Wireless Networking
Topic: How to configure inter VLAN routing?
Replies: 2
Views: 1400

Re: How to configure inter VLAN routing?

Hmmm... I hope you've noticed, that this is a Mikrotik forum. It's also the Wireless branch of the forum... I guess you need to configure dot1q subinterfaces on an interface of the 7200, configure a trunk port on the switch and connect it together... Then hosts connected to different access vlan por...
by jacekes
Wed Oct 15, 2014 4:31 pm
Forum: Wireless Networking
Topic: How do you "slave" a MikroTik to an access point?
Replies: 13
Views: 2808

Re: How do you "slave" a MikroTik to an access point?

Set up the security profile correctly, then perform a scan and connect. I would suggest using station-pseudobridge mode rather than station. Station mode is not Layer2 transparent, therefore you would have to additionaly configure NAT, DHCP and routing on the Mikrotik. Station-pseudobridge is (sort ...
by jacekes
Wed Oct 15, 2014 4:13 pm
Forum: Wireless Networking
Topic: problem with hotspot users authenication
Replies: 2
Views: 790

Re: problem with hotspot users authenication

I think you're not able to bypass it from your RB951.
You can either ask your ISP to bypass your mac-address on his hostpot or set up a linux server and write some scripts to input the credentials automatically.
by jacekes
Wed Oct 15, 2014 3:50 pm
Forum: Beginner Basics
Topic: how to protect NAS with radius server
Replies: 5
Views: 1242

Re: how to protect NAS with radius server

So it's not really a matter for the Mikrotik forum.
Firstly you need to be sure, that the NAS is capable of radius authentication. Then, follow the manual. ;)
by jacekes
Wed Oct 15, 2014 3:41 pm
Forum: Beginner Basics
Topic: how to protect NAS with radius server
Replies: 5
Views: 1242

Re: how to protect NAS with radius server

What kind of NAS is it? If it's a RouterOS device, you need to add a radius server with the service=login parameter
Generally, the radius server will not ask for the password. The network device will prompt for the password and verify it at the radius server.
by jacekes
Wed Oct 15, 2014 3:29 pm
Forum: General
Topic: Inter-VLAN routing.
Replies: 4
Views: 1927

Re: Inter-VLAN routing.

I assume you have addressed the untagged interface of the RB951 and the tagged sub-interface in different subnets. These 2 subnets should be visible in the routing table of the RB. If they are, nothing more should be done. Are the hosts from vlan2 visible in the ARP table of the RB? Can they ping th...
by jacekes
Wed Oct 15, 2014 2:28 pm
Forum: General
Topic: Access List Only
Replies: 2
Views: 642

Re: Access List Only

Your DHCP-server has to be set up on your Mikrotik router and it must have "add ARP for leases" enabled.
by jacekes
Wed Oct 15, 2014 9:23 am
Forum: General
Topic: Bridging VLAN interfaces on the same physical port
Replies: 9
Views: 5262

Re: Bridging VLAN interfaces on the same physical port

I've had such a configuration (many VLAN interfaces on an ether interface, all added to a bridge) and it was working as you wish it would - layer 2 traffic was forwarded between the VLANs. I've used it on ROS v. 5.16, 5.19 and 6.10. As for me, I didn't want the traffic to be forwarded and had to set...
by jacekes
Tue Oct 14, 2014 10:43 am
Forum: Wireless Networking
Topic: Question about errors reported in log file
Replies: 1
Views: 537

Re: Question about errors reported in log file

Post the config of the wireless interface (/interf wirel exp com) of that SXT.
How is the AP configured? Is it a Mikrotik also, or is it something else?
by jacekes
Tue Oct 14, 2014 9:47 am
Forum: General
Topic: RouterOS subnet zero
Replies: 3
Views: 1006

Re: RouterOS subnet zero

Nope, sorry, it won't work the way you described it.
by jacekes
Tue Oct 14, 2014 9:41 am
Forum: Wireless Networking
Topic: Home Access Point No internet access
Replies: 1
Views: 1256

Re: Home Access Point No internet access

You need to bridge the wlan1 and ether1 interfaces and add an IP address or DHCP-client on the bridge interface. /interf bri add auto-mac=no admin-mac=[mac address of ether interface] /ip dhcp-client add interf=bridge1 disabled=no /interf bri port add bri=bridge1 interf=ether1 /interf bri port add b...
by jacekes
Tue Oct 14, 2014 9:19 am
Forum: General
Topic: RouterOS subnet zero
Replies: 3
Views: 1006

Re: RouterOS subnet zero

Using a /32 subnet mask is possible and works properly. I've had a couple of RB's with loopback interfaces addressed that way in my network. Is the ether7-uplink interface up? If it's not up, the routing table will show the connected subnet as unreachable. Post the output of these commands, maybe we...
by jacekes
Tue Oct 14, 2014 9:06 am
Forum: Beginner Basics
Topic: Best hardware for a simple hotspot
Replies: 3
Views: 1116

Re: Best hardware for a simple hotspot

I'm not suggesting to use the 411AR, just the opposite, but I guess the 2,4 GHz band is essential for a wifi hotspot service.
by jacekes
Mon Oct 13, 2014 3:19 pm
Forum: Beginner Basics
Topic: Best hardware for a simple hotspot
Replies: 3
Views: 1116

Re: Best hardware for a simple hotspot

I've worked on a large hotspot project some time ago and I used RB411AR enclosed in Cyberbajt sector-box antennas.
If I was supposed to do it today, I'd use Groove or Metal and omni antennas or compact sectors.
by jacekes
Mon Oct 13, 2014 10:55 am
Forum: Beginner Basics
Topic: Multiple LANs
Replies: 5
Views: 1138

Re: Multiple LANs

The setup is fairly easy - assuming that it's possible to add static routes on the existing office routers.
I've attached a simple network diagram.

The wifi AP can be a SXT SA5, the wifi stations SXT Lite 5.
by jacekes
Tue Sep 30, 2014 9:06 am
Forum: General
Topic: Remove dude from RB493G - is there a way to?
Replies: 6
Views: 1945

Re: Remove dude from RB493G - is there a way to?

The Dude is listed among other packages in /system packages. You could have marked it for de-installation there and just reboot the router.
by jacekes
Wed Sep 24, 2014 4:01 pm
Forum: Wireless Networking
Topic: Yet another WiFi connectivity issues
Replies: 7
Views: 1422

Re: Yet another WiFi connectivity issues

After reading quite a lot about the subject, I came to a similar conclusion - more than 1 access point, but, what if I combined 2011 + AP per room, for example? Benchmarks suggest it would probably handle that. What do you think?
I guess it's a good idea.
by jacekes
Tue Sep 23, 2014 9:28 pm
Forum: Wireless Networking
Topic: Yet another WiFi connectivity issues
Replies: 7
Views: 1422

Re: Yet another WiFi connectivity issues

Do all the clients disconnect at the same time from all VAP's? Are there many other networks broadcasted in the surrounding area? Some details about the place? Office/house/warehouse? How many m^2? In general, 35 to 40 clients is quite a lot for one radio interface. I would try using a different boa...
by jacekes
Tue Sep 23, 2014 9:03 pm
Forum: Wireless Networking
Topic: 55 km wireless point to point link is possible?
Replies: 4
Views: 1342

Re: 55 km wireless point to point link is possible?

I agree Sextant is not enough. Good grid antennas would also be good if you don't need MIMO. If MIMO is needed - dish antennas. And of course extremely precise alignment. Remember the laws of your country.Concerns the legal broadcast limit Most of the regulatory domains make this kind of link imposs...
by jacekes
Tue Sep 23, 2014 8:55 pm
Forum: General
Topic: VRRP over VLAN(s) not working
Replies: 2
Views: 751

Re: VRRP over VLAN(s) not working

It's possible and it works, I've tried it a couple of times. Something must be wrong with your config.
by jacekes
Tue Sep 23, 2014 8:47 pm
Forum: Beginner Basics
Topic: 411 board with r52 how to connect to netgear?
Replies: 2
Views: 803

Re: 411 board with r52 how to connect to netgear?

The Netgear router has a typical omni-directional antenna? What kind of antenna do you plan to use with the RB411? Use winbox to configure the RB411. In the wireless section set up a security profile for dynamic keys, wpa2-psk & AES with a password you use on the Netgear router. Wireless interface s...
by jacekes
Fri Jul 25, 2014 9:16 pm
Forum: Beginner Basics
Topic: VPN not working
Replies: 16
Views: 1911

Re: VPN not working

So how come the firewall was accessible, visible in the bridge table and ARP table, huh?
by jacekes
Fri Jul 25, 2014 12:42 pm
Forum: Beginner Basics
Topic: VPN not working
Replies: 16
Views: 1911

Re: VPN not working

The firewall responds to a ping from the Internet, Packet trace is done on the firewall external interface.
Try to sniff packets on the RB, on it's WAN interface. Apply a filter for the firewall IP address and check if the traffic is visible.
by jacekes
Fri Jul 25, 2014 1:12 am
Forum: Wireless Networking
Topic: HELP: VLANs on WLAN
Replies: 8
Views: 1909

Re: HELP: VLANs on WLAN

It looks like the Layer 2 connection is not continuous for the VLANs. It seems like the 802.1q vlan tagged frames aren't accepted / are dropped by the RB951. This could happen because of a couple of reasons that I can think of: - too small MTU value - check it in interface properties on the RB951, s...
by jacekes
Thu Jul 24, 2014 11:18 pm
Forum: General
Topic: Remote Support Access to RouterBoard via NAT
Replies: 8
Views: 1994

Re: Remote Support Access to RouterBoard via NAT

Not sure what I am doing differently? I am going to use a PPTP tunnel. I just don't see that I should have all RB450G connected via PPTP at all times. My complication is the establishing of the PPTP connection. Is that what you mean? Thanks! Yes, this is _also_ what I mean. Firstly - you don't need...
by jacekes
Thu Jul 24, 2014 10:01 pm
Forum: General
Topic: Remote Support Access to RouterBoard via NAT
Replies: 8
Views: 1994

Re: Remote Support Access to RouterBoard via NAT

I guess you're making it overly complicated for no particular reason.
I advise making it in a more simple way, a way that just works and is used by a lot of people.
If you're worried about the safety of PPTP, you can secure it with a "port knocking" technique.
by jacekes
Thu Jul 24, 2014 8:38 pm
Forum: Beginner Basics
Topic: VPN not working
Replies: 16
Views: 1911

Re: VPN not working

The packet trace was done where? On which device & interface?
What about the firewall being accessible from the internet?
by jacekes
Thu Jul 24, 2014 7:00 pm
Forum: Beginner Basics
Topic: VPN not working
Replies: 16
Views: 1911

Re: VPN not working

Is the mac address of your firewall visible in /interface bridge host print? Is the mac address and IP address of the firewall visible in /ip arp print? Is the firewall anyhow accessible (for example by ping, if it answers ICMP probes) from your LAN subnet (217.x.x.32/29) or from the internet? Which...
by jacekes
Thu Jul 24, 2014 3:19 pm
Forum: Beginner Basics
Topic: How to set HTTPS for WebFig
Replies: 9
Views: 26488

Re: How to set HTTPS for WebFig

Me? What for? It's on the wiki I guess and rcampbell can check it by himself.
by jacekes
Thu Jul 24, 2014 1:42 pm
Forum: Beginner Basics
Topic: How to set HTTPS for WebFig
Replies: 9
Views: 26488

Re: How to set HTTPS for WebFig

Yes, but it can be a self-signed cetificate, and as far as I remember it can be generated directly on the RB.
I don't have access to any of my RB right now, so I'm bot able to test it.
by jacekes
Thu Jul 24, 2014 12:05 pm
Forum: Wireless Networking
Topic: PPP (IPCP) issue
Replies: 3
Views: 1747

Re: PPP (IPCP) issue

For all the future readers (if any) - in this case the problem wasn't related to PPPoE or IPCP. The cellular signal level was too low and the PPP-client interface wasn't really fully up.
by jacekes
Thu Jul 24, 2014 11:41 am
Forum: Beginner Basics
Topic: VPN not working
Replies: 16
Views: 1911

Re: VPN not working

Hi, what do you mean by "Port ether6 connects PPPOE and ether 4 is my firewall."? Is this schematic correct? BT Modem LAN port <=> eth6 RB2011 eth4 <=> firewall <=> yout local network Is the IP address obtained correctly on the RB2011 eth6 port? Is it a public IP or private? Do you have internet acc...
by jacekes
Thu Jul 24, 2014 11:30 am
Forum: Beginner Basics
Topic: How to set HTTPS for WebFig
Replies: 9
Views: 26488

Re: How to set HTTPS for WebFig

I guess you need to enable https in /ip services and disable http.
This will affect all web-based interfaces.
by jacekes
Thu Jul 24, 2014 11:26 am
Forum: Wireless Networking
Topic: AP's and Vlan
Replies: 1
Views: 852

Re: AP's and Vlan

How are these devices connected? Any switches between them?
Please attach a schematic of the network.
by jacekes
Thu Jul 24, 2014 11:06 am
Forum: General
Topic: Remote Support Access to RouterBoard via NAT
Replies: 8
Views: 1994

Re: Remote Support Access to RouterBoard via NAT

A PPTP tunnel would be perfect for that. Set up a PPTP server on the edge RB450G, the one that has the public address. Set up a PPP secret on that RB and a PPTP-client connection on your windows or linux computer. Launch the pptp client, and as jarda said, add a route to the private address space be...
by jacekes
Thu Jul 24, 2014 10:53 am
Forum: Wireless Networking
Topic: HELP: VLANs on WLAN
Replies: 8
Views: 1909

Re: HELP: VLANs on WLAN

That's a lot of config you've applied, especially to the wireless section. But it seems ok. My strategy to debug this problem would be: 1. enable vlan 100 (and next 101) on a ethernet interface of a windows computer, connect it to the interface of RB750 and check if the IP address is obtained proper...
by jacekes
Wed Jul 23, 2014 12:40 pm
Forum: Wireless Networking
Topic: Unable to access Winbox from outside network
Replies: 1
Views: 624

Re: Unable to access Winbox from outside network

You're being a bit chaotic.
Could you draw some schematic of the network?
by jacekes
Wed Jul 23, 2014 12:13 pm
Forum: Wireless Networking
Topic: HELP: VLANs on WLAN
Replies: 8
Views: 1909

Re: HELP: VLANs on WLAN

Hi, assuming that ether1 of RB951 is connected to the RB750GL: 1. reset the RB951 to factory defaults, don't load the default settings; don't use quick-set; create the VLANs on the ether interface: /interf vlan add name=vlan100 vlan-id=100 interf=ether1 /interf vlan add name=vlan101 vlan-id=101 inte...
by jacekes
Sat Jul 19, 2014 10:05 pm
Forum: Wireless Networking
Topic: PPP (IPCP) issue
Replies: 3
Views: 1747

Re: PPP (IPCP) issue

Hi, I guess it's you who has called me on friday. Tell me, what modem init string have you used? Addresses served in IPCP can look weird, even though they might work properly, especially on Orange in Poland. Anyway, this is not the case - you get 0.0.0.0 as the IP for your host. I guess I'd really n...
by jacekes
Mon Jun 30, 2014 8:32 pm
Forum: General
Topic: source ports in src-nat
Replies: 5
Views: 1515

Re: source ports in src-nat

Any ideas?

Normis? Sergejs? Anyone?
by jacekes
Wed Jun 25, 2014 2:07 pm
Forum: General
Topic: source ports in src-nat
Replies: 5
Views: 1515

Re: source ports in src-nat

I know I'm covered, but that's not enough for me. The police defines the source and destination IPs and ports. If I had consistent data, I would be able to make the process of finding the customer more automatic. Now I spend a lot of time searching through the logs.
by jacekes
Wed Jun 25, 2014 1:36 pm
Forum: General
Topic: source ports in src-nat
Replies: 5
Views: 1515

Re: source ports in src-nat

Ok, so now I would like to know if it's possible to log the random port number for the tcp session.
by jacekes
Wed Jun 25, 2014 10:37 am
Forum: General
Topic: source ports in src-nat
Replies: 5
Views: 1515

source ports in src-nat

Hi, My customers get private IP addresses which are translated to public addresses on the edge of the network. The translation is usually many private addresses to one public address using masquerade or srcnat actions. In Poland network operators are obliged to keep information about IP address usag...
by jacekes
Mon Apr 29, 2013 1:03 am
Forum: The Dude
Topic: Missing functions after Dude server reboot
Replies: 2
Views: 1416

Re: Missing functions after Dude server reboot

Solved!

I rebooted my laptop from ubuntu to windows, ran a client of my linux dude server and a new local server. In windows it's possible to copy functions between Dude instances using the clipboard.
by jacekes
Sun Apr 28, 2013 8:06 pm
Forum: The Dude
Topic: Missing functions after Dude server reboot
Replies: 2
Views: 1416

Missing functions after Dude server reboot

Hi, I've recently installed The Dude 3.6 as a service under Ubuntu Server 12.04.1 LTS according to this manual: http://wiki.mikrotik.com/wiki/The_Dude/Dude_as_a_Linux_Service It was running perfectly, I've set up my maps, devices, snmp profiles etc., until I had to reboot the machine. Now the Dude s...
by jacekes
Sun Mar 24, 2013 11:18 pm
Forum: RouterBOARD hardware
Topic: RB as serial console
Replies: 11
Views: 3783

Re: RB as serial console

Hi, I have a similar problem as described above. I guess it's not a bug in RB, but maybe you guys can give me some feeddback. I need a configuration like this: http://104.imagebam.com/download/5J6u8z36IRp8BO0lhjL3FQ/24529/245280737/console-server.jpg I've got everything working except for the USB hu...
by jacekes
Thu Jan 24, 2013 11:35 pm
Forum: RouterBOARD hardware
Topic: RB951-2n - externall antenna
Replies: 7
Views: 3139

Re: RB951-2n - externall antenna

That's a really bad idea...
by jacekes
Wed Jan 16, 2013 8:19 pm
Forum: RouterBOARD hardware
Topic: Dual band indoor AP
Replies: 7
Views: 3676

Re: Dual band indoor AP

The floors are over 50cm thick reinforced concrete and the internal walls (blockwork and reinforced concrete) have up to 10dB penetration loss breaking the place into lots of rooms and corridors. A quick computation indicates up to something like 40 AP on some floors and lots of RF issues. There is...
by jacekes
Wed Jan 16, 2013 8:04 pm
Forum: RouterBOARD hardware
Topic: RB951-2n and Metal now shipping
Replies: 69
Views: 27796

Re: RB951-2n and Metal now shipping

I'm curious about the same thing, however those connectors are not u.fl. It would be great if they were usable.
by jacekes
Tue Dec 11, 2012 3:19 pm
Forum: RouterBOARD hardware
Topic: RB751
Replies: 73
Views: 22115

Re: RB751

Oops, sorry, found it already.

Image

;)
by jacekes
Tue Dec 11, 2012 11:25 am
Forum: RouterBOARD hardware
Topic: RB751
Replies: 73
Views: 22115

Re: RB751

Is the CE DoC for the 751U-2HnD already issued? I need it badly.
by jacekes
Thu Nov 08, 2012 10:09 pm
Forum: Scripting
Topic: IP hotspot user profile on-login script
Replies: 15
Views: 13597

Re: IP hotspot user profile on-login script

I've tried it only on v5.21. I might have some time next week to downgrade my 433 and check if it works. In the meantime you can try evolving your simple yet working script. For example try to substitute the value of $user to a new local variable , for example: :local tempvar $user; :log info tempva...
by jacekes
Wed Nov 07, 2012 9:39 pm
Forum: Scripting
Topic: IP hotspot user profile on-login script
Replies: 15
Views: 13597

Re: IP hotspot user profile on-login script

Of course, here you are: /ip hotspot user profile set [ find default=yes ] idle-timeout=none keepalive-timeout=2m on-login=":local who \$user;\r\ \n:local whomac [/ip hotspot active get [find user=\$who] mac-address];\r\ \n:local whoip [/ip hotspot active get [find user=\$who] address];\r\ \n:log in...
by jacekes
Wed Nov 07, 2012 6:38 pm
Forum: Scripting
Topic: IP hotspot user profile on-login script
Replies: 15
Views: 13597

Re: IP hotspot user profile on-login script

Yes, the code mentioned above: :local freeuser [/ip hotspot active find user=$user]; :local freemac [/ip hotspot active get $freeuser mac-address]; :local freeip [/ip hotspot active get $freeuser address]; :log info ($freemac." ".$freeip); works correctly and logs the MAC address and IP address of t...
by jacekes
Wed Oct 31, 2012 3:56 pm
Forum: Scripting
Topic: IP hotspot user profile on-login script
Replies: 15
Views: 13597

Re: IP hotspot user profile on-login script

I got an answer from Maris from Mikrotik Support.
The script source containing the $user variable has to be defined in the /ip hotspot user profile on-login parameter instead of just the name of an external script defined in /system script.
It works as it should.
by jacekes
Thu Oct 25, 2012 5:02 pm
Forum: Scripting
Topic: IP hotspot user profile on-login script
Replies: 15
Views: 13597

Re: IP hotspot user profile on-login script

try this (...)
Nope, doesn't work.
by jacekes
Thu Oct 25, 2012 12:33 am
Forum: Scripting
Topic: IP hotspot user profile on-login script
Replies: 15
Views: 13597

Re: IP hotspot user profile on-login script

@c0d3rSh3ll, thanks, I'll try it tomorrow, because I've got my RB433 at my office. But I think I've tried it already. @ditonet, I know that these "*A..." are internal ID's, I'm just confused with not being able to select one particular ID using the $user variable. The example script from the wiki de...
by jacekes
Wed Oct 24, 2012 9:41 am
Forum: Scripting
Topic: IP hotspot user profile on-login script
Replies: 15
Views: 13597

Re: IP hotspot user profile on-login script

Grzegorz, have you tried running the script while having more than one user listed in /ip hotspot active? The run counter increments as new users log in, but the script shows no effect if there is more than one active user. Best regards, Jacek EDIT: I'm trying to investigate the meaning of the $user...
by jacekes
Tue Oct 23, 2012 4:55 pm
Forum: Scripting
Topic: IP hotspot user profile on-login script
Replies: 15
Views: 13597

Re: IP hotspot user profile on-login script

Hi Grzegorz,

thanks for the code, but unfortunately it doesn't work either. Do you use it? On what version of RouterOS? I've tried it on 5.16 and 5.21.

Best regards,
Jacek
by jacekes
Tue Oct 23, 2012 2:32 pm
Forum: Scripting
Topic: IP hotspot user profile on-login script
Replies: 15
Views: 13597

IP hotspot user profile on-login script

Hi, I'm trying to create a script that will send syslog messages once a trial user logs in at a hotspot site. I have configured sending log messages to my syslog server and I've defined a script in /system script. The script name is associated with the on-login action of my hotspot user profile assi...
by jacekes
Wed Jun 20, 2012 4:26 pm
Forum: RouterBOARD hardware
Topic: RB751U-2HnD 3g
Replies: 5
Views: 5258

Re: RB751U-2HnD 3g

Do I need a USB power injector to use the 3G modem with the 751U-2HnD?
I'm asking because I remember I needed a power injector to use a 3G modem with RB411.
by jacekes
Fri Jun 15, 2012 3:52 pm
Forum: General
Topic: Firewall log SRC-MAC field in different ROS version?
Replies: 3
Views: 1798

Re: Firewall log SRC-MAC field in different ROS version?

Hi, Sorry for bringing up such an old topic, but I've encountered the same problem. However, it seems like it's not the software version that causes the difference. I have several RB411's and RB433's running 5.6 and 5.16 working as outdoor wireless hotspots. I'm using the rule: /ip firewall filter a...
by jacekes
Tue Aug 30, 2011 7:14 pm
Forum: Wireless Networking
Topic: Hotspot & Radius - sending additional parameters
Replies: 2
Views: 2554

Re: Hotspot & Radius - sending additional parameters

Since your external login page will redirect to "/login?username=whatever&password=whatever" already to trigger a log in with the hard coded RADIUS credentials just add more POST variables as per above to send to RADIUS. Ok. Didn't think of that. So it turns out I'm a bit of a dummy. Thanks a lot! ...
by jacekes
Tue Aug 30, 2011 10:29 am
Forum: Wireless Networking
Topic: Hotspot & Radius - sending additional parameters
Replies: 2
Views: 2554

Hotspot & Radius - sending additional parameters

Hi, I'm new to this forum, I hope I'll be able to comply with the rules. ;) I have a rather complex issue with a hotspot service I'm supposed to create. I use a RB 411 UAHR, it has the hotspot option set up correctly, it's also set up to use an external radius server for authentication and accountin...