MikroTik

David1234

my mistake
now it's working

Thanks !

David1234

1. I don't NAT the IPSEC /ip firewall nat add action=masquerade chain=srcnat dst-address-list=!172.100.58.0/24 2. I have disable the firewall on the ORacle side to be sure 3. My computer is 10.0.0.188/24 and in the policy is add disabled=yes dst-address=172.100.0.0/16 sa-dst-address=Oracle.ip \ sa-s...

David1234

I mange to make it work using what you wrote and some "playing around" now I can the IPSEC is up on bith side (Mikrotik and Oracle cloud) but I don't have a ping to the server how and where can I check what is the problem? I ask the same thing in Oracle and waiting for answer - but I want to be read...

David1234

is ther any way to tag a computer?
and make it be vlan 100 ?
and then i could check it?

or maybe there is another way yo check it's working?

Thanks ,

David1234

Hello , I'm trying to setup a vpn to Oracle cloud . but I jsut can't seem to understadn the setting I need to do in the Mikrotik this is what Oracle is using on their side: SAKMP Protocol version 1 Exchange type: Main mode Authentication method: pre-shared-keys Encryption: AES-256-cbc, AES-192-cbc, ...

David1234

it's seem that I need to create a bridge and add ports:
ether1
vlan1
vlan2

now it's seem to work ,
I have ping and to router and I can go to the internet

David1234

Hello , I'm trying to setup 2 vlans on my RB this is what I have done : /ip address /interface vlan add interface=ether1 name=Vlan1-Camera vlan-id=100 add interface=ether1 name=Vlan2-Computer vlan-id=200 add address=10.0.0.133/24 interface=ether1 network=10.0.0.0 add address=192.168.100.254/24 inter...

David1234

got lost somewhere ..... I have try 2 links - nothing works for me https://linuxtechlab.com/squid-transparent-proxy-server-complete-configuration/ https://www.cyberciti.biz/tips/linux-setup-transparent-proxy-squid-howto.html I have reinstall he ubuntu - mayne it's too complicated to config? (it's al...

David1234

Hello , I'm trying to use squid as a proxy server in my netwrok this are the seeting I have added to the router /ip firewall mangle add action=accept chain=prerouting dst-port=80 in-interface=wlan1 protocol=tcp add action=accept chain=prerouting dst-port=443 in-interface=wlan1 protocol=tcp add actio...

David1234

Thank you!

David1234

OK - I understand now so just to be 100% : After I mark the port and select which gateway to use - I make its distance 1 - so it's the first one to use then I make the same route rule but with distance 2 using blackhole so if from some reason SIM1 in not active \ working - it will bot go out using a...

David1234

0 A S dst-address=0.0.0.0/0 gateway=SIM1 gateway-status=SIM1 reachable distance=1 scope=30 target-scope=10 routing-mark=SIM1 1 A S dst-address=0.0.0.0/0 gateway=SIM2 gateway-status=SIM2 reachable distance=1 scope=30 target-scope=10 routing-mark=SIM2 2 A S dst-address=0.0.0.0/0 gateway=SIM1,SIM2 gat...

David1234

I thought about it and I reset to defualt the router to start from a clean setup and now it's working SIM1 is used for L2TP SIM2 is used for OpenVPN now my question is about the blackhole do I need it? I don't want that if SIM1 is not connected it will be used for OPENVPN this are the routes I ahve ...

David1234

I want the router to connect only to 2 netwroks
Open-VPN and l2TP

and if SIM1 is not connected - then I will not have L2TP connection and only work with SIM2 in the OpenVPN netwrok

David1234

OK
I want to use
L2TP from SIM1
OpenVPN from SIM2
all other connection - will be close
and if SIM2 is not working - then the router will not have OpenVPN

* the L2TP \ OPEN VPN are form the router only - not from a computer connected to it
Thanks .

David1234

Hello, I have notice something and wanted to know if the problem is on my area . I have a L2TP\OpenVPN server and a RB with OpenVPN client and L2TP client now when I do a speed test with the OpenVPN(server to router ) I get poor resualts when I turn of the OpenVPN and turn on the L2TP and do speed t...

David1234

OK , to see I understand it when you say: add route routing-mark=SIM1(for example) type=blackhole - does it mean that if SIM2 is not online it will work from SIM1? and not get stuck ? ot will not work at all - so all the L2TP connection (UDP 1701 ) will not work from this router? I coudn't understan...

David1234

Hello, I'm using 2 modems with 2 sim I want to use SIM1 for only open vpn - so when I try to make a connection using tcp port 1194 he will use it and SIM2 for only L2TP which is udp 1701 adn default sim (all other port) will be SIM1 I made the firewall mark /ip firewall mangle add action=mark-routin...

David1234

Let me exaplin from the start what I want to get : I have 2 workers that use RBM33G with 2 SIMs I need then to be at the same netwroks - because I want them to be able to "talk" in order to to this - I have setup 2 open-vpn client on each RB to connect to my Office server and put them in bonding int...

David1234

OK I have change the MAC but still I can't make the second sim work when I make a speed-test I can see the the data is over sim1 only what else can I do? I have try to use load balancing using PCC method I can see the 2 open-vpn client are working at the same time and have the transferring the same ...

David1234

I don't think so...
can you expalin how to do this ?

In the end I have the router with 2 modems&sims and I want to get faster connection the main server (which is in my office)

David1234

Hello , I'm trying to make my router work as bonding using my 2 modems added the 2 ovpn client to the bonder but I can see it's only working from 1 sim this is the configuration I have on the router # model = RouterBOARD M33G # serial number = A2FD09FE0270 /interface ovpn-client add cipher=aes256 co...

David1234

Hello , I'm trting to connect to my RouterBOARD mAP 2nD a disk on key 4/8/16GB but it doesn't seem to recognize it - but when I connect a usbToRS232 cable - it show on port as usb1 I have also try to connect a modem usb dongle - it's turn on - but no usb on the port * I'm using a microUSB male to A ...

David1234

Hello , I have this configuration: main router that connected to adsl modem ,that I use as the WiFi at home another router that located in my room so I will be able to connect with my old computer to the internet. in router 2 I have a bridge with ether1-4,wlan this are the firewall setting in router...

David1234

Hello , I'm working with version 6.43.4 and I wnat to represent the mdoem signal with leds 1-5 this is what I have done: /system leds set 0 interface=ppp-out1 leds=led1 modem-signal-treshold=-95 type=modem-signal add interface=ppp-out1 leds=led2 modem-signal-treshold=-85 type=modem-signal add interf...

David1234

this is what I did ...

Thanks ,

David1234

I know
but I don't wnat to go out to the internet using the office (vpn)

I manage to change the setting in the computer netwrok connection (remove V from the default gateway)

but I thought maybe there is a way to this from the router?

David1234

Hello , I have setup l2tp (without ipsec) to my office router and I want to linit my connection to only 1 network inside the office and for the internet to use my home connection (not use the vpn) I have this setting in the firewall for my user 11 chain=forward action=accept src-address=172.16.100.4...

David1234

Hello , I'm having a problem create a L2TP client from my windows computer to my office router when using windows 7 I get error 789 security layer problem the same thing in windwos 10 I don't use ipsec just l2tp client what is wrong? * I'm able to connect to the router using another router as l2tp c...

David1234

I want to take 3 WANs on one side and use then as 1 pipe that only connect to the Main office (no need for intenet access )
to do local network over the internet but with 3 to 1 wans

David1234

can I do this without address?

will this do the job?

add action=drop chain=forward in-interface=all-ethernet out-interface= all-wireless
add action=drop chain=forward in-interface=all-wireless out-interface= all-ethernet

Thanks ,

David1234

yes when I run from the tools ping - Arp Ping I get a repaly from and see the MAC so why can't I reach to the device my mistake it's a PI with VNC on it and the port is tcp 5900 when I connect the PI to my computer and open VNC to 10.0.0.100 port 5900 it's working Very strange what can it be ? Thank...

David1234

I have check and connected the copmuter to my computer and run the ping command I got a resualt so it's not this I also thought that for some reason the ping is block so I have try to connect using RDP (NAT to 3389 ) - didn't work and it did work before(I was able to connect to the remote computer )

David1234

Hello , maybe someone here can help - I have a router with a computer connected to it using IP 10.0.0.120 when I try to run a ping from the router terminal I get no replay but when I run Tools-->IP Scan - 10.0.0.0/24 interface = ethernet I can see the the replay and the MAC. what can cause this prob...

David1234

I thought it also
but when I open the log I don;t see nothing new

David1234

Hello ,
sometime when I connect to the router using ssh
I get this message

2265 messages not shown

* the numer is change

what does it mean>?
and also how can I see this messages ?

Thanks ,

David1234

I appreciate you are trying to help but it's seem you are not reading what I have and ask the same quesion over and over :-) remote site: 1 ehternet for local netwrok 3 ehternet for 3 WANS with no public/static IP - or maybe if you think about it as 3 lte modem office site 1 ehternet for local netwr...

David1234

I do need the bonding beacsue I want to use all 3 WANs at the same time for uplud the data to the main office you say I can do this usnig PCC ? just remember I have on 1 side 3 non static\public IP and as I said before if I setup 3 EOIP to the offcie - it's only using WAN1 and not all 3 so can you e...

David1234

i understadn how to do it api but how can I do this with spesific (unknown ) ip? so for example user computer is 192.168.101.1 and he want to connect into the router using putty (ssh , port 22) I want him to be able to only open only 1 connection (1 window....) but if user2 with ip 192.168.101.9 wan...

David1234

Do you think I can create the same thing using lt2p ? because my wan is not static or public , so I can't use this (I have try the configuration in a place where the 3 WANs are public - that way I know it;s working) so I thought maybe I can "build" 3 lt2p clients to the sever then use the IP I got i...

David1234

well it's working ! I manage to understand what you did there Thank you very very much!!! 1 more question : is there an option to make this work without a static IP from the 3 WANs side? maybe to setup the out interface only? I know the EOIP need to get a static IP , so both side can "talk" but mayb...

David1234

yes , but if I don't have control on M2 - what can I do? for me M2 is the ISP/internet/cloud lets make this simple I have a mikrotik router with 2 LTE modems (which is M1) I get 2 private non-static address 10.136.1.1 10.136.1.2 I have another mikrotik router with 1 ethernet - connected to ADSL mode...

David1234

first of all - thank you for the explaining :-) now what I mean is : how can I do this if I don't have any control over M2? let say the M1 is a mikrotik router with 3 ADSL connecting to him as pppoe-out1\2\3 and I get this address 1.1.1.1 , 2.2.2.2 , 3.3.3.3 (which are public) and M3 is a mikrotik r...

David1234

this is not what I wnat to do

I want M1 to go out with 3 address\interfaces
and M2 to have only 1 address\interface

so I want to go from M1 to M3 ...

Thanks ,

David1234

but then how to do the bonding?
I can't seem to understadn how to do this

David1234

I don't think so...

because how do I "tell" the tunnel to go with ADSL 1\2\3?

David1234

In my office I have a mikrotik router that use an 3 X WAN connection with 50M/10M Down/Up for each WAN (ADSL) , and in the remote location I have a mikrotik router with 1 WAN with a connection of 200M/200M Down/Up . I want to bond the office to the remote location how can I do this ? I know I can do...

David1234

this is what I did :

add action=accept chain=input connection-limit=5,32 disabled=yes dst-port=8728 protocol=tcp

but the API is still able to connect more then 5 times and stay connected ...

David1234

Hello ,
wanted to know - is there any way I can limit the connection to the router using API to 5 (for example)?
meaning that only up to 5 open connection can be at the same time?

David1234

Hello , I have a l2tp server that give address pool of 192.168.0.0/16 for normal reason I gave the local address for all clients 192.168.254.254 (which is the server) my problem is that when a l2tp client is connect , he can ping and also connect to the other clients that are on line is there any wa...

Search found 1258 matches