MikroTik

David1234

for example
Quectel RM50xQ
or
EM7690,EM9191,EM9190 from Sierra Wireless?

for RB912UAG-2HPnD (or any other RB )?

Thanks ,

David1234

When I disable this rule add action=add-src-to-address-list address-list=Connection address-list-timeout=none-dynamic chain=input comment=OpenVPN dst-port=1194 protocol=tcp my VPN connection from remote computer was disconnect , when I enable it - the connection was up again so how could it be ? Tha...

David1234

Hello , need some guidance I have a router and I want to block connection to him , not to the network he connected (I have many NAT rules behind him) is what I did is good to avoid \ block unwanted connection to him? /ip firewall filter add action=add-src-to-address-list address-list=Connection addr...

David1234

Even if there would be no firewall at all, router can't get hacked so easily. It would have to be another user error (missing or weak password), or something really wrong with RouterOS. That's nothing against firewall, it's of course good idea to have it. He was likely running an old version of Rou...

David1234

I have reinstall to avoid problems

but I wnat to understand what does SOCKS do ?
can you explain in simple words?
also , what he gain from add this ?

David1234

Hello , what does IP-SOCKS used for? someone enter my router last night and add this setting /ip firewall filter add action=accept chain=input dst-port=5678 protocol=tcp /ip service set ssh port=26711 set api disabled=yes set winbox disabled=yes /ip socks set enabled=yes port=5678 /ip socks access a...

David1234

I also chekc before I creae a new script
but as you know - sometimes you get errors you didn't think about

David1234

this is what I did but if you have problem in the script let say typo mistake or you try to change interface that isn't there (for example you try to change ppp-out interface phone nmber , and there is not ppp-out interfance ....) you will now know this , the script will get stuck I want to be able ...

David1234

I have uplaod it using FTP
and when the script is working (wihtout any mistakes)- I get "script upload success"
I want to get the errors to be wriiting also to the files if there is a problem

David1234

Hello
I have uplaod a script tp the router called

script.auto.rsc

start to work auto - as it should
but he got stuck on the way (my mistake )
I can see in the log where is the problem

why it doesn't say also in the

script.auto.log

what was the error ?

Thanks ,

David1234

Hello , when I connect to my router I use import routeros_api connection = routeros_api.RouterOsApiPool(Router_IP, username='admin', password='mypass') how can I tell if the connection OK , or if there ware probkem in the user\pass\address when I print the connection I get this : <routeros_api.api.R...

David1234

I have found this https://forum.mikrotik.com/viewtopic.php?f=3&t=167822&p=823630&hilit=gpio#p823630 but it only wrok for pin3 when I run this commands /system gpio set pin3 direction=output output=0 and chgeck voltage on pin3 - I get 33mV witch is OK when I run this /system gpio set pin3...

David1234

did you get any reply ?

what need to be done in order to just send "0" \ "1" using GPIO14?
need to change any jumpers?

Thanks ,

David1234

Hello ,
I have notice that on the board
in the SPI CS# Config box , there is a pin 23 called "GPIO14"

how can I use it ?
can program it to send "0"\"1" on demand?

Thanks,

David1234

Thanks I will try it

David1234

change it to what ?
ot leave it as it is ?
what if I want to give 2-3 netwroks access from the vpn?

Thanks ,

David1234

Hello , I have setup Mikrotik router as OpenVPN server using this guide https://www.medo64.com/2016/12/simple-openvpn-server-on-mikrotik/ and a linux computer as client and it's working I can reach the client using the vpn my question is - I want the linux computer to use the vpn only for the comute...

David1234

I'm sorry

in the router I didn't allow the all internel network to connect to the router ....
I forgot I change it to work only from 1 address

I feel dumb now

David1234

Hello , I have created a python3 code for enter the router and change nat rule work on 1 computer and doesn't work on another computer (copy paste the same code) what could be the reason? this is the error I'm getting Traceback (most recent call last): File "Documents/UDP_Server.py", line ...

David1234

it's working !

Thank you both!

David1234

Hello , I have connected a serial device to my router and able to see the data he is sending when I open serial-terminal serial0 channel=0 can I save this data into a file ? I have try to use this logic file set test.txt contents=[/system serial-terminal serial0 channel=0 ] but the file stay 0 only ...

David1234

Hello , I have start working with Python API using routeros_api I want to change a nar rule according to it's name I manage to do this connection = routeros_api.RouterOsApiPool('10.0.0.138', username='admin', password='password',plaintext_login=True) api = connection.get_api() NatRule = api.get_reso...

David1234

nice idea
can you show me a link \ guide \ example ?

Thanks ,

David1234

I will say I'm meduim user in mikrotik and networks
not a beginner but not an expert

David1234

I will exlain my "problem" I have a camera 10.0.0.105 connected to mikrotik router with public ip x.x.x.x on port 8081 now , everybody who will try to enter the x.x.x.x:8081 will see the camera login page I want to limit the transfer to "allowed" mac address in the same netwrok i...

David1234

Hello , is there any way to create a nat rule that will pass not according to the ip but by the mac address of the remote devcie? so for a regular and simple nat rule ; add action=dst-nat chain=dstnat dst-address=x.x.x. dst-port=8081 protocol=tcp to-addresses=10.0.0.105 to-ports=8081 it will only wo...

David1234

Hello , I have a running mikronode app that connect to my router and get data - works like a charm! but sometime I check devices that have another password what do I need to do in the code in order to see I'm sending the wrong password , and then enter new one? if I use the example : var MikroNode =...

David1234

Great
Thanks !

David1234

it working ,
thanks
small question :
when I connect My phone\tablet I see "!" near the wifi signal sign
everything is wotking I can go online and go to the sensor
why is it?
do I need to add anything else?
Thanks ,

David1234

this is what I have

/ip dhcp-server network
add address=10.0.0.0/24 domain=DavidHome.Net gateway=10.0.0.1

change\edit it? , to what?
Thanks,

David1234

I'm using the router connect to an ADSL modem in the pppoe-out I mark use peer DNS if I run ipconfig /all I see in the DNS Server from the ISP DNS but isn't the computer and all other dhco clients from the roouter first look at the dns static on the router? what to do in order to make this work? Tha...

David1234

still mot working
this is what I have

/ip dns static
add address=10.0.0.109 name=DavidSensor.com

when I enter 10.0.0.109 - I can see the sensor page
I have reboot the router and the computer to be sure

David1234

hello , simple question: I have home network and I have connet to it 2 sensors. I'm trying to add dns entry for each sensor - so when I connect to my network and wnat to see sensor1 I will enter http://www. sensor1.com and not 10.0.0.109 this is what I did : [admin@Home] > /ip dns cache all print Fl...

David1234

Hello , I have a reverse proxy server that running on cloud and it's working (with public IP), and the router use ppp-out connection what do I need to setup inside the router so all trafic from the Wlan will go throw the proxy ? the device is : ethernet - 10.0.0.1/24 ppp-out - dynamic IP , default r...

David1234

OK ,
if I'm using mysql can it work with this ?
also - do you have a simple guide to show me how to do it?
we start to work with 25 users , and time past now we have ~1000

David1234

yes this is what I thought I need I have try to this but without any success do you a guide to how to do it? I have search something in nginx but I can't seem to understand what to do this is the setup they suggest : server { listen 80; server_name www.example.com example.com; location /app { proxy_...

David1234

I will try to expalin again: I have a webserver running Tomcat on linux with public IP(82.159.x.x) so everyone can enter it (if they have the right user\pass) this webserver is connected to the project network (10.0.0.0/24) I want to give access to the user to enter the local devices\servers (10.0.0...

David1234

I don't think it's the solution
all the computers use the same port
and how do I do it using the web-server ?

This is a tomcat web-server and not mikrotik router , if it was mikrotik router (or any router ) - I agree this is the solution.

David1234

Hello , maybe someone here can help me understand what I need to do... I have a web-server that show data from 4 remote servers\computers, the web-server is accessible from all over the world (have a static public IP) I want to give access to the remote computers from the web-server , so when someon...

David1234

Hello, I'm using a script that show me the SIM number inside my router sometime acoording to the ISP the sim is just numbers and in another ISP it have letters for example : SIM from ISP1 is 89********12 SIM from ISP2 is 89********2F how can I cut the "F" from the replay ? the length doesn...

David1234

Hello , it there any to export my ppp-secrets to mysql database? My router have about 1000 ppp-secrets (clients) and sometime I need to get data from all of them , for example: last connected in 1 month , information about clients with subnet 10.0.0.0/24 etc... I didn't find a smart and easy way to ...

David1234

OK ,
this is what I look for

Thank you!

David1234

Hello , I have a working server on cloud using v6.46 I'm able to connect to it using winbox but when I try to connect using API (C# code) I'm getting "login failure for user admin from x.x.x.x via api" but when I connect with winbox with the same user\passit's working I remember there was ...

David1234

Hello , I have a router that provide wifi to my office , and it also connect to camera. I notice that if to many people connected to the wifi - the streaming is slow .the max band I need is ~ 1.5M for the camera (So I want to make sure I have this before I can "give it" to the WiFi clients...

David1234

yes
using 2.2.15
3.11
3.18

same problem in all of them

David1234

Hello , I have notice that if I open Winbox to a rotuer version 6.46 and keep it open with out any intercation from me - it get disconnected after ~ 20 seconds what could be the reason when I ipen the same winbox in the same computer to version 6.42 - it can be open for hours ? ** nothing on the fir...

David1234

Hello , I just start to work with nodfe-js (I have never program in JS before) , so maybe the question is dumb... I jsut wnat to enter my router and get a variable called SIM this is what I worte (after looked up over the internet ) var api = require('mikronode'); var sim="" var connection...

David1234

Great! this is what I wanted ,

Thank you!

David1234

Hello Is there any whay to get the MAC of a client when he connect to my hotspot ? not by html but using the script in the hotspot/user-profile/ on-login? I want to get the MAC and the time of the connection and send it to my syslog (I guess it will also work on logout...) how can I do this ? Thanks ,

David1234

it's working ,

Thank you!

David1234

Hello , I'm trying to get the uptime of the ppp-out connection where can I get it? I have try /interface get ppp-out1 actual-mtu fp-rx-packet link-downs rx-byte tx-drop comment fp-tx-byte mac-address rx-drop tx-error default-name fp-tx-packet max-l2mtu rx-error tx-packet disabled l2mtu mtu rx-packet...

David1234

I thought maybe there is a "smart" solution to do this
"no" - is a very good answer

I don't know all , this is why I'm asking

Thanks ,

David1234

yes , without any problem
uplaod the image to the backet and install from there
make sure you open the port ssh\winbox in the security list
it's working for me for 5 months now

David1234

to install a sip server on mikrotik as linux
this is not what I meant

I meant to make the router itself to be use as a server
so all my client will connect to the server,without the need to install any other linux sip server

David1234

if it's a doable , the device will be x86
just want to know how to ,
can you share a link or wiki?

Thanks ,

David1234

Hello , I have setup a new L2TP server but I can't reach from 1 client to another: MY_PC --- Server --- Client_PC 172.16.254.1 --- 172.16.254.254 --- 172.16.43.1 I have ping to the server 254.254 , but that all. from the client I have also ping to 254.254 but no more. I have disalbe all the rules in...

David1234

is there any way to make this ?

David1234

my mistake
now it's working

Thanks !

David1234

1. I don't NAT the IPSEC /ip firewall nat add action=masquerade chain=srcnat dst-address-list=!172.100.58.0/24 2. I have disable the firewall on the ORacle side to be sure 3. My computer is 10.0.0.188/24 and in the policy is add disabled=yes dst-address=172.100.0.0/16 sa-dst-address=Oracle.ip \ sa-s...

David1234

I mange to make it work using what you wrote and some "playing around" now I can the IPSEC is up on bith side (Mikrotik and Oracle cloud) but I don't have a ping to the server how and where can I check what is the problem? I ask the same thing in Oracle and waiting for answer - but I want ...

David1234

is ther any way to tag a computer?
and make it be vlan 100 ?
and then i could check it?

or maybe there is another way yo check it's working?

Thanks ,

David1234

Hello , I'm trying to setup a vpn to Oracle cloud . but I jsut can't seem to understadn the setting I need to do in the Mikrotik this is what Oracle is using on their side: SAKMP Protocol version 1 Exchange type: Main mode Authentication method: pre-shared-keys Encryption: AES-256-cbc, AES-192-cbc, ...

David1234

it's seem that I need to create a bridge and add ports:
ether1
vlan1
vlan2

now it's seem to work ,
I have ping and to router and I can go to the internet

David1234

Hello , I'm trying to setup 2 vlans on my RB this is what I have done : /ip address /interface vlan add interface=ether1 name=Vlan1-Camera vlan-id=100 add interface=ether1 name=Vlan2-Computer vlan-id=200 add address=10.0.0.133/24 interface=ether1 network=10.0.0.0 add address=192.168.100.254/24 inter...

David1234

got lost somewhere ..... I have try 2 links - nothing works for me https://linuxtechlab.com/squid-transparent-proxy-server-complete-configuration/ https://www.cyberciti.biz/tips/linux-setup-transparent-proxy-squid-howto.html I have reinstall he ubuntu - mayne it's too complicated to config? (it's al...

David1234

Hello , I'm trying to use squid as a proxy server in my netwrok this are the seeting I have added to the router /ip firewall mangle add action=accept chain=prerouting dst-port=80 in-interface=wlan1 protocol=tcp add action=accept chain=prerouting dst-port=443 in-interface=wlan1 protocol=tcp add actio...

David1234

Thank you!

David1234

OK - I understand now so just to be 100% : After I mark the port and select which gateway to use - I make its distance 1 - so it's the first one to use then I make the same route rule but with distance 2 using blackhole so if from some reason SIM1 in not active \ working - it will bot go out using a...

David1234

0 A S dst-address=0.0.0.0/0 gateway=SIM1 gateway-status=SIM1 reachable distance=1 scope=30 target-scope=10 routing-mark=SIM1 1 A S dst-address=0.0.0.0/0 gateway=SIM2 gateway-status=SIM2 reachable distance=1 scope=30 target-scope=10 routing-mark=SIM2 2 A S dst-address=0.0.0.0/0 gateway=SIM1,SIM2 gat...

David1234

I thought about it and I reset to defualt the router to start from a clean setup and now it's working SIM1 is used for L2TP SIM2 is used for OpenVPN now my question is about the blackhole do I need it? I don't want that if SIM1 is not connected it will be used for OPENVPN this are the routes I ahve ...

David1234

I want the router to connect only to 2 netwroks
Open-VPN and l2TP

and if SIM1 is not connected - then I will not have L2TP connection and only work with SIM2 in the OpenVPN netwrok

David1234

OK
I want to use
L2TP from SIM1
OpenVPN from SIM2
all other connection - will be close
and if SIM2 is not working - then the router will not have OpenVPN

* the L2TP \ OPEN VPN are form the router only - not from a computer connected to it
Thanks .

David1234

Hello, I have notice something and wanted to know if the problem is on my area . I have a L2TP\OpenVPN server and a RB with OpenVPN client and L2TP client now when I do a speed test with the OpenVPN(server to router ) I get poor resualts when I turn of the OpenVPN and turn on the L2TP and do speed t...

David1234

OK , to see I understand it when you say: add route routing-mark=SIM1(for example) type=blackhole - does it mean that if SIM2 is not online it will work from SIM1? and not get stuck ? ot will not work at all - so all the L2TP connection (UDP 1701 ) will not work from this router? I coudn't understan...

David1234

Hello, I'm using 2 modems with 2 sim I want to use SIM1 for only open vpn - so when I try to make a connection using tcp port 1194 he will use it and SIM2 for only L2TP which is udp 1701 adn default sim (all other port) will be SIM1 I made the firewall mark /ip firewall mangle add action=mark-routin...

David1234

Let me exaplin from the start what I want to get : I have 2 workers that use RBM33G with 2 SIMs I need then to be at the same netwroks - because I want them to be able to "talk" in order to to this - I have setup 2 open-vpn client on each RB to connect to my Office server and put them in b...

David1234

OK I have change the MAC but still I can't make the second sim work when I make a speed-test I can see the the data is over sim1 only what else can I do? I have try to use load balancing using PCC method I can see the 2 open-vpn client are working at the same time and have the transferring the same ...

David1234

I don't think so...
can you expalin how to do this ?

In the end I have the router with 2 modems&sims and I want to get faster connection the main server (which is in my office)

David1234

Hello , I'm trying to make my router work as bonding using my 2 modems added the 2 ovpn client to the bonder but I can see it's only working from 1 sim this is the configuration I have on the router # model = RouterBOARD M33G # serial number = A2FD09FE0270 /interface ovpn-client add cipher=aes256 co...

David1234

Hello , I'm trting to connect to my RouterBOARD mAP 2nD a disk on key 4/8/16GB but it doesn't seem to recognize it - but when I connect a usbToRS232 cable - it show on port as usb1 I have also try to connect a modem usb dongle - it's turn on - but no usb on the port * I'm using a microUSB male to A ...

David1234

Hello , I have this configuration: main router that connected to adsl modem ,that I use as the WiFi at home another router that located in my room so I will be able to connect with my old computer to the internet. in router 2 I have a bridge with ether1-4,wlan this are the firewall setting in router...

David1234

Hello , I'm working with version 6.43.4 and I wnat to represent the mdoem signal with leds 1-5 this is what I have done: /system leds set 0 interface=ppp-out1 leds=led1 modem-signal-treshold=-95 type=modem-signal add interface=ppp-out1 leds=led2 modem-signal-treshold=-85 type=modem-signal add interf...

David1234

this is what I did ...

Thanks ,

David1234

I know
but I don't wnat to go out to the internet using the office (vpn)

I manage to change the setting in the computer netwrok connection (remove V from the default gateway)

but I thought maybe there is a way to this from the router?

David1234

Hello , I have setup l2tp (without ipsec) to my office router and I want to linit my connection to only 1 network inside the office and for the internet to use my home connection (not use the vpn) I have this setting in the firewall for my user 11 chain=forward action=accept src-address=172.16.100.4...

David1234

Hello , I'm having a problem create a L2TP client from my windows computer to my office router when using windows 7 I get error 789 security layer problem the same thing in windwos 10 I don't use ipsec just l2tp client what is wrong? * I'm able to connect to the router using another router as l2tp c...

David1234

I want to take 3 WANs on one side and use then as 1 pipe that only connect to the Main office (no need for intenet access )
to do local network over the internet but with 3 to 1 wans

David1234

can I do this without address?

will this do the job?

add action=drop chain=forward in-interface=all-ethernet out-interface= all-wireless
add action=drop chain=forward in-interface=all-wireless out-interface= all-ethernet

Thanks ,

David1234

yes when I run from the tools ping - Arp Ping I get a repaly from and see the MAC so why can't I reach to the device my mistake it's a PI with VNC on it and the port is tcp 5900 when I connect the PI to my computer and open VNC to 10.0.0.100 port 5900 it's working Very strange what can it be ? Thank...

David1234

I have check and connected the copmuter to my computer and run the ping command I got a resualt so it's not this I also thought that for some reason the ping is block so I have try to connect using RDP (NAT to 3389 ) - didn't work and it did work before(I was able to connect to the remote computer )

David1234

Hello , maybe someone here can help - I have a router with a computer connected to it using IP 10.0.0.120 when I try to run a ping from the router terminal I get no replay but when I run Tools-->IP Scan - 10.0.0.0/24 interface = ethernet I can see the the replay and the MAC. what can cause this prob...

David1234

I thought it also
but when I open the log I don;t see nothing new

David1234

Hello ,
sometime when I connect to the router using ssh
I get this message

2265 messages not shown

* the numer is change

what does it mean>?
and also how can I see this messages ?

Thanks ,

David1234

I appreciate you are trying to help but it's seem you are not reading what I have and ask the same quesion over and over :-) remote site: 1 ehternet for local netwrok 3 ehternet for 3 WANS with no public/static IP - or maybe if you think about it as 3 lte modem office site 1 ehternet for local netwr...

David1234

I do need the bonding beacsue I want to use all 3 WANs at the same time for uplud the data to the main office you say I can do this usnig PCC ? just remember I have on 1 side 3 non static\public IP and as I said before if I setup 3 EOIP to the offcie - it's only using WAN1 and not all 3 so can you e...

David1234

i understadn how to do it api but how can I do this with spesific (unknown ) ip? so for example user computer is 192.168.101.1 and he want to connect into the router using putty (ssh , port 22) I want him to be able to only open only 1 connection (1 window....) but if user2 with ip 192.168.101.9 wan...

David1234

Do you think I can create the same thing using lt2p ? because my wan is not static or public , so I can't use this (I have try the configuration in a place where the 3 WANs are public - that way I know it;s working) so I thought maybe I can "build" 3 lt2p clients to the sever then use the ...

David1234

well it's working ! I manage to understand what you did there Thank you very very much!!! 1 more question : is there an option to make this work without a static IP from the 3 WANs side? maybe to setup the out interface only? I know the EOIP need to get a static IP , so both side can "talk"...

David1234

yes , but if I don't have control on M2 - what can I do? for me M2 is the ISP/internet/cloud lets make this simple I have a mikrotik router with 2 LTE modems (which is M1) I get 2 private non-static address 10.136.1.1 10.136.1.2 I have another mikrotik router with 1 ethernet - connected to ADSL mode...

David1234

first of all - thank you for the explaining :-) now what I mean is : how can I do this if I don't have any control over M2? let say the M1 is a mikrotik router with 3 ADSL connecting to him as pppoe-out1\2\3 and I get this address 1.1.1.1 , 2.2.2.2 , 3.3.3.3 (which are public) and M3 is a mikrotik r...

David1234

this is not what I wnat to do

I want M1 to go out with 3 address\interfaces
and M2 to have only 1 address\interface

so I want to go from M1 to M3 ...

Thanks ,

David1234

but then how to do the bonding?
I can't seem to understadn how to do this

David1234

I don't think so...

because how do I "tell" the tunnel to go with ADSL 1\2\3?

David1234

In my office I have a mikrotik router that use an 3 X WAN connection with 50M/10M Down/Up for each WAN (ADSL) , and in the remote location I have a mikrotik router with 1 WAN with a connection of 200M/200M Down/Up . I want to bond the office to the remote location how can I do this ? I know I can do...

David1234

this is what I did :

add action=accept chain=input connection-limit=5,32 disabled=yes dst-port=8728 protocol=tcp

but the API is still able to connect more then 5 times and stay connected ...

David1234

Hello ,
wanted to know - is there any way I can limit the connection to the router using API to 5 (for example)?
meaning that only up to 5 open connection can be at the same time?

David1234

Hello , I have a l2tp server that give address pool of 192.168.0.0/16 for normal reason I gave the local address for all clients 192.168.254.254 (which is the server) my problem is that when a l2tp client is connect , he can ping and also connect to the other clients that are on line is there any wa...

David1234

1. No , I'm not using IPSec , only L2TP port which is udp-1701 2. I have check and everytihng is open in the second server , I can connect to it using l2tp client (so it's working) I think my problem is in the outgoing (from server1 to server 2 on the udp port) I can see the NAT rule increase on the...

David1234

I have try this
but still not working

do I need to turn off the l2tp server option in the first server to make this work?

this is what I have in the firewall

add action=dst-nat chain=dstnat dst-port=1701 in-interface=Wan protocol=udp to-addresses=1.1.1.1 to-ports=1701

David1234

Hello , wanted to know can I "route" a l2tp request? I have a server on x.x.x.x I want to router the request and make them connect to another L2TP server at y.y.y.y(with the same user\password) - which already excicte in the second reouter can I do this? the reason is - I need to shut down...

David1234

my router is just ntp client
so I will remove this

Thanks ,for now for all the help and explaining
If I have more iisue \ quesions I will as k

Thanks !

David1234

I did what you told me - and it's seem to be working but I don't understadn why - this is what I have now /ip firewall filter add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked add action=accept chain=forward...

David1234

they come from the netwrok ,
the DNS from my ISP
ntp from 0.pool.ntp.org

David1234

1. @Redmor this is for the router itself ,no ? why do I need to forwarding this ports? I need the router to get the dns \ ntp please explain .. 2. when I disable the rule and remove all block ip - it's working , but then would it still "safe" - meaning if someonw will try to hack amsk a Do...

David1234

Hello, I have this firewall configuration /ip firewall filter add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked add action=accept chain=input comment="To router " dst-port=9000,2222 protocol=tcp ad...

David1234

Great I have another question now : I put the rule you told me as number 0 /ip firewall filter add action=accept chain=input comment="accept established,related,untracked" connection-state=established,related,untracked can you explain to me what it does in simple (like the great example of...

David1234

Thanks , by the way what is the different between "drop" and "reject" aren't they do the same job? prevent knowing there is something in that IP? I do have 2 more questions: 1. I have in my router a L2TP client why do I need to add this rule to make this work? add action=accept c...

David1234

so something like will be Ok and work? /ip firewall filter add chain=input comment="Allow ssh , winbox " dst-port=8291,22 protocol=tcp add chain=input comment="Allow Ping " protocol=icmp add chain=forward comment="Allow NAT to camera" dst-port=9999 protocol=tcp add acti...

David1234

I'm trying to learn , this is all - :-) not trying to build something new... so what you are saying is - the first rules will be what I allow to enter the router \ netwrok that whay I know what is going in and in the end to put "input , tcp , drop" so when I will need to add new port - I w...

David1234

isn't what I did ?
all the ports I don't use - I dorp them

this was the question -
is it good?

Thanks ,

David1234

is there any way to know in which port someonw is trying to connect my router? becasue this is what I did I block all port that not in use in my network: /ip firewall filter add action=add-src-to-address-list address-list=Port_TCP_Scan address-list-timeout=2d chain=input dst-port=100-8599 in-interfa...

David1234

Hello , my server has been hack by someone that want to show me that I need to do some good firewall rules this is what he did : (I have disable all the rules he add) Can someone saee what he did , and what I can keep? or it's all gatbage ? Thanks , /ip firewall filter add action=add-dst-to-address-...

David1234

great - it's working!

I have notice that the lisence is free
are there any limitations?
for example - how may l2tp client can the server have ?

Thanks ,

David1234

Ok I will give it a try

Thanks!

David1234

Hello , I have a router wiht a public IP , and start to notice that he is booting every 3 min when I got to him I saw the cpu is 100% after using the torch - I saw a lot of connections in port 32231 tcp so first I block the port in the firewall - is there anything else I can do ? in less the n10 min...

David1234

OK

Today I have been inform that we are not going to work with Amazon ,but with Oracle Cloud
can I do the same thing there?

I have look on the "ready to use" images \ OS - and ther is no mikrotik there

David1234

Hello, I want to run a mikrotik server on Amazon cloud from what I read and understadn I need to first install any version of Linux then install the mikrotik image - is this correct? or I can upload image to the cloud? can I work according to this guide: https://medium.com/@kvapss/easy-way-for-insta...

David1234

it will work ,
because my POE is 12V - nad iit's running for a week now ~

but I did't know the rest -
Thank you for the information!

David1234

Hello ,
when I look at the powering specifications of the mAp-2n , is said:
PoE in 802.3af/at
PoE out Passive PoE

what does is mean?
I mean the poe-out ?

if I have a 12V poe camera ,
can I connect it to it?

Thanks ,

David1234

Hello , I know I can connect the a device using ssh from the menu: tools-->telnet-->ssh when I do it from cli it ask me for a password , why? is there a way to make the password in the cli (auto) ? in the end I would like to send a reboot command to a device connectedto the router using ssh Thanks ,

David1234

What I mean is
when I do info I get
cellID number and lac
is there any website that can show me information about this data?
this is what I get
cellid: 76603, lac: 19dd

but where can I see where is it?

Thanks ,

David1234

Hello , I'm trying to use the EC25 with the RB411 RB version V6.43.1 but I don't see it on port\usb\resources - no where when I take the modem and connect it to RB911G-2HPnD - it's working when I take another modem sierra MC7304 and connect it to RB411 - it's working the funny thing is , that I did ...

David1234

Hello ,
I'm using on my router ntp 0.pool.ntp.org
and now I have notice it's stop working .....
I get not sync
and after reboot it doesn't show any data

I have try all kind of ntp server - none of them seem to work

any one know why?

Thanks ,

David1234

maybe you can say what you did?

David1234

Not working mikrotik.Send("/port/remote-access/set"); mikrotik.Send("=numbers=serial0"); mikrotik.Send("=disabled=yes", true); "!trap=message=no such item" string but i did in the end is to get the .id of the serial - then use this. so I will use this . but ve...

David1234

Helllo ,

I can;t seem to understadn why this command does't work:

mikrotik.Send("/port/remote-access/set");
mikrotik.Send("=port=serial0");
mikrotik.Send("disabled=yes" , true);

I have also try


?=
?
=.id=

any idea?

Thanks ,

David1234

Hello ,
wanted to know
is there any way to know if serial device is connect to the router ?
something like "R" on the ethernet\ppp?

and also is there a way to count the data ?

Thanks ,

David1234

I didn't about using "Contains"...

which is the same as see the size of the answer

I'm using this - so Thanks ,!

David1234

Hello - strange problem : when I have a someone connected I get this replay : "!re=.id=*1=port=serial0=channel=0=allowed-addresses=0.0.0.0/0=tcp-port=8271=protocol=raw=log-file==remote-address=10.0.0.60:49972=active=true=disabled=false" which is good because I can know if someone connected...

David1234

David1234

I'm using RB411U wiht latest version and I see it take about 45 seconds to boot (until I hear the beep and get ping from it) is there any way to reduce the time? I have only this packages install: 0 routeros-mipsbe 6.43.2 1 system 6.43.2 8 ppp 6.43.2 9 security 6.43.2 10 advanced-tools 6.43.2 Thanks ,

David1234

OK - I will add to the config file and see I have 1 more question now (if it's OK with you :-) : 1. the user\password are auto insert becasue of the "auto.cfg" file and this line in the config : auth-user-pass auth.cfg but when I connect it ask me to enter the parse I enter in the certific...

David1234

My router is config likr this : ehternet - 10.0.0.1/24 openvpn - 172.10.100.254 - pool 172.10.100.50-70 LT2P clients 192.168.1.0/24 when I connect I get IP 172.10.100.70 and I have ping to 10.172.10.254 but not to 192.168.1.0/24 - how do I add this? something in the config file? or something in the ...

David1234

found the problem
in the config file I have change the first line from

dev tap

to

dev tun

and now it's connection...

Thanks for your help for now

I will try to see if everything is working now

David1234

this is a start :-) but still not working I have done everthing it said here https://systemzone.net/mikrotik-openvpn-setup-with-windows-client/ but when I try to run the connection I get : Sat Sep 29 15:57:23 2018 us=993102 disabling NCP mode (--ncp-disable) because not in P2MP client or server mode...

David1234

Hello , I want to start using in my office OpenVPN I have setup everything in my router and I want to check I have download https://openvpn.net/index.php/download/community-downloads.html than what? where is the connection? how do I connect to the router? can someone help? when I try to run the shor...

David1234

I agree
most of the users think that when they see the WiFI Icon - they are connected , while they don't.

I prefer the hotspot pop up - it save a lot of explaining to the users

but the problem is to make the brower \ pop up stay on - so they can see my homepage

any solutiuon?

David1234

all my code is in the mikrotik API and not the Tik4Net
I wnat to start working with this - when I have time

Thanks ,

David1234

yes ,
this is what I did for now
saved all the Id and then remove them 1 by 1

Thanks ,

David1234

Hello , I'm tryin to remove dhcp clients by using this all this commands (every time another command....) : mikrotik.Send("/ip/dhcp-server/lease/remove"); mikrotik.Send("?=server=dhcp1" , true); mikrotik.Send("?server=dhcp1" , true); mikrotik.Send("?server=all"...

David1234

Hello , I have lt2p server with a uniqe user\pass that give IP . now I want to add to it a a dhcp pool - so with the same user\pass it will give him a IP for example user test password test It will give it 192.168.25.0/24 how do I do it ? so it wont affect the normal users? ****************** I did ...

David1234

can you explain what you did there?
I can't seem to understad the logic

I have the same problem -
I want to redirect my users to my page after login - but the captive portal is turn off after login
did you mange to "Fix" this problem ?

Thanks ,

David1234

Hello , wanted to know if I can do this: setup value to global then run a script no if there is no such script the global will stay 0 ; if there is it will get the value from it example: :global test 0; :execute script="test"; ### when the script run it +1 the global veriable test; global ...

David1234

no
I want to know the specific time
for example - 00:04:00 (4 min)
I ahve try this option

David1234

I have try in
/interface get ppp-out1
/interfave ppp get ppp-out1

but in none of the mI ahve the option to see how much time the modem is connected

Does someone know ?

Thanks ,

David1234

Hello, I have a serial device connected to the RB - and everything is working when I connect to the RB from office - I can get to the serial device and see it's data (send data every 10 seconds) my question is - can I creat a script that enter the serial ,and save the data? like when reading the inf...

David1234

Hello , I'm using RB912UAG with v 6.40.1 and I have a this simple script name="GetWirelessMac" owner="admin" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon last-started=jun/13/2018 14:28:35 run-count=14733 source= :global MAC; :if ([/interface wireless re...

David1234

I have ask Mikrotik support
and they say to downgrade using Netinstall - and it's working

work
try it

David1234

Hello , I have write a code that connect to router and save the data in mysql my problem is that it take too many time (I have about 100 units) how can I run the "reading" function for 10 IP at the same time ? and not 1 by one? my program is 1. read databasa - and get\save the IP 2. read e...

David1234

Hello, I have try to downgrade from v6.42.1 to 6.36 and this is waht I get : RouterBOOT booter 6.42.1 RouterBoard 411U CPU frequency: 300 MHz Memory size: 32 MiB NAND size: 128 MiB Press any key within 2 seconds to enter setup.. loading kernel... OK setting up elf image... OK jumping to kernel code ...

David1234

Hello , I want to limit my DHCP clients to 0.5Mbps downlaod I have manage to create a simple queue to all the interface that go to the internet /queue simple add disabled=yes limit-at=512k/512k max-limit=512k/512k name=queue1 target="" but this is not what I want ... I want every client wi...

David1234

I had a problem wiht my IPSEC connection - something in the seting this is why I ask after you show me what to do - it works and now I need to give an answer to make them surf using WLAN2 and IPSEC Waln1 this is a "working on progress" quesion :-) up until this point - everything is workin...

David1234

I make 3 static routes ****this part is for the Isec address onlt 1.1.1.1 - WAN1 (the peer IP , Unit on the remote site) 10.0.0.0/24 - WAN1 (netwrok 1 on IPSEC) 10.1.0.0./24 - WAN1 (network2 on IPSEC) ********* 0.0.0.0/0 - WAN2 (all other netwroks ) and now it's working now I want to limit the outgo...

David1234

great - now I have another quesion I have 2 WANs connected to the mikrotik WAN1 is working with the CheckPoint VPN - no problem - working . I want to able the client to connect to the internet (youtube,facebook) with ADSL2 - WAN2 so I have try to mangle and route : /ip firewall mangle add action=mar...

David1234

this is what I thought so the problem is in the the CheckPoint side ..... by the way just to be sure it's working I should see the other dise in the "Installed SAs" right ? /ip ipsec proposal set [ find default=yes ] auth-algorithms=md5 enc-algorithms=aes-128-cbc \ lifetime=1h /ip ipsec pe...

David1234

This is what I thought - great

and the proposal - is for pashe 2 , right?

Thanks ,

David1234

Hello ,
I'm trying to setup an IPSEC to Checkpoint device
but I get lost in all the setting in the checkpoint side
can some one help me understadnd where is phase 1 and phase 2 in Mikrotik ?
Thanks

David1234

hello , I'm running a C# application that connect to the mikrotik using api I have notice that some time my application "freeze" without any explain when I debug the code I can see it get stuck here : while (true) { try { tmp[3] = (byte)connection.ReadyByte(); /// -> the code stuck here ca...

David1234

Hello this is my configuration Computer---RB411(with modem)---internet now I want to the users to connect to external proxy server that sit on IP 91.135.1.1 port 3311 what do I need to do in order to make it work? if I setup in the chrome\explorer proxy setting 91.135.1.1:3311 - everything is workin...

David1234

Hello , I'm trying to run an external proxy with mikrotik WiFI the AP is bridge (wlan+ether1):10.0.0.1/24 DHCP pool is 10.0.0.10-10.0.0.30 route 0.0.0.0/0 --> 10.0.0.250 everything is working just fine , have internet access. now I want to connect the proxy server (I'm trying to use WinGate V9) 10.0...

David1234

Hello ,
I have a small program that upload files to my router using C#
but I notice that if there isn't a directory in the hotspot (for example hotspot/images)
it doesn't upload the file
how can I make it create the folder while uploading the file?

Thanks ,

David1234

1. I have check the firewall connection - and nothing is going to this address , I have even turn off the ethernet&Wlan connection - and still there is a data going on the ppp-out. 2. the problem is that it's "wasing" all my data plan - and I ahve notice in the last 4 days it's been 19...

David1234

Tried it ,
still I can see connections and data

12.PNG

David1234

Hello , I have a router workiong with hotspot I have added to the walled-garden this line - /ip hotspot walled-garden add comment="place hotspot rules here" disabled=yes add dst-host=https://www.deezer.com / I have also notice that www.ebay.com not working for me but if I put a random webs...

David1234

I have a strange problem even if nothing is connected to my router , I can see that there is a RX of 3-5Mbps when I do torch I can see that IP is connecting to my router in 3 port and downloading from it 2M in each port firewall.PNG when I make a firewall rule and try to block this IP /ip firewall f...

David1234

Hello ,
I got the CLM920 modem ,and it's working on V6.41.3 with this setting:
data =3 , info =3
but anyone know how to make the GPS work?
or maybe have a link to its AT commands?

Thanks ,

David1234

and how can I use it using terminal command?

David1234

Hello , when I use the Quetcel as ppp-client I get the ip from my ISP 91.111.5.2 but when I cahnge the setting to work as LTE interface , and I setup DHCP-Client (as shpuld in LTE mode) I get 192.168.1.3 as the my IP - but if I go to whatismyip.com I can see my ip is 91.111.5.2 so I guess it's somet...

David1234

Hello , I have created a small program(in c#) that connected to the router get his version and quit very simple and working :-) So i'm only need to enter the IP and the software give me the answer . now I want to save the resault into a file - and make a "data base" of it so if I have 100 ...

David1234

the mikrotik.read is the default code from the mikrotik wiki if I understadn correct it the simple read() of c# when I debug it - it get stuck on - foreach (string h in mikrotik.Read()) so I think the code is waiting for the read command to finish? I don't get any exceptions - nothing so what else I...

David1234

hello , I have a router weith hotspot and I ahve config the login.html to be auto connection so the user will automateclly connec to the internet , and in the alogin I ahve redirect him to my webpage but I ahve noitce a small problem when the user open the browser and the page is https - I get error...

David1234

OK - thanks ., 1 more question about it I have made a command that change the IP of the unit and now - the application get stuck after it this is what I did - mikrotik.Send("ip/address/set"); mikrotik.Send("=.id=" +etherID); mikrotik.Send("=address=" + NewIP , true); fo...

David1234

Hello, when my router is offline (no internet connection) - I don't get the login.html page on my samsung S8 (andorid 7) when I connect with my LG (android 6 and android 6.0.1) - I get the login.html also when I connect with windows7 and android 5 what could be the problem? how can I fix this for an...

David1234

maybe someone can help me with a very strange problem I'm using a mhp with a usb modem just ppp-out , no other setting at all when I run speed test - I get download 40Mbps but when he get to the upload I get 0 - I have try sevral servers to check - all of them Iget the same problem I have change the...

David1234

1- So, you're not using PPP client, but LTE, right? using a ppp-client interface (but I can connect to the 4G LTE netwrok). 2- And are you using Telit LE910? I found strange that in your case, it identifies with Telit. In mine, it shows Android. Telit LE90-AU V2 3- What's the result for "System...

David1234

The radius part is working without any problem when I connect to the hotspot I see I register on the raduis server - this is fine but waht I want to do is - create a login page on the radius server it self - so I will have 1 login page for all the units so if I want to change a image on the login pa...

David1234

can you guide me even more about it? waht do I need to do in the main hotspot router I know how to redirect from a unit to external web page - but then what ? how do I tell him to connect using a raduis ? I will explian my scenario better: I have 5 (it will grow to 10) RB with hotspot on it , that a...

David1234

Thanks you for all this but I have allready try it nothing ..... could not connect - not even try to dial out I can see the network LTE -62dBm , not a problem aslo in resource I can see it's telit /system resource usb print # DEVICE VENDOR NAME SPEED 0 1:1 Linux 3.3.5 ehci_hcd RB400 EHCI 480 Mbps 1 ...

David1234

Hello ,
I ahve a small c# program
and I want to know how can I disconnect from the unit ?
is there any "quit API" command?
Thanks ,

David1234

Hello ,
is it possiable to redirect my hotspot to an external mikrotik hotspot server?
so if I have 4 hotspots all of them will have the same login page , and only one place I will mange the users?

Thanks ,

David1234

I'm trying ti work with telit LE-910 - I put data =3 , info =0 I can see the netwrok (LTE) and the sim is working but I can't connect to in - say "no network protocol" any one know why ? (when I connect the modem to the computer - everything is working , so it's a RB issue....) Thanks ,

David1234

I want to run hotspot on my router that the users will be connected using radius server (also on the same router)
can I do this ?

what it the configuration for it?

Thanks ,

David1234

Hello , I have 2 units working in bonding mode 3X3 with 3 ADSL that work on low rate ~10MBps Upload&Downlaod the problem is that 1 ADSL is very low , and because of it all the data rate is low between the 2 units if I disable the problematic ADSL - then the rate is ~50MBps my question is - is th...

David1234

in the oldest version (6.23) there was a place I could see the sim number

but now in 6.40.1 - I can't see it

so how can I see the SIM that is connected to the modem?

Thanks .

David1234

Hello ,
What is the max speed I get get when I'm using a MC7304 modem as a ppp-out ?
I remember something about ~max 50 Mbps? becsue of the serail connection of it and not as LTE connection ?
is that true?

Thanks ,

David1234

Hello , I have problems with my MC7304 GPS - and I saw that I forgot to open the gps option in the AT command is there any way to do it from far? and also to know if the command has pass? because I try to do this: :global counter 0; :global command1 "AT!GPSAUTOSTART=1,1,180,50,1" \/interfa...

David1234

no I can't use Vlan

David1234

so how can I block it ?
I know how to limit the network to connect to the router.
but I also don't want to block the discovery
so how can I do this ?

David1234

Hello, I want to know if I can blockthe discovery from a specific address in my netwrok so the router will be 10.0.0.1/24 my netwrok is 10.0.0.0/24 but I will only see the it in winbox from 10.0.0.10-10.0.0.20 all other computers in the network that aren't this address will not see it can I do this ...

David1234

Hello ,
I have try to use 3 differnet wirelesss cards miniPCI(e) on my RB
I don't see the interface
but when I go to resources -->PCI I se
"wireless network " , Unknown

I'm using V6.41

any way to fix this ?
or because it's unbrand WiFi card it doesn't show me ?

Thanks ,

Search found 1315 matches