Community discussions

Search found 41 matches

by pohutukawa
Mon May 07, 2018 5:13 am
Forum: RouterBOARD hardware
Topic: Mikrotik hardware? → 10-30 person business (fibre/wifi/guestwifi/L2TP/etc.)
Replies: 6
Views: 1029

Re: Mikrotik hardware? → 10-30 person business (fibre/wifi/guestwifi/L2TP/etc.)

rb1100ahx4 for router this router can handle up to 300mbps even with a heavy firewall mangle and QoS configuration wAP AC for wifi (how many depends of your scenario) keep in mind this access-point is designed for high performance, high capacity and high density of users not for wide area coverage ...
by pohutukawa
Fri May 04, 2018 3:51 am
Forum: RouterBOARD hardware
Topic: Mikrotik hardware? → 10-30 person business (fibre/wifi/guestwifi/L2TP/etc.)
Replies: 6
Views: 1029

Re: Mikrotik hardware? → 10-30 person business (fibre/wifi/guestwifi/L2TP/etc.)

Hi all I've done some research but there isn't anything I've found with sufficient overlap with my question, hence the post :D I'm investigating which Mikrotik hardware is appropriate for various types of client. Generally they are small offices of a few people up to 30 people. All have fibre inter...
by pohutukawa
Fri May 04, 2018 3:50 am
Forum: RouterBOARD hardware
Topic: Mikrotik hardware? → 10-30 person business (fibre/wifi/guestwifi/L2TP/etc.)
Replies: 6
Views: 1029

Re: Mikrotik hardware? → 10-30 person business (fibre/wifi/guestwifi/L2TP/etc.)

rb1100ahx4 for router this router can handle up to 300mbps even with a heavy firewall mangle and QoS configuration wAP AC for wifi (how many depends of your scenario) keep in mind this access-point is designed for high performance, high capacity and high density of users not for wide area coverage ...
by pohutukawa
Wed May 02, 2018 6:44 am
Forum: RouterBOARD hardware
Topic: Mikrotik hardware? → 10-30 person business (fibre/wifi/guestwifi/L2TP/etc.)
Replies: 6
Views: 1029

Mikrotik hardware? → 10-30 person business (fibre/wifi/guestwifi/L2TP/etc.)

Hi all I've done some research but there isn't anything I've found with sufficient overlap with my question, hence the post :D I'm investigating which Mikrotik hardware is appropriate for various types of client. Generally they are small offices of a few people up to 30 people. All have fibre intern...
by pohutukawa
Wed Apr 25, 2018 6:47 am
Forum: Announcements
Topic: Advisory: Vulnerability exploiting the Winbox port [SOLVED]
Replies: 204
Views: 165119

Re: Advisory: Vulnerability exploiting the Winbox port

Colourful language aside, hashed passwords are the way to go.
by pohutukawa
Tue Oct 25, 2016 10:50 am
Forum: Beginner Basics
Topic: [SOLVED] Printer shared to second LAN?
Replies: 37
Views: 7859

Re: Printer shared to second LAN?

So a quick note here to say that I solved this issue.

Some unknown person had managed to connect the switches of both LANs directly via cable.

Once I discovered this by a process of elimination, everything worked fine.

Thanks again to Revelation for all the help and patience.

Regards

Robin
by pohutukawa
Wed Oct 05, 2016 6:15 am
Forum: Beginner Basics
Topic: [SOLVED] Printer shared to second LAN?
Replies: 37
Views: 7859

Re: Printer shared to second LAN?

No, just add another rule dropping your traffic from reaching any IP in the 192.168.2.0/24 address space. You place that right after your permit to 192.168.2.152 for the printer. Hi Revelation Yep I understand. Isn't that what the second of the two rules above does? (using the !=not) Could you give...
by pohutukawa
Mon Oct 03, 2016 11:53 pm
Forum: Beginner Basics
Topic: [SOLVED] Printer shared to second LAN?
Replies: 37
Views: 7859

Re: Printer shared to second LAN?

If you set up your firewall rules to only allow traffic to and from the printer IP, this should not be a problem at all. If you wish to have more access between your networks then you can look at blocking the ports used by Bonjour. You should only need ports 5353, 5297, 5298 blocked. Hi Revelation ...
by pohutukawa
Sun Oct 02, 2016 10:00 pm
Forum: Beginner Basics
Topic: [SOLVED] Printer shared to second LAN?
Replies: 37
Views: 7859

Re: Printer shared to second LAN?

If you set up your firewall rules to only allow traffic to and from the printer IP, this should not be a problem at all. If you wish to have more access between your networks then you can look at blocking the ports used by Bonjour. You should only need ports 5353, 5297, 5298 blocked. Hi Revelation ...
by pohutukawa
Sun Oct 02, 2016 7:45 am
Forum: Beginner Basics
Topic: [SOLVED] Printer shared to second LAN?
Replies: 37
Views: 7859

Re: Printer shared to second LAN?

If you set up your firewall rules to only allow traffic to and from the printer IP, this should not be a problem at all. If you wish to have more access between your networks then you can look at blocking the ports used by Bonjour. You should only need ports 5353, 5297, 5298 blocked. Hi Revelation ...
by pohutukawa
Fri Sep 30, 2016 6:23 am
Forum: Beginner Basics
Topic: [SOLVED] Printer shared to second LAN?
Replies: 37
Views: 7859

Re: Printer shared to second LAN?

Hi Revelation Well that worked fantastically and exactly as expected. Thank you so much for your help with this. I've learned a lot, which will also apply to other situations I'm sure to face so thank you for your help on the education front also! Best wishes Robin Glad everything is working as exp...
by pohutukawa
Mon Sep 19, 2016 1:42 am
Forum: Beginner Basics
Topic: [SOLVED] Printer shared to second LAN?
Replies: 37
Views: 7859

Re: Printer shared to second LAN?

Hey Revelation Thanks! I will try this configuration and see how I get on. With my earlier configuration, I was firstly missing the NAT masquerade and additionally did not have ether3 as out/in interfaces on the first two firewall rules. On the drop firewall rule (your #3 above) do I need to specif...
by pohutukawa
Sun Sep 18, 2016 6:23 am
Forum: Beginner Basics
Topic: [SOLVED] Printer shared to second LAN?
Replies: 37
Views: 7859

Re: Printer shared to second LAN?

Hi Again! Just a quick reply with some links for the image... https://s22.postimg.io/4r6uq2kz5/network.png or shortened with Goo.gl: goo.gl/hrXkyX Can you see those? Could aways email… Regards Robin Hey Robin, Got it sorted and what I was thinking was correct. So I am going to assume that you have ...
by pohutukawa
Fri Sep 16, 2016 10:35 pm
Forum: Beginner Basics
Topic: [SOLVED] Printer shared to second LAN?
Replies: 37
Views: 7859

Re: Printer shared to second LAN?

Hi and thanks again for your help. I think I've got my head around this, but I have a problem: the administrators of the Juniper box have given me a fixed IP and basically said that I need to sort it out from there. Additionally, the Juniper side is a busy network for most hours so it's difficult t...
by pohutukawa
Thu Sep 15, 2016 10:36 pm
Forum: Beginner Basics
Topic: [SOLVED] Printer shared to second LAN?
Replies: 37
Views: 7859

Re: Printer shared to second LAN?

Hi and thanks again for your help. I think I've got my head around this, but I have a problem: the administrators of the Juniper box have given me a fixed IP and basically said that I need to sort it out from there. Additionally, the Juniper side is a busy network for most hours so it's difficult t...
by pohutukawa
Thu Sep 15, 2016 1:01 am
Forum: Beginner Basics
Topic: [SOLVED] Printer shared to second LAN?
Replies: 37
Views: 7859

Re: Printer shared to second LAN?

Hi and thanks again for your help. I think I've got my head around this, but I have a problem: the administrators of the Juniper box have given me a fixed IP and basically said that I need to sort it out from there. Additionally, the Juniper side is a busy network for most hours so it's difficult t...
by pohutukawa
Wed Sep 14, 2016 7:27 am
Forum: Beginner Basics
Topic: [SOLVED] Printer shared to second LAN?
Replies: 37
Views: 7859

Re: Printer shared to second LAN?

Once you have the /30 configured between them, go ahead and ping the remote IP from each box. before we get into configuring routes and FW rules, lets make sure the basics are working. If both ping successfully, move on to creating the static routes. You then want to test that by pinging the Printe...
by pohutukawa
Sat Sep 10, 2016 8:16 am
Forum: Beginner Basics
Topic: [SOLVED] Printer shared to second LAN?
Replies: 37
Views: 7859

Re: Printer shared to second LAN?

With a cable, of course, running from the port on the MikroTik where that address is configured to any port on the switch.
Hey pe1chl, are you around? Tried to contact you via forum but maybe we need to be "friends" first?

Thanks!

Robin
by pohutukawa
Sat Sep 10, 2016 4:33 am
Forum: Beginner Basics
Topic: [SOLVED] Printer shared to second LAN?
Replies: 37
Views: 7859

Re: Printer shared to second LAN?

Alright, there are some issues... You can't just rely on a /24 network between the routers to route your traffic effectively. I created a rudimentary diagram to show how you can set this up and have it work. You can adjust the IPs as needed. Now the ip route commands are probably not the correct sy...
by pohutukawa
Fri Sep 09, 2016 12:51 pm
Forum: Beginner Basics
Topic: [SOLVED] Printer shared to second LAN?
Replies: 37
Views: 7859

Almost! But where is the missing piece to the puzzle? Re: Printer shared to second LAN?

OK thanks to help from the forum, I'm almost there. :D After this configuration, using a terminal window in Winbox, I can ping the printer (LAN B at IP 192.168.2.152) i.e. from the Mikrotik, and can ping the Mikrotik from LAN B at IP 192.168.2.250. (previously the printer was at 192.168.2.150 and th...
by pohutukawa
Thu Sep 08, 2016 1:45 am
Forum: Beginner Basics
Topic: [SOLVED] Change IP of router - what order to do this?
Replies: 2
Views: 772

Re: Change IP of router - what order to do this?

Remember you can manage routerboards by mac-winbox, or RoMON (if enabled on Tools > RoMON) i.e., in pure layer 2 mode, even if the router hasn't any IPs assigned, or you change ips/routing while managing the router, your connection won't be dropped. You can also assign multiple IPs to a given inter...
by pohutukawa
Mon Sep 05, 2016 7:20 am
Forum: Beginner Basics
Topic: [SOLVED] Change IP of router - what order to do this?
Replies: 2
Views: 772

[SOLVED] Change IP of router - what order to do this?

Hi folks Quick question: Mikrotik 5-port RB750 with fibre connection via VLAN, and a local 192.168.2.0/24 subnet on switch ports 2-5 one of which leads to a wifi base-station with DHCP. The router's IP needs to be changed as part of the subnet change to 192.168.3.0/24. Firewall rules in place allowi...
by pohutukawa
Wed Aug 24, 2016 8:56 am
Forum: Beginner Basics
Topic: [SOLVED] Printer shared to second LAN?
Replies: 37
Views: 7859

Re: Printer shared to second LAN?

A followup! Would it be possible to have two separate LANs both 192.168.2.x each with own router, and share a printer on LAN1 (192.168.2.50 say) with LAN2 (router is Mikrotik) ? LAN1 is using a Juniper SRX as its router. Or does LAN2 need to be running a completely different subnet i.e./e.g. 192.168...
by pohutukawa
Fri Jul 29, 2016 12:35 am
Forum: Beginner Basics
Topic: [SOLVED] Printer shared to second LAN?
Replies: 37
Views: 7859

Re: Printer shared to second LAN?

With a cable, of course, running from the port on the MikroTik where that address is configured to any port on the switch. Of course!  :D So cable from SRX to Mikrotik port (say) 5. Then configure (in the Mikrotik) port 5 with a fixed IP of 192.168.2.253/24, which would allow the devices on 192.168...
by pohutukawa
Tue Jul 26, 2016 11:24 am
Forum: Beginner Basics
Topic: [SOLVED] Printer shared to second LAN?
Replies: 37
Views: 7859

Re: Printer shared to second LAN?

With a cable, of course, running from the port on the MikroTik where that address is configured to any port on the switch. Of course!  :D So cable from SRX to Mikrotik port (say) 5. Then configure (in the Mikrotik) port 5 with a fixed IP of 192.168.2.253/24, which would allow the devices on 192.168...
by pohutukawa
Tue Jul 26, 2016 2:49 am
Forum: Beginner Basics
Topic: [SOLVED] Printer shared to second LAN?
Replies: 37
Views: 7859

Re: Printer shared to second LAN?

You only need to set that address 192.168.2.253/24 on one of the ports of the MikroTik and take that port out of the switch or bridge used for the LAN.   Then connect it to the other network. Thank you for the response! I think I can manage that, but how does this then become connected with the swi...
by pohutukawa
Mon Jul 25, 2016 11:37 am
Forum: Beginner Basics
Topic: [SOLVED] Printer shared to second LAN?
Replies: 37
Views: 7859

[SOLVED] Printer shared to second LAN?

Hi folks Quick question: one LAN (192.168.2.x) is splitting into two (192.168.2.x LAN A and 192.168.3.x LAN B), each with their own internet connection. I'm configuring LAN B with a Mikrotik  RB750 with simple setup with a DHCP client on the WAN port which is fibre with VLAN tagging. LAN A has a Jun...
by pohutukawa
Sat Jun 25, 2016 11:16 am
Forum: Beginner Basics
Topic: RouterOS can't access the Internet
Replies: 2
Views: 481

Re: RouterOS can't access the Internet

Hello. I just installed the latest RouterOS version. I configured the ip address, netmask, gateway and it went right. But after a while I couldn't connect to the routeros via WinBox, actually the RouterOS Server doesn't response (when pinging) Can you please help me? Thanks. If you set a fixed IP f...
by pohutukawa
Sat Jun 25, 2016 11:11 am
Forum: Beginner Basics
Topic: vlan and ethernet in bridge not working
Replies: 13
Views: 1315

Re: vlan and ethernet in bridge not working

i have the following configuration isp --- ether1[router]ether3---lan i talked to my isp to give me 2 vlans, one for connecting to offices in other parts of the city and one for internet access. each office has it's own public ip /26 class, and in the main office we have a /25 public class. i tried...
by pohutukawa
Fri Jun 24, 2016 12:45 pm
Forum: Beginner Basics
Topic: (SOLVED) - Router has internet, but not LAN clients (PPPoE fibre connection)
Replies: 6
Views: 3978

Re: Router has internet, but not LAN clients (PPPoE fibre connection)

Thanks Chris. All looking good now. Tested and working! Cheers Robin Glad to hear it works. Yes, you need to adjust your fw rules to the corresponding interfaces. For your follow up question: There's no need to rename interfaces - you can also name them "Harry" or "Garage". Correct with the vlan and...
by pohutukawa
Thu Jun 23, 2016 3:39 am
Forum: Beginner Basics
Topic: (SOLVED) - Router has internet, but not LAN clients (PPPoE fibre connection)
Replies: 6
Views: 3978

Re: Router has internet, but not LAN clients (PPPoE fibre connection)

Followup question! I will be moving this Mikrotik to a fibre connection that requires VLAN tagging (VLAN10). In this case, it would seem I need to: 1. Rename ether1 "WAN" 2. Add VLAN (name="VLAN10" ID=10) with interface="WAN" 3. Add PPPoE client (name="UFB") with interface="VLAN10" 4. Firewall NAT r...
by pohutukawa
Thu Jun 23, 2016 12:34 am
Forum: Beginner Basics
Topic: (SOLVED) - Router has internet, but not LAN clients (PPPoE fibre connection)
Replies: 6
Views: 3978

Re: Router has internet, but not LAN clients (PPPoE fibre connection)

Hi Chris Thank you for the prompt and super-helpful reply. You were correct! I'm up and running now. So the NAT rules (and I guess, the filters) need to be applied to the (virtual) interface itself, being the last "link" (I could be guilty of mixing terminology here that has special meaning elsewher...
by pohutukawa
Wed Jun 22, 2016 11:02 am
Forum: Beginner Basics
Topic: (SOLVED) - Router has internet, but not LAN clients (PPPoE fibre connection)
Replies: 6
Views: 3978

(SOLVED) - Router has internet, but not LAN clients (PPPoE fibre connection)

Hello all RB750 with brand new setup. Following basic config, the RB750 (running v6.34.6) can connect via a PPPoE connection on fibre and appears to correctly assume the connection's fixed IP and pick up the DNS servers. Via tools on the router, using WinBox, I can ping google.com and perform tracer...
by pohutukawa
Thu Oct 13, 2011 10:09 am
Forum: Forwarding Protocols
Topic: SIP external transfer weirdness
Replies: 11
Views: 2906

Re: SIP external transfer weirdness

OK an update here: the ISP made some changes, including authentication information, and now everything works. Interestingly - and I don't know if this was significant or not - the UC320 codec was G711 and once the ISP knew this, the configuration change at their end reflected this (not G729), that's...
by pohutukawa
Tue Oct 11, 2011 10:21 pm
Forum: Forwarding Protocols
Topic: SIP external transfer weirdness
Replies: 11
Views: 2906

Re: SIP external transfer weirdness

Also, is the 'dead air' only one way or both?
Sorry, forgot to add that it's both way. The "target" phone rings, but that is all.

Regards

Robin
by pohutukawa
Tue Oct 11, 2011 10:20 pm
Forum: Forwarding Protocols
Topic: SIP external transfer weirdness
Replies: 11
Views: 2906

Re: SIP external transfer weirdness

Thanks again for the ideas Mark. What you describe is possible. The (small) ISP say that they have primary and backup call providers for their SIP trunks and the issue is that the Cisco UC320 isn't capable of hairpinning the call. Their current temporary fix is to route hairpinned calls in and out v...
by pohutukawa
Sun Oct 09, 2011 9:42 am
Forum: Forwarding Protocols
Topic: SIP external transfer weirdness
Replies: 11
Views: 2906

Re: SIP external transfer weirdness

Hi Robin, All I can tell you at this point is that the ports you have configured in the firewall are only the SIP ports i.e. just control messaging for call control, etc (usually 5060 & 5061). RTP i.e. the actual audio, shall use random ports and if these are not going back and forth seamlessly, yo...
by pohutukawa
Thu Oct 06, 2011 2:59 am
Forum: Forwarding Protocols
Topic: SIP external transfer weirdness
Replies: 11
Views: 2906

Re: SIP external transfer weirdness

In general, how do people go about configuring their Mikrotik router for SIP passthrough, assuming there is a PBX-like device on the LAN behind the router (WAN)? I'd be very interested in hearing how people manage this. Currently, we have the firewall accepting UDP on 5060-5070 and NAT forwarding of...
by pohutukawa
Thu Oct 06, 2011 12:14 am
Forum: Forwarding Protocols
Topic: SIP external transfer weirdness
Replies: 11
Views: 2906

Re: SIP external transfer weirdness

Hi Robin, From our experience of this, you probably have a problem with your RTP stream and not the SIP part. Are you by any chance doing more than one NAT with the voice traffic? Rgds, Mark. Hi Mark Thanks for this. We have established that this is either an upstream issue with a failover provider...
by pohutukawa
Mon Oct 03, 2011 10:50 pm
Forum: Forwarding Protocols
Topic: SIP external transfer weirdness
Replies: 11
Views: 2906

Re: SIP external transfer weirdness

Hi,

Do the calls actually go through but you get 'dead air' or not even that? I.e. Do the 'external' phones ring on divert?

Rgds,
Mark.
Hi Mark, thanks for your reply.

The external phones were ringing on divert but "dead air" from there ...

Regards

Robin
by pohutukawa
Mon Oct 03, 2011 7:02 am
Forum: Forwarding Protocols
Topic: SIP external transfer weirdness
Replies: 11
Views: 2906

SIP external transfer weirdness

Hi there Long time lister first time caller. Have an RB750, connected to which I have: - a netgear unmanaged gigabit switch - a Cisco UC320W telephony box, and - a SPA8000 for analogue phones Internal extensions can make outgoing calls no problem. External callers can call in no problem. Internal ex...