I also noticed in recent versions that some items may take quite some time to export even in fast devices. E.g. I have a CCR2004 running 7.11beta4 where the export of "/interface bridge ports" takes at least 10 seconds. I imported the same config into a CCR1009 and it runs OK. At the next...

Same here, Windows 10 Pro x64, 21H2.

The Dude 7.1.1, 7.1.2 and 7.2rc3 - none are starting.

Running normally: 0xc0000005 error at start-up, and that's it. Process not present.

Running as admin: nothing (no message, no start), process not present.

skhds, when possible, please put an export of at least ip firewall nat, please ( /ip firewall nat export compact). What more specific do you mean by "all devices connected to the router can't use the Internet anymore"? Did you try anything else except trying https (websites like Google are...

Really, really hard to follow the export (for future use, try to expand Winbox terminal window, and make it as wide as possble, in order to have the output as below: /ip firewall nat add action=masquerade chain=srcnat dst-address=149.255.59.17 out-interface=pppoe-out1 add action=src-nat chain=srcnat...

rags, can you post an export of your config here?


Copy all and put result here. It's hard to guess what is happening there.

rags, is there any rule that is actively blocking SMTP traffic (either way)? Otherwise, is your ISP allowing SMTP traffic (inbound and / or outbound)? For an email / SMTP server, you should allow traffic towards that server, normally from everywhere. Depending on your configuration, in a simple dstn...

Hi Sob, noted with thanks. I imagined it was due to network settings - it did not feel right, but I followed man pages :) Test NAT rules are like below at the moment, and seem to work just fine. Will test more later, and revert. /ip firewall nat # 2.2.2.2 traffic add action=dst-nat chain=dstnat comm...

Noted, thanks! I'd prefer to have the IPs / subnet "visible", for that whomever will see it to not have to dig or make educated guesses ... As with below config I could not reach outside world (could not reach 192.168.0.254, which is my local network primary gw) - I think that it has to do...

Thanks, Sob, for patience! :) Regarding the /32 addressing for the public subnet to one interface, I was referring at the amount of lines required (i thing the network setting is correct below, 192.168.0.254 being the nexthop / my office router LAN address): /ip address [...] add address=2.2.2.1 com...

PS: would it be a better idea to assign the public subnet IPs to bridge-local side?

Hi Sob, thanks for quick insight! I am not a fan of assigning that subnet directly to servers, I prefer servers having only their local C class addresses, and work with vip-like setup at router side, this seems easier to manage (for me, at least), both router and the machines. This is just a test ri...

Hi guys! One of my customers has a /29 public subnet routed by the ISP through a link public IP (static assigned) for quite a few years. All customer services (like MTA, DVR, monitoring etc). running on various machines on the LAN, are bound to different public IP from the /29 subnet (with VIPs conf...

I'd go with typo also, although I'm pretty sure that I wrote it right, and triple+ checked it with NAT table, logs, other rules, etc.

It was acting spooky. Two reboots and complete rules rewrite did the job! Now it is working as expected since then.

Thanks!

NOTE: Because I already wrote it, I don't want to lose it. In the meantime I made it work, but still ... there is something spooky why it did not the first time. Hi Guys! In my office I have a pretty extensive hardware (and software) configuration, but anything special really. I also have two www s...

Wireless will become "R" only when you connect to it. If you scan for networks, do you see it's SSID name? Hi Normis. I think the post is addressed to me. Now I can see the SSID, but - while writing my first post above - could not see nor the SSID set by me, nor the default SSID (Mikrotik...

In the meantime I've done a reset with default on, made my changes, saved config text, reset again without default, feeded the saved config and ... wlan is working now, still disabled port, but I can see wifi signal (and connect to).

I will keep it under eyes for few days and revert.

Thanks!

Put your wlan interface in ap-bridge mode Guys, sorry for late reply, I had a very rough summer lately. Thanks for info. I just received my brand new mAP 2nD, erased default config, started from scratch. And ... I don't get it to do what I want. For now I only have a pretty expensive 2 ports ethern...

Thanks darkprocess!

Guys, quick question(s) :) I tried to search for info, but without success. Can I use a mAP-2n ethernet ports in bridge mode with wlan interface? It would help me to reduce the cablings (I need an extra AP on my upper floor, I already have cable for TV and I would like to connect network cable to et...

Hi guys, long and busy time behind, did not have any spare for testing the above. But as I'm pushing final config to a brand new RB3011UiAS-RM (nice piece of hardware for it's money), I started to remember my long forgotten issue. So, if you have any idea for my last post, please don't be shy! :) Th...

Well, there's the right way, and then there's working within constraints.

Yeap!

Do you have any ideea regarding advertised IP to external hosts? I intend to spare some time later on it, and some tricks would help!

Thanks,

T

I strongly recommend that you get it working by way of 1:1 NAT and not the ARP/forwarding method, if possible. Serial->IP boxes are generally pretty straightforward and shouldn't require a globally-routable IP address directly configured on the unit itself. Yes Zerobyte, it would have been much eas...

Short update: Config above proved not to work in the lab, could not ping or connect to 2.2.2.4. I was expecting that, as 2.2.2.1 (gw for public IP behind mikrotik) was initially set-up as 1:1 map to one LAN client (10.0.0.199), if you recall that :) ). What I did: - change 1:1 mapped IP to 2.2.2.2 :...

Hi Zerobyte. Thanks for quick answer. Yes, the device itself needs (and is already configured with) a dedicated public IP (it's a serial to Ethernet converter that is linking data to one of our partner's datacenters). It does not support virtual interface or anything else fancy that could do my job ...

Guys, I know that there passed a long time, but I had a very busy year behind (who didn't?!) and very small opportunity for "side projects". Short update: Thanks also to ZeroByte's excellent instructions, so far I managed to (changed /24 local subnet for clients: from 192.168.x.0/24 to 10....

ok, ZeroByte, I will take them one-by-one: 1. WAN link IP is static . In my example: 1.1.1.1 / 24 (gw 1.1.1.254). So no need for DHCP on WAN side. 2. /29 subnet is already known . Like I said: 2.2.2.0/29 routed through 1.1.1.1 above (link IP). We have 2.2.2.0 net address, 2.2.2.1 - 2.2.2.6 available...

Ok evince, thanks for your quick answer.

In this case, how should I address the public subnet? Do I need to bind it to LAN interface and insert route to it?

Thank you!

Hi guys. I am pretty new in RouterOS, although I have a handful of devices running as usual NAT gateways. I need to prepare few devices, some for production (as replacement), some for backup (in case current routers fail), all based on the following setup: - ISP public IP (link) (static) - /29 publi...