MikroTik

asaleh75

When WAN has vlans & LAN has vlans. How to configure Fasttrack Connections Offloading + NAT ? Below configurations are not working properly /interface bridge add ingress-filtering=no name=bridge1 vlan-filtering=yes /interface vlan add interface=bridge1 name=vlan101 vlan-id=101 add interface=brid...

asaleh75

Hardware Inter-VLAN Routing requires a Hardware Bridge for VLAN tagging. More info here . L3 Hardware Offloading working with below configuration. VLAN interface doesn't show any bandwidth. Now what to do for Offloading Fasttrack Connections? [admin@2216-1] > /interface/export # apr/27/2022 19:05:5...

asaleh75

Configuration will be same as switch?

asaleh75

3 CCR2216 connected with QSFP28

asaleh75

[admin@2216-1] > /interface/export # apr/27/2022 18:18:35 by RouterOS 7.2.1 # software id = 13BN-J2X6 # # model = CCR2216-1G-12XS-2XQ # serial number = HCA07HJM7WW /interface vlan add interface=qsfp28-1-1 name=vlan101 vlan-id=101 add interface=qsfp28-1-1 name=vlan102 vlan-id=102 add interface=qsfp28...

asaleh75

I am using v7.2.1. If works please help to configure it.

asaleh75

L3 Hardware Offloading or Offloading Fasttrack Connections works for vlans ? Testing CCR2216-1G-12XS-2XQ but not working for vlans.

asaleh75

Netinstall is working fine. It does not work for a device.

asaleh75

Trying Netinstall but it does not work. Getting below error from serial console

Formatting disk...
ERROR: could not mount filesystem
Press ENTER to reboot

Any solution?

asaleh75

MikroTik's recommendation is 3 days training but trainer can offer short training for experts.

asaleh75

Upgraded RB750, RB2011UiAS-2HnD-IN, RB1100AHx2 so far no problems.

asaleh75

Also... if I just upgrade my routers to 6.35rc1 will they automatically get rep package or will I need to add it?

-Eric

Eric,
You have to add rep package.

asaleh75

How to configure wireless repeater mode

asaleh75

Green light will on when you connect to a gigabit ethernet port.

asaleh75

It depends on how much bandwidth you have. You can see the test result of routers.

asaleh75

Hi,
Are you solving RB850Gx2 MAC winbox problem?.

asaleh75

Any update of CCR1072?. We are waiting for this model.

asaleh75

What is the correct CPU frequency of hEX lite?. The router i have, CPU is 650MHz.

asaleh75

Just upgraded my CCR1016-12G. Looking good, till now no problem.

asaleh75

Dear Saldor,
Backup file is binary file you cannot open or edit it. If you want to open or edit with notepad then you have to backup with export command.

asaleh75

2. How much does each exam cost 3. What is the nature of the exams (number of questions, passing score and sample questions) 4. Available exam materials and each certification module 5. Can one schedule the exam and write online by himself? Hi, Training cost is depends on trainer Exam is multiple c...

asaleh75

All, I have searched and searched but can't find any relevant article. I believe one should be educated about what Mikrotik Online Certification Tests are. Below are the questions that I and most people are asking; 1. Where and how can one schedule mikrotik certification exams 2. How much does each...

asaleh75

Hi,
following link will help you to re install.
http://wiki.mikrotik.com/wiki/Manual:Netinstall

asaleh75

From

/tool mac-server mac-winbox

you can disable winbox connection.

asaleh75

Hi,
Please read this example http://wiki.mikrotik.com/wiki/Manual:Qu ... Q_Examples

asaleh75

Thank you for sharing.but how many time need for IP address unblock.

It's configured at web server.Time depends on server Administrator.

asaleh75

i am new member.i am in uttara, Dhaka.

Hi Nurmia,
You are welcome.

asaleh75

Hi,
You have to use RADIUS for this type of service. You can also use MikroTik User Manager.

asaleh75

You can also disable discovery interface from IP > Neighbors.

asaleh75

Yes, it's ok

asaleh75

Hi,
web server has it's own security policy. Your IP is blocked by that server. After a period of time it will unblock.

asaleh75

Hi,
You have to disable MAC winbox, MAC telnet & neighbers discovery on client interface.

asaleh75

This is enough for DNS configuration.

asaleh75

Hi, It's in ROS 6

asaleh75

Thanks for you reply!!!

how to configure the interfaces? ISp 1 i Port 1

isp 2 ?

You can use any ethernet for any ISP. Main point is Gateway = ISP end IP Address. Use distance 1 for ISP A & distance 2 for ISP B.

asaleh75

Hi,
You have to configure like this:

/ip route
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.1.1
add check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0 gateway=192.168.2.1

asaleh75

Hi,
What is the PPS of Cloud Core Router 1036-8G-2S+ ?. 24 million packets per second or 42 million packets per second ?

asaleh75

I was using mikrotik 3.30 for a few years and today I decided to upgrade to version 6.4 So I installed 6.4 to a new flash, and imported the exported configuration from version 3.30 While I expect my registration key to arrive and although I have remaining hours before trial expires, MT is not worki...

asaleh75

Hi, Check this link http://routerboard.com/RB750GL you can see Performance test results. Brother Saleh, Check attach image of RB450G, bellow 3MB bandwidth load but CPU usages 70%, Giga bit transmission is possible but in real life corporate scenario firewall, queue list and routing all are in same ...

asaleh75

Hi,
It will work as before.

asaleh75

Please do not distribute or publish them in any way.

Sorry, for MikroTik's restriction can't share.

asaleh75

Hi,
RC is not open for all yet.

NOTE: The following RouterOS development versions should be for internal testing only. Please do not distribute or publish them in any way. Report any findings to MikroTik support.

asaleh75

Hi,
Check this link http://routerboard.com/RB750GL you can see Performance test results.

asaleh75

Hi,
It will work for 4 PPPoE. You have to configure 6 PPPoE like this.

asaleh75

Hi,
Please send html code.

asaleh75

Hi,
You can do it by two ways. By VLAN or EoIP.

asaleh75

Hi,
I am from Dhaka, Bangladesh.

asaleh75

Hi,
IPIP tunnel works fine. I am using IPIP tunnel from last four years & no problem.

asaleh75

tank you ....

I studied alone and did not try ? Do you have a trainer?

Yes, I am a MikroTik Certified Trainer.

asaleh75

Hi,
You have to do MTCRE training & trainer will give you training material. For your preparation look at MTCRE syllabus http://www.mikrotik.com/pdf/MTCRE_Outline.pdf & study from wiki http://wiki.mikrotik.com/wiki/Manual:TOC.

asaleh75

Dear All,
Live video from MUM in Mexico city, Mexico, September 26-27, 2013.
http://www.tiktube.com/?live=live

asaleh75

Hi,

/lcd set enabled=no

will disable display.

asaleh75

Hi,
My RB2011UAS Firmware is 3.09

asaleh75

Hi, Small hints in using regular expressions: \\ symbol sequence is used to enter \ character in console \. pattern means . only (in regular expressions single dot in pattern means any symbol) to show that no symbols are allowed before the given pattern, we use ^ symbol at the beginning of the patte...

asaleh75

Hi, i want to know about certified training in Bangladesh. Because i am interested to attend Mikrotik certified training.

Hi,
I am MikroTik certified Trainer. We provide MikroTik Certified Training. We have MTCNA, MTCRE, MTCTCE & MTCINE Certification Training.

asaleh75

Hi, Look at your nat configuration /ip firewall nat add action=masquerade chain=srcnat comment=\ "Source nat all clients out, and take ip of outgoint interface" disabled=\ no out-interface=TETRA to-addresses=0.0.0.0 replace with nat rule /ip firewall nat add action=masquerade chain=srcnat ...

asaleh75

Sir,

Who can attend in this training?

Hi,
Any person who has basic knowledge on TCP/IP can attend this training. It's a basic training expecting beginners.

asaleh75

Hi, Yes, no information in the wiki. When i create PPPoE client RouterOS set keepalive-timeout=60. [admin@M-S] > /interface pppoe-client print Flags: X - disabled, R - running 0 name="pppoe-out1" max-mtu=1480 max-mru=1480 mrru=disabled interface=ether1 user="" password="&quo...

asaleh75

Hi, keepalive-timeout default value is 10 where have you found that information ? Hi, Please check this link http://wiki.mikrotik.com/wiki/Manual:Interface/PPPoE Look at PPPoE Server Setup. Here a Notes: "The default keepalive-timeout value of 10 is OK in most cases. If you set it to 0, the ro...

asaleh75

Hi,
You can try this

/ppp active print file=activeList.txt

asaleh75

Hi,
keepalive-timeout default value is 10

asaleh75

Hi, Please follow this configuration. I think it will help you /ip firewall nat add action=masquerade chain=srcnat out-interface=pppoe-out1 add action=masquerade chain=srcnat out-interface=pppoe-out2 add action=masquerade chain=srcnat out-interface=pppoe-out3 /ip firewall mangle add action=mark-conn...

asaleh75

What about OS?. SwOS or RouterOS?

asaleh75

To start with i had 6.1 out of box on it, still it said current-firmware: 3.09 and upgrade-firmware: 3.08. Now i have updatet to V6.4 only cuss i am still using it as a test but still it say: current-firmware: 3.09 upgrade-firmware: 3.08 Cheers Jimmy Latest firmware is 3.08. I think there is no fir...

asaleh75

Yes i no, but what can i upgrade?

current-firmware: 3.09
upgrade-firmware: 3.08

Did you downgrade your Router OS version ?

asaleh75

Hi,

/system routerboard upgrade

will upgrade your firmware.

asaleh75

I am interested to join this training session. I think it is helpful to all of us who build his career in networking field.

Thank you syedamin for your positive comments.

asaleh75

Thank you both for useful script.

asaleh75

Please let me know about the Trainer.

Hi,
I am Syed Abu Saleh, First MikroTik Certified Trainer from Bangladesh will conduct this Free Training.

asaleh75

Hi,
Yes, you can log file on external server. Please read this link
http://wiki.mikrotik.com/wiki/Manual:System/Log

asaleh75

Hi,
You can read Manual http://wiki.mikrotik.com/wiki/Manual:Queue

asaleh75

Hi,
You do not need to remember MAC address. You can login with winbox if there is no configuration. winbox can find MAC address.

asaleh75

Hi,
You can try with winbox.

asaleh75

Hi,
Free Training will be held on Friday, October 25, 2013 at 9:00 AM to 6:00 PM.

asaleh75

Hi there, i've just brought myself a nice mikrotik 751G-2HnD Router. now i've got it working in terms of accessing the internet, but i'm not sure how to do port forwarding, it looks like its got the standard NAT on but i' need the following ports opening for a number of services HTTPS: 443 pointing...

asaleh75

I've been told by mikrotik support that multiple gateways on a hotspot can cause issue's So I guess it cant be done, so I added a 2nd router for it, against my will! I don't have a config for it anymore, but I used route mark and ppc load balancing from wiki with a hotspot enabled, basic basic stuf...

asaleh75

Hi,
Can you share your configuration & explain details about problem?

asaleh75

Hi,
Try to netinstall http://wiki.mikrotik.com/wiki/Manual:Netinstall and must check on "keep old configuration"

I am not sure, can netinstall keep old confuguration.

asaleh75

Hi,
Try to netinstall http://wiki.mikrotik.com/wiki/Manual:Netinstall and must check on "keep old configuration"

asaleh75

Hi,
are you want to block all .com & .net domain?

asaleh75

i would suggest a layer 7 filter with play.google.com then add a filter rule to reject all packets going to any ip on port 53 and containing the layer 7 filter you created earlier. the content option that user asaleh75 suggested would block any packet containing play.google.com, be it text, hyperli...

asaleh75

How to Netinstall?

Hi,
Please read this link to know Netinstall http://wiki.mikrotik.com/wiki/Manual:Netinstall

asaleh75

Hi,
I think it is a good initiative. When it will be held. Please inform me.

Hi,
Free Training will be held on Friday, October 25, 2013.

asaleh75

Hi,
Banglanet
Lal Bhaban (4th floor) 18, Rajuk Avenue
Motijheel, Dhaka -1000
Tel: 9566363 Mobile: 01727651024

asaleh75

Hi, yes, you are correct. hi asaleh in my ip/route its show distance=1 but in wiki is not included as the example below if i tick the arrow up then click apply to remove the distance=1 doesnt disappear. im using 4.17 ROS in RB450G add dst-address=0.0.0.0/0 gateway=192.168.1.1 routing-mark=to_WAN1 c...

asaleh75

Getting problem, error "stream not found".

asaleh75

Hi, yes you can. You have to change IP address of clients or adsl router's local ip. You need 2 ip block one for Clients network & one for Mikrotik to ADSL. Configure IP address on Router interface & configure a NAT rule for share internet.

asaleh75

Hi,
Try with following filter rules

/ip firewall filter add action=drop chain=forward content=play.google.com disabled=yes dst-port=80,443 protocol=tcp

asaleh75

Yes, You can by using mangle & routing

asaleh75

Hi,
Please configure local IP on bridge interface.

asaleh75

Hi,
Can you explain what you want?

asaleh75

It is very-very strange, but after adding this rule all works fine, as it should be.
And even after disabling this rule, all still works.

Good Luck

asaleh75

Hi,
I tested it on my network & working fine. Please try to redirect all dns traffic to router itself.

/ip firewall nat add action=redirect chain=dstnat disabled=no dst-port=53 protocol=udp src-address=192.168.88.0/24 to-ports=53

asaleh75

Hi,
I am getting same as you.

But

interface ethernet cable-test ether1

is working fine.

asaleh75

Hi,
I am getting same as you.

asaleh75

Please provide your DNS configuration.

asaleh75

Hi,
Please check your work stations DNS entry. There should be only your router's IP.

asaleh75

Banglanet is the first MikroTik Certified Training Partner in Bangladesh. We are going to organize free Training on MikroTik in our own premises. Class will cover Introduction to MikroTik & Basic Configuration of Router OS. Interested person who lives in Dhaka can register at following link. htt...

asaleh75

Thanks. Rb2011uas will be too slow for that? I need to create tunnel to route a few public IP's from my company.

You can use RB2011UAS it's processor is 600MHz. For better performance you have to chose higher CPU model.

asaleh75

Hi,
I suggest you to use RB1100AHx2 but it has no wireless card.

asaleh75

hello, i back this tropic after long day finished. i am already problem on this. i am also using loadbalancing with pcc . for ftp problem you suggest to add those rules. my question is, will i remove my mangle old two rule and add those two ? or i will keep my loadbalancing as it is and add those r...

asaleh75

Thanks.

asaleh75

Waiting for CCR1036-8G-2S+

asaleh75

Thanks

asaleh75

Hi,
yes, you are correct.

asaleh75

hi, abu saleh 8) your name is arabic. i`m from arab country. is there any way to change it to level 6 or i have to buy antoher router supportes level 6. Hi, Yes, My name is arabic but i am from Bangladesh & i am a muslim.There is no way to level upgrade. You have to buy a router board with leve...

asaleh75

Hi, RB951G-2HnD is similar but it's only support 2.4 GHz.
http://routerboard.com/RB951G-2HnD

asaleh75

Hi,
Use Netinstall for install ROS again.

asaleh75

Hi,
It depends on configuration.

asaleh75

sir, i am willing to learn, what materials can help me (something like a mikrotik script dictionary)

You can read MikroTik Manual http://wiki.mikrotik.com/wiki/Manual:Scripting

asaleh75

Is there something I can do to the NAT masquerade rule to limit access to the MAC address of my AP?

Thanks,
Ryan

No, NAT or filter can't protect to access AP. You can protect internet access using NAT or filter.

asaleh75

Hi,
Very soon MikroTik will announce 10 Gbit port CCR model.

asaleh75

Hi,
If you have no way then you can try Netinstall. But you will lose all configuration & data.
http://wiki.mikrotik.com/wiki/Manual:Netinstall

asaleh75

Hi,
You can't not increase capacity of user manager. Up to 50 user you need Level 5 License & Level 6 is unlimited capacity. Level 4 supports up to 20 users.

asaleh75

Hi, You can read this link http://wiki.mikrotik.com/wiki/The_Dude

asaleh75

Hi,
You have to netinstall if ROS not boot. Please read following link:
http://wiki.mikrotik.com/wiki/Manual:Netinstall

asaleh75

/ip firewall nat
add action=dst-nat chain=dstnat dst-address=123.123.123.123 dst-port=443 \
    protocol=tcp to-addresses=192.168.2.2 to-ports=443

[/quote]
Replace 123.123.123.123 with public ip of router

asaleh75

Hi, use following format of dstnat

/ip firewall nat
add action=dst-nat chain=dstnat dst-address=123.123.123.123 dst-port=443 \
    protocol=tcp to-addresses=192.168.2.2 to-ports=443

asaleh75

Hi,
if you have access to MikroTik router then you can see or change hotspot password. If not then ask your administrator to change your password.

asaleh75

Hi Trim John,
You are welcome.

asaleh75

Hi,
Use EoIP tunnel & add EoIP interface as bridge port on both router.

asaleh75

Follow the announcements http://mum.mikrotik.com/

Thanks

asaleh75

Mistry Samir,
Thank you for your script.

asaleh75

Hi, Please check following link. Here list of all training on MikroTik around the world.
http://www.mikrotik.com/training/

asaleh75

Hi,
PPPoE can configure on multiple interface. You can use another ethernet for your new AP. Configure DHCP server & PPPoE on that interface. No need to configure bridge.You can configure static only DHCP & bind AP's mac address so that only AP can get IP address from DHCP.

asaleh75

I think it will not before December.

asaleh75

You are welcome.

asaleh75

Hi, Can u provide details network diagram?. It will help to understand your problem.

asaleh75

Hi Kazim, All looks ok. Sorry i have no idea why not working. Which ROS version you are using? May be version upgrade can help you.

asaleh75

Hi, It looks ok. How many hotspot client you have? Please check

/ip pool used print

Is there all ip used?

asaleh75

Hi, for router at internet side use following routes /ip route add check-gateway=ping distance=1 dst-address=47.242.30.0/24 gateway=192.168.2.2,192.168.1.2 /ip route add check-gateway=ping distance=1 dst-address=47.242.47.0/24 gateway=192.168.2.2,192.168.1.2 /ip route add check-gateway=ping distance...

asaleh75

Look at this page: http://wiki.mikrotik.com/wiki/Manual:License (scroll down a bit). You will see, that for an AP you need at leaset Level 4. Yes, for AP at least Level 4 License require there also written "There are no license level upgrades, if you wish to use a different license Level, plea...

asaleh75

Hi, Yes you can restrict it by connect list

asaleh75

Hi, please paste the output of

/ip pool print

asaleh75

Please mail to mikrotik support if they allow. But as per policy you can't.

asaleh75

Hi,
you can configure RB750 as a PPPoE server then you can provide any IP Address to your client. Without PPPoE you can't use like this or you can do subnetting.

asaleh75

Hi,
As per MikroTik's policy you can not upgrade License level.
There are no license level upgrades, if you wish to use a different license Level, please purchase the appropriate level. Be very careful when purchasing for the first time, choose the correct option.

asaleh75

Hi,
Yes, you can use same pool for DHCP. I think it will be no problem.

asaleh75

Please provide a network diagram with IP Address you want to do

asaleh75

Hi, You can use bridge. Bridge wireless & WAN interface.

asaleh75

RouterOS 6.4 released you can try to download it.

asaleh75

Hi, RouterOS 6.4 released, You can use it.

asaleh75

Hi, Please paste your configuration here.

asaleh75

Hi,
It's possible but configuration is complex. You have to use scripts, scheduler, firewall filter.

asaleh75

Hi,
you can use RouterOS 6.4

asaleh75

hi,
You have to configure a bridge. Add ether2 & wlan1 as bridge port. Configure hotspot on bridge interface.

asaleh75

Thank you Normis.

asaleh75

Change license Level There are no license level upgrades, if you wish to use a different license Level, please purchase the appropriate level. Be very careful when purchasing for the first time, choose the correct option. Why is it not possible to change license level (ie. upgrade license)? Just lik...

asaleh75

Hi,
You can use PPPoE

asaleh75

Thank you pcunite.

asaleh75

It's not normal. i am also using RB751U-2HnD RouterOS v6.3 & it showing 15.6 MB free memory.

asaleh75

Yes it is possible.

asaleh75

getting problem in safe mode. I have add a filter rule to drop all input in safe mode, now i can't access router.

asaleh75

Hi consi,
You have very good idea. I think MikroTik can work on it.

asaleh75

You can try RouterOS v6.4

asaleh75

All of your configuration possible in one Router Board.

asaleh75

You can also read MikroTik Manual
http://wiki.mikrotik.com/wiki/Manual:TOC

asaleh75

Yes, you can

asaleh75

You can also use simple queue /queue simple add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both \ disabled=no interface=all limit-at=0/0 max-limit=20M/20M name=queue1 \ packet-marks="" parent=none priority=8 queue=default-small/default-sma target-addresses="11.11.1...

asaleh75

try

/system reset-configuration

asaleh75

Yes, Proxy will work also.

asaleh75

Command line will be :

/ip address
add address=192.168.1.1/24 disabled=no interface=ether3
/ip firewall nat
add action=masquerade chain=srcnat disabled=no out-interface=ether1

asaleh75

Thanks a lot And then for my local addresses to have internet access (e.g. clients in the 192.168.1.1/24 subnet) I should assign 192.168.1.1 to ether3 and create a SRCNAT/MASQUERADE rule in firewall?

Yes, you can. This configuration will be same as your previous configuration with first ISP.

asaleh75

Dear ingdritan,
can you provide me your configuration?

asaleh75

Merry Christmas to every one

Merry Christmas

asaleh75

Dear friends, I have changed my ISP and have a problem with configuring my RouterOS installation. The previous ISP provided only one external (1) IP address - thus I used SRC NAT with MASQUERADE all was fine. However my new ISP gave me one internal (1) IP address and a range of IP addresses that ar...

asaleh75

Hi
you can configure open vpn as per image

openvpn.jpg

Now you have to create user & password from secrets.

secret.jpg

asaleh75

Dear Robotics909, You have to use following code: /ip firewall address-list add address=172.16.0.2 list=usere-exempted-from-pcc /ip firewall mangle add action=accept chain=prerouting disabled=no src-address-list=user-exempted-from-pcc add chain=prerouting dst-address-type=!local in-interface=Local p...

asaleh75

AOA, How are you. I am using RB 750 Router board. I have use 2 different isp and do that PCC script for load balancing and load merging. I face a problem when i try to upload something Filezilla FTP. My FTP not working when both Isp are working. So i disable one ISP then do the uploading. Can you p...

asaleh75

Thanks alot Syed Abu Saleh,

but pls tell me is this NTH or PCC load balancing?

It's PCC load balancing.

asaleh75

Dear senthilnaidu,
Please try with :

/ip firewall filter
add chain=forward action=reject reject-with=tcp-reset protocol=tcp content="www.facebook.com/tests"

asaleh75

At first please read following link
http://wiki.mikrotik.com/wiki/Manual:Interface/OVPN

asaleh75

You can try with following command. You have to change interface name and ip address as per your Router. /ip address add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=Local add address=192.168.1.2/24 network=192.168.1.0 broadcast=192.168.1.255 interface=WAN1 add addres...

asaleh75

Do you want to replace cisco router with Mikrotik Router?

asaleh75

Can you post /export compact result here?.

asaleh75

CCR i am waiting for you
Let's see how will my CCR deals with 150k pps Syn Flood on Monday!
2xRB1100 dead under this pps at the moment

Dear shukko,
Waiting for your update.

asaleh75

CCR i am waiting for you

asaleh75

Any hardware change between Pre-production & production version?

asaleh75

Pre-production samples for evaluation purposes will be available from Distributors, starting December 2012. Place your order for test units with your Distributor now!
What it means? Is it free?.

asaleh75

I am using RB2011LS-IN with SFP, no problem yet.

asaleh75

please give some examples how you would use it ? is it for home users? why two SFP ? Probably not for home users but we have a client location that has three buildings. The fiber is running from a central building to the two outlying buildings. It would be great to have in the central building. I h...

asaleh75

I think it's time to use CCR

asaleh75

Any timeline when SFP+ will come?

asaleh75

Hi,
try with this command from terminal

/ip firewall filter add action=drop chain=forward dst-address=47.45.45.0/24 dst-port=80 protocol=tcp

asaleh75

Do Mikrotik have any low cost RouterBoard which have at least two SFP?.

Search found 185 matches