Community discussions

Search found 19 matches

by Hrobocop
Sun Jan 27, 2019 3:58 pm
Forum: General
Topic: RE: Openvpn Setup problem: please help
Replies: 3
Views: 3387

Re: RE: Openvpn Setup problem: please help

You need to setup same mode on server and client.
Mode should be IP or Ethernet.
On Windoz tun/tap

More info here: https://wiki.mikrotik.com/wiki/OpenVPN# ... ._RouterOS
by Hrobocop
Sat Sep 22, 2018 10:30 am
Forum: Scripting
Topic: Request: fetch support for custom http header fields
Replies: 10
Views: 2327

Re: Request: fetch support for custom http header fields

Please, need this for better Slack messaging - would like to send via POST/JSON, URL encoding using RouterOS scripting is hell...
https://github.com/massimo-filippi/mikr ... -slack.rsc
by Hrobocop
Thu Sep 20, 2018 10:50 pm
Forum: General
Topic: RB2011UiAS-IN ether boot death loop after auto-upgrade
Replies: 4
Views: 651

Re: RB2011UiAS-IN ether boot death loop after auto-upgrade

Obviously, MikroTik staff is busy with screwing firmware releases, so I will answer myself, so others can read this post at least. This is the concept of a post for the MikroTik support team, please modify and use it as you wish. Dear customers and community members, unfortunately, we totally screwe...
by Hrobocop
Thu Sep 20, 2018 10:31 pm
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 40224

Re: v6.43.1 [stable] and v6.43.2 [stable] is released!

Hi MikroTik, sorry, but this wasn't good. Problems happen, but if you totally screw firmware upgrade, which will brick a lot of routers, resulting in a lot of troubles for your loyal customers, and even lot of kilometres and hours of driving, you should at least try to not screw your support. I know...
by Hrobocop
Thu Sep 20, 2018 11:55 am
Forum: General
Topic: RB2011UiAS-IN ether boot death loop after auto-upgrade
Replies: 4
Views: 651

Re: RB2011UiAS-IN ether boot death loop after auto-upgrade

There appears to be an issue in 6.43.1 as I have seen this complaint in the 6.43.1 release topic several times. It is not related to your particular auto-upgrade script but just to the 6.43.1 release. Of course it is always dangerous to auto-upgrade firmware without watching the release topic, but ...
by Hrobocop
Thu Sep 20, 2018 7:50 am
Forum: General
Topic: RB2011UiAS-IN ether boot death loop after auto-upgrade
Replies: 4
Views: 651

RB2011UiAS-IN ether boot death loop after auto-upgrade

Hi There, this week I found one of my MikroTiks in rebooting death-loop. What happened: I'm using the auto-upgrade script on all MikroTik routers I wrote: https://github.com/massimo-filippi/mikrotik/blob/master/auto-upgrade.rsc It works really well and works for years without an issue, but now after...
by Hrobocop
Thu Apr 26, 2018 6:27 am
Forum: General
Topic: Route ICMP ping reponse via different route?
Replies: 12
Views: 1522

Re: Route ICMP ping reponse via different route?

sindy, thank You for very sophisticated and detailed explanation! :)
by Hrobocop
Wed Apr 25, 2018 10:00 pm
Forum: General
Topic: Route ICMP ping reponse via different route?
Replies: 12
Views: 1522

Re: Route ICMP ping reponse via different route?

Wow, it's finally working. The trouble was, that in an route for outgoing marked packed I used for gateway interface name (doesn't work) instead of inerface's ip address (which works).
by Hrobocop
Wed Apr 25, 2018 9:37 am
Forum: General
Topic: Route ICMP ping reponse via different route?
Replies: 12
Views: 1522

Re: Route ICMP ping reponse via different route?

So no, my mistake, I was pinging some other hostname by mistake, I'll continue today evening :)
Anyway thanx a lot!
by Hrobocop
Wed Apr 25, 2018 9:35 am
Forum: General
Topic: Route ICMP ping reponse via different route?
Replies: 12
Views: 1522

Re: Route ICMP ping reponse via different route?

sindy , thank You very much for explaining the principle. And it's finally working NOW! But just for informtaion, there was a atrouble with routing, but I fixed. You suggested this: /ip route add dst.address=0.0.0.0/0 gateway=my-home-isp-gateway routing-mark=bypass-vpn but the trouble was, that the...
by Hrobocop
Tue Apr 24, 2018 11:09 pm
Forum: General
Topic: Route ICMP ping reponse via different route?
Replies: 12
Views: 1522

Re: Route ICMP ping reponse via different route?

After reading this doc: https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Mangle#Marking_packets I found it's better to work with connection-marking then packet-marking Using mangle, I'm able to mark the connection succesfully: 1 X ;;; Ping from 1.2.3.4 chain=prerouting action=mark-connection new-co...
by Hrobocop
Tue Apr 24, 2018 10:34 pm
Forum: General
Topic: Route ICMP ping reponse via different route?
Replies: 12
Views: 1522

Re: Route ICMP ping reponse via different route?

Home Router: # DST-ADDRESS PREF-SRC GATEWAY DISTANCE 1 ADS 0.0.0.0/0 my-home-isp-gateway 1 3 A S ;;; Office network 10.1.1.0/24 l2tp-out-office 1 4 ADC 10.1.2.0/24 10.1.2.1 bridge 0 11 ADC 10.1.99.1/32 10.1.99.2 l2tp-out-office 0 28 A S ;;; production server via VPN 1.2.3.4 l2tp-out-office 1 This is...
by Hrobocop
Tue Apr 24, 2018 9:09 pm
Forum: General
Topic: Route ICMP ping reponse via different route?
Replies: 12
Views: 1522

Re: Route ICMP ping reponse via different route?

And, to be more specific, my idea - not sure if right - is: - Mark incomming ICMP packed by route-mark - Add a new route for marked packets to send via WAN (not VPN) Coz it's ping, I'm not sure if I need to mark incomming packets, or outgoing packets and if the incomming and outgoing packed is the s...
by Hrobocop
Tue Apr 24, 2018 8:38 pm
Forum: General
Topic: Route ICMP ping reponse via different route?
Replies: 12
Views: 1522

Route ICMP ping reponse via different route?

Probably you ask why? So... I have this network: S = server on the internet W = Work router H = Home router For security reasons, we allow SSH traffic to our servers only form W router. So I have VPN between H and W and on H router I have special route, to route all traffic from H to S via W (via VP...
by Hrobocop
Sat Apr 07, 2018 9:39 am
Forum: General
Topic: Statis routes vs mangle
Replies: 2
Views: 395

Statis routes vs mangle

Hi there, just found "Mangle world" but I have one question: I have MicroTik in an external location. There is a VPN connection to our office (another MikroTik). I need to connect to some servers from office's IP address, so thru the VPN connection. So for each of those servers, I have a static rout...
by Hrobocop
Sat Sep 16, 2017 4:30 pm
Forum: Scripting
Topic: SNMP OID for Qty of Wireless Clients Connected
Replies: 25
Views: 27653

Re: SNMP OID for Qty of Wireless Clients Connected

I was just playing a bit with MIB browser and in my case it seems to be available on three places: mtxrWlApClientCount OID: .1.3.6.1.4.1.14988.1.1.1.3.1.6.11 Simple MIB: MIKROTIK-MIB::mtxrWlApClientCount.11 Full MIB: .iso.org.dod.internet.private.enterprises.mikrotik.mikrotikExperimentalModule.mtXRo...
by Hrobocop
Wed Dec 09, 2015 4:09 pm
Forum: Scripting
Topic: Auto upgrade script
Replies: 12
Views: 20006

Re: Auto upgrade script

My updated auto-upgrade script is here: https://github.com/massimo-filippi/mikrotik
Fully working on 6.33.3
by Hrobocop
Thu Nov 15, 2012 8:50 am
Forum: General
Topic: PPP auth via external LDAP?
Replies: 2
Views: 1330

Re: PPP auth via external LDAP?

Thanx, regardtv,

but it actually didn't answered my question.
(NO, I dont have MS Windoz and NO I don't want to have another server)
by Hrobocop
Sat Nov 10, 2012 10:31 pm
Forum: General
Topic: PPP auth via external LDAP?
Replies: 2
Views: 1330

PPP auth via external LDAP?

Hi there, I'm Googling whole day but cannot find exact answer on LDAP authentification. Is there any way how can Mikrotik HW router can authenticase users (for me VPN - PPP users) via external LDAP server? In my scenario, there is Mikrotik and Synology NAS, on which is running LDAP server. There is ...