Community discussions

MUM Europe 2020

Search found 45 matches

by luckybuilding
Fri Aug 15, 2014 7:12 pm
Forum: Virtualization
Topic: 10G support on VMware?
Replies: 9
Views: 4057

Re: 10G support on VMware?

you cannot as VMXNET3 does not have kernel modules in RouterOS.
Thanks for your reply. Does this need MT developer team to include it?

However, is there anyway to reach 10G for MT on vmware?
by luckybuilding
Fri Aug 15, 2014 2:14 pm
Forum: Virtualization
Topic: 10G support on VMware?
Replies: 9
Views: 4057

10G support on VMware?

Hi all, I wanna reach 10G speed on the virtual environment. As I checked the forum, all say that MT supports all linux kernel supports! Then, according to some links VMXNET3 is supported on kernel 2.6.37 & later. (http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&ext...
by luckybuilding
Wed Jul 16, 2014 11:50 pm
Forum: General
Topic: Cache hits problem on 6.x
Replies: 7
Views: 3388

Re: Cache hits problem on 6.x

Dear bro, Thanks for your reply. I hope you have done this in a right way . . . please give a solution. Unfortunately, I suspect this should be a bug in new versions. Because, none of probable configs didn't do this correctly. However, I would look forward to hearing from anyone who might have a so...
by luckybuilding
Sat Jul 12, 2014 8:20 pm
Forum: General
Topic: Cache hits problem on 6.x
Replies: 7
Views: 3388

Re: Cache hits problem on 6.x

i hope your problem will be solve, please try this way. bcoz i am success on 6.15 /ip firewall nat add chain=dstnat action=redirect to-ports=8080 protocol=tcp dst-port=80 /ip firewall mangle add chain=output action=change-dscp new-dscp=4 passthrough=yes comment="HIT TRAFFIC FROM PROXY" add chain=ou...
by luckybuilding
Mon Jun 23, 2014 1:03 am
Forum: General
Topic: Cache hits problem on 6.x
Replies: 7
Views: 3388

Cache hits problem on 6.x

Hi all, I'm using multiple hotspots on a single MT 6.15. It has caching enabled & working. I see the hits on the proxy details. I also made sure that all other configs are default too. I was trying to bypass the cache hits from being limited in my queues. I tried multiple mangle configs to mark the ...
by luckybuilding
Mon Feb 17, 2014 7:12 pm
Forum: General
Topic: Can not implement transparent proxy on Hotspot Enabled MT
Replies: 12
Views: 2811

Re: Can not implement transparent proxy on Hotspot Enabled M

Do you have the hotspot universal NAT disabled on those hotspots? /ip hotspot print yes, I don't NAT on the mikrotik & I disabled any ip pool on hotspots. Flags: X - disabled, I - invalid, S - HTTPS # NAME INTERFACE ADDRESS-POOL PROFILE IDLE-TIMEOUT 0 hs-RC-Users RC-Users RC-hsprof 5m 1 hs-R&D-U......
by luckybuilding
Mon Feb 17, 2014 9:22 am
Forum: General
Topic: Can not implement transparent proxy on Hotspot Enabled MT
Replies: 12
Views: 2811

Re: Can not implement transparent proxy on Hotspot Enabled M

What physical interface is the hotspot on? What physical interfaces are the vlans on?
All of them are on different vlans of a physical interface!

This is why I suspect hotspot! However, I have 5 vlans on that interface & two hotspot on two of the vlans! All working cool!
by luckybuilding
Mon Feb 17, 2014 12:52 am
Forum: General
Topic: Can not implement transparent proxy on Hotspot Enabled MT
Replies: 12
Views: 2811

Re: Can not implement transparent proxy on Hotspot Enabled M

Now I can read it. Add this rule and move it to the top of your filter rules. /ip firewall filter add chain=input action=accept in-interface=F-Users dst-port=8080 protocol=tcp print move X 0 Change X to the line number of this new rule. Dear ST, it didn't work! I think it should have something to d...
by luckybuilding
Sat Feb 15, 2014 6:55 pm
Forum: General
Topic: Can not implement transparent proxy on Hotspot Enabled MT
Replies: 12
Views: 2811

Re: Can not implement transparent proxy on Hotspot Enabled M

The export is unreadable in verbose.
Can you post "/ip firewall filter print"?

I edited the main post for that purpose
by luckybuilding
Fri Feb 14, 2014 5:30 pm
Forum: General
Topic: Can not implement transparent proxy on Hotspot Enabled MT
Replies: 12
Views: 2811

Re: Can not implement transparent proxy on Hotspot Enabled M

My bad. Then you should post the nat rule you tried and the interface your clients are on.
Thanks

I updated the main post including the filter & nat rules (verbose)

The last rule is for the users on F-Users vlan that are the target users.
As I enable this rule, they lose their net connection!
by luckybuilding
Fri Feb 14, 2014 2:56 pm
Forum: General
Topic: Can not implement transparent proxy on Hotspot Enabled MT
Replies: 12
Views: 2811

Re: Can not implement transparent proxy on Hotspot Enabled M

You can enable a transparent proxy in "/ip hotspot user profile". Set "transparent-proxy=yes" for the profiles you want to use the proxy. Insure you enable the proxy in "/ip proxy". Dear SurferTim, I was aware some friends might think that I wanna this feature for users on the hotspot! However, the...
by luckybuilding
Fri Feb 14, 2014 11:38 am
Forum: General
Topic: Can not implement transparent proxy on Hotspot Enabled MT
Replies: 12
Views: 2811

Can not implement transparent proxy on Hotspot Enabled MT

Dear all, I have a MT with different output vlans. I have enabled Hotspot for couple of them. They work perfectly. However, there is another vlans where I don't like to use hotspot. But, I wanna use transparent proxy for them for caching purposes. I tried using: http://wiki.mikrotik.com/wiki/How_to_...
by luckybuilding
Sat Oct 26, 2013 10:12 am
Forum: General
Topic: routerOs v6.5 Create Certificates
Replies: 12
Views: 7092

Re: routerOs v6.5 Create Certificates

Same here!
Is it solved on 6.6rc1 as told?
I need to be sure before upgrade!

TNX
by luckybuilding
Sun Aug 25, 2013 5:46 pm
Forum: Scripting
Topic: Detect Cloud Servers' Resource Availability-Dynamic Routing
Replies: 0
Views: 508

Detect Cloud Servers' Resource Availability-Dynamic Routing

Dear all, I'm going to use Mikrotik as a load balancer for a cloud of web apps. I wanna check the availability of resources on each server (CPU & Ram) to send the new incoming requests to the best server. The Mikrotik should also return a web service unavailable code (503 for example) to the users; ...
by luckybuilding
Sun Aug 04, 2013 4:03 am
Forum: Scripting
Topic: How seperate download & upload bytes amount?!
Replies: 2
Views: 1141

Re: How seperate download & upload bytes amount?!

How can I seperate the download part of the number?! I would do something like this. If you want to test in the terminal, just enclose the entire script in brackets { } :local bytes [/queue simple get [/queue simple find target="192.168.10.10/32"] bytes] :for i from=( [:len $bytes] - 1) to=0 do={ :...
by luckybuilding
Sat Aug 03, 2013 1:52 am
Forum: General
Topic: Simple Queue's Total Statistics doesn't work after upgrade 6
Replies: 0
Views: 428

Simple Queue's Total Statistics doesn't work after upgrade 6

Hi all,
I recently upgraded from v5.25 to v6.2. Now, the "Total Statistics" section of the Simple Queues doesn't work. However, the "Statistics" section works correctly.

What is wrong with the new version's configuration?
by luckybuilding
Sat Aug 03, 2013 1:46 am
Forum: Scripting
Topic: How seperate download & upload bytes amount?!
Replies: 2
Views: 1141

How seperate download & upload bytes amount?!

Hi all, I recently upgraded from v5 to v6. I used to check total-bytes for the usage of each ip on scripting. But, now, "Total Statistics" has stopped working & I don't know why! However, the "Statistics" section works correctly on the simple queues. Then, I have to make the get the amount of downlo...
by luckybuilding
Mon May 20, 2013 2:58 pm
Forum: General
Topic: [Feature Req.]Saving any log or settings on slave disk
Replies: 4
Views: 2211

Re: [Feature Req.]Saving any log or settings on slave disk

But, the system does not consider the extra device size as the total space. Then, you can not save any file larger than your disk1 free size on the second disk!

This is a real problem for me using the second drive using the approach you mentioned.
by luckybuilding
Mon May 20, 2013 2:24 am
Forum: General
Topic: [Feature Req.]Saving any log or settings on slave disk
Replies: 4
Views: 2211

Re: [Feature Req.]Saving any log or settings on slave disk

Thanks!
Now, I understand how I can do that. However, it's not a straightforward way.
It there was an option for selecting the default disk, it would be great.
by luckybuilding
Tue Apr 30, 2013 4:05 pm
Forum: General
Topic: [Feature Req.]Saving any log or settings on slave disk
Replies: 4
Views: 2211

[Feature Req.]Saving any log or settings on slave disk

I recently noticed that adding slave disk to Mikrotik is almost useless. It can't save logs or fetched files on the slave disk! Therefore, the slave disk can only be used for Cache disk! Please, add this option to all sections such as Logging & Fetch tool to save the output on the slave disk. Thanks
by luckybuilding
Sat Apr 27, 2013 10:57 pm
Forum: General
Topic: How can I use slave store for fetch tool?
Replies: 0
Views: 627

How can I use slave store for fetch tool?

Hi all,
I have a limited space on my mikrotik's primary disk.
I sometimes need to download some files using fetch tool. By default, it saves the file on primary drive. How can I change the location to the slave one?

Thanks
by luckybuilding
Fri Apr 26, 2013 9:16 pm
Forum: General
Topic: Which protocol is the fastest site-to-site encrypted connect
Replies: 5
Views: 874

Re: Which protocol is the fastest site-to-site encrypted con

A RB 750GL can easily do 10mbit of IPSec traffic using aes128.

You mentioned you only needed 4mbit, so that should be no problem.

Thanks for your help.
However, I have a tiny problem implementing it & it doesn't work correctly! One of the sides has Hotspot enabled! Does it make the problem?
by luckybuilding
Thu Apr 25, 2013 11:27 pm
Forum: General
Topic: Which protocol is the fastest site-to-site encrypted connect
Replies: 5
Views: 874

Re: Which protocol is the fastest site-to-site encrypted con

Which encryption did you use on IPSEC? AES128 should be faster than 3DES. Sometimes people pick 3DES because DES can't be used for their application anymore but AES128 is kinder to the CPU than 3DES. A number of other factors will affect speed on an international link. It might be worth checking yo...
by luckybuilding
Mon Apr 22, 2013 3:33 pm
Forum: General
Topic: Which protocol is the fastest site-to-site encrypted connect
Replies: 5
Views: 874

Which protocol is the fastest site-to-site encrypted connect

Hi all, I'm looking for the fastest way to connect two overseas mikrotik sites. The spped of the connection would play a crucial rule in the connection. Moreover, I would like to have the encryption on the connection. However, the strength of the encryption is not important. I tested IPSec, PPTP, L2...
by luckybuilding
Fri Jan 18, 2013 12:45 am
Forum: The User Manager
Topic: Can I use Windows Radius Server for authentication & still..
Replies: 2
Views: 2309

Re: Can I use Windows Radius Server for authentication & sti

You need to update RADIUS server dictionary with MikroTik attributes, http://wiki.mikrotik.com/wiki/Manual:RADIUS_Client http://wiki.mikrotik.com/wiki/Manual:RADIUS_Client/vendor_dictionary MikroTik-Rate-Limit is used for queues (bandwidth limitation). About saving accounting data you need to study...
by luckybuilding
Thu Jan 17, 2013 1:44 am
Forum: The User Manager
Topic: Can I use Windows Radius Server for authentication & still..
Replies: 2
Views: 2309

Can I use Windows Radius Server for authentication & still..

Dear all, I am authenticating my hotspot users using Active Directory. The authentication process works successfully. However, I was wondering if there is any approach to use the User Manager features using the radius such as rate limit & total usage limits? It should work but the thing is that the ...
by luckybuilding
Wed Dec 05, 2012 6:33 pm
Forum: General
Topic: Hotspot Rate Limit Using Windows Radius Server
Replies: 0
Views: 570

Hotspot Rate Limit Using Windows Radius Server

Dear all, I'm now using Windows 2008 R2 as Radius server for Mikrotik to authenticate the users. Is there anyway I can set each user's download rate limit through active directory for each user? As I noticed, any rate limit I set through the default profile apply to all users and not a single user. ...
by luckybuilding
Sun Dec 02, 2012 8:34 pm
Forum: General
Topic: How can I publish (advertise) my IPv6 DNS?
Replies: 9
Views: 2704

Re: How can I publish (advertise) my IPv6 DNS?

I think there's currently no way how to do it using only RouterOS. Generally the options are: a) Send DNS resolver address in router advertisements. ROS can do it, but it's not supported by any version of Windows, so if you have any, it's not an option. b) Use stateless DHCPv6 in addition to RA to ...
by luckybuilding
Sun Dec 02, 2012 9:29 am
Forum: General
Topic: How can I publish (advertise) my IPv6 DNS?
Replies: 9
Views: 2704

Re: How can I publish (advertise) my IPv6 DNS?

If the clients are using an IPV6 capable DNS server then they will see IPV6 responses. e.g. Google's DNS service will provide both IPV4 and IPV6 addresses for host names and the servers themselves are available on both IPV4 and IPV6 addresses. Thanks for your reply. I know this & my users are using...
by luckybuilding
Sun Dec 02, 2012 12:56 am
Forum: General
Topic: How can I publish (advertise) my IPv6 DNS?
Replies: 9
Views: 2704

How can I publish (advertise) my IPv6 DNS?

Dear all, I have set up My board to work in dual stack for IPv4 & IPv6. I advertised the IPv6 range. All userrs are getting the IPv6 & Gateway & can connect to the net. However, they use their IPv4 DNS to resolve names. Isn't there any way in the MT to publish (advertise) DNS option for users? Thanks
by luckybuilding
Fri Nov 30, 2012 1:44 pm
Forum: General
Topic: Feature Request: IPv6 Hotspot support
Replies: 95
Views: 22348

Re: Feature Request: IPv6 Hotspot support

Doesn't this solve the problem you were talking about?

netfilter: IPv6 NAT
http://lwn.net/Articles/468671/
by luckybuilding
Thu Nov 01, 2012 1:58 am
Forum: General
Topic: How can I limit user's speed on IPv6?
Replies: 5
Views: 1118

Re: How can I limit user's speed on IPv6?

it should be possible to do the same way as for ipv4. http://wiki.mikrotik.com/wiki/Manual:Queues_-_PCQ_Examples just change to /ipv6 firewall for the mangle roules. then its done packet by packet, and should not have anny issu with a huge nr of ipv6 adresses, as long as the packet flow is almoust ...
by luckybuilding
Mon Oct 29, 2012 6:41 am
Forum: General
Topic: How can I limit user's speed on IPv6?
Replies: 5
Views: 1118

Re: How can I limit user's speed on IPv6?

mark packed (ipv6 firewall) and pcq.. ? Thanks for your reply. However, because of the high range of IP addresses, How can I be sure to apply my policies about limiting their speed based on their usage? Now, I use simple queues along with scripting to check each user's bandwidth usage and limit use...
by luckybuilding
Sun Oct 28, 2012 7:30 pm
Forum: General
Topic: How can I limit user's speed on IPv6?
Replies: 5
Views: 1118

Re: How can I limit user's speed on IPv6?

No one has worked on this?!
by luckybuilding
Sat Oct 27, 2012 2:20 pm
Forum: General
Topic: How can I limit user's speed on IPv6?
Replies: 5
Views: 1118

How can I limit user's speed on IPv6?

Dear all,
I have set up my network for IPv6 and it works perfect. However, I have used 255 simple queues to limit speed in IPv4 network.
How can I do same thing in the IPv6?
Should I create 18Billion queues for a /64 network?!!!

Please, help me on this matter.

Thanks
by luckybuilding
Mon Oct 01, 2012 4:17 pm
Forum: Scripting
Topic: the script for "Limiting a user to a given traffic" doesn't
Replies: 1
Views: 823

Re: the script for "Limiting a user to a given traffic" does

Finally, I solved it using this code: :local traf; :for i from=1 to= 254 do= { :if ([/queue simple find target-addresses=("192.168.10." . $i . "/32")] != "") do={ set traf [/queue simple get [/queue simple find target-addresses=("192.168.10." . $i . "/32")] total-bytes]; :if ($traf > 52428800) do= {...
by luckybuilding
Mon Oct 01, 2012 9:45 am
Forum: Scripting
Topic: the script for "Limiting a user to a given traffic" doesn't
Replies: 1
Views: 823

the script for "Limiting a user to a given traffic" doesn't

Hi, There is a script on the Wiki that is described to work for limiting users with high amount of download: :local traf; /queue simple :for i from=1 to= 254 do = { :if ([/queue simple find target-addresses=("192.168.1." . $i)] != "") do={ :set traf [get [find target-addresses=("192.168.1." . $i)] t...
by luckybuilding
Tue Feb 07, 2012 1:50 am
Forum: General
Topic: Can Mikrotik work with Kerberos authentication?!
Replies: 2
Views: 1784

Re: Can Mikrotik work with Kerberos authentication?!

Thanks for your reply. But, can you explain more specifying at least how this authentication would work & how can I do it more precisely?
Thanks again
by luckybuilding
Mon Feb 06, 2012 10:55 pm
Forum: General
Topic: Can Mikrotik work with Kerberos authentication?!
Replies: 2
Views: 1784

Can Mikrotik work with Kerberos authentication?!

I was wondering if Mikrotik can authenticate users using kerberos then, the users won't need to login using it's login page. In such a manner, all users logged in to their domain computers would be able to use thenet & others who are not part of the domain won't be able to use it. Has MT already suc...
by luckybuilding
Mon Feb 06, 2012 10:51 pm
Forum: General
Topic: Simple Queue is not working for detecting each user traffic
Replies: 4
Views: 1030

Re: Simple Queue is not working for detecting each user traf

Thanks!
It's so fun working with such a thing (MT) :D
by luckybuilding
Mon Feb 06, 2012 5:49 pm
Forum: General
Topic: Simple Queue is not working for detecting each user traffic
Replies: 4
Views: 1030

Re: Simple Queue is not working for detecting each user traf

Thanks for the suggestion! It works on the default mode!
Then, what's wrong with other modes?!!
by luckybuilding
Sun Feb 05, 2012 9:41 pm
Forum: General
Topic: Can Mikrotik know the users through Active Directiry?
Replies: 4
Views: 1058

Re: Can Mikrotik know the users through Active Directiry?

As you told, I wanna let the company users which are joined to a domain to use internet without any problem. However, the guests should not be allowed to use it. One of my friends has done such a thing using "Kerberos authentication (for Active Directory users)" in Kerio. So, the logged in users whi...
by luckybuilding
Sun Feb 05, 2012 3:45 pm
Forum: General
Topic: Can Mikrotik know the users through Active Directiry?
Replies: 4
Views: 1058

Re: Can Mikrotik know the users through Active Directiry?

Thanks for your reply. But, reading the documentations, I reached the term "bypassing hotspot login page". In fact, I like to the authenticated users who has logged in to their system using their domain username, won't see the Login page for internet access & they would surf net without any problem....
by luckybuilding
Sun Feb 05, 2012 12:25 pm
Forum: General
Topic: Can Mikrotik know the users through Active Directiry?
Replies: 4
Views: 1058

Can Mikrotik know the users through Active Directiry?

Hi all, How can Mikrotik be integrated in the domain (Active directory) which allow logged in users through their stations to connect to net without needing a dual authentication using the hotspot?! I mean I want the users which has logged in to the computer using their domain username to be known w...
by luckybuilding
Sun Feb 05, 2012 1:15 am
Forum: General
Topic: Simple Queue is not working for detecting each user traffic
Replies: 4
Views: 1030

Simple Queue is not working for detecting each user traffic

Dear All, I'm new to Mikrotik & I have recently become NetAdmin of a company which uses Mikrotik. I would like to monitor users bandwidth usage & know which one of the IPs is using the bandwidth in present time & know his/her speed. Studying through documentations, I have found out that Simple Queue...