MikroTik

sguox

I have two routers running 6.43.14, mipsbe. Both routers are connected via SSTP and do not have any other BGP peers except one session to each other. I am applying a filter on Router A, it get filtered correctly (not shown in Advertisements) however the prefix show up in Router B routing table and d...

sguox

116.15.139.78 mikrotik with public IP

sguox

upgrade to latest routeros, check cpu profile for which feature is using most of the cpu

sguox

finally, IGMP Snooping!

sguox

Anyone using Huawei E3531 directly plug into hAP ac or ac lite? Can't get it working at all. The USB is detected but no port, no lte. It's listed as supported in wiki.

sguox

maybe a way to customise the cap button config, same as how we can customise the default config of routeros

sguox

+1 for SFP28 and QSFP28, maybe a 4 port router

sguox

does the number really matter?

number no longer relevant since free lifetime upgrade

sguox

anyone successfully run with root permission under macos/osx ? tried sudo but failed.

sguox

Has anyone every encounter that trying to add a port to existing VLAN on CRS226, after few seconds winbox will automatically remove the port.

tried winbox 3.7, 3.8, routeros 6.38 6.36.4, 6.37.3, all same issue

sguox

Any one tried to packaged Netinstall to run in OS X? I am getting "bind bootp failed: (10013)".

sguox

Due to density the modules have two rows of ports. Then the top row has latches on top and the bottom row on the opposite side. So you have both orientations in such cases. i agree, there's no other logic for two rows port, but i believe 80-90% of mikrotik routers sold worldwide are part of single ...

sguox

i think RJ45 ports on routers should have the clippers on top instead of bottom, anyone fell the same? It would be much easier to unplug.

sguox

i am using zabbix, it gives me percentage, i can also put all cores into single graph, so i guess that depends on the monitoring software you are using

sguox

i am using standard snmp mibs, hrProcessorLoad, to capture ccr cpu usage. you can monitor usage of each core

sguox

i am getting very strange activity, over 340k IP blacklisted for past 7 days, a very unusual high number of IP, is it just my network or something is happening in the Internet?[attachment=0]unusual activity.png[/attachment]

sguox

to be able to have "plug and go" in a production network while having a "fallback" method for troubleshooting in the case the device plugged and not working. well, romon/mac inbox is another way, but i imagine no winbox, so browser+ip is a better way to go

sguox

right, but problem come when multiple devices are deployed on same network, ip conflict

sguox

Thank you for reply ZeroByte , yes, you are rigth. I'm new to GPON technology, I'm studying it's fundamentals in these days ... Do you know OLT SFP that works with Mikrotik? Have you ever tested such products? Just to display two of them available on the market: http://www.fujitsu.com/downloads/...

sguox

I can imagine a script conditionally enabling the static ip address if the dynamic is not assigned. But why do you need it?

that's what on my mind, but it's not a good solution to have a schedule running to check on dhcp client status. to simplify cpe deployment

sguox

yes, you can, just remember to have different IP between mikrotik and asterisk.

sguox

first of all, upgrade your RouterOS to latest version

you need to create a routing table for each of your ISP link then mark routing based on the source ip (LAN) and destination (not LAN).

sguox

if i understand you correctly, you have given two public IP from your ISP, 1 for your internet access (NAT) and the other one for your Asterisk server. You can create a bridge, add port 1&2 into the bridge, so port 1 to your ISP and port 2 to your asterisk server. assign NAT public ip to the bri...

sguox

understand that there is no built-in function in RouterOSto fallback to static IP in the case DHCP Client is unable to get any IP (cmiiw). Has anyone successfully implement such thing?

sguox

when we add bridge to ppp profile and configure pop user to use that profile, does the active vpn interface suppose to show up in bridge>port?

sguox

can't blackhole your entire subnet just because only 5% IP are being used. 5% used or unused? What I meant is setting a blackhole route more general than the rest you should have for "active" IPs, that way traffic to unactive IPs will be blackholed. 5% used, a lot of unused IP that's why ...

sguox

To random LAN IP address or random WAN's ports ? UDP 7124 is QuickTime Streaming Server but maybe it uses also TCP ? it's public ip routing, all destination IP address are not in use, might consider make them honeypots. Look at the first letter of those connections, U - Unreplied I also have notice...

sguox

Hi All, I am getting a lot of connections in the Firewall which showing same source address and port to random IP in my network (which are not in use). the protocol is TCP and state established. Any one has similar issues? How could a TCP connection to non-existence IP has state "established&qu...

sguox

is there any plan to support station bridge?

sguox

+1 for LLDP

sguox

I know there is interface status up or down, not sure about the duplex

sguox

You can user auto discovery and enter the oid one level higher, it will discover all interface and available snmp info

sguox

JeLi, How many firewall rules do you have in the crs226?

sguox

Woohoo!!!!

sguox

sguox

There is a missing gap, I think they don't print out all Mac

sguox

Or maybe a secondary controller..

sguox

Ideally it should be based on trigger eg. DHCP renew, interface up, time server should stick to ntp client with default configuration enabled and pointed to public pool

Sent from my iPad using Tapatalk

sguox

maybe you need RB1100AHx2 which support ethernet bypass, if may router failed, then you have the router behind it to take over.

sguox

I don't think routeros support nat64

sguox

we have been using 2x CCR1036-12G-4S since early 6.x without much issue. the catch, daily reboot on the router in off-peak hours. first unit connected with 3 BGP sessions (2 full route, 1 local route ~80k), total throughput >300mbps second unit, 2 BGP sessions (1 full route, 1 local route ~10k), tot...

sguox

If your ip>DNS is enable, you should always drop external request on cto and ISP, open resolver attack is very common

sguox

Can you see what ports is the ip connected to?

sguox

The other side is sending full bgp route~500k and receiving side just need ~20 prefixes

sguox

You can block URL with l7 filter, eg, blocking all URL with .exe or .zip

sguox

narrow down the problem to be filter issues, fixed by doing the filtering on the sending side instead of receiving, but still not sure what caused this.

sguox

I am trying to setup a bgp session between two unit CCR1036-12G-4S running latest 6.12 ROS. The BGP is run over L2TP tunnel between the devices. It connects successfully and passing prefixes, however after about 1min, it will get disconnected with error "Malformed Attribute List".

sguox

Please Help me How to set MIB to mikrotic ?
because my cacti can't get snmp information (error)

Note :
I'm Used RB450G with OS v5.21

Thanks for your help

regard's
Way

rename it to MIKROTIK-MIB.txt and copy to /usr/share/snmp/mibs/

then add "-m +MIKROTIK-MIB" in your snmp command line

sguox

The default firewall is dropping any new connection from WAN (default WAN is ether1). Oh, are you saying perhaps that my connection to the fiber modem is off the wrong port maybe? Hmmm. IIUC my internet connection goes out upon ether1-gateway which looks the same as vlan1 . if you are on VLAN, the ...

sguox

Ah... that makes sense. I need to firewall these ports ASAP. x220:~$ sudo nmap 121.7.219.77 Starting Nmap 6.40 ( http://nmap.org ) at 2014-03-17 16:54 SGT Nmap scan report for bb121-7-219-77.singnet.com.sg (121.7.219.77) Host is up (0.015s latency). Not shown: 996 closed ports PORT STATE SERVICE 22...

sguox

another thing is if i put 2-3 fingers (~1-2cm from the fan) blocking the air flow outside the casing, the fan seems can sense this and speed up.. *or is it just my imagination??*

sguox · Re: CCR1036-12G-4S Fan Screen Shot 2013-11-23 at 12.03.07 am.png

Screen Shot 2013-11-23 at 12.03.07 am.png

sguox

i notice that my unit of the CCR, the main is louder than the aux, is this normal? Anybody has same issue?

sguox

Sacrifice one of the led in your router, connect it to relay that control your camera power supply, routeros can control led which control relay

sguox

You can take a look at customizing hotspot page in wiki.mikrotik.com, there is a redirection HTML you need to upload to your AP, it contains variables to passed to your remote login page.

sguox

doh! stupid me.

found the problem, a mangle rule that force reply traffic into another table which l2tp is not in.

thanks for the help, btw, your presentation is awesome.

sguox

sorry, forgot to mention the client is on dynamic IP hence we do not create any policy, instead it's generated through peers settings. strange thing is when we do trace route to internet, packets go through, however when we try to trace to LAN, it doesn't work, just stopped at the gateway. firewall ...

sguox

Hi All, We are trying to setup VPN access into our LAN. The subnet IP for VPN are different from our LAN subnet. VPN will have 10.10.10.0/24. LAN subnet is 192.168.188.0/24 and member of bridge (with proxy-arp). We have successfully connected to the mikrotik router and able to access internet via th...

sguox

anybody has experience that bgp session drop with message "cease: prefix limit reached" even thou there is no limit for prefix in the routing filter? Is there a default limit by routeros?

sguox

another reason for is-is is because it support both ipv4 and ipv6, so we only need to run 1 ibgp protocol, not two as in ospf

sguox

arhhwwoooo, SFP+......*slurp...

sguox

Will MikroTik enable IPv6 permanently in next release of RouterOS instead of optional installation packages or disabled ?

http://www.worldipv6launch.org
http://www.worldipv6launch.org/participants/?q=3

sguox

maybe a standardised rj45 console port same as the RB2011?

sguox

thanks w0lt, so it's not auto after all, it's 115200

sguox

Any idea what's the correct settings using putty to connect to RB2011 serial port?

I notice the default baud rate configuration in the router is "auto". I changed it to 57600 and managed to connect to it only AFTER it boot up. When booting, it still showing garbage code.

Thanks

sguox

screenshot attached.

sguox

[admin@MikroTik] > /ip address print detail Flags: X - disabled, I - invalid, D - dynamic 0 ;;; default configuration address=192.168.88.1/24 network=192.168.88.0 interface=bridge-local actual-interface=bridge-local 1 D address=10.199.88.237/32 network=10.199.88.237 interface=ether1-gateway actual-i...

sguox

Hi All, I have RB750G running as DHCP server. There's no problem getting IP address using desktop/laptop. However when i connect a RB751G-2hnD to RB750G (RB751G running dhcp client), it can obtain IP address however the subnet mask is /0. Both device running ROS 5.14. Any body experiencing similar p...

sguox

does RB751U and RB751G support superchannel?

thanks

sguox

when i am at the login page, i tried to view html source and able to see some strings generated for hexMD5 line, so i assume this mean that i am on chap ?

sguox

the setup was configured using hotspot setup wizard, so all the settings are default. i checked the server profile, it has both http-chap and http-pap enabled.

sguox

Hi All, I am trying to setup an external login page by following instruction in http://wiki.mikrotik.com/wiki/HotSpot_external_login_page I have setup hotspot in routerboard using Hotspot Setup. The problem i encounter is if i insert correct path for md5.js in the login page, login will always fail....

sguox

Hi All, Our ISP connection require VLAN and Priority. I understand that RB750GL support switch rule where we can modify the header to add priority. Port 4 is Master port and Port 5 is Slave. I have created a VLAN 100 and 200 under Ether4 interface. When i try to create switch rule involving "sw...

Search found 73 matches