Community discussions

MikroTik App

Search found 72 matches

by sguox
Fri Apr 12, 2019 7:45 pm
Forum: Forwarding Protocols
Topic: BGP Routing Filter, filtered prefix mysteriously show up in remote
Replies: 0
Views: 2220

BGP Routing Filter, filtered prefix mysteriously show up in remote

I have two routers running 6.43.14, mipsbe. Both routers are connected via SSTP and do not have any other BGP peers except one session to each other. I am applying a filter on Router A, it get filtered correctly (not shown in Advertisements) however the prefix show up in Router B routing table and d...
by sguox
Sat Jun 09, 2018 5:57 am
Forum: General
Topic: progaram get any mikrotik system usernam and passowrd in 3 second
Replies: 37
Views: 27871

Re: progaram get any mikrotik system usernam and passowrd in 3 second

116.15.139.78 mikrotik with public IP
by sguox
Mon Jul 17, 2017 5:00 am
Forum: General
Topic: 1036 CPU 99%
Replies: 3
Views: 1230

Re: 1036 CPU 99%

upgrade to latest routeros, check cpu profile for which feature is using most of the cpu
by sguox
Thu Jun 08, 2017 5:25 am
Forum: RouterBOARD hardware
Topic: Huawei E3531 on both hAP ac & hAP ac lite
Replies: 0
Views: 1030

Huawei E3531 on both hAP ac & hAP ac lite

Anyone using Huawei E3531 directly plug into hAP ac or ac lite? Can't get it working at all. The USB is detected but no port, no lte. It's listed as supported in wiki.
by sguox
Fri Jun 02, 2017 12:12 pm
Forum: Wireless Networking
Topic: cAP mode button changes poll
Replies: 16
Views: 6575

Re: cAP mode button changes poll

maybe a way to customise the cap button config, same as how we can customise the default config of routeros
by sguox
Fri May 12, 2017 6:20 pm
Forum: General
Topic: Which types of ports would you like to see for a high speed router
Replies: 179
Views: 58849

Re: Which types of ports would you like to see for a high speed router

+1 for SFP28 and QSFP28, maybe a 4 port router
by sguox
Thu Apr 20, 2017 2:26 pm
Forum: General
Topic: ETA v8
Replies: 21
Views: 7652

Re: ETA v8

does the number really matter?
number no longer relevant since free lifetime upgrade :)
by sguox
Thu Jan 19, 2017 3:28 pm
Forum: General
Topic: Packaging Netinstall with Winebottler
Replies: 2
Views: 1298

Re: Packaging Netinstall with Winebottler

anyone successfully run with root permission under macos/osx ? tried sudo but failed.
by sguox
Mon Jan 16, 2017 9:15 am
Forum: General
Topic: CRS VLAN Problem
Replies: 0
Views: 727

CRS VLAN Problem

Has anyone every encounter that trying to add a port to existing VLAN on CRS226, after few seconds winbox will automatically remove the port.

tried winbox 3.7, 3.8, routeros 6.38 6.36.4, 6.37.3, all same issue
by sguox
Fri Dec 23, 2016 9:35 am
Forum: General
Topic: Packaging Netinstall with Winebottler
Replies: 2
Views: 1298

Packaging Netinstall with Winebottler

Any one tried to packaged Netinstall to run in OS X? I am getting "bind bootp failed: (10013)".
by sguox
Thu Nov 24, 2016 9:29 am
Forum: RouterBOARD hardware
Topic: Port design on most of MikroTik products
Replies: 4
Views: 1562

Re: Port design on most of MikroTik products

Due to density the modules have two rows of ports. Then the top row has latches on top and the bottom row on the opposite side. So you have both orientations in such cases. i agree, there's no other logic for two rows port, but i believe 80-90% of mikrotik routers sold worldwide are part of single ...
by sguox
Tue Nov 22, 2016 12:42 pm
Forum: RouterBOARD hardware
Topic: Port design on most of MikroTik products
Replies: 4
Views: 1562

Port design on most of MikroTik products

i think RJ45 ports on routers should have the clippers on top instead of bottom, anyone fell the same? It would be much easier to unplug.
by sguox
Sun Aug 07, 2016 5:16 pm
Forum: General
Topic: CCR SNMP monitoring
Replies: 3
Views: 1704

Re: CCR SNMP monitoring

i am using zabbix, it gives me percentage, i can also put all cores into single graph, so i guess that depends on the monitoring software you are using
by sguox
Fri Aug 05, 2016 5:22 pm
Forum: General
Topic: CCR SNMP monitoring
Replies: 3
Views: 1704

Re: CCR SNMP monitoring

i am using standard snmp mibs, hrProcessorLoad, to capture ccr cpu usage. you can monitor usage of each core
by sguox
Thu Jul 21, 2016 4:55 am
Forum: General
Topic: Unusual high number of blacklist for past 7 days
Replies: 2
Views: 1124

Unusual high number of blacklist for past 7 days

i am getting very strange activity, over 340k IP blacklisted for past 7 days, a very unusual high number of IP, is it just my network or something is happening in the Internet?[attachment=0]unusual activity.png[/attachment]
by sguox
Fri Jun 24, 2016 4:59 pm
Forum: General
Topic: DHCP Client fallback to Static IP
Replies: 7
Views: 4843

Re: DHCP Client fallback to Static IP

to be able to have "plug and go" in a production network while having a "fallback" method for troubleshooting in the case the device plugged and not working. well, romon/mac inbox is another way, but i imagine no winbox, so browser+ip is a better way to go
by sguox
Fri Jun 24, 2016 1:21 pm
Forum: General
Topic: DHCP Client fallback to Static IP
Replies: 7
Views: 4843

Re: DHCP Client fallback to Static IP

right, but problem come when multiple devices are deployed on same network, ip conflict :)
by sguox
Fri Jun 24, 2016 4:44 am
Forum: General
Topic: Mikrotik GPON FTTH Architetcure
Replies: 8
Views: 4833

Re: Mikrotik GPON FTTH Architetcure

Thank you for reply ZeroByte , yes, you are rigth. I'm new to GPON technology, I'm studying it's fundamentals in these days ... Do you know OLT SFP that works with Mikrotik? Have you ever tested such products? Just to display two of them available on the market:    http://www.fujitsu.com/downloads/...
by sguox
Fri Jun 24, 2016 4:42 am
Forum: General
Topic: DHCP Client fallback to Static IP
Replies: 7
Views: 4843

Re: DHCP Client fallback to Static IP

I  can imagine a script conditionally enabling the static ip address if the dynamic is not assigned. But why do you need it?
that's what on my mind, but it's not a good solution to have a schedule running to check on dhcp client status. to simplify cpe deployment
by sguox
Thu Jun 23, 2016 1:22 pm
Forum: General
Topic: Mikrotik RB750. How to organize the interfaces to all the work?
Replies: 4
Views: 1257

Re: Mikrotik RB750. How to organize the interfaces to all the work?

yes, you can, just remember to have different IP between mikrotik and asterisk.
by sguox
Thu Jun 23, 2016 12:42 pm
Forum: General
Topic: 2 ISP, how to route the connection for only selected IP ?
Replies: 1
Views: 885

Re: 2 ISP, how to route the connection for only selected IP ?

first of all, upgrade your RouterOS to latest version :)

you need to create a routing table for each of your ISP link then mark routing based on the source ip (LAN) and destination (not LAN).
by sguox
Thu Jun 23, 2016 12:35 pm
Forum: General
Topic: Mikrotik RB750. How to organize the interfaces to all the work?
Replies: 4
Views: 1257

Re: Mikrotik RB750. How to organize the interfaces to all the work?

if i understand you correctly, you have given two public IP from your ISP, 1 for your internet access (NAT) and the other one for your Asterisk server. You can create a bridge, add port 1&2 into the bridge, so port 1 to your ISP and port 2 to your asterisk server. assign NAT public ip to the bri...
by sguox
Thu Jun 23, 2016 11:44 am
Forum: General
Topic: DHCP Client fallback to Static IP
Replies: 7
Views: 4843

DHCP Client fallback to Static IP

understand that there is no built-in function in RouterOSto fallback to static IP in the case DHCP Client is unable to get any IP (cmiiw). Has anyone successfully implement such thing?
by sguox
Tue Nov 17, 2015 3:49 am
Forum: General
Topic: VPN (PPTP, L2TP, SSTP) and BCP
Replies: 1
Views: 1442

VPN (PPTP, L2TP, SSTP) and BCP

when we add bridge to ppp profile and configure pop user to use that profile, does the active vpn interface suppose to show up in bridge>port?
by sguox
Wed May 27, 2015 6:45 pm
Forum: General
Topic: Firewall Connection, TCP established to non-existent IPs
Replies: 24
Views: 5991

Re: Firewall Connection, TCP established to non-existent IPs

can't blackhole your entire subnet just because only 5% IP are being used. 5% used or unused? What I meant is setting a blackhole route more general than the rest you should have for "active" IPs, that way traffic to unactive IPs will be blackholed. 5% used, a lot of unused IP that's why ...
by sguox
Wed May 27, 2015 6:13 pm
Forum: General
Topic: Firewall Connection, TCP established to non-existent IPs
Replies: 24
Views: 5991

Re: Firewall Connection, TCP established to non-existent IPs

To random LAN IP address or random WAN's ports ? UDP 7124 is QuickTime Streaming Server but maybe it uses also TCP ? it's public ip routing, all destination IP address are not in use, might consider make them honeypots. Look at the first letter of those connections, U - Unreplied I also have notice...
by sguox
Tue May 26, 2015 7:29 pm
Forum: General
Topic: Firewall Connection, TCP established to non-existent IPs
Replies: 24
Views: 5991

Firewall Connection, TCP established to non-existent IPs

Hi All, I am getting a lot of connections in the Firewall which showing same source address and port to random IP in my network (which are not in use). the protocol is TCP and state established. Any one has similar issues? How could a TCP connection to non-existence IP has state "established&qu...
by sguox
Sat Feb 14, 2015 9:27 am
Forum: General
Topic: CAPsMAN v2 ready for testing
Replies: 200
Views: 127643

Re: CAPsMAN v2 ready for testing

is there any plan to support station bridge?
by sguox
Mon Aug 11, 2014 6:49 pm
Forum: General
Topic: LLDP
Replies: 136
Views: 68950

Re: LLDP

+1 for LLDP
by sguox
Tue Aug 05, 2014 5:02 pm
Forum: General
Topic: MIKROTIK OID Question
Replies: 3
Views: 1435

Re: MIKROTIK OID Question

I know there is interface status up or down, not sure about the duplex
by sguox
Tue Aug 05, 2014 5:00 pm
Forum: General
Topic: SNMP information
Replies: 13
Views: 4173

Re: SNMP information

You can user auto discovery and enter the oid one level higher, it will discover all interface and available snmp info
by sguox
Wed Jul 30, 2014 3:03 pm
Forum: RouterBOARD hardware
Topic: CRS226-24G-2S+ Poor routing performance
Replies: 35
Views: 32567

Re: CRS226-24G-2S+ Poor routing performance

JeLi, How many firewall rules do you have in the crs226?
by sguox
Fri Jul 18, 2014 1:46 pm
Forum: General
Topic: Newsletter 60: 802.11ac
Replies: 104
Views: 65452

Re: Newsletter 60: 802.11ac

Woohoo!!!!
by sguox
Fri Jul 18, 2014 7:04 am
Forum: Forwarding Protocols
Topic: BGP4-MIB Support
Replies: 5
Views: 2386

Re: BGP4-MIB Support

+1
by sguox
Mon Jun 23, 2014 9:54 am
Forum: RouterBOARD hardware
Topic: New hardware - mAP
Replies: 155
Views: 98325

Re: New hardware - mAP

There is a missing gap, I think they don't print out all Mac
by sguox
Thu Jun 12, 2014 6:00 pm
Forum: General
Topic: v6.15 released
Replies: 302
Views: 133344

Re: v6.15 released

Or maybe a secondary controller..
by sguox
Tue Jun 10, 2014 4:52 pm
Forum: General
Topic: IP Cloud
Replies: 112
Views: 86160

Re: IP Cloud

Ideally it should be based on trigger eg. DHCP renew, interface up, time server should stick to ntp client with default configuration enabled and pointed to public pool


Sent from my iPad using Tapatalk
by sguox
Wed Jun 04, 2014 6:28 am
Forum: Forwarding Protocols
Topic: Single homed BGP edge router redundancy
Replies: 9
Views: 4022

Re: Single homed BGP edge router redundancy

maybe you need RB1100AHx2 which support ethernet bypass, if may router failed, then you have the router behind it to take over.
by sguox
Fri May 30, 2014 3:43 pm
Forum: Beginner Basics
Topic: IPV6 transition
Replies: 1
Views: 1126

Re: IPV6 transition

I don't think routeros support nat64
by sguox
Thu May 29, 2014 6:53 am
Forum: Forwarding Protocols
Topic: CCR and Internet BGP - survey of user experiences
Replies: 24
Views: 12816

Re: CCR and Internet BGP - survey of user experiences

we have been using 2x CCR1036-12G-4S since early 6.x without much issue. the catch, daily reboot on the router in off-peak hours. first unit connected with 3 BGP sessions (2 full route, 1 local route ~80k), total throughput >300mbps second unit, 2 BGP sessions (1 full route, 1 local route ~10k), tot...
by sguox
Tue May 27, 2014 3:34 pm
Forum: General
Topic: TCP connections from china
Replies: 9
Views: 9046

Re: TCP connections from china

If your ip>DNS is enable, you should always drop external request on cto and ISP, open resolver attack is very common
by sguox
Tue May 27, 2014 1:54 pm
Forum: General
Topic: TCP connections from china
Replies: 9
Views: 9046

Re: TCP connections from china

Can you see what ports is the ip connected to?
by sguox
Mon May 19, 2014 4:20 am
Forum: Forwarding Protocols
Topic: BGP error
Replies: 4
Views: 2521

Re: BGP error

The other side is sending full bgp route~500k and receiving side just need ~20 prefixes
by sguox
Mon May 19, 2014 4:17 am
Forum: General
Topic: Stoping downloading by mikrotik router
Replies: 7
Views: 1877

Re: Stoping downloading by mikrotik router

You can block URL with l7 filter, eg, blocking all URL with .exe or .zip
by sguox
Fri May 16, 2014 7:45 am
Forum: Forwarding Protocols
Topic: BGP error
Replies: 4
Views: 2521

Re: BGP error

narrow down the problem to be filter issues, fixed by doing the filtering on the sending side instead of receiving, but still not sure what caused this.
by sguox
Thu May 15, 2014 1:11 pm
Forum: Forwarding Protocols
Topic: BGP error
Replies: 4
Views: 2521

BGP error

I am trying to setup a bgp session between two unit CCR1036-12G-4S running latest 6.12 ROS. The BGP is run over L2TP tunnel between the devices. It connects successfully and passing prefixes, however after about 1min, it will get disconnected with error "Malformed Attribute List".
by sguox
Mon Mar 17, 2014 11:29 am
Forum: General
Topic: DNS proxy issue
Replies: 9
Views: 6057

Re: DNS proxy issue

The default firewall is dropping any new connection from WAN (default WAN is ether1). Oh, are you saying perhaps that my connection to the fiber modem is off the wrong port maybe? Hmmm. IIUC my internet connection goes out upon ether1-gateway which looks the same as vlan1 . if you are on VLAN, the ...
by sguox
Mon Mar 17, 2014 11:03 am
Forum: General
Topic: DNS proxy issue
Replies: 9
Views: 6057

Re: DNS proxy issue

Ah... that makes sense. I need to firewall these ports ASAP. x220:~$ sudo nmap 121.7.219.77 Starting Nmap 6.40 ( http://nmap.org ) at 2014-03-17 16:54 SGT Nmap scan report for bb121-7-219-77.singnet.com.sg (121.7.219.77) Host is up (0.015s latency). Not shown: 996 closed ports PORT STATE SERVICE 22...
by sguox
Mon Nov 25, 2013 4:56 am
Forum: RouterBOARD hardware
Topic: CCR1036-12G-4S Fan
Replies: 6
Views: 3136

Re: CCR1036-12G-4S Fan

another thing is if i put 2-3 fingers (~1-2cm from the fan) blocking the air flow outside the casing, the fan seems can sense this and speed up.. *or is it just my imagination??*
by sguox
Fri Nov 22, 2013 6:05 pm
Forum: RouterBOARD hardware
Topic: CCR1036-12G-4S Fan
Replies: 6
Views: 3136

Re: CCR1036-12G-4S Fan

Screen Shot 2013-11-23 at 12.03.07 am.png
by sguox
Fri Nov 22, 2013 4:17 am
Forum: RouterBOARD hardware
Topic: CCR1036-12G-4S Fan
Replies: 6
Views: 3136

CCR1036-12G-4S Fan

i notice that my unit of the CCR, the main is louder than the aux, is this normal? Anybody has same issue?
by sguox
Sat Aug 31, 2013 11:40 am
Forum: General
Topic: How to power off/on a 802.3af device with Mikrotik RB?
Replies: 3
Views: 1653

Re: How to power off/on a 802.3af device with Mikrotik RB?

Sacrifice one of the led in your router, connect it to relay that control your camera power supply, routeros can control led which control relay
by sguox
Sat Aug 31, 2013 11:34 am
Forum: General
Topic: Remote Web page for MT HotSpot
Replies: 2
Views: 2446

Re: Remote Web page for MT HotSpot

You can take a look at customizing hotspot page in wiki.mikrotik.com, there is a redirection HTML you need to upload to your AP, it contains variables to passed to your remote login page.
by sguox
Mon Aug 19, 2013 1:13 pm
Forum: Forwarding Protocols
Topic: [CLOSE] L2TP/IPSec Server on RouterOS with Windows client
Replies: 4
Views: 2289

Re: [CLOSE] L2TP/IPSec Server on RouterOS with Windows clien

doh! stupid me.

found the problem, a mangle rule that force reply traffic into another table which l2tp is not in.

thanks for the help, btw, your presentation is awesome.
by sguox
Mon Aug 19, 2013 1:04 pm
Forum: Forwarding Protocols
Topic: [CLOSE] L2TP/IPSec Server on RouterOS with Windows client
Replies: 4
Views: 2289

Re: L2TP/IPSec Server on RouterOS with Windows client

sorry, forgot to mention the client is on dynamic IP hence we do not create any policy, instead it's generated through peers settings. strange thing is when we do trace route to internet, packets go through, however when we try to trace to LAN, it doesn't work, just stopped at the gateway. firewall ...
by sguox
Mon Aug 19, 2013 11:01 am
Forum: Forwarding Protocols
Topic: [CLOSE] L2TP/IPSec Server on RouterOS with Windows client
Replies: 4
Views: 2289

[CLOSE] L2TP/IPSec Server on RouterOS with Windows client

Hi All, We are trying to setup VPN access into our LAN. The subnet IP for VPN are different from our LAN subnet. VPN will have 10.10.10.0/24. LAN subnet is 192.168.188.0/24 and member of bridge (with proxy-arp). We have successfully connected to the mikrotik router and able to access internet via th...
by sguox
Fri Jul 12, 2013 10:12 am
Forum: Forwarding Protocols
Topic: cease: prefix limit reached
Replies: 1
Views: 4750

cease: prefix limit reached

anybody has experience that bgp session drop with message "cease: prefix limit reached" even thou there is no limit for prefix in the routing filter? Is there a default limit by routeros?
by sguox
Wed Jun 26, 2013 12:08 pm
Forum: Forwarding Protocols
Topic: IS-IS
Replies: 134
Views: 52500

Re: IS-IS

another reason for is-is is because it support both ipv4 and ipv6, so we only need to run 1 ibgp protocol, not two as in ospf
by sguox
Fri Jun 07, 2013 4:14 pm
Forum: RouterBOARD hardware
Topic: New Hardware! - EU MUM 2013
Replies: 54
Views: 24388

Re: New Hardware! - EU MUM 2013

arhhwwoooo, SFP+......*slurp...
by sguox
Thu Jun 06, 2013 4:08 am
Forum: General
Topic: Permanent IPv6
Replies: 1
Views: 1400

Permanent IPv6

Will MikroTik enable IPv6 permanently in next release of RouterOS instead of optional installation packages or disabled ?

http://www.worldipv6launch.org
http://www.worldipv6launch.org/participants/?q=3
by sguox
Fri May 17, 2013 1:50 pm
Forum: RouterBOARD hardware
Topic: CLOUD CORE ROUTER
Replies: 1373
Views: 1186448

Re: CLOUD CORE ROUTER

maybe a standardised rj45 console port same as the RB2011?
by sguox
Fri Feb 08, 2013 9:57 am
Forum: RouterBOARD hardware
Topic: Serial Console for RB2011
Replies: 2
Views: 11406

Re: Serial Console for RB2011

thanks w0lt, so it's not auto after all, it's 115200 :)
by sguox
Thu Feb 07, 2013 6:41 pm
Forum: RouterBOARD hardware
Topic: Serial Console for RB2011
Replies: 2
Views: 11406

Serial Console for RB2011

Any idea what's the correct settings using putty to connect to RB2011 serial port?

I notice the default baud rate configuration in the router is "auto". I changed it to 57600 and managed to connect to it only AFTER it boot up. When booting, it still showing garbage code.

Thanks
by sguox
Mon Apr 23, 2012 7:45 pm
Forum: General
Topic: RB750G + RB751G DHCP Problem
Replies: 4
Views: 1396

Re: RB750G + RB751G DHCP Problem

screenshot attached.
by sguox
Mon Apr 23, 2012 5:12 pm
Forum: General
Topic: RB750G + RB751G DHCP Problem
Replies: 4
Views: 1396

Re: RB750G + RB751G DHCP Problem

[admin@MikroTik] > /ip address print detail Flags: X - disabled, I - invalid, D - dynamic 0 ;;; default configuration address=192.168.88.1/24 network=192.168.88.0 interface=bridge-local actual-interface=bridge-local 1 D address=10.199.88.237/32 network=10.199.88.237 interface=ether1-gateway actual-i...
by sguox
Mon Apr 23, 2012 11:55 am
Forum: General
Topic: RB750G + RB751G DHCP Problem
Replies: 4
Views: 1396

RB750G + RB751G DHCP Problem

Hi All, I have RB750G running as DHCP server. There's no problem getting IP address using desktop/laptop. However when i connect a RB751G-2hnD to RB750G (RB751G running dhcp client), it can obtain IP address however the subnet mask is /0. Both device running ROS 5.14. Any body experiencing similar p...
by sguox
Wed Mar 21, 2012 3:43 pm
Forum: Wireless Networking
Topic: superchannel
Replies: 1
Views: 955

superchannel

does RB751U and RB751G support superchannel?

thanks
by sguox
Sun Mar 18, 2012 11:57 am
Forum: General
Topic: Hotspot Login External Page
Replies: 4
Views: 2080

Re: Hotspot Login External Page

when i am at the login page, i tried to view html source and able to see some strings generated for hexMD5 line, so i assume this mean that i am on chap ?
by sguox
Sun Mar 18, 2012 11:54 am
Forum: General
Topic: Hotspot Login External Page
Replies: 4
Views: 2080

Re: Hotspot Login External Page

the setup was configured using hotspot setup wizard, so all the settings are default. i checked the server profile, it has both http-chap and http-pap enabled.
by sguox
Sun Mar 18, 2012 3:55 am
Forum: General
Topic: Hotspot Login External Page
Replies: 4
Views: 2080

Hotspot Login External Page

Hi All, I am trying to setup an external login page by following instruction in http://wiki.mikrotik.com/wiki/HotSpot_external_login_page I have setup hotspot in routerboard using Hotspot Setup. The problem i encounter is if i insert correct path for md5.js in the login page, login will always fail....
by sguox
Fri Mar 09, 2012 6:42 pm
Forum: General
Topic: RB750GL Switch Rule
Replies: 1
Views: 1458

RB750GL Switch Rule

Hi All, Our ISP connection require VLAN and Priority. I understand that RB750GL support switch rule where we can modify the header to add priority. Port 4 is Master port and Port 5 is Slave. I have created a VLAN 100 and 200 under Ether4 interface. When i try to create switch rule involving "sw...