MikroTik

ediaz

Hi,

Just a small feature request: allow netwatch command to specify src-address. That way I will be able monitor if my loopback address is routable from the rest of network, and restart the ospf instance if needed.

Best regards.

ediaz

Hi, I've got a customer with a firewall behind the router (RB2011 with 6.37.1). The router gets its IP address using a PPPoE session that restarts every 24hours. I've configured a DNAT for all the public IP address connections to go to the firewall. Nothing special. The firewall makes a ping to 8.8....

ediaz

Same problem here in Spain with Vodafone.

ediaz

Nope. Double checked it.

ediaz

OK. Tests done. I still get 100 Mbps from a single PC (note that it is a single PC, not a single connection). The PC is connected directly to a 1Gbps port in the RB2011, to avoid noise from switches and stuff.

ediaz

Thanks very much for the suggestions. I double checked the port status, autonegotiation and all that stuff and they are OK. 1Gbps full duplex, no errors... everything looks fine.

I've just added fasttrack to the config. Once I get it tested I'll come back with the answer.

ediaz

Hi, My provider has increased our bandwidth to 200/20, which is great! I've upgraded our router to a RB2011UiAS, and connected everything using the gigabit ports. To my surprise, when trying to launch speedtests from the internal PCs to the Internet, a single PC can only use up to 100 Mbps of the av...

ediaz

It is already marked the "interfaces=all" option.

Do I need to explicitly mention all the interfaces by their names?

ediaz

Hi, The Sierra MC8705 is a 3G modem and GPS. I've conected it to a RB411 and I can connect to the intenert without problems. Great! Now I would want to get some GPS data from the card. Sierra manual says that GPS information can be obtained using some AT commands, but I am unable to connect to the m...

ediaz

Hi, I'm testing a netflow analysis service that requires me to send netflow information to an IP. I've configured: /ip traffic-flow set enabled=yes /ip traffic-flow target add address=server:port version=9 Basic analysis works without problems. Now I want to improve information filtering selecting t...

ediaz

This is embarrasingly true!!

Thanks very much. You made my day!

ediaz

Hi all, I've got this harware for a mobile hotpot. Sierra MC8705 is supported by Mikrotik and I expected no problems, but I am unable to make it work. Card is recognized OK, and it see it in /ports and /system resources. The LTE interface goes up and shows a nice AT command dialog. 20:23:18 async,de...

ediaz

OK. Thanks for all the answers. I'll look for another backup power source

ediaz

BTW, I can see the UPS (Riello IDR1200) connected to the usb port using the /system resource usb command [admin@MikroTik] /system resource usb> print # DEVICE VENDOR NAME SPEED 0 1:1 Linux 3.3.5 ehci_hcd RB400 EHCI 480 Mbps 1 1:2 Cypress Semiconductor USB to Serial 1.5 Mbps [admin@MikroTik] /system ...

ediaz

Hi, I'm trying to setup UPS monitoring in an RB750UP. It has had its firmare updated, and the package UPS.npk is installed. I am using version 6.23. The USB port is not appearing : [admin@MikroTik] /port> print Flags: I - inactive # DEVICE NAME CHANNELS USED-BY BAUD-RATE [admin@MikroTik] /port> Any ...

ediaz

Hi, I am facing a problem that I can't diagnose on my own. I've been trying things during a month now, witout any success. This issue was called into our attention by a customer oversas. They had a big trouble to send email to our server, which worked perfectly ok in this side of the ocean. My first...

ediaz

Hi, I've been researching GEPON solutions and would want to know if there is someone with this working on Mikrotik hardware. I've seen several threads (some from 2012) with this question. The conclusion of those was that a special SFP that implemented GEPON was needed, but there was little more info...

ediaz

Hi, I am planing to put an omnitik with a GPS on my car, to record signal coverage from my towers while I am driving. As mikrotik supports to check the GPS coordinates natively, I would want to make a script that, as long as the unit is powered, records latitude, longitude and signal strength every ...

ediaz

Thanks very much for your help!! This is the server config: -------------------------------- /ppp profile add dns-server=172.20.21.16 local-address=172.20.21.3 name=\ pool_172.20.20_encrip1_compress remote-address=IPs-vpn use-compression=yes \ use-encryption=required wins-server=172.20.21.16 set 2 u...

ediaz

Hi, I've got a router working tirelessly in a branch offcie. Nothing special. It uses pptp to connect to HQ. The problem appears when I unplug de router and plug it on again. Everything loads ok except the pptp tunnel, that keeps saying that the tunnel cant be stablished. I've tried everything, and ...

ediaz

Hi!

I've just noticed the new CRS devices and just love to see new options for switching. I've got a request: could you make a CRS edition with two SFPs? That way we would be able to use them in fiber rings .

ediaz

Hi,

I rely in this two options of OpenVPN for old setups, and changing all the remote hosts to not use lzo and udp is a real pain. Can you implemnt this two features in the openvpn server/client?

Regards

ediaz

A smart guy here at the office did a fuzzy and dirty trick that just works: echo -e '\003' > tmpfile he the did cut&paste from that file to the web browser (opera). The filter rule now shows: 0 chain=forward action=drop protocol=udp dst-port=53 content=\03isc\03org where the "\03" show...

ediaz

Hi, I want to block DNS requests for "isc.org" domain, which are being abused for a DDoS attack. I've created a filter rule: /ip firewall filter add action=drop chain=forward content="isc\03org" disabled=no dst-port=\ 53 protocol=udp But it does not work. If I create a similar ru...

ediaz

Hi, We run several servers for customers, and some of them were open resolvers used for a DNS amplification DoS attack. We have solved the servers configuration, but would want to take aditional measures to ensure that this does not happen again. Does anybody have a script or filter rule to drop DNS...

ediaz

Hi, I've got a ptp link (sextant G both sides, 7km, clear LoS) facing low CCQ and performance issues. I would want to have another pair of eyeballs to review the link (I've got teamviewer access to the network and a PC with winbox installed). Please PM me ASAP if you want to help and I'll send more ...

ediaz

Hi, Following the EEC(06)04 recommendations, spanish gov opened yesterday the 5725-5795 and 5815-5855 bands. It has been published in the "Ministerio de Industria" website (local regulator for spectrum). It is great news, as we have up to 36dBm EIRP to use in PtP configurations. We can now...

ediaz

Something like: > /interface bridge port print Flags: X - disabled, I - inactive, D - dynamic # INTERFACE BRIDGE PRIORITY PATH-COST HORIZON 0 ether1 br_local 0x80 10 none 1 I ether2-test br_local 0x80 10 none 2 ether3 bg_gest 0x80 10 none 3 I ether4 bg_gest > /interface print Flags: D - dynamic, X -...

ediaz

I've teste two cases: * case 1: does not work: br_mgmt bridges eth3 adn eth4 (no vlan here), ip address 192.168.88.1/24 br_hs bridges vlan101_eth3 and vlan101_eth4, ip address 192.168.251.1/24 started two dhcp servers, one in each bridge. The dhcp server in br_hs does not work. * case 2: works: eth3...

ediaz

Hi, Short story first: If i define a bridge of 2 ports with no vlan and another bridge of those 2 ports with a vlan, I can't get DHCP to work using those two bridges. Breaking the bridge with no vlan makes the dhcp service come back again in the vlan bridge. Explanation: I've got a setup with ubnt's...

ediaz

Found that the issue is related to UBNT's Airmax. More people is complaining in the forum.

http://community.ubnt.com/t5/airOS-Soft ... lse/page/6

ediaz

Any comment on the best suited tunnel protocol will be welcome!

ediaz

Hi, I've got two RB750 to stablish a GRE tunnel and have VoIP traffic between two sites. All the path is controlled by me, having three wifi links between the routers. Everything mostly works, but I find that GRE tunnel is introducing a lot of jitter in the traffic, which is bad for VoIP. I made a s...

ediaz

You were right! There was a route problem.

Is there any way to "push" routes using PPTP? I use to configure Openvpn in Linux with the push route option and it worked very well, but PPTP is a pain in the *ss.

ediaz

Hi, I've got a mikrotik router that was currently being used for pptp access to an office. This worked perfectly. Last week we stablised an IPSec site-to-site connection to a provider, which worked. We can connect from the office to the remote site without a flaw. The problem arises when we try to g...

ediaz

Tab is already upwords on the SEXTANT G. It was the other way around on SEXTANT (non G) I guess it depends on your definition of upwards... :) I think it would be easier to handle if it was in the other way (I enclose a picture to make it clear). The SEXTANT-G is very compact, in any case, and ther...

ediaz

Newer production batch will have glue around the connector, for added strenght. Depending on the cable, if you can't bend it enough, I recommend drilling an exit hole in front of the connector, this way, cable will not be required to bend. We are working on improved design for this product. Good to...

ediaz

Hi, Is it just me or is someone else having problems with the ethernet port of the sextant? There is very little space for the rj45 jack, the cable gets very tight and comes to break the rj45 plug. This kind of devices should be resilient to some rough handling, as maintenance is usually done in a c...

ediaz

mac-telnet saved my day! thanks a lot!

ediaz

you can access via mac-telnet and remove the rule

M.

Is mac-telnet enabled by default?

ediaz

Hi, I've typed a bad command and now am unable to connect to my mikrotik router. add action=drop chain=input place-before=1 I hit enter before typing the src-address to block. You know, sometimes shit happens. How can I recover from this situation without reseting the router to factory defaults and ...

ediaz

So that is for the hotspot side... what about the AP? I've got a project to provide wifi to a soccer stadium. Such big growds are a challenge for wifi equipment, and most consultants refer to other brands (r**k*s, for example). I would rather go with mikrotik if it was possible at all. Any clues on ...

ediaz

Hi, I'm trying to get connections to server in the DMZ load balanced using mikrotik. I currently use haproxy for this task, dsn-natting from the mikrotik. This has one big disadvantage: the final server receives internal IP addresses as source, which makes it harder to process logfiles. OTOH, haprox...

ediaz

Hi! I'm setting a hotspot service as shown in the picture. My mikrotik router is behind a satellite connection, with nat and ports forwarded. mikrotik makes authentication and acounting using a radius server on Internet. I've got the system to work (recognizes users and passwords, sets download limi...

ediaz

How can I apply this to a PPTP or OpenVPN vpn?

ediaz

Hi, I'm trying to create a simple VPN for road warriors using Windows and Linux. PPTP and OpenVPN should work, but none of this implementations allow me to publish extra routes from the VPN server (as I can with a Linux OpenVPN server), and I don't want to force the default route through the VPN. Wh...

ediaz

Got it! The MAC address was the key. We have a fixed IP address and the provider messed the configuration when changing the cablemodem. It was working with all the MACs except our own's :D I changed the MAC address (substituted the last digit) and I got a dynamic IP. Thanks very much for your kind h...

ediaz

# jan/02/1970 01:06:38 by RouterOS 5.21 # software id = PWE8-V4YI # /interface ethernet set 0 name=ether1-gateway set 1 name=ether2-master-local set 2 master-port=ether2-master-local name=ether3-slave-local set 3 master-port=ether2-master-local name=ether4-slave-local set 4 master-port=ether2-master...

ediaz

That was my first impression. I used a second laptop to be sure that it wasn't a MAC issue, and the second laptop worked without a flaw. I power cicle the modem after I change the device connected to it, to make it flush the arp cache.

ediaz

Hi, Our ISP upgraded our cablemodem to a Cisco DPC3000 to support higher internet speed. I replaced our old modem with the new one and now I get no DHCP leases in my mikrotik rb750gl. If I connect a laptop and configure the ethernet por for DHCP, it works without a flaw. However, the mikrotik router...

ediaz

Hi, I've running my setup with an RB1100Ahx2 for some time now. Network performance has improved, but I think it still has place for improvement. /tool profile shows [admin@datacenter] > /tool profile NAME CPU USAGE snmp all 0% ethernet all 3.7% console all 0% firewall all 10.7% winbox all 0.2% mana...

ediaz

This is a temporal AP install in a garden

ediaz

Hi, I've successfully created a VPLS network to join several LANs between three different locations. Following the instructions of the WIKI, I've created the VPLS links and added them to a bridge to one physical interface in each location. This works. :D Now I want to add a user that connects via WI...

ediaz

would you please put a screen shot of your tools/profile in your pick time, i bought a 1200 today but i afraid to put it in action , my config is 30 Vlan in first 5 interfaces , Queueing - 1000 Full firewalling rules , NAT , PPTP , two IP sec tunnel , multihome BGP 3 neighbors and i think i have 20...

ediaz

Hi,

Does anybody know about online training on Mikrotik RouterOS?

ediaz

+1

It would help to get configurations more readable.

ediaz

Hi, I don't know if it was a coincidence, the effect of a reboot or the firmware upgrade. I've upgraded to 5.16 and after the reboot the load is much lighter (20-30%, with peaks going up to 60%). The output of /tool profile shows (right now is our valley hour, but load is significantly lower than ye...

ediaz

Hi, [admin@datacenter] > /tool profile duration=10 freeze-frame-interval=1 ; NAME USAGE ppp 0% www 0.5% ethernet 0.5% console 0.5% ssh 0.5% firewall 9.5% winbox 0% management 1.5% idle 12% profiling 0.5% queuing 2% routing 0% bridging 0% unclassified 72.5% :D Quite curious: "unclassified" :D

ediaz

Hi, I've got a RB1200 router showing load from 60 to 100%. IT manages a fairly big amount of traffic (35 Mbps on average, 25kpps average, with peaks of 70 Mbps and 40kpps) but nothing over the specs. There are a couple of singular things in this router: - it manages several VLANs in one interface - ...

Search found 59 matches