MikroTik

HumanDamned

Found a solution. Added this NAT rule to ports 80, 443-445 (Above the transparent proxy rule) and added a scheduler to enable the rule at night. add chain=dstnat action= accept dst-port= 80 protocol=tcp dst-address-type="" src-address-list = "to xxx" comment ="unredirected_cache-engine" disabled = n...

HumanDamned

Hi, Recently enabled web proxy on my mikrotik. Everything works great, I can block sites. But I have noticed that updates from Software Center are not downloaded (computers are connected to a domain (Active Directory)). When I disable web proxy and try to install updates from Software Center everyth...

HumanDamned

Hi, experiencing the same problem - http://forum.mikrotik.com/viewtopic.php ... 18#p568418
Have you managed to solve the problem? What speed do you have now after declaring vlans withthe "Switch Chip" ?

HumanDamned

My guess would be the speedtest.net server you are testing to might be closer than my btest server. Try a speedtest.net speedtest using Seattle and see if that looks near the same as my btest server. Also - are you btest ing using UDP or TCP? UDP should be faster. Oh, I see, it's in USA, then maybe...

HumanDamned

Subject: Public-Mikrotik-Bandwidth-Test-Server Here are the details for my server: - x86 ROS hosted on VMware ESXi server (with 10-gig connection to the Internet) - Burstable to 250 Meg up/down - Sustained traffic is limited to 100 Meg up/down (after about 30 to 60 seconds) - Your maximum connectio...

HumanDamned

Ok, I understood, thanks for the advice. Conclusion - 1. try changing the queue type from hardware to ethernet-default, as it was mentioned here- http://forum.mikrotik.com/viewtopic.php?t=85339 2. For CRS125 50-200Mbps (depends on your routing rules) is a normal speed for routing between different s...

HumanDamned

From the info presented I'm under impression that CRS125 is not involved in routing and only acts as a switch. It looks like (cisco ?) 10.254.43.1 acts as a router. Is that correct? Can't tell anything about the upstream hardware, because I cannot manage cisco-10.254.43.1. I hope to use CRS125 for ...

HumanDamned

Here are my NAT rules

/ip firewall nat
add action=redirect chain=dstnat comment="transparent proxy" dst-port=80 protocol=tcp to-ports=8080
add action=masquerade chain=srcnat out-interface=LAN to-addresses=0.0.0.0

HumanDamned

If I'm right your routes are fine, otherwise in the first example packets wouldn't know how to come back to you. If this is the case you would have to check if there are no blocking rules on the router. Thank you for your reply, Thats correct, the opposite direction, from 10.254.43.37 to 192.168.20...

HumanDamned

run Traceroute diagnostic and here is the result: from vlan3 tracert 10.254.43.37 Tracing route to 10.254.43.37 over a maximum of 30 hops 1 <1 ms <1 ms <1 ms 192.168.203.1 2 <1 ms <1 ms <1 ms 10.254.43.37 from lan tracert 192.168.203.254 Tracing route to 192.168.203.254 over a maximum of 30 1 4 ms <...

HumanDamned

Thank you for your reply kamillo, you are right. I have made some more tests and here are the results PC (vlan 3) --> CRS125 --> PC (vlan3) = 500-900Mbps PC (lan) --> CRS125 --> PC (lan) = 500-900Mbps PC (vlan 3) --> CRS125 --> PC (lan) = 10-20Mbps, speedtest.net from vlan 3 shows around 50 Mbps PC ...

HumanDamned

Hi, I’m using CRS125-24G 6.37.1. Mikrotik is configured as switch. Eth1 - master port. Using /24 subnet from ISP as main LAN (10.254.43.0/24). I have also added several VLANs in my config. ether2 and endpoint computers on the subnet (for example on VLAN2) have connection speed - 1Gb. BTest gives me ...

HumanDamned

Hi everyone, I have an update about my problem. I have tried to disable the the egress-vlan-tag rules and now the Routerboard works more stable. Lost ping requests dropped to 2% and CPU usage also decreased. Who can comment that? /interface ethernet switch egress-vlan-tag add disabled=yes tagged-por...

HumanDamned

is better to configure CRS switch via winbox, i had problems with terminal configuration

Thanks for the suggestion, I'm using only winbox

By the way...when I have these VLAN connection problems winbox also disconnects and for 5-10 sec routerbord i not accessible =( whan cound be the problem?

HumanDamned

No, there is no upstream router that I can manage.

HumanDamned

I think you've got every part of this right EXCEPT for using egress-vlan-tag. Unless your endpoints are tagging packets (uncommon when dealing with PC endpoints), you want to use ingress-vlan-translation. Thanks for the reply and sorry for the schematic image. The endpoint devices are using untagge...

HumanDamned

Hi everyone, I'm trying to setup some VLAN networks on the CRS125 routerboard. Routerboard generates all the vlan networks, there are no VLANs on the upstream. I have created several VLANs on the master port and added the tags. Everything seems to work, but when many devices (ex. 30 laptops and cell...

HumanDamned

Update: forgot to add the dafault gateway on the EdgeSwitch "System > Connectivity > IPv4" page.
Every field should be filled.
Problem resolved

HumanDamned

Hi, Revelation Thank you for your reply. EdgeSwitch was on the default management IP - 192.168.1.2 The Mikrotik default network is 192.168.88.0/24. I have changed the management IP to 192.168.88.2 and now the ping to Mikrotik (192.168.88.1) is working, however when I try to ping something outside th...

HumanDamned

UPD: made some more pinging. Devices which are behind endgeswitch can ping mikrotik, but directly from EdgeSwitch it is unreachable...strange

1. mikrotik <<-- endgeswitch <<-- PC or other device can ping mikrotik
2. mikrotik <<-- endgeswitch can't ping mikrotik

HumanDamned

Hi everyone, I have Mikrotik CRS125 working as the main router and EdgeSwitch working as switch behind mikrotik. The first time I plugged the upsteam cable into 0/1 port of the EdgeSwitch I have managed to kill the network in the whole building. The problem was the STP protocol, so I turned it off o...

HumanDamned

Thank you, I will try VPN then...

HumanDamned

Hi everyone, I have Web-proxy enabled on my mikrotik. Web proxy is transparent and is not an open proxy. However I would like to open my proxy for my friend who lives in another country and has many websites blocked by ISP. Is it possible to open proxy for incoming WAN connections from specific IP t...

HumanDamned

This is what I would like to do.... the problem is the blue line. Is it possible?

Dhcp-relay-3.jpg

HumanDamned

I would also like to add VLANs to the STUDENTS interface and forward them to other switches and AP's (restrict traffic with firewall), but do not know if it's possible. Mikrotik really lacks of examples and documentation.

My theoretical config is similar to this:

current-rb750g-setup.png

HumanDamned

Hi, I'm trying to forward the dhcp that I receive from main server to other switches and AP which are connected to mikrotik. main DHCP server---> Mikrotik WAN 10.254.43.2/24 --> forward to interface STUDENTS this pool (10.254.43.0/24) from main server [root@MikroTik] > /ip address print # ADDRESS NE...

HumanDamned

Got a reply from official support: xx.yy.zz.0/24 is the network address. xx.yy.zz.255 is the broadcast address of this network. Usable range for IP addresses is from 1 to 254 This is for /24 networks, or 255.255.255.0 netmask. So it is appropriate that other network devices refuse to communicate wit...

HumanDamned

Hi everyone! There are so many topics with relay problems and so few answers =( Maybe someone will help me with this one... I have set the DHCP relay on my mikrotik (10.254.43.2). The DHCP server is on Windows machine (10.254.255.16) and not administrated by me. Windows server serves many subnets, m...

HumanDamned

The problem is almost a year old and no one has found the solution...too bad

HumanDamned

Same problem with my HTC sensation and RB751

HumanDamned

I've send my RB to RMA...so I changed it to RB751G. My problem was described as: "reboots on heavy traffic load after a while".
The reason for such behaviour is unknown.

HumanDamned

Updated to Version 5.21 and still have the same problem =(
Please help!

HumanDamned

Got a reply from mikrotik support:

Kernel crashes on the router. When it happens you need to power cycle it to get it
in working order. We will see what we can do to fix this problem.

HumanDamned

The Log shows me - system,error,critical router was rebooted without proper shutdown. I'm using v5.20 # NAME VERSION SCHEDULED 0 routeros-mipsbe 5.20 1 X ipv6 5.20 2 mpls 5.20 3 system 5.20 4 wireless 5.20 5 routerboard 5.20 6 security 5.20 7 advanced-tools 5.20 8 hotspot 5.20 9 ppp 5.20 10 routing ...

HumanDamned

+1 RB751U-2HnD crashing when using uTorrent 3.2 I have 1PC and 1 server with uTorrent installed... by default they are working good, but when I try to upload something from PC to Server Mikrotik crushes...then the LAN connection on both machines is lost....upload process stops. After few seconds mik...

HumanDamned

I finally found the solution ...one mikrotik guru told me to try this: /ip firewall nat add action=masquerade chain=srcnat disabled=no out-interface=!bridge-local src-address=10.5.28.0/24 - for LAN1 add action=masquerade chain=srcnat disabled=no out-interface=!ether5-slave-local src-address=192.168...

HumanDamned

Here is routing ospf. All the setting should be by default because it's a brand new rb751-2hnd /routing ospf> export # jun/20/2012 14:11:30 by RouterOS 5.6 # software id = SJFD-6X9Z # /routing ospf instance set default disabled=no distribute-default=never in-filter=ospf-in metric-bgp=\ auto metric-c...

HumanDamned

Here it is :) /routing rip> export # jun/20/2012 13:40:09 by RouterOS 5.6 # software id = SJFD-6X9Z # /routing rip set distribute-default=never garbage-timer=2m metric-bgp=1 metric-connected=1 \ metric-default=1 metric-ospf=1 metric-static=1 redistribute-bgp=no \ redistribute-connected=no redistribu...

HumanDamned

Thanx for reply coffeecoco, but how can I change or remove it, if the entry in Route List was added automatically?
In "DAC" items I cannot change anything...

HumanDamned

751_communication_problem.jpg LAN1: bridge-local (wan+lan1) with dhcp server and pool LAN2: Ethernet-port with dhcp server and pool Both LANs have internet access. The problem is that I cannot ping devises from different networks (networks cannot communicate)… I can only ping the gateways. From 10....

Search found 40 matches