MikroTik

friction

Thanks both of you, in that case I’ll wait it out for a bit, and if my patience runs out I’ll order the ltap to experiment with…

friction

Dear MikroTik and friends, I was about to order an RBM33G for building a proof-of-concept dual-WWAN gateway, but I notice they're unavailable at most (if not all?) sellers in EU... Is this a temporary issue with the supply chain or should be expect a replacement in the coming months? If a replacemen...

friction

I know this is kind of a stale thread, but did you manage to figure it out?
Was it the device, is it a limitation, firmware upgrade...

friction

friction

you can use Suricata right now without waiting http://robert.penz.name/849/howto-setup-a-mikrotik-routeros-with-suricata-as-ids/ I use it with Kibana, Elasticsearch and logstash. Take the sniffer tool and make remote logging to your suricata box. Agreed that that is a possible solution, but I actua...

friction

Implementing RFC3021 is long overdue.

I for one simply do not use the Mikrotik /32 method because IP designs should avoid depending on proprietary features when a perfectly good RFC is available, suitable and supported by multiple vendors.

+1

friction

Ok, I get that Mikrotik is focusing on making routers. But with suricata support for the Tilera architecture, Mikrotik could be exploiting this now to create an IPS. I am sure it will generate extra revenue, people buying this not because it is a router, but because it becomes a capable IPS. What is...

friction

+1 for suricata on Mikrotik CCR (and x86 I suppose)

If you can bind that into firewall policies... "action=inspect" etc...
That would be totally fine

friction

Nice product for the price! Now I am curious what is coming next! I like this hAP line already

A gigabit PoE-in version would even be better, as others suggested already.
On to a hAP with .ac

friction

I can see the usefulness of allowing this on additional, if not all, ports.
+1!

friction

It should keep Ethernet/physical port naming conventions; If I run the export command, the configuration of a given physical port looks like the following: set [ find default-name=ether4 ] name=ether04 This should ensure that when transferring the configuration the port naming should remain the same...

friction

What about working with an alias like system? think symlink(hardlink) of the linux system... But that would turn into a mess as well probably.. but it would be up to the user(administrator). Be aware there is a field "default-name", which, to my knowledge, can't be changed and holds the or...

friction

I think you have a better chance of help if you post your questions in English.
I tried to figure it out using Google Translate, but I don't think I understood the question.

friction

My opinion is that we will never see such features in ROS. There are much more simple problems and features asked for years never done. There is no reason to ask for these. On the other hand, releasing an affordable platform for IPS/IDS functionality (with suricata perhaps) would be a very nice opp...

friction

+1 vote

friction

Well at a first glance it looks very very promising... but I'll need to test it out first in order to form a proper opinion

friction

+1 for HA (msrp - mikrotik standby router protocol?)

friction

Maybe they`ll add this in a later release?
They did for a lot of other tools...

I see where this can be handy... Most utilities should support this.

friction

In general, it would be nice that more events get an on-event hook for launching scripts...

+1 for dhcp-client on lease script.

friction

so... If Metarouter can run some virtual router with OSPF we should ditch the OSPF feature in Mikrotik as well?
Metarouter is not the solution.

+1 for LZO and UDP in ROS.

friction

Your assumptions are correct :) They should autodiscover, as RIP uses broadcast by default, so no need to define each other as 'neighbors'. You only need to add the networks you want to route for on both routers. On the mikrotik you will need to add your default LAN network (192.168.0.0) and your ot...

friction

When you use NAT to connect to a host in the same network as the 192.168.0.26 interface, your connection appears to be originating from 192.168.0.26, so devices know how to reach your mikrotik. (because they are in the same network) If you turn NAT off, and you are trying to reach 192.168.0.10 for e...

friction

The client config of the linux client is as follows: client dev tap proto tcp remote us1.vpn.comodo.com 443 remote us2.vpn.comodo.com 443 remote uk1.vpn.comodo.com 443 remote-random auth-user-pass resolv-retry infinite nobind persist-key persist-tun pull remap-usr1 SIGTERM ca ca.crt ns-cert-type ser...

friction

Your VPN clients need to know how to reach your network (192.168.0.0 255.255.255.0 I presume). On a linux (or windows) ovpn server, you push routes to your clients. This is not possible on a mikrotik, so you will have to add a route towards your VPN gateway yourself on your client machine. Another w...

friction

1:1 NAT seems to be the easiest. You can add each IP address you own on the router's WAN interface and add specific NAT rules. You could still use vlans however, if you're a bit adventurous. I know the switch has no configuration options, but that is not a dealbreaker per se . If'm not mistaken, a d...

friction

I did it like this, you can do it without dst-address:

add action=dst-nat chain=dstnat dst-port=2161 in-interface=\
    br-WAN protocol=udp src-address-list=NXXS-mgmt to-ports=\
    161

br-WAN is the gateway interface... I used an address list for source, security-wise.

friction

I see in 6.3 you added this for pptp, l2tp and sstp, and now in 6.4 for ovpn as well. Thanks!

friction

EDIT: This post might not be related at all, as cimMT pointed out below. I can confirm similar issues. I have an RB2011 and an RB751G with vlan trunking between them. I have not investigated more closely, but the RB2011 with 6.x used to crash every 20-40 minutes with the same log entry: "router...

friction

Anyone else experiencing this on a RB2011UAS-2HnD or similar? It keeps crashing continuously since last firmware upgrade towards ROS 6.2 (two days ago): (28 messages not shown) aug/09/2013 15:54:39 system,error,critical router was rebooted without proper shutdown by watchdog timer aug/09/2013 16:39:...

friction

Darn, you're right, it was not the final 6.2... Works perfectly now. +1 to you sir. (hours lost...)

Works for me. Are you running final build (not pre-release)? Because this problem was fixed in one of the last builds

friction

I can confirm global variables are somewhat broken, even with all policies assigned: Scripts: 2 name="add-global" owner="admin" policy=ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api last-started=aug/07/2013 15:07:38 run-count=1 source= :global arandomglobal...

friction

+1 for GPS sync

friction

Currently it is not planned. Those 3 settings are available only for AR8316 switch-chip.

Thank you for your clear answer!

friction

But is is planned? If I'm correct, right now, it is only available on older routerboards, which are not even produced anymore.

friction

I've tried the 6.2 linked above, and on my RB2011UAS-2HnD the chip is showing as an Atheros 8327. It was displayed correctly as well in version 6.1.
The vlan rule gives the same error though.

friction

Bump

As many other things I would really like to see this happen, seems not so hard to implement.

friction

Would it be possible to add domain name resolution to certain tools and services? like ping and OpenVPN Clients? Right now I need to specify an IP address, but it would be more dynamic if you just could specify a domain name like "vpn.yourdomain.net" and let your dns-servers resolve the IP...

friction

Does anyone get long pauses on the CCR? Almost like it's timing out? We've noticed we get this outage for about 5 seconds. If you are trying to login to the router at that time, the login hangs as well. Had this on all versions so far. I've got no CCR to compare this and I think I haven't got this ...

friction

Are there any plans to fully support all vlan features in the Ar 8327 and Ar8227? like in the Atheros 8316? This would make the RB2011, RB751GL/G-2HnD and 951G-2HnD a little bit more complete, and more performing... the RB2011 would be a nice L3 bridge/switch http://wiki.mikrotik.com/wiki/Manual:Swi...

friction

Sometimes you don't have access to hosts on a remote network, but you do have access to the router. MTR Can be implemented as a replacement for traceroute, to reduce the 'bloatware-effect'

+1 for MTR

friction

Thank for bringing up a thread more than a year old. What about automatically locking topic after let say 6 months of inactivity? not all topics get irrelevant after 6 months For me this topic will never become irrelevant as long it is not implemented. There is simply no alternative as flexible as ...

friction

I also wonder why this hasn't been implemented yet... To me it seems like it needs to be recompiled with more options and add a mapping between the Ros functions/commandline/api and the OpenVPN Configuration... It may be it is more difficult than this, but please, provide us with an exact reason Why...

friction

I would also like to see a real reason why OpenVPN's UDP feature has not yet been implemented in rOS...
One of the advantages of the UDP-version is that it creates less overhead for both the connection and the router...
Running a metarouter only to get the UDP version seems kinda ridiculous.

Search found 43 matches