Community discussions

MikroTik App

Search found 456 matches

  • 1
  • 2
by ingdaka
Sun Oct 08, 2023 1:53 pm
Forum: General
Topic: MTU Optimazation in Mikrotik
Replies: 3
Views: 806

Re: MTU Optimazation in Mikrotik

You cannot set MTU on EoIP interface! So I will suggest you to go on ROS V7 and user VxLAN tunnel. And make 2nd CCR1036 as BRAS and use L3 to send traffic to 1st CCR
by ingdaka
Sun Oct 08, 2023 1:46 pm
Forum: Beginner Basics
Topic: link sfp1 dosent work on BR670iGS
Replies: 1
Views: 745

Re: link sfp1 dosent work on BR670iGS

1st of all you have to check status on sfp port and sfp tab for information if port is up or not!

If port is up and you have set vlan on bridge you should check vlan method because sfp is not in same switch chip with ethernet ports!
by ingdaka
Sun Oct 08, 2023 1:16 pm
Forum: General
Topic: site-to-site azure-mikrotik
Replies: 8
Views: 1234

Re: site-to-site azure-mikrotik

Just make that Huawei bridge and set public IP to Mikrotik!
by ingdaka
Mon Oct 02, 2023 12:43 am
Forum: General
Topic: Monitoring and Trafficflow
Replies: 9
Views: 1195

Re: Monitoring and Trafficflow

If you don't care about details but just traffic, observium!
by ingdaka
Sat Sep 30, 2023 7:06 pm
Forum: General
Topic: Mikrotik SUCKS
Replies: 82
Views: 12303

Re: Mikrotik SUCKS

An Professional don't talk like that! Look at you how pro you are when you say one time L900 one L9000, when real device is a L009. You just have heard Mikrotik name for 1st time. As per training Mikrotik allow remote testing through MTCOPS, but this one does not allow you to cheat, that's is proble...
by ingdaka
Sat Sep 30, 2023 6:36 pm
Forum: Virtualization
Topic: Change version 7 to 6 in Mikrotik
Replies: 2
Views: 1647

Re: Change version 7 to 6 in Mikrotik

Yes just download .npk package from mikrotik.com
Use winbox to upload it to Mikrotik VPS instance.
GO to System > Package and then click Downgrade

Maybe you will have any small changes in config, if yes just open from console that cloud provider offer and fix them!
by ingdaka
Sun Apr 23, 2023 1:47 am
Forum: Beginner Basics
Topic: Will i loose my l6 license if i upgrade from 5.16 to 6.xx
Replies: 7
Views: 649

Re: Will i loose my l6 license if i upgrade from 5.16 to 6.xx

Will i loose my l6 license if i upgrade from 5.16 to 6.xx and/or is there a specific max version i can upgrade to whilst keeping my license in place. its x86 only software/board. Depends how you have got it. If you did paid for it on Mikrotik official, you will not loose it. If you have used those ...
by ingdaka
Sun Mar 26, 2023 9:27 am
Forum: General
Topic: MLAG + VRRP + eBGP + iBGP
Replies: 5
Views: 927

Re: MLAG + VRRP + eBGP + iBGP

+1 to Amm0 solution as CRS will not have enough processing power to handle routing protocols. With 1 change of connection between CRS, why MLAG and not just LAG.
by ingdaka
Sat Dec 31, 2022 3:41 pm
Forum: General
Topic: ISP
Replies: 34
Views: 2552

Re: ISP & SPEEDTEST

You can set DST port 8080 but this will work only with speedtest.net, all servers or OOKLA use port 8080.
by ingdaka
Fri Dec 09, 2022 10:22 am
Forum: The Dude
Topic: The Dude and multi vendor devices
Replies: 6
Views: 2773

Re: The Dude and multi vendor devices

Hello! I will suggest Observium or LibreNMS, with an integration with PHP-Weathermap.
Sample of MAP
Image
by ingdaka
Thu Dec 08, 2022 9:54 pm
Forum: RouterOS beta
Topic: BGP problem after updating from V6.49 to 7.6
Replies: 10
Views: 3346

Re: BGP problem after updating from V6.49 to 7.6

If you get 0.0.0.0/0 from providers you should accept 0.0.0.0/0 on filters!
by ingdaka
Thu Dec 08, 2022 1:01 pm
Forum: RouterOS beta
Topic: BGP problem after updating from V6.49 to 7.6
Replies: 10
Views: 3346

Re: BGP problem after updating from V6.49 to 7.6

Here are my examples of BGP and Filters that Works: ISP -> My-EDGE-Router -> My-Core-Router Filters /routing filter rule add chain=eBGP-IN disabled=no rule="if (dst == A.A.A.0/24) { reject; }" add chain=eBGP-IN disabled=no rule="if (dst == B.B.B.0/24) { reject; }" add chain=eBGP-...
by ingdaka
Thu Nov 24, 2022 6:59 pm
Forum: General
Topic: RB850Gx2 upgrade to 7.6 failed
Replies: 9
Views: 1101

Re: RB850Gx2 upgrade to 7.6 failed

For now you can download manually package and drag/drop it do winbox now package is called PPC before it was PowerPC
https://download.mikrotik.com/routeros/ ... .6-ppc.npk
by ingdaka
Thu Nov 24, 2022 6:50 pm
Forum: Beginner Basics
Topic: Forwarding to WireGuard
Replies: 2
Views: 404

Re: Forwarding to WireGuard

You have to specify routing table before at Routing > Tables the you can use it on IP > Routes and IP > Firewall > Mangle
by ingdaka
Thu Nov 24, 2022 6:42 pm
Forum: Beginner Basics
Topic: Can't access the internal network with SSTP VPN road-warrior connection
Replies: 8
Views: 2038

Re: Can't access the internal network with SSTP VPN road-warrior connection

Try to change ARP to proxy-arp to LAN interface (if you have a bridge for LAN ports change it on Bridge interface)
Image
by ingdaka
Thu Oct 13, 2022 1:14 am
Forum: General
Topic: 7.4.x and 7.5 SIP issue
Replies: 17
Views: 3638

Re: 7.4.x and 7.5 SIP issue

CCR2004-16G-2S+ Ros7.5
About 70 PPPoE Users and all using VoIP, all of them looks OK since 13 days (time that I upgraded router).
Elia seems you back luck this time dude ;) ... Or is a problem with device model + RoS version.
by ingdaka
Thu Oct 13, 2022 12:58 am
Forum: Scripting
Topic: Last link up time [SOLVED]
Replies: 4
Views: 1204

Re: Last link up time [SOLVED]

Where do you want to get it?! You see it on interface...
by ingdaka
Sat Aug 27, 2022 2:36 pm
Forum: Beginner Basics
Topic: Mikrotik Hex S (RB760iGS) - GPON SFP support module.
Replies: 19
Views: 9967

Re: Mikrotik Hex S (RB760iGS) - GPON SFP support module.

I use it at my home Hex-S RoS V.6 and Dione SFP GPON Stick https://etronic.al/en/dione-networks/322-gpon-onu-sfp-with-mac.html Works perfectly since 1 year now but as Hex-S SFP Port is 1Gbps, you cannot get more than 1Gbps, in my home now I have a package of 1Gbps down / 500Mbps up and get this spee...
by ingdaka
Sat Aug 20, 2022 11:37 pm
Forum: Beginner Basics
Topic: IP and Routing: SFP GPON Module WebUI access [SOLVED]
Replies: 3
Views: 3059

Re: IP and Routing: SFP GPON Module WebUI access [SOLVED]

To be able to ping interface must be running!
by ingdaka
Mon Aug 15, 2022 10:43 pm
Forum: General
Topic: PPPoE and NAT Separate [SOLVED]
Replies: 7
Views: 2711

Re: PPPoE and NAT Separate [SOLVED]

Yes this will be best thing you can do! But in this case looks like you have small network and not so much IP after 1009 so you can use also static IP. CCR1009 will have just one default route to CC1036 and 1036 will have some static routes to CCR1009. Just remind to disable connection tracking on C...
by ingdaka
Mon Jul 25, 2022 7:00 pm
Forum: General
Topic: CCR1009 SFP+10g pppoe-server optimization lower CPU
Replies: 2
Views: 791

Re: CCR1009 SFP+10g pppoe-server optimization lower CPU

My suggestion:
Box1 - PPPoE Server / Queue - Disable NAT and connection tracking
Box2 - NAT (CGNAT) - FastTrack enabled!
by ingdaka
Fri Jun 24, 2022 11:41 pm
Forum: General
Topic: LACP Bonding + VLAN (2 x 10G SFP+) Problem
Replies: 5
Views: 2243

Re: LACP Bonding + VLAN (2 x 10G SFP+) Problem

Please specify what type of Cisco they are using. I have faced situation where ASR 1001-X to CCR1016 2*1Gbps Bond Works ASR 9010 to CCR1036 2*10Gbps Bond Works Nexus 3600 to CC1072 2*10Gbps Bond Works Cisco C7600 to CCR1036 2*10Gbps Bond Don't Work Cisco C7600 to CCR1036 2*1Gbps Bond Don't Work Cisc...
by ingdaka
Fri Jun 24, 2022 10:59 pm
Forum: General
Topic: Mikroitk Perfomace over 1500suscribers - Issue [SOLVED]
Replies: 4
Views: 908

Re: Mikroitk Perfomace over 1500suscribers - Issue [SOLVED]

Best of all go to separate function of devices, one device for NAT and other one PPPoE Server + Queues adn Connection Tracking Disabled! With this type of connection I have 2XCCR1036 with 5Gbps and 2.3k customers without any problem!
by ingdaka
Fri Jun 17, 2022 10:15 pm
Forum: General
Topic: Redirecting Tracert/Traceroute traffic to a specific gateway in a Dual ISP/WAN set-up
Replies: 8
Views: 1376

Re: Redirecting Tracert/Traceroute traffic to a specific gateway in a Dual ISP/WAN set-up

If is simple trace route that works with ICMP you can! Mark ICMP traffic and send it via a gateway!
by ingdaka
Fri Jun 17, 2022 10:12 pm
Forum: Scripting
Topic: mikrotik send message to telegram
Replies: 6
Views: 8844

Re: mikrotik send message to telegram

Also you can check videos of this guy https://www.youtube.com/c/ErionDemiri
by ingdaka
Fri Jun 17, 2022 10:04 pm
Forum: General
Topic: can't find MLAG in 7.3.1
Replies: 2
Views: 405

Re: can't find MLAG in 7.3.1

by ingdaka
Fri Jun 17, 2022 9:58 pm
Forum: RouterBOARD hardware
Topic: Any plans for a small size SoHo router managing Gigabit WAN capacity?
Replies: 19
Views: 2347

Re: Any plans for a small size SoHo router managing Gigabit WAN capacity?

Now I use Hex-S with an GPON Stick on SFP port and can receive almost 900Mbps/900Mbps
by ingdaka
Fri Jun 17, 2022 9:55 pm
Forum: RouterBOARD hardware
Topic: 10 GB fiber problem [SOLVED]
Replies: 8
Views: 1835

Re: 10 GB fiber problem [SOLVED]

Also please be in mind that not both devices are Routers, CRS305-1G-4S+IN is a switch with L3 capabilities!
by ingdaka
Fri Jun 17, 2022 9:51 pm
Forum: SwOS
Topic: CSS610-8G-2S+ SNMP possibilities
Replies: 2
Views: 2359

Re: CSS610-8G-2S+ SNMP possibilities

Not for SwitchOS Lite, On RouterOS it is possible!
by ingdaka
Fri Jun 17, 2022 9:48 pm
Forum: General
Topic: Some devices does not get internet from the WiFi [SOLVED]
Replies: 14
Views: 3162

Re: Some devices does not get internet from the WiFi [SOLVED]

Type
export hide-sensitive
on terminal and paste config to see it
by ingdaka
Tue Jun 14, 2022 3:12 am
Forum: Virtualization
Topic: CHR or x86 for a Core Router (35Gbit/s)
Replies: 2
Views: 2887

Re: CHR or x86 for a Core Router (35Gbit/s)

I would like to say CHR V7 on VMware Esxi with Hyperthreat disabled on bios, but is too much traffic so better go with CCR2216
by ingdaka
Tue Jun 14, 2022 3:04 am
Forum: Announcements
Topic: v7.3 and v7.3.1 [stable] is released!
Replies: 269
Views: 80295

Re: v7.3 and v7.3.1 [stable] is released!

CCR 2004-16G-2S+ Just upgraded! Everything was OK, except one of BGP peers toward an v6 CCR, was failing. No logs from 2004, but from v6 router was "connection refused". Managed to bring it UP with setup Local Address on BGP Connection on 2004 side!
by ingdaka
Sun Jun 12, 2022 8:08 pm
Forum: RouterBOARD hardware
Topic: Hardware Recomendations
Replies: 5
Views: 951

Re: Hardware Recomendations

I have experience in this! You need CHR with 6 core or an CCR2116. Other versions with RoS 6.x can hande like CC1016 or 1036 but as all is moving to RoS v7, better to get an CCR with 64bit processor
by ingdaka
Fri Jun 03, 2022 3:08 pm
Forum: Wireless Networking
Topic: Hotspot default config doesn't work with iOS devices
Replies: 2
Views: 1965

Re: Hotspot default config doesn't work with iOS devices

Please check domain name that you have set at "DNS Name" IOS devices have problems redirecting non "normal" domains. Example all domain with .local will not work on IOS
by ingdaka
Fri Jun 03, 2022 2:56 pm
Forum: General
Topic: ROUTEROS 7 100% CPU on some cores / fast-track no effect
Replies: 2
Views: 443

Re: ROUTEROS 7 100% CPU on some cores / fast-track no effect

Is router faced on public network?
by ingdaka
Fri Jun 03, 2022 2:47 pm
Forum: General
Topic: ROUTEROS 7 BGP network announcement issue
Replies: 22
Views: 5916

Re: ROUTEROS 7 BGP network announcement issue

You have 2 options: 1. Add your /24 as blackhole, so It will be active in routing table and will be advertised if you set Output Redistribute static on Connection. 2. Add all your networks that want to distribute to IP > Firewall > Address List and then on BGP Template output.network="your-ip-a...
by ingdaka
Tue May 31, 2022 10:49 pm
Forum: General
Topic: Help With Ont And Mikrotik
Replies: 3
Views: 743

Re: Help With Ont And Mikrotik

This is not ONT but DSL Modem. You should configure it to Bridge Mode and then setup PPPoE-Client on Mikrotik.
by ingdaka
Mon May 30, 2022 7:56 pm
Forum: RouterOS beta
Topic: NAT only NAT'ing 99% of packets. [SOLVED]
Replies: 9
Views: 4155

Re: NAT only NAT'ing 99% of packets. [SOLVED]

How did you measured that 99.9%?
by ingdaka
Mon May 30, 2022 7:54 pm
Forum: General
Topic: Load Balancing [HELP]
Replies: 26
Views: 3456

Re: Load Balancing [HELP]

You should check when you have to many connections running. Speed test will create a connection from your computer to 1 server. PCC - Per Connection Classifier, so if you have 1 connection it will go only from 1 ISP.
by ingdaka
Sun May 29, 2022 10:44 pm
Forum: Forwarding Protocols
Topic: BGP default route shows invalid in ROS v7.2.3 [SOLVED]
Replies: 3
Views: 3185

Re: BGP default route shows invalid in ROS v7.2.3 [SOLVED]

What happen if you remove static one with same IP or set it's distance to more than 20?
by ingdaka
Sun May 29, 2022 10:42 pm
Forum: General
Topic: Multiple VLAN-BRIDGE-PPPOESERVER
Replies: 15
Views: 1449

Re: Multiple VLAN-BRIDGE-PPPOESERVER

In my opinion do not set each ONT on different VLAN. Your can set max of 1 VLAN per PON Port will be enough.
by ingdaka
Sat May 21, 2022 11:47 pm
Forum: Beginner Basics
Topic: cAP routing issue
Replies: 2
Views: 442

Re: cAP routing issue

Is not problem on CAP, your router that CAP use as gateway should have a route to CAP LAN IP
by ingdaka
Tue May 03, 2022 12:24 am
Forum: RouterBOARD hardware
Topic: CRS309-1G-8S+: Poor PPPoE performance
Replies: 8
Views: 3431

Re: CRS309-1G-8S+: Poor PPPoE performance

CRS - Cloud Router Switch - Is a Mikrotik switch with L3 capability, but is a switch!
CCR - Cloud Core Routers - Are Mikrotik Routers!
by ingdaka
Tue Apr 12, 2022 12:09 am
Forum: Announcements
Topic: v7.2 is released!
Replies: 359
Views: 61008

Re: v7.2 is released!

Just upgraded CCR2004-16G-2S+ / Overall OK BGP Prefix Count still 0 *) bgp - added BGP advertisements display (requires output.keep-sent-attributes to be set); even that i set output.keep-sent-attributes=yes still no info on command [username@identity] > routing/bgp/session/dump-saved-advertisement...
by ingdaka
Sat Apr 09, 2022 2:23 am
Forum: Announcements
Topic: v7.2 is released!
Replies: 359
Views: 61008

Re: v7.2 is released!

Just upgraded CCR2004-16G-2S+ / Overall OK BGP Prefix Count still 0 *) bgp - added BGP advertisements display (requires output.keep-sent-attributes to be set); even that i set output.keep-sent-attributes=yes still no info on command [username@identity] > routing/bgp/session/dump-saved-advertisements...
by ingdaka
Sun Mar 20, 2022 12:14 am
Forum: Announcements
Topic: v7.1.3 is released!
Replies: 251
Views: 56314

Re: v7.1.3 is released!

Just installed a CCR 2004 16G 2S+ and there are still problems in BGP. On my installation output.network does not advertise my networks on most of time, when you add a new Subnet need to reboot router or to reset peer many times to see networks on neighbors table. When I disable a BGP Connection pee...
by ingdaka
Thu Mar 17, 2022 8:27 pm
Forum: General
Topic: Router issue after ISP outage [SOLVED]
Replies: 3
Views: 527

Re: Router issue after ISP outage [SOLVED]

If you marked as solved can you tell what was cause?
by ingdaka
Mon Feb 28, 2022 6:45 pm
Forum: General
Topic: Are mikrotic routers next generation firewalls?
Replies: 22
Views: 6591

Re: Are mikrotic routers next generation firewalls?

Simple! NO, Mikrotik is not a NGFW.
by ingdaka
Sun Feb 20, 2022 12:56 am
Forum: General
Topic: PPPoE expiration redirect
Replies: 2
Views: 1228

Re: PPPoE expiration redirect

Redirect can be done but this will not help you with HTTPS Traffic!
There is another solution for this!
by ingdaka
Sun Feb 20, 2022 12:53 am
Forum: General
Topic: CCR1036-8G-2S+ all pppoe disconect every 3-4 days
Replies: 21
Views: 2309

Re: CCR1036-8G-2S+ all pppoe disconect every 3-4 days

# feb/18/2022 21:01:09 by RouterOS 6.49.3 # software id = JTTU-4HZJ # # model = CCR1036-8G-2S+ # serial number = D8370D266F46 /interface bridge add name=BRV724 /interface ethernet set [ find default-name=ether1 ] comment=TV speed=100Mbps set [ find default-name=ether2 ] comment=DLINK speed=100Mbps ...
by ingdaka
Tue Nov 16, 2021 6:44 pm
Forum: RouterBOARD hardware
Topic: Best RouterOS for CRS328-24P-4S+RM
Replies: 1
Views: 3129

Re: Best RouterOS for CRS328-24P-4S+RM

I always work with stable one! Configured maybe more than 1200 devices since now! And have got just 1 device with production problem on hardware, and was a HAP AC Lite
So a big THANK YOU for Mikrotik
by ingdaka
Tue Nov 16, 2021 6:37 pm
Forum: RouterBOARD hardware
Topic: Which female RJ45 to buy for RB450G?
Replies: 5
Views: 5521

Re: Which female RJ45 to buy for RB450G?

This device has made history! Please put it in a wall as a valuable thing and buy a new one!
by ingdaka
Tue Oct 26, 2021 12:08 am
Forum: Beginner Basics
Topic: Bandwidth Test Question
Replies: 4
Views: 1344

Re: Bandwidth Test Question

Bandwidth test of Mikrotik works only between Mikrotik devices
by ingdaka
Mon Oct 25, 2021 10:00 am
Forum: General
Topic: 2 public ip in mikrotik !!!!
Replies: 6
Views: 1036

Re: 2 public ip in mikrotik !!!!

As there is not any packet matching your mark-connection in prerouting, that mans packet from outside does not even reach to router and problem is in ISP that is not routing traffic toward your router.
by ingdaka
Mon Oct 25, 2021 9:37 am
Forum: General
Topic: What are routing filters?
Replies: 4
Views: 1402

Re: What are routing filters?

They are used by routing processes (Static and dynamic Routing) you have to specify where they will be used.
In my case are used in BGP and specify source IP if will be accepted or not
Image
by ingdaka
Mon Oct 11, 2021 7:26 pm
Forum: General
Topic: Route site or ip out of the VPN [SOLVED]
Replies: 7
Views: 1915

Re: Route site or ip out of the VPN [SOLVED]

Add a new rule at mangle with action accept and set destination IP and put those rules at top of others! Those are mine: /ip firewall mangle add action=accept chain=prerouting dst-address=192.168.1.0/24 src-address=192.168.1.0/24 add action=accept chain=prerouting dst-address=public-ip-of-website ad...
by ingdaka
Tue Aug 10, 2021 11:03 pm
Forum: General
Topic: SNMP for MIkrotik [SOLVED]
Replies: 11
Views: 3605

Re: SNMP for MIkrotik [SOLVED]

I use Observium for my small ISP customers. Free easy to install and best thing, automatic graph creating and discover!
by ingdaka
Tue Jun 22, 2021 8:06 pm
Forum: General
Topic: move traffic stats from combo1 to ether1
Replies: 5
Views: 924

Re: move traffic stats from combo1 to ether1

I don't know if you have seen your device but combo port is different than eth1
Image
by ingdaka
Mon Jun 21, 2021 3:07 pm
Forum: General
Topic: Add Bond or Ports to Bridge?
Replies: 2
Views: 704

Re: Add Bond or Ports to Bridge?

I use bonding-rr since 3 years now and works very well!
by ingdaka
Fri May 28, 2021 12:58 am
Forum: Beginner Basics
Topic: differences between WAN RX & LAN TX
Replies: 3
Views: 981

Re: differences between WAN RX & LAN TX

Because many packets are dropped by queues!
by ingdaka
Thu May 13, 2021 12:15 am
Forum: General
Topic: Problem CCR1072 with PPPoE
Replies: 1
Views: 688

Re: Problem CCR1072 with PPPoE

Hope it is solved!
by ingdaka
Tue May 11, 2021 10:34 am
Forum: RouterBOARD hardware
Topic: Mikrotik OS Bridge
Replies: 2
Views: 1308

Re: Mikrotik OS Bridge

Bridge does not Aggregate speed of ports, because is not an LAG! It just make a Virtual Switch!
by ingdaka
Sun Apr 11, 2021 7:32 pm
Forum: General
Topic: Need help, ip Blacklist
Replies: 1
Views: 1309

Re: Need help, ip Blacklist

First of all this is not an Mikrotik problem! This is an Blacklist problem and you should take care for your devices. Is is Andromeda that means that 1 or more devices in your LAN is infected with Andromeda botnet and those devices make DDoS attack to IP 84.105.192.2 on port 80. If you are an reside...
by ingdaka
Thu Mar 18, 2021 12:38 pm
Forum: Beginner Basics
Topic: Detect-internet - limited access
Replies: 5
Views: 5643

Re: Detect-internet - limited access

As you make src-nat for your LAN, when you ping from router it self. And 172... is not routed on Internet so is normal that you will not have access from router! If you want to make for example 8.8.8.8 ping-able from router you should add src-nat add chain=srcnat dst-address=8.8.8.8 action=src-nat t...
by ingdaka
Wed Feb 24, 2021 12:18 am
Forum: General
Topic: block internet access but allow some sites - NOT WORKING
Replies: 7
Views: 1487

Re: block internet access but allow some sites - NOT WORKING

How you will find what IP has outlook.com if you drop traffic to DNS server?
by ingdaka
Sat Feb 20, 2021 9:09 pm
Forum: Beginner Basics
Topic: ISP problems
Replies: 10
Views: 1490

Re: ISP problems

Change your cable... also test other RB Ports
by ingdaka
Sat Feb 20, 2021 6:58 pm
Forum: Beginner Basics
Topic: WAN & LAN Speed Difference
Replies: 8
Views: 2912

Re: WAN & LAN Speed Difference

Do you have Queue for you "LAN" users?
by ingdaka
Mon Feb 08, 2021 1:20 pm
Forum: RouterBOARD hardware
Topic: "fcs error on link", every day
Replies: 10
Views: 9049

Re: "fcs error on link", every day

From Link you provided those SFP+ Modules are Cisco Compatible!
by ingdaka
Tue Jan 26, 2021 11:50 pm
Forum: General
Topic: Poor performance of hEX S + PPPoE
Replies: 4
Views: 1318

Re: Poor performance of hEX S + PPPoE

Can you make this test with PC running iPerf
by ingdaka
Tue Jan 12, 2021 6:22 pm
Forum: Beginner Basics
Topic: assign IP to bridge or ethernet
Replies: 2
Views: 588

Re: assign IP to bridge or ethernet

Why you need to complicate your life man?!
Bridge is a concept of connecting 2 or more interfaces in a Virtual Switch, so when you don't need it don't use it!
by ingdaka
Tue Jan 05, 2021 9:36 am
Forum: RouterBOARD hardware
Topic: Infos regarding CCR1036-8G-2S+EM to migrate from Vyos.
Replies: 10
Views: 2649

Re: Infos regarding CCR1036-8G-2S+EM to migrate from Vyos.

In my experience stay of Vyos is more stable and super fast on installing routes when you have BGP Flapping. To have the same performance on mikrotik you should wait for RouterOS V.7 to be in production!
by ingdaka
Tue Jan 05, 2021 9:21 am
Forum: Wireless Networking
Topic: Mikrotik and cisco
Replies: 5
Views: 1545

Re: Mikrotik and cisco

Cisco: show interface status | err
will show you why port has got that error, security issues, link flapping etc...
by ingdaka
Tue Jan 05, 2021 9:14 am
Forum: General
Topic: Isolate two bridges at Layer 2 [SOLVED]
Replies: 7
Views: 2283

Re: Isolate two bridges at Layer 2 [SOLVED]

Correct regarding bridges - they are like separate interfaces. They have nothing common between them so no L2 routing between them is possible if you did not setup any exotic configurations. Instead you should probably use this: add action=drop chain=forward in-interface=bridge1 out-interface=bridg...
by ingdaka
Tue Jan 05, 2021 9:02 am
Forum: Forwarding Protocols
Topic: OSPF Default Route
Replies: 4
Views: 1669

Re: OSPF Default Route

If you want this you have to return to static routing and use mangle to mark subnets
by ingdaka
Sun Jan 03, 2021 3:56 pm
Forum: Virtualization
Topic: Unable To Install OS on New Gen2 Hyper-V VMs
Replies: 1
Views: 5774

Re: Unable To Install OS on New Gen2 Hyper-V VMs

RouterOS is linux based! Will not boot on Gent2 because does not support uefi!
by ingdaka
Fri Dec 04, 2020 10:08 am
Forum: Beginner Basics
Topic: No route to host
Replies: 14
Views: 25330

Re: No route to host

Maybe there is something other! Did you have any other device configured with this IP address, some ISP has an log ARP age and there need some time to clear old MAC and to accept new one, so your gateway show as unreachable!
by ingdaka
Thu Dec 03, 2020 12:28 am
Forum: General
Topic: IP Range
Replies: 6
Views: 3225

Re: IP Range

They will not be router through gateway because I thing that 192.168.0.1 is with /24. To do this you have to change it to /23.
by ingdaka
Sun Nov 29, 2020 10:53 pm
Forum: General
Topic: more cpu core
Replies: 10
Views: 1878

Re: more cpu core

First of all you should have CPU on Physical Server and be sure that Hyperthreat is disabled!
my cpu is 2650v2
when i set 9 core or 10 ,11,12,...
not start my vm and i give error

so that 8 core i havent error and run vm carefully
Because e5-2650 v2 is an 8 Core Processor!
by ingdaka
Sun Nov 29, 2020 3:35 pm
Forum: General
Topic: more cpu core
Replies: 10
Views: 1878

Re: more cpu core

First of all you should have CPU on Physical Server and be sure that Hyperthreat is disabled!
by ingdaka
Sun Nov 29, 2020 2:18 am
Forum: Beginner Basics
Topic: HOW TO RECOVER MICROTIK ROUTER 951 USER PASSWORD
Replies: 1
Views: 453

Re: HOW TO RECOVER MICROTIK ROUTER 951 USER PASSWORD

There is not any other way without reset
by ingdaka
Thu Oct 22, 2020 9:43 pm
Forum: General
Topic: mikrotik after isp router
Replies: 2
Views: 633

Re: mikrotik after isp router

First of all don't use 172.168.1.0/24 because is an Public Subnet not a private one, use 172.16.1.0/24
by ingdaka
Mon Oct 19, 2020 8:09 pm
Forum: General
Topic: Unknown traffic source
Replies: 11
Views: 1953

Re: Unknown traffic source

There is not much information but in normal cases if this interface is UPLink there might be an attack in your router! If you have an public IP, on IP Settings check TCP-SYN Cookies. Also check if you have DNS Allow Remote Request checked!
by ingdaka
Sun Oct 11, 2020 9:49 pm
Forum: General
Topic: PPPOE problems
Replies: 3
Views: 1635

Re: PPPOE problems

on your router terminal type
export hide-sensitive
and paste result here
by ingdaka
Fri Oct 02, 2020 1:39 am
Forum: The Dude
Topic: Dude on RB450G (mipsbe) ?
Replies: 1
Views: 2830

Re: Dude on RB450G (mipsbe) ?

You should choose another one! There will not be any dude package for this architecture of processors!
by ingdaka
Tue Sep 22, 2020 9:52 pm
Forum: General
Topic: PPPoE creation and PPPoE scan
Replies: 7
Views: 2792

Re: PPPoE creation and PPPoE scan

What is the reason that you are creating more than one PPPoE Server in the same interface! There is no logical reason for me, however you will see only the one because he has priority and is in the same L2 Broadcast Domain!
by ingdaka
Sun Sep 20, 2020 3:57 pm
Forum: RouterBOARD hardware
Topic: RB1100AHx2
Replies: 1
Views: 775

Re: RB1100AHx2

PoE does not have total full power to work with FAN-s!
by ingdaka
Sat Sep 19, 2020 8:18 pm
Forum: Beginner Basics
Topic: DHCP Server is showing red
Replies: 4
Views: 2520

Re: DHCP Server is showing red

Error is because by default WLAN interface shows down when nobody is connected! That's why dhcp-server show in red because is configured in a down interface
by ingdaka
Fri Sep 18, 2020 5:38 pm
Forum: Beginner Basics
Topic: configuration
Replies: 1
Views: 436

Re: configuration

Then just create firewall filter rules lets say block vlan-x to access vlan-y
ip firewall filter add chain=input in-interface=vlan-x out-interface=vlan-y action=drop
by ingdaka
Thu Sep 17, 2020 5:37 pm
Forum: General
Topic: Best way to block sites. [SOLVED]
Replies: 2
Views: 1046

Re: Best way to block sites. [SOLVED]

best way is to add hosts do STATIC DNS Cashe and redirect requests to router! This will not use your processor power!
by ingdaka
Thu Sep 17, 2020 2:33 pm
Forum: General
Topic: SRC-NAT With IP Pool without configure IP on WAN Interface
Replies: 4
Views: 1100

Re: SRC-NAT With IP Pool without configure IP on WAN Interface

Already tried this, but does not work!
I've done this when I set a Public IP to a PPPoE user, but i my case I want to just NAT and MASK my IP with a different one from my Router IP!
by ingdaka
Thu Sep 17, 2020 1:34 pm
Forum: General
Topic: SRC-NAT With IP Pool without configure IP on WAN Interface
Replies: 4
Views: 1100

SRC-NAT With IP Pool without configure IP on WAN Interface

Hello! I have a task that I've done many times in other vendors. Tried on Mikrotik but not working (maybe something is missing in my configs) I have a Public Pool 45.XX.YY.ZZ/24 45.XX.YY.1/24 is configured ISP Router as my gateway 45.XX.YY.2/24 is configured in my router I want to configure all my u...
by ingdaka
Sat Sep 12, 2020 3:15 pm
Forum: General
Topic: Single PPPoE account used on Multiple Routers
Replies: 3
Views: 1426

Re: Single PPPoE account used on Multiple Routers

Go to PPP Profiles and check profile that you use when you create secrets and modify it!
Also on PPPoE Server you have ONE SESSION PER HOST
by ingdaka
Mon Sep 07, 2020 11:06 am
Forum: General
Topic: 2 BRAS With Same IP pool LIST
Replies: 7
Views: 2559

Re: 2 BRAS With Same IP pool LIST

How Increase PoD For vlan 100 Example By switch ??? Please Share me Solution
PADo is option that you can set on PPPoE Server Service in MIkrotik not in Switch!
by ingdaka
Mon Sep 07, 2020 10:46 am
Forum: General
Topic: one cable two wireless ISP
Replies: 13
Views: 1795

Re: one cable two wireless ISP

In this case you should place an managed switch to dishes! And setup every in port in switch from dish(es), as VLAN access, 3 different VLAN-s and setup port that connect to mikrotik as trunk. Then on mikrotik you create 3 vlan subinterfaces and then you have 3 "WAN" interfaces!
by ingdaka
Fri Aug 28, 2020 9:23 pm
Forum: General
Topic: TLS problem with this forum since a few hours.
Replies: 14
Views: 2796

Re: TLS problem with this forum since a few hours.

Me to, happens when you try function "post"
by ingdaka
Mon Aug 24, 2020 10:22 pm
Forum: General
Topic: CRS-112-8G-4S high cpu, dhcp
Replies: 3
Views: 744

Re: CRS-112-8G-4S high cpu, dhcp

CRS is a switch not a router! In this case about those dhcp assignment you should check physical connection of this device
by ingdaka
Fri Aug 21, 2020 10:58 pm
Forum: Beginner Basics
Topic: L2TP to specific port on switch?
Replies: 2
Views: 809

Re: L2TP to specific port on switch?

To dhcp leases of your mikrotik make your PC MAC bind to IP and your computer will get same IP every time! Then use mangle to mark traffic from src-ip (your computer IP) and route it through VPN
by ingdaka
Tue Aug 11, 2020 11:30 pm
Forum: RouterBOARD hardware
Topic: Mikrotik CCR2004 B/W Capacity
Replies: 7
Views: 4342

Re: Mikrotik CCR2004 B/W Capacity

Yes, and those 4 cores are a *LOT* more powerful than the ones in the CCR1009. The CCR2004 has close to 3 times the forwarding performance of the 1009. That may not entirely map into a 3 times lowering of the CPU load of the OP, but the CCR2004 will no doubt be a step up. Yes but he is talking as P...
by ingdaka
Tue Aug 11, 2020 10:14 pm
Forum: RouterBOARD hardware
Topic: Mikrotik CCR2004 B/W Capacity
Replies: 7
Views: 4342

Re: Mikrotik CCR2004 B/W Capacity

No! 1009 has 9 cores and 2004 just 4 Cores!
by ingdaka
Tue Aug 11, 2020 8:57 pm
Forum: General
Topic: PPTP Routing issues.
Replies: 1
Views: 880

Re: PPTP Routing issues.

Check both bridges to have arp=proxy-arp
by ingdaka
Thu Aug 06, 2020 11:58 pm
Forum: General
Topic: l2tp VPN routing issue
Replies: 2
Views: 1217

Re: l2tp VPN routing issue

Need to know config of both routers to check it
by ingdaka
Sun Aug 02, 2020 12:38 am
Forum: General
Topic: Routing problem with Public IP subnets
Replies: 8
Views: 2760

Re: Routing problem with Public IP subnets

First of all you should make interfaces as arp=proxy-arp, next one you should exclude those IP from NAT
by ingdaka
Sat Aug 01, 2020 11:17 pm
Forum: General
Topic: IPSEC tunnels with failover
Replies: 5
Views: 4125

Re: IPSEC tunnels with failover

I've done this with 2 EoIP tunnels between sites and both EoIP interfaces in a Bond with RR, work's like a charm since 2 years for 14 sites.
by ingdaka
Thu Jul 30, 2020 2:15 am
Forum: Beginner Basics
Topic: interconnection between several networks in the same mikrotik
Replies: 9
Views: 2580

Re: interconnection between several networks in the same mikrotik

By default if you don't have any rules on firewall they will communicate to each other without problems
by ingdaka
Thu Jul 30, 2020 2:10 am
Forum: Virtualization
Topic: WIreless interface detected as ethernet interface
Replies: 3
Views: 4629

Re: WIreless interface detected as ethernet interface

Everything that you will do in virtualization will be the same situation because software that you use to virtualize will do as ethernet
by ingdaka
Thu Jul 30, 2020 2:06 am
Forum: RouterOS beta
Topic: issue with pppoe
Replies: 2
Views: 1347

Re: issue with pppoe

Please set interfaces arp=proxy-arp
by ingdaka
Thu Jul 30, 2020 1:57 am
Forum: General
Topic: IPsec VPN between Mikrotik and Fortigate
Replies: 8
Views: 11107

Re: IPsec VPN between Mikrotik and Fortigate

First of all! Upgrade both routers with latest firmware
by ingdaka
Sun Jul 19, 2020 1:33 am
Forum: General
Topic: BGP - 1072
Replies: 5
Views: 2488

Re: BGP - 1072

Tools > profile to find which process is using the CPU
by ingdaka
Wed Jul 15, 2020 9:38 pm
Forum: General
Topic: AP Openwrt managed by Mikrotik routeros
Replies: 4
Views: 3097

Re: AP Openwrt managed by Mikrotik routeros

UBNT devices are not supported by RouterOS, only think that you can do is to install them back AirOS and then to manage them with UNMS and Unifi Controller
by ingdaka
Tue Jul 14, 2020 11:10 pm
Forum: General
Topic: AP Openwrt managed by Mikrotik routeros
Replies: 4
Views: 3097

Re: AP Openwrt managed by Mikrotik routeros

Captive portal can be aranged by mikrotik, but none of MT Devices cannot be a controller for OpenWRT.
by ingdaka
Fri Jul 03, 2020 8:01 pm
Forum: General
Topic: PPPoE setup on a WISP network
Replies: 4
Views: 2466

Re: PPPoE setup on a WISP network

You can setup ether3 also as PPPoE server. You AP-s should be configured as bridge! And Client CPE as pppoe client
by ingdaka
Thu Jul 02, 2020 11:40 pm
Forum: Beginner Basics
Topic: increase throughput by linking 100mbps ports [SOLVED]
Replies: 4
Views: 2530

Re: increase throughput by linking 100mbps ports [SOLVED]

Yes you can use bonding to do this! But even if you do this you will not get never more thane 100Mbps in WiFi of hAP AC Lite
by ingdaka
Mon Jun 29, 2020 8:40 pm
Forum: Announcements
Topic: MUM EUROPE AND OTHER UPCOMING EVENTS - POSTPONED!
Replies: 59
Views: 247630

Re: MUM EUROPE AND OTHER UPCOMING EVENTS - POSTPONED!

What will be the next products of hap ac^2 ?? :)
Have you seen this one
https://mikrotik.com/product/hap_ac3_lte6_kit
by ingdaka
Thu Jun 25, 2020 1:28 am
Forum: General
Topic: PPPoE Server - NTP and DNS passthrough [SOLVED]
Replies: 6
Views: 4325

Re: PPPoE Server - NTP and DNS passthrough [SOLVED]

As CRS112-8G-4S-IN is a switch with some L3 capabilities it is not recommended to be configured as BRAS
by ingdaka
Wed Jun 24, 2020 12:12 am
Forum: General
Topic: failed to add arp entry for IP 192.168.0.86: already have such arp (6)
Replies: 2
Views: 2895

Re: failed to add arp entry for IP 192.168.0.86: already have such arp (6)

Looks like you ARP table is full and age is set to a longer time! See it in IP > ARP
by ingdaka
Tue Jun 16, 2020 5:37 pm
Forum: Wireless Networking
Topic: reset the password
Replies: 4
Views: 1974

Re: reset the password

Just hardware reset or netinstall, both ways will destroy all configurations!
by ingdaka
Tue Jun 16, 2020 5:36 pm
Forum: General
Topic: RB1100Dx4, best practice setting up VLAN
Replies: 4
Views: 1830

Re: RB1100Dx4, best practice setting up VLAN

You cannot use switch on this model because it has 3 Switch chips, Switch1 Port 1-5, Switch2 Port 6-10, Switch 3 Port 11-13, and if you will use switch ports between different switches will not communicate between each-other. You have to use Bridge!
by ingdaka
Tue Jun 16, 2020 5:26 pm
Forum: Wireless Networking
Topic: reset the password
Replies: 4
Views: 1974

Re: reset the password

If you don't have access on router there is no way!
by ingdaka
Tue Jun 09, 2020 8:46 pm
Forum: General
Topic: routing problem
Replies: 1
Views: 828

Re: routing problem

All mange rules make dst !LAN
by ingdaka
Tue Jun 09, 2020 8:42 pm
Forum: The User Manager
Topic: Reset User Password
Replies: 3
Views: 7060

Re: Reset User Password

You can't without reset!
by ingdaka
Sat Jun 06, 2020 5:48 pm
Forum: General
Topic: BGP Questions
Replies: 14
Views: 3956

Re: BGP Questions

As mbovenka has noticed then you will need https://mikrotik.com/product/ccr2004_1g_12s_2xs, but if is to much traffic you will need a bigger one!
by ingdaka
Sat Jun 06, 2020 12:59 pm
Forum: General
Topic: BGP Questions
Replies: 14
Views: 3956

Re: BGP Questions

Never use a switch as router...
Use a router depend on traffic you can use HEX or CCR1009! Default route just need to be advertised from ISP
by ingdaka
Thu Jun 04, 2020 7:30 pm
Forum: Beginner Basics
Topic: how can I route between my eth.n ports?
Replies: 2
Views: 1050

Re: how can I route between my eth.n ports?

On terminal type: export hide-sensitive
and paste all output here
by ingdaka
Mon Jun 01, 2020 7:19 pm
Forum: Beginner Basics
Topic: Problem with ethernet speed Gigabit - 962UiGS-5HacT2HnT
Replies: 8
Views: 2100

Re: Problem with ethernet speed Gigabit - 962UiGS-5HacT2HnT

Can you check CPU usage at time that you are making that traffic?
by ingdaka
Sun May 31, 2020 3:59 pm
Forum: Scripting
Topic: SMS forwarding to Telegram
Replies: 1
Views: 1579

Re: SMS forwarding to Telegram

Check 2 last videos of this awesome guy:

https://www.youtube.com/user/edemiriblog/videos
by ingdaka
Sun May 31, 2020 12:18 am
Forum: General
Topic: PPPoE server maximum performance.
Replies: 5
Views: 2713

Re: PPPoE server maximum performance.

I have a CCR1036 as PPPoE Server and actually has about 900 active PPPoE clients and more than 1.5Gbps traffic with less than 10% of processor usage!
by ingdaka
Tue May 26, 2020 7:44 pm
Forum: General
Topic: PPOE ( terminating... - peer is not responding )
Replies: 8
Views: 6432

Re: PPOE ( terminating... - peer is not responding )

1. May be a problem with physical line!
2. RB1100AHx2 is pretty old device and I don't know if he can handle more than 150 PPP Sessions!
by ingdaka
Wed May 20, 2020 8:39 pm
Forum: General
Topic: CAN'T CONNECT TO SOPHOS FIREWALL THROUGH MY MIKROTIK
Replies: 8
Views: 5198

Re: CAN'T CONNECT TO SOPHOS FIREWALL THROUGH MY MIKROTIK

Please check PPPoE server profile for TCP MSS which option is checked
by ingdaka
Sun May 17, 2020 5:52 pm
Forum: Beginner Basics
Topic: Access a device Mikrotik
Replies: 4
Views: 2219

Re: Access a device Mikrotik

You should have a L2 broadcast domain to every device to have this possibility! Example: In my company I use VLAN "xxx" which is configured in every device, when I need this just connect my laptop in a switch port that is configured access to this VLAN!
by ingdaka
Sun May 17, 2020 5:40 pm
Forum: Beginner Basics
Topic: Joining 2 networks
Replies: 19
Views: 5281

Re: Joining 2 networks

First of all are those 2 "modems" Mikrotik Routers?
Can they connected together physically of not?
by ingdaka
Fri May 15, 2020 9:16 pm
Forum: General
Topic: Customising RouterOS version of Mikrotik Devices
Replies: 1
Views: 964

Re: Customising RouterOS version of Mikrotik Devices

To modify a NPK??? Is like mikrotik to give you the source code!
by ingdaka
Fri May 15, 2020 9:12 pm
Forum: RouterOS beta
Topic: mangle and routing-mark can not work for RouterOS v7
Replies: 9
Views: 7773

Re: mangle and routing-mark can not work for RouterOS v7

As it is in beta use it only in test environments so you can wait as long as it takes to be released. Don't use it in production environment.
by ingdaka
Sun May 03, 2020 11:53 pm
Forum: General
Topic: Online Mikrotik exams
Replies: 1
Views: 1025

Re: Online Mikrotik exams

Still now, there is no info about that
by ingdaka
Sun May 03, 2020 11:50 pm
Forum: Forwarding Protocols
Topic: BGP advertise smaller prefix than /24 [SOLVED]
Replies: 7
Views: 13273

Re: BGP advertise smaller prefix than /24 [SOLVED]

Yes BGP as a routing protocol allows it, but RIR-s policies does not want it, so approximately all Internet Providers don't accept smaller than /24 from their downstream providers because they need to do summary in their network and nobody want some extra work for this!
by ingdaka
Sat May 02, 2020 3:48 pm
Forum: Beginner Basics
Topic: Internet on mikrotik router
Replies: 8
Views: 2460

Re: Internet on mikrotik router

1.Which on is the best and why? - PPPoE on Mikrotik, because you just remove 1 NAT in your Modem! 2. Which one is more secure? - PPPoE on modem and mikrotik with DHCP Client on connection port with modem, act as DMZ router and "WAN" dynamic IP 3. When pppoe is on mikrotik, does it have eff...
by ingdaka
Sat May 02, 2020 3:45 pm
Forum: Beginner Basics
Topic: Inter Vlan Routing
Replies: 31
Views: 9221

Re: Inter Vlan Routing

These switches can do it if you start them with routerOS not SwitchOS as they are dual boot!

But if we are talking to performance, they are switches not routers! They will not handle more then 1G in fast path routing!
by ingdaka
Fri May 01, 2020 3:25 pm
Forum: RouterBOARD hardware
Topic: Audible Alarm on disconnect
Replies: 4
Views: 2269

Re: Audible Alarm on disconnect

No, there is not any way!
by ingdaka
Tue Apr 28, 2020 9:44 pm
Forum: Virtualization
Topic: License rent for CHR
Replies: 8
Views: 5107

Re: License rent for CHR

they are only perpetual!
by ingdaka
Sun Apr 26, 2020 4:54 pm
Forum: General
Topic: CCR 1016 6.45.8 LTS / 6.46.5 Stable packages update error / fail
Replies: 2
Views: 1271

Re: CCR 1016 6.45.8 LTS / 6.46.5 Stable packages update error / fail

Update packages fail with log error "can not install routeros-arm-6.44.1: it is not made for tile, but for arm" with "Long Term" channel. Actual versions / packages: dude 6.44.1 ntp 6.44.1 routeros-tile 6.44.1 Current firmware: 6.44.1 Model: CCR1016-12G After trying "Long T...
by ingdaka
Sun Apr 26, 2020 4:11 pm
Forum: The User Manager
Topic: I want the total code
Replies: 3
Views: 7748

Re: I want the total code

Can you explain more clear of your problem/request?
by ingdaka
Sat Apr 25, 2020 11:47 pm
Forum: Beginner Basics
Topic: parental control
Replies: 3
Views: 4759

Re: parental control

Just use 1.1.1.3 and 1.0.0.3 as your DNS and you will have block malware and adult sites!
by ingdaka
Sat Apr 25, 2020 3:03 pm
Forum: Forwarding Protocols
Topic: BGP advertise smaller prefix than /24 [SOLVED]
Replies: 7
Views: 13273

Re: BGP advertise smaller prefix than /24 [SOLVED]

BGP not allow to announce /24 to provider over eBGP but if you are in your network with iBGP you can do it!
by ingdaka
Sat Apr 25, 2020 2:48 pm
Forum: Beginner Basics
Topic: Multi Pools on DHCP Server
Replies: 2
Views: 1429

Re: Multi Pools on DHCP Server

Yes for sure tested and running!
by ingdaka
Wed Apr 22, 2020 7:25 pm
Forum: Beginner Basics
Topic: Setting up /29 over /30 [SOLVED]
Replies: 7
Views: 8847

Re: Setting up /29 over /30 [SOLVED]

Yes is because of NAT! In nat roule specify src-address and will be OK, i think!

For better you should export your config and post it here!
by ingdaka
Tue Apr 21, 2020 1:02 am
Forum: General
Topic: 16 ports
Replies: 5
Views: 1909

Re: 16 ports

You need a switch or a router?
by ingdaka
Tue Apr 21, 2020 12:55 am
Forum: General
Topic: SNMP traffic - cpu load3
Replies: 1
Views: 1118

Re: SNMP traffic - cpu load3

I use SNMP monitoring on my network with more than 100 RB, usage change is not more than 0.5%
by ingdaka
Tue Apr 21, 2020 12:48 am
Forum: RouterOS beta
Topic: RB CCR1072 block
Replies: 2
Views: 1997

Re: RB CCR1072 block

What do you mean BLOCK?
by ingdaka
Thu Apr 16, 2020 5:55 pm
Forum: Beginner Basics
Topic: Wisp Monitoring
Replies: 4
Views: 2259

Re: Wisp Monitoring

Use any SNMP application! I use Observium, also LibreNMS is a option!
by ingdaka
Thu Apr 16, 2020 1:02 pm
Forum: General
Topic: pppoe connection was already active closing previous one [SOLVED]
Replies: 29
Views: 40822

Re: pppoe connection was already active closing previous one [SOLVED]

There are some modems and ONU that have more than 1 configuring virtual interface on WAN, be sure not is this! Faced this in many of small ISP here in my county!
by ingdaka
Thu Apr 16, 2020 12:55 pm
Forum: General
Topic: Any ROS updates anymore?
Replies: 4
Views: 2256

Re: Any ROS updates anymore?

Everything needed is supported for this situation remote work! As we need to stay at home and safe, Mikrotik guys need it too!
Respect for all Mikrotik staff, be SAFE GUYS!
by ingdaka
Thu Apr 16, 2020 12:47 pm
Forum: The User Manager
Topic: Hotspot with and without radius server difference
Replies: 2
Views: 8034

Re: Hotspot with and without radius server difference

Also you open users in radius not in Mikrotik, and you will have an accounting history in radius!
by ingdaka
Thu Apr 16, 2020 12:44 pm
Forum: Beginner Basics
Topic: Port forwarding issue
Replies: 6
Views: 2212

Re: Port forwarding issue

add action=accept chain=forward dst-port=222 protocol=tcp - Should be chain=input not forward
add action=netmap chain=dstnat dst-port=222 in-interface-list=WAN log=yes protocol=tcp to-addresses=192.168.1.33 to-ports=22 - action dst-nat, not netmap
by ingdaka
Thu Apr 16, 2020 1:20 am
Forum: General
Topic: Authentication & Accounting interim-update=5m
Replies: 2
Views: 4500

Re: Authentication & Accounting interim-update=5m

You just set time in hh/mm/ss which set interval that router send accounting updates to radius server!
by ingdaka
Wed Apr 15, 2020 2:08 pm
Forum: General
Topic: Rb4011 Licence level 5 but 507 active pppoe tunnel
Replies: 2
Views: 1639

Re: Rb4011 Licence level 5 but 507 active pppoe tunnel

Are those all PPPoE or some of them are PPTP or L2TP?
by ingdaka
Wed Apr 15, 2020 2:02 pm
Forum: RouterBOARD hardware
Topic: CCR1009 temperature sensor issue
Replies: 15
Views: 8490

Re: CCR1009 temperature sensor issue

@SNITE @littledpurple what aplications do you use for SNMP Monitoring?
by ingdaka
Wed Apr 15, 2020 1:55 pm
Forum: RouterBOARD hardware
Topic: CCR1009 temperature sensor issue
Replies: 15
Views: 8490

Re: CCR1009 temperature sensor issue

Looks like S+ version have this issue with device temp, because Processor Temp is OK, I have 2 of them:
1. CCR1009-7G-1C - Never seen this.
2. CCR1009-7G-1C-1S+
Image
by ingdaka
Tue Apr 14, 2020 7:30 pm
Forum: General
Topic: ccr1036-8g-2s+ high CPU temperature [SOLVED]
Replies: 7
Views: 8324

Re: ccr1036-8g-2s+ high CPU temperature [SOLVED]

Better to have some ventilation!
by ingdaka
Tue Apr 14, 2020 7:27 pm
Forum: Beginner Basics
Topic: to instal backup to another router
Replies: 12
Views: 3755

Re: to instal backup to another router

No better is to export config in txt... (terminal / export) and then apply step by step to new router!
by ingdaka
Tue Apr 14, 2020 3:48 pm
Forum: General
Topic: ccr1036-8g-2s+ high CPU temperature [SOLVED]
Replies: 7
Views: 8324

Re: ccr1036-8g-2s+ high CPU temperature [SOLVED]

Air temp 37 degree???? Seems you have it a road POP... This core devices are designed for Data Room.
by ingdaka
Mon Apr 13, 2020 1:51 pm
Forum: Beginner Basics
Topic: Graphing issue
Replies: 10
Views: 4907

Re: Graphing issue

Your firewall is blocking input connection from WAN to router! To enable it in best secured way, 1st go to IP>Services and change http port form 80 to any port, "i like 9090 or 9099" be sure it is enabled. 2nd add a new firewall rule, chain=input, dst-port= "port which you set on http...
by ingdaka
Fri Apr 10, 2020 5:10 pm
Forum: Forwarding Protocols
Topic: Which routerboard for BGP (to replace a Cisco router)
Replies: 6
Views: 3479

Re: Which routerboard for BGP (to replace a Cisco router)

If we are talking for the same as in start of this topic!
Each CCR will connect with eBGP to providers and iBGP between each-other and everything will be OK!
by ingdaka
Thu Apr 09, 2020 10:30 pm
Forum: RouterBOARD hardware
Topic: hAP ac3 spotted at FCC
Replies: 23
Views: 10405

Re: hAP ac3 spotted at FCC

Doesn't make much difference witch LTE standard it has. Using LTE as home broadband is hideously expensive. I wouldn't say that! In Albania you can get an PON connection with 50Mbps/20Mbps (down/up) for about 15 EUR/month. But there is another that I have a LTE Sim Card with unlimited monthly traff...
by ingdaka
Thu Apr 09, 2020 3:35 pm
Forum: Wireless Networking
Topic: Mikrotik hap lite TC - Can it bridge or repeat wirelessly?
Replies: 3
Views: 2581

Re: Mikrotik hap lite TC - Can it bridge or repeat wirelessly?

Better check how to install winbox on mac!
1. reset router with no default config
2. Create a bridge
3. add all ports on bridge
4. config wireless interface as AP with whatever ssid and password you want
by ingdaka
Thu Apr 09, 2020 3:30 pm
Forum: Beginner Basics
Topic: Collecting daily/monthly usage stats?
Replies: 8
Views: 13416

Re: Collecting daily/monthly usage stats?

The interface menu retains total bytes/packets in/out for each interface. You can copy out the numbers on the first of each month than zero it for next month.
If router is not rebooted for all month :)
by ingdaka
Thu Apr 09, 2020 3:26 pm
Forum: Beginner Basics
Topic: Mikrotik Load Balancing issue
Replies: 1
Views: 1524

Re: Mikrotik Load Balancing issue

You can't do nothing! Client server downloading use just one of routes, is an established connection from 1 path, if it fail connection is dropped cannot continue from other path because is another source IP that is requesting on server!
by ingdaka
Mon Apr 06, 2020 12:30 am
Forum: General
Topic: ETHERNET SCHEDULE
Replies: 5
Views: 2274

Re: ETHERNET SCHEDULE

This will disable Ether5 everyday at 13:00 /system scheduler add interval=1d name=schedule1 on-event="/interface disable ether5" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=apr/05/2020 start-time=13:00:00 This will enable Ether5 everyday at 08:00 /sys...
by ingdaka
Tue Mar 31, 2020 2:15 am
Forum: RouterBOARD hardware
Topic: Huawei SFP and Mikrotik Routerboard
Replies: 1
Views: 2796

Re: Huawei SFP and Mikrotik Routerboard

They are GPON SFP not normal SFP they don't work in point-to-point mode!
by ingdaka
Fri Mar 27, 2020 4:38 pm
Forum: General
Topic: IP streser atack prevent
Replies: 13
Views: 3730

Re: IP streser atack prevent

thy this add chain=input protocol=udp in-interface=ether1 connection-state=!established,related action=drop To use that then you are using connections which is most expenceive, in processor time. If you put that in filter then use it to add the source IP address to an address list which is used in ...
by ingdaka
Fri Mar 27, 2020 2:52 pm
Forum: Forwarding Protocols
Topic: Which routerboard for BGP (to replace a Cisco router)
Replies: 6
Views: 3479

Re: Which routerboard for BGP (to replace a Cisco router)

If we are talking about 2921 even a CCR1009 will do his job!
by ingdaka
Fri Mar 27, 2020 1:59 pm
Forum: Beginner Basics
Topic: Firewall - how to block traffic to the router from one interface, no matter what the destination IP is
Replies: 3
Views: 1721

Re: Firewall - how to block traffic to the router from one interface, no matter what the destination IP is

Maybe you where connected before and connection state was still established.... when time is over and connection is dropped you started a new connection and for sure it will be dropped!
by ingdaka
Fri Mar 27, 2020 1:51 pm
Forum: General
Topic: IP streser atack prevent
Replies: 13
Views: 3730

Re: IP streser atack prevent

thy this
add chain=input protocol=udp in-interface=ether1 connection-state=!established,related action=drop
by ingdaka
Fri Mar 27, 2020 1:43 pm
Forum: General
Topic: RB951N bug mikrotik DO DDOS attack
Replies: 2
Views: 1388

Re: RB951N bug mikrotik DO DDOS attack

And as I can see from your pic seems that you (device connected to mikrotik) is attacking others with syn flood. Maybe one of devices has malware or is a botnet.
by ingdaka
Thu Mar 26, 2020 2:39 pm
Forum: General
Topic: L2TP Tunnel VLAN
Replies: 2
Views: 1721

Re: L2TP Tunnel VLAN

L2TP does not support VLAN
by ingdaka
Thu Mar 26, 2020 10:18 am
Forum: Wireless Networking
Topic: licenc ap mode
Replies: 2
Views: 3224

Re: licenc ap mode

L3 License is dedicated for CPE not WISP
by ingdaka
Mon Mar 23, 2020 12:09 am
Forum: Beginner Basics
Topic: Disable Interface at certain hours
Replies: 2
Views: 2039

Re: Disable Interface at certain hours

Disable /system scheduler add name=Disable-Eth6 start-date=mar/23/2020 start-time=08:00:00 interval=1d on-event="/interface disable ether6" Enable /system scheduler add name=Enable-Eth6 start-date=mar/23/2020 start-time=16:00:00 interval=1d on-event="/interface enable ether6" Thi...
by ingdaka
Sun Mar 22, 2020 3:59 pm
Forum: General
Topic: What will happen if i disable ppp accounting from PPP Authentication&Accounting
Replies: 2
Views: 1436

Re: What will happen if i disable ppp accounting from PPP Authentication&Accounting

If you don't use radius, Nothing! But question is why you need to disable it?!
by ingdaka
Sun Mar 22, 2020 3:52 pm
Forum: Forwarding Protocols
Topic: Unable to See Routes
Replies: 2
Views: 2149

Re: Unable to See Routes

This has been confirmed as a bug in emails from Mikrotik support.

It will be fixed in v7.
by ingdaka
Sat Mar 21, 2020 11:38 pm
Forum: General
Topic: Winbox password recovery?
Replies: 6
Views: 3006

Re: Winbox password recovery?

Or open winbox > tools >export
then open .wbx file with notepad and all usernames/password are there in plain text
by ingdaka
Fri Mar 20, 2020 11:39 pm
Forum: General
Topic: Set PPP password expiration
Replies: 1
Views: 1222

Re: Set PPP password expiration

No! Just if you use radius
by ingdaka
Fri Mar 13, 2020 11:56 pm
Forum: General
Topic: CCR1036-12G-4S NAT problem.
Replies: 1
Views: 1195

Re: CCR1036-12G-4S NAT problem.

Can you give better description of the problem
by ingdaka
Thu Mar 12, 2020 12:21 am
Forum: Beginner Basics
Topic: Radius Accounting Request
Replies: 3
Views: 2141

Re: Radius Accounting Request

Do you have a radius server in your environment?
by ingdaka
Tue Mar 03, 2020 10:31 pm
Forum: General
Topic: RAM Support x86
Replies: 4
Views: 2528

Re: RAM Support x86

by ingdaka
Tue Mar 03, 2020 10:14 pm
Forum: Beginner Basics
Topic: Unable to configure Mikrotik SXT with Tenda(N301) [SOLVED]
Replies: 15
Views: 9943

Re: Unable to configure Mikrotik SXT with Tenda(N301) [SOLVED]

Is not an Mikrotik problem but an ISP configuration! 2 ways:
1st configure PPPoE Client on SXT and then configure tenda router as WAN DHCP Client!
2nd Configure Tenda router as PPPoE Client
by ingdaka
Sat Feb 29, 2020 11:59 pm
Forum: General
Topic: Loop between bridged vlans in several routers
Replies: 2
Views: 1826

Re: Loop between bridged vlans in several routers

I've faced this problem before but was one of my IT that connected 2 access vlan (different vlans) of the switch together!
by ingdaka
Fri Feb 28, 2020 8:21 pm
Forum: General
Topic: How is it revealed load balance
Replies: 2
Views: 1653

Re: How is it revealed load balance

What do you mean! With detection of loadbalance?
by ingdaka
Fri Feb 28, 2020 8:13 pm
Forum: General
Topic: RB4011 and RB1100 AHx4 "bricks" randomly
Replies: 222
Views: 78180

Re: RB4011 and RB1100 AHx4 "bricks" randomly

I have 3 of them and I've not faced this problem never! Uptime more than 1 year running without any problem with normal 700Mbps to 1G of traffic!
by ingdaka
Fri Feb 28, 2020 8:13 pm
Forum: General
Topic: RB1100AHx4 crash every 20 - 40 days [SOLVED]
Replies: 17
Views: 15369

Re: RB1100AHx4 crash every 20 - 40 days [SOLVED]

I have 3 of them and I've not faced this problem never! Uptime more than 1 year running without any problem with normal 700Mbps to 1G of traffic!
by ingdaka
Fri Feb 28, 2020 8:08 pm
Forum: General
Topic: How to hide src-nat rule but allow dst-rules in web skin?
Replies: 2
Views: 1787

Re: How to hide src-nat rule but allow dst-rules in web skin?

As you will give them access to firewall part you cannot do it!
by ingdaka
Fri Feb 28, 2020 9:44 am
Forum: Beginner Basics
Topic: rb1100ahx4 switch port isolation
Replies: 2
Views: 2169

Re: rb1100ahx4 switch port isolation

Hiow many VLAN do you have in ether1?
by ingdaka
Thu Feb 27, 2020 10:29 am
Forum: RouterOS beta
Topic: V7 modules missing, BGP and mpls missing, ipv6 always enabled.
Replies: 5
Views: 4543

Re: V7 modules missing, BGP and mpls missing, ipv6 always enabled.

As you can know V7 is in Beta testing and modules comes on each beta publish! There is no BGP yet and there are lot of other stuff missing! I don't see nothing strange here! https://mikrotik.com/download/changelogs/development-release-tree See all change logs on 7.0 beta 3 and there is confirmed tha...
by ingdaka
Thu Feb 27, 2020 9:27 am
Forum: General
Topic: public ip to local ip client
Replies: 1
Views: 1498

Re: public ip to local ip client

1st option is to make interfaces proxy-arp and then to assign those IP to users via PPPoE
2nd option is to make source nat:
ip firewall nat> add action=src-nat chain=srcnat src-address=192.168.0.6 to-addresses=213.212.xxx.62
And don't forget that this src-nat rule should be on top of all others!
by ingdaka
Wed Feb 26, 2020 9:27 am
Forum: General
Topic: Mikrotik OS 6.45.6 Hacked
Replies: 10
Views: 20070

Re: Mikrotik OS 6.45.6 Hacked

Like Strods wrote! This is an old script that is from old version of ROS. Also Do you use a master password for Winbox? If not then you should know that if you export addresses.wbx this is an unencrypted file that can be opened with notepad and to read all IP/username/passwords saved there!
by ingdaka
Mon Feb 24, 2020 6:14 pm
Forum: RouterBOARD hardware
Topic: Which CCR? Need Advice / Recommendation [SOLVED]
Replies: 22
Views: 23650

Re: Which CCR? Need Advice / Recommendation [SOLVED]

For 1G and IP address you need, 1009 is ok
by ingdaka
Sun Feb 23, 2020 12:13 am
Forum: General
Topic: interface is slave
Replies: 5
Views: 7119

Re: interface is slave

Because all ports form 2 to 8 and SFP+ and SFP are slave of a bridge, so you need to setup your dhcp server on bridge interface!
by ingdaka
Fri Feb 21, 2020 10:54 pm
Forum: RouterBOARD hardware
Topic: CCR1009 collision and loop
Replies: 7
Views: 4218

Re: CCR1009 collision and loop

You can use 172.16.0.0/24 range is allocated for private!
by ingdaka
Fri Feb 21, 2020 10:34 pm
Forum: RouterBOARD hardware
Topic: CCR1009 collision and loop
Replies: 7
Views: 4218

Re: CCR1009 collision and loop

add address=193.168.0.1/20 interface=WAN-OUT network=193.168.0.0

You cannot use 193.168.0.0/20 on your LAN as it is a public routed subnet not a Private allocated one!
by ingdaka
Fri Feb 21, 2020 10:25 pm
Forum: RouterBOARD hardware
Topic: Maximum ISP speed for CCR1016-12G
Replies: 1
Views: 2877

Re: Maximum ISP speed for CCR1016-12G

For sure it will!
https://mikrotik.com/product/CCR1016-12 ... estresults test results for this router!
by ingdaka
Fri Feb 21, 2020 10:24 pm
Forum: RouterBOARD hardware
Topic: correct hardware choice for expansion
Replies: 2
Views: 3383

Re: correct hardware choice for expansion

Maybe will cost many but I will suggest 1036!
by ingdaka
Fri Feb 21, 2020 10:15 pm
Forum: General
Topic: /to graph in Winbox :-(
Replies: 2
Views: 1477

Re: /to graph in Winbox :-(

Have you tried to open with winbox64
by ingdaka
Wed Feb 19, 2020 11:33 pm
Forum: General
Topic: PPPoE different IP after disconnect/connect
Replies: 4
Views: 2743

Re: PPPoE different IP after disconnect/connect

When a user disconnect and connect again in short time this is something that looks normal because of arp table age!
by ingdaka
Mon Feb 17, 2020 10:39 pm
Forum: General
Topic: Simple queue for PPPoE client with dynamic remote address [SOLVED]
Replies: 6
Views: 4782

Re: Simple queue for PPPoE client with dynamic remote address [SOLVED]

You can create them dynamic from PPPoE profiles! In profiles you set limits and on tab queue, 3rd option is queue type! So every time that a client will connect a dynamic queue will be created and when client disconnect queue will be removed!
by ingdaka
Sun Feb 16, 2020 12:00 am
Forum: General
Topic: WibBox 3.21 Resolution Problem
Replies: 1
Views: 1543

WibBox 3.21 Resolution Problem

There are problem with upgrade to WinBox Version 3.21. New Upgrades about HiDPI displays have problem to Logs! https://i.ibb.co/H4ygx4w/winbox3-21.jpg This is how logs are show in this version in a UHD display of 15 inch laptop! I need to zoom out to see them in very very small letters! Please fix t...
by ingdaka
Sat Feb 15, 2020 8:05 pm
Forum: Beginner Basics
Topic: Router os hardware [SOLVED]
Replies: 2
Views: 4718

Re: Router os hardware [SOLVED]

Octa core Xeon server, with 16 GB of RAM! Will be enough for your setup but just you need to find ports for network! Or I will suggest any of Mikrotik CCR 1036 Models!
by ingdaka
Mon Feb 10, 2020 10:07 pm
Forum: General
Topic: Report and Monitoring
Replies: 3
Views: 1772

Re: Report and Monitoring

I will suggest Observium! Easy to install and you can make customization as it is open source and php based! It works very well for me!
by ingdaka
Thu Feb 06, 2020 12:02 pm
Forum: General
Topic: Feature request: ask confirm for every operation
Replies: 9
Views: 2189

Re: Feature request: ask confirm for every operation

Don't do important work using your phone or with a baby on your arms...
by ingdaka
Wed Feb 05, 2020 10:25 am
Forum: General
Topic: Blocked external IP
Replies: 14
Views: 3433

Re: Blocked external IP

Try it with chain input!
by ingdaka
Mon Feb 03, 2020 11:52 pm
Forum: The User Manager
Topic: Hex RB750Gr3 Maximum active session limit for pppoe
Replies: 1
Views: 8905

Re: Hex RB750Gr3 Maximum active session limit for pppoe

200 Based on license!
by ingdaka
Mon Feb 03, 2020 11:45 pm
Forum: General
Topic: Hotspot Problem with Apple IOS
Replies: 6
Views: 7535

Re: Hotspot Problem with Apple IOS

I think that this should be asked to Apple Forum not Mikrotik! When Mikrotik works with all Android and Windows, ask Apple how their system process the packets in idle mode!
by ingdaka
Mon Feb 03, 2020 11:36 pm
Forum: General
Topic: hAP ac^2 performance drop
Replies: 9
Views: 3227

Re: hAP ac^2 performance drop

Already more than 50 pcs installed with last stable version 6.46.2 and all of them works good! Tested all of them and all CPU works!
by ingdaka
Mon Feb 03, 2020 11:08 pm
Forum: RouterBOARD hardware
Topic: Mikrotik rb3011 switch mode - is it possible?
Replies: 4
Views: 3592

Re: Mikrotik rb3011 switch mode - is it possible?

Depend what you want to reach with! Do you need vlan-s or not!
But in every case sure it can!
by ingdaka
Tue Jan 28, 2020 3:06 pm
Forum: General
Topic: Layer 2 tunnel via IPSEC/IKEv2
Replies: 3
Views: 1730

Re: Layer 2 tunnel via IPSEC/IKEv2

If you need L2 Tunneling and all devices are Mikrotik user EoIP.
by ingdaka
Tue Jan 28, 2020 3:03 pm
Forum: Beginner Basics
Topic: hAP ac and PoE IP-camera
Replies: 14
Views: 4863

Re: hAP ac and PoE IP-camera

This device has PoE out just for other Mikrotik devices not standard PoE devices. Cameras need pure PoE, if you need this buy a PoE Switch!
by ingdaka
Sat Jan 25, 2020 2:11 am
Forum: Wireless Networking
Topic: trouble configuring wifi MikroTik RB962UiGS-5HacT2HnT
Replies: 1
Views: 2101

Re: trouble configuring wifi MikroTik RB962UiGS-5HacT2HnT

If you are connected in only 54 Mbps you are connected in 5GHz A mode! To test speed please use N/AC mode in 5GHz configuration also check security option use only WPA2 PSK, Aes-ccm chippers! Don't use TKIP chippers!
by ingdaka
Fri Jan 24, 2020 12:03 am
Forum: Beginner Basics
Topic: help please!!!!
Replies: 3
Views: 2146

Re: help please!!!!

Get a CCR 1009!
by ingdaka
Thu Jan 23, 2020 12:22 pm
Forum: Beginner Basics
Topic: Replacing current router
Replies: 2
Views: 1327

Re: Replacing current router

This is not an difficult job! But if you don't have any experience! Then you can hire and Mikrotik consultant form List https://mikrotik.com/consultants to come on site or you can hire one to help with configuration from remote (more cheap i thing) and to explain what to do on-site just for physical...
by ingdaka
Thu Jan 23, 2020 12:17 pm
Forum: Wireless Networking
Topic: Huawei WS832
Replies: 2
Views: 2838

Re: Huawei WS832

Here you are on Mikrotik, not TP-Link or Huawei!
by ingdaka
Thu Jan 23, 2020 12:16 pm
Forum: General
Topic: Is ti possible to Load balance using hAP mini
Replies: 1
Views: 765

Re: Is ti possible to Load balance using hAP mini

Yes you can do it! Just use for example Ether 1 for wired connection and Ether 2 to connect to 4G Modem! If you have an USB 4G modem you can't do it because hAP Mini don't have an USB port!
by ingdaka
Thu Jan 23, 2020 12:13 pm
Forum: General
Topic: Can't route between Bridge and Eth1 [SOLVED]
Replies: 2
Views: 1324

Re: Can't route between Bridge and Eth1 [SOLVED]

As I can see you don't have and default route and you have an wrong out interface on masquerade rule!
by ingdaka
Fri Jan 17, 2020 11:17 pm
Forum: General
Topic: Router Selection for VPN
Replies: 2
Views: 1030

Re: Router Selection for VPN

https://mikrotik.com/product/RB750Gr3 this one will do the job very well!
by ingdaka
Fri Jan 17, 2020 11:07 pm
Forum: General
Topic: HAP AC like simple switch wireless
Replies: 21
Views: 5017

Re: HAP AC like simple switch wireless

Yes it is because of performance of hAP AC Lite, look ate the picture below! With 40-45 Mbps it goes to 95-100% Processor usage! So cannot support more traffic! It looks like you are running btest TO the device in the image. If so, you are also measuring the CPU eaten up by the btest processes. Run...
by ingdaka
Fri Jan 17, 2020 10:55 pm
Forum: Beginner Basics
Topic: Mikrotik LTE
Replies: 9
Views: 2977

Re: Mikrotik LTE

If you see an different IP i think is because of FUP. Maybe your LTE Provider has set up Fair Usage Policy that drop your speed after some total traffic! In my country cable providers use it with and amount of 100Gb / week! This is jut my opinion, there are so many other reasons for this that need t...
by ingdaka
Fri Jan 17, 2020 10:51 pm
Forum: General
Topic: Protect from hacking router
Replies: 5
Views: 1749

Re: Protect from hacking router

This option has been fixed many years ago! As you can see this blog post is from 2012
by ingdaka
Fri Jan 17, 2020 9:44 am
Forum: General
Topic: Routing between subnets does not work
Replies: 2
Views: 941

Re: Routing between subnets does not work

First of all is that subnets are configured in slave interfaces! All interfaces are slave of bridge!
by ingdaka
Wed Jan 15, 2020 11:38 pm
Forum: General
Topic: HAP AC like simple switch wireless
Replies: 21
Views: 5017

Re: HAP AC like simple switch wireless

Yes it is because of performance of hAP AC Lite, look ate the picture below! With 40-45 Mbps it goes to 95-100% Processor usage! So cannot support more traffic! I have more than 80 of those routers and is the same thing! I use this for clients that need under 20Mbps and need WiFi just for small area...
by ingdaka
Wed Jan 15, 2020 11:25 pm
Forum: General
Topic: Mikrotik and CVE-2020-0601
Replies: 4
Views: 1688

Re: Mikrotik and CVE-2020-0601

Router OS is not Microsoft Windows based and is not .NET coded!
by ingdaka
Wed Jan 08, 2020 10:50 pm
Forum: Beginner Basics
Topic: Cheap Router for Load Balancing
Replies: 5
Views: 2164

Re: Cheap Router for Load Balancing

All Mikrotik routers can do this! Best way is PCC
For home I will recommend hAP ac lite or hAP ac lite TC. Both 5 Ethernet Ports 2.5 and 5 GHz WiFi. But this depend on surface of WiFi that you will need to cover!
by ingdaka
Mon Jan 06, 2020 11:31 pm
Forum: Forwarding Protocols
Topic: ccr1036-8g-2s+em - Multiple BGP Sessions
Replies: 2
Views: 2635

Re: ccr1036-8g-2s+em - Multiple BGP Sessions

Yes you can do it! Because you can create many instances and when setup peer you setup it with which instance will connect to it! But you have to talk with your provider if they will give you connection with the same IP or not! As it is one of mos powerful routers of Mikrotik it can handle this but ...
by ingdaka
Mon Jan 06, 2020 11:14 pm
Forum: Forwarding Protocols
Topic: Mikrotik BGP Aggregate /26-28
Replies: 1
Views: 2083

Re: Mikrotik BGP Aggregate /26-28

Yes if all router are yours! Because you can use iBGP form 1036 to core and then Core can announce them as /24 with eBGP to upstreams!
Or you can use OSPF in place of iBGP
by ingdaka
Sat Jan 04, 2020 12:31 am
Forum: General
Topic: router for BGP ?
Replies: 11
Views: 3738

Re: router for BGP ?

Depend how much traffic and routing table you will have! In my company with about 300Mbps with just 1 /22 Public to advertise and receive only 0.0.0.0/0 from ISP 4 ISP in Total I have deployed and Hex S (RB760iGS). Is working great since 1 year now!
by ingdaka
Sat Dec 28, 2019 11:58 pm
Forum: RouterBOARD hardware
Topic: Hardver config request[HELP] [SOLVED]
Replies: 11
Views: 16043

Re: Hardver config request[HELP] [SOLVED]

Yes you ca use DAC Cables!

This is list of hardware supported
https://wiki.mikrotik.com/wiki/MikroTik ... lity_table

Does not mean to be the same, but is recommended to be at same speed for example you cannot use 1.25Gbps SFP to one side and 10Gbps to other side!
by ingdaka
Sat Dec 28, 2019 11:52 pm
Forum: Beginner Basics
Topic: CAPs MAN and Firewall
Replies: 3
Views: 2022

Re: CAPs MAN and Firewall

What Configurations I need to do to have a MESH Wireless Network with Mikrotik CAP ac, so the users will be automatically connected to the nearest AP when they are moving from one office to another? If you use CAPsMAN you don't need MESH do to roaming mobility, just and an access list rule to CAPsM...
by ingdaka
Sat Dec 28, 2019 11:40 pm
Forum: Scripting
Topic: FUP Allowance & Speed
Replies: 5
Views: 4425

Re: FUP Allowance & Speed

In my experience you need Radius to do this,, you can't do this from Mikrotik as RB Device cannot count total Monthly / Weekly user traffic!
by ingdaka
Sat Dec 28, 2019 11:38 pm
Forum: General
Topic: Does anyone know if a fully updated Mikrotik Device is going to be vulnerable to this?
Replies: 9
Views: 3191

Re: Does anyone know if a fully updated Mikrotik Device is going to be vulnerable to this?

This phrase on that post: The report reads, “We are not sure why TCP 8291 is targeted, but we know that the Winbox protocol of the MikroTik Router device works on TCP / 8291 port and is exposed on the Internet.” Is the group real from North Korea or is supported by Cisco / Unify with friends because...
by ingdaka
Fri Dec 27, 2019 3:03 pm
Forum: Beginner Basics
Topic: TCP port forward doesnt work
Replies: 16
Views: 5974

Re: TCP port forward doesnt work

/ip firewall nat add chain=dstnat dst-address="your-public-IP" dst-port=55555 action=dst-nat protocol=tcp to-address=192.168.88.251 to-port=55555
by ingdaka
Fri Dec 27, 2019 2:53 pm
Forum: General
Topic: route internet from one IP over VPN
Replies: 21
Views: 7565

Re: route internet from one IP over VPN

Yes you cannot have internet because your route is added with disabled=yes should be disabled=no Go to IP routes and enable that route! Also to be sure that you will have internet when VPN is not working you need to add add disabled=no distance=2 gateway="your default gateway IP" routing-m...
by ingdaka
Fri Dec 27, 2019 2:49 pm
Forum: RouterBOARD hardware
Topic: Hardver config request[HELP] [SOLVED]
Replies: 11
Views: 16043

Re: Hardver config request[HELP] [SOLVED]

260GS is enough for 5 cameras, in my experience 5 cameras cannot get more than 1Gbps traffic! Also CRS328-4C-20S-4S+RM has 24Port SFP to connect endpoints and 4 Combo {Ethernet / SFP+ (10Gbps)} to connect server with SFP+ or 10Gbps Ethernet Cards!
by ingdaka
Fri Dec 27, 2019 12:33 pm
Forum: RouterBOARD hardware
Topic: Hardver config request[HELP] [SOLVED]
Replies: 11
Views: 16043

Re: Hardver config request[HELP] [SOLVED]

Yes it will work but as 260GS has just SFP Port better use CRS328-4C-20S-4S+RM as main Switch is good and cost less
by ingdaka
Fri Dec 27, 2019 12:02 pm
Forum: General
Topic: Problem WIth VPN Ike2 [SOLVED]
Replies: 5
Views: 1801

Re: Problem WIth VPN Ike2 [SOLVED]

Is that because you are behind NAT and at this case 85.94.... cannot respond to you! You have to set port forward to router that is before Mikrotik!
by ingdaka
Thu Dec 26, 2019 8:55 am
Forum: RouterOS beta
Topic: Speedify Mulit WAN Bonding
Replies: 41
Views: 14115

Re: Speedify Mulit WAN Bonding

For me will be better if Mikrotik implement SD WAN, is the same what Mikrotik have now with PCC, but a simple way of configuration!
by ingdaka
Thu Dec 26, 2019 8:50 am
Forum: Beginner Basics
Topic: User can Browse Internet without Authentication
Replies: 5
Views: 2466

Re: User can Browse Internet without Authentication

Post your configuration here!
Type in terminal /export hide-sensitive
by ingdaka
Sat Dec 21, 2019 6:13 pm
Forum: SwOS
Topic: Can SwOS be upgraded to RouterOS
Replies: 6
Views: 6011

Re: Can SwOS be upgraded to RouterOS

Even RB260GSP or CSS326 and all CSS versions are SwOS only! They don't support RouterOS and there is no support for it!
by ingdaka
Thu Dec 19, 2019 10:40 pm
Forum: General
Topic: CRS326-24G-2S+RM able to switch 10Gb/s at wire speed?
Replies: 3
Views: 1548

Re: CRS326-24G-2S+RM able to switch 10Gb/s at wire speed?

I will prefer this one Ethernet/SFP+ (Combo Ports) CRS312-4C+8XG-RM
https://www.youtube.com/watch?v=b4Wp4SzdNj4&t=643s
by ingdaka
Thu Dec 19, 2019 10:23 pm
Forum: The User Manager
Topic: Help on my project 2WAN-2LAN
Replies: 7
Views: 8028

Re: Help on my project 2WAN-2LAN

I think he has 5.26 because is the only one that can be found on internet with "Crack"! He doesn't have a RouterBoard
  • 1
  • 2