MikroTik

razortas

Ok so Files upgraded as expected but when i upgraded the routerboard version on two devices RB2011 access to devices was lost. Device is booting with ether boot displayed - have so far been unsucessful in factory reset and therfore cant use Netinstall iether. They both appear to be bricked.

razortas

HI, I know this post has been around the traps already but in my situation i can not find a solution to this problem. Upgraded to 6.46.8 did not solve issue. Issue is that i have a PPPoE server where if any changes to any of the bridge clients is made ie client goes down then all of the PPPoE connec...

razortas

You have your local ip 192.168.1.1 on ether2 yet you are doing DHCP on Bridge

razortas

Does this still work ???? I have followed the wiki to the letter, i have imported both ca and client certs (client.crt) and Client.pkcs12 to the local computer Trusted Root Certtification store - and i still get Cant connect to IKE failed to find Valid machine cerificate. Error ? Also on my Windows ...

razortas

Hi, I have L2TP VPN configured with different IP range for the VPN clients - NAT'd to local range. And Filters to allow traffic between ranges. Local Range 192.168.0.0/24 - VPN Pool 192.168.100.0/24. I can ping from client to internal servers and vice versa, I can connect Radius to the local Network...

razortas

Hi, Do you have External DNS server listed under IP-DNS on 88.1 and allow remote requests enabled.

razortas

You need to read up on dual-gateways and traffic marking/routing to get this to work.
Basically you will need to identify the types of traffic or interfaces you want to go to which gateway (isp ip address).

razortas

Hi, You have two options you can turn off port 80 web in IP services or you can dst-nat using ports other than 80.
I would suggest if you still want access to router via web then change the web port in ip services.

razortas

HELP REQUIRED !!!!!!! - Is this possible ? I have a need to replace a pfsense OVPN server with a mikroitk RB3011 however the current clients are also pfsense boxes. I need to be able to setup an ovpn server to communicate with the existing pfsense boxes. All attemtps so far have failed. I can setup ...

razortas

Are you nating or routing from 192.168.2.20 or is it just authentication One thing you can do is create a mangle rule identifying 192.168.1.0/24 port 80 traffic - mark it as guest and then put in a NAT rule dst-nat - packet mark-guest action=dst-nat 192.168.2.20. this means all port 80 traffic from ...

razortas

Hi, Looking at your Basic diagram it would appear that you intend to create a flat layer 2 network between sites using eoip. For this to work you will have to bridge both ends ethernet and eoip tunnells.
If this is not the case a more detailed diagram would assist.

razortas

Hi, try changing the external port your connecting on and refering to in DST_NAT as the source port. Also check that ip services has port 23 disabled.

razortas

Thanks Guys,
I worked it out - it was just a matter of getting the syntax right!

/queue simple
add name=$QueueName queue=default/default target=$InterfaceName max-limit=(($DownloadSpeedK * 105 / 100)."k/".($UploadSpeedK * 105 / 100)."k")

razortas

I wish to be able use a script to create simple queues and child queues using variables defined in the script -- means i don't have to change the script only the variables. At present i can create the parent via script however the max-limit= and limit-at will not accept upload/download variables. it...

razortas

Hi, I am very interested in what version you are using for this, you said latest but i am now running 6.36.3 on recently purchased map-lite and those menu items to setup repeater etc are not visible and or missing ? So is this possible still ??

razortas

You have the function of next pool in your ip pool configuration, once all ips are used from first pool it will assign from next pool ! and so on.

razortas

Include some IP addressing would be nice ?
Where is your dhcp server ?
Is the interface connecting the mik to the switch have a Lan address /
Can the LAN clients ping the interface of the Mik.
What else is happening on the cisco switch ?

razortas

Hi after some input into why it works this way: I have a working hotspot at a client site, however client has informed me that by increasing her internet bandwidth the login.html page appears to the user faster. The only reason i can think of for this happening is perhaps DNS is being resolved outsi...

razortas

All ports need to be on the hotspot bridge 2-10, Setup static IP's within range on bridged/APs for management.
Setup Wireless Mesh using AP's - Bridge APs Wlan and Ether with default route to ether.

razortas

Not sure what version your using but action=route - confusing ? Here is my suggestion: /interface ethernet set [ find default-name=ether1 ] name=Port1_LAN1 set [ find default-name=ether2 ] name=Port2_WAN1 set [ find default-name=ether3 ] name=Port3_LAN2 set [ find default-name=ether4 ] name=Port4_WA...

razortas

Hi,
Please explain how you are identifying your three companies if you only have one LAN. Can you include printout of mangle rules ?

razortas

First you have to identify and classify the different types of traffic using mangle rule and mark packet or connections based on that criteria. You can also depend on interface as your criteria. Then you setup queue-tree for each outgoing interface, and or incoming traffic using the packet marks/con...

razortas

www.mikrotik.com/wiki - You have 5 ethernet ports - any of them can be used for any type of connection.

razortas

Thanks ZeroByte ..... still however confusing the use of Global ? Would you be able to exemplify the different use of global vs interface as parent. Lookin at QOS i currently mark traffic based on DSCP. I Have multiple queues with different criteria currently with parent based on interface outbound,...

razortas

Now that we are able to create interface lists for use in firewall, would it be possible to use interface list as parent in queuu-tree ?

razortas

I think you nailed it already - Use station-bridge mode on M2

razortas

Need understanding: Using V6.30.4 to implement ipsec on eoip tunnel. Setup is src/dst address and ipsec password. Tunnel and dynamic policy is added, change default proposal to aes-256-cbc only. When apply at both ends getting remote peer as initiator and responder. Also on peer tab peer listed as s...

razortas

Had all the VRRP interfaces dissapear on one of the two GW's. Know how to fix, but was wondering if anyone had any ideas on how this could happen ? Unit was being accessed via mac telnet at time, but have tried to replicate command that could effect without simililar result.

razortas

having exact same issue -- appears to be BUG

razortas

This is using 6.20 i wouldn't call it an old version, and we are using this version because it has been proven to run qos correctly.

razortas

Attempting to SSH to "extreme switch" failing with following result: Anyone have any ideas or details on how to connect to "exreme switch" ?

[admin@DC3_rtr1] /system> ssh user=admin
address: 192.168.20.20
password:
unable to open channel: 4
Channel open failed

Welcome back!

razortas

So ok its working at present because i put the vlan 88 tagged on the ports of the extreme switch. Issue here is that as per scenario above customer vlans are not known therefore cannot put them on the crs config. Is there a way to use a CRS switch where the incoming packets from backhaul are tagged ...

razortas

Thanks again Mikrotik Support, Realized that you guys know what your talking about and that the problem would obviously be related to the other parts of the lab.
Its now working using your commands. i needed to add the vlan tagged to the outfacing interface of the ex440 switch.

razortas

Thanks support for answering, Tried that config probably days ago didnt work. Reset configuration carried out, setup switch from terminal with only your commands - it still does not work.

razortas

Ok so i am attempting to setup a simple lab to test operability with extreme switch. Documentation crs.example.wiki information doesnt appear to reflect the menu items available in switch menu using version 6.20. Lab is setup as per picture, can anyone help out with correct config. Have been able to...

razortas

Havnt tried this but my thoughts are: If the ISP is using DHCP to give you a connection then that ip would be a different network address to the one hes asking you to use for your public ip (different networks). Therefore i wouldnt be using a seperate NIC for the two networks, you can put both publi...

razortas

Did you get this working ? What you had to do was edit the alogin.htm page, remove the redirect instruction and place the url for the menu instead. Alternatively you can use the advertise feature within the user profile to temporarily display a page.

razortas

Understand where your coming from but you appear to be confusing functionality with the user experience. You can setup a Hotspot using trial user where the username and password are passed in automatically and then directed to a URL. The customer connects to the wifi network and gets the menu page o...

razortas

Few questions have been asked about how many users for particular scenario in forums never appear to be answered. So Who out there is actually using a hotspot, Whats the max number of connections you have every had on a single RB simultaneously and what RB's did you use. Maybe someone can compile a ...

razortas

I have setup a hotspot that the public can access free with username and password passed in the html page (hidden). I have also edited the login.html page to represent a user agreement and changed the login promtp at the bottom to be an i agree statement. All works fine when using a laptop and the u...

razortas

Hey, Did you ever resolve this issue yourself, i have exactly the same issue on a newly setup wifi mesh with hotspot using user manager and radius on the same box. Setup as per wiki and all i get is the radius server not reponding allthough if you look at the radius log you can see requests coming i...

Search found 41 matches