Community discussions

MikroTik App

Search found 33 matches

by fxx
Wed Dec 05, 2012 6:15 pm
Forum: Wireless Networking
Topic: Configure vAP with multiple vLAN
Replies: 18
Views: 7892

Re: Configure vAP with multiple vLAN

OK, I have check your config once again. Disable the WDS mode on all VAP, don't setup WDS. WDS mode is not for clients. wlan1 is italic because you setup both SSID on VAP. If you move one SSID to wlan1, it come normal (R).
by fxx
Wed Dec 05, 2012 3:05 pm
Forum: General
Topic: Problem process trunk with untagged VLAN
Replies: 20
Views: 2804

Re: Problem process trunk with untagged VLAN

The second solution allow me ping all addresses on MKT C. But if I want to separate the VLANs to the two different physical ports, it's impossible. As you wrote, it is possible to map both VLANs to one port without VLAN definition. OK. What about to separate tagged VLAN and make it untagged?
by fxx
Thu Nov 29, 2012 8:29 pm
Forum: General
Topic: Public IP to client with out NAT?
Replies: 5
Views: 831

Re: Public IP to client with out NAT?

I think about it again, and I have made mistakes. If you have only one subnet from you ISP, there is only one way using VLAN. If you have independent addressing for connection and separate public subnet, there the other ways as I decribed.
by fxx
Thu Nov 29, 2012 6:08 pm
Forum: General
Topic: Public IP to client with out NAT?
Replies: 5
Views: 831

Re: Public IP to client with out NAT?

Yes, sorry, it's not necessary to do a VLAN. I you setup A.B.C.17/30 on the last router Tower1. Then setup routing on gateway A.B.C.16/30 to the 10.11.xxx.xxx address of Tower1.
by fxx
Thu Nov 29, 2012 5:56 pm
Forum: General
Topic: Public IP to client with out NAT?
Replies: 5
Views: 831

Re: Public IP to client with out NAT?

You must create a separate VLAN for public IP delivery. There are two ways, how to do it: 1. Create a special subnet with mask 30 and route it: Example: You have a C subnet from your ISP: A.B.C.0/24 with default gateway A.B.C.1. You cut the sub net A.B.C.16/30 for client. Create a VLAN which is term...
by fxx
Thu Nov 29, 2012 5:44 pm
Forum: General
Topic: Problem process trunk with untagged VLAN
Replies: 20
Views: 2804

Re: Problem process trunk with untagged VLAN

Solved. Mirotik up to firmware 5.22 doesn't support VLAN turnk with native (untagged) VLAN.
by fxx
Thu Nov 29, 2012 11:09 am
Forum: Wireless Networking
Topic: Configure vAP with multiple vLAN
Replies: 18
Views: 7892

Re: Configure vAP with multiple vLAN

You must assign the IP address to the bridge, not to the interface. STP is irrelevant on this arrangement. STP must be on, if there is on can be circle.
by fxx
Wed Nov 28, 2012 11:44 am
Forum: Wireless Networking
Topic: Configure vAP with multiple vLAN
Replies: 18
Views: 7892

Re: Configure vAP with multiple vLAN

WDS is irelevant in this situarion. I see one problem there: add interface=ether1 l2mtu=1594 name=vlan_3100 use-service-tag=yes vlan-id=3100 remove the use-service-tag add interface=ether1 l2mtu=1594 name=vlan_3100 vlan-id=3100 There is no way to do a TRUNK with native VLAN on mikrotik. All VLAN mus...
by fxx
Mon Nov 26, 2012 11:29 am
Forum: General
Topic: Problem process trunk with untagged VLAN
Replies: 20
Views: 2804

Re: Problem process trunk with untagged VLAN

Hi, it so hard to explain that the pasted code just looks like a part. What means "/export compact"? There ( http://wiki.mikrotik.com/wiki/Manual:Configuration_Management#Compact_Export ) is written: Compact Export Starting from v5.12 compact export was added. It allows to export only part of config...
by fxx
Sat Nov 24, 2012 8:23 pm
Forum: Beginner Basics
Topic: Static routing
Replies: 25
Views: 11071

Re: Static routing

What address did you ping, when you ping RB750? RB 750 has three addresses. Which one did you try ping?
by fxx
Sat Nov 24, 2012 12:54 pm
Forum: General
Topic: ICMP - redirect host
Replies: 1
Views: 2260

Re: ICMP - redirect host

by fxx
Sat Nov 24, 2012 12:48 pm
Forum: General
Topic: DHCP Server - Client Declines IP
Replies: 2
Views: 2859

Re: DHCP Server - Client Declines IP

Did try to investigate, if the offered IP is not duplicate? Maybe some client has fixed address, and the MK offer the same. I have experience, that not all DHCP servers check the address before lease. Cisco do the check, Juniper has no problem to deliver occupied address. I don't know how the mikrot...
by fxx
Sat Nov 24, 2012 12:43 pm
Forum: General
Topic: Problem process trunk with untagged VLAN
Replies: 20
Views: 2804

Re: Problem process trunk with untagged VLAN

Yea, that's the problem. If I bridge VLAN separately, it doesn't work, traffic of all VLANs is passed to the bridge attached to physical device. If I do a VLAN on bridge, there is no way how to pass packet to the access port, or I don't know it. Is there anybody who uses trunk with native VLAN (cisc...
by fxx
Sat Nov 24, 2012 12:31 pm
Forum: Beginner Basics
Topic: Static routing
Replies: 25
Views: 11071

Re: Static routing

OK, once again: What is the result of ping from laptop to 10.10.10.1? In my opinion, there is no problem on RB, but on computers, or there is no routing problem.
by fxx
Fri Nov 23, 2012 9:40 pm
Forum: Beginner Basics
Topic: Static routing
Replies: 25
Views: 11071

Re: Static routing

Check, if the laptop can ping router RB750, but on this address: 10.10.10.1. If yes routing is OK. You must look for problem locally on the PC or laptop. What's the default route on PC and laptop? PC - 10.10.10.1, laptop - 192.168.5.1?
by fxx
Fri Nov 23, 2012 9:13 pm
Forum: General
Topic: Problem process trunk with untagged VLAN
Replies: 20
Views: 2804

Re: Problem process trunk with untagged VLAN

rstp enabled ?
Why RSTP? There is no cyrcle.
by fxx
Fri Nov 23, 2012 9:10 pm
Forum: General
Topic: Problem process trunk with untagged VLAN
Replies: 20
Views: 2804

Re: Problem process trunk with untagged VLAN

I have found configuration, which works. I'm not sure it's the right one: MKT B interface vlan add name=ether1.2 vlan-id=2 interface=ether1 disabled=no interface vlan add name=ether2.2 vlan-id=2 interface=ether2 disabled=no interface bridge add name MGMT disabled=no interface vlan add name=USERS vla...
by fxx
Fri Nov 23, 2012 1:02 pm
Forum: Beginner Basics
Topic: Beginner needs help on: Mikrotik RB2011UAS-2HnD-in
Replies: 19
Views: 11906

Re: Beginner needs help on: Mikrotik RB2011UAS-2HnD-in

If you create the vlan interface, the packet is always tagged. The switch "Use service tag" means something different: http://wiki.mikrotik.com/wiki/Manual:In ... LAN#Q-in-Q
Untagged are only packets on the physical interfaces.
by fxx
Fri Nov 23, 2012 12:51 pm
Forum: General
Topic: Problem process trunk with untagged VLAN
Replies: 20
Views: 2804

Re: Problem process trunk with untagged VLAN

did you try to disable vlan on ether 2 on MKT B ?
No, I did similar change, I added bridges on MKT C and the ping fails.
by fxx
Fri Nov 23, 2012 12:44 pm
Forum: General
Topic: Problem process trunk with untagged VLAN
Replies: 20
Views: 2804

Re: Problem process trunk with untagged VLAN

I have found, the traffic comes through the MGMT bridge. there is no traffic on MGMT, but pinging on VLAN2 generate the traffic on MGMT bridge. It correspond the behavior. It passed and ping the MKT C is OK. It not find the address 192.168.0.2, because the traffic is passed through the wrong bridge ...
by fxx
Fri Nov 23, 2012 12:40 pm
Forum: General
Topic: Problem process trunk with untagged VLAN
Replies: 20
Views: 2804

Re: Problem process trunk with untagged VLAN

there are the configs. The same as I wrote above.
by fxx
Fri Nov 23, 2012 12:36 pm
Forum: Beginner Basics
Topic: More than one PPTP client from same IP
Replies: 11
Views: 6484

Re: More than one PPTP client from same IP

I have met this problem with PPTP past time. The problem is in Microsoft implementation of PPTP. There is a random session ID in the protocol, which helps to identify sessions on firewall. Microsoft forgot implement randomizing ID and the session still has the same IDs. Because the PPTP using sessio...
by fxx
Fri Nov 23, 2012 11:49 am
Forum: General
Topic: how to route vlans
Replies: 3
Views: 877

Re: how to route vlans

The VLANs are usually addressed with different sub-nets. That's means, you cannot only one IP address on router. Each VLAN needs own address on router, published as a default gateway.
by fxx
Thu Nov 22, 2012 9:44 am
Forum: Beginner Basics
Topic: Static routing
Replies: 25
Views: 11071

Re: Static routing

Can you attach some connection schema?
by fxx
Thu Nov 22, 2012 9:41 am
Forum: General
Topic: Problem process trunk with untagged VLAN
Replies: 20
Views: 2804

Re: Problem process trunk with untagged VLAN

I have a testing enviroment. Three devices connected in serial with default config, see picture below. There are the config changes: MKT A interface vlan add name=ether1.2 vlan-id=2 interface=ether1 disabled=no ip address add address=10.0.0.1/24 interface=ether1 disabled=no ip address add address=19...
by fxx
Thu Nov 22, 2012 9:21 am
Forum: Wireless Networking
Topic: Doubt vlan, ssid from AP
Replies: 6
Views: 1547

Re: Doubt vlan, ssid from AP

I think you meant to use "bridge20" in the last two lines. Also, there is no interface named "wlan10"; the interface with that SSID is named "wlan1": interface bridge port add bridge=bridge10 interface=ether1.10 disabled=no interface bridge port add bridge=bridge10 interface=wlan1 disabled=no inter...
by fxx
Wed Nov 21, 2012 5:40 pm
Forum: Wireless Networking
Topic: Doubt vlan, ssid from AP
Replies: 6
Views: 1547

Re: Doubt vlan, ssid from AP

I found, you have nearby the default config. Do reset to default and paste following lines. Create VLAN sub interfaces: interface vlan add arp=enabled disabled=no interface=ether1 name=ether1.10 use-service-tag=no vlan-id=10 disabled=no interface vlan add arp=enabled disabled=no interface=ether1 nam...
by fxx
Wed Nov 21, 2012 1:40 pm
Forum: Beginner Basics
Topic: DHCP server for virtual AP does not offer gateway, DNS, etc.
Replies: 4
Views: 6981

Re: DHCP server for virtual AP does not offer gateway, DNS,

This line is wrong:
add address=192.68.1.0/24 dns-server=192.168.1.254 gateway=192.168.1.254
Correct one:
add address=192.168.1.0/24 dns-server=192.168.1.254 gateway=192.168.1.254
by fxx
Wed Nov 21, 2012 1:35 pm
Forum: Beginner Basics
Topic: Route traffic to one IP through specific gateway
Replies: 6
Views: 16807

Re: Route traffic to one IP through specific gateway

Just add entry to the routing table:
ip route add dst-address=92.11.11.200/32 gateway=x.x.x.x
where x.x.x.x is the default gateway of the WAN connection, you want to route to.
If you want to block connection from LAN1, I suppose to use the firewall rule.
by fxx
Tue Nov 20, 2012 5:33 pm
Forum: Wireless Networking
Topic: Doubt vlan, ssid from AP
Replies: 6
Views: 1547

Re: Doubt vlan, ssid from AP

Post the configuration, I'll fix it.
by fxx
Tue Nov 20, 2012 2:53 pm
Forum: Beginner Basics
Topic: Separate 2 networks, non firewall method.
Replies: 3
Views: 1260

Re: Separate 2 networks, non firewall method.

It's the router, routing is its default task. There is only firewall way to do separation:
ip firewall filter add chain=forward in-interface=LAN1 out-interface=wlan1 action=drop 
ip firewall filter add chain=forward in-interface=wlan1 out-interface=LAN1 action=drop 
by fxx
Tue Nov 20, 2012 2:12 pm
Forum: Beginner Basics
Topic: Help configuring my RouterBOARD as a wireless client?
Replies: 27
Views: 7335

Re: Help configuring my RoauterBOARD as a wireless client?

If i understand correctly, you just want to use wireless connection instead or wire on your PC without wireless card. So the best way is to do a simple bridge wired ports with wireless one. Create the bridge or use existing if you have factory setiings: interface bridge add name=bridge1 Add all port...
by fxx
Tue Nov 20, 2012 1:48 pm
Forum: General
Topic: Problem process trunk with untagged VLAN
Replies: 20
Views: 2804

Problem process trunk with untagged VLAN

I would like to create a backbone with two VLANs: MGMT (1 - default, no tag) and USERS (2, tagged). The main idea is to make a secure and easy expansible network. MGMT is separated from users traffic with no user access to management and allows to add new device with default config and manage it ove...