MikroTik

ParisDragon

We have had to go through several brands of cables with mixed results. We defintely discovered shielded (FTP) is important. Do you guys have a favorite supplier/ brand / model of outdoor cable that has stood the test of time on tall towers (say 250ft).

ParisDragon

We have had some issues where a cable installed will work for some time and then start having issues (rebooting the box etc.). I have read all over and some people saying the way you pull it could put stress on the inside conductors thinning them and making them more likely to have issues when the w...

ParisDragon

ParisDragon, 'interface=all' is the most recommended configuration for the interface in simple queue.

Ah very good, I guess maybe some bug in the past made that guy not use it. I am switching them all to all, thanks

ParisDragon

After some more digging it turns out what is different is now if I select any interface besides ALL for the simple queue it only shows Upload statistics and speed. When I change the interface to ALL it seems to start working again. I am not sure if this is by design now or what. Anyone see this prob...

ParisDragon

MAC, IP, GATEWAY, NETMASK is correct in MT router's configuration! I'm using MT router for about three years, I'm not beginner in network configurations. I never had such problem with it. It worked fine until one day... I'm confused. Did you verify ethernet port your using for WAN can talk to your ...

ParisDragon

I had upgraded about 7 of our wireless routers from 2.9.28 to 2.9.30 and all seems to work find except occasional performance issues occuring which didnt before. After some digging I noticed something odd, the download statistics in the queues are emtpy, the packet count and the current speed for do...

ParisDragon

Thanks for answers, guys. As I just said - if I plug LAN cable in my laptop (MAC addres is same with router's MAC address, IP addresses assigns by DHCP), internet works fine. ISP 100% has put some kind of filters or something like that. I accent that ICS (internet connection sharing) is not working...

ParisDragon

I am grateful that the mac address is used to pinpoint the OID of a remote radio, what I dont understand is why the UID for signal strength ends with different numbers, sometimes its always .4, update the OS and it might become .1835 on one box but remain .4 on another, which breaks monitoring scrip...

ParisDragon

I am grateful that the mac address is used to pinpoint the OID of a remote radio, what I dont understand is why the UID for signal strength ends with different numbers, sometimes its always .4, update the OS and it might become .1835 on one box but remain .4 on another, which breaks monitoring scrip...

ParisDragon

Do you mean this ? http://wiki.mikrotik.com/wiki/PCQ_Examples It would be if you didnt have to use IPs or subnets to define them, for example, grouped would be using a firewall address list or a group of IPs defined somewhere (ex. 128k users, 512k users) and inside the group was the IPs of the clie...

ParisDragon

ParisDragon , you can use PCQ in the another way too. e.g. mark clients and specify certain bandwidth 2M/2M. Of course you should have 8M line, if you want 4 users to get 2M/2M. Let's hope Mikrotik takes our suggestions of Bandwidth queue groups where each member of the group gets the bandwidth ass...

ParisDragon

if you have 1100 queues with the same speed limit, it just wastes your resources. just make one PCQ queue (see manual) that will limit all your users each with the same limit (you will replace 1100 queues with 1-2) The way I understand PCQ queues it shares that bandwidth equally among all users, in...

ParisDragon

Yes I have, long as I name the interfaces to what they were on the new box, works fine. However I am not using the routing-test package for OSPF.

ParisDragon

as far as i know, it already works that way. by default, routeros finds all devices and enables them (after installation). yes, you could assign the names randomly, to any interface, and then just plug the cable in the appropriate port, but some people would not be happy about this random thing. we...

ParisDragon

different hardware cant import config, only if Identical in everyway. This is why you do an Export file Full-Config from the main telnet prompt. This file is a script, which can easily be put onto other hardware, long as OS versions match or is newer (in most cases). This even lets you take a config...

ParisDragon

Right now the only SNMP I find missing in 2.9.27 is I cant pull the signal strengths and trasmits speeds from an Nstreme Dual Link. I have written a procedure to log the levels into a file, but then I must download it, convert it to the proper format, import it etc., big pain when all my half duplex...

ParisDragon

I had an idea to see if a script could telnet into something and issue commands based on text returned so I could customer right my SMTP authentication routing, with little luck so far. I dont see the ability to telnet in scripting.

ParisDragon

Ok being dumb ir somethig, but all you are doing is a dst-nat + src-nat??? Correct... Then just setup auth on the smtp server for the src ip of the mt interface.. That way you just give your customer the details for login.. Real world IPs are valuable, I would need to waste 1 extra IP per box or AL...

ParisDragon

I have successfully setup SNMP to pull signals from registrered wireless users and signal radio links, however I can not find the OID to use or how to discover it for the NSTREME Dual Link radio setup, I can view the Signals in Winbox but when I try /int wir reg pr oid is only shows the 2 radios, wh...

ParisDragon

Well you can use the Tool, Graphing and give the IP of the machine doing the java script access to ALL queues, if the user has a queue, he will start graphing once you add this. Now another way is to enable SNMP and use a program like MRTG (free, easy to find on the web) to pull the data to a folder...

ParisDragon

Please Allow Multiple src or dst address lists when matching http://forum.mikrotik.com//viewtopic.php?p=43609#43609 Please Add SMTP Authentication and Custom Port Support http://forum.mikrotik.com//viewtopic.php?t=8616 Ability to have a script FTP to a server and send a file (example your router bac...

ParisDragon

When setting a rule to use source/destination address lists it would be helpful to be able to choose more than one, this would give you great flexibility. For example, you have several Class Cs that you know are mainly illegitimate traffic you wish to block outbound traffic to it, so you put in: add...

ParisDragon

I just used Perl to write a script that runs each night and logs into the router to create a backup file and then it ftps the file off the router to the server runing the perl script to a specified directory. So yes it is possible to write a script that will ftp backups off the router. I am not sur...

ParisDragon

I have many scripts that let me email my current config to an email address, is it not possible to modify this script to FTP the config to an ftp server for backup instead?

ParisDragon

Please i need help i need to block msn messenger in mikrotik i tried to block port 1863 but still opening if there is a way please advise thanks in advance To block MSN I made a mangle rule to identify the new connection to the MSN port, then blocking that connection mark in the firewall, worked pe...

ParisDragon

What Queue type are you currently trying?

Are you using WDS or Nstreme for the backhaul?

ParisDragon

Yes I had, but once again all email coming from NATed customers inside use that address going outbound and they get converted, so the solution doesnt work for what I need.

ParisDragon

You could configure a P2P rule to shape all P2P share one chunk of bandwidth for it equally across all IPs, for example if you set this limit to 512k and 4 users are pumping P2P, they get 128k each, HOWEVER if one of those users is only allowed 64k in another queue they cant exceed their total allow...

ParisDragon

Unless I am missing something you can not use SMTP authentication or alternate port numbers to send to mail servers. We enforce SMTP authentication to prevent spammers from using our mail servers without an account, even though we have relay disabled. The reason is most spyware doesnt utilize SMTP a...

ParisDragon

0 chain=prerouting src-address=172.18.0.0/16 action=mark-routing new-routing-mark=ProNet passthrough=yes 1 chain=prerouting action=mark-routing new-routing-mark=pskcom passthrough=yes the first thing jumping out at me is you have the mangle set to passthrough once it matches 172.18.0.0/16 and then ...

ParisDragon

I use a simple rule, in this example my main (ISP) Mail server is 1.1.1.1 and a customer has a mail server someone else hosts at 2.2.2.2/32 and another customer at 3.3.3.3/32. This rule blocks an destination TCP port 25 that is not destined for the IP addresses listed in the address List SMTP-addr. ...

ParisDragon

When making a firewall rule to block IPs or meet conditions based on an address list it would be nice to be able to add more than one list. For example: You have a static list of IPs to block outbound connections to known spyware sites, inside the list is an entire Class B. Inside this Class B is a ...

Search found 32 matches

What CAT5 cable do you buy and use on towers to keep 100BT

Question about pulling CAT5 cable up towers

2.9.30 Break Download Queues and statistics?

OIDs shifting

SNMP OID

SNMP Wireless Signals for NSTREME Dual Links

Please Consider adding these features

Please Allow Multiple src or dst address lists when matching

FTP Backups possible?

Re: Block MSN Messenger

Please Add SMTP Authentication and Custom Port Support

Re: /ip route rule Policy Routing

Firewall Rules Utilizing IP Lists suggestion