MikroTik

gosha

Hi

My setup requires to place SIM cards over a long cable from a modem itself. I'd be glad to use LtAP mini LTE kit but need something to place the SIM cards far away. Can someone advice me any solution?

gosha

Hello

Running small ISP business and providing my clients Mikrotik for free. Since I have a houndreds routers, I would be glad to have some central management point, can someone advice any software for managing and monitoring multiple routers located in different networks ?

Thanks.

gosha

I don't remember which version was on that SXT LTE before, but downgrading to 6.42.2 and to bugfix did not resolved the problem...

gosha

Hi After last upgrade to 6.42.3 (tried bugfix too, 6.40.8) on SXT LTE I got the following problem - ppp interface address getting LAN local ip 192.168.88.1. PPP Server (6.40.2): /ppp profile 8 * name="default-encryption" use-mpls=default use-compression=default use-encryption=yes only-one=default ch...

gosha

So give Sob some sugar (Solved), then you will not get other answers

Already. But just now I have got another good answer )

gosha

I'll answer myself, probably because WinBox connects to MAC address if it cannot connect to IP address but not using telnet. So what about this one ? Don't let the name confuse you, it should support telnet as well. Would be good if it work as a MAC telnet client. Do not see the binary, will try to...

gosha

In that case, what is wrong about WinBox and another 'Tik? The sole reason why I wrote that "lecture" was that several people have suggested WinBox or another 'Tik as an answer and you accept none of these. because this is an answer to some another question. I've asked for MAC telnet application fo...

gosha

Any MAC telnet client must be in the same LAN like the Mikrotik to which it connects, as it needs to have L2 access. So if your goal is to find an application which can connect remotely, because you want to avoid driving to the site, such application cannot exist. Therefore, a pre-configured small ...

gosha

If you want Telnet https://en.wikipedia.org/wiki/Telnet then use any Telnet client. If you want MAC Telnet MikroTik RouterOS proprietary protocol https://wiki.mikrotik.com/wiki/MAC_access then use Winbox and type Mikrotik router MAC address https://en.wikipedia.org/wiki/MAC_address in "Connect To"....

gosha

If you need telnet - putty
if you need MAC telnet for Windows - Winbox

2018-05-21 19_43_09-Screenshot (31).png ‎- Photos.png

Again, Winbox is not telnet and has no telnet

gosha

Winbox

Winbox has no telnet

gosha

Just make sure (and this is super important) to use CHR Install file, not the X86 ISO. Only CHR supports virtual machines:
https://wiki.mikrotik.com/wiki/Manual:C ... stallation

I got OVF and imported the machine. Anyway, the problem was because the network is switched off by default

gosha

Glad to hear that the attackers are less clever than I've expected.

Not in all cases, unfortunately, some hijacked routers are inaccessible via mac-telnet...

gosha

I'd say that the simplest way is to just use regular VirtualBox or VMware Player installation. RouterOS works with both. But if your heart is set on portable mode... I'm not sure what's the advantage, I've found some portable VirtualBox and it says that it needs admin rights to install some service...

gosha

Don't have much experience with VirtualBox at all but in my case the portable installation is not able to bridge with host adapter. When I select bridge it shows no adapters in drop-down list below. I need a bridge because I need to use mac telnet from this RouterOS

gosha

Hi

What is the simplest way to run RouterOS on windows? Which hypervisor can be running in portable mode? I tried Virtualbox portable, but it failes to run, at least on one my Win 7 machine, Any advises?

Thanks,
D

gosha

Router is not something you will sell later. They even did not closed the hole they used to get in.

gosha

Putty is good on windows

putty is not MAC telnet client. e.g. putty is unable to connect ROS using MAC address

gosha

Seems that jabberd found the way. Is is possible to use the same exploit, but hijackers limited the IP's user can log in, so it is needed to connect to hijacked router via MAC telnet, currently I',m trying to find the MAC telnet tool for windows...

gosha

Anyone knows any MAC telnet client for Windows? Very difficult to find because most google results pont to telnet client for MAC OS )

gosha

Have you tried the trick with the LCD screen?; I had success with it at a customer site once

I'm 250km from my main problem

Seems that I have backup from all hijacked routers, but have no access to all.

gosha

Do you have Telegram/Jabber/Twitter to directly contact me?

Does this forum support personal messages? I have the telegram account, yes.

gosha

Yes, I tried with clear vulnerable router, this version is working and shows the admin password but not on the hijacked routers. Seems that they did something to close this exploit... Is 8291 port open at the hijacked devices? Yes, it's open. Winbox tells login incorrect when trying to connect

gosha

Yes, I tried with clear vulnerable router, this version is working and shows the admin password but not on the hijacked routers. Seems that they did something to close this exploit...

gosha

It's hard to tell if it's the same version. If you tried that prerelease.7z contents, then there can be some restriction in the firewall rules or in the services. Btw, there's no need to specify 8291 port: RS tries to use HTTP on these ports. It is latest needed version I think because the needed e...

gosha

Yes, I got this 2.60 Beta. Entered IPs, started scan (added port 8291 also), each router listed twice, detected ROS version, total results found 7, good results - 0. In the lines with port numbers 8291 is written status Can't load main page. When trying to connect from winbox it still reports incorr...

gosha

Both winbox and web are open, but all passwords are changed or locked. There's a tool called Router Scan, which recently got the winbox exploit implemented. I think, you'd give it a try. Probably, this tool was used by someone to hijack your devices. And if RouterOS versions aren't updated now, you...

gosha

some VPN works with previous passwords. which other services should I try? Are there open winbox/web services at these devices? For example, if there the winbox service was open before, and after the hijacking it's remaining open, you've got a chance to get the device back if there's a vulnerable R...

gosha

Are they accessible in any way? I mean any open services there. some VPN works with previous passwords. which other services should I try? If these routers have an lcd screen and if its not locked and you have physical access, you can maybe restore a previously saved configuration via the lcd scree...

gosha

No, I lost access to about 10 routers, all there routers had a vulnerable versions, like described here viewtopic.php?f=2&t=132368

All routers that was backuped we already restored back with reset, but few routers is little bit difficult to restore...

gosha

What about re-hijacking this ?

gosha

Hello!

I have 5-7 routers that was hijacked and I lost access to it. There routers was never backuped and have pretty big configuration. Is there a way to restore it's configuration ?

Thanks,
D.

gosha

I had a problems with some devices like Canon printers when lease time was set to 15 min. My advise not to use shorter than 30 minutes time.

gosha

Can I downgrade in case if firmware was upgraded to 6.41? Which previous version to choose?

gosha

After upgrading smoothly SSTP VPN is working fine but there is no route to internal LAN. Until this upgrade everything was running OK, is there any issue or extra configuration to be done with SSTP interface? I have the same problem but not only SSTP affected, PPtP is not working too. Even more str...

gosha

I've used previously RB260 switches and was satisfied. My 2 CSS106-5G-1S is a 2 piece of shit, really. I have to restart 5 times to get it working, after upgrading to 2.6 I found that one was downgraded, second does not answers at all, only after reset, after that the first has stopped working. Is i...

gosha

Hello In my few CRS212 switches does not works autonegotiations on fiber links if other side is not CRS212. Even with RB260 converter/switch it is not working. It works only if I will disable autonegotiation and choose the speed and duplex. Why??? SFPs are Optic's SFP-S-3553LC20D Second problem I ha...

gosha

Got a problems with new version of switches One CSS106-1G-1S currently unable to upgrade, after the upgrade switch starts to loose packes and replys 4 tiems to ping after restart and all. web does not answer, ping does not answer. Same problems was with second CSS106-1G-4P-1S but after few tries it ...

gosha

Rdp Tool is not works at all because the logs do not contains the src ip address in case if strong security is used

gosha

Hi Is there a way to block RDP password scanners ? Seems that RDP server do not drop the session and there is no new connection every new password, so there not possible to do same way as ssh, limit 3-5 new tcp sesstions per 2-3 minutes and all. RDP server do not logs the source IP on audit failures...

gosha

Hello!

Problem is located, there was an error in design, the vlans was created on slave interface on routeros. Everything is ok now. Thank you!

gosha

Hello! Very confused with 802.1q VLANs. I have RB260 with SFP port connected to trunk (RouterOS device with VLAN subinterfaces added to the SFP interface connected with RB260). What config I have to use If I need 3 access ports on ethernets of RB260 and trunk on SFP port. Firmware 1.17. I found a fe...

gosha

Is there any new regarding the support of roaming in the way Ruckus do is (virtual ap in their terminology)?

gosha

Handlink make a nice printer that does exactly that. http://www.handlink.com.tw or http://www.campbell.co.nz/index.php?main_page=product_info&cPath=9&products_id=696 We sell them here and they are easy to set up and use and have 3 buttons that can be paired with three different profiles. 1 Hr, 1 Da...

gosha

Hi! Looking for a simple way to generate the wifi vouchers for a mikrotik user manager. Please advice any software that can generate a voucher by request and add it to user manager WITH ability to fill real user data and comment field or at least a comment field. The reason for this is that we have ...

gosha

Hi! Looking for a simple way to generate the wifi vouchers for a mikrotik user manager. Please advice any software that can generate a voucher by request and add it to user manager WITH ability to fill real user data and comment field or at least a comment field. The reason for this is that we have ...

gosha

unit is password protected and log do not shows anything. but unit was restarted by a client before I went there so probably my support output I sent to mikrotik's support will show nothing...

gosha

U want to say that somehow IP address from WAN port has been removed?

exactly.

gosha

Same problem got today with ROS 6.7

gosha

AFAK unify works on java

gosha

Anybody tried running a metarouter instance using debian and a UBNT Unifi controller on that?

Would a RB 450G handle that? If not what equipment would I need?

Rick

Hello, sjwrick, had you any luck on this task?

gosha

UBNT has released a software controller for Windows, Mac and Linux (in beta). They currently provide a .deb package http://wiki.ubnt.com/UniFi#Linux . Would be great to run in a VM inside Mikrotik router. Advice a simplest way to do it please?

gosha

My fried has replaced a pair of Cisco 1841 with pair or CCR1036 and users complains that the speed of interaction of their database applications has lowered. Cisco was connected with IPSEC tunnel interface Tunnel1 ip address 10.10.10.2 255.255.255.252 ip mtu 1400 ip tcp adjust-mss 1360 tunnel source...

gosha

CelticComms, but the mac address table is almost a term used when talking about a switches... I was asking because of new 24port coud core switch router has been released and it's cost seems to be very good and I want to try it instead switch+router pair. And there is a few questions I wanted to kno...

gosha

How many switches in CRS125-24G-1S-RM?
Could VLANs be managed in a switch manner with "/interface ethernet switch" commands?

gosha

I think you're looking for...

[<redacted>@STUFF-NETWORK-WAP] > /interface bridge host print

Based on your post I found what I'm looking for, this is

/interface ethernet switch host print

thank you!

gosha

Look in:

/IP Arp

and you should see the entries.

ARP table is an ARP table, I'm asking about MAC address table

gosha

That is quite simple. Create a bridge with port 1 and 3. Create a VLAN on the bridge with the desired VLAN id to be linked to ether2 and put the vlan interface together with ether2 into a dedicated bridge. I did not made a tests but I think this will eat CPU and will complicate the config because I...

gosha

Hi!

What kind of tunnel with encryption is better to choose to connect 2 or more branches for all kinds of traffic: file sharing, RDP, database. Traffic should be routed, not bridged.

gosha

Hi,

How do I see the MAC address table if I need to find which MACs on behind which ports?

gosha

Hi Before buying my first cloud router switch I'd like to ask a community how to deal with VLANs. I believe that dispatching VLANs with bridge would not be a good idea, isn't it? What is the better than bridge way to receive, for example, 10 vlans in a trunk port 1, 1 vlan assign as native (PVID) to...

gosha

Hello! Got a strange situation - ip has been lost from a two different routers, RouterOS 6.5. Client has called and said that no internet connection, after investigation I've found that no IP address on wan interface. Same issue was already twice on different router -2011UAS-2HnD and 951G-2HnD. Anyo...

gosha

Uldis,

I will check, but it would be great to have a solution for some common default settings

gosha

I tried with windows 7, windows xp default settings and Zyxel wifi voip phone

if a signal from a first AP still available but with low level, client will not switch to another AP with higher level.

gosha

It's not so simple, if I go from one area to another client will not switch to better network if first is still exist, so voip client will disconnect the call

gosha

Hello,

I need to serve wifi ip phones exactly as pictured on the first post. Which solution can help with it? Client should switch from one AP to another if another signal becomes better. How to do it? I read the forum but still do not understand can I make it with Mikrotik or not?

gosha

I see in wireshark "fc a5 81 05" but rule chain=forward action=log protocol=udp src-address-list=DNS_servers out-interface=WAN src-port=53 content=\FC\A5 log-prefix="" does not hit... why? full captured packet follows 000400010006000f1f69b4c60000080045000040643f00004011cbb55c3e634fb221d9090035c6c600...

gosha

Am I only one who needs to use filter rule by non text content???

gosha

Hello!

What to write into content field in a filter rule properties in case if I want to filter packets that contains two bytes 0xFCA5?

gosha

someone just attack my DNS servers from a botnet with the requests that my servers should reject, like SOA ripe.net, google.com and so on, I want to block them

gosha

Hi!

I need to write a filter rule that will add an IP address to list by content, how to filter DNS response "REFUSE" by content? What I have to write as a content string in a filter rule?

Thanks,
G.

gosha

This is really good solution - disable the wireless...

Was any feedback or promises published from a MT side?

gosha

Hi Is there any solution for RB751U-2HnD wireless problems? I've sold about 10 units and at least 5 users complains about they wireless clients are disconnected often, more than one time per day. Every router with this "effect" runs with latest version of ROS, every setup use all default values and ...

gosha

what is the best choice - omni antennas on different channels or sector antennas?
where to find a 433 in case and with antennas?

thanks.

gosha

Hi again

how do you think, some 433 RB with 2 radios and 2 omni antennas will be enough for 40 clients with internet (shaped up to 2mbit about 20mbit toatal with voip) on a 5Ghz band?

gosha

Mahnet, which RB do you use to serve 20-30 clients per AP, on which band and does they use VoIP?

gosha

Hello Gurus, Earlier I was thinking that it is not real to build a wifi network on 60 client's nodes, today I read the article http://www.tomshardware.com/reviews/wi-fi-performance,2985.html where was described a test of an AP with a noise generated by 60 laptops and also was a test with 60 clients ...

gosha

Hello Dear Mikrotik Gurus! I got some problem which is not understandable by me, need some advices where to look more. I have some VoIP equipment in my network and now one strange problem follows me: during the SIP conversation between voip servers and cisco gateway not all packet sent from cisco su...

gosha

every scenario I found myself requires 1 child queue per client, it's nightmare I think... Please, need guru advice.

gosha

CPE per client. It's a trade center, client will connect to CPE - PC, card's terminal and voip telephone

gosha

20 clients per AP is normal? I think to use 5ghz radios and also give CPEs to clients for free rent

gosha

Hello! Would like to ask a community for help me to select s traffic shaping scheme. I have a central router which is connected to the next ISP (currently it is RB1100) where I would like to setup a shaping. I have read few articles and lot of manuals but still confused and can't select a shaping me...

gosha

So is there a good way to connect 50-60 clients, each can occupy up to 2-3 mpbs, not same time of course, common bandwidth not more than 30 mbps, with Mikrotik radios? Or it's an utopical scenario and I'll need just to make a wired network?

gosha

Hi, I have some open space (trade center), about 60 m x 100 m and I want to connect all traders (approx. 50-60 clients) via wifi and give them up to 2-5 mpbs of download. My experience with standard 11b and 11g networks tells me that it's impossible. Otherwise I heard that with nstreme or tdma it is...

gosha

You can use /special-login for it.

gosha

Guys, I can't use 0x8, 0x00000008 nor 8, how to pass Hybryd mode to client??????

gosha

Thanks a lot for your answer!

RFC 1533 tells that 0x8 should be a Hybrid mode. Winbox does not allows to use 0x8, when I'm trying to use 0x00000008 then client receive B-Node (0x1) instead of H-Node.

What to do?

Thanks in advance!

gosha

Hello! I have a big problem with passing DHCP option 46 DhcpNodeType to windows clients. In case if I would like to set it to 1 (Broadcast) this works well, but when I wanna make Hybrid (8), winbox shows node type unkonown in ipconfig's output and in registry I see value 38. This was happened with a...

gosha

Tried 4 times with different computers and even different internet providers

gosha

The .zip of netinstall 3.9 is damaged, please fix it.

gosha

Can't install mikrotik to CF via USB->IDE adapter. Netinstall writes "failed" and does nothing. What to do?

gosha

squid proxy can be configured to "masq" or not to masq the client's IP. I tried to use Mikrotik ROS proxy and websites see client's IP...

gosha

How can I a support person to check my configuration? I bought new ROS last weekend so can I ask for a support?

gosha

3,5 - 5mbps
10% - 30% of CPU
109 mb free RAM

sometimes (few times per minute) I see 100% of CPU.

but some clients said that they fill that new channel is slower... this is why I think about new hardware.

gosha

Hi! I got some new channel which is 10 times faster than old and now want to ask about minimum hardware requirements. Let me describe the environment: 100 mbps local traffic, 5 mbps international traffic 25-35 NATed clients, 5-7 clients with real addresses all clients connected via 802.1q vlans I us...

gosha

Hi,

How to make proxy not transparent?

Thanks,
G.

gosha

Am I alone with that problem?

gosha

Hi,

Fresh install of MT, can't see all needed data in winbox's window. When I'm trying to look for bound dhcp leases I can't see computer name, MAC address and so on in a leases window of winbox. Console shows everything well. Look in attachment.

Any ideas?

gosha

Hi! Need to assign a second IP address to the server from another ISP. I have MT connected to 2 providers with the following setup: /ip address add address=30.30.30.1/30 interface=WAN1 /ip address add address=40.40.40.2/28 interface=WAN2 /ip address add address=30.30.10.1/24 interface=LAN /ip route ...

gosha

That was a very stupid mistake and I'm ashamed... I had checked that the router can access new gateway but after that I've reconfigured the VLAN configuration and forgot to change PVID on a switch port router connected in. All the time I made my experiments with the policy routing the MT router and ...

gosha

I found a mistake, please excuse me for bothering.

gosha

I made /ip route rule add src-address=160.160.115.0/26 action=lookup table=newGW /ip route add gateway 160.160.16.33 routing-mark=newGW also there is: /ip address add=160.160.115.1/26 interface=testNET /ip address add=160.160.16.33/25 interface=newISP But the address 160.160.115.1 is still can not b...

gosha

I read this document but this did not helps me a lot. When and for which condition I have to place a routing marks? Firewall->Mangle, add roule, based on src addres and add rule based on dst address, actions=mark_routing? mark_routing=new-gw then add def. gw with same routing mark? After that I have...

gosha

This is a different interfaces. What about non-NATed networks? Simpli the picture should be like this: Router connected to internet with 2 gateways: 60.60.44.93 (main) and 160.160.16.33 (new). Behind the firewall is (for example 4 networks): 192.168.0.0/24 10.10.14.0/24 60.60.47.0/25 160.160.115.0/2...

gosha

Thanks. But I don't need to do load balancing, i need to specify which networks should be routed thru new gateway.

gosha

Hi again! I'm urgently need an assistance! Where also I can ask for support? (I have a lot of Mikrotik licenses, is support included there?)

Thanks.

gosha

Your question is no clear and very common. Please specify what exactly you want to do and someone will answer.

gosha

Hi, I have a MT router and need to add second default gateway. The current configuration is following: router ip - 60.60.44.94/30, def gw. 60.60.44.93 behind the router I have one /25 network and lot of RFC1918 NATed networks. Now I got new fiber from another ISP and want to switch SOME of networks ...

gosha

Is it possible to use L2TP server with IPSEC (certificate or pre-shared keys)?

gosha

Thanks, but there is IPSec without L2TP and IPSec/L2TP but I need L2TP wothout IPSEC

gosha

Urgently need help! One of my clients is on Dubai now and he need to connect to his office. PPtP does not works - error 619 (NAT router or firewall blocks backward connection). I tried to configure L2TP by phone but seems that Vista has a difference in configuration. I have no Vista here to try, can...

gosha

What about client on Windows Vista?

gosha

Hi all again, Let's discuss the best way to setup a traffic shaper for a typical sub-provider's router, example router: interfaces: WAN LAN vlan1 vlan2 vlan3 vlan4 vlan5 ... servers WAN, vlan1, valn2 & servers - real ip networks. vlan3, vlan4 & vlan5 - src-nat to some real address, like: chain=srcna...

gosha

Hi,

How to see full list of new features in 3.0 compared to 2.9?

gosha

The answer to my question was in manual :) There was just need to disable IPSec in registry : HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Rasman\Parameters: Value Name: ProhibitIpSec Data Type: REG_DWORD Value: 1 And everything started work. Will try with unfriendly NAT network tomorrow. Th...

gosha

Openvpn can not be installed on Mikrotik...

gosha

It's really does not differ much on server side. But my XP Pro give me the choice - PPtP or L2TP with IPSec. When I'm trying to establish a connection it writes that this connection requires a certificate which is not found...

gosha

Hi,

Is there a way to pass to windows pptp or l2tp cleint a command for adding routes to some additional networks?

gosha

Thanks for the answer!

Is there any howtos about configuring windows to be a l2tp client?

gosha

Hi again. The problem is still did not resolved. I understand that my English is not very good so I'll try to say simpler. I have a Mikrotik router with dhcp server. I have a lot of such routers but all other works fine. This router should give DhcpNodeType (or netbios node type, option 46) to clien...

gosha

Hi!

Is there a way to make a VPN server on mikrotik, like PPtP but to make it so it will be usable from any client, from behind NAT that does not supports VPN pass-thru and so on?

gosha

Hi,

I use Miktorik as a DHCP server and it gives an incorrect option value to clients. Clients - Windows XP, option 46 (DhcpNodeType), value - 1 or 8, client received 31 or 38? How it is possible. Version 2.9.45, upgrade to 2.9.46 gives nothing. Need help!

gosha

Open in notepad %appdata%\Mikrotik\winbox.cfg this file will contain the information you want.

Thanks! This is exactly what I wanted to know!

gosha

Hi! I have a crashed system where was stored (rememberd in Mikrotik) a few passwords for few routers. There passwords is forgotten and not stored anywhere else. Where Mikrotik stores the passwords and how to get them from another hdd or how to transfer them into current WinBOX installation? Thanks i...

gosha

Hi,

A strange issue, I have a log of VPN servers and found one strange issue, from behind Mikrotik's NAT I can easyly access all Mikrotik VPN's (PPtP) but no LEAF (http://leaf.sourceforge.net) implementation of PPtP, it habgs with a timeout after password verification. What it could be?

gosha

Hi!

How to limit an access to graphs with passwords, not only by IP?

Thanks,
Gosha.

gosha

In this case this will not know about "parent bandwidth" - 5/5 (parent=none), these queues on different interfaces and should not work, or am I wrong?

gosha

Thanks for the answer! I made a scheme like this but this does not works. What queues I have to use? Maybe we can write a sample small queue script? For example: WAN ip is 60.70.80.1/30 vlan1 ip is 192.168.0.1/24 (masquaraded) vlan2 ip is 192.168.1.1/24 (masqueraded) vlan3 ip is 60.70.90.1/25 (real) ?

gosha

Hi! I have now some trouble to setup bandwith limiting so, that user have the bandwidth more than they limited in case of empty channel. Let me explain dataily: Interfaces: WAN, LAN, vlan1, vlan2, vlan3 (vlans of LAN). vlan1 limit - 1MBit (up/down) vlan2 limit - 2MBit vlan3 limit - 3MBit WAN possibi...

gosha

When we try to build IPSEC tunnel between two network behind Mikrotik router, Installed SA where 'direction=out' is missing on the one side while remote side has both Installed SAs for in and out. Packets can travel in one direction with no problem, on the way in opposite direction they are dropped ...

gosha

Anyone knows any about multicast? I think soon it will be very requested fature, I'm thinking to move out of Mikrotik in case if it will not support the until spring 2006.

Who knwos any alternative?

gosha

And which MT version will support them?

gosha

Is there any PCI versions available too? Who knows something about the prices?

gosha

Hi!

Now is a lot of internet radion stations and also a lof of mature ISPs wants to start broadcasting a TV programs over internet. Is there a planes to support multicasting in Mikrotik soon?

gosha

Hi!

At the spring 2006 many ISP will provide IPTV service. I have a log of mikrotiks installed on my networks but I'm not shure does Mikrotik supports multicast packets pass thru? If not, is there any planes to support it?

gosha

yes, i can use linux for it but I don't want to place another comp for it. Is it possible to do it with linux or not?

gosha

Hi!

Is is possible to authorize users in MT based on standart SSH's key exchange, like in Linux's SSH supports authorized_keys?

gosha

Hi!

I need to make a PBX's CDR log. Is it possible to simply write everything that came from Serial port to some text file on HDD?

gosha

Hi! Maybe this is just a question, maybe feature request. It would be great to have a VPN solution for mobile users that could work from any place: from NATed networks, from highly firewalled networks and so on. PPtP does not allows to work from classical NAT (without VPN natting modules). IPSec see...

gosha

I had the same situation, but found that I have an interface with the name "all", everything goes well after renaming this interface and rewriting filter rules.

gosha

Yes!

WCCP would be great!

gosha

Regular price: $220.00 for S518 ADSL Card

Too expensive. Any other supported?

gosha

Hi!

Tried few Intel and 3Com PCI ADSL cards - none recognized. Which internal ADSL interfaces supported?

gosha

Hi, Need to make a few VPN tunnels to connect head brach with 3-5 offices, all tunnel will have about 5mbps of traffic and 50 computers with database access and file sharing. The necscreen hardware, that adviced fot this configuration will cost about 4000 eur. Also I found some Conrtivity that writt...

gosha

There is a problem with Mikrotik's IPSec realization (or I can not understand somewhat). I'v made an IPSec configuration to acept connections from dynamic IP addresses and it works, but what to di with the filters? I mean I can't open forwarding for all possible client's ips because I just don;t kno...

gosha

I mean that Mikrotik and Windows's client has build the tunnel, router has created th dynamic policy, but the forward chain of the firewall has a default policy - DROP. I cant add the rules to the firewall that allow communication between IPSec roadwarior because his adress is unknown. Is there a po...

gosha

Thanks.

And also what to do, if default forward policy is DROP? How to allow encrypted packets to pass to/out of the LAN?

gosha

Hi all.

Now I already know how to configure Windows clients to work with Mikrotik's IPSec VPN. Is there a possibility to work with client's with dynamic IP adresses?

Thanks in advance,
Dmitri.

gosha

Hi,

Link http://www.115.ru/ipsec/ipsec-mikrotik-windows2000.htm said that its temporary unavailable. Is there any other locations, where is possible to view this doc?

Search found 149 matches