Community discussions

MUM Europe 2020

Search found 28 matches

by ochaconm
Wed Apr 25, 2018 6:04 pm
Forum: Beginner Basics
Topic: force some client to wan2
Replies: 5
Views: 910

Re: force some client to wan2

You could use routing marks (mangle).

You can see some info in:
https://wiki.mikrotik.com/wiki/Policy_Base_Routing
by ochaconm
Tue Apr 24, 2018 3:49 pm
Forum: Beginner Basics
Topic: Remote sites on same Net
Replies: 5
Views: 551

Re: Remote sites on same Net

You can create tunnels even using a low-cost "HAP Lite".

I suggest you using EoIP (Ethernet over IP):
https://wiki.mikrotik.com/wiki/Manual:Interface/EoIP
by ochaconm
Tue Apr 24, 2018 3:33 pm
Forum: Beginner Basics
Topic: VPN clients cannot access router for DNS [SOLVED]
Replies: 4
Views: 579

Re: VPN clients cannot access router for DNS [SOLVED]

Post your actual firewall configuration /ip firewall export . The following could work, however, I don't exactly know your current firewall configuration. #The firewall rules must be in the input chain port 53(TCP and UDP) #The interface(ether1) is your LAN /ip firewall filter add action=accept chai...
by ochaconm
Tue Apr 24, 2018 2:11 am
Forum: Beginner Basics
Topic: Mikrotik Hotspot in PPPoE Server
Replies: 1
Views: 360

Re: Mikrotik Hotspot in PPPoE Server

Hello, I just have an idea if I can have a PPPoE server with two IP Pool with the other pool will go to Hotspot page to login to have a access to the internet, while the other pool will have access to the internet without going through hotspot. Is it possible? Sorry for my bad English. First of all...
by ochaconm
Tue Apr 24, 2018 1:45 am
Forum: Beginner Basics
Topic: The Major PCQ Groups
Replies: 3
Views: 454

Re: The Major PCQ Groups

Additionally, I think that the terminology used in https://wiki.mikrotik.com/wiki/Manual:Q ... Q_Examples is not formal nor a standard (Maybe I'm wrong).
by ochaconm
Tue Apr 24, 2018 1:25 am
Forum: Beginner Basics
Topic: The Major PCQ Groups
Replies: 3
Views: 454

Re: The Major PCQ Groups

- Certain bandwidth equal distribution between users ISPs for example, at a given time they could have their links almost free, but they offer different plans(For instance 25$ for 20Mbps, 40$ For 40Mbps, etc.. also could include sharing levels). Therefore, ISPs want to control their traffic by grou...
by ochaconm
Tue Apr 24, 2018 12:55 am
Forum: Beginner Basics
Topic: Securing your router
Replies: 8
Views: 818

Re: Securing your router

Post your command to see if there is any error. An example to disable MAC-Server, MAC-Ping, and MAC Winbox on Ether1: [admin@GissellaLojano] > tool mac-server print Flags: X - disabled, * - default # INTERFACE 0 X* all 1 ether1 [admin@Mikrotik] > /tool mac-server set 1 disabled=yes [admin@Mikrotik] ...
by ochaconm
Tue Apr 24, 2018 12:38 am
Forum: Beginner Basics
Topic: How to force the built-in proxy server/hotspot to use 2nd wan? [SOLVED]
Replies: 3
Views: 630

Re: How to force the built-in proxy server/hotspot to use 2nd wan? [SOLVED]

Righty now a have a setup with 2 wans and failover and i can force any ip i want on my network to use the 2nd wan gateway using mark routing. But ill like to run the proxy server and hotspot but only using wan 2, not the primary wan. Possible solutions For hotspot: set the routing-mark to those pac...
by ochaconm
Tue Apr 24, 2018 12:12 am
Forum: Beginner Basics
Topic: 2 WAN same ip to 2 LAN help please
Replies: 17
Views: 1500

Re: 2 WAN same ip to 2 LAN help please

The Metarouter configuration shown should handle the problem admirably. My sole concern is this: Each Metarouter instance uses the same amount of resources as a stand-alone RouterOS installation. If you were doing this on an 2011 or even a hEX, I'd be less concerned. But a 750 is low-end and EOL, s...
by ochaconm
Mon Apr 23, 2018 10:17 pm
Forum: Beginner Basics
Topic: Disallow unknown logins from internet access
Replies: 8
Views: 872

Re: Disallow unknown logins from internet access

Changing the original ports to others will not prevent you from being exposed/hacked unless you also implement some kind of port scan firewall. Any "serious" hacker will easily find the open ports, even if you change them. My suggestion is, to connect through a VPN(Suggested IPSec, PPTP is vulnerabl...
by ochaconm
Mon Apr 23, 2018 10:06 pm
Forum: Beginner Basics
Topic: Help! Bandwidth Limit Per Interface
Replies: 4
Views: 512

Re: Help! Bandwidth Limit Per Interface

I suggest you reading about Queues https://wiki.mikrotik.com/wiki/Manual:Queue HTB(Queue tree) This a kind of Hierarchical bandwidth control and QoS. https://wiki.mikrotik.com/wiki/Manual:HTB Queues - PCQ(Divide traffic into substreams). You could apply this queue types to HTB entries or even to an ...
by ochaconm
Mon Apr 23, 2018 9:16 pm
Forum: Beginner Basics
Topic: 2 WAN same ip to 2 LAN help please
Replies: 17
Views: 1500

Re: 2 WAN same ip to 2 LAN help please

Hi, What I suggested(Using a MetaRouter) should work. Take into account that a MetaRouter is just a virtual router inside the main router. To configure the meta-router you can connect an ethernet cable to the assigned interface, Winbox will detect two routers in the same interface. I will include a ...
by ochaconm
Fri Apr 20, 2018 4:30 pm
Forum: Beginner Basics
Topic: 2 WAN same ip to 2 LAN help please
Replies: 17
Views: 1500

Re: 2 WAN same ip to 2 LAN help please

My Suggestion is to create a MetaRouter, by doing this you will be able to virtually have two separate routers. Therefore, you could connect the first WAN to one MetaRouter interface and the second to WAN to one main router interface. For more information about MetaRouter visit: https://wiki.mikroti...
by ochaconm
Fri Feb 23, 2018 9:55 pm
Forum: Wireless Networking
Topic: mAP Lite as a standard bridged AP?
Replies: 1
Views: 479

Re: mAP Lite as a standard bridged AP?

Maybe you have some firewall rule (Layer 3) blocking your TCP input connection. There are many other problems that could lead to this issue, however, if you can directly connect your Mikrotik device to your computer then you could try to connect using Winbox on layer2, avoiding the layer3 firewall. ...
by ochaconm
Fri Feb 23, 2018 12:40 am
Forum: Scripting
Topic: Help me please, I'm going crazy whit the API!
Replies: 5
Views: 661

Re: Help me please, I'm going crazy whit the API!

I forget to mention that I'm using the API connection class from:

https://github.com/BenMenking/routeros- ... .class.php

You can also get some examples in this (BenMenking) GitHub.

It appears that you are using the same library, but just in case of some problem.

Greetings.
by ochaconm
Fri Feb 23, 2018 12:35 am
Forum: Scripting
Topic: Help me please, I'm going crazy whit the API!
Replies: 5
Views: 661

Re: Help me please, I'm going crazy whit the API!

In the line $ API-> write ('= .id =', 3) , you should not send the parameter "3", insted of that you have to first get the internal ".id" (also using the API). A way to get the ".id", maybe not the optimal, is as follows: //Get the DHCP-CLIENT details that match with interface wlan1 $arrResult = $AP...
by ochaconm
Thu Feb 22, 2018 4:43 am
Forum: Scripting
Topic: Help me please, I'm going crazy whit the API!
Replies: 5
Views: 661

Re: Help me please, I'm going crazy whit the API!

If you haven't found the solution yet, maybe this could help you. You have to note that the item IDs on the API do not work exactly in the same way as in the console. For a better explanation see: https://wiki.mikrotik.com/wiki/API_command_notes#API_attributes Try also dumping (var_dump($variable)) ...
by ochaconm
Thu Feb 22, 2018 4:00 am
Forum: Beginner Basics
Topic: need help to link outdoor cameras as ptmp need help
Replies: 1
Views: 304

Re: need help to link outdoor cameras as ptmp need help

You said DVR, but rather than that, you need a Network Video Recorder(NVR) device for recording IP cameras streaming. Generally, IP cameras work either on switched or routed topologies, then I think you won't experience any problem. However, I suggest you looking at the camera and NVR specifications...
by ochaconm
Thu Feb 22, 2018 3:46 am
Forum: Beginner Basics
Topic: same IP on 2 interfaces ? [SOLVED]
Replies: 2
Views: 501

Re: same IP on 2 interfaces ? [SOLVED]

If you want to keep the Nano5 Antena and the PC proxy in the same subnet you can bridge the ether1 and ether4 interfaces and just set an IP address to the bridge, then you will have something like a two port switch: /interface bridge add name=br1 /interface bridge port add bridge=br1 interface=ether...
by ochaconm
Fri Feb 16, 2018 5:05 pm
Forum: Beginner Basics
Topic: What hardware to use at home
Replies: 6
Views: 903

Re: What hardware to use at home

If you want to learn more about Mikrotik technologies and play around with complex network topologies I would also suggest using GNS3 (a free network simulator tool) and CHR (There is also a free, limited version). You can simulate almost anything, and also use heterogeneous technologies (Other netw...
by ochaconm
Wed Feb 07, 2018 11:31 pm
Forum: Forwarding Protocols
Topic: vlan's over IP
Replies: 1
Views: 448

Re: vlan's over IP

It would be convenient to include a diagram to identify where the new router will be and also understand what you really want to achieve.
Also, clarify the idea, It seems that you are confused between VLAN and VPN.

Greetings.
by ochaconm
Mon Feb 05, 2018 1:41 am
Forum: Scripting
Topic: Using loop functions in rsc-files
Replies: 4
Views: 584

Re: Using loop functions in rsc-files

I would suggest you create a script into your rsc file and call it after creation. Then, your script can include any loop supported by the Mikrotik scripting language. E.g /your commands /system script add name=your_script_name ....\ ...\ ... /system script run your_script_name For more information ...
by ochaconm
Fri Feb 02, 2018 3:15 pm
Forum: Beginner Basics
Topic: Quick config guide for new member of Mikrotik ?
Replies: 4
Views: 649

Re: Quick config guide for new member of Mikrotik ?

If you are at the very beginning level of Mikrotik technologies, I would suggest you read the following article in the Mikrotik Wiki: https://wiki.mikrotik.com/wiki/Manual:Initial_Configuration However, since the question (or questions) is so wide, I would also suggest creating a lab, or simulate, y...
by ochaconm
Fri Sep 23, 2016 11:30 pm
Forum: The Dude
Topic: How to send parameters through POST when I open “Tool→Web” on some device
Replies: 2
Views: 745

Re: How to send parameters through POST when I open “Tool→Web” on some device

Not possible. Also why not simply use SNMP monitoring for you UBNT devices? I'm using SNMP, but I want to send this parameters through POST to auto login into the device (With my default web browser). Since the username and password can be stored on the dude database, If can do that I won't have to...
by ochaconm
Sun Sep 18, 2016 9:25 pm
Forum: The Dude
Topic: How to send parameters through POST when I open “Tool→Web” on some device
Replies: 2
Views: 745

How to send parameters through POST when I open “Tool→Web” on some device

I have an hybrid network, using Mikrotik and Ubiquiti. I want to auto login to some devices (Ubiquiti) after I click on “Tool → Web”. Then, Is there any way to send HTTP parameters through POST instead of GET ? What do I have to modify in Url field (Inside device type)? https://s9.postimg.org/jl8ufw...
by ochaconm
Thu Aug 04, 2016 10:52 pm
Forum: Wireless Networking
Topic: NAT not working
Replies: 19
Views: 3144

Re: NAT not working

That is a good solution ZeroByte. I miss understood the problem. It won't work only when the original "src address " and "dst address" and are on the same subnet(ip is reached by ARP). But I think that it is not a problem. Thanks for clarifying.

Enviado desde mi SM-G900F mediante Tapatalk
by ochaconm
Thu Aug 04, 2016 2:29 am
Forum: Wireless Networking
Topic: NAT not working
Replies: 19
Views: 3144

Re: NAT not working

If I understood it correctly... Your WLAN IP is 192.168.4.1 and your DHCP pool is 192.168.4.2-192.168.4.254. You want to redirect traffic coming from your LAN to a host that is located in the same subnet(192.168.4.244). I suggest you to connect your server to a different interface and subnet (ex: se...
by ochaconm
Fri Feb 22, 2013 10:19 pm
Forum: General
Topic: WPA EAP + FreeRadius Problem
Replies: 0
Views: 577

WPA EAP + FreeRadius Problem

Hi. I'm trying to configure Mikrotik OmniTik wlan as AP-Bridge but I can't get connected: Security: WPA EAP or WPA2 EAP. I've Freeradius under Ubuntu Server working fine with Ubiquiti Rocket M Series. In ubiquiti its as simple as filling two field on AP side: -1. IP of Freeradius -2. secret of free ...