Community discussions

MikroTik App

Search found 27 matches

by 2dfx
Tue Apr 25, 2023 1:53 pm
Forum: General
Topic: Monitoring BGP States
Replies: 3
Views: 697

Re: Monitoring BGP States

Hi! BGP state by mail: # EDIT HERE :local arrEmails [:toarray "EMAIL1@TEST.CORP,EMAIL2@TEST.CORP"]; :local debug false # EDIT END # Define Variables :global arrBgpState; :global gotKey false; :local hostNameX ([/system identity get name]); :local statusX; :local peerX; :local peerXarrEl; :...
by 2dfx
Sat Apr 22, 2023 11:37 pm
Forum: Announcements
Topic: v7.9rc is released!
Replies: 253
Views: 76436

Re: v7.9rc is released!

Pls add in PPP attribute Address-List over RADIUS Auth.
In MikroTik Specific RADIUS Attribute Numeric Values:
Mikrotik-Address-List 14988 (Mikrotik) 19 string
But it didn`t work.

PS Mikrotik-Group 14988 (Mikrotik) 3 string - work fine!
by 2dfx
Sat Apr 22, 2023 11:29 pm
Forum: General
Topic: MFA solution and Mikrotik [SOLVED]
Replies: 1
Views: 582

Re: MFA solution and Mikrotik [SOLVED]

Lastest Winbox 3.37 and RouterOS 7.8 move from PAP to MSCHAP.
You can use NPS with normal (not reversible encription) password.

Have a good day!
by 2dfx
Mon Apr 17, 2023 9:24 pm
Forum: General
Topic: MFA solution and Mikrotik [SOLVED]
Replies: 1
Views: 582

MFA solution and Mikrotik [SOLVED]

Hi! I`ve got some troubles to integrate MFA solution to RouterOS login (admin access). At first: Client Idenity: MFA service give to me 3 parameters: Client ID, Password, Name of radius server. I can`t setup Client ID (NAS Identifier) from radius setting. Only change router name can help me... I can...
by 2dfx
Mon Apr 17, 2023 8:50 pm
Forum: General
Topic: Radius and Address-Lists
Replies: 0
Views: 252

Radius and Address-Lists

Hi! I whant to use "dynamic" firewalls rules for my VPN users from NPS. In MikroTik Specific RADIUS Attribute Numeric Values I see: Mikrotik-Address-List 14988 (Mikrotik) 19 string And it din`t working. Nothing created in address-list... I think, I made some mistake and try to use: Mikroti...
by 2dfx
Wed Sep 11, 2019 4:34 pm
Forum: General
Topic: Feature requests
Replies: 1742
Views: 637150

Re: Feature requests

Please add to the OVPN Client (open-vpn) in "Dial Out": More than one "Connect To" Selection parameter "Remote random" or "Round robin" Input parameter "connect-timeout". When connecting to a remote server do not wait answer for more than n seconds.T...
by 2dfx
Sat Dec 30, 2017 1:59 pm
Forum: General
Topic: Route bug with PPP-DOWN script [SOLVED]
Replies: 1
Views: 3993

Re: Route bug with PPP-DOWN script [SOLVED]

I was able to solve it: PPP-UP script: :local localAddr $"local-address"; \ :local remoteAddr $"remote-address"; \ :local interfaceName [/interface get $interface name]; \ :log warning "$user connected: was given $remoteAddr IP (GW $localAddr) and assigned to $interfaceName ...
by 2dfx
Wed Dec 27, 2017 12:41 pm
Forum: General
Topic: Route bug with PPP-DOWN script [SOLVED]
Replies: 1
Views: 3993

Route bug with PPP-DOWN script [SOLVED]

Hi! I have trouble with PPP-Down script. I want to use PPP-UP and PPP-Down scripts for add route to additional routing table. In PPP-DOWN I remove only one route, but I see bug in route list. In log – route removed, but I see it in route list. If I try to delete ghost route - OSPF instance go to res...
by 2dfx
Mon Apr 24, 2017 5:23 pm
Forum: RouterBOARD hardware
Topic: CCR1036 Power Supply
Replies: 113
Views: 36382

Re: CCR1036 Power Supply

I have two routers CCR1036-8G-2S+ and both have failed psu. And yes, the C10 capacitor fails. https://lh6.googleusercontent.com/08bztQ2r1FvYXhFJzIUUUSiBhDFpK0P4N_dceVmh8_ehGShjuP9Z0lfe4oQla3yczKsolbZGe7cnRkMzGqeKvQ=w1920-h948-rw Link to g.drive if photo can't load I can't do RMA, becouse warranty wa...
by 2dfx
Thu Jan 26, 2017 12:24 am
Forum: General
Topic: Feature requests
Replies: 1742
Views: 637150

Re: Feature requests

Please add the ability to specify more than one server. for OpVPN and SSTP
And check box "remote random"

Thanks!
by 2dfx
Thu Nov 24, 2016 2:39 pm
Forum: General
Topic: Feature request – OpVPN connect-to several servers...
Replies: 0
Views: 1034

Feature request – OpVPN connect-to several servers...

I asked a question about the connection to several servers for backup and load balancing in the General forum and did not get an answer. I think it’s be a good feature. And for SSTP connection too. My mspaint: https://3.downloader.disk.yandex.ru/disk/2f2b01ae5833a4e92af7760062eafbb34af9f72ab4e29f504...
by 2dfx
Wed Nov 23, 2016 11:37 am
Forum: General
Topic: OpenVPN connect-to several IP or DNS record
Replies: 0
Views: 653

OpenVPN connect-to several IP or DNS record

Hi all! Right now I use linux-box for create VPN connection. In my openvpn configuration: remote HOSTA PORT remote HOSTB PORT remote HOSTC PORT remote-random How can I do this config in Mikrotik? I can do DNS record with multipy IP addresses. How Mikrotik will choose one? DNS records: VPNHOST.CO 1.1...
by 2dfx
Thu Sep 15, 2016 4:55 pm
Forum: General
Topic: Feature requests
Replies: 1742
Views: 637150

Re: Feature requests

Hi all!
What about grouping rules in Winbox like in Microsoft TMG?
It's will be a great features!


See "Web Access Policy Group"
Image
by 2dfx
Wed Apr 22, 2015 1:26 pm
Forum: Beginner Basics
Topic: Block LAN scanning
Replies: 2
Views: 1374

Re: Block LAN scanning

I see around following design: #Block scanner IP chain=forward src-address-list=ScanBlocked action=Drop #GoToScanCheck chain=forward out-interface=eth2 protocol=ICMP action=jump jump-target=ScanCheckStage1 #Stage1 chain=ScanCheckStage1 dst-address-list=!dst_stage1 src-address-list=!src_stage1 action...
by 2dfx
Wed Apr 22, 2015 11:47 am
Forum: Beginner Basics
Topic: Block LAN scanning
Replies: 2
Views: 1374

Block LAN scanning

Hi! I have mikrotik between networks 10.0.0.0/24 and 192.168.0.0/24. By using a firewall, I want to protect networks from scanning live hosts. Computer from 10.0.0.0/24 subnet initiates scanning by ICMP to hosts in network 192.168.0.0/24. When it sended 10 ICMP packets to random hosts - I want to bl...
by 2dfx
Tue Jan 06, 2015 9:41 pm
Forum: Beginner Basics
Topic: Captive Portal please help
Replies: 5
Views: 2669

Re: Captive Portal please help

[youtube]http://www.youtube.com/watch?v=Mka4HpJQfZM[/youtube] 2:15 - rate limit (total) Parameter can be like this: "2m/2m" or "100k/1m"... In "user porfiles" you can use "rate limit" (per user in this profile) like above. For block torrent and other - you nee...
by 2dfx
Sat Jan 03, 2015 9:38 pm
Forum: Wireless Networking
Topic: RB951G-2HnD VS 2.4Ghz Baby monitor
Replies: 2
Views: 1596

RB951G-2HnD VS 2.4Ghz Baby monitor

Hi! I have RB951G-2HnD and baby wireless monitor. If I turn on baby monitor - WiFi stop working. I see wireless lan, but can't connect. Always have error - wrong password. But if i change channel on baby wireless monitor (for 1 to 4) - WiFi start work again. This means that the baby monitor can brea...
by 2dfx
Sat Jan 03, 2015 5:05 pm
Forum: Beginner Basics
Topic: Captive Portal please help
Replies: 5
Views: 2669

Re: Captive Portal please help

Hi!

Go to IP - Hotspot
You can start from button "Hotspot Setup".

Don't forget:
IP Address
Default route
DHCP Server/Pool
DNS with Allow remote request


PS. http://wiki.mikrotik.com/wiki/Manual:Ho ... troduction
by 2dfx
Tue Dec 16, 2014 2:00 pm
Forum: General
Topic: Feature request for v7.x
Replies: 296
Views: 107435

Re: Feature request for v7.x

Pls Add functionality to NetWach like this:

Down script, if not available within X times.
Up script if available within Z times.
Now X and Z = 1.
by 2dfx
Sun Dec 07, 2014 10:03 pm
Forum: General
Topic: Dual WAN and OpenVPN (UDP) behind RouterOS.
Replies: 0
Views: 1788

Dual WAN and OpenVPN (UDP) behind RouterOS.

Hi all! I Have RB2011UiAS-2HnD-IN and next config: ISP1 - low cost, high speed, address 3.3.3.90/30 nexthop 3.3.3.89 ISP2 - high cost, low speed, address 5.5.5.98/30 nexthop 5.5.5.97 LocalLan - 172.16.0.0/24 PC with OpenVPN - 172.16.0.25 OpenVPN server - 9.9.9.188:1194 /ip address add address=3.3.3....
by 2dfx
Tue Oct 28, 2014 1:58 pm
Forum: Beginner Basics
Topic: How to lock Internet. Access for children. At certain times
Replies: 7
Views: 9604

Re: How to lock Internet. Access for children. At certain ti

You can replace name="" of kids wireless lan and start/stop time /system scheduler add name="Disable WiFi" \ interval=24h on-event="/interface wireless \ set [ find name= KIDsWirelessLAN ] disabled=yes" \ start-time= 22:00:00 policy=read,write /system scheduler add name...
by 2dfx
Mon Oct 27, 2014 3:55 pm
Forum: Beginner Basics
Topic: How to lock Internet. Access for children. At certain times
Replies: 7
Views: 9604

Re: How to lock Internet. Access for children. At certain ti

You can disable/enable default route by scheduler. /system scheduler add name="Disable def.route" \ interval=24h on-event="/ip route set disabled=yes \ numbers=\"[ /ip route find dst-address=0.0.0.0/0 ]\"" \ start-time=22:00:00 policy=read,write /system scheduler add na...
by 2dfx
Thu Oct 23, 2014 3:50 pm
Forum: Forwarding Protocols
Topic: OSPF between Mikrotik and Linux loses routes
Replies: 1
Views: 2431

Re: OSPF between Mikrotik and Linux loses routes

Sloved.

The problem with MTU.
Set up a GRE tunnel and OSPF began to work correctly.
by 2dfx
Sat Oct 18, 2014 6:34 pm
Forum: Forwarding Protocols
Topic: OSPF between Mikrotik and Linux loses routes
Replies: 1
Views: 2431

OSPF between Mikrotik and Linux loses routes

Hi! I have two routers. One mikrotik and second Linux with quagga. Mikrotik should be distribute default route, linux should distribute the route to network behind it. Network: 0/0|10.8.2.10/24 (gateway) <-> 10.8.2.252/24|10.10.15.8/24 (mikrotik) <-> 10.10.15.10/24|10.9.6.1/24 (linux) After start th...
by 2dfx
Sat Oct 11, 2014 12:46 am
Forum: General
Topic: Features request:Config sync,HA services,Firewall state sync
Replies: 9
Views: 5946

Features request:Config sync,HA services,Firewall state sync

Hi! 1. Sync sections of config between 2 or more routers. I have 15 routers with same config in ip firewall section. Some one like this: /system sync add section=ip-firewall auth=Secret destination=4.4.4.4 2. HighAvailability services. You have VRRP for HA. Now we need checkbox services to use it. N...
by 2dfx
Sat Oct 11, 2014 12:12 am
Forum: General
Topic: v6.20 released!
Replies: 146
Views: 75216

Re: v6.20 released!

Hi! I have error with lcd max-speed setup via winbox https://downloader-default6h.disk.yandex.ru/rdisk/09eb5813b55859eca68cdcdcdd6e61eb/mpfs/XMxZX4s-_oLiclB2VjJMNXkZ1ULbaY7URlq40qQ-SBENxf5wo7H_Vuts2IXrGxQwMV1HuieP7b_7H9SGomybJw==?uid=209678132&filename=Mik1.png&disposition=inline&hash=&a...
by 2dfx
Tue Mar 05, 2013 6:39 pm
Forum: General
Topic: Vote for support UDP OenVPN
Replies: 3
Views: 2337

Vote for support UDP OenVPN

Hi all!
I like Mikrotik, and I like OpenVPN.
Let's vote for supporting UDP Openvpn in new releases RouterOS!