MikroTik

kubco2

What fix exactly were you looking forward to? Thank you for explanation. I was hoping in fixing longer timeouts. E.g. my previous example: both realeases timed out instantly(on check interval) in both netwatch config: /tool netwatch print detail Flags: X - disabled 0 host=8.8.8.8 timeout=15s interv...

kubco2

We have released 6.33.5 version. *) netwatch - make work with ping time-out more precise; What was changed exactly? I was waiting for fix with timeouts but I cant find difference in 6.33.3 and 6.33.5, both realeases timed out instantly(on check interval) in both netwatch config: /tool netwatch prin...

kubco2

Can someone confirm this problem?

We dont want change syslog server, if the problem is in config, but now we have only mess in logs.

kubco2

Hello, Im trying to setup some rules to syslog server. I have: 1. accept, log to file1 2. accept, log to file2 I want filter devices, that log to file1, so I put IP range to rule1, I tried 10.200.0.0, 10.200.0.0/16, 10.200.0.1-10.200.255.255, but it always logs IP 10.100.100.11 too. If I put 10.200....

kubco2

ssh connection keeps alive 5 days. Winbox connection still drops

.

What can be reason, that winbox drop, how can I debug it please?

kubco2

Hello, I have this problem with every version of winbox. SSH session keeps alive for a long time. But winbox disconnects after few seconds, minutes, sometimes I cant even edit some value. This problem happens only when I accessing router over vpn. If I connect to public internet IP it keeps alive fo...

kubco2

Hello,
can someone share fixpipe.dll from post http://forum.mikrotik.com/viewtopic.php ... er#p260107 ?

Thanks,
jakub

kubco2

Hello, is possible to implement some reconnection timeout in PPP clients(ppp,pptp,l2tp...)? When our routers have troubles with connecting through PPP and cant connect, they trying do it repeatedly and router CPU will remain 100% load while connection is not established. This leads to slow response ...

kubco2

If I have dynamic IP, and I got new IP, policy src-ip/sa-src-ip is old, then until script update IP is unencrypted connection, or NO?

Thanks for reply.

Jakub

kubco2

Hello, I know this is mikrotik forum, but it is very responsive forum. I hope I will finally find answer to my question. I try to ask from the view of mikrotik side. Does anyone suspect where can be difference between debian network config, PPTP and mikrotik network config, PPTP. In case of debian s...

kubco2

Hello, we have 3 local routerboards in building, 1 is gateway and DHCP server, other 2 are switches, I want to ask, what is the best setup to be able to manage them from WAN? In switch mode they dont have IP, but it should be best performance. Second question is important. We have server and client ...

kubco2

http://wiki.mikrotik.com/wiki/OpenVPN#c ... 28tun.29_2

kubco2

kubco2

you can post more detailed config

kubco2

If you want redirect only 1-3 addresses or ranges, you dont need marking. Add this to use specific gateway for some IP(s) to router A IP=IP of http://ip-lookup.net/ /ip route add dst-address=IP gateway=192.168.1.1 Without this line I have my public IP ... with this line I have ovpn server public IP ...

kubco2

Hello, I have two questions. 1. is possible to set custom topics? e.g. I want log some messages in scripts, but I want only these messages to be sent somewhere(email,ftp,custom_log_file), I can't filter it :( 2. it should be possible to log exactly login,logout time for pppoe secrets, where is it po...

kubco2

We dont have problems with WOL over openVPN tunnel(layer 3),PPTP ... We are using this app http://www.uloz.to/xTNss92/wakeonlangui-exe (running in Wine too) .... Just set right MAC address, right IP address subnet 255.255.255.255 and options internet and right port (7,9).....

kubco2

OK .... I tested it now ... First I added client.crt .... certificate entry appeared ... then I added client.key ... then certificate entry got KR flags .... in this order it works ... maybe you need input passphrase too ...

If it is not work for you, I cant help

kubco2

You want probably to enable communication started by vlan1 .... then you must accept in firewall vlan2->vlan1 established/related connection state rules before drop rule...

kubco2

It is better to push routes from openVPN server, you can see on this page http://forum.mikrotik.com/viewtopic.php?f=2&t=70993 , then you needn't manually add static routes to all ovpn clients .... if isn't for you then you can add routes for address as first one: dst address - destination addres...

kubco2

upload files on ftp, or in winbox open Files and drag and drop files ...... import certificates from files... system>certificates>import ...you need to have "K" flag on certificate file in system>certificates ... then you can use interface > ovpn client and select your certificate

kubco2

And where is the problem in your configuration?
What doesnt work?

kubco2

Masquarade is not good solution... I had masquarade in ovpn box but then logging,auditing has no clue about real IP address. I think your problem is that local PC connect to public IP but server respond to local IP, and local PC has no opened connection for local server IP, therefore PC should use l...

kubco2

You can add static entry for domains in DNS in rb .... IP>DNS>static>add local IP with domain name ... Use only routerboard as DNS server in computers... IP>DHCP server>Networks> setDNS server - IP of rb(probably same as gateway)

kubco2

I added some more info. But on Mikrotik there is not a lot of settings. You need only set ovpn_client name="ovpn-out1" mac-address=xyz max-mtu=1500 connect-to=serverIP port=1194 mode=ip user=client password="" profile=default-encryption certificate=cert1 auth=sha1 cipher=aes256 a...

kubco2

Make bridge on WLAN,ether1-X interfaces ... And put DHCP server with desired ip pool on that bridge.
Do not add to bridge interface that is Internet connection.

kubco2

My config works well without ipSec: /ppp profile print where name=l2tp_block 5 name="l2tp_block" local-address=192.168.4.11 remote-address=l2tp_block use-mpls=yes use-compression=yes use-vj-compression=yes use-encryption=yes only-one=no change-tcp-mss=default /ppp secret print where name=l...

kubco2

Set dhcp lease time for example 10days ... schedule script to run every few days that for each dynamic lease entry in "/ip dhcp-server lease" make static entry with "/ip dhcp-server lease make-static" and set lease time to 0s(never expire) ...

kubco2

I think in rb can be dns cached better, and next advantage is if you need use local static DNS entries e.g. for domains in localhost NATed to local server or device names isntead of IP, if you dont want add each dns entry to every device in network, you use gateway as only DNS in network.

kubco2

maybe this will help you. At the bottom is my solution.
http://forum.mikrotik.com/viewtopic.php?f=2&t=70993

kubco2

I had to turn off switch and make Bridge. IP address routing works. There must be problem with MAC address routring, ARP? Only problem with IP address routing is that first ping is very big(probably only on new connection creating). $ ping 192.168.8.11 PING 192.168.8.11 (192.168.8.11) 56(84) bytes o...

kubco2

I replaced mikrotik router for another mikrotik, now setup is Mikrotik->eth2->switch->(PC with internet problem, Radio stream stop playing) ... Mikrotik->eth3->(TP link router with another subnet) ->wifi-> Samsung mobile... If I connect with mobile or some laptops to wifi TP Link, the Radio stream s...

kubco2

Help please ... present attemp: again unpredictable I didn't make changes in ROS. $ ping 192.168.8.11 PING 192.168.8.11 (192.168.8.11) 56(84) bytes of data. From 192.168.8.10 icmp_seq=1 Destination Host Unreachable From 192.168.8.10 icmp_seq=2 Destination Host Unreachable From 192.168.8.10 icmp_seq=...

kubco2

Hello, I have problem that All clients are troubles to access to another clients. IT SOMETIME WORKS AND SOMETIME NOT. Yesterday I reinstalled RB, because I thought, the problem is in my config. I could ping whole network yesterday. But today I get: $ ping 192.168.8.11 PING 192.168.8.11 (192.168.8.11...

kubco2

bump please help.

kubco2

I tried

ros code

/interface ovpn-client disable ovpn-out1

With this code, there was the most errors(after day), it was working while I was logged in on Mikrotik.
With my code in first post, there are some errors.

I will try your first line code.

kubco2

Hello, I have problem with netwatch script. I have /interface ovpn-client enable 0 #on up /interface ovpn-client disable 0 #on down I tried to use select by name too. But both work always only while I'm testing it(some minutes). And when I login to mikrotik next day, there are errors "no such i...

kubco2

solved http://forum.mikrotik.com/viewtopic.php ... 73#p361273

kubco2

please

kubco2

Hello, I have problem with ovpn settings or firewall settings. Problem is that i cannot connect/traceroute/ping from lan network on Mikrotik_ovpn_client to Debian_ovpn_server. /tool sniffer packet shows that packets was sent from 192.168.88.1 to 172.19.18.1 but "tcpdump -v -n -i tun0" on s...

kubco2

some help please.

kubco2

Hello, we are using rb133 with RouterOS 5 . But we have trouble with LAN network. We have this config: rb133 - 1. interface wan port .... 3. interface lan port to hw switch(5 lan PCs), bridged with wireless... DHCP server on this bridge. All is OK, but when the specific clients connect/disconnect fr...

Search found 42 matches

ros code