Community discussions

Search found 169 matches

by erlinden
Tue Oct 08, 2019 12:22 pm
Forum: General
Topic: Best VPN for Mikrotik Router
Replies: 13
Views: 2133

Re: Best VPN for Mikrotik Router

What is your definition of "the best"?
by erlinden
Mon Sep 30, 2019 11:49 am
Forum: General
Topic: Router under Ddos atac on port 53 and 389.
Replies: 8
Views: 811

Re: Router under Ddos atac on port 53 and 389.

Do you really need your DNS server to be publically available? And the same question for LDAP?
by erlinden
Wed Sep 25, 2019 3:30 pm
Forum: Wireless Networking
Topic: Band Steering
Replies: 17
Views: 6226

Re: Band Steering

Most modern devices will prefer 5G radio over 2G radio. I do have Mikrotik wireless (while travelling) and Unifi (at home). The latter has band steering turned off. Because it doesn't work as smooth as one would expect and by turning down the 2G radio as low as possible all devices connect with the ...
by erlinden
Thu Sep 19, 2019 3:20 pm
Forum: Wireless Networking
Topic: Buying new Routerboard - need your recommendations
Replies: 14
Views: 1443

Re: Buying new Routerboard - need your recommendations

both. Need LAN and WIFI
Do you mean by LAN switching (and how many ports?), or is routing also required? Why did you come up with the RB4011 (will do fine in all cases, just not sure wether it is required)?
by erlinden
Thu Sep 19, 2019 11:00 am
Forum: Wireless Networking
Topic: Buying new Routerboard - need your recommendations
Replies: 14
Views: 1443

Re: Buying new Routerboard - need your recommendations

Do you want to use the new devices as routers or as accesspoints. In case the latter, just use the cAP ac, hAP ac2 or Audience (wasn't aware of this new device...).
by erlinden
Tue Sep 10, 2019 4:38 pm
Forum: Beginner Basics
Topic: Add second hAP lite as simple AP client & hub
Replies: 3
Views: 455

Re: Add second hAP lite as simple AP client & hub

Reset it without default configuration
Create a bridge and add all interfaces to it
Configure wireless settings (SSID/security/channels/transmission power/etc)
Add DHCP client to bridge (or you could leave this step and do configuration based on MAC address)
by erlinden
Thu Sep 05, 2019 4:26 pm
Forum: Beginner Basics
Topic: Convert Wifi to Wired
Replies: 4
Views: 554

Re: Convert Wifi to Wired

I use my hAP AC Lite as travel router. Mostly using a wireless backhaul. Works perfectly, haven't had problems on connecting to any wireless network yet. So I fully disagree with @mkx (based on my experience).
by erlinden
Mon Sep 02, 2019 2:23 pm
Forum: Wireless Networking
Topic: Need help with WiFi in Apartments/Flats
Replies: 7
Views: 902

Re: Need help with WiFi in Apartments/Flats

On the 2G radio only channel 1, 6 and 11 have no overlap (depending on country legislation, there could be more channels). Besides 2G has a higher penetration than 5G. To summarize: - lower transmission power to absolute minimum reuirements - select channels to get least interference - on 2G radio o...
by erlinden
Sun Sep 01, 2019 10:50 am
Forum: Wireless Networking
Topic: wAP AC as CAP managed by CAPsMAN ?
Replies: 7
Views: 1090

Re: wAP AC as CAP managed by CAPsMAN ?

Do clients get a correct IP address (including gateway and DNS)?
Have you tried configuring the wAP manually instead of through CAPsMAN?
Could it be a regularity thing, because it is used outside (not all 5G channels are allowed to be used outside)?
by erlinden
Mon Aug 26, 2019 5:14 pm
Forum: Beginner Basics
Topic: NAT problems - Xbox One and Nintendo Switch
Replies: 32
Views: 3462

Re: NAT problems - Xbox One and Nintendo Switch

Please connect your Xbox to the cable that connects your house (and currently your TP-Link). Do the problems still occur?

Besides, can you post a tracert forum.mikrotik.com (do you know how to use the command prompt and how to copy from it)?
by erlinden
Mon Aug 19, 2019 10:04 pm
Forum: Wireless Networking
Topic: CapsMan 5ghz Channels
Replies: 5
Views: 548

Re: CapsMan 5ghz Channels

Each channel is 20MHz wide, so you do the math. If I remember correct 40MHz is giving less problems...
by erlinden
Mon Aug 19, 2019 4:59 pm
Forum: Wireless Networking
Topic: The best Mikrotik AP for 6 SSIDs?
Replies: 4
Views: 762

Re: The best Mikrotik AP for 6 SSIDs?

I probably would choose for cAP ac: https://mikrotik.com/product/cap_ac
But it depends on a lot more than being able to broadcast 6 SSID's (this gives overhead...sure you need 6?).
How many concurrent users per radio?
What are the performance requirements?
by erlinden
Mon Aug 19, 2019 4:26 pm
Forum: Wireless Networking
Topic: CapsMan 5ghz Channels
Replies: 5
Views: 548

Re: CapsMan 5ghz Channels

It depends on the set country code (regulations) and channelwidth:
Image
by erlinden
Sun Aug 18, 2019 11:11 am
Forum: Wireless Networking
Topic: upload speed down
Replies: 7
Views: 644

Re: upload speed down

Can you please post a /export hide-sensitive?
Assuming this is a serious topic?
by erlinden
Fri Aug 16, 2019 11:14 pm
Forum: General
Topic: Not access site local
Replies: 2
Views: 304

Re: Not access site local

I prefer to use an internal DNS server to resolve private (internal) IP addresses instead of public IP addresses. This can be easily achieved by adding static entries.
by erlinden
Fri Aug 16, 2019 10:59 am
Forum: Beginner Basics
Topic: No internet access
Replies: 6
Views: 562

Re: No internet access

Please provide your config (export hide-sensitive).
by erlinden
Mon Aug 12, 2019 4:52 pm
Forum: RouterBOARD hardware
Topic: RB4011 high, uneven CPU load and a crash.
Replies: 9
Views: 1663

Re: RB4011 high, uneven CPU load and a crash.

Who says I haven't sent the sup out info in already regarding the crash? You haven't said you did...and it does make sense to give the advice. Based on the information you supplied...this is not normal operation. Could you please share your config (as per requested by Dude2048)? What version are yo...
by erlinden
Sun Aug 11, 2019 5:34 pm
Forum: Beginner Basics
Topic: VPN Site to Site or LAN to LAN
Replies: 4
Views: 495

Re: VPN Site to Site or LAN to LAN

You can have a site-2-site vpn with dynamic IP addresses.
In my situation I used this blog.: https://blog.pessoft.com/2016/05/29/mik ... s-and-nat/

In your case you have to run the script (for updating DDNS) only at the 20 sites.
by erlinden
Thu Aug 01, 2019 1:20 pm
Forum: Beginner Basics
Topic: Disabling o removing DNS Dynamic Servers
Replies: 16
Views: 1432

Re: Disabling o removing DNS Dynamic Servers

There is a WiKi page on how to upgrade a RB:
https://wiki.mikrotik.com/wiki/Manual:U ... g_RouterOS

I know that 6.45.2 (current stable) works flawless...not sure why the beta isn't.

Upgrading is not without risks. Make sure you have a backup before performing the upgrade.
by erlinden
Wed Jul 31, 2019 1:58 pm
Forum: Beginner Basics
Topic: Disabling o removing DNS Dynamic Servers
Replies: 16
Views: 1432

Re: Disabling o removing DNS Dynamic Servers

That's strange, especially as this seems to be a (your?) public IP address...
Your provider uses ns0.proxad.net and ns1.proxad.net (212.27.32.2 and 212.27.32.130).

Can you post a /export hide-sensitive please?
What version are you running?
by erlinden
Wed Jul 31, 2019 1:28 pm
Forum: Beginner Basics
Topic: Disabling o removing DNS Dynamic Servers
Replies: 16
Views: 1432

Re: Disabling o removing DNS Dynamic Servers

Can you show /ip dns print?

WebFig might have an caching thingie...
by erlinden
Wed Jul 31, 2019 11:43 am
Forum: Beginner Basics
Topic: Disabling o removing DNS Dynamic Servers
Replies: 16
Views: 1432

Re: Disabling o removing DNS Dynamic Servers

/ip dhcp-client set use-peer-dns=no

(client is 0)
by erlinden
Sun Jun 23, 2019 10:45 am
Forum: General
Topic: Moving From VPN To Wireless Link
Replies: 1
Views: 201

Re: Moving From VPN To Wireless Link

Can you please share all hardware included (especially routers involved) and number of clients? To answer your question: it depends. You can switch this into on big network where you don't have to bother about routing. If you want to keep current configuration, your routing has to be done over the w...
by erlinden
Sun Jun 23, 2019 10:40 am
Forum: Wireless Networking
Topic: Low speed
Replies: 4
Views: 544

Re: Low speed

Can you please show all wireless settings (including security, password is not relevant)? At what speed is the client connected? Is there a line of sight while testing? How are you testing, iperf3 (preferably)? I prefer to avoid using auto: select a channel that is least used. And use WPA2 AES only....
by erlinden
Thu May 30, 2019 2:36 pm
Forum: Wireless Networking
Topic: Which mode do I need?
Replies: 15
Views: 1155

Re: Which mode do I need?

First: Reset your device, make sure "No Default Configuration" is checked. Then: - Reconnect (use MAC instead of IP, WinBox will find your device) - Create bridge and add all interfaces - Add DHCP client to your bridge (then your Mikoritk will be accessible through an IP address) - Configure your wi...
by erlinden
Fri May 24, 2019 10:51 am
Forum: Beginner Basics
Topic: hAP ac - How to configure?
Replies: 14
Views: 916

Re: hAP ac - How to configure?

Can you please share your current settings?
by erlinden
Thu May 23, 2019 5:51 pm
Forum: Beginner Basics
Topic: hAP ac - How to configure?
Replies: 14
Views: 916

Re: hAP ac - How to configure?

Found this topic (have you tried the search option?): https://forum.mikrotik.com/viewtopic.php?t=86734 By selecting Ceee (or any orther 4 digit option) you will get 80MHz channel width. Make sure you select the channel manually ( I totaly dislike the auto option) and turn down tranmission power (sea...
by erlinden
Tue May 14, 2019 9:43 am
Forum: Wireless Networking
Topic: hAP AC WiFi Issues
Replies: 2
Views: 391

Re: hAP AC WiFi Issues

I prefer using fixed channels. That would definitely be my first change in this configuration. Why did you choose the hAP AC over i.e. the RB951G-HnD? How is the interference in your situation? Don’t you have 5G capable devices?
by erlinden
Sat May 04, 2019 6:41 pm
Forum: Beginner Basics
Topic: HELP: Access Mikrotik Router Externally
Replies: 13
Views: 928

Re: HELP: Access Mikrotik Router Externally

You might want to consider turning off fouter functionality on the Mikoritik. Just use it as switch and accesspoint (by removing NAT and creating a bridge where all interfaces should be part of).
by erlinden
Fri May 03, 2019 2:29 pm
Forum: Beginner Basics
Topic: Remote access from the Internet (WAN side)
Replies: 33
Views: 198788

Re: Remote access from the Internet (WAN side)

If I enabled the default firewall in the Quick Config screen and I then went to IP->Cloud and setup a CNAME on my domain what rule to I need to add to the firewall to allow myself to access the router with WinBox remotely from (xxx.xxx.xx.xxx - my office IP) You don't because it is highly unwise. I...
by erlinden
Fri May 03, 2019 11:53 am
Forum: General
Topic: ftp server on device on MT router behind parent router [SOLVED]
Replies: 2
Views: 241

Re: ftp server on device on MT router behind parent router [SOLVED]

FTP uses both port 21 and a range of passive ports. Only forwarding port 21 will not be sufficient.
by erlinden
Tue Apr 30, 2019 5:37 pm
Forum: General
Topic: wAP ac serious problem! maybe a bug?
Replies: 12
Views: 913

Re: wAP ac serious problem! maybe a bug?

please tell me how to do. I use winbox only, not console.
From Winbox you can start a terminal, just use the /export hide-sensitive command.
by erlinden
Tue Apr 30, 2019 3:41 pm
Forum: General
Topic: I have My rooter down
Replies: 2
Views: 254

Re: I have My rooter down

Can you please share your config?
What UAP do you use? Is it updated?
by erlinden
Tue Apr 30, 2019 3:38 pm
Forum: General
Topic: wAP ac serious problem! maybe a bug?
Replies: 12
Views: 913

Re: wAP ac serious problem! maybe a bug?

Can you share your WiFi settings?
by erlinden
Thu Apr 25, 2019 4:36 pm
Forum: Wireless Networking
Topic: CapsMan & CAP AC
Replies: 9
Views: 909

Re: CapsMan & CAP AC

Could you please provide channel/channelwidth/transmissionpower settings?
by erlinden
Mon Apr 22, 2019 10:38 am
Forum: Beginner Basics
Topic: RB2011UiAS-RM WAN not achieve 1GBps
Replies: 4
Views: 463

Re: RB2011UiAS-RM WAN not achieve 1GBps

What is the purpose of the RB if you already have an Asus router?
by erlinden
Thu Apr 04, 2019 10:38 am
Forum: Beginner Basics
Topic: Using router as bridge and AP
Replies: 8
Views: 549

Re: Using router as bridge and AP

Please correct me if I'm wrong, I would: 1) create a brdige on the hAP-ac and place the SFP and a network port in it 2) create a bridge on the hAP-ac and place the wireless interfaces together with a (different) port in it -> connect this with the hAP-ac2 3) configure the hAP-ac2 as a normal wifi ro...
by erlinden
Tue Mar 26, 2019 10:27 am
Forum: Wireless Networking
Topic: Is possible to set up a RBaCPGi-5acD2nD dual bands with one ssid?
Replies: 4
Views: 374

Re: Is possible to set up a RBaCPGi-5acD2nD dual bands with one ssid?

Besides name and password, also security settings have to be equal. And make sure that you choose different channels (don't use auto, 1,6 or 11 on the 2G radio).

Roaming can be achieved by setting the optimum tranmission power (again, don't use auto). Set it as low as possible.
by erlinden
Fri Mar 08, 2019 12:02 pm
Forum: Wireless Networking
Topic: Unable to connect to 2.4Ghz
Replies: 6
Views: 692

Re: Unable to connect to 2.4Ghz

I would start by selecting channels manually. For 2G radio use either 1, 6 or 11 and make sure bandwidth is set to 20MHz.
by erlinden
Thu Mar 07, 2019 11:51 am
Forum: Wireless Networking
Topic: RB4011iGS+5HacQ2HnD-IN 5G down
Replies: 4
Views: 414

Re: RB4011iGS+5HacQ2HnD-IN 5G down

Could it be that 5G radio channel is set to auto and that the selected channel is not supported by your device? Or that it was in a DFS waiting state? Perhaps you can share your settings?
by erlinden
Thu Mar 07, 2019 10:16 am
Forum: Beginner Basics
Topic: Basic wireless with cAP ac - network specific setup
Replies: 11
Views: 1015

Re: Basic wireless with cAP ac - network specific setup

If you want to configure your cAP ac as accesspoint, you shouldn't configure a DHCP server on it. If you create a bridge and add all interfaces to it (like you did), all devices will get the IP address from the corporate DHCP server (as well as the cAP ac if you define a DHCP client). Two additional...
by erlinden
Tue Mar 05, 2019 10:42 am
Forum: General
Topic: RB2011 CPU 100%
Replies: 3
Views: 326

Re: RB2011 CPU 100%

Have you rebooted the router yet?
by erlinden
Thu Feb 21, 2019 4:52 pm
Forum: Wireless Networking
Topic: RouterOS >=6.43.11: Bad 2.4Ghz wifi
Replies: 2
Views: 360

Re: RouterOS >=6.43.11: Bad 2.4Ghz wifi

Haven't had problems with this. Could you please supply some information, how is the 2G radio configured? And what is "really bad performance"?
by erlinden
Thu Feb 21, 2019 4:44 pm
Forum: Wireless Networking
Topic: hAP ac² superchannel
Replies: 5
Views: 745

Re: hAP ac² superchannel

What country have you selected? And have you selected regulatory-domain?
by erlinden
Tue Feb 19, 2019 4:59 pm
Forum: RouterBOARD hardware
Topic: RB750GR3 support
Replies: 4
Views: 868

Re: RB750GR3 support

It depends. What Internet bandwidth do you have, up- and downstream? What will your firewall look like? To summarize, what are your requirements besides number of users!
by erlinden
Sun Feb 17, 2019 11:04 am
Forum: Wireless Networking
Topic: Activate WPS on hAC
Replies: 6
Views: 2401

Re: Activate WPS on hAC

Mikrotik would not give us WPS if it was not secure.
LOL! Do you really think Mikrotik will only provide functionality if it is secure!?
WPS is very secure as it is switched off after that.
Sounds like a valid reason, indeed WPS is only secure if it turned off.
by erlinden
Mon Feb 11, 2019 10:45 am
Forum: Beginner Basics
Topic: Using mAP as wifi AP with GL750 as router
Replies: 9
Views: 542

Re: Using mAP as wifi AP with GL750 as router

You are very wellcome, glad to hear about your progress.

I prefer to use DHCP reservation, this will give you static IP addresses as well.
by erlinden
Sun Feb 10, 2019 11:30 am
Forum: Beginner Basics
Topic: Using mAP as wifi AP with GL750 as router
Replies: 9
Views: 542

Re: Using mAP as wifi AP with GL750 as router

What version are you running on the mAP?
Please don't use the quicksettings...just don't.
by erlinden
Sat Feb 09, 2019 12:34 pm
Forum: Beginner Basics
Topic: Using mAP as wifi AP with GL750 as router
Replies: 9
Views: 542

Re: Using mAP as wifi AP with GL750 as router

  • Reset the mAP (option in the menu), select no configuration
  • Login the mAP after it is rebooted
  • Create a bridge
  • Add all interfaces to the bridge
  • Add DHCP client if you want to have the mAP an IP address

So...leave the GL 750 as is, nothing to do there
by erlinden
Sat Feb 09, 2019 10:53 am
Forum: Beginner Basics
Topic: Using mAP as wifi AP with GL750 as router
Replies: 9
Views: 542

Re: Using mAP as wifi AP with GL750 as router

Reset it to default, no configuration. Afterwards, you can connect it to the router and configure it (connect to the mAP on MAC address). Next: Make a bridge and have all interfaces part of this bridge. Add a DHCP client (if you want the mAP to have an IP address. Configure your WiFi interfaces as w...
by erlinden
Wed Feb 06, 2019 3:13 pm
Forum: General
Topic: Nat address from public ip to router adress
Replies: 12
Views: 817

Re: Nat address from public ip to router adress

I prefer to solve these problems with DNS, just have the service resolved to your internal IP address on your network (and your public IP address for the rest of the world).
by erlinden
Fri Feb 01, 2019 5:04 pm
Forum: General
Topic: Poor WiFi performance - hAP AC ^2
Replies: 6
Views: 1873

Re: Poor WiFi performance - hAP AC ^2

What client are you using for testing?
At what speed is the client connected?
Can you test with fixed channel?
by erlinden
Thu Jan 24, 2019 4:49 pm
Forum: General
Topic: Ipcloud two Mikrotik
Replies: 9
Views: 734

Re: Ipcloud two Mikrotik

Why not do it properly and run a VPN service? Are you aware that there was (and still is depending on the version of RouterOS you are running) a huge security issue?
by erlinden
Fri Jan 11, 2019 12:19 pm
Forum: Wireless Networking
Topic: High ping to router HAP AC2
Replies: 33
Views: 2436

Re: High ping to router HAP AC2

Are you using fixed channels?
Why do you have two (overlapping) DHCP pools?
Why UPnP?
by erlinden
Mon Jan 07, 2019 10:06 am
Forum: General
Topic: Router for traveling?
Replies: 4
Views: 558

Re: Router for traveling?

I found this blog to be very helpfull:
https://justinho.com/blog/2017/07/15/hap-ac-lite.html

The benefit of the hAP ac² is CPU power. In the end it all depends on your requirements.
by erlinden
Sat Dec 29, 2018 10:54 pm
Forum: General
Topic: tool kid-control
Replies: 44
Views: 13320

Re: tool kid-control

[Update] It seems to work with the settings shown underneath... I want to use the Rate Limit in combination with Time For Rate Limited. My preferred schedule would be: 24x7 Internet access Every day, limit at these times: 00:00:00-07:30:00 11:30:00-16:00:00 20:00:00-00:00:00 Though it seems obvious,...
by erlinden
Thu Dec 27, 2018 11:19 am
Forum: Wireless Networking
Topic: Radar detected on XXX
Replies: 31
Views: 3400

Re: Radar detected on XXX

It is not a problem, it is unexpected behaviour (for you). Switching channels is de Dynamic part in DFS. The Wiki: https://en.wikipedia.org/wiki/List_of_WLAN_channels gives you an overview on all allowed channels you can select. Perhaps you can do a WiFi scan with a client to find out the best chann...
by erlinden
Mon Dec 03, 2018 5:27 pm
Forum: General
Topic: RB850Gx2 is limiting one port TX speed - why?
Replies: 2
Views: 266

Re: RB850Gx2 is limiting one port TX speed - why?

Why do you think the port is limited? What is the CPU load while testing? Could it be cable related (do you see a lot of CRC errors)?
by erlinden
Mon Nov 19, 2018 11:12 am
Forum: Wireless Networking
Topic: Hap ac & poor performance in 2.4GHz and 5GHz [SOLVED]
Replies: 20
Views: 1956

Re: Hap ac & poor performance in 2.4GHz and 5GHz [SOLVED]

Can you please share your wireless settings?
by erlinden
Fri Nov 16, 2018 3:40 pm
Forum: Beginner Basics
Topic: Best performance on hAP ac lite
Replies: 6
Views: 615

Re: Best performance on hAP ac lite

On the second router there are no devices connected is used only for WiFi, mobile users only. I thought it is better as it is, doesn't it cause more traffic on my LAN if i set it as acesspoint? Or should i set a different subnet if i set it as acesspoint? It is worse and you only created an additio...
by erlinden
Fri Nov 16, 2018 2:41 pm
Forum: Beginner Basics
Topic: Best performance on hAP ac lite
Replies: 6
Views: 615

Re: Best performance on hAP ac lite

What is 'Best performance' for you?

Besides above reply, please configure your second hAP as accesspoint (create one bridge with all interfaces connected to it). It makes no sense to have double NAT.
by erlinden
Tue Nov 13, 2018 4:24 pm
Forum: General
Topic: Webfig remote access from WAN
Replies: 18
Views: 5226

Re: Webfig remote access from WAN

It seems my ISP is blocking port 80. I have changed port number and now all works fine! The problem is solved! Thanks to all! Actually I think you created yourself a bigger problem. Access to the router over a non-encrypted connection. You may want to reconsider your configuration, setting up VPN i...
by erlinden
Thu Oct 11, 2018 2:29 pm
Forum: General
Topic: Can my ISP access my Mikrotik Router and make changes?
Replies: 7
Views: 741

Re: Can my ISP access my Mikrotik Router and make changes?

Was the MT supplied by your ISP? If Yes...sure they can. If Not...they won't touch it.
Sure the MT is not compromised by a hacker?
by erlinden
Thu Oct 11, 2018 2:24 pm
Forum: Beginner Basics
Topic: Can't connect to Mikrotik from outside
Replies: 9
Views: 1656

Re: Can't connect to Mikrotik from outside

Can you please post your public IP address?

:lol:
by erlinden
Sun Sep 02, 2018 2:24 pm
Forum: Beginner Basics
Topic: Upgrade DNS
Replies: 4
Views: 486

Re: Upgrade DNS

Lol, sorry. If your router has no gateway, how will it be able to use external DNS servers? Perhaps you can tell us a bit more of what you are doing, how things are connected and what you are trying to accomplish?
by erlinden
Wed Aug 29, 2018 10:58 am
Forum: Beginner Basics
Topic: DNS issue
Replies: 6
Views: 2036

Re: DNS issue

Can you share a ipconfig /all? Probably you want to set your MirkoTik as (only) DNS server in the DHCP options.
by erlinden
Wed Aug 29, 2018 10:25 am
Forum: Beginner Basics
Topic: wAP ac as bridge mode [SOLVED]
Replies: 14
Views: 2526

Re: wAP ac as bridge mode [SOLVED]

Great help here...just one thing (and it might be my preference...) that I want to share:

- Never use auto channel, just do a proper WiFi scan and select the best channels
- On the 2G radio choose either channel 1, 6 or 11. Never use 20/40mhz-Ce! Choose 20mhz.
by erlinden
Sat Jul 28, 2018 10:46 am
Forum: RouterBOARD hardware
Topic: Extending CRS109 network via RB951G-2HnD
Replies: 1
Views: 369

Re: Extending CRS109 network via RB951G-2HnD

If a 2G WiFi network is sufficient, this is a good solution. Configuration is straight forward:
[*]factory reset without default configuration
[*]put all interfaces on the same switch (or bridge)
[*]configure wireless as required
by erlinden
Sun May 20, 2018 1:04 pm
Forum: Beginner Basics
Topic: RB750 Mikrotik 6.42.2
Replies: 2
Views: 502

Re: RB750 Mikrotik 6.42.2

Or run a DNS server on your RB750 and have the website URL resolved to the internal IP address.
by erlinden
Mon Apr 23, 2018 11:41 am
Forum: Beginner Basics
Topic: I have a problem
Replies: 4
Views: 474

Re: I have a problem

Port forwarding is not like rocket sience. If you experience difficulties in the firewall and GUI you might want to come to the conclusion that neither MikroTik nor your basic networking knowledge is sufficient.
by erlinden
Mon Apr 16, 2018 9:13 am
Forum: General
Topic: How To Get Max 100mbps Speed ? rb951ui-2nd(hap)
Replies: 19
Views: 1795

Re: How To Get Max 100mbps Speed ? rb951ui-2nd(hap)

This RB only supports 2G radio (as you know). Bandwidth depends on a ot of factors, the way I would solve it (besides all the steps you have done already) is by using 5G radio. Does the ZTE suport 5G? What speeds do you get with this modem/router? Why do you use the RB as well?
by erlinden
Thu Apr 05, 2018 2:24 pm
Forum: Beginner Basics
Topic: DNS
Replies: 5
Views: 613

Re: DNS

What is the use of setting a fixed IP address to an accesspoint? I prefer to have all my IP related stuff done by a DHCP server, reservations for any device necessary.

And to answer you question: DNS is for name resolving. So in any case of name resolving you need a DNS server.
by erlinden
Tue Apr 03, 2018 10:26 am
Forum: Beginner Basics
Topic: A simple setup with one router and one access point
Replies: 1
Views: 318

Re: A simple setup with one router and one access point

Two options (as far as I know):

- Use Capsman
- Configure your cAP as accesspoint *)

*) Reset config with no default, create bridge and add all interfaces to this bridge (or switch), use DHCP client (for configuration options), configure wireless. That's about it.
by erlinden
Fri Mar 30, 2018 9:39 am
Forum: Beginner Basics
Topic: "Check for update" Error [SOLVED]
Replies: 7
Views: 4921

Re: "Check for update" Error [SOLVED]

The difference I see with my router is that allow-remote-requests is set to yes while yours is set to no.
by erlinden
Mon Mar 26, 2018 10:03 am
Forum: Beginner Basics
Topic: Normal or strange behavior
Replies: 6
Views: 762

Re: Normal or strange behavior

Can you post the script you are using?
by erlinden
Fri Mar 16, 2018 11:24 am
Forum: Beginner Basics
Topic: TM router to rb1100
Replies: 1
Views: 376

Re: TM router to rb1100

Not sure if I understand you correct...do you want to connect the RB1100 to the TM router? If you want double NAT (assumption, based on the fact that you are referring to a private IP range). If the TM is doing DHCP, you can set the RB1100 Address Acquisition to Automatic . Local Network should be s...
by erlinden
Fri Mar 16, 2018 10:43 am
Forum: Beginner Basics
Topic: Very slow WiFi download speed. (MikroTik hAP ac2) [SOLVED]
Replies: 25
Views: 18663

Re: Very slow WiFi download speed. (MikroTik hAP ac2) [SOLVED]

Same problem is in hap ac lite. It justifies each other differently. Just do not use the mikrotik as a home appliance. True if you don't know completely what you are doing. Otherwise, the device is great! @TS: I have very good results by setting security to AES (and not TKIP, not sure what you used...
by erlinden
Tue Mar 13, 2018 10:22 pm
Forum: Wireless Networking
Topic: 5GHz Wi-Fi problem on hAP ac lite [SOLVED]
Replies: 10
Views: 5007

Re: 5GHz Wi-Fi problem on hAP ac lite [SOLVED]

Try setting 5G radio to a fixed channel. Don't know the implementation of MikroTik but it sure can help.
by erlinden
Sun Mar 11, 2018 11:12 am
Forum: Beginner Basics
Topic: receiving unnecessary traffic
Replies: 3
Views: 561

Re: receiving unnecessary traffic

Can you post your configuration please?
by erlinden
Sun Mar 11, 2018 11:09 am
Forum: Beginner Basics
Topic: L2TP IPSEC connection problem
Replies: 5
Views: 2483

Re: L2TP IPSEC connection problem

Seem your internet connect is behind an NAT router.
You must have a direct internet connect.
That or (at least) all ports should be forwarded on the other NAT thing as well. Does it have to do NAT? Can it be in bridge modus? Can you make an overview of your network?
by erlinden
Mon Feb 19, 2018 10:49 am
Forum: General
Topic: Routing Problem
Replies: 33
Views: 1942

Re: Routing Problem

What is de purpose of using a router in this case? If you want to create just one big network, configure one bridge on the MikroTik (reset without default) and you are done.
by erlinden
Fri Feb 16, 2018 10:05 am
Forum: General
Topic: IPSec Tunnel, pingable router but no access
Replies: 9
Views: 676

Re: IPSec Tunnel, pingable router but no access

Thanks, works like a charm now! Think I should dive into the world of firewalls a bit more...
by erlinden
Wed Feb 14, 2018 12:11 pm
Forum: General
Topic: IPSec Tunnel, pingable router but no access
Replies: 9
Views: 676

IPSec Tunnel, pingable router but no access

I have created a site to site vpn connection from home to my parrents, based on this tutorial: https://blog.pessoft.com/2016/05/29/mikrotik-ipsec-tunnel-with-ddns-and-nat/ This works very stable (RB3011 - RB951), though the speed is not really high (which is probably caused by the RB951, which doesn...
by erlinden
Wed Jan 31, 2018 11:02 am
Forum: Wireless Networking
Topic: RB951G-2HnD wireless download speed issue!!!
Replies: 4
Views: 512

Re: RB951G-2HnD wireless download speed issue!!!

As this device only has a 2G radio, first thought would be interference. How did you configure WiFi? Are there other WiFi networks on the 2G band in your neighborhood?
by erlinden
Thu Jan 25, 2018 12:01 pm
Forum: Beginner Basics
Topic: Static IP allocations L2TP VPN [SOLVED]
Replies: 2
Views: 547

Re: Static IP allocations L2TP VPN [SOLVED]

Can you explain what you try to accomplish? Are these site-to-site connections? Context would be very beneficial.
by erlinden
Thu Jan 18, 2018 4:41 pm
Forum: Beginner Basics
Topic: PPTP vpn, DHCP Pool
Replies: 3
Views: 1134

Re: PPTP vpn, DHCP Pool

There are a lot of tutorials on the Internet, this one helped me a lot:
https://www.techonia.com/6034/configure ... rver-ipsec
by erlinden
Wed Jan 17, 2018 12:26 pm
Forum: Beginner Basics
Topic: RB750Gv3 Dropping Connections [SOLVED]
Replies: 6
Views: 702

Re: RB750Gv3 Dropping Connections [SOLVED]

Have you checked this behaviour with other devices and/or other cables? How is the Hex powered? What firmware version or you running?
by erlinden
Tue Jan 16, 2018 1:03 pm
Forum: Beginner Basics
Topic: Firewall e Nat Rule - FTP Upload
Replies: 6
Views: 614

Re: Firewall e Nat Rule - FTP Upload

I did a search on this forum, does this topic answer your question?
viewtopic.php?t=61450
by erlinden
Mon Jan 15, 2018 12:15 pm
Forum: General
Topic: Mikrotik to Mikrotik VPN - Dynamic IP
Replies: 7
Views: 620

Re: Mikrotik to Mikrotik VPN - Dynamic IP

Choose the one of routers for vpn server and use cloud /ddns/ for establish the ppp connection !
There is no way to accomplish a "true" peer to peer connection without the use of script?
by erlinden
Thu Jan 11, 2018 12:40 pm
Forum: Beginner Basics
Topic: Setting UP Router and wAP without my ISP
Replies: 2
Views: 261

Re: Setting UP Router and wAP without my ISP

For setting up a router you don't need an ISP. You should connect both computer and wAP AC with a cable and configure as you wish. I check the specs of RB750r2 and it doesn't have wireless. so that means it doesn't support wAP AC? I assume you can connect the both with cable? Please check Capsman: h...
by erlinden
Wed Oct 04, 2017 3:20 pm
Forum: Beginner Basics
Topic: how to set a master port and a slave port
Replies: 10
Views: 25313

Re: how to set a master port and a slave port

If you look at the interfaces and select a LAN connection (in your case ether3) you see the option 'Master Port'. Here you can select ether2.
In the picture the master port hasn't been set yet:

Image
by erlinden
Tue Aug 29, 2017 7:24 pm
Forum: Beginner Basics
Topic: IP Camera Port Forwarding
Replies: 2
Views: 1046

Re: IP Camera Port Forwarding

Be very careful with cameras directly attached to the Internet. Unless you are willig to help botnets... I would advise to use VPN to make a secure connection to the network over which the camera (or nvr?) can be connected.
by erlinden
Tue Aug 29, 2017 7:18 pm
Forum: Beginner Basics
Topic: Mikrotik router with ubiquity access points
Replies: 2
Views: 545

Re: Mikrotik router with ubiquity access points

Wat do you mean with "not picking up"? Are the Unifies supposed to user the MikroTik for wireless uplink purposes? How should the Unifies know about a portal on the MikroTik? Have you made adjustments on the controller? Can you please draw the network with the IP's and inter-device connections? Do h...
by erlinden
Tue Jul 25, 2017 5:57 pm
Forum: Beginner Basics
Topic: mAP lite plus RB951G-2nHD ether local at home as Wi-Fi repeater
Replies: 6
Views: 816

Re: mAP lite plus RB951G-2nHD ether local at home as Wi-Fi repeater

My best guess would be that you want your mAP lite configured as accesspoint.
Just get rid of the configuration, place everything in a bridge and configure WiFi as required.

Think this thread will help you a lot (especially the answer by @Sob):
viewtopic.php?t=94568
by erlinden
Tue Jul 25, 2017 4:12 pm
Forum: Beginner Basics
Topic: Accessing t 2 ap's
Replies: 1
Views: 237

Re: Accessing t 2 ap's

Can you either explain what you would like to accomplish or draw a picture of the network? Does it have something to do with network bridges...?

By the way, if a topic isn't answered, you might consider updating the topic with relevant information instead of creating a new one.
by erlinden
Sun Jul 23, 2017 12:27 am
Forum: Beginner Basics
Topic: netscan abuse on hetzner
Replies: 1
Views: 529

Re: netscan abuse on hetzner

"Related ports" doesn't make sense...I think the best (only?) option would be blocking IP addresses. Lots of examples here on the forum.
by erlinden
Sun Jul 16, 2017 10:16 pm
Forum: Beginner Basics
Topic: MICROTIK RB951G-2HnD
Replies: 6
Views: 637

Re: MICROTIK RB951G-2HnD

Think this movie says it all (turn off the sound ;)):
https://www.youtube.com/watch?v=Afit-y-1TZA
by erlinden
Sat Jul 15, 2017 9:49 am
Forum: Beginner Basics
Topic: MICROTIK RB951G-2HnD
Replies: 6
Views: 637

Re: MICROTIK RB951G-2HnD

Think the easiest way is to configure it as router, why did you choose cpe mode?
by erlinden
Sun Jul 09, 2017 11:19 am
Forum: Beginner Basics
Topic: port forwarding problem to mailserver zimbra
Replies: 2
Views: 1429

Re: port forwarding problem to mailserver zimbra

What port did you forward for mail? Think that port 25 should be forwarded at leat for mail purposes. Can you explain the attached rules?
by erlinden
Tue Jun 20, 2017 12:59 pm
Forum: Beginner Basics
Topic: Allow 2 users from same mac address
Replies: 2
Views: 492

Re: Allow 2 users from same mac address

Can you explain why two clients share the same MAC address?
by erlinden
Sun May 28, 2017 12:10 am
Forum: Beginner Basics
Topic: Accessing Local Server with a domain
Replies: 6
Views: 2020

Re: Accessing Local Server with a domain

I used to run an internal DNS server to revolve My domains to private (internal) IP adresses. The other option is (I think it is called) hairpin NAT.
by erlinden
Thu May 25, 2017 10:37 pm
Forum: Beginner Basics
Topic: Setting up mikrotik routerboard, RB951 series
Replies: 5
Views: 781

Re: Setting up mikrotik routerboard, RB951 series

Ask your friend to help you configure this router...I still think this one is really cool (as well as really old...)
by erlinden
Sun May 21, 2017 1:13 pm
Forum: Beginner Basics
Topic: hAP behind a 951G router. Visibility problem.
Replies: 1
Views: 267

Re: hAP behind a 951G router. Visibility problem.

Remove current configuration and create a bridge afterwards. Let the bridge consist of all LAN and WLAN interfaces and your done. How the MikroTik will behalve as a switch.
by erlinden
Wed May 10, 2017 1:18 pm
Forum: Beginner Basics
Topic: How to Access Mikrotik Router Configured with Private IP Address in WAN via Internet
Replies: 18
Views: 5126

Re: How to Access Mikrotik Router Configured with Private IP Address in WAN via Internet

I think both pietroscherer & Sob mentioned that you have to get into contact with your ISP. They are managing a device that is doing NAT for you.

To get some insights...can you post a tracert www.mikrotik.com? That would be very helpful!
by erlinden
Fri Apr 28, 2017 5:32 pm
Forum: Beginner Basics
Topic: MikroTik RouterOS 6.34.2
Replies: 5
Views: 1025

Re: MikroTik RouterOS 6.34.2

If your ISP is blocking ports...you are screwed. I'm still a bit puzzled what your ISP has to do with bypassing router login!?
by erlinden
Fri Apr 28, 2017 12:20 pm
Forum: Beginner Basics
Topic: need help!!! installing hotspot and vpn
Replies: 2
Views: 451

Re: need help!!! installing hotspot and vpn

Google found this link for me:
https://wiki.mikrotik.com/wiki/L2TP_%2B ... r_and_a_PC

If you have the option, skip PPTP VPN (security).
by erlinden
Wed Apr 19, 2017 9:59 pm
Forum: Beginner Basics
Topic: Can't configure RBwAP2nD-BE (wAP) - SOLVED
Replies: 9
Views: 4108

Re: Can't configure RBwAP2nD-BE (wAP)

Have hou tried to reset the device?
by erlinden
Tue Apr 18, 2017 5:22 pm
Forum: Beginner Basics
Topic: Guest network isolation
Replies: 4
Views: 1218

Re: Guest network isolation

I configured different VLAN's to isolate my guest network from my normal network. This way both my Unifi accesspoints and my wAP ac can be easibly configured to support different networks. Indeed, virtual wlans connected to a specific VLAN.
by erlinden
Thu Apr 13, 2017 3:51 pm
Forum: Beginner Basics
Topic: Please help with port forwarding!
Replies: 21
Views: 3067

Re: Please help with port forwarding!

How are you testing the port forward?
Sure the 192.168.88.254 isn't your router, but the server running both SSH and Web?
What do you see when you browse to http://192.168.88.254?
by erlinden
Mon Apr 10, 2017 3:17 pm
Forum: RouterBOARD hardware
Topic: wAP ac vs Unifi AC Pro / Lite
Replies: 9
Views: 6316

Re: wAP ac vs Unifi AC Pro / Lite

Have both the UAP-AC-LR and the wAP ac. The UAP has better throughput, but I have to admit that I have better tweak skills on the Unifi stack. There is not much difference in the way roaming is working (think both platforms work with a RSSI thresshold). If you prefer a great GUI, Unifi is the way to...
by erlinden
Sat Apr 08, 2017 10:34 pm
Forum: Beginner Basics
Topic: Cant get to local Webserver
Replies: 25
Views: 2512

Re: Cant get to local Webserver

Instead of hairpin NAT you can have the webserver revolved to the internal IP address. Just user thee DNS server in thee MT.
by erlinden
Wed Apr 05, 2017 2:24 pm
Forum: Beginner Basics
Topic: How to Hide SSID (RouterBoard) RB951Ui-2Hnd
Replies: 3
Views: 6807

Re: How to Hide SSID (RouterBoard) RB951Ui-2Hnd

Why do you want your SSID to be hidden? It's not like really secure as the SSID can be easily captured (if you got the tools).
by erlinden
Wed Apr 05, 2017 9:59 am
Forum: Beginner Basics
Topic: Limited transfer rate on 5GHz - wAP ac
Replies: 3
Views: 532

Re: Limited transfer rate on 5GHz - wAP ac

Is 54MB/s your throughput or your connection speed? The latter, I think you mean 54Mb/s, which is indeed to little.
Can you provide some more settings?
by erlinden
Tue Mar 28, 2017 3:41 pm
Forum: Beginner Basics
Topic: Using MikroTik hAP as simple switch plus wireless AP
Replies: 36
Views: 12721

Re: Using MikroTik hAP as simple switch plus wireless AP

That's the point I was happy with safe mode. I was never able to connect to the device with no default configuration. :?
Think I had to connect through WiFi to be able to connect...
by erlinden
Tue Mar 21, 2017 2:13 pm
Forum: Beginner Basics
Topic: Using MikroTik hAP as simple switch plus wireless AP
Replies: 36
Views: 12721

Re: Using MikroTik hAP as simple switch plus wireless AP

Thought default configuration contained masquerade and DHCP server...my mistake.
by erlinden
Tue Mar 21, 2017 1:30 pm
Forum: Beginner Basics
Topic: Using MikroTik hAP as simple switch plus wireless AP
Replies: 36
Views: 12721

Re: Using MikroTik hAP as simple switch plus wireless AP

If I understand correctly, you are looking for a way to let your device work as a switch with accesspoint functionallity. This can be easaly done by resetting the device with no default configuration: https://forum.mikrotik.com/viewtopic.php?t=71522 Then create a bridge and attach all the interfaces...
by erlinden
Mon Mar 20, 2017 10:36 am
Forum: Beginner Basics
Topic: NAT Loopback, for all ports.
Replies: 8
Views: 4398

Re: NAT Loopback, for all ports.

In this case DNS together with a reverse proxy will do just fine. Make sure all the services have their own name. This way you don't have to do port translation.
by erlinden
Sun Mar 19, 2017 5:44 pm
Forum: Beginner Basics
Topic: NAT Loopback, for all ports.
Replies: 8
Views: 4398

Re: NAT Loopback, for all ports.

Instead of getting NAT loopback working, in my opinion it would make more sense to solve this by DNS. Have your MikroTik work as a DNS server for your clients and have all services that run internally resolved to the internal IP address.
by erlinden
Mon Mar 06, 2017 12:42 pm
Forum: Beginner Basics
Topic: Please Help Me: Port Forwarding VIA dynamic ISP?
Replies: 7
Views: 744

Re: Please Help Me: Port Forwarding VIA dynamic ISP?

And for the forward part, please read:
viewtopic.php?t=50520
by erlinden
Sat Feb 25, 2017 5:49 pm
Forum: Beginner Basics
Topic: Static IP address
Replies: 2
Views: 315

Re: Static IP address

I stopped using static IP adresses. All devices requiring a static IP address get them from the DHCP server. Just make IP addresses static in the DHCP server (and change them afterwards as required).
by erlinden
Fri Feb 24, 2017 10:29 am
Forum: Beginner Basics
Topic: How-To remote manage RB751U-2HnD through WebFig
Replies: 23
Views: 16887

Re: How-To remote manage RB751U-2HnD through WebFig

For remote purposes I would always prefer using a VPN. It gives additional security and can be user for multiple purposes.
by erlinden
Fri Feb 24, 2017 10:24 am
Forum: Beginner Basics
Topic: Disable dhcp ethernet (not wifi)
Replies: 3
Views: 583

Re: Disable dhcp ethernet (not wifi)

Out of curiousity...Why would you need this distinction?
by erlinden
Fri Feb 24, 2017 10:22 am
Forum: Beginner Basics
Topic: HELP - Share With Hostname
Replies: 8
Views: 965

Re: HELP - Share With Hostname

Do you think Google knows about your (internal) hostnames? Well actually...they might :)

Make sure the RB750 is used as the only DNS server on your clients. This way only non-internal hosts are revolved by public DNS servers.
by erlinden
Thu Feb 23, 2017 2:34 pm
Forum: Beginner Basics
Topic: IPSEC-VPN
Replies: 1
Views: 294

Re: IPSEC-VPN

Which of the two is the VPN server and which the client?
What configuration did you try?
What errors did you run into?
by erlinden
Thu Feb 23, 2017 2:32 pm
Forum: Beginner Basics
Topic: HELP - Share With Hostname
Replies: 8
Views: 965

Re: HELP - Share With Hostname

Can you post an ipconfig /all. Perhaps clients don't resolve names with the RB750 but instead are using your ISP (or Googles) DNS servers.
by erlinden
Mon Feb 20, 2017 4:38 pm
Forum: Beginner Basics
Topic: port forwarding issue
Replies: 4
Views: 508

Re: port forwarding issue

You are trying to perform a NAT loopback. Think in Mikrotik land it is called hairpin (or something like that).
Why connect to the public IP address instead of the internal server IP address (DNS :))?
by erlinden
Mon Feb 20, 2017 1:28 pm
Forum: Beginner Basics
Topic: can not resolve dns name
Replies: 2
Views: 2099

Re: can not resolve dns name

How is your wAP ac configured?
Can you post IP information?
by erlinden
Thu Feb 16, 2017 1:27 pm
Forum: Beginner Basics
Topic: VPN Issues
Replies: 4
Views: 695

Re: VPN Issues

Assuming you are using a domain name, I would resolve the name internally to the NAS and externally to your public IP. Still a bit puzzled why one would like to use a VPN on a internal network.
by erlinden
Wed Feb 15, 2017 3:52 pm
Forum: Beginner Basics
Topic: ftp connection droped
Replies: 1
Views: 315

Re: ftp connection droped

Sorry to hear...

Mostly on forums people ask a question. Perhaps you should ask one too...?
And while you are at it, please supply your hardware, firmware and configuration.
by erlinden
Tue Feb 07, 2017 6:03 pm
Forum: Beginner Basics
Topic: Block Websites and Torrents On Mikrotik 951Ui 2HnD
Replies: 9
Views: 7649

Re: Block Websites and Torrents On Mikrotik 951Ui 2HnD

Can you please provide us with the settings you used?
by erlinden
Tue Feb 07, 2017 10:03 am
Forum: Beginner Basics
Topic: Problems setting up simple AP with single ethernet port WAP ac
Replies: 9
Views: 3174

Re: Problems setting up simple AP with single ethernet port WAP ac

Thanks for the post, are you using VLANs to isolate the traffic or just using unique SSIDs for access control?
VLAN are used for traffic isolation. The Guest VLAN is only used for WiFi.
by erlinden
Mon Feb 06, 2017 1:34 pm
Forum: Beginner Basics
Topic: Problems setting up simple AP with single ethernet port WAP ac
Replies: 9
Views: 3174

Re: Problems setting up simple AP with single ethernet port WAP ac

I was working on this this weekend, what I did: Reset without configuration Configure wan1 & wan2 and enabled them Added virtual wan3 (bound to wan1) & wan4 (bound to wan2) for my guest vlan Put it all in one bridge. Ran into some disconnects but in the end it all worked. Do the clients receive an I...
by erlinden
Fri Jan 27, 2017 4:47 pm
Forum: Beginner Basics
Topic: swapped out a modem - what else do I need to do?
Replies: 1
Views: 238

Re: swapped out a modem - what else do I need to do?

Do you get an IP address on the WAN port of your RB?
Did you leave your modem powerless for a couple of minutes and then powered it all up?
by erlinden
Tue Jan 24, 2017 10:39 am
Forum: Beginner Basics
Topic: Thinking about buying
Replies: 7
Views: 1621

Re: Thinking about buying

Basic configuration is easy...just install Winbox. The default configuration will do fine. Port forwards are a bit more complicated, but there is tons of information available. And there (this) communityis more then willing to help. My advise...just do it. I think if you only require a router the RB...
by erlinden
Tue Jan 17, 2017 6:29 pm
Forum: Beginner Basics
Topic: Site to Site but block traffic from one side
Replies: 2
Views: 315

Re: Site to Site but block traffic from one side

Would be very helpfull if you show us your firewall rules.
by erlinden
Sun Jan 15, 2017 11:00 am
Forum: Beginner Basics
Topic: Server IP Has been blacklisted by spamhuas!
Replies: 4
Views: 979

Re: Server IP Has been blacklisted by spamhuas!

Spamhaus is indeed listing IP addresses that are sending spam mail. Still puzzled what this has to do with a game server. As long as your customers are able to send spam mail through your public IP addresses you can be sure that it will be listed. Easiest solution, block port 25 out. Why would your ...
by erlinden
Tue Jan 10, 2017 6:36 pm
Forum: Beginner Basics
Topic: Mikrotik RB2011 and many ipsec tunnels
Replies: 6
Views: 1110

Re: Mikrotik RB2011 and many ipsec tunnels

Everything is possible with Mikrotik. Are you talking about a dozen site-to-site connections? What bandwidth do you need per connection? What is your knowledge on this topic?
by erlinden
Mon Dec 26, 2016 7:03 pm
Forum: Beginner Basics
Topic: Ping Google or Yahoo but got the same IP and cannot browse any
Replies: 15
Views: 1282

Re: Ping Google or Yahoo but got the same IP and cannot browse any

Are you using IPv6? If not, just turn it off.

Can you please copy the output in the commando prompt instead of taking pictures?
by erlinden
Sun Dec 25, 2016 1:11 pm
Forum: Beginner Basics
Topic: Ping Google or Yahoo but got the same IP and cannot browse any
Replies: 15
Views: 1282

Re: Ping Google or Yahoo but got the same IP and cannot browse any

Can you post:

ipconfig /all
nslookup www.yahoo.com
nslookup www.yahoo.com 8.8.8.8
by erlinden
Fri Dec 23, 2016 10:35 am
Forum: Beginner Basics
Topic: VPN stops working when server IP changes
Replies: 10
Views: 1606

Re: VPN stops working when server IP changes

Do you have something like a dynamic dns solution? How did you configure your VPN server (and why are you still uring PPTP)? Can you provide all information about your setup, like what is in front of the Mikrotik? Which version of RouterOS are you running? Any logs about this situation?
by erlinden
Mon Dec 19, 2016 3:46 pm
Forum: Beginner Basics
Topic: Remote management of the Mikrotik router.
Replies: 7
Views: 3183

Re: Remote management of the Mikrotik router.

I would prefer using VPN over direct connection with port obfuscation.
by erlinden
Sun Dec 18, 2016 4:55 pm
Forum: Beginner Basics
Topic: RB951Ui-2Hnd Automatic Restart and Error Log View
Replies: 5
Views: 862

Re: RB951Ui-2Hnd Automatic Restart and Error Log View

Telnet is available on your WAN interface...that is not a good idea. Please configure VPN for any administration on your MikroTik router (and the rest of the network if required).
by erlinden
Sat Dec 17, 2016 4:31 pm
Forum: Beginner Basics
Topic: Mikrotik hap lite - hardware sufficient for me?
Replies: 7
Views: 1439

Re: Mikrotik hap lite - hardware sufficient for me?

Any band requirements? DFS support? Etc.?
by erlinden
Fri Dec 16, 2016 10:10 pm
Forum: Beginner Basics
Topic: Mikrotik hap lite - hardware sufficient for me?
Replies: 7
Views: 1439

Re: Mikrotik hap lite - hardware sufficient for me?

What are the requirements?
by erlinden
Tue Dec 13, 2016 5:55 pm
Forum: Beginner Basics
Topic: I can`t log in to the Mikrotik
Replies: 4
Views: 5959

Re: I can`t log in to the Mikrotik

Have you tried using WinBox?
by erlinden
Thu Dec 08, 2016 2:20 pm
Forum: Beginner Basics
Topic: VPN client to side
Replies: 4
Views: 727

Re: VPN client to side

Still not clear to me what you are trying to accomplish...

Would you like to set different privileges per user?
What does your firewall look like?
Why are you (still) using PPTP?
by erlinden
Thu Dec 01, 2016 10:36 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 17
Views: 1694

Re: port forwarding

by erlinden
Thu Dec 01, 2016 10:33 pm
Forum: Beginner Basics
Topic: Upload Issue
Replies: 3
Views: 564

Re: Upload Issue

Single connection upload will be limited by max upload speed per VDSL connection. If you require faster upload you have to be able to user more connections for thee upload. Like newsservers...
by erlinden
Thu Dec 01, 2016 12:50 pm
Forum: Beginner Basics
Topic: Port forwarding
Replies: 3
Views: 723

Re: Port forwarding

You can check this link.
by erlinden
Mon Nov 28, 2016 2:25 pm
Forum: Beginner Basics
Topic: Remote access via browser
Replies: 3
Views: 2777

Re: Remote access via browser

You might want to reconsider enabling the router configuration site through the WAN interface. Security (un)wise...in my opinion. Instead enable VPN and browse to the private IP of the router. The public IP is on RB2011? If yes, just put only the public IP in the browser without any port. Don't forg...
by erlinden
Wed Nov 23, 2016 9:50 pm
Forum: Beginner Basics
Topic: Firewall help
Replies: 2
Views: 594

Re: Firewall help

Thanks blajah, for some reason the forward is working again AND the block is working as well :)
by erlinden
Wed Nov 23, 2016 10:01 am
Forum: Beginner Basics
Topic: Firewall help
Replies: 2
Views: 594

Firewall help

A previously created (and working) port forward is no longer working. This is port 50022 outside forwarded to my Synology NAS. The only things I changed afterwards is installing a VPN server, adding a guest vlan and block all traffic from guest vlan . Another problem I can't solve is how to block al...
by erlinden
Fri Nov 18, 2016 12:23 pm
Forum: Beginner Basics
Topic: VPN L2TPi/PSEC to Win 2012 R2 RRAS
Replies: 9
Views: 3384

Re: VPN L2TPi/PSEC to Win 2012 R2 RRAS

I just had to open ports 500, 1701 and 4500 for UDP, you should add port forwards like mentioned here:
https://www.nasa-security.net/mikrotik/ ... ith-ipsec/
by erlinden
Thu Nov 17, 2016 1:21 pm
Forum: Beginner Basics
Topic: iPHONE VPN with Mikrotik
Replies: 7
Views: 3999

Re: iPHONE VPN with Mikrotik

in QuickSet, click the "VPN" checkbox, and a L2TP+IPsec setup will be made automatically, and you can connect right away. So just one click in QuickSet page.
This is really nice! Will this also add necessary firewall rules?
by erlinden
Mon Nov 14, 2016 1:33 pm
Forum: Beginner Basics
Topic: VPN L2TPi/PSEC to Win 2012 R2 RRAS
Replies: 9
Views: 3384

Re: VPN L2TPi/PSEC to Win 2012 R2 RRAS

I'm running L2TP on my RB750Gr3, only needed the 3 UDP ports.
Have you tried the L2TP VPN server locally?
by erlinden
Sat Nov 12, 2016 10:28 pm
Forum: General
Topic: Two Seperate LAN Networks Behind One RB750 ?
Replies: 13
Views: 7505

Re: Two Seperate LAN Networks Behind One RB750 ?

I would suggest creating a VLAN (for the servers) to separate the networks.
Don't forget a firewall rule that drops any traffic between the two.

Wat have you tried so far?
by erlinden
Sat Nov 12, 2016 7:09 pm
Forum: Beginner Basics
Topic: CSR125 and ping 2 hosts on default configuration
Replies: 1
Views: 316

Re: CSR125 and ping 2 hosts on default configuration

By default one of the ports is a WAN port. Which ports did you use? Have you tried two other ports?
by erlinden
Sat Nov 12, 2016 1:44 pm
Forum: Beginner Basics
Topic: RB951G-2HnD and Guest WiFi
Replies: 1
Views: 576

Re: RB951G-2HnD and Guest WiFi

This YouTube video helped me a lot:
https://www.youtube.com/watch?v=-Q2vCrcI4xI&t=965s

Summary:
Add a VLAN adapter to ethernet 2 (I am using the default configuration)
Add an address to the VLAN
Create a DHCP server and attach it to the VLAN adapter

That's it :D
by erlinden
Thu Nov 10, 2016 5:31 pm
Forum: Beginner Basics
Topic: bypass opendns
Replies: 13
Views: 2013

Re: bypass opendns

For performance reasons I suggest using the internal DNS server of your Mikrotik as DNS server for all clients. You can forward requests to any DNS server you like, either OpenDNS or your provider. Still not clear what you would like to accomplish.
by erlinden
Thu Nov 10, 2016 12:01 pm
Forum: Beginner Basics
Topic: Need help for making a VPN on a Mikrotik router
Replies: 2
Views: 479

Re: Need help for making a VPN on a Mikrotik router

Have you changed your firewall?
You need to accept several ports...
by erlinden
Thu Nov 10, 2016 11:00 am
Forum: Beginner Basics
Topic: L2tp/IPsec VPN
Replies: 1
Views: 487

Re: L2tp/IPsec VPN

I have the VPN running on my RB750Gr3 and adjusted the firewall with: UDP 500 UDP 4500 UDP 1701 5 See also: IP Protocol Type=UDP, UDP Port Number=500 <- Used by IKEv1 (IPSec control path) IP Protocol Type=UDP, UDP Port Number=4500 <- Used by IKEv1 (IPSec control path) IP Protocol Type=UDP, UDP Port ...
by erlinden
Sat Feb 08, 2014 5:33 pm
Forum: RouterBOARD hardware
Topic: What would be your advice
Replies: 4
Views: 1092

Re: What would be your advice

Tanks For the respons so far... Building an AP sounds like a good alternative. I found this setup: RB912UAG-5HPnD in combination with R11e-2HPnD OR RB912UAG-2HPnD in combination with R11e-5HnD Either one of the combinations above beter than the other? Or is there a beter alternative? Combine the abo...
by erlinden
Sat Feb 08, 2014 12:08 pm
Forum: RouterBOARD hardware
Topic: What would be your advice
Replies: 4
Views: 1092

What would be your advice

Current situation: Cable Internet, 50/5Mbps RB951G-2HnD (main router) RB911G-5HPnD (5GHz AccessPoint) New situation: Fiber Internet, 300/300Mbps I'm looking for a new router that is capable of handling the new speed (and preferably is future proof...500/500 Mbps will be available within a couple of ...
by erlinden
Fri Jun 21, 2013 11:14 pm
Forum: Beginner Basics
Topic: Wireless bridge with existing network
Replies: 2
Views: 825

Re: Wireless bridge with existing network

I tried the WDS Bridge Tutorial but have the feeling that the server (AP) side cannot be configured for both wireless clients and a wds bridge station. Can someone confirm?
by erlinden
Thu Jun 20, 2013 10:39 am
Forum: Beginner Basics
Topic: Wireless bridge with existing network
Replies: 2
Views: 825

Wireless bridge with existing network

http://www.e-miel.net/wp-uploads/e-miel.net/2013/06/Network.jpg My existing network consists of the RB951G-2HnD that is setup as standard router (wired/wireless/port forwards/etc.). DHCP is handled by the Server1 (192.168.50.0/24). I want to create a transparent bridge with the RB951-2N, but am a b...