MikroTik

heislerb

Change your per connection classifier from both address and ports to both address.

heislerb

I have a RB750G running 6.27 using address-list just fine.

Troubleshoot your script. Most likely, you used something that they have tightened up the rules on and is now considered not correct to use.

EDIT:

Opps - I did not use the find command.

heislerb

Works on RB750GL.

heislerb

Don't close the queue window.
Close with the exit on the left.
When you open again the queue setup will be as you changed it.

If you close the queue window and exit, the queue window will go back to the default settings.

heislerb

Do a search of the wiki. Here is one result of a search.

http://wiki.mikrotik.com/wiki/How_to_ma ... _web_proxy

heislerb

+1 good

heislerb

Turn off DHCP. They would have to type in all the required access for internet.

or

Firewall filter rule to drop all address in a drop address list (all DHCP).

or

put WPA2-AES security on the wireless and don't tell anyone

I am not an expert, so these are quick thoughts to see if I can help.

heislerb

jarda thanks for the reply.

I see how it can be done now. I like the queue method as you have graphs and can see and control more. I am far from your level of experience, so maybe the queue method matches my level of experience.

Thanks again.

heislerb

Or let the DHCP server to add the queues.

Can you explain a little more. I would like to understand this.

heislerb

For the sake of consistency, wouldn't a "Mark forums read" button on the main page above the forum list on the right side be appropriate? At the moment, one needs to go to the Forum drop-down list for that, which is, let's say, different compared to the topic pages... I think SE Square st...

heislerb

It won't kill you. I done it and I am still kicking.

Use copy and double check every 10 entries.

heislerb

I did not realize how bad the new form design was until I found out I could change my form style to SE Square.

Thanks!!!

heislerb

I did not realize how bad the new form design was until I saw the previous post and changed my style to SE Square.

Thanks!!!

heislerb

Is it possible to have more definition on what is read and not read?

When click to read the unread part of a thread, I find it difficult to know if I have be redirected to the right spot. The heading is a little darker In the unread posts, but sometimes it is very hard to tell.

heislerb

I am no expert on this, but I have a triple wan setup and I had to put a mangle rule it to send blocked packets to one wan. Your rule has to be in front of all the load balancing rules. Below is my rule. You should be able to translate it to your needs. add action=mark-routing chain=prerouting comme...

heislerb

I have two RB450G's in service running ROS 6.18. I also have RB750GL test unit running ROS 6.24. I think I started at ROS 6.4 or 6.5. It has not been my experience that they required a reboot for changes to take affect. I have found if you delete something (not using safe mode) by mistake, you bette...

heislerb

Use default and you will not have a problem. It is the recommended setting in the wiki. I don't understand why they don't make "default" the default setting.

heislerb

You have to use the CLI to change the MAC.

set [ find default-name=ether1 ] mac-address=00:00:00:00:00:00 name=1WAN0097140MID2

I copied this from a RB450G live.

I can't help with anything else.

heislerb

RB750G ROS 6.20 upgraded to 6.21 (second try) and it looks good.

This is my test router. I lost a bit of code I was working on before the first try.

I would like to know why things went wrong the first time.

heislerb

RB750G 6.20 upgraded to 6.21 by copying the npk file to the file list and rebooted. Could not access RB750G. Downloaded and run netinstall. Was able to access the unit and downgrade to 6.20. All OK on 6.20. I have upgraded many times form 6.5 and this was a real surprise. edited to change 450 to 750

heislerb

Hi plisken;

I download the "upgrade package" from the Upgrading RouterOS page.

RB450 ver 6.18 includes the wireless-fp package, but shows disabled.
RB750 ver 6.19 includes the wireless-fp package, but shows disabled.

Bob

heislerb

You may find this link helpful.

http://wiki.mikrotik.com/wiki/How_to_co ... ome_router

heislerb

I have a triple WAN with PCC load balancing and auto-failover. I find it works great but has one minor flaw. If users are just surfing the net load balancing is just perfect. If a user is downloading maximum for hours then one WAN takes a hit. I have 7 PPC's for each WAN using source and destination...

heislerb

In the link below is a schedule with a short script that will update your NTP primary and secondary IP address every 30 minutes. I have it running . I can't remember if I had to edit the script.

http://forum.mikrotik.com/viewtopic.php ... pt#p415437

heislerb

It is all working correctly.

If one user downloads their max download is 4mbps.

If 8 users are downloading and they are controlled to 1mbps then they will all get their 1mbps (8mbps combined)

The above is the way it works.

heislerb

Good remote upgrade 6 devices to v6.15!

How did you do your remote upgrade? Did you copy the upgrade file to the file folder and do a reboot?

heislerb

I am viewing graphs from a second router. The following is the setup; router 1 - 192.168.1.40 (graphing allow address set at 0.0.0.0/0) > router 2 192.168.2.40 (IP used to view graphs in router 1 is 192.168.2.100). The above setup works great. I can view all graphs on both routers. I now what to li...

heislerb

Plisken thank you for your response, but you did not answer the question.

heislerb

I am viewing graphs from a second router. The following is the setup; router 1 - 192.168.1.40 (graphing allow address set at 0.0.0.0/0) > router 2 192.168.2.40 (IP used to view graphs in router 1 is 192.168.2.100). The above setup works great. I can view all graphs on both routers. I now what to lim...

heislerb

1 - if you find out how to do this please post. I am also very interested 2 - I think you could do this with other versions on #3 3 - scheduler, scripts, IP firewall address list. Put all IP in the address list that you want to scan and see if the total-bytes >50GB. Set up a script and a schedule to...

heislerb

can you make a printscreen of the configuration? You did not say static or dynamic IP. I assume you want dynamic. If you are handing out DHCP 192.168.1.100 - 192.168.1.199, you simply enter each IP address from 100 to 199 in the simple queues. The user is assigned one of those IP's and their bandwi...

heislerb

v6.10 SSTP tunels work very unstable, go back to 6.7... many tunels connect\disconnect every 1-10min, but any tunels uptime is few days ... on v6.7 same tunel work more stable... Platform - RB1000 powerpc 2) recreate all manle rules with action = routing mark (i have this test: do recreating mangle...

heislerb

I have RB450G and two WAN connections configured by the guide from here. With all RouterOS versions up to v6.7 it works perfectly. But with v6.9 and v6.10 routes / ip route add dst-address=0.0.0.0/0 gateway=10.111.0.1 routing-mark=to_wla1 add dst-address=0.0.0.0/0 gateway=10.112.0.1 routing-mark=to...

heislerb

I just figured it out. I have to move the firewall filter rule to the top of the list. This way the input established connection gets dropped and not accepted by the other firewall filter rules. Sad part is, I knew this when I started to design the script.

heislerb

RouterOS supports scripting in which you could find the marked connection and then disconnect it. However, it might be more useful to simply throttle it down to nearly nothing and let them disconnect on their own. You can see how I do this here with HTTP_BIG connections. Yes, I would like to know h...

heislerb

I wrote a script to block a users access to the internet for a period of time, after that user reached a certain amount of bytes usage. It adds the below firewall filter rule which works as described. In testing, I found it did not stop a download in-progress (does not stop an established connection...

heislerb

Below is part of a script that worked in version 6.7. The $i does not work in version 6.9. If I replace the $i with 254, the script runs. I tried "192.168.88." . $i . "/32" and other variations and it does not work. Can anyone help, as I am not sure what to try next? /queue simpl...

heislerb

RB750GL upgraded from 6.7 to 6.9. The following command works in 6.7 and not in 6.9. 6.7 on RB450G or RB750 [admin@RB450G-Main] /queue simple> get [find target="192.168.1.199"] total-bytes [admin@RB450G-Main] /queue simple> 6.9 [admin@RB750GL-Bob] /queue simple> get [find target="192....

heislerb

RB750GL upgraded ROS from 6.7 to 6.9 (firmware from 3.10 to 3.12). Script no longer works. Down grade to 6.7 and script works. I am not good at doing scripts. Can anyone quickly tell me what 6.9 found to be a problem. Note; value of > 330000 is only for testing, PLEASE ANSWER in this thread http://f...

heislerb

winbox....

Thanks littlebill !!!! It all worked like a charm.

You are a person of few words. I almost gave up with your response. Then I followed your instructions and I had a little laugh!!!

Bob

heislerb

system packages, downgrade

What is a system package? How do I get it? What do I do with it?
Sorry I know so little!

heislerb

Can I have a download link for 6.7 so I can downgrade?
Just copy the 6.9 link, change 6.9 to 6.7 and press enter)

I copied 6.7 to the file area and rebooted the router. The router still shows Version 6.9. How do you down grade???

heislerb

I have an RB750GL as a test bed. I upgraded from 6.7 to 6.9 and all went well. Also went from firmware 3.10 to 3.12. It is a very basic configuration at this time. I now have these entries in the log that I have never seen before. I only have one computer connected to the lan ports and the computer ...

heislerb

Thanks again!
Bob

heislerb

Thanks for the reply. I will give this a try when I get back to working on that.

So, I could put that command in a script or put it in the event area of a schedule?

Thanks again
Bob

heislerb

I have a schedule and it's name is a MAC address. I have a firewall filter rule that blocks that same source MAC address. I am about to write a script to find and delete the firewall filter rule and then delete the schedule. This process may be repeated with another schedule and filter rule block an...

heislerb

Check my post in this thread. Use source IP (users IP address) instead of destination.

http://forum.mikrotik.com/viewtopic.php?f=2&t=80518

heislerb

And if I don't know the clients?I have their MAC address not

I guess you did not understand the dynamic option?

heislerb

Yes it is possible to limit bandwidth per user. Static - Enter MAC and IP into ARP. Enter IP into simple queues and you can set the bandwidth for each user. Dynamic - Enter Dynamic IP's into simple queues and you can set the bandwidth for each IP. Since you don't know who is going to get that IP, yo...

heislerb

You can use a mangle rule, placed just before the two rules that sends packets from WAN1_conn or WAN2_conn to WAN1 or WAN2. You can use a destination address or a destination list. Rule to add **** add action=mark-connection chain=prerouting comment=Netflix dst-address-list=\ netflix-ips dst-address...

heislerb

Owen, thanks for the information.

heislerb

I have the following firewall mangle rules for a dual wan configuration. The four bold and underlined rules are disabled. Can anyone tell me the meaning of these commands or how to know exactly what they do? The dual wan works good with these commands enabled or disabled. I understand all of the oth...

heislerb

Thanks for the reply. I decided to stay with one subnet for both AP's and at a later date maybe move to two subnets. I will be installing the RB450G tomorrow and don't what to make any changes at this time.

heislerb

My knowledge is very limited. I am setting up an RB450G v6.7. I wanted the following; port 1 WAN static IP 1.1.1.1 port 2 LAN IP 2.2.2.2/24 port 3 (port 2 master and use this port for access to 2.2.2.2/24 port 4 LAN IP 3.3.3.3/24 port 5 (port 4 master and use the port for access to 3.3.3.3/24 It wil...

heislerb

I have a Dual WAN with static IP's working. The Dual WAN part is working good. I think it is not 100%. I used the following link and made a few changes. One user cannot get the combined input, but 20 users can get close to the combined input. http://aacable.wordpress.com/2011/06/04/mikrotik-4-wan-lo...

heislerb

Are you trying to provide 4Mbps to 1 user?

Search found 56 matches