MikroTik

DotTest37

Worked perfectly. I added a new public DNS record with TTL 60 sec and I'm using that from Mikrotik.
The DNS record is updated with a sh script that I have running inside a Linux box at home.
Mikrotik is checking the record every 60 secs and updating the address list.
Thanks a lot for the good advise.

DotTest37

It uses TTL from DNS record.

Testing now, I set a 60 sec TTL and changed my record. I
I will test through the day and report back.

DotTest37

You didn't write what exactly you have. If it's some firewall rule, you can use address list with hostname.

I have firewall filter rule.
specifically an input rule that allows my home external IP.
How often does the address list refresh the resolved address?

DotTest37

I switched my ISP at home and now it changes public IP once a day. three of my remote Mikrotik boxes had rules whitelisting my home IP, and now I have to manually edit then. I know I can make a script on my home box to detect the IP changes and update its rules, but how can i do the same on the remo...

DotTest37

[quote= OK scratch and start again trying this: https://wiki.mikrotik.com/wiki/Manual:Interface/Wireless#Repeater I have never used it - I am wondering if it quietly enables (local)-proxy-arp into the mix. [/quote] :-( , those instructions called for a passphrase on the main interface so it connects...

DotTest37

I tried that, but the laptop never gets DHCP.
I see the bootpc/bootps traffic on the slave Wifi, and I see it on the Bridge, but I never see it on the master Wireless.
I though the issue was on the bridge, but if I set it for DHCP client it gets an IP from the ISP.

DotTest37

Hotspot style login, just like a Hospital.
I dont want the Mikrotik to register on the Hotspot, because what I want is to use one or more laptops, and log in from them.
Does that makes sense?

DotTest37

My cable TV provider have hotpots all around the city, I always connect to them with my laptop authenticating via web using an account I have with them. Sometimes I work in a place where that WiFi signal is very weak, and I wonder if I could use a Mikrotik to amplify it so I can connect to the Inter...

DotTest37

On October 09 Normis wrote on another forum "Several other topics exist about this already. We are working on winbox64" Normis,, you are interpreting the forums the wrong way. No, no, no, we dont want no "Windows-based stuff",, We need native MAC !! MAC please. Nobody can say we ...

DotTest37

We are aware and are working on all of that.
Waiting.... ^^

Me too

DotTest37

+1 for native OSX (MacBox)

DotTest37

is there any way to set aside 2 Mbits for certain type of traffic (VoIP for example) , regardless of the total available bandwidth? I want to make sure certain traffic gets at least 2 Mbits, leaving the rest for anything else (web browsing, email, chat, etc) No - you might be able to build a script...

DotTest37

I have an ISP that sometimes throttles my bandwidth. My physical interface to the Modem is 1Gbit, but the bandwidth to the Internet is obviously a lot less that that. It should be 25 Mbits, but sometimes it slows down to 10 Mbits for few days. Ive seem many tutorials of setting QoS queues specifying...

DotTest37

Any other option? Another routing protocol? multiple OSPF instances perhaps? You might be able to do this with BGP, depending on your topology. :-) I wouldn't even know how to start with that. Can you run two instances of OSPF between the same two routers (with multiple loopback addresses, etc) and...

DotTest37

Static routes. Pretty much all that comes to mind. OSPF can't manipulate cost per route, only per interface. Static Routes wont failover when the main ISP goes down. I would have to create a script for that. That would defeat the purpose of the OSPF. Any other option? Another routing protocol? mult...

DotTest37

What does exactly mean: !) user - removed insecure password storage; ? It is already written in the head of the release notes! In older RouterOS versions before 6.43 the passwords were stored in plaintext. In the 6.43 version they were changed to hashes but the plaintext version remained so you cou...

DotTest37

What does exactly mean:
!) user - removed insecure password storage;
?

DotTest37

I have OSPF running between two Mikrotik Routers, each of them with 2 WANs configured on failover. I have few private subnets behind each router. Right now my OSPF Interfaces are configured like this: ISP-A Cost : 10 ISP-B Cost: 30 Thats how I got OSPF to use ISP-A by default for all the intra-offic...

DotTest37

+1 from me

DotTest37

How can I prevent these two issues: 1- Someone connecting an unauthorized Access Point in my network (plugging an ethernet wire on the wall, but with different SSID from mine, using his own NATting). 2- Someone running an Access Point with my SSID (even if not plugged in my ethernet wiring, trying t...

DotTest37

DotTest37, go read the CVE. You are getting worked up over nothing. The published CVE has nothing to do with OpenVPN or SSTP security vulnerabilities. It has to do with possible DoS to a host via certain crafted TCP packets, not privilege escalation, not cert/data leakage, etc. The "bug" ...

DotTest37

On which condition should we worry or not on this particular issue?
Not worry when kernel version is below 4.9

Im confused. So, should we worry about this vulnerability, or not.
If so, on which scenarios?

DotTest37

I think he meant this in a more generic sense. Anyone can submit something to the CVE database. I think so, but I wanted to make sure we dont minimize reality. On which condition should we worry or not on this particular issue? (OpenVPN implementation on RouterOS not able to check the validity of a...

DotTest37

I've been following up on this topic.
Any news from MIkrotik on this issue?

DotTest37

Just a side note - it is way too easy to create those CVE-2018-xxxx entries.. Anyone stubborn enough can do it, even without any actual knowledge of the subject, i think this should be restricted to companies only, for example MikroTik should do it itself. Are you suggesting that this CVE report mi...

DotTest37

They likely have a route in their routing equipment that routes the /29 over your end of the /30. I was just thinking,, then why they specified a default gateway for the /29 network on the paper they sent me? Because if the incoming or outgoing traffic for the /29 gets routed via the /30 network, t...

DotTest37

They will turn it on tomorrow, so I guess I will find out then.
All said one m this thread make sense though.

DotTest37

Do I have to ask the ISP to route the /29 via the gateway from the /30 ? Because those two segments are not contiguous.
I remember doing that in the past, with Cisco .
Otherwise how the internet originated traffic will reach the /29 if the only segment on my WAN interface is from the /30?

DotTest37

Im setting a Mikrotik device at a new location, asked for 5 public IPs, and the ISP provided me with two segments. They gave me a /29 network but they also gave me a WAN IP block, and according to them this is for my "WAN" interface. (Image attached) IP-Mikrotik.jpg How do I configure that...

DotTest37

Which RC did you install?
Id like to try the same.

DotTest37

Still waiting.
Any hope on this?

DotTest37

Hi TomjNorthIdaho Yes, that is very useful indeed! I do have an ESXI 6 box with Mellanox 10GBE dual NICs, it didnt occurred to me doing that tests. I also have 10GBE switches at my home lab, and a couple of Windows servers with 10GBE NICs as well. That could give me a a good test environment, I can ...

DotTest37

If a hardware platform has limitations on handling a physical port, then why that port is even there to begin with? Just my thought of course. I was not expecting much from the CRS, but at least to handling file transfers from two workstations connected to 1GB ports and a SAN connected to the 10GBE ...

DotTest37

Hi guys. What is the expected throughput if I run routeros on a x86 board with 10GBE ports? I was thinking Supermicro X10SDV-TLN4F It has an Intel Xeon CPU and two 10GBE ports. Has anyone tried that? I was appalled by the performance of the MT CRS that come with SFP+ ports, I tried a couple, switchi...

DotTest37

Same here.
Would love to see it supported.

DotTest37

Hi
I really need this.
A customer of mine has a few of these, and they will move to Mikrotik if I can make them work as Internet backup for their branches.

I would help on anything if needed.

DotTest37

This would be nice.

Not sure if it was done yet,, Im trying to use a 291L and it wont work on my CRS125-24G

Does anybody knows how to make it work?

DotTest37

Thanks I should have been more explicit. The Huawei E8372 I mentioned can be also used as WIFI hotspot, when not connected to the MT router. This is what I want to do: Use the device as everyday hotspot for when I work outside the office,, and then occasionally connect it to the MT so I can use it a...

DotTest37

Hi

Has this been done already?
I would like to help, I dont have the modem now but I can buy one.
Thanks
Dotty

DotTest37

I have a CRS 125 and I would like to add LTE. Currently have an extra SIM on my Verizon plan in the US. I was checking USB modems, so I can use as dongle, seems like the Huawei E8372 might not work in US. Does anybody knows a good USB LTE Modem compatible with Verizon LTM that I could use on my MT b...

DotTest37

Hi

Where would I find an example of such counter?
Im not sure where to start.
Thanks!

DotTest37

Can you run Metarouter on CHR?
Im thinking on installing one on AWS, and perhaps might be an idea to give each user of each subnet their own access to Router OS.

DotTest37

I have this customer with dual WAN, ISP1 and ISP2. ISP1 is a fiber Internet link, with 60 Mbit download and low latency. ISP2 is a regular DSL, 20 Mbit download, twice as much latency. ISP1 is primary, and ISP2 is used only for failover, in case ISP1 goes down. Both ISP1 and ISP2 provides static pub...

DotTest37

I dream too

DotTest37

I imagined something like BGP was used, since they seem to be offering a public IP that could be used on customer's premises to host service over the internet etc. I know this has been discussed many times over, but in terms of BGP, how hard is to get a ASN for a small provider? Some customers of mi...

DotTest37

I was reading an article online, and found this:
http://www.netcelero.com/single-static-ip.html

They offer multiple bonded ISP connectivity as a service and they seem to claim offering the end user the same Public Static IP over any of the bonded ISP.

Any idea how they do that?

DotTest37

Direct IPsec tunnels are always causing problems in many areas due to the way they directly interact with the lowest level of IP routing. I would change the direct IPsec tunnels to IP over IPsec or GRE over IPsec tunnels with a /30 network, and then set routes with different preference or run a rou...

DotTest37

Im having the same issue, but on a CRS125 Need some help. The download speed on WAN2 should be 120Mbits, but I get only between 50 and 60. A funny thing,, the WAN1 speed is 50 Mbits, as it should be. Im using Port1 and Port2 on the Mikrotik, I wonder if the switch configuration on those ports has an...

DotTest37

At Site1 create a netwatch script that monitors Site2 ISP 1. When Site2 ISP 1 connections goes down it disabled the the ISPec peer for ISP 1 and enabled the IPSec peer for ISP 2. When Site2 ISP 1 connections comes back up it enables the the ISPec peer for ISP 1 and disables the IPSec peer for ISP 2...

DotTest37

Hi guys
I have this script that is taking too long, and Id like to log the duration on each step.
If I use log info "/system clock get time" the resolution is just a second.

Id like to get milliseconds, logged on each step, so i can catch which one is slowing me down.

Thanks

DotTest37

Hi guys I have two sites, each of them with a LAN behind NAT, and each of them using different ISP. Im trying to set a Dual WAN ipSec failover, but the ipSec policy keeps giving me trouble, Site1 is like this: ISP0 public IP 1.1.1.1 LAN 10.5.10.0/24 Site2 is like this: ISP1 public IP 2.2.2.2 (this i...

DotTest37

On Winbox doesnt work well. I was remotely logged in, used Safe Mode, deleted the WAN interface, obviously got kicked out. Instructed a helper to reboot the Router (unplugging/plugging the PSU) and the WAN interface never came back. Went physically next to the router and plugged an ethernet cable, u...

DotTest37

Excellent

I have two extra MT routers, I will test it this weekend and will report back.
Thanks!

DotTest37

I just read about Netmap on the Mikrotik Wiki. Great suggestion. One question though, will Netmap make the NAT table static on a prefix basis? for example, will server 10.0.0.10 will be always translated to 192.168.200.10? even if the servers came online in different order? (We cannot have a case wh...

DotTest37

I have this use case where I need something I dont know MT can do. Three locations, one master with a NOC software and two sites with servers. Each location has a public IP but all internal servers use src-NAT to access the Internet. I have to set a VPN between the NOC and each of the two sites so t...

DotTest37

Well, you are right,there is no real requirement for having the same subnet on both sides, it is just the way I imagined it first. I was thinking to have devices on the client side getting IPs from my server side DHCP so I could see all of them in the same place, but networking-side, yes, no require...

DotTest37

I actually did, left the client router with default settings, added the certs from the server router and created the OpenVPN Client settings and I was able to connect the client to the server. then I added some firewall rules, mangle, etc and I was able to ping a PC behind the client router on subne...

DotTest37

I already have a Cloud Switch configured as OpenVPN Server, and I use Viscosity from my Mac to VPN to home. Is it possible to have another Mikrotik router act as a OpenVPN Client and connect to my Cloud Switch in Bridge mode ? (not sure if Bridge is the right word, I just need to be able to see the ...

DotTest37

Bump.
It took days for the opening post to be checked by a Moderator, and was pushed to the bottom.

D.

DotTest37

This is my first post on this Forum. Ive been hanging my head on this one. I have 5 public IPs from ISP, the first IP is used for NAT overloading so my LAN can acess the Internet (this works) I also added a dst-nat using the second public IP from my ISP, a To-Address and TCP port 80 and another on p...

Search found 60 matches