MikroTik

mneumark

Hello, I recently upgraded a PPPoE concentrator I have setup for our customers. After the upgrade I've received a lot of customers calling me about "phone line busy" error message when they try to hit connect on their pc. I've only noticed this on the customers that I have setup for direct...

mneumark

/interface wireless access-list export

Matt

mneumark

It looks like they both have a mini-pci slot right on the board there. TAke another look.

Your right...

Here is benchmarks on this board...

http://www.mini-itx.com/reviews/nano-itx/

mneumark

Hello all. I am new to the Mikrotik OS and need assistance setting up a WDS system. Here is what I have: AP1 connected to the ethernet network that connects to the internet. This AP is an RB333 with the Atheros AR5413. The area I need covered by this AP is too big and some areas in building do not ...

mneumark

I found this Mico ITX motherboard but just wondering if anone knows if it will work? http://www.amazon.com/EPIA-N10000-Nano-Motherboard-Eden-N-Processor/dp/B000WCWXS8/ref=pd_rhf_p_t_1 It has a 1 GHZ Processor! Well those boards are very decent... The problem is i don't see a mini-pci slot for wifi ...

mneumark

When you run a bandwidth speed tests you are causing the CPU on both sides of the link to max out the most data out of that link which in returns takes up most of your CPU resources. This is what is causing your ping latency to go high. Matt I agree, bandwidth test uses all CPU, but my issue was a ...

mneumark

When you run a bandwidth speed tests you are causing the CPU on both sides of the link to max out the most data out of that link which in returns takes up most of your CPU resources. This is what is causing your ping latency to go high.

Matt

mneumark

Hello Mikrotonians! So, we are about to get a DS3 from Qwest. It's out first. They have quoted us $8000 for a Nortel DS3 router. This seems awfully high. Does Mikrotik have an enterprise solution for this? Is anyone currently using MT as a core router with a DS3 or greater link? What is the setup? ...

mneumark

Connor9220, Try the following rules... / ip firewall mangle add chain=forward tcp-flags=syn action=jump jump-target=mss comment="\[tcp\], mss" disabled=no add chain=mss protocol=tcp tcp-flags=syn tcp-mss=!536-1460 action=change-mss new-mss=1440 comment="\[tcp\], mss fixation" di...

mneumark

Well the main reasons i ask about this card, is I purchased dual port Intel PCI-E PT nics and they worked great. This one didn't.

The main problems i have is MT list of supported nic. Is almost non of the nics they have listed are available for new now. Atleast the dual and quad port nics.

Matt

mneumark

Tried the newest version of MT and it still didn't work. I got my hands on several other motherboards and tried the card in all of those also. Still no go. I plugged the card in a Microsoft box and the card recognizes. I have another core router that i use and that box has the Intel 1000 PT Dual Por...

mneumark

I have a router I’m trying to put together. Does anyone know if the Intel Pro/1000 PT Quad Port nic works with the RouterOS? Also, does anyone know if the PCI-E 16x slot where the video card goes work for anything other than video cards? I tried to use this setup and so far the nic won’t recognize. ...

mneumark

Do you have proxy-arp on your interface facing your network? Does that interface have ip address ranges assigned to it?

If you post your configs we can help more...

Matt

mneumark

Try using VLANs.

Matt

mneumark

I have thre AP's, all with the same issue. each AP has anywhere from 4 to 10 clients on it, and anyone below a -75 disconnects pretty regularly and has slow upload speeds. Even some client that have signals as high as -68 will disconect! According to Ubiquiti, I should be able to have client connec...

mneumark

Do you have any firewall rules, queues, or anything else running like BGP or anything? I have had very good luck with my 2.9.44 pppoe concentrator. I would highly recommend upgrading to 2.9.46 as they have alot of bugs they have fixed, even knowning they haven't put them in the changelogs. I believe...

mneumark

What NIC(s) did you have in there before? This box has like 12 VIA (RhineIII) NICs in it. (not sure what brand of multi-port cards we're talking about here). Unfortunately, I'm not in control of the router, nor did I build it (I've been partial to Intel NICs for years, and would never dream of usin...

mneumark

There are tons of ways to do the MTU setting. Mangle is one way.

Matt

mneumark

I also had the exact same problem in the past. I ended up finding out it was the NIC i had on the pppoe concentrator. I replaced it with a intel pci-e dual port nic and that thing works wonderful. I haven't had any problems with that or speed since.

Matt

mneumark

I have the problem described in other posts where some of the pages load and others don't. I also seen where they mention changing the MTU. I looked at the settings in the modem and it has 1540 for MTU. My question is how do we know what to put on the RB to make it work because the RB won't even ex...

mneumark

hi

what is the longest cable run one can do with lmr400?

thanks

I've seen 1000ft lmr400 cables ran.

Matt

mneumark

Perfect line of site, no fresnel zone issues. 23 dbi panel's each end and about a 60 degree slope drop off from the botom of the tower and going out 1000 feet or so. Shot is mountaintop to edge of city 4000' vertical elevation difference. between sites. and 4.12 miles direct line of site. We are th...

mneumark

Thanks alot. What about the non AP beacon error. Whats the explanation "no beacons" - no beacons received from remote end of WDS link. Most likely weak signal, remote turned off, strong interference, some other RF related issue that makes communication impossible. Again normally you will ...

mneumark

Sure thing I just wonder if that compromises PPPoE which I use for my costumers.

Lollo,

I use this setup on mine and i also have pppoe customers. No problems.

Matt

mneumark

Hi, i have been battling with this for a while. I have my AP in wds and when i connect with clients in wds mode. I get very frequent disconnections with this kind of error in the log. mac@wlan1: disconnected, beacon from non AP mac@wlan1: disconnected, excessive data loss (signal strength of about ...

mneumark

What do you mean by "just routing"? Disabling WDS and just adding "Routes" in the route list? You got it! If you use EoIP or WDS it just adds packet overhead and can cause your like to be alot slower then needed. By removing all the possible tunnels, it will also mean less thing...

mneumark

hi janisk ok i set up and used this gonfiguration if yuo look this link http://wiki.mikrotik.com/wiki/Transparently_Bridge_two_Networks but iam affraid not worked in more distance approx 8km and i have aproblem with bandwidth this configuration transfered only 2 Mbps, if you have abetter configurat...

mneumark

Thank you very much! I'm definitely going to check the non-wds link then ;) One last thing... is your ping stable? Has it any high peak? Also, what's your throughput? Well the ping latency are average ~5ms. I really don't notice any high peaks, but once in a great while i will see a 15ms ping when ...

mneumark

thanks Matt, it works very nice, I'm happy with this configuration. I have made few small changes instead of ap-bridge I have used bridge mode and so one. I'm still trying to find reason why the wds example didn't work. Regards. Faton WDS is really picky and if you miss a step or its misconfigured ...

mneumark

Sweet tutorial :) Did you achieve any significant result on your non WDS link with latency? I'm suffering of high and unstable ping times (you can check my thread here ), and I was thinking of giving a non WDS link a try I do know that going with non-wds helped my link out and made it 200% more sta...

mneumark

Yes I have created and configured bridge interface and added interfaces to it but it is not working. Can anyone post any configuration other than wiki. Regards. Faton. Fatonk, I posted this to the wiki a few days ago... give this a shot. It's another way to do transparent bridge. http://wiki.mikrot...

mneumark

mneumark, may i have your setup configuration please? i'm doing WDS now, and i wanted to try your setup. thank you To make everyone's life easier, i started putting this setup the WIKI... http://wiki.mikrotik.com/wiki/Transparently_Bridge_two_Networks_without_using_WDS_%28EoIP%29 Its not pretty and...

mneumark

I would also like a copy at matt <at> velociter <dot> net.

Thanks,
Matt

mneumark

Hello First, I think that you should try some different frequencies. Your noise floor is too high. I think, that your link will improve a lot if you find a spot where the noise is better than -100. Interference can kill any link. Secondly - the various comments to your wds-mode: They may not know, ...

mneumark

Ok so I put a pppoe concentrator at each site. What kind of config can i use for the backhauls to get the maximum protential bandwidth from my current setup? 1) AP: AP-Bridge and SU: station and then just bridge the ethernet ports and wireless ports on each side, then setup routes? 2) Keep the WDS t...

mneumark

EoIP is to slow.

Can you terminate PPOE sessions on all your AP's (back to radius) and then route back to NOC?

That would require a MT PPPoE Concentrator at all tower locations correct? If that was the best solution that i know that works well, then i wouldn't have a problem doing that...

Matt

mneumark

So i gather going to a routed wireless backhaul system using EoIP tunnels to allow pppoe traffic to pass-through is the best way to go for me?

mneumark

Why are you using WDS for a backhaul link? While WDS is very effective in certain situations its not designed to be used in long range links.

Have you tried a PTP setup instead and measured the results?

When you say PTP setup you talking router or what?

Matt

mneumark

BTW I upgraded a few of my links today, when you upgrade upon reboot the wireless cards were disabled. Just a warning to those that want to upgrade without being on site.

mneumark

If I make a bridge with 2 MT and 2x108mbps cards, 24dBi antennas, LOS, will I get 6-7MB/s? Whats the max. speed with 2x108mbps cards?
Thanks!

Should be able to get that with no problems. I have links that are further then that and they get 13MB+ with WDS one way.

mneumark

Version: 2.9.45 TX CCQ: 60 Noise Floor: -96 Distance: 17.8 Miles Default TX Power: Default Average RSSI: -71 to -75 Average throughput: ~2.2MBs asymmetrical Setup: WDS Bridge w/o nstreme Now that you have some of the information here is the problem. The RSSI was -71 awhile back and the throughput wa...

mneumark

WDS and routing are two completely different animals...

mneumark

Well lets examine your code.... Code: /ip firewall filter> print customer Flags: X - disabled, I - invalid, D - dynamic 0 ;;; Drop invalid connection packets chain=customer action=drop connection-state=invalid <--- Drop invalid packets 1 ;;; Allow established connections chain=customer action=accept...

mneumark

I don't see any rule that allows for HTTP TCP traffic at all, plus how are they doing to query dns for an ip address.

Matt

mneumark

... how about an EoIP tunnel? (in addition to the routed links) PPPoE should be able to get thru' this? "all Ethernet traffic (all Ethernet protocols) will be bridged just as if there where a physical Ethernet interface and cable between the two routers (with bridging enabled)". http://ww...

mneumark

Hello all, I am having a problem concerning Mikrotik RouterOS. I have to authenticate my clients over a FreeRadius server. This server has Simultaneous-Use set to 1. The problem is that when my mikrotik pppoe nas reboots (like energy drop or something like that) this do not send ANY information abo...

mneumark

Jerry,

This is completely possible with MikroTik. When it comes to hardware your always better off going with a x86 system, but for your situation all it sounds like you need is a 532 routerboard.

Matt

mneumark

That is exactly what i'm trying to do. But it seems routing comes with it limitations.

Matt

mneumark

Ok after playing a bit with 2.9 I could get the P2P link up and going strong with Nstreme but the problem is the PPPoE traffic wouldn't go through it. So what i tried was upgrading to 3.0 and using pseudobridge mode and that works fine. What my question is for the experts are what are the downside o...

mneumark

Also,

I need to be able to forward pppoe requests to a MT PPPoE AC. Will this setup work for this? How do i do it?

Matt

mneumark

I have always used wds-bridge on all of my p2p links. I would really like to get off wds and go to routed p2p links. I have never played with just non-wds links. Does anyone have the correct way of making a routed p2p backhual link using with nstreme enabled? I could use any help that you guys are w...

mneumark

I want your idea .IS my setting best configuration or i need to adjust it?

Thanks Again

Fahedksa,

What are you using for radius authentication? Are you using freeradius or MT? If can also post your radius export too so we can see those settings...

Matt

mneumark

Hello, I'm using ROS v. 2.9.40 with routing package in following environment. |Master|-----link1-----|Slave |-----client networks |router |-----link2-----|router| There is one Maser router which is connected to the 12 Slave routers. I'm running OSPF between those routers to ensure load balancing an...

mneumark

Hi all, Thanks to you for discussing that type of probs. Ya me too facing a winbox probs. when i have open the WinBox then after few second it says " Could not get roteros.dll: no initial reply. the i close winbox and try to run it again but the error says " could not connect to "MAC...

mneumark

mneumark

THX NORMIS..ITS REALLY WONDERFUL TO SEE HELPFUL AND SKILLFULL PERSON IN THESE POSTS AND FORUMS..IF U DONT MIND PLZZ GIUDE ME TO SETUP A ptp LINK USING ROUTERBOARD 133C I M JUSTA STUPID BEGINNER..PLZZ Salamat, Look at this site: http://wiki.mikrotik.com/wiki/Transparently_Bridge_two_Networks It will...

mneumark

Disable routing among pppoe clients. Is there any option in MT to do it ?(disable routing among pppoe clients)? So, no one know or there is no option in MikroTik? You can always setup a rule in your forward firewall chain that states something like interface in=customers out=customers action=drop. ...

mneumark

No answer ?

El-Emin,

You might want to checkout http://wiki.mikrotik.com/wiki/PCQ_Examples

Matt

mneumark

hi, im using xeon 31xx series 2.4 ghz with intel server board s3000ah using mikrotik 2.9.43 and 2 gigabit onboard detected... i want add more gigabit... wanna know if mikrotik support Intel® PRO/1000 PT Quad Port Server Adapter on pci e adapter ?? thx icha_top7, I use the intel dual port server pci...

mneumark

If you have 8 ether ports in the machine, you can assign each to which ever partition/VM that you wish? Can you assign CPU affinity, etc also?

Well you can assign nics to the VM machine you want. When it comes to the CPU affinity you are going to set that in windows on the VM software.

mneumark

Checkout...

http://wiki.mikrotik.com/wiki/Forwardin ... nternal_IP

mneumark

Just to let people know my final solution. I ended up switching out the routerboard 44 in the router and replaced them with dual port intel cards. The latency is way lower, no packet lose, and speed are dramatically better.

Thanks for all your help...

mneumark

Have you tried replacing the RB44 card with another type card? Maybe a 4-port Intel Pro/1000 card? We've seen issues with the RB44's under stress in Intel motherboards. That is one thing i haven't done. When i switch out the NIC's i replace them with the same routerboard 44's. The problem is i real...

mneumark

I have a core router that is causing me alot of heart ache and i'm needing to find answers. Problems & Issues: 1) Added Latency going through Router (Any traffic going through this router will increase latency by atleast 10%-15%) 2) Uploads aren't their fullest Things tried to resolve the issue:...

mneumark

http://www.killernic.com/products/k1.aspx

see this monster with buildin os and 333Mhz cpu

I really do like those specs that KillerNIC has, but is it even supported by MT?

Matt

mneumark

Do you have your routes setup properly?

Matt

mneumark

Never Tired VMware but i would love to try it. I need some starting point to start using VMware any good tutorial site for startup of VMware. And define little info about steps for Installation RouterOs + fedora Core 5 You will need to run two virtual machines. One with RouterOS and One with Fedora...

mneumark

- What is the mane OS ? Is it Windows ? Fedora and MT - What is the VMware you use ? Is it Microsoft VM VMware - What is your recommendation for CPU and RAM ? I would recommend a dual core processor in the manor (2GHz+). The dual core process will help with VMware and fedora, but secondary core will...

mneumark

You can do this by using VMware. Just to be careful, pay really close attention on the amount of processor power and ram you have.

Matt

mneumark

Yes its possible. All the machines i have are way overbuilt. I don't have any issues.

Matt

mneumark

I'm looking for a good recommendation on network cards for my MT pppoe server. This box has alot of users connected and is passing alot of traffic. I'm looking for something compatible with 2.9.x RouterOS. I would really like a QUAD nic that way i don't have to use ton of pci slots, plus this will a...

mneumark

thanks for help.

But isn't 6 connection per user so small number?
If i look in my linux number users have between 2-50 opened connections.

Yes 6 is a very small number, a better bet would be 50-75 for connection limit unless you have a limited amount of packets per second.

Matt

mneumark

I want to limit connection per user. thx for help, or link to thread in forum I did'nt find it :( Your best bet is to start in the filter section of the manual... It has a great example on the very top of the page... http://www.mikrotik.com/testdocs/ros/2.9/ip/filter.php Example, Drop all tcp conne...

mneumark

See http://wiki.mikrotik.com/wiki/MikroTik_ ... d_Recovery for more details.

Matt

mneumark

Hi.

If we have rule with connection-limit=50,32 parameter in it, is packet matches rule if specified ip has less than 50 connections or if it has more than 50 connections or if it has exactly 50 connections?

thanks.

Alex,

50,32 will limit exactly 50 tcp connections per /32.

Matt

mneumark

Already upped that to 1000ms, other test clients are getting a response within 150ms. All that the timeout will do is cause the router to retry, the Server isn't seeing ANYTHING from the router. Have you tried turning on the logging on the MT to see what is going on between the MT and radius? Matt

mneumark

Hi All, I would like to ask few Question About Mikrotik. 1.How Much Concurrent Session It Supports 2.What is the Firewall Thruoghput. 3. How much concurrent Users it supports. Ashish, 1) Depends on hardware and configuration... 2) Depends on hardware and configuration... 3) Depends on hardware, con...

mneumark

I have got this script working fine on the first unit I put it on. But the rest are giving me this error in the log. Error sending e-mail: error talking to server. They are all running the same version. Does anybody have any ideas for me on this? Thank you Larry Larry, I have the same issue when i ...

mneumark

I need a little help redirecting in dst-nat. Let's say the IP of my machine is 68.70.0.2 If you http to that you get the MT weblog in. I am not running a hotspot. Instead of it going to a login screen I want to redirect it to 10.18.0.135 which is an in house web server. I know how to do dst-nat but...

mneumark

There are tons of ways of doing this... sniffer or syslog. Those are the main two types.

Matt

mneumark

/ppp active print count

The same sound go for some of the other types of connections...

Matt

mneumark

no im sure that everything is ok. i have the internet coming to my MT is PPPOE and i give the clients pppoe and the pppoe client has (1480/1480) and the pppoe server give my clients (1480/1488). do i have to change something with the mangle rules above ? Proggams2, You should be ok without changing...

mneumark

At 15km you should expect ~ -56 RSSI.

Matt

mneumark

This should work for you with no problems at all. You should be able to pull more than 40km, depending on many different factors of course. Such as Noise floor, channel, band, fade margin, and so on.

Matt

mneumark

ok.. thanks .. that client has a MT Router Os , and he is connected to me wireless by a stand-alone 5G bridge (whatever brand) .. whats the best way to give him his dedicated band ? Do you have him connecting to the internet through a pppoe server or static ip address? Do you have a MT that you can...

mneumark

It should work just fine in your network. If i understand correctly, you have 3 incoming lines coming in to three WAN's. By bonding those interfaces together it will allow you to do the same thing as if you had three t1's and you wanted to bond them together.

Matt

mneumark

You can always write a script that will modify the ip address if it changes.

Matt

mneumark

Winxp2000,

If you want you can also mangle the packets between the three isp's by using the Nth rule under mangle. Just mark the packets 1,2,3 and then route them.

This might be a problem with all the gateway's having the same gateway.

Matt

mneumark

Samsoft08,

what your best bet is set the limit at 768K and max-limit at 768K

Matt

mneumark

as the title how can I use them in my MT? the 3 WAN is static IP from ISP, but they are same subnet and use the same gateway. Now it only 1 line work normal other 2 line no any packet past Winxp2000, You might want to either checkout v3.0 beta or checkout bonding http://www.mikrotik.com/testdocs/ro...

mneumark

where do i put the 4 mss rules after of my mangle (mark routing) rules for msn and http....??????? and another Question in the profile what do i have to put change tcp mss to yes or no if i want to put these rules ?? Proggams2, I put the rules at the very top before all the over rules, that way it ...

mneumark

The settings are going to be the same on both routers. Your best bet is to just copy over the config to the secondary router. Then take all your /ip address and move them to vrrp addresses... Matt This is for the basic routing function. But what is with e.g. OSPF or BGP. To takeover without interru...

mneumark

The settings are going to be the same on both routers. Your best bet is to just copy over the config to the secondary router. Then take all your /ip address and move them to vrrp addresses...

Matt

mneumark

For your second WAN, does the IP address to the gateway ever change?

mneumark

:) I know its popular question, but didnt find a good answer to this: Well have MK version 2.9.2 - Have some registered domain name like **.mine.nu on DynDNS... Have Dynamic Internet conection... Well once in 4 hours Ip changing to new one... So I need somehow refresh my Domain name to new ip... Ho...

mneumark

I'm looking for a solution to do a load balancing on Mikrotik Router OS with 2 WAN Connections but with different type of connection for those WAN connections. 1st WAN: STATIC. 2nd WAN: DHCP. I've checked the examples at WIKI and they are v. simple but i'm doubting if one of my WAN's is a DHCP Clie...

mneumark

anybody have used the VRRP between 2 Mikrotik's? any quick hints? thanks in advance for any help Regards, Maroon, It works great! Give both Mt's a unique ip address. Then make all your ip addresses that you want both MT's to have in the vrrp addresses. The manual is your friend on this one. It will...

mneumark

Here is a example of policy routing...

http://wiki.mikrotik.com/wiki/Policy_Ro ... erOS_2.9.x

Otherwise,
http://www.mikrotik.com/testdocs/ros/2.9/ip/route.php

Matt

mneumark

Thx for this responce But once a ferequency has been choosen, and one day an other equipement has been used in the same frequency, can the MK router detect this interfernce and change frequency?? I suppose that MK don't scan frequencies all the time, so how can it detect and avoid interferencies???...

mneumark

I'm not sure if i'm crazy or what, but when I setup a email backup script. I have if working for tons of time. Then when i setup OSPF on my routers and took out the route 0.0.0.0/0 in /ip route it will no longer send out the emails and says invalid. If i add 0.0.0.0/0 back in the script works just l...

mneumark

Hi all Why Mikrotik products don't support automatic changing frequecy to avoid interferences??? Other products have this fature, why not Mikrotik? Yelkoury, Mikrotik does support automatic changing frequecy... Checkout radar-detect http://www.mikrotik.com/testdocs/ros/2.9/interface/wireless.php Matt

mneumark

Hi, I couldn't find the option to change the channels in winbox. Is there an option for that? Ta

Kvan64,

Look for frequency and band under /interface wireless

Those are the two commands....

Manual has all the commands...
http://www.mikrotik.com/testdocs/ros/2. ... reless.php

Matt

mneumark

Ok, for several hours Im just trying to get mikrotik routerOS up enough to access it from the comfort of my own house instead of at the bottom of a tower 20 kilometers away. But I cant. This is what I have done, my ISP assigned me a /28 subnet, say, xx.xx.129.32/28 The gateway is xx.xx.129.33, and ...

mneumark

Problems with Web Pages

What web pages are you having issues with? What is your setup? We need alot more information to help. Otherwise, post your /system export

Matt

mneumark

Thermant,

First recommend is to upgrade to 2.9.42. Second as long as you got routing-test or routing enable then yes you should be able to route traffic.

Matt

mneumark

greenieofdubbo,

Another way of accomplishing this is using the firewall in the (filter forward). Just add a accept rule for dns query, http, and what ever you want. Then drop all the other traffic from that user. You can setup it under address-list or how ever you might like.

Matt

mneumark

Gerlach76,

http://wiki.mikrotik.com/wiki/How_to_ma ... _web_proxy

This should get you started.

Matt

mneumark

SweetSunday,

Post your /ip addr print

Matt

mneumark

I need to redirect all http requests to a specific page I would like to set a cookie when this happens. When the cookie expires they will see the page again. Is this possible or something simular? Thanks, Dan, What you will need to do is have your webserver hand out the cookie. As the MT only acts ...

mneumark

SweetSunday,

It looks like you have overlapping routes...

0 ADC 10.0.3.0/32 10.0.3.2 wlan1
1 S 10.0.0.0/16 u 10.0.3.2

Check out the above. 10.0.0.0/16 is part of 10.0.3.0/32 also.

Matt

mneumark

I am reporting a problem with Winbox. I don;t know if the problem exists using the CLI or not. I have limited experience using the CLI. The problem I have is programing OSPF with Winbox and it occurs on all three routers that I've configured for one of my companys. They have all been upgraded to ve...

mneumark

tiziano, Well the best way to monitor traffic is with using the built in sniffer and have the MT stream the information to another server that you can build information that you are looking for. http://www.mikrotik.com/testdocs/ros/2.9/tools/sniffer.php Or You can use traffic flow... http://www.mik...

mneumark

Art,

Once you have the masquerade rule then try typing this in a dos prompt on one of the client pc's...

ping 4.2.2.2 -l 1460

If you get a successful reply back then your having a MTU and MRU issue.

Matt

mneumark

Hi, I have next configuration and scenario: MIkrotik 1 ------------------------- MIkrotik2 ETH1: 10.10.10.10 ETH1: 20.20.20.20 ETH2: 192.168.70.1 ETH2: 192.168.7.105 | | PC1: 192.168.70.5 PC1: 192.168.7.5 MIkrotik 1 interface ipip add name=Tunnel-1 local-address=10.10.10.10 remote-address=20.20.20....

mneumark

Hi I have problem with pptp gateway and nat on mt. Config : users -> mt (wlan 1 nat) (PPtP gateway) -> ISP 0 R name="pptp-out1" max-mtu=1460 max-mru=1460 connect-to=172.xx.xx.xx user="user" password="password" profile=default add-default-route=yes allow=mschap1,mschap2...

mneumark

monaro,

You might want to consider looking at 3.0. It already has support for dual core processors.

Matt

mneumark

Gerard,

Try loading them in by hand instead...

/system backup load name=office-2007mar23.backup

Make sure that the name equals the real file name.

Matt

mneumark

Sidney,

It all really depends on what you expect out of your links. For backhauls I use wds and just make them into transparent bridges connecting two towers together. For my backhauls I do p2p.

Matt

mneumark

Connor9220, From my understanding the problem isn't the pppoe server, it's the client end router that causes the issue when they don't have their MTU set to a setting that isn't set to < 1480. Most routers today assume that all servers allow for a MTU packet size of 1500 which isn't true. What i've ...

mneumark

tiziano, Well the best way to monitor traffic is with using the built in sniffer and have the MT stream the information to another server that you can build information that you are looking for. http://www.mikrotik.com/testdocs/ros/2.9/tools/sniffer.php Or You can use traffic flow... http://www.mikr...

mneumark

Connor9220, Try the following rules... / ip firewall mangle add chain=forward tcp-flags=syn action=jump jump-target=mss comment="\[tcp\], mss" disabled=no add chain=mss protocol=tcp tcp-flags=syn tcp-mss=!536-1460 action=change-mss new-mss=1440 comment="\[tcp\], mss fixation" dis...

mneumark

RedHat,

Checkout User Manager. It has alot of reporting features.

Matt

mneumark

Dakky21,

You can try changing the setting through the terminal...

/interface ethernet edit [/find name=LAN] speed=10Mbps

Just change "LAN" to the name of your interface.

Matt

mneumark

Randy601,

You are going to want to delete the following folder: "%appdata%\mikrotik". Then re-run the executable and you should be fine.

Matt

mneumark

OK, I disabled all firewall filters, rebooted the device and tried a New Terminal session. The window flashes up for a split second and then is gone..... I removed the folder as mentioned above and opened winbox again. After downloading the new software from the router it opens in winbox and I try ...

mneumark

Ilius168,

There are a few good examples of how to use policy routing in the wiki @ http://wiki.mikrotik.com/wiki/Policy_Ro ... erOS_2.9.x

Matt

mneumark

Flyermikrotik,

There is a great example of pcq on the wiki @ http://wiki.mikrotik.com/wiki/PCQ_Examples

Just modify the bottom line for your private areas.

Matt

mneumark

Redhat,

You might want to see if you can create a script that will remove the active users, by using the find feature and having it look for profile=PROFILE_B.

Matt

mneumark

Skynoc,

Sorry i forgot to mention you need to tell it to run where you want it to run... Try this...

:for i from=1 to=5 do={/queue simple add target-address=(192.168.210.$i) limit-at=0/0 max-limit=0/0 target-netmask=255.255.255.255 interface=local}

mneumark

RedHat,

You should be able to use User Manager for something like this... I don't do to much HotSpot's but i know User Manager is great for doing things like this.

Matt

mneumark

Skynoc,

If i'm reading it right your mistake is in the target address...

:for i from=1 to=254 do={add target-address=(192.168.210.$i) limit-at=0/0 max-limit=0/0 target-netmask=255.255.255.255 interface=ether1}

mneumark

For those Palm PDA owners you can download TuSSH for free @ http://www.handango.com/PlatformProductDetail.jsp?siteId=1&jid=23DABA7FE2B18E2B42DA347264C753DE&language=english&platformId=2&N=96806&Ntt=ssh&R=34367 For those with Windows CE PDA you can download zaTelnet for free @...

mneumark

WirelessRudy,

Goto "start"
Goto "run'
Type "%appdata%\mikrotik" (without quotes)
click ok or hit enter

This is the folder you need to delete...

Matt

mneumark

WirelessRudy,

Well winbox using port 80 and 8291. If you believe that your firewall rules are correct, then try deleting %appdata%\mikrotik folder and then try to run winbox again. Another thing you might want to do is post your rules so we can help you better if you are still having issues.

Matt

mneumark

RedHat,

How are you authenticating those users? PPPoE? What?

Matt

mneumark

WirelessRudy,

It sounds like you added a input firewall filter that is blocking access to the router from your station. I would recommend going through your accept rules and make sure you have access to the router.

Matt

mneumark

SmartBoy,

There are definitions and the differences between src and dst nat @ http://www.mikrotik.com/testdocs/ros/2.9/ip/nat.php

Matt

mneumark

Gyoztes,

I would recommend checking out PCQ... http://wiki.mikrotik.com/wiki/PCQ_Examples

It will equalize bandwidth or shape it.

mneumark

Leequince,

Your best bet is to use netwatch and enable and disable the routes.

Matt

mneumark

Ilius168,

You might want to checkout http://wiki.mikrotik.com/wiki/Routing

It has a bunch of examples for load balancing that might be easier for you.

Matt

mneumark

If you want to give equal amount of bandwidth to clients then use pcq. If you are trying to limit bandwidth speed you will need to mangle the traffic then setup a simple queue or queue tree.

mneumark

Gerlach76,

If this client is using encrypted sessions then you will not be able to drop those packets. What you will need to do is limit amount of connections to that specific client or use pcq.

mneumark

What he means is on the firewall input chain put a drop rule that drops incoming traffic on the WAN port to port 8085.

chain=input interface=WAN protocol=tcp dst-port=8085 action=drop

mneumark

UniKyrn,

Your correct the speed of the system has no correlation with the interference issues. The orignal question from xbaha was in regards to the maximum number of clients per ap.

Matt

mneumark

UniKyrn, If your in an area that has interference which is 96% of the world. You need to scan all usable channels, find the best channel that has the best noise floor readings. This would be the first step. If this isn't enough then you will need to determine if the equipment you are using is best f...

mneumark

Unikyrn, All wireless equipment has problems with interference. Some wireless equipment has things like GPS sync and other types of technology that will help reduce the interference. You have to make sure when you deploy your AP's that you take the time to consider channel seperation and what your n...

mneumark

Monaro,

To my belief Mikrotik will never plan to support SCSI. As for SATA v3 has it already available. Also, if you motherboard allows for SATA to be used as legacy devices this is another way around the issue.

Matt

mneumark

Xbaha,

You are correct, what i mean is a full regular pc. Your best bet is to use a mini-itx board that will help you achieve higher processing power. This site has a huge collection of them...

*just for example*
http://www.globalamericaninc.com/sbc/mo ... rd_sbc.php

mneumark

proggams2,

Radius is used for authentication, authorization, and accounting purposes.

How to setup RouterOS as a RADIUS server...
http://www.mikrotik.com/testdocs/ros/2. ... radius.php

mneumark

Proggams2,

Mikrotik RouterOS has the ability to act as a pppoe-server. A example of how to setup it as one can be found at http://www.mikrotik.com/testdocs/ros/2. ... /pppoe.php

Matt

mneumark

Proggams2,

As long as your MT has a public ip address bound to it and doesn't have any firewalls that will block you access to the MT, then you shouldn't have any issues accessing this MT from anywhere on the internet.

Matt

mneumark

xbaha, It all depends on the hardware processor and ram. It also depends on how the device is setup and how the clients are setup to the AP. If you use a RB532a and then setup all your clients on WDS. Then yes it will eat the processor on the RB very quickly and will limit the number of clients the ...

mneumark

Adaheem,

Mangle the traffic from port 80 and messengers and then setup a queue with the priority of 1 then all other traffic with a higher prioirity like => 2.

Two good resources on how to do this are:
http://wiki.mikrotik.com/wiki
http://www.mikrotik.com/testdocs/ros/2.9/ip/mangle.php

Matt

mneumark

Hanzo,

Mangle the traffic from MSN and then setup a queue with the priority of 1 then all other traffic with a higher prioirity.

Two good resources on how to do this are:
http://wiki.mikrotik.com/wiki
http://www.mikrotik.com/testdocs/ros/2.9/ip/mangle.php

mneumark

Oleg,

What things are you hoping to accomplish with Virtual PC?

Matt

mneumark

Ravin,

If your clients are using the ip address of the router you will need to masquerade your public ip address. This site will help you if this is the situation http://www.mikrotik.com/testdocs/ros/2.9/ip/nat.php

mneumark

EbeltoftsNet,

I would recommend checking out http://wiki.mikrotik.com/wiki/First_time_startup

Also, remember if you connect through serial port you will need a "null modem" cable.

mneumark

To reboot the unit all you have to type is:
/system reboot

Just save a script with that command in it. Then schedule.

mneumark

Please provide more details of exactly what you are doing and wanting then we can provide you with help.

mneumark

Sounds like it will work just fine.

mneumark

This site will give you a example...

http://wiki.mikrotik.com/wiki/Forwardin ... nternal_IP

mneumark

maybe you are using load balancing with persistent sessions?

Janisk i don't use load balancing.

mneumark

Torch is a great tool for this.

mneumark

I've also seen this in 2.9.x with OSPF "ip adddresses" If you make a change to one you need to disable and enable it to take effect in the "ip address"
which version?

I have 2.9.39 on the machine that did that.

mneumark

I've also seen this in 2.9.x with OSPF "ip adddresses" If you make a change to one you need to disable and enable it to take effect in the "ip address"

mneumark

Ok lets disassemble your script... Make your life easy and do this instead. :if (($pingresultA=0) && ($pingresultB>0)) do={ /system script run linkA_down_script } :if (($pingresultA>0) && ($pingresultB=0)) do={ /system script run linkB_down_script } :if (($pingresultA>0) && (...

mneumark

I pasted one line at a time in the terminal to test it. I think i found one mistake, which i modified.

mneumark

I tried this below and it worked on my setup... I just modified the ip addresses... #set variables :local pingcount 3 :local ipA 201.84.93.24 :local ipB 203.215.102.14 :local website http://www.yahoo.com #ping gateways with src :local pingresultA [/ping $website src-address=$ipA count=$pingcount] :l...

mneumark

Why don't you use Netwatch? This will automatically run a script when it detects something is down.

mneumark

On the remove command you can use the find command. Have it look for a name that matches the dns server your looking to remove.

http://www.mikrotik.com/testdocs/ros/2. ... ipting.php

mneumark

Rodney, DMZ would be a NAT rule in the firewall settings. This is where you can configure what internal ip is linked to the public ip address(es). When it comes to the firewall settings for the router. INPUT - Would be for all the traffic entering your router. Which i would advise you to use the rul...

mneumark

mneumark

Have you tried running torch to see if there is any traffic that sticks out?

mneumark

As for the DHCP you can setup DHCP client on the interface you need to. Your best bet is to search http://wiki.mikrotik.com and http://www.mikrotik.com/docs/ros/2.9/

mneumark

As for #2 i said early, i missed the fact you wanted PPTP. All you have to do is setup a PPTP client on the interface facing the source you want to connect to.

mneumark

1) Put 192.168.x.x/24 on your eth0 interface.
2) Setup PPPoE client on eth1 interface (http://www.mikrotik.com/testdocs/ros/2. ... /pppoe.php)
3) Setup a nat...
/ ip firewall nat
add chain=srcnat action=masquerade comment="" disabled=no

mneumark

Sniedzins,

At the very bottom of http://www.mikrotik.com/testdocs/ros/2.9/ip/nat.php they have a example of how to use netmap. It's pretty easy and the example is easy to understand.

mneumark

Ashisheitl, If i'm understanding right all it sounds like to me is you are wanting a firewall rule that will drop internet access to all traffic to certain ip addresses? If so then just setup a drop rule in your forward chain that will drop packets from that ip range. http://www.mikrotik.com/testdoc...

mneumark

Michael,

You can use Netwatch to see if the main gateway is up. If it fails then have netwatch run a script that will switch over to the configuration you want.

mneumark

Open in notepad %appdata%\Mikrotik\winbox.cfg this file will contain the information you want.

mneumark

I've got a pppoe concentrator sending accounting data to my freeradius database that i use to pull information from for my users. I've noticed that my radacct log has duplicates of everything in it. Is there some setting in the MT that i've missed that might be causing the duplicate entires or is th...

mneumark

emcentellas, jojo is right. I would survey your area again and see if there is another channel you can use that has a better noise floor. Remember the farther away from 0 the better. Your noise floor right now is at -79 and your clients are -86-88. So your best bet is to see if you can find a channe...

mneumark

Sorry that was my fault. I really did mean protocol.

mneumark

http://wiki.mikrotik.com/wiki/Upgrading_RouterOS will guide you in the right direction.

mneumark

emcentellas,

What is your noise floor look like?

mneumark

Randall,

GRE (port 47) and IPSec uses ESP (port 50) and AH (port 51)

These are the ports that ipsec uses make sure you don't have any drop rule for these ports.

mneumark

Randall,

Are you filtering traffic using torch by interface, src ip, dst ip, or ports?

mneumark

Netwatch

mneumark

Just setup NAT.

http://www.mikrotik.com/docs/ros/2.9/
http://wiki.mikrotik.com/wiki/How_to_li ... Local_ones

mneumark

Try This: If you want to allow only one user login at the same time with specific login name we have to “unhash” one line. In “Simultaneous Use Checking Queries” section of the sql.conf file just “unhash” following line: simul_count_query = "SELECT COUNT(*) FROM ${acct_table1} WHERE UserName='%...

mneumark

Can you share your settings that way we can see where you went wrong?

mneumark

Queue Tree can be used to totally manage bandwidth on a interface incoming or outgoing.

mneumark

Set the one-session-per-host=yes under /interface pppoe-server server

mneumark

If you are unable to ping your MT you might have a firewall or something else going on... This rule shouldn't effect icmp packets.

mneumark

MSN also uses port 80.

mneumark

Please provide /routing rip export

This way we can help you out further. Also, you might want to upgrade to 2.9.40 to see if that resolves your issue.

mneumark

Michael,

MT can do this pretty easy with very little setup.

Both the manual and wiki would be a great resource for more details. Here is a link to a page that will help you out.

http://wiki.mikrotik.com/wiki/ECMP_Failover_Script

mneumark

Rough example, See manual for more details http://www.mikrotik.com/testdocs/ros/2.9/ip/route.php *** Replace x.x.x.x with your gateway to the ISP of your choice... *** /ip firewall mangle add chain=prerouting protocol=tcp dst-port=80 action=mark-routing new-routing-mark=HTTPForward passthrough=yes c...

mneumark

Checkout http://wiki.mikrotik.com/wiki/Load_Bala ... e_Gateways

mneumark

Mangle the traffic from your 192.168.250.X network and mark packet. Then once you do that setup a route based on that marked packet.

Search found 370 matches