MikroTik

cutedrummerboy

today I want to setup userman in my 2011 but I saw that radius server is not accepting client connection. ip is a loopback interface and shared secret is also same. I can connect to other radius server but not userman.

edit: forgot to mention, I am on 6.40.3

cutedrummerboy

is it possible to use mikrotik user manager as a radius server only with ubnt unifi ap wpa2 enterprise or any other access point like tplink??

cutedrummerboy

after reading several post in this forum i finally found my solution. thanks to this post https://forum.mikrotik.com/viewtopic.php?t=105061 thanks to Zerobyte, whose reply in that post really help me to learn and solve this. my config here. /routing bgp instance set default disabled=yes add as=65534...

cutedrummerboy

need more info

i think i have already provided all info. if not then glad to provide rest. can you tell me what is the problem in my configuration.

cutedrummerboy

can any one help me with my BGP problem. i want to redistribute blackhole route from cymru. i am getting route from cymru but cant advertise to my other peer. here is my bgp config /routing bgp instance set default disabled=yes add as=65534 name=AS65534 router-id=x.x.x.x /routing bgp peer add in-fil...

cutedrummerboy

i use a laptop 18 volt power supply as second one. routerboard will take voltage from 24volt psu first if that fali then the 18volts one will kick instantly.

cutedrummerboy

it will be very helpful if mikrotik provide us (home users) a localhost tunnel service aka cloud login service like ubnt unifi does. then we can access our router from internet without having a public ip in the router. i use a service called ngrok (https://ngrok.com/) to access my small home server.

cutedrummerboy

I try this but not working

after that you have to enable allow remote request in /ip dns and use your router ip address as your dns server ip in your pc.

cutedrummerboy

maybe this one can help you

https://www.youtube.com/watch?v=3LmQYIQ5RoA

cutedrummerboy

*) snmp - added optical table; Thanks team mikrotik for new OID to monitor SFP via snmp on Routeros V6.39rc72 from my 2011uias for you guys: .1.3.6.1.4.1.14988.1.1.19.1.1.6.1 - Value Type GAUGE32 - SFP Temp .1.3.6.1.4.1.14988.1.1.19.1.1.7.1 - Value Type GAUGE32 - SFP Supply Voltage .1.3.6.1.4.1.149...

cutedrummerboy

why openwrt required? which router functionality can not run in routeros but in openwrt can? you can run openwrt as meta router.

cutedrummerboy

futsker, actually I understand what you want to tell me but as per the old post of normis all modern rb have this automatic switching functionality in built on external dc barrel connector and poe input. now I want to know is the same thing we can apply on internal power port and external barrel con...

cutedrummerboy

PaulsMT and normis please comment on my topic also.

cutedrummerboy

but in a old post normis wrote that we can use backside barrel connector and poe input at same time. routerboard use that input which have higher voltage. then why cant we use internal power port and external barrel connector simultaneously. i just want the explanation.

cutedrummerboy

can any one tell me that how to achieve RB2011 Redundant Power Supply with Internal PSU and external PSU. as per a old post of normis in this forum, all new RB can be powered via dc barrel connector power input and POE input simultaneously. i recently install a 19.2 volt laptop adeptor inside my 201...

cutedrummerboy

Thanks mate. it works.

cutedrummerboy

Start Here pal

http://wiki.mikrotik.com/wiki/Supported ... and_modems

cutedrummerboy

hi,
i need a small help.

i have a 2011 uias, all ports are separated that means not switched. sfp1 is wan. ether5 is connected to a sg300-28 as a trunk. ether5 have four tag, 11, 12, 13, 14.

now i want 11 and 12 on port eth10 also. how can i do this??

cutedrummerboy

here we go

http://snapcraft.io

cutedrummerboy

lapsio, exactly. but snap have also great possibility.

cutedrummerboy

can anyone elaborate me about crs switch style vlan config in 2011uias switch chip. bassically I want to use hardware based vlan in 2011 not software based like bridge port with a vlan interface.

cutedrummerboy

I am waiting for a snap rather than a deb or rpm.

cutedrummerboy

copper based last mile is too bad idea. you need power for every switch, copper is costly, too much prone to hack and electrical interference. though some isp in my country (india) run such network but its a very bad idea nowadays. fiber is cheap man. go for gpon or atleast gepon.

cutedrummerboy

What is your current rx and tx level?? And temperature of both sfp module?? May be high temp or bad module or bad or dirty fiber.

cutedrummerboy

its not possible, because your isp router have 2 wan. 1 for google peering or google global cache and another for rest of the internet. and they have policy defined in their router.

cutedrummerboy

just forget about your internal ip. as per your first post its look like your 139.1.2.0/28 subnet is routed to you via 202.1.2.3 from a scratch config just put 202.1.2.3 to your routers external interface, put 139.1.2.1 to your routers internal interface, put 139.1.2.2 to one of your server interfac...

cutedrummerboy

nevermind, I found it. currently it is only console based implementation.

cutedrummerboy

after installing tr069 client how to work with it??

cutedrummerboy

aha, tr069 client. lots of room for experiments.

cutedrummerboy

glad to listen it works that but you must buy another lan card for your servers wan side for this kind of setup.

cutedrummerboy

is that kind of complex setup really required?? how your isp deliver internet and external ip to you??

cutedrummerboy

But dnsmasq can also be a name server for devices in the LAN.

that is also available at ip > dns > static

cutedrummerboy

http://wiki.mikrotik.com/wiki/Manual:Li ... nse_Levels

cutedrummerboy

maybe power problem also.

cutedrummerboy

use 802.3ad lacp at both side. then tell us your experience.

cutedrummerboy

i think he want to say crowdfunding.

cutedrummerboy

I have some similar situation. i manage couple of managed switch at my routers wan side. so what I did, assign each switch a management vlan with dhcp client, change their port type as necessary with trunk or access or hybrid. then create the same vlan at mikrotiks wan interface without bridge and a...

cutedrummerboy

its available from 6.36.
I recomend you to upgrade to latest one.

cutedrummerboy

yeah those are non existing host. when you run ip scan from your network then all host are mapped with arp.

cutedrummerboy

make two queue, one with target address as your lan subnet and speed you want to give out on lan, other with a target address 0.0.0.0/0 for traffic towards wan and speed you want to give out.

cutedrummerboy

24Ghz frequency isn't very much great. after reading some articles and posts on UBNT forum, it appears that 24Ghz frequency is very vulnerable to signal disruption. a little rain could disrupt the signal But many telco use 21GHz and 23GHz for data transmission. personally i work for a telco and cur...

cutedrummerboy

yeah if you write a script with only /system reboot and run it it will reboot the router.

cutedrummerboy

finally i do some experiment and found that my Chinese brand sfp is not fully supported by mikrotik but they are supported by my cisco small business switch SG300-28. i have some jdsu, finisher sfp which are perfectly supported in mikrotik. but in the other hand i have some copper sfp like avago and...

cutedrummerboy

Maybe the ISP is expecting the MAC address of the media converter? no media converter is a dumb device. I further experimented on the issue. the media converter have a ability to ditect far end ethernet link condition, that mean if I disconnect the rj45 plug from one media converter other media con...

cutedrummerboy

recently i have got a SMSF drop from my isp. isp end have a sfp media converter and they give me the other sfp of that pair with a media converter. after successful link i decided to bypass the media converter and put the sfp directly in my 2011uias. after petting the sfp link established and all wa...

cutedrummerboy

As far as I know it is set in the hardware. If you experience problem because the link is too small, then you can "overpower" the receive part on the other side. Then you can use an optical attenuator. Also, the "further" km is written on the SFP, the stronger (more powerful) th...

cutedrummerboy

i am also interested.

cutedrummerboy

If you saw that, why not to use that version you believe it was supporting such operation mode?
I have never seen it and I have never heard about it, but I have not seen/heard many other thing also...

may be i am wrong but as i remember in some beta change log.

cutedrummerboy

is vlan2 connected to wireless access point which is open?? may be a dhcp attack or some device in vlan2 have bad configuration.

cutedrummerboy

block all port in input chain except what you want to available at wan side. maybe dns or ntp is causing this or some kind of multicast or broadcast flooding. my provider's wan is a citywide /24 and i often face some arp flood near about 8 or 9 mbps for 1 or 2 hour. after some investigation i found ...

cutedrummerboy

Was not built so. Therefore.

jarda, as i remember, in some previous version i saw this feature, but in current version i cannot find that one.

cutedrummerboy

why not mikrotik provide us a deb file. at least source so we can build for our preferred operating system. like i prefer debian. Try Webfig. It is the same, it uses the same layout file as Winbox. The only difference is MAC connectivity and drag/drop yes i know, but my point is, if you can make a ...

cutedrummerboy

i don't think its impossible. any cheap android phone also support both host and client mode, even tp-link router with usb port and openwrt.

in ericssom minilink traffic node or nec pasolink neo or any modern microwave transmission system or mux allow to to usb login. then why mikrotik can't?

cutedrummerboy

i use wine for run winbox . i offer you use wine

yes mjsabri, i also use wine. anyway thanks.

cutedrummerboy

so no one knows if it will work or not??

cutedrummerboy

why not mikrotik provide us a deb file. at least source so we can build for our preferred operating system. like i prefer debian. Try Webfig. It is the same, it uses the same layout file as Winbox. The only difference is MAC connectivity and drag/drop yes i know, but my point is, if you can make a ...

cutedrummerboy

make a bridge and assign an ip to it. now it will be reachable via any interface of your router.

edit: set the default gateway in your router.

cutedrummerboy

Nope. I meant hybrid. Access Port -> Single Untagged VLAN Trunk Port -> Tagged VLANs (Single or Multiple, but all tagged) Hybrid Port -> Untagged Traffic + One or More Tagged i want to more precisely clarify Access Port -> Single Untagged VLAN Trunk Port -> Tagged VLANs only Hybrid Port -> Single ...

cutedrummerboy

why not mikrotik provide us a deb file. at least source so we can build for our preferred operating system. like i prefer debian.

cutedrummerboy

can we get a native linux version of sniffer service??

cutedrummerboy

all i say that make only hardware independent video. because all mikrotik hardware are basically same, some have extra usb port or switch chip or lcd panel or sd card reader or sfp cage.

and all kind of hardware and software independent networking videos are most welcome.

cutedrummerboy

In my work I login Ericsson mini link traffic node via USB port . Is such kind of setup is possible in 2011 board??

Sent from my HM 1S using Tapatalk

cutedrummerboy

after upgrading my igmp proxy is not working. i cannot see any rx or tx packets.

cutedrummerboy

i can see there is an available from column. use it.

cutedrummerboy

http://winehq.org

cutedrummerboy

seems llike dns or ntp, block input chain from wan and open which port you want as winbox or ssh.

Sent from my HM 1S using Tapatalk

cutedrummerboy

just remember that pppoe works on layer2. it means you have to create some sort of layer 2 tunnel in between your customer to your server.

cutedrummerboy

it will give you some basic idea /ip firewall mangle add chain=prerouting dst-address=172.27.23.0/24 in-interface=LAN1-0 add chain=prerouting dst-address=172.27.15.0/24 in-interface=LAN1-0 add action=mark-connection chain=prerouting in-interface=WAN1-1 \ new-connection-mark=WAN1-1_conn add action=ma...

cutedrummerboy

why don't you use a cname??

Sent from my HM 1S using Tapatalk

cutedrummerboy

Please add support for SFP monitoring (Rx level, temperature etc.) via SNMP.

cutedrummerboy

you can use an rb2011 with a copper sfp

cutedrummerboy

yeah this is necessary.
+1 for this

cutedrummerboy

is there any script guru who can help me to complete this script?? i don't to know how to loop.

cutedrummerboy

this is not fair.... is there any chance ??

cutedrummerboy

hi, i am not good at scripting, can anyone help me to complete the script. basically i want to send a message at 3 or 4 numbers at once :log info "Alert: Internet is Down at $[/system clock get time]"; :local SMSNumbers { "XXXXXXXXXX", \ "YYYYYYYYYY", \ "ZZZZZZZZZZ...

cutedrummerboy

I have 2 questions number 1: can /tool sms support multiple recipient? number2: what is channels in /tool sms. Sent from my HM 1S using Tapatalk 1. From what I know, you can't use multiple recipient directly via winbox tool . Still, you can use scripting to send the same message to multiple recipie...

cutedrummerboy

check your firewall rule and gateway of that device which you want to ping.

connected routes are by default routed. you don't have to do any special configurations for that.

Sent from my HM 1S using Tapatalk

cutedrummerboy

so basically there is no member who use sms tool. [emoji17]

Sent from my HM 1S using Tapatalk

cutedrummerboy

I have 2 questions

number 1:
can /tool sms support multiple recipient?

number2:
what is channels in /tool sms.

Sent from my HM 1S using Tapatalk

cutedrummerboy

bypass the "c" router then see what happnes. its look like either router c configuration issue.

Sent from my HM 1S using Tapatalk

cutedrummerboy

can you do a bandwith test as follows

test server-------router------af------af------test client.

Sent from my HM 1S using Tapatalk

cutedrummerboy

how much is your internet bandwidth and give us a export of your router.

Sent from my HM 1S using Tapatalk

cutedrummerboy

+1

Sent from my HM 1S using Tapatalk

cutedrummerboy

I have a question, if I assign my wan port in a bridge and run bridge filter, is it good or I just leave wan port as a standalone port.

Sent from my HM 1S using Tapatalk

cutedrummerboy

from past few days i am getting 502 bad gateway error at forum.mikrotik.com and wiki.mikrotik.com in periodic manners. sometimes it stays long as 2 or 3 hours. i am from India, anyone getting such errors??

cutedrummerboy

as Sob says, currently dhcpv6 is for prefix delegation only.

cutedrummerboy

It is normal that devices will use the link-local address as the gateway. In general, when devices talk to other devices on the same LAN segment, they're going to use the link-local addresses and not the globally-unique routable addresses (public addresses). It takes a little getting used to, but i...

cutedrummerboy

[admin@ISP1 Router] /ipv6 address> print Flags: X - disabled, I - invalid, D - dynamic, G - global, L - link-local # ADDRESS FROM-POOL INTERFACE ADVERTISE 0 G fd50:15fc:9a22:2::1/64 vlan2 yes 1 G fd50:15fc:9a22:4::1/64 vlan4 yes 2 G fd50:15fc:9a22:5::1/64 vlan5 yes 3 G fd50:15fc:9a22:6::1/64 vlan6 ...

cutedrummerboy

one more question, can anyone tell me when the full version of dhcp6 will release??

cutedrummerboy

ipv6 auto configuration (SLAAC) is not providing my router lan interface global ip as gateway to my client (win7, debian jassie, miui android, win10). it is providing the link local ip of my router lan interface as gateway. is it correct for auto configuration?? can any one tell me why this is happe...

cutedrummerboy

hi all can anyone explain me that why my router continuously broadcast to a multicast ip 224.0.0.22

172.27.15.169 is my wan ip on isp interface with a /24
10.50.0.65 is my lan interface ip

Screenshot_5.png

cutedrummerboy

most easiest way
give mikrotik-1 a static route toward mikrotik-2 for 192.168.2.0 sub net and give 192.164.2.4 a static route toward mikrotik-2 for 192.168.1.0 sub net. or else run ospf on both router and the gateway also.

cutedrummerboy

well my isp use a router called flash router made by http://ipacct.com/en/home/ . they give me one ip address and i configured NAT on ether2. and they run PAT on their router. before that flood my ARP configuration was just enable, after that i make the gateway in ip/arp static and interface arp rep...

cutedrummerboy

mikrotik support or normis???

cutedrummerboy

that interface is connected to a city wide lan of my isp and have a /24

cutedrummerboy

can anyone tell me why this is happening. i am facing this at incoming direction.

arp_flood.png

cutedrummerboy

i know it is a 2 year old post, but can anyone point me to right documents??

cutedrummerboy

Very easy

cutedrummerboy

http://forum.mikrotik.com/viewtopic.php?f=2&t=91749

cutedrummerboy

You should use 802.3ad at both side. for me it works perfectly.

cutedrummerboy

i found this on internet random search.

http://mkbrutusproject.github.io/MKBRUTUS/

haven't checked yet. anyone checked this?? i am worried about the winbox section specially.

cutedrummerboy

hi
i have an RB411 with L3. I want to put an L4 into it. and now my question is,

1. what will happen with hard coded L3 if i issue an L4 on it
2. is it a good decision for an RB411 or it will be better to buy another L4 board.

goal is creation of an AP for one sector.

cutedrummerboy

that already i know, but if the ip remain unchanged then what will be the update frequency?

cutedrummerboy

yup done, but i actually want to know the default update frequency of this service when anyone behind 1 to 1 nat.

cutedrummerboy

hey, i am behind 1 to 1 NAT and my isp just change my public ip every 10 minutes. can anyone tell me the update frequency of ip cloud?

cutedrummerboy

hmm.
thanks for the replys. but you already told me the main problem. now can you help me in that case.

how can i block that internet leaking to my friend if he set his gateway as my ether2 ip address.

cutedrummerboy

anyone? please help me.

cutedrummerboy

net dia.png here is the diagram of my current setup all ports are master of its own both router's ether2 have a static route to opposite side router both router have a masquerad rule with out interface ether1 now the question is, is this setup is okay and rock solid? is there any chance of leaking ...

cutedrummerboy

i think you have to net-install the full package not the upgrade one.

cutedrummerboy

Hi all,

can any one provide me the internal block diagram of RB750GL.

cutedrummerboy

your isp gateway router must have a route towards your interface:

destination 19x.xxx.xxx.xxx/29 with gateway <your router's wan ip>

cutedrummerboy

I'm the ISP, and I intercept all DNS request on TCP and UDP using Layer 7, regardless the port number...

seriously?? how cruel you are

by the way, actually i want to use opennic dns.

@janisk, thank you, already done and working great.

cutedrummerboy

thanks janisk, any command help??

cutedrummerboy

because my isp intercepting my all port 53 dns query, i want to use open dns at port 5353. can any one give me any idea that how can i achive this in mikrotik router??

cutedrummerboy

can i run my rb750gl with a pc smps?? is there any chance of damage of my rb??

cutedrummerboy

okay, but if i got a -30 to -40 db receive level. how about this??

cutedrummerboy

hi, can anyone tell me what is the good RSL value for a ptp link?? is there any difference in 2.4GHz and 5.8GHz RSL value??

cutedrummerboy

hi, you have to set route in your router and in each network element. your router will be the gateway for each network. provide details configuration.

cutedrummerboy

First of all, I am new to mikrotik we are a non commercial community based network. currently we have 1 tower site. the towers have 3 sectors and all are bridged. that means the tower have a switch and bridged AP's are connected with that switch. now we wanted build a full routed network, so we acqu...

cutedrummerboy

rextended,

are sure about out-interface=ether3, i am thinking about out-interface=ether1

cutedrummerboy

RB750GL RouterOS 5.26 okay 1. eth1 have 172.21.16.72/24 (this subnet have internet present) 2. eth2 have 10.0.0.1/24 3. eth3 have 172.18.1.1/27 4. a route created with destination address 0.0.0.0/0 gateway 172.21.16.1 (172.21.16.1 is the next router of that network) now i want: 1. my RB can access i...

cutedrummerboy

efaden, that community network don't have internet but have some ftp server, some game server and a VoIP server. In my country hi speed internet is costly so I and couple of my friends build that network which is runs over point to point WiFi link.

can you elaborate me firewall rules for my setup??

cutedrummerboy

i have an internet connection and a community network connection at my home. internet connection is masquerade but the other connection is not masquerade, it is simply routed. now i use two router one for internet connection and another for that community network. i just got an RB750GL and want to r...

cutedrummerboy

Hi all, I have two Ethernet drop from two different network. and my current set up like this: both are TP-Link wr740n v4.23 router with OpenWRT 12.09 and wi-fi is switched off. I only use them for routing purpose. I have other gears for wireless set up. my home network is 172.18.3.0/27 1. router A W...

cutedrummerboy

this topic is solved. here is the answar:

http://community.ubnt.com/t5/airOS-Soft ... 671#M34630

cutedrummerboy

With this configuration you need configure: 1.- Route 0.0.0.0/0, gateway (IP from eth1 of router B). On A router. 2.- "masquerade" for internet navigation on Router B. I think with this configuration you will have internet navigation. :) Thanks waver 1. number 1 i already created but i di...

cutedrummerboy

Let Say Router A have 3 clients on eth1 port with x.x.x.x, y.y.y.y, z.z.z.z public ip and eth1 port have t.t.t.t public ip which is acting as gateway for internal network. now eth2 of router A connected with ISP Router which is Router B's eth1 with a /30 subnet. now i want to know the router B's con...

cutedrummerboy

thank you normis, now my question is who set that frequency offset? i think the driver set that option after inserting the card. because i did not set it. that means atheros drivers (madwifi) are universal for all routerboard and my rb just sense the hardware and set the offset. so if driver set the...

cutedrummerboy

thank you all. as normis said, i checked frequency offset and got that it have a offset off -2200MHz. now my question is can i fix the offset to 0? if, then will it works at 5GHz?

cutedrummerboy

here is the photo of the card, i just uncovered the rf shield before taking the picture. the cheapest labeled as atheros AR5414-001. and there is a marking on that board F28G.

IMG_20131120_165313.jpg

cutedrummerboy

normis, i can not find any frequency offset in advance tab. here is the screen of advance tab.

dbii_2.PNG

cutedrummerboy

hi all, recently i have got an old dbii networks card and the problem is that it have no model number printed on it and i don't know what is the frequency band of that card. so i attached it in my one of rb411 and now it shows two different band of frequency. why it is displayed like this? can any o...

cutedrummerboy

ok thank you sob. now its clear to me.

cutedrummerboy

here is the more precise picture of that configuration...

can any one explain why the red circled interface aka wan interface configured like this?

cutedrummerboy

already 61 view but no one post any reply. can anyone explain me why that outbound interface configured like this??

cutedrummerboy

ok, after a night of sleepless research i learn all the thing but one described it that link. what i understand 1. they just simply assign a address from that given block to the internal interface of rb and made it the gateway for other clients of the same ip range in internal network. 2. they fixed...

cutedrummerboy

i am new to routeros recently i got a 2nd hand rb411 with a db2 networks radio card. in this page they assign a ip range to all the computer and the rb also. can anyone explain me what is happening in this case?

Link: http://wiki.ctwug.za.net/PTP_Link

Search found 137 matches