Community discussions

Search found 93 matches

by pnajm
Wed Oct 09, 2019 12:30 am
Forum: General
Topic: Using PRTG to execute a script through Mikrotik API
Replies: 3
Views: 825

Re: Using PRTG to execute a script through Mikrotik API

I don't know exactly what are you trying to do. If you want to execute a script in a MikroTik router you can follow this link https://wiki.mikrotik.com/wiki/Manual:SNMP#Run_Script Using the OID and with write permissions in SNMP when PRTG gets the data though SNMP using this OID, the script is exec...
by pnajm
Tue Oct 01, 2019 3:04 am
Forum: General
Topic: Using PRTG to execute a script through Mikrotik API
Replies: 3
Views: 825

Using PRTG to execute a script through Mikrotik API

In PRTG notification template there is an option to execute HTTP action when a condition is met. The HTTP action needs a URL, http method and payload. I kindly require help in order to access the mikrotik through api and run a script called "myscript". What would the URL format be? What is the HTTP ...
by pnajm
Sat Apr 27, 2019 1:23 pm
Forum: The Dude
Topic: functin to sum traffic of 2 interfaces
Replies: 7
Views: 4453

Re: functin to sum traffic of 2 interfaces

Hello, can you please provide code for the sum of 2 interfaces on the same router?
by pnajm
Fri Apr 19, 2019 10:45 pm
Forum: Scripting
Topic: Script to change pcq rates on certain time
Replies: 5
Views: 512

Re: Script to change pcq rates on certain time

Awesome! I will try it out.
Thank you so much!
by pnajm
Fri Apr 19, 2019 11:59 am
Forum: Scripting
Topic: Script to change pcq rates on certain time
Replies: 5
Views: 512

Re: Script to change pcq rates on certain time

There is a large number of pcq types and everyone has a different value, i need something to multiply the current value of ALL pcq-rates and multiply it by 2.
Please advise.
by pnajm
Fri Apr 19, 2019 3:33 am
Forum: Scripting
Topic: Script to change pcq rates on certain time
Replies: 5
Views: 512

Script to change pcq rates on certain time

I'm trying to build a script to DOUBLE some pcq rates on a certain hour of the day. this is what I tried /queue type set [find where pcq-rate!=0] pcq-rate=([/get [find where name~"MYPCQ"] value-name=pcq-rate]*2) /queue type set [find where pcq-rate!=0] pcq-rate=([get [find where kind=pcq] value-name...
by pnajm
Fri Apr 05, 2019 10:19 pm
Forum: General
Topic: [Bug?/Issue] VLAN aware Bridge + Bridge NAT
Replies: 1
Views: 522

Re: [Bug?/Issue] VLAN aware Bridge + Bridge NAT

This is definitely a bug. My scenario: I have bridge vlan filtering enabled and 2 vlans, one for management and second for pppoe traffic. I'm trying to use bridge filter and once I set vlan Encap, wierd things start to happen. vlan encap=pppoe discovery does not work. vlan encap=pppoe session does n...
by pnajm
Sat Dec 22, 2018 8:15 pm
Forum: The Dude
Topic: The dude strange "bridge loop problem" when running
Replies: 0
Views: 510

The dude strange "bridge loop problem" when running

I have a startup network that will run exclusively on Mikrotik Devices. Core router is RB3011 with Dude package installed and running on it. Recently I got a Dynadish 6 point to point link and connected it to the RB3011 and put the interface inside a bridge, the other end's Ethernet port is not conn...
by pnajm
Tue Nov 13, 2018 7:48 pm
Forum: General
Topic: Switch Chip on CRS106-1C-5S
Replies: 19
Views: 1720

Re: Switch Chip on CRS106-1C-5S

anyone?
by pnajm
Tue Nov 13, 2018 7:14 pm
Forum: General
Topic: l2tp with ipsec clients behind NAT no work
Replies: 3
Views: 595

Re: l2tp with ipsec clients behind NAT no work

it is answered here viewtopic.php?t=129932
by pnajm
Tue Nov 13, 2018 7:09 pm
Forum: General
Topic: CRS328-4C-20S-4S+ PSU LOG Warning [SOLVED]
Replies: 4
Views: 872

Re: CRS328-4C-20S-4S+ PSU LOG Warning [SOLVED]

Turn off the device, unplug both PSUs clean the contacts and also inside the device where the PSU clicks in.
Replug the PSUs and try again.
by pnajm
Tue Nov 13, 2018 6:38 pm
Forum: Beginner Basics
Topic: Network Isolation (again)
Replies: 6
Views: 815

Re: Network Isolation (again)

A quick solution is to use VRF.
/ip route vrf
add every interface to a new vrf (routing mark) and they will have a separate routing table and will be isolated from other networks.
clean solution without firewall.
by pnajm
Mon Nov 12, 2018 7:42 pm
Forum: General
Topic: Switch Chip on CRS106-1C-5S
Replies: 19
Views: 1720

Re: Switch Chip on CRS106-1C-5S

bump
by pnajm
Sun Nov 11, 2018 1:54 pm
Forum: General
Topic: Switch Chip on CRS106-1C-5S
Replies: 19
Views: 1720

Re: Switch Chip on CRS106-1C-5S

Any help from mikrotik staff would be appreciated!
by pnajm
Fri Nov 09, 2018 3:02 pm
Forum: General
Topic: Switch Chip on CRS106-1C-5S
Replies: 19
Views: 1720

Re: Switch Chip on CRS106-1C-5S

I think that the problem could be that you've added switch-cpu in both VLAN: you should use it only on management VLAN. Give it a try @davzar switch1-cpu was added ONLY on the OmniTik because the wlan1 needs it to forward the tags properly. If I remove switch1-cpu vlan200 will not pass onto wlan1. ...
by pnajm
Fri Nov 09, 2018 3:51 am
Forum: General
Topic: Switch Chip on CRS106-1C-5S
Replies: 19
Views: 1720

Re: Switch Chip on CRS106-1C-5S

Problem is also happening on other switch chip devices as well. Here are 2 examples of traffic passing from vlan 100 (broadcast) to access port vlan 200. Both devices are on 6.42.9 version. Pictures include all switch configurations. OmniTik omni.jpg CRS106-1C-5S crs.jpg Please help me solve this my...
by pnajm
Sat Oct 20, 2018 4:23 pm
Forum: General
Topic: Switch Chip on CRS106-1C-5S
Replies: 19
Views: 1720

Re: Switch Chip on CRS106-1C-5S

bump
updated routeros version to 6.42.9 (longterm) and problem still exists!
by pnajm
Tue Sep 04, 2018 1:37 am
Forum: General
Topic: Switch Chip on CRS106-1C-5S
Replies: 19
Views: 1720

Re: Switch Chip on CRS106-1C-5S

ok then

check in FDB your vlan setup behavior
I can see vlan 0 but I didn't configure vlan 0 anywhere!
Is this behavior normal?
Capture.JPG
by pnajm
Tue Sep 04, 2018 1:15 am
Forum: General
Topic: Switch Chip on CRS106-1C-5S
Replies: 19
Views: 1720

Re: Switch Chip on CRS106-1C-5S

i have crs125 and working with bugfix version with no issues
can you post which version you are using please?
by pnajm
Sat Sep 01, 2018 6:42 pm
Forum: General
Topic: Switch Chip on CRS106-1C-5S
Replies: 19
Views: 1720

Re: Switch Chip on CRS106-1C-5S

try this setting if switching vlans on CRS 1xx or 2xx without it switch practically do not filter vlans beware of test on lab before, you can loose contact with switch if vlan are not configured properly invalid vlan switch mikrotik.png forward invalid vlan=no is already set in my configuration!
by pnajm
Sat Sep 01, 2018 5:14 pm
Forum: General
Topic: Switch Chip on CRS106-1C-5S
Replies: 19
Views: 1720

Re: Switch Chip on CRS106-1C-5S

The Main question is:
-Why am I seeing tagged traffic passing on to the combo port which is configured for vlan 200.

Update:
If I put the vlan 100 interface on the uplink port instead of the bridge, combo port stops receiving vlan 100 tagged packet!
can you explain this behaviour?
by pnajm
Sat Sep 01, 2018 5:08 pm
Forum: General
Topic: Switch Chip on CRS106-1C-5S
Replies: 19
Views: 1720

Re: Switch Chip on CRS106-1C-5S

i guess the reason you specified "hw=no" for interface=combo-TP-LinkSwitch if hw=no : switching configuration don bye CPU, bridge->vlan if hw=yes : switching configuration don bye Switch Chip, switch->vlan put different PVID for each port and do not forgot "sa-learning=yes" in [/interface ethernet ...
by pnajm
Fri Aug 31, 2018 10:33 am
Forum: General
Topic: Switch Chip on CRS106-1C-5S
Replies: 19
Views: 1720

Switch Chip on CRS106-1C-5S

I have 11 CRS106-1C-5S running ROS version 6.42.6 all connected through single mode fiber cables and Mikrotik SFP modules. Boards are running fine since 11 months now. I created a bridge and added all ports to it with hardware offloading enabled. I have set up tagged and untagged vlans on the switch...
by pnajm
Fri Nov 13, 2015 3:41 pm
Forum: Wireless Networking
Topic: Wireless signal strength vs. Noise floor threshold
Replies: 12
Views: 7187

Re: Wireless signal strength vs. Noise floor threshold

i think noise floor or snr says little about the real situation

the real and important measurement its signal vs interference, only can be measured with spectrum analyzer
But you didn't answer my 3 questions.
Please I need a clear answer.

Thanks.
by pnajm
Fri Nov 13, 2015 2:59 am
Forum: Wireless Networking
Topic: Wireless signal strength vs. Noise floor threshold
Replies: 12
Views: 7187

Wireless signal strength vs. Noise floor threshold

I have noticed that when changing the noise floor threshold value the signal level in registration tab increases significantly. 1- Is this just a reading or does it ACTUALLY have effect as if TX power is increased? 2- Does it affect CCQ, data rate and latency? 3- Is it a best practice to change nois...
by pnajm
Thu Sep 10, 2015 3:54 pm
Forum: General
Topic: Src-nat Routing Question
Replies: 1
Views: 322

Re: Src-nat Routing Question

bump!
by pnajm
Sun Sep 06, 2015 12:57 pm
Forum: General
Topic: Src-nat Routing Question
Replies: 1
Views: 322

Src-nat Routing Question

I have 192.168.88.0/24 network on a CCR accessing pppoe clients on 10.10.10.0/24 network on a RB750 CCR IP: 192.168.88.1 RB750 IP: ether1 192.168.88.2 ether2 10.10.10.1 for pppoe server. when i want to access 10.10.10.0/24 network from CCR it takes a while for the winbox to login, but I noticed when...
by pnajm
Tue Jul 21, 2015 10:58 pm
Forum: General
Topic: QoS question
Replies: 1
Views: 365

Re: QoS question

bump
by pnajm
Tue Jul 21, 2015 10:55 pm
Forum: General
Topic: l2tp mtu vs pppoe mtu
Replies: 2
Views: 1050

Re: l2tp mtu vs pppoe mtu

bump
by pnajm
Tue Jul 21, 2015 10:54 pm
Forum: General
Topic: Question on QoS
Replies: 2
Views: 439

Re: Question on QoS

bump
by pnajm
Tue Jul 21, 2015 10:53 pm
Forum: General
Topic: Mark VPN Traffic for QoS
Replies: 1
Views: 785

Re: Mark VPN Traffic for QoS

bump
by pnajm
Wed May 27, 2015 12:41 am
Forum: General
Topic: l2tp mtu vs pppoe mtu
Replies: 2
Views: 1050

l2tp mtu vs pppoe mtu

i have a connection to the internet using pppoe, mtu is 1480 and mru is 1480
i have l2tp client connection, mtu is 1500 and mru is 1500.
can i transport 1500 bytes packets across the l2tp tunnel or is it related to the pppoe client mtu of 1480?
by pnajm
Sat May 23, 2015 1:16 pm
Forum: General
Topic: Mark VPN Traffic for QoS
Replies: 1
Views: 785

Mark VPN Traffic for QoS

how to mark pptp or other type of vpn UPLOAD and DOWNLOAD seperately to use it later on in queues? considering that there is also queues for WAN interface in place. I know that to mark upload traffic you choose ether1(wan) as upload interface and to mark download traffic you choose ether2(lan) inter...
by pnajm
Tue May 12, 2015 8:57 am
Forum: General
Topic: Better understanding IPsec modes
Replies: 5
Views: 1282

Re: Better understanding IPsec modes

Did you really get an L2TP connection to work over an IPSec tunnel in tunnel mode? That never worked for me. yes i got it to work after i checked the template checkbox, which I don't understand and that what confused me. I put /32 addresses in both sa-src and dst and src and dst and i checked tunne...
by pnajm
Mon May 11, 2015 8:49 pm
Forum: General
Topic: QoS question
Replies: 1
Views: 365

QoS question

Dear Mikrotik users, I have 3 questions, 1- how can I mark upload and download traffic seperately for a specific user in mangle? 2- can I send the user's upload traffic to a gateway and the download to another? is this possible? 3- in Queue Tree, do I need to have a parent rule and a child for qos t...
by pnajm
Mon May 11, 2015 10:42 am
Forum: General
Topic: Question on QoS
Replies: 2
Views: 439

Re: Question on QoS

bump!
by pnajm
Mon May 11, 2015 10:41 am
Forum: General
Topic: Better understanding IPsec modes
Replies: 5
Views: 1282

Re: Better understanding IPsec modes

Yes, it is a good article :) but can someone please explain why this happens. I noticed in ipsec policy if i put the same ip addresses let's say for a l2tp interface for src-address; dst-address to sa src-address and sa dst-address ... both tunnel and transport mode would work. what is the differenc...
by pnajm
Sun May 03, 2015 10:52 am
Forum: General
Topic: Better understanding IPsec modes
Replies: 5
Views: 1282

Re: Better understanding IPsec modes

bump!
by pnajm
Fri May 01, 2015 7:35 pm
Forum: General
Topic: Question on QoS
Replies: 2
Views: 439

Question on QoS

I have a scenario where i am applying Queue trees. how can I mark upload and download traffic within the same interface. (VPN Tunnel). what is global parent? what does it catch? how do i setup queue trees in order to prioritize that traffic, do i have to setup a parent queue and have the child queue...
by pnajm
Thu Apr 30, 2015 5:02 pm
Forum: Forwarding Protocols
Topic: MPLS VPLS Encryption
Replies: 4
Views: 1602

Re: MPLS VPLS Encryption

Dear mrz,
can you please tell me technically why it is more suitable?
by pnajm
Thu Apr 30, 2015 3:49 pm
Forum: Forwarding Protocols
Topic: MPLS VPLS Encryption
Replies: 4
Views: 1602

Re: MPLS VPLS Encryption

I am running vpls over l2tp because i am bridging voip devices over the internet.
l2tp is then encrypted using ipsec transport mode.
the ip phones will get voice vlan dhcp from the main branch and all tags and priorities will remain intact over the tunnel. :D
by pnajm
Thu Apr 30, 2015 10:11 am
Forum: Forwarding Protocols
Topic: MPLS VPLS Encryption
Replies: 4
Views: 1602

MPLS VPLS Encryption

If I run vpls over l2tp over ipsec will vpls be encrypted?
by pnajm
Wed Apr 29, 2015 9:41 pm
Forum: General
Topic: Better understanding IPsec modes
Replies: 5
Views: 1282

Better understanding IPsec modes

Can you please explain with configuration on the differences between transport mode and tunnel mode. i know that in tunnel mode both the ip and payload are encrypted why not always use tunnel mode? why use transport mode? I noticed in ipsec policy if i put the same ip addresses let's say for a l2tp ...
by pnajm
Wed Apr 29, 2015 9:30 pm
Forum: General
Topic: DHCP Option Time Zone for GMT
Replies: 2
Views: 719

Re: DHCP Option Time Zone for GMT

bump
by pnajm
Thu Jan 29, 2015 1:08 pm
Forum: General
Topic: DHCP Option Time Zone for GMT
Replies: 2
Views: 719

Re: DHCP Option Time Zone for GMT

anyone?!!!
Please this is important!!!
by pnajm
Tue Jan 27, 2015 10:14 am
Forum: General
Topic: VPN and QoS (802.1p and DSCP)
Replies: 4
Views: 1221

Re: VPN and QoS (802.1p and DSCP)

By preserve do you mean it makes it to the other side of the tunnel? Or do you mean it moves the marking up a level to the tunnel IP header?
makes it to the other side of the tunnel
by pnajm
Mon Jan 26, 2015 3:48 pm
Forum: General
Topic: DHCP Option Time Zone for GMT
Replies: 2
Views: 719

DHCP Option Time Zone for GMT

how to add DHCP option 2 "Time Zone" for GMT
I understand for example if I want to put GMT +2 I put '7200' in the value.
but what if it is GMT time what do I put.
I tried putting '0' but didn't work.
by pnajm
Mon Jan 26, 2015 3:44 pm
Forum: General
Topic: VPN and QoS (802.1p and DSCP)
Replies: 4
Views: 1221

Re: VPN and QoS (802.1p and DSCP)

any help will be much appreciated!
by pnajm
Mon Dec 29, 2014 4:03 am
Forum: General
Topic: VPN and QoS (802.1p and DSCP)
Replies: 4
Views: 1221

VPN and QoS (802.1p and DSCP)

Hi, I want to know which type of these tunnels preserve the QoS marks whether it is 802.1p or DSCP. IPIP EoIP PPTP L2TP SSTP OpenVPN I know that MPLS preserves the priority information across the packet journey on the internet. but do the above vpns have this ability? it is really good for voice and...
by pnajm
Wed Oct 22, 2014 9:07 am
Forum: General
Topic: CCR1009-8G-1S Partition problem
Replies: 3
Views: 822

Re: CCR1009-8G-1S Partition problem

Any chance that you are installing a version lower than 6.20?
Also, have you updated the firmware to 3.19?
I tried 6.20, does the same error AND does a reboot loop; tried 6.7; 6.12 and 6.15 no luck either.
Yes routerBoot is 3.19, also tried downgrading the firmware with no luck.

any ideas?
by pnajm
Tue Oct 21, 2014 1:33 pm
Forum: General
Topic: CCR1009-8G-1S Partition problem
Replies: 3
Views: 822

CCR1009-8G-1S Partition problem

Router was working normally, one day i restarted it and it got a kernel panic, i tried using netinstall with no result. But after working around for 1 hour i discovered something very interesting. 1- If i repartition the RoS with 1 partition i get the same kernel panic error and corruption message. ...
by pnajm
Tue Oct 21, 2014 1:20 pm
Forum: General
Topic: PCC rules explanation
Replies: 3
Views: 835

Re: PCC rules explanation

Well, you have the explanation in the wiki itself, every rule is explained there. The accept action, means that that particular traffic is not processed by the other rules, it is excluded from being processed. The dst-type=!local means not local, and with local here is intended networks assigned in...
by pnajm
Fri Oct 17, 2014 12:47 pm
Forum: General
Topic: PCC rules explanation
Replies: 3
Views: 835

Re: PCC rules explanation

anyone?
by pnajm
Mon Oct 13, 2014 2:38 pm
Forum: General
Topic: IP Firewall Chains
Replies: 2
Views: 720

Re: IP Firewall Chains

Well, it pretty much depends on what you're up to with your packet marking ;-) The input chain deals with all packets terminating in the router (i.e. the router is the destination of communication). The output chain covers all packets originating from the router (when the router itself opens a conn...
by pnajm
Sat Oct 11, 2014 12:58 am
Forum: General
Topic: IP Firewall Chains
Replies: 2
Views: 720

IP Firewall Chains

I am a bit confused about all five chains in IP/Firewall.
can you show me how i can mark traffic and which is the best way to look at the packets before marking them (which chain to choose) and depending on what criteria etc.
input output forward prerouting and postrouting

Thanks :)
by pnajm
Sat Oct 11, 2014 12:53 am
Forum: General
Topic: PCC rules explanation
Replies: 3
Views: 835

PCC rules explanation

Hey, can someone explain what every rule in the PCC does ?? (including everything in the rule). i have setup load balancing using the PCC method in the wiki and it is working correctly but i want to understand why is there accept rules and what is the dst-type !local and why it is there and so on? c...
by pnajm
Thu Oct 09, 2014 11:51 am
Forum: General
Topic: ECMP vs PCC
Replies: 3
Views: 1562

Re: ECMP vs PCC

question 1 what is the difference between ECMP and PCC method, do both do WANload balancing, ECMP is balancing using route, PPC is completely different animal. ECMP can be used if you use global ip addresses for hosts you are balancing, PCC is good if you use NAT, since packets in ECMP will be dist...
by pnajm
Wed Oct 08, 2014 9:25 pm
Forum: General
Topic: ECMP vs PCC
Replies: 3
Views: 1562

ECMP vs PCC

Hey, question 1 what is the difference between ECMP and PCC method, do both do WANload balancing, question 2, what is the difference between load balancing and bonding with these 2 methods. question 3, if i have 2 wan 6Mb+4Mb and LAN if a user downloads something will it be 10Mb or it will be random...
by pnajm
Fri Oct 03, 2014 8:39 am
Forum: RouterBOARD hardware
Topic: CCR 1009 switch chip menu
Replies: 22
Views: 8769

Re: CCR 1009 switch chip menu

You can do slaves only within one common switch group. Enslavement means join the ports in switch. But if there is no switch chip you can just bridge the ports thru cpu.
what is the advantage of being in a switch group and not being in it? :)
by pnajm
Fri Oct 03, 2014 1:45 am
Forum: RouterBOARD hardware
Topic: CCR 1009 switch chip menu
Replies: 22
Views: 8769

Re: CCR 1009 switch chip menu

so can anyone tell me what is the difference between the switch group 1-4 and the rest of the ports,
what are the advantages and disadvantages?
why you cannot make a port from the switch group a slave to the non switch group? i know you can do it by using bridge.

thanks
by pnajm
Thu Oct 02, 2014 9:10 pm
Forum: General
Topic: DHCP Options
Replies: 12
Views: 9579

Re: DHCP Options

you can check frc for each DHCP option and what it accepts as value. In RouterOS dhcp value length is calculated automatically, so you have to only provide actual value. if you want to give ip address as an value you can use 0x0a0a0a0a or '10.10.10.10' and set in as a value. Since initial construct...
by pnajm
Thu Oct 02, 2014 11:26 am
Forum: General
Topic: DHCP Options
Replies: 12
Views: 9579

Re: DHCP Options

what is the difference between the dhcp option 42 and the ntp server option in dhcp networks. Probably nothing different. Just a different way of sending option 42. I have not tested it, but I don't see another way using dhcp to send the NTP server IP. SurferTim, i tried the options but for some re...
by pnajm
Thu Oct 02, 2014 11:24 am
Forum: General
Topic: WMM over WiFi
Replies: 7
Views: 2350

Re: WMM over WiFi

The reason I say to ignore WMM is that it works good for e.g. iPhone to AP connection, but for bridge, you would have to configure the bridge to set wmm parameters for which packets it is forwarding. I don't even think you can set the wmm queue for packet/connection in routeros. Best to stick with ...
by pnajm
Tue Sep 30, 2014 5:27 pm
Forum: General
Topic: WMM over WiFi
Replies: 7
Views: 2350

Re: WMM over WiFi

Links were helpfull, but can i implement qos in my network on layer 3 dscp values? or is just for internet purpose only?
considering my setup it is layer 2 bridge between the 2 sites, so how can dscp values be any good? :)
by pnajm
Tue Sep 30, 2014 9:38 am
Forum: General
Topic: WMM over WiFi
Replies: 7
Views: 2350

Re: WMM over WiFi

The reason I say to ignore WMM is that it works good for e.g. iPhone to AP connection, but for bridge, you would have to configure the bridge to set wmm parameters for which packets it is forwarding. I don't even think you can set the wmm queue for packet/connection in routeros. Best to stick with ...
by pnajm
Mon Sep 29, 2014 8:53 pm
Forum: General
Topic: WMM over WiFi
Replies: 7
Views: 2350

Re: WMM over WiFi

i forgot to mention my map

pbx>>>>main router>>>AP bridge wmm.........................Station bridge wmm>>>>ip phone.

so what should be done to have a clear voice.

thanks :)
by pnajm
Mon Sep 29, 2014 7:12 pm
Forum: General
Topic: WMM over WiFi
Replies: 7
Views: 2350

WMM over WiFi

Hello my scenario is the following... I have 2 sites bridged together by 2 mikrotik devices, 1st one is ap bridge 802.11 wmm enabled and second one is station bridge 802.11, also wmm enabled. my main router is also mikrotik 450g i have a voip gateway at 192.168.88.250. how can i use wmm to make qos ...
by pnajm
Sun Sep 28, 2014 11:32 pm
Forum: General
Topic: DHCP Options
Replies: 12
Views: 9579

Re: DHCP Options

Are these the options you wanted? /ip dhcp-server option add name="Time Zone Offset" code=2 value="'-28800'" add name="NTP Server" code=42 value="'1.2.3.4'" The value is a bit odd. It requires a double and single quote on each end of the value if not a hex value. Thanks SurferTim. what is the diffe...
by pnajm
Sun Sep 28, 2014 4:32 am
Forum: General
Topic: DHCP Options
Replies: 12
Views: 9579

Re: DHCP Options

You can set those in /ip dhcp-server option. I don't use it but I know where to set it.
http://wiki.mikrotik.com/wiki/Manual:IP ... CP_Options
I have read the wiki many times but it does not provide good information.
please i want details.
by pnajm
Sun Sep 28, 2014 4:24 am
Forum: General
Topic: DHCP Options
Replies: 12
Views: 9579

DHCP Options

Hello,
I have grandstream phones in my network and i want them to grab dhcp option 2 and 42 automatically from mikrotik dhcp.
can someone please clarify in details on how to configure?
what is the pattern when adding the value ?
also, is hex always used for dhcp options ?


Thanks a lot.
by pnajm
Thu Sep 18, 2014 11:12 am
Forum: General
Topic: VLAN question
Replies: 5
Views: 995

Re: VLAN question

The vlan interface you create acts as sort of a tagger/untagger.¨ With attaching it to a physical port, you extract all tagged traffic for the specific vlan on this interface and untag it. When binding it to a bridge, the bridge only sees untagged traffic coming from this vlan interface. Traffic co...
by pnajm
Thu Sep 18, 2014 9:42 am
Forum: General
Topic: VLAN question
Replies: 5
Views: 995

Re: VLAN question

Answer 1: Yes. Answer 2: It depends on the direction you look at the interface. When you create a vlan interface attached to a physical ethernet port, it's tagged from the ethernet side and untagged in the router side. Add this vlan interface to a new bridge. You can then create access ports by sim...
by pnajm
Wed Sep 17, 2014 10:49 pm
Forum: General
Topic: VLAN question
Replies: 5
Views: 995

VLAN question

Hello... quick question
if i tag the native vlan1 on a switch do i have to create vlan1 also on mikrotik ???

question2...
if vlan1 interface is created on mikrotik will it be 802.1Q tagged interface...?
if so how come my laptop works when i plugg it into vlan1 interface

thanks
by pnajm
Mon Jul 14, 2014 11:06 am
Forum: General
Topic: problem pinging pppoe and hotspot users
Replies: 9
Views: 1907

Re: problem pinging pppoe and hotspot users

Would be worth investigating the impact of that change. For example you should have done so already but check again that hotspot users can't get access to internal resources. Worth adding a rule to deny it anyway, at least for logging/counting any attempts how to deny the users from seeing my main ...
by pnajm
Mon Jul 14, 2014 10:56 am
Forum: General
Topic: Routing Table Policy
Replies: 1
Views: 641

Routing Table Policy

Here is my scenario I have one main RB450G acting as the default gateway port 1 is wan port 2 is lan 192.168.88.0/24 i have another routerboard that is connected to port 2 and i assigned fixed ip 192.168.88.37 to it. on this routerboard i created another subnet 10.10.10.0/24 and its default gateway ...
by pnajm
Thu May 08, 2014 10:07 pm
Forum: General
Topic: Public IP reachable without gateway!
Replies: 7
Views: 932

Re: Public IP reachable without gateway!

The default gateway only needs to be in the same subnet as one network on the device. There isn't a default gateway per network. Even then its for destination not source. Packets coming from the Internet are sent to your device by your ISP's routing table. Packets from your network are sent to your...
by pnajm
Thu May 08, 2014 10:17 am
Forum: General
Topic: Public IP reachable without gateway!
Replies: 7
Views: 932

Re: Public IP reachable without gateway!

You only need in default gateway per router. You mention that PPPoE is giving you a default gateway.
yea but that default gateway is dynamic from pppoe and it is not on the same subnet as 213.x.x.x/29
by pnajm
Thu May 08, 2014 10:16 am
Forum: General
Topic: Public IP reachable without gateway!
Replies: 7
Views: 932

Re: Public IP reachable without gateway!

That subnet is being routed to you via the pppoe connection from your isp
ok but the default gateway 78.x.x.x is not on the same subnet as the public ip 213.x.x.x
as far as i know 213.x.x.x has to have a default gateway on its same subnet 213.x.x.x/29 to be reachable from the internet.
by pnajm
Thu May 08, 2014 12:06 am
Forum: General
Topic: Public IP reachable without gateway!
Replies: 7
Views: 932

Public IP reachable without gateway!

Hello, as we all know a subnet cannot reach another subnet without a default gateway. so can someone please explain the following scenario: -The customer has a range of public ips /29 -A DSL modem is bridged ( no configuration on it) -Routerboard is connected to DSL on ether1, doing pppoe and gettin...
by pnajm
Sat Mar 15, 2014 4:25 pm
Forum: General
Topic: information on src-nat
Replies: 4
Views: 1732

Re: information on src-nat

The action=accept is used to exclude something from a specific rule. I used this recently. The example below excludes 192.168.0.2 from the redirect because it is a separate proxy server that you do not want going through the router's transparent proxy. All other 192.168.0.x ips will go through the ...
by pnajm
Thu Mar 06, 2014 11:54 pm
Forum: General
Topic: information on src-nat
Replies: 4
Views: 1732

information on src-nat

Hello,
Can anyone please explain what "chain src-nat with action accept" does and what do they use it for.

Thanks :) :D
by pnajm
Wed Dec 18, 2013 9:07 pm
Forum: General
Topic: problem pinging pppoe and hotspot users
Replies: 9
Views: 1907

Re: problem pinging pppoe and hotspot users

is there a route for destination 172.16.0.0/24? What is the routing table on the device you're trying to ping them from?
MadEngineer thank you so much!
there was a missing route in the main router to both subnets
I can ping the hosts now :)
by pnajm
Tue Dec 17, 2013 10:44 pm
Forum: General
Topic: Routing Problem
Replies: 8
Views: 1467

Re: Routing Problem

Are you seeing entries in the routing table for these 192.168.88.x PPPoE clients? Are you sure that the PPPoE clients are configured to accept pings? CelticComms I'm not tryin to bing the PPPoE clients, i'm tryin to being Access points on the eth3 (PPPoE) interface that have 192.168.88.xxx IPs i'm ...
by pnajm
Tue Dec 17, 2013 10:01 am
Forum: General
Topic: Routing Problem
Replies: 8
Views: 1467

Re: Routing Problem

If the second 750 has its 192.168.88.0/24 port connected to the 192.168.88.0/24 interface on the first 750 (directly or via a layer 2 device such as a switch) then simply running proxy-arp on the 192.168.88.0/24 interface on the second 750 should suffice. Essentially that will cause the second 750 ...
by pnajm
Tue Dec 17, 2013 9:50 am
Forum: General
Topic: Routing Problem
Replies: 8
Views: 1467

Re: Routing Problem

If the second 750 has its 192.168.88.0/24 port connected to the 192.168.88.0/24 interface on the first 750 (directly or via a layer 2 device such as a switch) then simply running proxy-arp on the 192.168.88.0/24 interface on the second 750 should suffice. Essentially that will cause the second 750 ...
by pnajm
Mon Dec 16, 2013 10:56 pm
Forum: General
Topic: problem pinging pppoe and hotspot users
Replies: 9
Views: 1907

Re: problem pinging pppoe and hotspot users

PPPoE: RB750 configured wan (192.168.88.234/24) and pppoe users pool is 10.10.10.0/24 Hotspot: RB750 configured wan (192.168.88.235/24) and hotspot users pool is 172.16.0.0/24 your wan ip is 192.168.88.xxx and your ip is 192.168.88.xxx in ordinary case you cant ping from outside to inside is there ...
by pnajm
Mon Dec 16, 2013 10:55 pm
Forum: General
Topic: Routing Problem
Replies: 8
Views: 1467

Re: Routing Problem

You would probably be best to move away from the Mikrotik default 88 subnet and design the IP layout properly, but meantime you can try running proxy-arp on the "WAN" interface / port 2 of the second 750. The second 750 will also need to have a default path via the first 750. and by default path yo...
by pnajm
Mon Dec 16, 2013 2:28 pm
Forum: General
Topic: problem pinging pppoe and hotspot users
Replies: 9
Views: 1907

Re: problem pinging pppoe and hotspot users

you cant ping them
you must have ip with the same range to pinging
is it possible with IP/routes ?
by pnajm
Mon Dec 16, 2013 2:26 pm
Forum: General
Topic: Routing Problem
Replies: 8
Views: 1467

Re: Routing Problem

I have a RB750 setup as the main router with ip 192.168.88.1 acting as dhcp, dns and nat to 192.168.88.0/24 users i setup pppoe for customers so i bought a second RB750 and configured it as follows: wan interface: port 2 as master port with ip 192.168.88.234/24 pppoe interface: port 3 master port w...
by pnajm
Thu Nov 28, 2013 10:18 pm
Forum: General
Topic: problem pinging pppoe and hotspot users
Replies: 9
Views: 1907

problem pinging pppoe and hotspot users

Hello Mikrotik users, I am having a problem pinging pppoe and hotspot users from 192.168.88.xxx addresses setup: PPPoE: RB750 configured wan (192.168.88.234/24) and pppoe users pool is 10.10.10.0/24 Hotspot: RB750 configured wan (192.168.88.235/24) and hotspot users pool is 172.16.0.0/24 I can ping ...
by pnajm
Thu Nov 21, 2013 7:15 pm
Forum: General
Topic: Routing Problem
Replies: 8
Views: 1467

Routing Problem

I have a RB750 setup as the main router with ip 192.168.88.1 acting as dhcp, dns and nat to 192.168.88.0/24 users i setup pppoe for customers so i bought a second RB750 and configured it as follows: wan interface: port 2 as master port with ip 192.168.88.234/24 pppoe interface: port 3 master port wi...