MikroTik

midenok

Is it possible to do passwordless login via certificates?

midenok

Another implementation:

https://github.com/midenok/hardware/blo ... qdn-my.rsc

midenok

Just to note, may be a bug or may be not. 2 switches connected to bridge. Work fine, ping goes from switch A to switch B. Now we add bridge to mesh -- ping stops from switch A to switch B, but goes fine to other devices in mesh (f.ex from switch A to wlan0, from switch B to wlan0).

midenok

Hey, this means I can't parse files??? No other ways to read by chunks? I want to parse http://txt.proxyspy.net/proxy.txt Unfortunately not if the contents is > 4kb. You could setup an external service to transform the data into a RouterOS string via local variable. This would allow you to consume ...

midenok

At least, make the ability to parse any size of text files (by removing 4k limitation or reading by chunks).
Or make /tool fetch to output into array of lines.
Fix this bug.
Or if you don't want to fix any the above, make LUA available!

midenok

Hey, this means I can't parse files??? No other ways to read by chunks? I want to parse http://txt.proxyspy.net/proxy.txt

midenok

Thanks! One more question: can AP work at different speeds simultaneously? F.ex. at 54m with client and at 300m P-to-P. Or it is the same restriction: one radio module -- one tx speed?

midenok

But keep in mind Nstreme is a lot faster. 802.11n is not that effective algorithm.

Can I use Nstreme for Point-to-Point and 802.11 for regular client connection simultaneously?

midenok

try udp test

Mmm... This was udp test (of course)/

midenok

WDS over every hop cuts the bandwidth in half. Could you explain your problem. I have WDS-mesh between 2 hops (SXT 2nD r2, 2011UAS-2HnD), WPA2, distance 20 meters. hop A: 0 interface=wlan1 radio-name="D4CA6DAB65F0" mac-address=D4:CA:6D:AB:65:F0 ap=yes wds=yes bridge=no rx-rate="300Mb...

midenok

Is this ever going to be fixed? I can only get 30 Mbps of advertised 300 Mbps.

midenok

'/system ssh' asks for password ignoring private key file!

midenok

Dynamic Mesh automatically creates WDS tunnel and it somehow works fine!!! From yesterday 0 link downs!!!

midenok

This is an old topic. I still have the same issue! Reproduce sequence: ssh-keygen -q -t dsa -f script.dsa -C "Mikrotik script" -N 'abcdef' cp script.dsa.pub script.dsa.x.pub scp script.dsa* router: /user remove [find name="script"] group remove [find name="script"] ssh-...

midenok

Hi, This is definitely not a beta issue (actually not issue at all) and this topic is also quite old, but I reuse it anyway.. Explained method really works (although I would really appreciate more straightforward way to do this), but is it possible (I pretty sure it is, but my regexp-skilz are just...

midenok

Good imagination, but no. I see all counters, none of them gets increased (and no such rule 'established').

midenok

This can't catch anything: chain=forward action=accept p2p=bit-torrent protocol=udp log=no log-prefix="" It catched 1724 bytes from total of 120 Mb download. I had encryption disabled in my client. And this catches well (all bytes were catched): chain=forward action=accept protocol=udp por...

midenok

I checked both variants. Router doesn't do conntrack on UDP, at least for bittorrent. Anyway, what is UDP connection in terms of conntrack? I don't fully understand...

midenok

I test rule which catches torrent traffic (udp packets). When rule action is 'accept' everything is ok -- bytes counter is adequate to downloaded torrent. But when I change action to mark-packet -- rule byte counter is >90% lower than actual download. So, it skips >90% of packets!

midenok

For example, we have regular clients sitting on wlan1 and Bittorrent client sitting on eth2. They access Internet via eth1. Bittorrent download traffic should be given lowest priority. So, that Bittorrent download on eth2 will not hinder regular traffic on wlan1. Of course, we cannot prioritize it o...

midenok

I just don't get it. Isn't there a straight way to create a directory except "shaman dance" that Google suggests?

midenok

Some more discoveries: 1. 'Security Profile: none' in Connection List means Security Profile from wlan interface is used. Somehow, it connects much better when 'Security Profile: none' is in Connection. The link in Registration still shows WPA2. 2. There should be Connection List entry only on one s...

midenok

My wds links between APs work with wpa2. I just do not use the physical interface at all (not member of bridges, no ip) just running virtual APs with their own mac addresses different from physical wlan. Try this too. This just proves the instability of WPA code in Mikrotik firmware. I synchronized...

midenok

It's too early to celebrate... Though it scarcely connects, the connection is very unstable! There were no any problems with clients, the signal is very strong, SNR > 40 dB, distance between points is several meters. Nevertheless, points cant hold stable WDS connection. Tried too many variations: AP...

midenok

Finally, I managed to establish WDS WPA2 link. Here are my conlusions: 1. SSIDs of WDS-enabled interfaces must match. WDS Ignore SSID flag doesn't help ! This is not true for non-WPA links, I guess. 2. Security profiles of APs and WDSs must be identical including pre-shared key! So, it is impossible...

midenok

Sorry. I meant group key. My bad memory...

The message about "timeout" is not the actual timeout but plain authentication failure. Group key timeout have nothing to do with this! Did your WDS use pre-shared key or EAP?

midenok

Set the unicast key timeout to 1hour in all security profiles. I am using wds with wpa2 without any problems. Try to avoid mesh if you can. There is no unicast key timeout in security profiles: 1 name="wds" mode=dynamic-keys authentication-types=wpa2-psk unicast-ciphers=tkip,aes-ccm group...

midenok

Ok, guys, let's compile a list of areas of danger where it is possible to lock-up your router. The first, what goes to head is firewall filter. This is plain simple for everyone I think. But there are places when you don't expect it, so the unawareness may lead to some sort of surprise. :lol: The 2 ...

midenok

I have two routers in 'ap bridge' mode with WDS mode 'static'. I've added 'wds1' interface with WDS address of the opposite side to both routers and set connection in Connection List with special security profile 'wds_profile'. APs have different SSID and 'WDS ignore SSID' is on. When I make Mode 'n...

midenok

With v6.2 the state of things have been changed! Look in Scripting Manual for Catch run-time errors:

:do {
      :put [:resolve www.example.com];
} on-error={ :put "resolver failed"};
:put "lala" 

output:

resolver failed
lala

midenok

I had to figure out by myself. It disables access by default. To enable full read access one should use this command:

/ip tftp add allow=yes

midenok

Documentation doesn't say whether TFTP is open or closed by default. How it behaves if '/ip tftp' is empty?

midenok

Apart from that UiAS is newer what's the real difference? What does 'i' mean anyway?

midenok

What is the difference between UAS and UiAS?

midenok

bump

Though enabling static policy turns off access from home network (192.168.35.0/24). This means, that policy actually works. Only it can't be matched by connected IPSec client.

It is not chicken and egg problem, because dynamic policy works perfectly well when static policy is ON.

midenok

/ip ipsec peer> print 0 address=0.0.0.0/0 local-address=0.0.0.0 passive=yes port=500 auth-method=rsa-signature certificate=limbo-ipsec remote-certificate=sip-ipsec generate-policy=no exchange-mode=main send-initial-contact=no nat-traversal=yes proposal-check=obey hash-algorithm=sha1 enc-algorithm=a...

midenok

+1 udp!!!!!!!!!!!!!

midenok

Or you can try this script.

midenok

Or you can try this script.

Search found 39 matches

Re: How to Self-Sign SSL Certificate and Activate HTTPS

Re: Sync DNS entries with DHCP leases

Bug? Putting bridge to mesh disconnects 2 switches.

Re: Cant read file large then 4085 bytes

Re: Feature request: Scripting language improvement

Re: Cant read file large then 4085 bytes

Re: What is WDS limitaiton with Wireless N

Re: What is WDS limitaiton with Wireless N

Re: What is WDS limitaiton with Wireless N

Re: What is WDS limitaiton with Wireless N

Re: What is WDS limitaiton with Wireless N

Re: Known issues and bugs - a list

Re: WDS WPA2 problems

Bug? '/system ssh' asks for password ignoring private key file!

Re: Conditional DNS forwarding

Re: mark-packet action can skip packets!

Re: mark-packet action can skip packets!

Re: mark-packet action can skip packets!

mark-packet action can skip packets!

Prioritize traffic going to different interfaces

Command to create directory?

Re: WDS WPA2 problems

Re:

Re: WDS WPA2 problems

Re: WDS WPA2 problems

Re:

Re:

Ways to make your router inaccessible

WDS WPA2 problems

Re: Handling expected errors?

Re: TFTP with no configuration

TFTP with no configuration

UAS vs UiAS: what's the difference?

Re: RB2011 UiAS-2HnD-IN - SLOW TRANSFER

Re: IPSec can't find static policy

IPSec server can't find static policy on client connection

Re: Feature request: OpenVPN compression LZO and UDP

Re: Wget Afraid - FREEDNS script help

Re: Wget Afraid - FREEDNS script help