"First, are you using the switch cheap feature of the RB951G" I am not sure I will have to check "RouterOS, 6.41rc, the way VLANs are configured has been standardized into a new bridge " I did upgrade to this version before I tried to do the setup so the CRS is on 6.41 but the RB...

Hi I want to create two VLAN's on the switch one for the Office and one for VOIP phones, then both VLAN's should be able to break out to the internet via the RB951G. I have spend hours trying to get the VLAN's to pickup the DHCP from the router, I dont know what is wrong. Both is setup with minimal ...

Can a packet take a routing mark and a packet mark at the same time? I mark the packet with routing marks so the correct ip range goes out the correct WAN, then I want to shape the traffic for company B VOIP they are the only one with a voip phone This is what I have done 192.168.0.0/25 should go to...

No one?

Thanks for your answer, I only saw it now..
I went for a mikrotik course and have since learned how to do it correctly

Good day I have 2 companies working from the same office, they share a file server but each has their own Internet. I need to route company A internet to Internet A and Company B to Internet B. Furthermore Company B has a VOIP pabx that I need to do QOS for as well and I also want to limit Company B...

Ok that was easy enough, I looked at that 20 times...

I only open it to my ISP ip address once its working and we check the logs for people trying to get in.

Hello I am using a new firewall config that should be more secure than my previous setup. I can get winbox to work form the WAN I have manages to get web interface open. What do I need to change? /ip firewall> export # mar/07/2017 21:00:28 by RouterOS 6.38.3 # software id = R1QD-BPJQ # /ip firewall ...

Hello I have all these connections and cant seem to stop them see attached pic my firewall rules /ip firewall address-list add address=196.0.0.0/8 list=SA_Sub add address=41.0.0.0/8 list=SA_Sub add address=165.0.0.0/8 list=SA_Sub add address=197.0.0.0/8 list=SA_Sub add address=129.0.0.0/8 list=SA_Su...

Can any one assist with this script please. I wan to change it so that it checks that :global theinterface "pppoe-har" is reachable if not then check :global theinterface "pppoe-har2"

Thank you that sorted that out It seems that the rule below does the job by itself, am I correct and that they both say the same thing just the other way around? add action=drop chain=forward comment="Block access not from SA_Sub List" in-interface=pppoe-out1 protocol=tcp src-address-list=...

Hello The ports I have open on the router I only want to be accessibly from the address list and the rest it must drop. I have created a Address list to include the most common IP ranges for my country and internal network /ip firewall address-list add address=196.0.0.0/8 disabled=yes list=SA_Sub ad...

Hello I subnet my network in 2 via ip range and each one goes out its own WAN port with a pppoe connection. They do fail over if one link goes down but my dyndns script only updates on its own pppoe connection I want it to update the fail over wan ip in case it does, I have tried ddclient on two dif...

Hi I have a network that I subnet into 2 parts A = 1 - 127 and B= 128 - 254 A goes to WAN1 and B goes to WAN2 Network B has a VOIP phone now on IP 192.168.0.160, at my office I use this to shape the traffic so the voip gets preferred traffic with the script config below # Mark all UDP traffic for an...

I have seen that one but this is the one I followed

http://wiki.mikrotik.com/wiki/Load_Bala ... e_Gateways

The must not share the WAN unless one route goes down or do I need to add some of that config to the above post?

Good day I have 2 companies that share IT infrastructure in one building, they share 2 servers for data and email. The internet is a problem as the 2 companies have different needs and we added a second ADSL line for them so each company can have its own connection. I want to split the traffic with ...

There is a bridge but I am not sure if the firewall is on it or not. Under Filter Rules I block port 25 except from the mail server and I drop DNS. Then I have a few NAT rules and the Mangle ones Below is inferface config add ac-name="" add-default-route=no allow=pap,chap,mschap1,mschap2 d...

That is how the graph looks

Hello I have created some packet marks for the devices on my network to graph their internet usage. In the mangle part I see both parts working but not when I graph it below is my config /ip firewall mangle add action=mark-packet chain=forward comment=IT disabled=no new-packet-mark=IT passthrough=ye...

Ok thanks its closed now.

"ESTABLISHED/RELATED should be at the beginning of the rules as you prevent each packet of already established connections to go through all the rules"

which rules must be moved where I am not sure which ones refer to established related

Hi I am running two mikrotik routers at different sites, on the one I managed to drop the DNS from the WAN side and cant see port 53 if I use a port scanner from the outside. But on my own one the rules don't want to take, I do how ever have a hotspot here and I think I made a mess off the original ...

Hello I want to monitor if my pppoe connection gets congested. I was told to use Traffic Monitor I have checked the wiki http://wiki.mikrotik.com/wiki/Manual:Tools/Traffic_Monitor but it makes no sense to me. I have also tried watching you tube vids but most of it is not in English. I really want to...

Hello This is a great tool thank you, Can this tool or even another log the line usage, we can see the current up and download speed but I want to see if the line gets congested at time especially the upload. I skimmed through the pages but did not see anything. I have tried cacti but did not come r...

Hello I have setup a hostspot on a RB951G before, but now I would like to use my RB750 to dial a PPPOE connection via my bridged DLINK. I used the default config script and added the PPPOE and I changed the IP Range for the LAN (Port 2) I enabled the DHCP server for the LAN.I can see that the connec...

Hello My setup is as follows, Netgear 1000mb switch which plugs into my D Link router. The router and the switch is connected via one cable. I have a RB750 that I want to connect between the router and the switch then plug the VOIP phone directly in to the RB750 (On the RB750 port 1 to DLINK router,...