Community discussions

Search found 127 matches

by Kickoleg
Tue Dec 11, 2018 8:25 am
Forum: RouterBOARD hardware
Topic: hardware idea for a multiport switch
Replies: 45
Views: 8478

Re: hardware idea for a multiport switch

No thanks, for cable managment this is nightmare.
by Kickoleg
Mon Oct 22, 2018 5:25 pm
Forum: Wireless Networking
Topic: Connect 2 locations 80m apart with obstacles
Replies: 6
Views: 967

Re: Connect 2 locations 80m apart with obstacles

only one opportunity to pull the cable on each roof and to fix the antennas on the roof.
by Kickoleg
Thu Oct 18, 2018 10:03 am
Forum: RouterBOARD hardware
Topic: Cracked cover on RouterBOARD DISC Lite5
Replies: 59
Views: 7929

Re: Cracked cover on RouterBOARD DISC Lite5

Colleagues? Are you a distributor ?
Yes we are distributor, and we have 2 packages old series not open and we ask for change it, but your colleagues give us answer what you send for us palstic for change.
by Kickoleg
Thu Oct 18, 2018 8:33 am
Forum: RouterBOARD hardware
Topic: Cracked cover on RouterBOARD DISC Lite5
Replies: 59
Views: 7929

Re: Cracked cover on RouterBOARD DISC Lite5

As you know which CPE are affected by the problem but our distributor keeps telling us he doesn't receive this information, can I send you all the serials, so you tell me which ones could be broken and which ones are safe? I already said that the issue is fixed in manufacturing recently (meaning th...
by Kickoleg
Thu Sep 06, 2018 5:18 pm
Forum: Wireless Networking
Topic: 70 Kms Point 2 Point link
Replies: 18
Views: 2935

Re: 70 Kms Point 2 Point link

Here, link 38 km ... with dynadish 5 Is this Link in Swiss? When yes, you are a little bit above 30dbm....... Dynadish has 24 dbI you have to set this as Antenna gain.... And then i believe your connection won´t work anymore .... You are now at 33db SNR -24db = 9db SNR you are lucky if you get a co...
by Kickoleg
Thu Sep 06, 2018 10:22 am
Forum: Wireless Networking
Topic: 70 Kms Point 2 Point link
Replies: 18
Views: 2935

Re: 70 Kms Point 2 Point link

Here, link 38 km ... with dynadish 5
Is this Link in Swiss? When yes, you are a little bit above 30dbm.......
by Kickoleg
Thu Sep 06, 2018 9:30 am
Forum: Wireless Networking
Topic: 70 Kms Point 2 Point link
Replies: 18
Views: 2935

Re: 70 Kms Point 2 Point link

Here, link 38 km ... with dynadish 5
by Kickoleg
Tue Jul 17, 2018 2:45 pm
Forum: Announcements
Topic: Winbox v3.16 released!
Replies: 63
Views: 27671

Re: Winbox v3.16 released!

Are you sure you're not disconnected on "add port ether1 to bridge"? How do you connect to the router? I can't repeat such problem on my virtual ROS... I'm pretty sure ... disconnect if I add to bridge port i understand what mac-address changes ... and here situation when i add to bridge ip address...
by Kickoleg
Tue Jul 17, 2018 12:34 pm
Forum: Announcements
Topic: Winbox v3.16 released!
Replies: 63
Views: 27671

Re: Winbox v3.16 released!

winbox 3.16 - impossible add ip address for bridge .. .immediately dissconnect without adding ip address ... testing in this sitatution : WAP LTE kit, SXT LTE kit coneecting throut the cable with port ether1 from laptop... reset no defaults -> add bridge "Bridge" mode=no -> add port ether1 to bridge...
by Kickoleg
Mon Jul 02, 2018 4:14 pm
Forum: Wireless Networking
Topic: ARM devices and NV2 protocol
Replies: 582
Views: 60520

Re: ARM devices and NV2 protocol

Normis we need it urgently we have no more stock and we need 200 for the next 2 months You are killing small WISP that developed the access network using NV2 Our competitors uses ubiquiti and they not have this kind of problem we have no chance to install new customers so we 'll loose market, it's ...
by Kickoleg
Mon Jul 02, 2018 2:19 pm
Forum: Wireless Networking
Topic: ARM devices and NV2 protocol
Replies: 582
Views: 60520

Re: ARM devices and NV2 protocol

then why use Nv2 if you have better speed than non-ARM with nv2 ? Nv2 was made when devices were different and needed optimisations that are no longer needed. Maybe it is simply time to use 802.11 in the new devices. you want to say if I have all devices in network in NV2, I need to switch to 802.1...
by Kickoleg
Thu May 17, 2018 12:23 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 vs RB450Gx4
Replies: 49
Views: 10587

Re: RB850Gx2 vs RB450Gx4

RB450Gx4
Four core 7160MHz CPU, 1GB RAM, 5xGigabit Ethernet, PoE out on port #5, RouterOS L5
:lol: :lol: :lol:
by Kickoleg
Mon Apr 16, 2018 12:42 pm
Forum: General
Topic: MikroTik hEX PoE + UBNT AC PRO
Replies: 5
Views: 645

Re: MikroTik hEX PoE + UBNT AC PRO

no problem, with 960PGS it working without problem ...
by Kickoleg
Fri Dec 15, 2017 6:48 pm
Forum: RouterBOARD hardware
Topic: CRS317-1G-16S+RM - VLans not configurable [SOLVED]
Replies: 16
Views: 5201

Re: CRS317-1G-16S+RM - VLans not configurable [SOLVED]

I have same problem. every day I'm more and more disappointed in the products of the MikroTik! they began to send equipment that can not be configured directly !!! without losing any time!!! I spent 2 hours for find solution for configuring SWITCH !! I dont have explication of this - MIKROTIK you sh...
by Kickoleg
Mon Dec 11, 2017 8:29 am
Forum: Forwarding Protocols
Topic: Minimal mtu for VPLS
Replies: 5
Views: 1020

Re: Minimal mtu for VPLS

by Kickoleg
Fri Nov 24, 2017 11:22 am
Forum: Wireless Networking
Topic: Dramatically low speed of 802.11n AP mode on R52Hn
Replies: 17
Views: 2697

Re: Dramatically low speed of 802.11n AP mode on R52Hn

You can try this : WMM enabled - YES Normaly you need to do test scan frequency and try with frequency non perturbe (in your case do not use auto ! for example choose 2437 (channel 6)) wireless protocol - 802.11 in advanced - HW.Protection mode - rts cts adaptive noise imunnity -ap and client mode a...
by Kickoleg
Mon Nov 13, 2017 5:14 pm
Forum: Beginner Basics
Topic: Help!!!! 3011 connect wap ac
Replies: 6
Views: 483

Re: Help!!!! 3011 connect wap ac

https://wiki.mikrotik.com/wiki/Manual:CAPsMAN

You need to configure CAPsMAN. ssid provisioning e.t.c
by Kickoleg
Mon Nov 13, 2017 2:41 pm
Forum: Beginner Basics
Topic: Help!!!! 3011 connect wap ac
Replies: 6
Views: 483

Re: Help!!!! 3011 connect wap ac

1. Bridge port 10 and 9 2. Connect laptop with port 9 3. Download for your mobile TikApp from android store 4. Connect with wifi with your Phone to wAP 5. Reset configuration ( no default configuration) 6. Connect with Laptop throu winbox to wAP and configure p.s. and you can also active CAPsMAN on ...
by Kickoleg
Mon Oct 09, 2017 10:45 am
Forum: General
Topic: bonding pptp connections..
Replies: 3
Views: 641

Re: bonding pptp connections..

Hi, create EoIP tunell with every pptp connection, after that BoNDING -> slaves EOIP1, EOIP2 .... e t.c.
by Kickoleg
Fri Feb 24, 2017 2:39 pm
Forum: General
Topic: NetDuma
Replies: 8
Views: 2933

NetDuma

Hi, MikroTik staff, can you explain what is NETDUMA ? netduma.com ?
This is Your official partner ? You give them access for flash yours routers with his own OS ?
This is legal to resell your product with rebranded name ?

Thanks.
by Kickoleg
Thu Aug 25, 2016 12:36 pm
Forum: General
Topic: Mikrotik users complete Logging
Replies: 2
Views: 472

Re: Mikrotik users complete Logging

you need install package CALEA
by Kickoleg
Mon Aug 15, 2016 12:12 pm
Forum: Beginner Basics
Topic: help me
Replies: 6
Views: 787

Re: help me

What do you have in usermanger routers ?
by Kickoleg
Mon Aug 15, 2016 11:45 am
Forum: Beginner Basics
Topic: Connecting to AP makes it unaccessible
Replies: 2
Views: 464

Re: Connecting to AP makes it unaccessible

try assign ip address for bridge not for wlan1...

and i didnt undestand why you use wds ? ...
by Kickoleg
Tue Jul 26, 2016 12:48 pm
Forum: Beginner Basics
Topic: Hotspot with Android devices (open google play with hotspot)
Replies: 2
Views: 718

Hotspot with Android devices (open google play with hotspot)

Hello all,  I try to create hotspot (6.36), i need to force users which connect with page hotspot download application  at google play and apple store. I'm create two buttoms with link for each OS, with apple store works fine, with google play open page with google play and close at once. Somebody h...
by Kickoleg
Tue Feb 03, 2015 8:49 am
Forum: Beginner Basics
Topic: Port forward to another mikrotik
Replies: 6
Views: 1206

Re: Port forward to another mikrotik

OK, but how to create EoIP tunnel without public IP on one mikrotik?
Sorry my fault ...
My point of view better l2tp tunnel without add default route + ospf (point to point) between MT network range advertise connected from second router no default route.
by Kickoleg
Mon Feb 02, 2015 6:21 pm
Forum: Scripting
Topic: automatically name the system identity
Replies: 7
Views: 1878

Re: automatically name the system identity

ros code

:global IDENTITY [interface ethernet get ether1 mac-address ]
:system identity set name=$identity
by Kickoleg
Mon Feb 02, 2015 5:44 pm
Forum: Beginner Basics
Topic: Port forward to another mikrotik
Replies: 6
Views: 1206

Re: Port forward to another mikrotik

EoIP tunnel between two mikrotik, create brdige with LAN ... After that you have L2 bridged netwrok between MT, after you can do dst-nat to LAN on the first MT.
by Kickoleg
Mon Feb 02, 2015 5:31 pm
Forum: General
Topic: Feature Request : Static oid for PPPoE users
Replies: 9
Views: 2144

Re: Feature Request : Static oid for PPPoE users

/queue simple print oid where dynamic
by Kickoleg
Thu Oct 30, 2014 7:30 pm
Forum: General
Topic: VoIP: I'm heard but I can't hear
Replies: 3
Views: 1136

Re: 217.13.58.149oIP, heard but can't hear

Try to sniff Call with packet sniffer and analayze with wireshark voip call analayzer...
by Kickoleg
Sun Oct 19, 2014 9:25 am
Forum: Beginner Basics
Topic: Burst Time Calculation
Replies: 13
Views: 18628

Re: Burst Time Calculation

Real Time = Treshold *( Burst Time/Burst Limit )
by Kickoleg
Thu Oct 09, 2014 11:54 am
Forum: General
Topic: v6.20 released!
Replies: 146
Views: 58785

Re: v6.20 released!

This 'new' option exists even in ROS 5.x and is described here:
http://wiki.mikrotik.com/wiki/Manual:IP ... vice_Ports

Regards,
SIP Direct Media appeared only in 6.20, You need more accurate read my question ...
And I interesting in how it work? What changes it made and etc...
by Kickoleg
Wed Oct 08, 2014 5:17 pm
Forum: General
Topic: Help! "excessive broadcasts/multicast, probably a loop"
Replies: 22
Views: 30238

Re: Help! "excessive broadcasts/multicast, probably a loop"

Do sniffing traffic and analyze ...
by Kickoleg
Wed Oct 08, 2014 5:02 pm
Forum: General
Topic: v6.20 released!
Replies: 146
Views: 58785

Re: v6.20 released!

What is this "SIP Direct Media" ?
Where information about this new feature ?
by Kickoleg
Wed Oct 08, 2014 4:46 pm
Forum: RouterBOARD hardware
Topic: VOIP call has no audio
Replies: 2
Views: 1457

Re: VOIP call has no audio

I have Mikrotik router ccr 1036-12g-4s and I have pbx Grandstream UCM6102 this pbx has sip trunking the sip Registration is ok but No Audio on VoIP Calls Try to disable SIP in IP->Firewall->service ports (need restart router) If not helping use packet sniffer and trace phone call ... then analyze t...
by Kickoleg
Mon Oct 06, 2014 11:08 am
Forum: Wireless Networking
Topic: RB951Ui-2HnD strange behavior with Smartphones
Replies: 6
Views: 1198

Re: RB951Ui-2HnD strange behavior with Smartphones

I tested it with voiptester app on the smartphone and thats are the results: ping: 30-42 ms paket loss: 0% jitter: 0,3ms - max. 12ms download: 3502KBps upload: 3604 KBps Signal Level for all devices is between -45 and -68, I will test if its better now. And You have problemm with VoIP ? It's normal...
by Kickoleg
Mon Oct 06, 2014 10:29 am
Forum: Wireless Networking
Topic: RB951Ui-2HnD strange behavior with Smartphones
Replies: 6
Views: 1198

Re: RB951Ui-2HnD strange behavior with Smartphones

In first step try to ping AP from Phone using free ping software (I thing You will see different ping) ... After that see in registration table and check the signal level to device ... For VoIP acctualy ping 100-130 ms enough for lower compress codecs, but You need check Jitter, if it's value more t...
by Kickoleg
Fri Oct 03, 2014 1:23 pm
Forum: RouterBOARD hardware
Topic: cAP 2n
Replies: 20
Views: 10312

Re: cAP 2n

by Kickoleg
Wed Sep 24, 2014 9:56 am
Forum: Beginner Basics
Topic: How do I configure the VLAN?
Replies: 8
Views: 1707

Re: How do I configure the VLAN?

ether6 is master port and 7-10 slave. in the Bridge ether4,5,6master,wlan1 1. If You use ether6 as Mater interface and attach other etherX to him as SLave - this is Hardware bridge (switch) 2. If You create Bridge interface and attach Physical interfacaes like etherX - this is Software bridge. In Y...
by Kickoleg
Wed Sep 24, 2014 9:33 am
Forum: Beginner Basics
Topic: How do I configure the VLAN?
Replies: 8
Views: 1707

Re: How do I configure the VLAN?

"(VLAN Interface >> bridge or EtherPort / IP address interface >> VLAN or bridge?" 1. VLAN interface attach to BRIDGE (because only bridge is main interface! all another interfaces is slave to Bridge) 2. IP address attach to VLAN ! Because VLAN - is your broadcast domain for Your LAN1, LAN2, LAN3 .....
by Kickoleg
Wed Sep 10, 2014 7:10 pm
Forum: Beginner Basics
Topic: Simple port forward not functioning
Replies: 2
Views: 798

Re: Simple port forward not functioning

chain=dstnat dst-address=your.wan.ip.add action=dst-nat to-addresses=172.16.16.5 to-ports=1194 protocol=udp dst-port=1194
by Kickoleg
Sun Sep 07, 2014 12:18 pm
Forum: Wireless Networking
Topic: RB2011UiAS-2HnD / RB SXT G-2HnD / Bridge AP /Virtual AP
Replies: 7
Views: 3957

Re: RB2011UiAS-2HnD / RB SXT G-2HnD / Bridge AP /Virtual AP

1. WIFI-Corp to work only on MACs in ACL. - default autheficate - off
2. WIFI-Guest to work only based on password. - default autheficate - on (and setup security profile)
3. MACs from WIFI-Corp to be able to connect on Guest as well if they want. - Use in ACL list interfaces - ALL
by Kickoleg
Sun Sep 07, 2014 12:05 pm
Forum: Beginner Basics
Topic: T.38 Protocol
Replies: 2
Views: 859

Re: T.38 Protocol

(except obviously, if is exist, one router with integrated ATA).
Be sure - exist! :) For expamle -Fritz!Box ... In Germany, Latvia some providers use this devices ...

In this particulare case - representative of provider confused router with ATA ...
by Kickoleg
Thu Sep 04, 2014 8:39 pm
Forum: Wireless Networking
Topic: Office WiFi: Guest and Internal networks
Replies: 22
Views: 43768

Re: Office WiFi: Guest and Internal networks

Use for your guest network bootp support = dynamic and choose arp for Add ARP For a Leases
by Kickoleg
Thu Sep 04, 2014 7:33 pm
Forum: Wireless Networking
Topic: Office WiFi: Guest and Internal networks
Replies: 22
Views: 43768

Re: Office WiFi: Guest and Internal networks

Not the first time already recommend ...
 /ip route rule add src-address=192.168.0.0/24 dst-address=192.168.10.0/24 action=drop
by Kickoleg
Thu Sep 04, 2014 4:55 pm
Forum: Wireless Networking
Topic: RB2011UiAS-2HnD / RB SXT G-2HnD / Bridge AP /Virtual AP
Replies: 7
Views: 3957

Re: RB2011UiAS-2HnD / RB SXT G-2HnD / Bridge AP /Virtual AP

1. Not filling frequency field
2. Add master interface
by Kickoleg
Thu Sep 04, 2014 4:09 pm
Forum: Beginner Basics
Topic: Two AP, one DHCP server, 2 SSID's
Replies: 15
Views: 3633

Re: Two AP, one DHCP server, 2 SSID's

Thanks for your help! It really helps and now it's working PERFECT! Another question. I have remote access configured for Master router, but now I want to have remote access to Slave router too. How to do that? Thanks one more time ;) Simple add to your privat_bridge on the CAP AP ip address from y...
by Kickoleg
Thu Sep 04, 2014 3:59 pm
Forum: Beginner Basics
Topic: Two AP, one DHCP server, 2 SSID's
Replies: 15
Views: 3633

Re: Two AP, one DHCP server, 2 SSID's

I would go a step further and put both networks on a VLAN. so remove the ether port that is connecting to the other routerboard from the bridge it belongs to and add an additional VLAN to that interface. Then put that new VLAN interface as member of the private bridge. Do this on both devices and t...
by Kickoleg
Thu Sep 04, 2014 3:54 pm
Forum: Wireless Networking
Topic: RB2011UiAS-2HnD / RB SXT G-2HnD / Bridge AP /Virtual AP
Replies: 7
Views: 3957

Re: RB2011UiAS-2HnD / RB SXT G-2HnD / Bridge AP /Virtual AP

1. Use "auto" in configuration of channel and each AP select better channel for using.
2. CAPsMAN -> + -> Master Interface (choose your existing wlan interface)
3. If I right uderstood your question - remote CAP save his configuration.
by Kickoleg
Thu Sep 04, 2014 2:00 pm
Forum: RouterBOARD hardware
Topic: Dual chain or 3 chain...
Replies: 13
Views: 6716

Re: Dual chain or 3 chain...

Same picture for two products that all ... NetBox5 with 3xRPSMA connectors and NetBox5 2xRPSMA connectors ...
by Kickoleg
Thu Sep 04, 2014 1:17 pm
Forum: Wireless Networking
Topic: RB2011UiAS-2HnD / RB SXT G-2HnD / Bridge AP /Virtual AP
Replies: 7
Views: 3957

Re: RB2011UiAS-2HnD / RB SXT G-2HnD / Bridge AP /Virtual AP

For this purposes my advice - use fp-wireless package and CAPsMAN feature. Main router 2011 use as CAPsMAN manager - create 2 profiles for WIFI-AP and GUEST-AP, after that wireless interface use as CAP. SXT use as CAP, enable CAP create the bridge and select IP of CAPsMAN manager (2011). You can rea...
by Kickoleg
Thu Sep 04, 2014 12:59 pm
Forum: General
Topic: Monitor clients eventually abusing connection
Replies: 5
Views: 999

Re: Monitor clients eventually abusing connection

:D Try change your post subject, and write at the end "for rextended"
another way where you can find answer:
http://forum.mikrotik.com/viewtopic.php ... 72#p436372

try to post in this topic your question ...
by Kickoleg
Thu Sep 04, 2014 11:42 am
Forum: General
Topic: Monitor clients eventually abusing connection
Replies: 5
Views: 999

Re: Monitor clients eventually abusing connection

Another advice - try to find user "rextended" at this forum, he is from Italy too, and ask him ... I think he know about the low in your country ...
by Kickoleg
Thu Sep 04, 2014 11:28 am
Forum: General
Topic: Monitor clients eventually abusing connection
Replies: 5
Views: 999

Re: Monitor clients eventually abusing connection

http://wiki.mikrotik.com/wiki/Calea
But !!! Be noticed, using this feature you can brake the law in your country !!
by Kickoleg
Thu Sep 04, 2014 11:19 am
Forum: Forwarding Protocols
Topic: Problems IP traffic speed limit 177 Mb
Replies: 5
Views: 1441

Re: Problems IP traffic speed limit 177 Mb

For testing DON'T use both routers for generating traffic and see result on them.
Use another router/routers/PCs from both of sides which is generated traffic.
PC(bttest initiator) -----> test router ------> router (btest server)
And after that you can see real result only ...
by Kickoleg
Thu Sep 04, 2014 11:07 am
Forum: General
Topic: open port for internal access
Replies: 4
Views: 1636

Re: open port for internal access

ip firewall nat add chain=dstnat src-address=X.x.x.x dst-address=w1.w1.w1.w1 protocol=tcp dst-port=XXXX action=dst-nat to-addresses=R.R.R.R to-port=NNN Where X.X.X.X - your partner address who is needed connect to your server. w1.w1.w1.w1 - your WAN IP which give you your ISP. Protocot=TCP/UDP i c....
by Kickoleg
Sat Aug 30, 2014 8:42 pm
Forum: Wireless Networking
Topic: Hardware Suggestion?
Replies: 4
Views: 1035

Re: Hardware Suggestion?

If a RB800 is too big maybe wait for the mAP to come out ?
Just arrived ... wait for test :)
by Kickoleg
Fri Aug 29, 2014 7:55 pm
Forum: Forwarding Protocols
Topic: [Solved] OSPF + Multiple Gateways
Replies: 3
Views: 1758

Re: OSPF + Multiple Gateways

Actually it is not set up correctly... You need Loopback address for all points with /32 IPs ... After that setup OSPF between loopback interefaces and change cost of path ....
by Kickoleg
Wed Aug 27, 2014 9:55 am
Forum: Beginner Basics
Topic: Very strange problem, can't ping specific client
Replies: 5
Views: 1080

Re: Very strange problem, can't ping specific client

For hotspot it's a normal behavior, you cannot ping your IPS given by the HOTSPOT ... Yes you can add IP wtih IP Bindings ...
And actually I dont sure what it is right way ...
I dont have at this moment device for testing that, but try in DHCP server change "Bootp Support: from static to dynamic"
by Kickoleg
Wed Aug 27, 2014 9:27 am
Forum: Beginner Basics
Topic: Very strange problem, can't ping specific client
Replies: 5
Views: 1080

Re: Very strange problem, can't ping specific client

At the Radius server you have static address or use dhcp ?
by Kickoleg
Tue Aug 26, 2014 6:16 pm
Forum: Beginner Basics
Topic: Bridge WAN IP to local device?
Replies: 5
Views: 3153

Re: Bridge WAN IP to local device?

if understand right you need netmap ?
try to use this :
ip firewall nat add chain=dstnat dst-address=122.7.219.77 action=netmap to-address=192.168.88.133
by Kickoleg
Tue Aug 26, 2014 6:09 pm
Forum: General
Topic: How filter output in /ip firewall connection print
Replies: 5
Views: 6136

Re: How filter output in /ip firewall connection print

How you can use this : /ip route print output ??????
by Kickoleg
Sun Aug 24, 2014 1:23 pm
Forum: Wireless Networking
Topic: Recommended Config for R52Hn 802.11 b/g/n AP
Replies: 7
Views: 2957

Re: Recommended Config for R52Hn 802.11 b/g/n AP

I have same trouble with only one new HP laptop model (not remember number)... To be honest I have not looked at the model of his cards, but I did in settings of laptop wireless card - ad-hoc 11n-enable, and disable 5Ghz mode- set only 2Ghz. I'm understand that this way not right, need trying deeper...
by Kickoleg
Sat Aug 23, 2014 11:45 am
Forum: RouterBOARD hardware
Topic: The new top secret RBcAP2n
Replies: 13
Views: 6684

Re: The new top secret RBcAP2n

There are several 3rd party solutions available already. This is only one of them. Be noticed (based on my own expirience) if you want use RB912/911, package not include Antennas and pigtails and you need to buy separately it ... And actually quality of this box very poor (feel like cheap device)...
by Kickoleg
Fri Aug 22, 2014 9:27 pm
Forum: Beginner Basics
Topic: Multiple Network Firewall
Replies: 8
Views: 1460

Re: Multiple Network Firewall

Wont that prevent all traffic from communicating between networks? I need for users on the 192.168.2.x network to be able to access shares on 10.10.10.x, but users on the 10.10.10.x network to be unable to access 192.168.2.x. I believe this can be done' through a related rule before the in-interfac...
by Kickoleg
Fri Aug 22, 2014 9:11 pm
Forum: Beginner Basics
Topic: Help for intial install
Replies: 11
Views: 2122

Re: Help for intial install

surroundedbytrees
it's simple network map, just take a look at OSPF ... add loopback interfaces of both sides with /32 addresses ...
add backbone networks ... cost for path ... and e.t.c
http://wiki.mikrotik.com/wiki/Manual:OSPF-examples
http://wiki.mikrotik.com/wiki/Manual:OSPF_Case_Studies
by Kickoleg
Fri Aug 22, 2014 7:45 pm
Forum: General
Topic: Give 'Priority' to SIP traffic over all others.
Replies: 2
Views: 1815

Re: Give 'Priority' to SIP traffic over all others.

I recommend you watch the presentation, it should explain everything about VoIP ... http://tiktube.com/video/oIfK3iDlgDFCCLnmHlptKrJuJlmoCGql= And second way to prioritize VoIP is matching and increasing by DSCP (TOS), you can read about this here ... http://wiki.mikrotik.com/wiki/DSCP_based_QoS_wit...
by Kickoleg
Fri Aug 22, 2014 6:52 pm
Forum: General
Topic: Error dst-nat Version 6:18
Replies: 4
Views: 761

Re: Error dst-nat Version 6:18

If I understand you correctly, you want to get access to another MT in your network ?
add action=dst-nat dst-address=your.wan.ip.address chain=dstnat comment="Redirect SBNET TELECOM VM thunder" dst-port=82 protocol=tcp to-addresses=192.168.45.11 to-ports=8291
by Kickoleg
Fri Aug 22, 2014 6:35 pm
Forum: General
Topic: Error dst-nat Version 6:18
Replies: 4
Views: 761

Re: Error dst-nat Version 6:18

post your dstnat rule ...
by Kickoleg
Fri Aug 22, 2014 5:29 pm
Forum: Beginner Basics
Topic: Firewall
Replies: 3
Views: 767

Re: Firewall

If you use bridge for this network -> interface bridge settings set use-ip-firewall=yes
by Kickoleg
Thu Aug 21, 2014 4:52 pm
Forum: Forwarding Protocols
Topic: ospf on point to multipoint
Replies: 3
Views: 1128

Re: ospf on point to multipoint

Picture is good :)
Where the info ? IP adresses, interfaces ?
by Kickoleg
Thu Aug 21, 2014 3:08 pm
Forum: General
Topic: send URL command to device possible?
Replies: 4
Views: 1334

Re: send URL command to device possible?

/tool fetch mode=http port=80 url=http://ip.add.re.ss/action
by Kickoleg
Wed Aug 20, 2014 8:22 am
Forum: Wireless Networking
Topic: Recommended Config for R52Hn 802.11 b/g/n AP
Replies: 7
Views: 2957

Re: Recommended Config for R52Hn 802.11 b/g/n AP

Try to use this settings:
by Kickoleg
Tue Aug 19, 2014 7:01 pm
Forum: Wireless Networking
Topic: Wireless scan list improvement request (maybe bug?)
Replies: 2
Views: 907

Re: Wireless scan list improvement request (maybe bug?)

It depend from regulatory-domain and country, it hapens if you set not correct frequency in scan list ...
by Kickoleg
Tue Aug 19, 2014 2:54 pm
Forum: General
Topic: IP telephony
Replies: 6
Views: 2323

Re: IP telephony

Why not ? Just use OpenWRT with Asterisk package on Metarouter, and you have SIP IP PBX :)
by Kickoleg
Sun Aug 17, 2014 9:51 pm
Forum: General
Topic: Steam "Steamworks" P2P networked games issue
Replies: 8
Views: 3199

Re: Steam "Steamworks" P2P networked games issue

From some other threads it sounds like the issue people are having with SIP, only I don't think I can use the SIP helper to resolve this.
.... hmmm .... try to disable sip-helper ... ip firewall service port ... but remember for working need reboot ...
by Kickoleg
Sun Aug 17, 2014 9:24 pm
Forum: General
Topic: Steam "Steamworks" P2P networked games issue
Replies: 8
Views: 3199

Re: Steam "Steamworks" P2P networked games issue

/ip firewall filter add chain=input comment="default configuration" protocol=icmp add chain=input comment="default configuration" connection-state=established add chain=input comment="default configuration" connection-state=related add chain=input comment="WinBox Wan Administration" dst-port=8291 i...
by Kickoleg
Sun Aug 17, 2014 9:14 pm
Forum: General
Topic: Steam "Steamworks" P2P networked games issue
Replies: 8
Views: 3199

Re: Steam "Steamworks" P2P networked games issue

try to disable all firewall filters rules ...
by Kickoleg
Sun Aug 17, 2014 8:58 pm
Forum: General
Topic: Occassionally can't ping
Replies: 1
Views: 491

Re: Occassionally can't ping

Try to use traceroute it will help you understand how traffic go ...
From tool -> traceroute (winbox)
in terminal -> /tool traceroute 8.8.8.8
by Kickoleg
Sun Aug 17, 2014 8:34 pm
Forum: General
Topic: Steam "Steamworks" P2P networked games issue
Replies: 8
Views: 3199

Re: Steam "Steamworks" P2P networked games issue

Try at dstnat add dst.address=your_ip_from_isp for all rules ...
by Kickoleg
Tue Aug 12, 2014 5:59 pm
Forum: Beginner Basics
Topic: Two AP, one DHCP server, 2 SSID's
Replies: 15
Views: 3633

Re: Two AP, one DHCP server, 2 SSID's

A few assumptions: 1. MAIN router worked properly and have two bridges with two different DHCP servers on it, (Bridge-privat) first pool-addresses for Privat LAN,(bridge-public) second pool-addresses for Public LAN. 2. MAIN router have Wireless interface for Privat LAN and have Virtual Wireless inte...
by Kickoleg
Tue Aug 12, 2014 5:02 pm
Forum: Beginner Basics
Topic: Two AP, one DHCP server, 2 SSID's
Replies: 15
Views: 3633

Re: Two AP, one DHCP server, 2 SSID's

Setup VLAN and add it to bridge for public network and interface to second AP, at the second AP setup same configuration. I have working MAIN router with 2 SSID's, so there is no problem. I need to solve, how to setup SECONDARY AP, to work with MAIN router :) Also to got an IP from the MAIN router,...
by Kickoleg
Tue Aug 12, 2014 4:48 pm
Forum: Beginner Basics
Topic: Two AP, one DHCP server, 2 SSID's
Replies: 15
Views: 3633

Re: Two AP, one DHCP server, 2 SSID's

Setup VLAN and add it to bridge for public network and interface to second AP, at the second AP setup same configuration. Actually you may do it easy with CAPsMAN without VLAN. Search WIKI how it setup... And maybe helpful this link http://blog.gowifi.co.nz/2014/03/introducing-capsman-from-mikrotik....
by Kickoleg
Sat Aug 09, 2014 2:26 pm
Forum: General
Topic: ATTENTION, DISASTER! V.6.17
Replies: 57
Views: 15209

Re: ATTENTION, DISASTER! V.6.17

My point is simple: why you have write this detail only now? Still missing the description of upgrade procedure used. Are existent more than 8 way to upgrade/update the device...[/quote] 1. I respect you ... and many of your topics help me ... 2. I think up to this point that only I have this proble...
by Kickoleg
Sat Aug 09, 2014 1:30 pm
Forum: General
Topic: ATTENTION, DISASTER! V.6.17
Replies: 57
Views: 15209

Re: ATTENTION, DISASTER! V.6.17

2) The method used is winbox, paste in the update file, reboot and then update firmware and reboot again. change package wireless for wireless-fp This still one incomplete way how to describe the upgrade. (wait and I write what method I'm using) Wait ... rextended I have normal work of devices abou...
by Kickoleg
Sat Aug 09, 2014 9:23 am
Forum: General
Topic: ATTENTION, DISASTER! V.6.17
Replies: 57
Views: 15209

Re: ATTENTION, DISASTER! V.6.17

Have same problem.. after updating to 6.17 died 951G and SXT5Hnd (about 12-13 hour was working correct),
SXT5HnD after netinstall is coming up, but 951G is still brick.
by Kickoleg
Sat Aug 09, 2014 9:10 am
Forum: General
Topic: RB2011 different subnets are pingable
Replies: 6
Views: 1259

Re: RB2011 different subnets are pingable

ip route rule add src-address=192.168.0.x/xx dst-address=192.168.1.x/xx action=unreachebale (if want can use "drop")
and for other subnet same rule add ...
by Kickoleg
Wed Aug 06, 2014 2:41 pm
Forum: General
Topic: Assign public ip directly to Private Interface
Replies: 11
Views: 3193

Re: Assign public ip directly to Private Interface

Maybe you need use your router as switch and give him real ip from your IP pool ?
Simple add user interface as slave to master port WAN.
by Kickoleg
Tue Jul 29, 2014 1:13 pm
Forum: Wireless Networking
Topic: CAPs Manager
Replies: 165
Views: 56568

Re: CAPs Manager

Please, could somebody help me to understood, how I can get guest wi-fi network with CAPs manager and virtualAP? I am add a configuration for guest wi-fi in Configuration, and in Provisioning tab, added this configuration as a slave to one of my AP. Its work fine and guest SSID is show and connecta...
by Kickoleg
Sat Jul 19, 2014 9:01 pm
Forum: Beginner Basics
Topic: The 127.0.0.1 for ROS Radius is it correct?
Replies: 2
Views: 867

Re: The 127.0.0.1 for ROS Radius is it correct?

If radius server on the local router only 127.0.0.1 right address for use.


Отправлено с моего iPad используя Tapatalk
by Kickoleg
Sat Jul 19, 2014 12:15 pm
Forum: General
Topic: RB750 comes with Wireless package Enabled
Replies: 1
Views: 543

Re: RB750 comes with Wireless package Enabled

This package enabled for using MT750 as CAPsMAN manager for configuring and manadgment AP.
It's normal - you may uninstall this package if don't need them.
by Kickoleg
Fri Jul 18, 2014 11:22 am
Forum: Scripting
Topic: Getting wireless interface rx signal-strength
Replies: 7
Views: 3064

Re: Getting wireless interface rx signal-strength

You mean like /interface wireless registration-table get value-name=signal-strength?
Yes you right - my mistake ... sorry
by Kickoleg
Fri Jul 18, 2014 9:50 am
Forum: Scripting
Topic: Getting wireless interface rx signal-strength
Replies: 7
Views: 3064

Re: Getting wireless interface rx signal-strength

/interface wirelles registration-table get <number> <value-name>
number - number of item
value-name - in your case rx-signal
by Kickoleg
Fri Jul 18, 2014 8:29 am
Forum: RouterBOARD hardware
Topic: Testing New MikroTik Hardware on Production Environment
Replies: 45
Views: 7795

Re: Testing New MikroTik Hardware on Production Environment

Rextended Do you using for mounting SXT 2x plastiс clamp ? Not original metal ring ? Why ? Weather changes are not affected ? I'm not using in my installation original mounting kit ... For vertical adjustment he not quite fit ... Use this http://www.rfelements.com/en/products/brackets/nanobracket-sx...
by Kickoleg
Thu Jul 17, 2014 4:00 pm
Forum: Wireless Networking
Topic: ipV6 traffic affected Wirelles interface
Replies: 0
Views: 510

ipV6 traffic affected Wirelles interface

Hello all.. I have a problem with ipv6 traffic in LAN with about 50 computers. Сlients are connected via a cable with ping all okay, and clients are connected via WiFi from time to time increases bad ping and lost internet. IPv6 pack disabled. Tested AP separately it works fine. After sniffing wirel...
by Kickoleg
Thu Jul 17, 2014 3:21 pm
Forum: Wireless Networking
Topic: CAPs Manager
Replies: 165
Views: 56568

Re: CAPs Manager

thanx!

sorry for the newbie question: why tx signal is 0 for all (almost) ?
Tx signal showing only for Mikrotik devices.
by Kickoleg
Thu Jul 17, 2014 12:19 pm
Forum: Wireless Networking
Topic: CAPs Manager
Replies: 165
Views: 56568

Re: CAPs Manager

Thnx cdiedrich !!
by Kickoleg
Thu Jul 17, 2014 10:56 am
Forum: Wireless Networking
Topic: CAPs Manager
Replies: 165
Views: 56568

Re: CAPs Manager

Thnx cdiedrich !
And how You in Access list compose levels of Signal Range for smooth move from AP to other AP ?
I'm not setup range and my AP holds client to the bitter end while the client is already within range of more powerful AP ...
by Kickoleg
Wed Jul 16, 2014 9:11 pm
Forum: Wireless Networking
Topic: CAPs Manager
Replies: 165
Views: 56568

Re: CAPs Manager

Client count is about 30 (Laptops, smartphones and BaseBox2 in client mode) in average, up to 200 (smartphones only) peak. Kikoleg, I'll collect some signal strength data tomorrow, but I know by heart the fewest of them are below -60. Cheers -Chris cdierdrich I can send you an email directly to my ...
by Kickoleg
Wed Jul 16, 2014 7:33 pm
Forum: Beginner Basics
Topic: SNMP Close
Replies: 4
Views: 1162

Re: SNMP Close

/ip fitewall filter add chain=input dst-port=162,163 protocol=udp action=block
by Kickoleg
Wed Jul 16, 2014 5:59 pm
Forum: Wireless Networking
Topic: CAPs Manager
Replies: 165
Views: 56568

Re: CAPs Manager

Any reviews on usage of Capsman in a semi/production deployment ? I need to do a wireless roll out for nearly site wide VOIP + Email connectivity in the not too distant future. I'd normally go to UBNT but their current stuff has left a really bad taste in my mouth. Would be interested to know if an...
by Kickoleg
Wed Jul 16, 2014 9:12 am
Forum: RouterBOARD hardware
Topic: Testing New MikroTik Hardware on Production Environment
Replies: 45
Views: 7795

Re: Testing New MikroTik Hardware on Production Environment

I see some pictures of NetBox (renamed BaseBox) 5Ghz with support AC, and my supplier said that deliveries will begin next week (also be on sale mAP)
by Kickoleg
Wed Jul 16, 2014 9:04 am
Forum: General
Topic: DHCP wont work on wlan
Replies: 2
Views: 998

Re: DHCP wont work on wlan

You don't need use Bridge interface, set IP from ISP to wired interface and setup DHCP server on interface wlan.
by Kickoleg
Tue Jul 15, 2014 2:40 pm
Forum: Wireless Networking
Topic: Setup Wireless Bridge
Replies: 3
Views: 1068

Re: Setup Wireless Bridge

Need more information about your connection. It would be better if you put in a scheme where specified IP and other parameters.
by Kickoleg
Tue Jul 15, 2014 2:03 pm
Forum: Beginner Basics
Topic: Data usage monitoring
Replies: 3
Views: 4431

Re: Data usage monitoring

Use IP - Firewall - mangle for marking traffic to each device, And look at the counters.
by Kickoleg
Mon Jul 14, 2014 6:43 pm
Forum: Wireless Networking
Topic: Best router model for Load balancing router
Replies: 7
Views: 1285

Re: Best router model for Load balancing router

it depends on the number of users and amount of traffic transmitted.
by Kickoleg
Mon Jul 14, 2014 6:38 pm
Forum: General
Topic: Cant upgrade from 5.26 to 6.15
Replies: 5
Views: 1154

Re: Cant upgrade from 5.26 to 6.15

Rextended - Yes I made a mistake. 3.x - 4.17 - (update licence key) - 5.x -6.x
you are right ...
by Kickoleg
Mon Jul 14, 2014 6:24 pm
Forum: General
Topic: Cant upgrade from 5.26 to 6.15
Replies: 5
Views: 1154

Re: Cant upgrade from 5.26 to 6.15

Check what you dowlanded upgrade package and check version for processor mipsbe, also if you are upgrade from 3.x version, update system licence key.
by Kickoleg
Mon Jul 14, 2014 4:08 pm
Forum: General
Topic: isolating and identifying users using p2p
Replies: 5
Views: 872

Re: isolating and identifying users using p2p

Rextneded thnx for reply.
by Kickoleg
Mon Jul 14, 2014 3:56 pm
Forum: General
Topic: isolating and identifying users using p2p
Replies: 5
Views: 872

Re: isolating and identifying users using p2p

rextended do you use CALEA package for sniffing traffic ?
by Kickoleg
Mon Jul 14, 2014 3:26 pm
Forum: Scripting
Topic: Remote reboot IP Phones by URL (Cisco & Snom)
Replies: 22
Views: 12735

Re: Remote reboot IP Phones by URL (Cisco & Snom)

nothing happen ... only 2-3 command allowed by active url ...
it's using usually for first remote configuration.
As routers ,after set configuration necessary to close all the holes :)
by Kickoleg
Mon Jul 14, 2014 3:10 pm
Forum: Scripting
Topic: Remote reboot IP Phones by URL (Cisco & Snom)
Replies: 22
Views: 12735

Re: Remote reboot IP Phones by URL (Cisco & Snom)

No ! RESET-no ! Reboot-yes for provising services, and feature "direct call" using active URL, using by some PBX.
by Kickoleg
Mon Jul 14, 2014 2:56 pm
Forum: Scripting
Topic: Remote reboot IP Phones by URL (Cisco & Snom)
Replies: 22
Views: 12735

Re: Remote reboot IP Phones by URL (Cisco & Snom)

It's not BUG :) It's feature :)
Its using in closed network with local IP PBX.
by Kickoleg
Mon Jul 14, 2014 2:51 pm
Forum: Wireless Networking
Topic: Sxt 2-HnD - bugged wireless, 6.15
Replies: 11
Views: 2277

Re: Sxt 2-HnD - bugged wireless, 6.15

rextended SNX !
by Kickoleg
Mon Jul 14, 2014 2:49 pm
Forum: Scripting
Topic: Remote reboot IP Phones by URL (Cisco & Snom)
Replies: 22
Views: 12735

Re: Remote reboot IP Phones by URL (Cisco & Snom)

Disbale -active URL- in configuration of phones. This is popular way to hack IP phone and do fraud trafic.
by Kickoleg
Mon Jul 14, 2014 2:31 pm
Forum: Wireless Networking
Topic: Sxt 2-HnD - bugged wireless, 6.15
Replies: 11
Views: 2277

Re: Sxt 2-HnD - bugged wireless, 6.15

Search on my other post how configure 2.4GHz AP and read why is needed that settings...
rextended
if not difficult can you post here link ? Try to find with serach not find :(
by Kickoleg
Sun Jul 13, 2014 9:50 am
Forum: General
Topic: how to port forwarding from some routers to IP CAMERA
Replies: 3
Views: 985

Re: how to port forwarding from some routers to IP CAMERA

1st. router 750 /ip firewall nat add chain=dstnat dst-address=80.91.xxx.xxx protocol=tcp dst-port=8088 action=dstnat to-address=192.168.4.2 to-port=8088 2.st router Omnitik /ip firewall nat add chain=dstnat dst-address=192.168.4.2 protocol=tcp dst-port=8088 action=dstant to-address=10.10.10.20 to-po...
by Kickoleg
Sun Jul 13, 2014 9:31 am
Forum: General
Topic: Q about user
Replies: 3
Views: 517

Re: Q about user

Also if you allready get user :
/user print - and see the number
/user edit
number: x
value-name:password
xxxxxxxx - ctrl+o
by Kickoleg
Sun Jul 13, 2014 9:28 am
Forum: General
Topic: Q about user
Replies: 3
Views: 517

Re: Q about user

in terminal:
user add name=XXXX password=XXXXX group=read,full, other
by Kickoleg
Sat Jul 12, 2014 1:30 pm
Forum: RouterBOARD hardware
Topic: RB751G-2HnD + WN722N(AR9271) doesn't work
Replies: 40
Views: 9161

Re: RB751G-2HnD + WN722N(AR9271) doesn't work

See tplink usb-wifi wn722N work in routerboard with ROS
honzam - I'm very impressed ! Good job ! I will try ...
by Kickoleg
Thu Jul 10, 2014 1:30 pm
Forum: General
Topic: v6.16 RC test release now includes 802.11ac support
Replies: 52
Views: 20458

Re: v6.16 RC test release now includes 802.11ac support

Waiting for SXT - Sextant with AC support and BaseBox ...
by Kickoleg
Tue Jul 01, 2014 4:15 pm
Forum: General
Topic: Job Offer
Replies: 6
Views: 2363

Re: Job Offer

Good day, Julien. I am very interested to work in your business. I work with Mikrotik for 13 years and have extensive experience. My experience in the field of IT administration and IP telephony starting from first models of Mikrotik has afforded me the opportunity to become familiar with any your t...
by Kickoleg
Fri Jun 20, 2014 3:23 pm
Forum: General
Topic: Job Offer
Replies: 6
Views: 2363

Re: Job Offer

Bonne journée, Julien. Je suis très intéressé à travailler dans votre entreprise. Je travaille avec Mikrotik depuis 13 ans et ont une vaste expérience. Sur mon service est maintenant d'environ 300 Mikrotik .Donc, je suis prêt à travailler et avoir le programme d'installation de l'antenne dans cette ...
by Kickoleg
Fri Jun 20, 2014 12:37 pm
Forum: General
Topic: Job Offer
Replies: 6
Views: 2363

Re: Job Offer

Bonne journée, Julien. Je suis très intéressé à travailler dans votre entreprise. Je travaille avec Mikrotik depuis 13 ans et ont une vaste expérience. Sur mon service est maintenant d'environ 300 Mikrotik .Donc, je suis prêt à travailler et avoir le programme d'installation de l'antenne dans cette ...