MikroTik

agnostic

Hello i have 2 internet connections and i wanted to do load balancing (symmetric) to utilize the whole bandwidth of 2. All guides i found were either incomplete or not working (properly). The closest i found to be (almost) working was this: https://gist.github.com/zaqueo/3af80715a97d6e7752887f8deeb5...

agnostic

I wrote up a blog post about rolling your own remote access here: https://thaea.software/having-trouble-with-mynetname-net-build-your-own-solution-for-remote-access/ if you don't want to rely on mynetname.net. Bonus: it works with NAT and doesn't require public IP! Very nice... The same way i use f...

agnostic

Thank you for immediate response to the problem. A serious company with quality products which i use to power the internet and communications at my city. From public services to hotels and offices. Wherever there is a router it has to be a mikrotik.

agnostic

Mikrotik is the best devices world could ever have.
They dont need to try to make new things every day for marketing purposes.
They need to keep a little back of features for sake of stability or just keep stable releases for critical environments.

agnostic

Ok. But how to build a network when i receive a router with a buggy software factory installed and i wont upgrade it because i fear the new is buggier? One crs i installed 1 year ago in replacement of an hp switch was port flapping out of the box and thank god the upgrade fixed that. I was at the po...

agnostic

I agree. Many years ago i ditched ubiquity to mikrotik for all the features of networking packed in a device. I use it for networking a home to a huge hotel via capsman. I love and fanaticaly support a european company with such quality, features and RELIABILITY... But... Lately something changed th...

agnostic

the point is i came from ubiquity to mikrotik after exploring my first rb750 with winbox. i try to use to all networking mikrotik products. as it seems there are some points where other brands qualify as it is wifi link quality and speed. mikrotik it is for building a network rack for routing and li...

agnostic

As a mikrotik enthusiastic and network engineer since 2012 i have setup hundrends of clients with routerboards. I like mikrotik because it has all networking options to touch and configure. Well at 2020 i cant even make a simple pppoe bridge and some bugs which make some configurations to stop worki...

agnostic

Hello i recently wanted to change a ubnt airrouter which was in a wifi client mode as bridge with a mikrotik with pppoe-client connected through it. so far so good until i decided to change it for a mikrotik. same configuration wifi station bridge with ether1 but pppoe stopped working. torcing the b...

agnostic

hello i put the following script to dhcp lease scripts according to this manual https://wiki.mikrotik.com/wiki/Manual:IP/DHCP_Server /tool fetch url=("http://10.10.10.1/add.php?clienthostname=$lease-hostname&mac=$leaseActMAC") which is working perfect from server side BUT this weird ha...

agnostic

but.... i did not upgraded directly to stable (6.43). i was on bugfix (6.42) and upgraded to long term when ddyns stopped working. without further actions of disabling cloud i then upgraded to stable and cloud came to life again.

agnostic

problem with this version on cloud system on rb750 and rb951. That sounds like typical issue which happens, when you upgrade/downgrade without disabling cloud first. since when? that has never happened to me from the time mikrotik implemented cloud system, accross ros updates. thats why it was so w...

agnostic

problem with this version on cloud system on rb750 and rb951. after update both ros and firmware cloud system stuck to previous public ip not properly recognizing new public ip and could not update mikrotik dns!!! had to upgrade to stable (6.43.7) to make it work again. STAY AWAY from this version i...

agnostic

nevermind... i found out that ISP limited pppoe connections to 1 per device and from that day problems occured to multiple pppoe from different routerboards with delayed connections or no connections at all. is there any way to make pppoe-out with different mac address to trick ISP that connects ano...

agnostic

ditch pptp is very old and vulnerable. use sstp for win10 and server certificate or win 10 deny to connect. it is better protocol and has better connectivity tried pptp to bridge 2 routers and could not pass traffic due to packet fragmentation but with sstp worked out of the box like a charm.

agnostic

hello. i noticed some problems with pppoe-client discovery and connections through ether interfaces. either takes too long for service to be discovered or doesnt connect at all devices hap lite with software 6.40.8 the devices are connected to a modem with pppoe bridge enabled and never had any prob...

agnostic

you didnt tell us if you have any pc connected to routerboard. from what i see it seems like an infected with virus pc pinging an ip with random src address. if it wasnt for tx traffic it would probably be from outside but now it is from inside your network. at first disconnect every machine from ne...

agnostic

yes you are right. that is indeed a private address i didnt noticed. so it is an ISP problem. i will contact my provider. Thank You. I think it is solved.

agnostic

i recently purchased a hap lite mini (RouterBOARD 931-2nD) and tried to use cloud dns with a pppoe interface for cameras but there is a huge problem!!! see the picture below and you will understand. (ros 6.40.6 bugfix the same happens with previous one). to catch you up pppoe is the default route in...

agnostic

hello. today i just purchased for a first time a mikrotik hap mini to setup for cloud access for dvr but.... some weird problems appeared never seen before on other mikrotiks. 1) when router is with default configuration, internet from ether1 cloud dns points to public address from parent router and...

agnostic

hap lite is a cheap device that beats down very expensive equipment. i use hap lite for cafeterias and i have seen handling 100+ wireless users at once (it is dual chain wireless). you can use queues for managing traffic priorities per client or per ip etc.

agnostic

you should go with a hap routerboard with gigabit ethernet because your isp to internet is approx 90 mbps as you said. keep in mind that 100mbps cable speed, on tcp protocol is approx 50-70 mbps. for ethernet link problems make sure you have a good cable, updated ros firmware (bugfix is good) and ch...

agnostic

The reason for such tools are inability to release properly patched versions in time. Cisco release cycle and bug fixing cycle takes years. MT just updated all their versions with a fix. Also nobody knows how compromised router actually looks like, so how can you create tool for that? Normis replie...

agnostic

web servers usually are most vulnerable to attacks. personally i dont use web interface and i lock winbox port of remote equipment via port triggering to avoid ip scanners. but wait a minute... could the hotspot web login interface be compromised too??

agnostic

well, you could try to add 2 mangle rules: chain prerouting src address {your lan's 1 subnet (192.168.1.0/24)} dst address {your printer address (192.168.5.x)} action accept chain prerouting src address {your lan's 2 subnet (192.168.3.0/24)} dst address {your printer address (192.168.5.x)} action ac...

agnostic

why want a device that is impossible to reset to some standard and known settings? in case something goes bad you will have a dead router. it is prefered the router to work even in another provider. if you want to be ok to the idea that a client maybe use the device with other provider then charge t...

agnostic

tried hairpin nat or it gets dropped by your firewall rules??

agnostic

if your ap is a tplink maybe find a solution in the tplink forum. it is better to prefer the same manufacturer for long distance wireless bridges even of the same wireless chip because each manufacturer hardcodes some settings with different parameters and the most of them cannot be changed through ...

agnostic

have you got hotspot login https enabled? you also need to create a self signed certificate before that. try and check if it works.

agnostic

theoretically you should be able to use the same ssl cert to multiple web servers if the are located in the same ip address but there is a problem... using a dns server for resolving example.domain.com VS example2.domain.com should point to same ip and port so there is the problem: cannot share same...

agnostic

thank you.
i will try that on my rb750 (i believe the same applies to other mipsbe l4 boards)

agnostic

hello i am looking for an approach on how to effectively isolate vlans and different dhcp interfaces. by default when making a vlan (or creating a hotspot) on an interface i can access and ping main (with default configuration) network subnet BUT NOT the opposite (from main to hotspot or vlan). this...

agnostic

yes already did that (marked chain output and added to route) although the counters begin to rise, again no internet and no internet from local interfaces. i will try to rebuild the whole configuration and return with results.

agnostic

hello i made a setup of 4 different vlans which i need not to contact each other, added firewall rules, route rules, 2 different pppoe connections so 2 vlans get different public ip. so far ok but there is a problem. router cannot connect to internet itself to update clock and firmware. i have manua...

agnostic

i use an old RB951-2n with usb mod for my file server (1TB disk) for almost 2 years. it doesnt have much speed (about 4megs/sec) but its ok. i had posted the mod http://forum.mikrotik.com/viewtopic.php?t=84684 if you want a fast and reliable file server buy a nas. mikrotik routers is for routing and...

agnostic

thank you for your information. i will consider to change this setting only if cpu throttles to 100% for long time and check the result, cause i use hap lite to coffee shops where 100+ clients are simultaneously connected. incredible little device with tremendous power can hold too many clients when...

agnostic

i noticed on hap lite that cpu frequency can go up to 750mhz.
1 - is it safe to oveclock it?
2 - can this setting damage the router somehow?
3 - will the router overheat if i set freq to 750mhz?

agnostic

hello as a mikrotik user and IT technician and network administrator i was using mikrotik cloud for remote network support and configuration to my clients. recently i converted my clients networks to dual stack (ipv4-ipv6 slaac) using servers public ipv6 for access from remote locations eliminating ...

agnostic

forgot to mention that login with http chap and MAC cookie combined is better because some smartphones or tablets wont work properly otherwise.

agnostic

unfortunately all browsers have hardened https mismatches and wont allow continue to sites. the best way is to disable https login and then redirect will only work without https prefix on browser. on windows 7 and newer connecting to hotspots will trigger a popup informing you that you must provide ...

agnostic

first of all you need create a self signed certificate from System->Certificates menu (search forum how to create) then you need to enable hotspot https login by Ip->Hotspot->Sever profiles->{your profile}-> Login and chech https and below select your self signed certificate you just made. Congratul...

agnostic

experiencing continuous port flapping problems since upgrade on two rb951-2n and an rb750 in switching configuration with vlans. it floods the log with ether up/down (only interfaces from the switch group 2-5) and the leds from rb's951 ethernet turn off and on again. anyone experiencing the same??

agnostic

if i am not wrong if you buy an ssl certificate from a valid ssl authority you no longer have the warning on the browser so you could redirect to your https login ip address without any problems. valid only if your hotspot is on external server with public ip address (ssl works this way) so you coul...

agnostic

hello. i need for a specific configuration where the real external ip address of a server needs to be hidden, to forward incoming traffic to my router (mikrotik) to ports 80 and 443 to an external ip address where a server is running so clients connect to me and my router forward traffic to server a...

agnostic

it is difficult to distinguish individual mails. mikrotik reads packets not mails.

agnostic

hello after upgrade to ros 6.33 on rb951 and rb750 not available to work with smb anymore...just try to navigate through files and folders and connection gets dropped with no messages on log...cannot even read a file...downgraded again to 6.32.3 and fixed it

agnostic

hello after upgrade to ros 6.33 on rb951 and rb750 not available to work with smb anymore...just try to navigate through files and folders and connection gets dropped with no messages on log...cannot even read a file...downgraded again to 6.32.3 and fixed it

agnostic

Just forget it....i finally found allow-rollover option and changed it VIA COMMAND LINE... it does not exist via menu so i could not change it....somehow with this update turned tftp rollover off so files over 32mb could not transfer...

agnostic

hello i upgraded my rb951-2n to 6.32.2 from 6.32.1 because of bogus "excessive broadcast/multicast" log messages and i experienced another problem on tftp service... when tries to transfer files over a specific size breaks tftp with error messages on log (see attached jpg) tftp_prob.jpg te...

agnostic

if you have set 2 different secrets (pptp users) on your pptp server you are ok, normaly your router's nat should distinguish the traffic and route each connection through different isp. the problem is to route outgoing traffic from client side to two isp's. you should experiment using the two publi...

agnostic

why dont you try with nat rules?
leave mangle as is (dynamic change mss) and try to nat with src address of your device to output interface of your vpn with action masquerade and see what happens.

agnostic

unfortunately you cannot certify hotspot with ssl... i tried too but ssl works with domain-ip assignment so when a user requests google.com with ssl (https) it needs to be redirected to hotspot but to be redirected without warning for invalid ssl certificate has to verify that google.com belongs to ...

agnostic

Nevermind my mistake. i need to change login setting from server profile (disable cookies and enable mac cookies for smartphones).
Mikrotik Rocks!!!

agnostic

hello i installed an RB951-2n to a client a week ago updating it to ROS v6.19 and creating a simple hotspot on wifi. client complains about regular disconnects from smartphones. it has medium to full signal strength and suddenly losses the network for 3-4 secs and reconnects again. i tested using my...

agnostic

i havent expressed my thoughts exactly as i imagine them yet. i will make a detailed plan and i will post a reply about that. the basic idea is that the client during association to some unencrypted wifi will exchange some keys (as https does) to verify that the ssid is legitimate but to know that i...

agnostic

through my experience with wireless networks and having faced problems like rogue access points with spoofed mac addresses and ssid as the legitimate ones i wonder if could be implemented a new feature of secure ssid with public (client) and private (access point) key for open hotspot networks. of c...

agnostic

in my specific configuration i use the original 12v wall power supply.
you can of course add a different regulator of 5v output.
i have seen regulators of variable voltage input and static output 5v of same dimensions but i ordered the 12v to 5v very cheap (i got 2 for 1.4 euros).

agnostic

i own a couple of RB951-2n for my home-lab network and i needed ftp server and smb and tftp for pxe boot. the internal routerboard memory seems inadequate to cover my needs. i decided to open the router to see what's inside and i found that i may be able to attach a usb jack to connect an external u...

agnostic

I read about capsman. very interesting. like unify system from ubiquity. if it works as expected i am about to migrate my customers hotspots from ubiquity to mikrotik. However adding the package to root file list and rebooting router does not install it. Do i need to upgrade ROS to 6.13 to install t...

agnostic

Goodmorning to all. I use RB951-2n for home network with pptp server enabled. Everything is ok i can connect to vpn from internet (have open port 1723 to firewall, internet access is via pppoe over bridge modem, i connect from win xp machine with vpn connection) have set same ip pool to local networ...

agnostic

actually ur right...the problem is the shitty OEM modem equipment from ISP changed SOLVED thanxs...

agnostic

hello i use RB951-2n with latest routeros (6.11) as a dialup pppoe client for dsl connection and i have some connection issues and dropouts with periodic pattern (every n=12-15 seconds at which connection e.g.downloads pauses and pings times out). this lasts for 2-3 seconds then everything ok again....

agnostic

i use RB951-2n as a ppp client with bridge modem for dsl internet and there is a strange issue: assuming i have pppoe-out on ether1 and i have changed nat rules to ppp interface everything works but some web sites cannot be opened dunno why BUT when i change default drop filter rule and add in inter...

Search found 63 matches