MikroTik

Clauu

Thank you, so first i have to make separate mangle rules for each pppoe connection, mark connection and mark routing for both pppoe, and at the end how should i allow ping for both public ip addresses?

Clauu

Hi people, sorry for this silly question, i think my brain just fried, i'm hoping he's still there. My home setup looks like this: ether2 port - ISP uplink one PPPoE connection with the 'default route add' checked - pppoe-Conn1 I have a public ip address assigned to that PPPoE connection, src-nat fo...

Clauu

Hi people, first of all really thanks for your replies and info provided here. In the official documentation it's not stipulated that 'topics' are an array type, or at least i didn't found such information. For me it was something logic if in individual cases everything was fine and when combining t...

Clauu

Hi, I'm trying to get a number of logs, latest 100 for example. And for this I'm trying to get all logs, count them and get only the desired number of lines. But i'm having some issues and I don't get it why is this happening. Ex: :local arr ("*1550","*1551","*1552",&qu...

Clauu

sfpplus23_DEVICE is an untagged port with pvid30, in this port i have a device(linux box) connected with ip 10.10.100.1 on one switch, and on the second swicht another linux box with ip 10.10.100.2 Currently i disabled stp on the bridge(on both switches) and now i can ping between linux boxes. Stran...

Clauu

Thank you for your time, well config is the same on the other CRS326-24S+2Q+ switch, same ports naming, same bridge config, same vlan. For the bridge tagged part, i think you are referring to this? /interface bridge vlan print Flags: X - disabled, D - dynamic # BRIDGE VLAN-IDS CURRENT-TAGGED CURRENT...

Clauu

Good day, i'm having some issues using vlans on this device, scenario is like this: 2 x CRS326-24S+2Q+, bridge with vlans enabled, trying to get vlan30 tagged between switches(uplink sfpplus24) and untagged on port sfpplus23. /interface bridge print Flags: X - disabled, R - running 0 R ;;; defconf n...

Clauu

Don't get me wrong, i'm fully 100% with you, what you have described it's a great ideea and it will be a huge step, but with current mikrotik strategy this will be close to 0 to be happened in near future.

Clauu

You are kidding right, mikrotik barely has time and resources to work on v7, from september till now it's 7beta5. This way it will take another 1-2years to have a fully v7 release. Not to say that this v7 it's the only one with a more current kernel release(4), all other versions are based on kernel...

Clauu

Thank you for the tip, main scheme would look like this https://drive.google.com/file/d/1YGyDD- ... Na9X7/view
First time i've tried with no vlan for management network, now with vlan for mgmt network situation is the same.

Clauu

Could anyone please give me a hint on this? Is there something that i've misconfigured? Is something related to routeros?
Thanks.

Clauu

Good day, i have the following scenario: 2 x crs3, ros 6.46 vlan9 cctv network, vlan22 management network. first crs: eth24 uplink from management network, bridge port pvid 22 eth23 uplink from cctv network, bridge port pvid 9 sfp2 link to second crs, default bridge port pvid 1, tagged in bridge vla...

Clauu

Thank you sir!

Clauu

Good day, whenever i try to export config by /system export, i only get this [admin@MikroTik] > /system export # aug/07/2018 11:07:30 by RouterOS 6.42.6 # software id = xxx # # model = Groove A-52HPn r2 # serial number = xxx /system clock set time-zone-name=Europe/Bucharest /system ntp client set en...

Clauu

Good day, after upgrade from 6.42.4 to 6.42.6 there is something wrong with query to dns servers. In Ip -> DNS i have both google servers, 'Use peer dns' option from pppclient is not checked. This setup isn't working anymore, for 2 years since i have my hap ac i haven't experienced such issue. Now i...

Clauu

Hello, if we install a backup to another equipment(same model) all mac addresses are retained from the old one. Is this behaviour normal? If so why is this? SInce it will be another hardware..

Clauu

Well yes chr seems like the only solution but in this case i will loose the wifi cards..

Clauu

Hi, nope still the same problem so neither netinstall isn't working because it won;t install the entire system, it will just copy some packages and you have to boot from that device in order to install routeros.

Clauu

Hi, thanks i will try to netinstall on a sd card.

Clauu

Bump, there is no solution for home usage with such boxes like Alix/APU?

Clauu

Hello, recently i purchased latest apu boards(2 x apu2), equipped with wle600vx wifi card, msata ssd and sd card, especially to install routeros on them. But unfortunately the installing process it get stuck at 'Fatat error: no harddrives found' ( p.s: since apu have only the serial port for the out...

Clauu

Hi strods, i'm not using fastrack and tls rule was in top of all other forward chain rules. Hm as i can see there is a fix for this feature in latest rc What's new in 6.42rc24 (2018-Feb-08 09:42): *) firewall - fixed "tls-host" firewall feature (introduced v6.41); Is this related to my iss...

Clauu

About firewall new feature 'tls-host' i cannot make use of it no matter what sites i try, i'm i missing something or this feature is broken?

/ip firewall filter add chain=forward dst-port=443 protocol=tcp tls-host=*google.com action=drop

Clauu

Ova for chr - 404 not found.. https://www.mikrotik.com/chr-6.41.2.ova Isn't anyone from the team checking this basics stuff? We always have to report such trivial issues. Where did you get that link? Download page shows correct and working link: https://download2.mikrotik.com/routeros/6.41.2/chr-6....

Clauu

Ova for chr - 404 not found..
https://www.mikrotik.com/chr-6.41.2.ova
Isn't anyone from the team checking this basics stuff? We always have to report such trivial issues.

Clauu

Hi, as I can see there are some issues with dhcp server on all ethernet/wlan interfaces. After creating a new dhcp server, disabling it makes it permanent 'red' after re-enabling again.
Supot sended to support.

Clauu

Seems fine your suggestion, thanks!

Clauu

I understand that in rc it is fixed, but i(we) need a solution without installing the rc version. Adding a firewall rule didn't change anything.

Clauu

Until release of 6.42'stable', has anybody any solution to this? Hello, same problem with some sites not accesible on all devices with 6.41.. changed tcp mss(iptables firewall) without any luck so.. please advice. We are seeing a strange problem with 6.41 in the fact that it prevents one particular ...

Clauu

Hello, same problem with some sites not accesible on all devices with 6.41.. changed tcp mss without any luck so.. please advice. L.E: So as a quick fix, edit the ppp profile and modify 'Change TCP MSS' from default/yes to no. This should fix the issue. As an update, seems that changing that it wil...

Clauu

Hello, same problem with some sites not accesible on all devices with 6.41.. changed tcp mss without any luck so.. please advice.
L.E: So as a quick fix, edit the ppp profile and modify 'Change TCP MSS' from default/yes to no. This should fix the issue.

Clauu

*) address-list - make "dynamic=yes" as read-only option;

What the f... ?? Why?

Are you guys even thinking about impacts with such inappropriate decisions?

Clauu

Any ideas why this isn't working? Thanks.

Clauu

Thanks, i have tried this before without any luck Here is what i have done using ether2 as the untag port for vlan100 /interface ethernet switch print Flags: I - invalid # NAME TYPE MIRROR-SOURCE MIRROR-TARGET SWI 0 switch1 Atheros-8327 none none 1 switch2 Atheros-8227 none none /interface ethernet ...

Clauu

Hi, i'm using an interface eth5 as trunk port for 2 vlans, vlan100 with id 100 and vlan200 with.. id 200 :) Untag is done using switch chip vlan feature(eth1,eth2 and eth3 untag for vlan100 and eth4 untag for vlan200), how can i bind the dhcp client on untagged vlan100 for example since on vlan100 i...

Clauu

Hi, so why isn't there any sw with 48g port? I;m in a situation to change some old 48 port switches and i can't find anything from mikrotik.. this is sad.

Clauu

Hello, i'm also having problems with l2tp&ipsec on the latest version, maybe is the same as you? http://forum.mikrotik.com/viewtopic.php?f=2&t=103808

Clauu

Hello, ok so every time i'm connecting with l2tp+ipsec encryption is allways MPPE128 stateless and i don't get it why is this happening.. my config is like this: IPSEC /ip ipsec policy print Flags: T - template, X - disabled, D - dynamic, I - inactive, * - default 0 T * group=default src-address=::/...

Clauu

http://forum.mikrotik.com/viewtopic.php?f=9&t=103676

replace sound with send-mail and you're done.

Clauu

Mikrotik scripting environment it;s kind a buggy sometimes, past days i had a problem with a global variable i was unable to erase it from 'environment vars' either from console or from gui only a reboot do it.. so yes sometimes behave strangely.

Clauu

Thanks for the script, it has one issue others chars than in $low will be stripped except space char as you're checking that in the script, so a quick fix will be instead of this char space check :if ($char = " ") do={ :set $char " "; :set $new ($new . $char) } replace with this ...

Clauu

Hello, well i'm trying to change one specified character from a string and seems like we can;t?

:local string "earth";
:for i from=0 to=([:len $string] - 1) do={
:local char [:pick $string $i];
:if ( $char = "r") do={
 ?? set: ($string->"$i") "s"; ??
}
}

Clauu

For ppc(rb850gx2) we don't longer have resources-sector writes?

??

Clauu

For ppc(rb850gx2) we don't longer have resources-sector writes?

Clauu

RB850Gx2 with Hardware Encryption Acceleration The RB850Gx2 devices are now shipped with a CPU that features Hardware Encryption Acceleration (serial numbers that start with “5”). Combined with up to date RouterOS version (6.28 or above), you will now be able to reach 500Mbps with AES128 encryption...

Clauu

Are you kidding me, so there is no qos utility?

Clauu

Hello, ok so there is any qos engine in mikrotik? how to prioritize an ip, subnet with/or protocols/ports
For ex i have 3subnets, 192.168.88.0/24 10.0/24 and 70.0/24. All of them are using the same bandwith and i'm trying to prioritize 70.0/24 or 70.100 on tcp protocol port x, how can we do that?

Clauu

Ok so how can we send reset reply to invalid tcp packets? For ex in my firewall i have something like this: forward accept established and related forward drop invalid ok but i see in logs a lot of packets marked as invalid and beeing droped by last rule, even my local trafic to different sites http...

Clauu

Ok so thanks to mikrotik support(especially mr Janis) i managed to get it working. So the vlan interface with vlan-id 1 must be in bridge with the desired port access(if would be in the same network then bind address and network to the bridge and the same for dhcp server if there is one) and from sw...

Clauu

Mikrotik guys, any help on this? There must be someone with a solution for this

Clauu

Yep, all pppoe connections are from the same network. You're right with the interface instead of ip, after some time playing with routes i discovered the same thing, in this situations like mine it;s more safer as you said.

Clauu

Hi there, so after reading http://wiki.mikrotik.com/wiki/SwOS/Router-On-A-Stick i just can;t get into my rb260gsp switch through trunk port for management, here is my simplified setup

Clauu

Ok so, i have 3 pppoe connections, 1 with a dynamic ip and 2 with a static one. My setup is something like this mark routing 192.168.80.0/24 for 1 pppoe static ip, 192.168.90.0/24 for the second one with another static ip and all others subnets for the dynamic ip without any mark routing since this ...

Clauu

Here is a better aproach for anyone still interested in this :local PPPInter "rds_3g"; :local count 0; :while ( $count < 3 ) do={ /interface ppp-client monitor $PPPInter once do={:if ($status != "connected") do= {:set count ($count+1); :log warning "PPP $PPPInter Link Down (...

Clauu

@npero on my gx2 i had the same problem but after another reboot it get back to normal.. try a reboot I need some help please. I have Mikrotik RB850Gx2 running RouterOS 6.28. There are about 30 or so ppttp-clients connecting to it. Every now and then, the RB850Gx2 logs the following error: Encryptio...

Clauu

Clauu - I have checked this on my router and Health shows correct information. Please check 1) If "/system health print" function shows anything; [admin@MikroTik_Node2] > /system health print [admin@MikroTik_Node2] > empty result 3) If problem still persist, then make sure that you use la...

Clauu

rb2011uias

Clauu

Well the testing on this release have been going on for some weeks now,so i whouldnt call it imature and there is probaly a good reason why it hvaent been relased. As other have sayd its bether they delay it if there is known bug then release a faulty version. Besides none is foreceing you to updat...

Clauu

We have plans to release v6.28 during this week.
Really this week?
Better late than with bugs!

Better stop opening threads without having an certain release date or a certain list with bugs that are really fixed without introducing another ones, this approach is kind a childish and imature

Clauu

Btw in the 6.x ros mikrotik isn;t doing hairpin nat by default?

Clauu

Let them properly check for problems tickets and so on, better 1major update instead of giving us 2 buggy updates in a month
Btw Happy Easter to all!

Clauu

Mikrotik support reply

Hello,

The line displays the total available RAM except the RAM used for the RouterOS
subsystem. Ie. the available memory for user.

Total is still 512MB as indicated.

Regards,
Normunds R.

So it seems that it;s a normal behaviour

Clauu

Well i tried with a hp switch wich has 8 gigabit poe out ports and still nothing.. in fact this time not even a led blink no nothing

Clauu

Doh silly me, yes you're right

Thanks

Clauu

Well here is not about the client, i'm trying to get internet acces on the 'acting like a switch' router. router1 is the dhcp server on eth5 and router2 is the switch with ports eth1-4 as a slave for eth5 on which is the link from router1

Clauu

Any ideas please?

Clauu

Ok so now doesn;t matter what i do my session will close instanlty after pressing the connect button.. what the hell

Clauu

Hello, ok so router1 has a dhcp server on the eth5 with 192.168.10.0/24, from eth5 i have a link to another router-router2 in the same eth5 that is master for eth1-4 in fact acting like a switch. Ok so far no problems but now i don't have internet acces on the router2 itself(like pinging google from...

Clauu

Ok so at the moment of accesing tools-profile my winbox sessions instantly closes.. anyone with the same problem?

Clauu

Doh silly me, thanks

Clauu

Hello, where is the 'hide password' feature like in old winbox? Does this v3 has such thing?

Clauu

Hello, so although on specs http://routerboard.com/RB850Gx2 it says that this router is equipped with 512mb ram, mine has only 470total and free 450.. ?

Clauu

Hi there, so i'm trying to power the RB850Gx2 router through its poe in eth1 from my rb2011uias with eth10 as poe out, the problem is that on RB850Gx2 the only thing that it happens its the blue led just a blinking light and that;s it, what does that mean and where can i find any documentation about...

Clauu

Well i added again a rule and now is working.. :| do not why and how, i didn't change anything, the interface is still the same, the rule is also still the same i just deleted dst address list and set 'in interface' interface.. same as it was past days when i decided to use dst address list since bo...

Clauu

So as an update here is a much more eficient and simplified solution :if ( [/ip firewall address-list find where list="dyn_ip" && address=$NewIP] ="" ) do={ /ip firewall address-list add address=$NewIP list="dyn_ip"; } /ip firewall address-list remove [find wher...

Clauu

Doh that space killed me :| Thanks for your observation spirit. Well i'm trying to understand ros scripting, since my pppoe connection is with a dynamic ip i need to nat some ports and for that i'm using destination address list since from one reason bounding pppoe interface to 'in interface' from d...

Clauu

Any help on this please? What is wrong with my second piece of code since it has only a local variable and 1 conditional operation

Clauu

Thanks, i tried something but for some reason it;s having an strange behaviour this is working ok :foreach i in=[/ip firewall address-list find ] do={ :if ( [/ip firewall address-list get $i list] = "test" && [/ip firewall address-list get $i address] = $AIP && [/ip firewal...

Clauu

Hi there, so i'm trying to delete some specific ips only from a specific list name, this is what i done so far

/ip firewall address-list 
		:foreach i in=[find list="dyn_ip"] do=[ 
			$i contains the number?;
			now how can i delete a specific ip from that list?
			]

Clauu

Finally go it, the problem was from mange rules since i;m marking some connections/routing, i forgot to add before of that prerouting chains to accept from one interface to another..

Thanks for tips

Clauu

Well yes i have the log option enabled for every drop chain to see which packets goes dropped and at the moment of pinging there is no entry that the packet was blocked or something like that and this is what it leads to harder debugging :) My firewall rules are for input and forward accept establis...

Clauu

Hmm yes indeed i have lot of rules since after accept chains i'm droping everything else no matter of the state of connection.
By default routeros does inter vlan routing?
Thanks

Clauu

Ok so i have 4 networks, 192.168.10.0/24 dhcp for lan on ether5, 192.168.20.0/24 wifi and 2 vlans 192.168.70.0/24 + 192.168.80.0/24 on ether4. From lan i can ping any network(wifi, vlans), from wifi and from vlans only lan. Now i'm trying to allow communication between wifi and vlans, vlan1 to vlan2...

Clauu

Hm interesant bravo

Asta ar merge pe la hoteluri pensiuni etc unde se plateste accesu la internet si exista routere mikrotik vezi ce reclama iti faci

Interesting, nice and cleaner ui

Clauu

No, this is definitely not a solution..

Clauu

Yep.. same behaviour Feb 24 15:41:52 debian postfix/smtpd[4115]: Anonymous TLS connection established from unknown[192.168.80.1]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Feb 24 15:41:52 debian postfix/smtpd[4115]: NOQUEUE: reject: RCPT from unknown[192.168.80.1]: 554 5.5.2 <[7...

Clauu

Yes, you can use your pppoe client interface instead of ip

Clauu

Use mangle to mark packets, let's say that your networks are 192.168.10.0/24 for office and 192.168.20.0/24 for guests mangle /ip firewall mangle add action=mark-routing chain=prerouting new-routing-mark=routing_mark_office src-address=192.168.10.0/24 /ip firewall mangle add action=mark-routing chai...

Clauu

Thank you sir

Clauu

Hi, ok so i have 2 pppoe connections, 1 with dynamic ip and another one with a static ip, on the dynamic one the 25 port is blocked by isp, 192.168.10.0/24 is translated to the dynamic ip and 192.168.20.0/24 to the static one, how can i redirect all requests to port 25 from my dynamic ip to the stat...

Clauu

Yes, from technicall specs it should handle 500Mbps

Clauu

I'm also havin problems with email after upgrade to 6.26, until 6.26 everything went well but on this it;s keep saying that /tool e-mail send subject="stest" body="btest" to="mymail@yahoo.com" system,e-mail,error Error sending e-mail <stest>: invalid TO address Now i'm ...

Clauu

500Mbps is way too much for this router, gigabit ports are only for layer2 otherwise this router won;t route more than 200-250Mbps and this with 100% cpu load. Try increasing the cpu frequency but be aware of higher temps. Also you should try RB850Gx2, use this for main routing and rb2011uias for wi...

Clauu

[admin@MikroTik] > /tool e-mail send subject="stest" body="btest" to="mymail@yahoo.com" Feb/04/2015 17:22:34 system,e-mail,error Error sending e-mail <stest>: invalid TO address ?! Also after reboot something must happened since my main internet pppoe connection was co...

Clauu

[admin@MikroTik] > /tool e-mail send subject="stest" body="btest" to="mymail@yahoo.com" Feb/04/2015 17:22:34 system,e-mail,error Error sending e-mail <stest>: invalid TO address ?! Also after reboot something must happened since my main internet pppoe connection was co...

Clauu

Hi, my setup is a dhcp server on eth3 as master for eth5 with 192.168.10.0/24 , 2vlans 192.168.80.0/24 and 192.168.90.0/24 on eth4, 192.168.90.100 is a webserver translated to a public ip and 192.168.90.0/24 has a mangle routing mark to go outside only through a preffered public ip in my case 86.x.x...

Clauu

Any help on this please? Or maybe a paid one since i really need this

Clauu

How can i debug further? All my laptop settings are ok, static ip 192.168.10.100, google dns 8.8.8.8 and 8.8.4.4.. is not a problem from here since neither ping isn;t working outside
Pinging 8.8.8.8 with 32 bytes of data:
Request timed out.
Request timed out.
What do you mean by gateway not working?

Clauu

Ok so i have checked over and over again, disabled rules nat etc still the same thing.. i cleaned my config a bit here is the result [admin@MikroTik] > ip firewall filter print detail Flags: X - disabled, I - invalid, D - dynamic 0 ;;; default configuration - icmp chain=input action=accept protocol=...

Clauu

Yes i'm using dhcp-server, my config is ether1 and ether2 as wans, ether3 master with dhcp server(192.168.10.0/24 network) on it for ether4 and ether5(slaves for ether3). My laptop is on ether5 with static ip 192.168.10.100 On ether2 i have 2 pppoe accounts each one with a different static ip [admin...

Clauu

Well here are the rules chain=srcnat action=masquerade out-interface=rds_fb100 log=no log-prefix="" chain=srcnat action=masquerade out-interface=rds_acc50_228 log=no log-prefix="" chain=srcnat action=masquerade out-interface=rds_acc50_229 log=no log-prefix=""

Clauu

Thank you again, i have made a test an still the same problem no internet connection, maybe i'm doing something wrong?

Clauu

Ok thank you again, i've made a test but there is no internet connection on my laptop, maybe is something wrong with my routes? routes 0 A S dst-address=0.0.0.0/0 gateway=rds_acc50_229 gateway-status=rds_acc50_229 reachable distance=1 scope=30 target-scope=10 routing-mark=laptop 1 ADS dst-address=0....

Clauu

Thank you, i'll try this and come back with feedback
Ok, at the moment of enabling those rules i can't ping/reach my internal network/hosts 192.168.10.0/24 from my vpn-pptp connection 192.168.30.0/24 network, why is that?

Clauu

Hi, so i have ether1 as a wan(1 pppoe account) with dinamyc ip and ether2 as another wan with 2 pppoe accounts(same wire, just 2 pppoe accounts) each one with a static ip, my goal is that a computer connected to ether4 to be on the ether1 internet connection and another one to ether5 on the ether2 i...

Clauu

Logs are saved on a usb stick, at every reboot the stick is recognized either as disk2 or disk1 and never with the same name and as a result logs are often not saved because in system-logging-actions the path must be manually changed, I'm really tired of such bugs

Clauu

I would prefer the older design, is it possible to switch the older theme ?

Me tooo.. please let us choose our desired style

Clauu

Hi, i'm having problems with my setup.. mikrotik 192.168 .10.0/24 dhcp for laptop pc etc and .40.0/24 for pppoe server. The pppoe client is a dlink basic router 192.168.1.1, now i want to access from any laptop in .10.0/24 the dlink router 192.168.1.1.. i added a static route in mikrotik as dst. add...

Clauu

Or maybe a dual core x86?

Clauu

I'm in a similar situation of an upgrade, 2 isp 200Mbps dl / 32Mbps up, l2tp+ipsec and pptp, some fw and queues / bandwith limitation rules Should i go for a x86 config(2gb ram, i3/pentium dualcore haswell) or RB1100AHx2 it will be enough..? In the future maybe i will have an upgrade for dl bandwith...

Clauu

Ipsec errors here too, rb2011uias+6.19

> ipsec,error failed to get valid proposal.
> ipsec,error failed to pre-process ph1 packet (side: 1, status 1).
> ipsec,error phase1 negotiation failed.

supout sent to mikrotik

Clauu

Hi, i'm going to upgrade my 2011uias with a RB1100AHx2 or CCR1009-8G-1S for a further setup, something like 2 isp 200Mbps dl / 32Mbps up, l2tp+ipsec and pptp, some fw and queues / bandwith limitation rules.. which one to choose? Will the ahx2 handle that without problems?

Clauu

How is this apu compared to a ppc(RB1100AHx2) for ex?

Clauu

By default windows blocks ping packets maybe you should check your win fw to enable icmp

Clauu

You would know if ipsec fails from logs or from ppp-active connections

Clauu

200-300? mine at ~120-150 the cpu is ready to explode and this without any complicated fw rules.. only few basic ones

Clauu

I was modifing some dhcp settings/networks and after that bum all settings/networks from dhcp server section disappeared.. same for ip pools, all my 10pools had gone away.. i'm kind a tired of this very unpredictable behaviour every time i'm having emotions that something will go bad and i must rebo...

Clauu

I have a similar issue with 2 subnets 192.168.50.0/24 and 192.168.10.0.24, the fw rule isn;t droping anything from source .50 to dest .10

Clauu

Yes, it;s enabled

Clauu

Hi, i have 1 bridge with 192.168.10.0/24 and a wifi virtual ap 192.168.50.0/24.. i want to block traffic from .50 to .10 subnet

ros code

/ip firewall filter add chain=forward action=drop src-address=192.168.50.0/24 dst-address=192.16
8.10.0/24

but i can easily ping .10 from .50

Clauu

As an update now it's working.. do not why or what was the problem

Clauu

ros code

add chain=input dst-port=500,1701,4500 protocol=udp
add chain=input protocol=ipsec-ah
add chain=input protocol=ipsec-esp

Same behaviour

Clauu

Any ideas please?

Clauu

/ip firewall filter add chain=input comment="default configuration" protocol=icmp add chain=input comment="default configuration" connection-state=established add chain=input comment="default configuration" connection-state=related add chain=input dst-port=67,68 in-int...

Clauu

Sure
http://postimg.org/image/vwebnokd3/
http://postimg.org/image/d99m1vpyh/

Clauu

Hmm what could be wrong? http://postimg.org/image/w0xg6z3yr/ http://postimg.org/image/3ypbkbkj3/ I'm posting images since export or print cmds does not show all settings [admin@MikroTik] > /ip ipsec policy export # sep/03/2014 17:31:29 by RouterOS 6.19 # software id = xxx # [admin@MikroTik] > /ip ip...

Clauu

Hi, i'm trying to connect from a remote win7 pc to my home network using l2tp and ipsec but without disabling ipsec from changing reg entry 'ProhibitIpSec' to 1 isn;t working at all.. any ideas why? rb2011uias with a pppoe connection

Clauu

Is there any function for archiving files/folders? tar for ex

Clauu

or disconnects on pptp when logged into winbox?

Yep, seems like it;s fixed

Clauu

No more vpn-pptp interruptions for winbox after 1day, good job for this one

Clauu

I have the same problem as @kikikaka, same behavior with the same environment and winbox version Problem signature: Problem Event Name: APPCRASH Application Name: winbox.exe Application Version: 0.0.0.0 Application Timestamp: 53db57a7 Fault Module Name: StackHash_d4cb Fault Module Version: 6.1.7601....

Clauu

rb2011uias-2hnd, 3.18 firmware version

Clauu

Upgrading from winbox led to a total mess no packages installed no prev configuration no nothing.. had to reboot again and fortunately i had an old backup for my config.. You do not provide any relevant detail. Such as? I just simply hit download&upgrade and shit happened.. :) from 6.17 to 6.18

Clauu

Upgrading from winbox led to a total mess no packages installed no prev configuration no nothing.. had to reboot again and fortunately i had an old backup for my config..

Clauu

It can also be powered by poe? Or just powering other devices?

Clauu

winbox still crash when conected via pptp
Same here.

Same..

Clauu

Yep same problem here, email the mikrotik team with this issue and let;s hope for a solution soon

Clauu

+1, would be nice to have it

Clauu

When it will be available the x64 version?

Clauu

http://forum.mikrotik.com/viewtopic.php?f=1&t=83691

Clauu

I have requested in the past the same feature.. would be really nice to have a real ftp server with basic features like users folders and permissions

Clauu

Disabling the pptp encryption isn't a fix doh If you read better, you see: use 6.7 :shock: you don't get it, downgrading/disabling etc those things aren't a fix man they're just for the moment and the 'moment' has passed away long time ago since there are 5 releases since then without a fix for thi...

Clauu

Disabling the pptp encryption isn't a fix doh

Clauu

you eagle eye

mppe128 encryption here too, i will check if disabling it would go to any changes

Clauu

Because it;s hard for devs to track every bug/problem through different users posts, it would be nice a bug tracking system..

Clauu

You didn;t get the point, if you want to make a problem/bug report then you have to mail the mikrotik team since this forum isn;t for reporting issues.

Clauu

Notice: For support from Mikrotik staff, write to support@mikrotik.com - Mikrotik does not generally offer support on the forum, this is a user forum

Clauu

'Notice: For support from Mikrotik staff, write to support@mikrotik.com - Mikrotik does not generally offer support on the forum, this is a user forum'
i have already mailed this problem, you should also too

Clauu

rb2011 with latest 6.12, since yesterday i have high cpu usage, looked into tools-profile and 'dns' is eating 50% cpu.. wth is this?
From where i can restart/reset that service since i don't want to reboot the whole router just for that..?

Clauu

From where and how are you trying to connect to the smb share? In windows there are some glitches, if you want to map a share then use in cmd 'net use z: \\router\share_folder /user:your_user your_password

Clauu

I'm experiencing the same thing when lcd is on ~ 10% cpu load do not why

ros 6.12 / fw 3.14

Clauu

Good job devs team now with the latest update the usb power is much more stable I have almost 1 day uptime of a usb 3g modem where on <=6.11 it was a nightmare no more than 2hours of uptime

Ok so unfortunately happened again

now it will last for ~ 1day and after that reset occurs again..

Clauu

What is the os of the machine? On w7 incoming icmp is blocked by default

Clauu

Good job devs team now with the latest update the usb power is much more stable

I have almost 1 day uptime of a usb 3g modem where on <=6.11 it was a nightmare no more than 2hours of uptime

Clauu

Oh from 5.26 to 6.11 it;s a very long road

Downgrade isn't a viable solution..

Clauu

So you're saying that those disconnections are normal? The problem is that machine-router pptp link remains established, only winbox reports that router has beed disconnected.

Clauu

Its very hard to understand what you're saying, please use google translate or something similar

Clauu

The pptp vpn connection remains up since in router i see the total uptime keep going forward, also ping from machine-router has 0 loss.. so the pptp connection remains established

Clauu

Dude, when we're connecting with winbox to the router from the pptp vpn connection we have random frequent disconnections while directly from a port its ok, what part its hard to understand?

Clauu

Thanks for the tip, i'll try it

Clauu

I'm on ros 6.11

Clauu

I'm facing the same problem http://forum.mikrotik.com/viewtopic.php?f=13&t=83882 with repeatedly dropped connections for winbox on ros 6.11
hope for a solution soon..

Clauu

No.. i'm also interested in this since it would be a pretty nice feature

Clauu

The internet connection its fine since the pptp link it remains established counting forward the total uptime

Clauu

Hi, when i'm connecting through the vpn pptp connection to the router with winbox i'm having frequent disconnections(the vpn connection remain established, only winbox will report that router was disconnected), why is this happening?

Clauu

You didn;t understand my question, is there any problem for the usb chip to handle/power x devices through the usb hub since i don't use an power adapter for it

Clauu

Hi, i have a more technical question, it;s safe to connect ~ 4 devices through a hub powered bus to the router usb port? Within safe i mean if it won't overload the usb chip requesting more power than usually/it can deliver.. or the hub must be powered separately by an adapter?

Clauu

Ok seems that the intel network adapter is supported, what about this http://www.linux-hardware-guide.com/201 ... 1300-mbits ? Can that broadcom driver be included/supported in routeros?

Clauu

I don't blame anyone

It's not the fastest way yes but i don't want to keep it only for me since 'sharing thoughts' is the main ideea of this forum, isn't? In the end if i will not get any response i will contact mikrotik team but until then i will wait since this can be helpful for others too

Clauu

Then what;s the point of this forum if for every simple question/issue i must personally get in touch with the mikrotik team.. replying here will be helpful for others too

Clauu

Is that list updated? Basically ros is based on linux and theoretically it should run on any configuration but i need an oficial opinion

Clauu

Hi, is there any limitation of x86 hardware like motherboard storage or pci-e devices? In the nearest future i'm planning to use routeros with a broadwell setup to act as a main router + kvm for the second virtual machine that will fit my linux needs. For the virtual machine i will want to use sata3...

Clauu

You must either set the apropiate vlanid in your network card(if it has this feature) or use the switch chip feature to untagg packets http://wiki.mikrotik.com/wiki/Manual:Sw ... p_Features
Examples here http://forum.mikrotik.com/viewtopic.php ... 5&p=417970

Clauu

Maybe you're trying to create vlans on ports directly without using a switch?

Clauu

I have mailed a ticket to suport but no answer.. after upgrade to latest ros 6.11 my vpn pptp connection keep reseting after couple of hours ~10-20 with the log error 'terminating peer not responding'. The internet connection its a business one from my work so it has nothing to do with it since the ...

Clauu

Is this the same for x86 kvm too?

Clauu

Hi, in the nearest future i'm planning to go for a x86 ros platform and i want to know how efficient is the kvm virtualization used in ros since i preffer to use this feature instead of buying another separate platform for my linux needs. Also is there any option to set nr of cores to be used by the...

Clauu

I' pretty sure that mikrotik team has more than 1 dev

Clauu

Hi, according to this http://forum.mikrotik.com/viewtopic.php?f=13&t=83686 please consider it as a future request, others have it why not routeros too?

Clauu

Well the ftp itself cannot be compared to samba.. i will open a request hope that it will be implemented soon

Clauu

Then what;s the point of the ftp service with this very minimal configuration..can this be treated as a future request?

Clauu

Hi, i can't find how to add a specified home directory(chroot) to a user.. it;s not possible?

Clauu

Also to high cpu usage.. my isp is giving me 100Mbs(~10MBs) and at 10MBs the rb2011 cpu is on 100%.. then what's the sense of that gigabit ports, if i will want to upgrade my internet connection to 1000Mbs then what i will have to to, change the router too? LE. Same problem on the smb share,same pro...

Clauu

Suddenly my cpu was up to 100%, latest actions used was 'ip-arp make static' and 'torch'. Also my logging usb flash was reseted do not know if this was before or after that high cpu usage.Profile was showing 'management' as eating the hole cpu, i was not able to generate any supout file due to this ...

Clauu

You don't have to bridge the external iface with other ports for internet connection, this is done through routes..

Clauu

Check this topic http://forum.mikrotik.com/viewtopic.php?f=13&t=83329

Clauu

Don't forget to add an ip address for that interface and also to dhcp-networks. You may also want to remove that specified port/s from the bridge.

Clauu

Yes, pppoe-out is set as external and bridge_lan + wlan1 internal..

Clauu

I don't have any other router in my network, i have used the 'upnp test program' and it fails, pppoe-out is the external interface and bridge_lan(laptop from which i have tested is connected through this) + wlan1 internal [admin@MikroTik] > /ip firewall nat print dynamic Flags: X - disabled, I - inv...

Clauu

I have defined bridge_lan and wlan1 as internal and pppoe-out as external, same issue.. what i am missing?

Clauu

Hi, i have enabled upnp, added interfaces and nothing happens programs can't open ports, i have also tried the 'upnp test program' and it fails.. where could be the problem? /interface bridge add admin-mac=4C:5E:0C:43:AC:86 auto-mac=no disabled=yes name=bridge-local add admin-mac=4C:5E:0C:43:AC:89 a...

Clauu

I'm having the same issue, i can't connect to the smb, either from run \\router ip or from map network drive
latest ros 6.11

Clauu

From wifi/lan bridge i can ping my vpn, from vpn i can only ping lan 2laptops, 1 laptop in wifi can't ping another only if the second one it's in lan and vice versa 1 laptop in lan can't ping another only if the second one it's in wifi.. what could be the problem? /interface bridge add admin-mac=4C:...

Clauu

On the last ros 6.11 suddenly my lan bridge went out, it's just disappeared..

wth
LE. Seems like this is happening when you select a bridge in the pptp profile, a random bridge will get deleted..

Clauu

Maybe i'm missing a fw rule /interface bridge add admin-mac=4C:5E:0C:43:AC:80 auto-mac=no l2mtu=1598 name=bridge-claudiu add admin-mac=4C:5E:0C:43:AC:86 auto-mac=no l2mtu=1598 name=bridge-local add l2mtu=2286 name=bridge_wlan /interface ethernet set [ find default-name=ether1 ] name=ether1-gateway s...

Clauu

Yes i have latest ros and firmware, for ex 1 laptop to ether4 and another to ether5 where both ports are in the same bridge, laptops can't ping each other and the same thing if the laptop is connected through wifi(same bridge also)

Clauu

Thank you sir, now it's ok

master-port ether2 must remain free right?

Clauu

Thank you now it's partial done :D dhcp from vlan2 will assign an ip if i will connect through ether4 but not the same for ether3(dhcp from vlan1 to assign an ip when i will connect through ether3).. where could be the problem? /interface bridge add admin-mac=4C:5E:0C:43:AC:80 auto-mac=no l2mtu=1598...

Clauu

Thank you for the example, changed the confguration but still the same issue clients won't get an ip /interface bridge add admin-mac=4C:5E:0C:43:AC:80 auto-mac=no l2mtu=1598 name=bridge-claudiu add admin-mac=4C:5E:0C:43:AC:86 auto-mac=no l2mtu=1598 name=bridge-local /interface ethernet set [ find de...

Clauu

Please take a look to this http://forum.mikrotik.com/viewtopic.php ... 50#p417350

Search found 217 matches

ros code

ros code