Community discussions

MUM Europe 2020

Search found 19 matches

by m3a2r1
Wed Jun 07, 2017 2:41 pm
Forum: General
Topic: Port mirroring on CRS125
Replies: 1
Views: 392

Port mirroring on CRS125

Hello,
I'm using CRS125-24G-1S-2HnD router and I need to install sniffer-host in my network. I was trying with Packet Sniffer but that method is using a lot of cpu.
How can I configure port mirroring on that router to sniffing on another machine?
by m3a2r1
Wed Dec 16, 2015 11:28 pm
Forum: Wireless Networking
Topic: Mikrotik router as dhcp + ap from another manufacturer + Active Directory - how to authenticate?
Replies: 8
Views: 990

Re: Mikrotik router as dhcp + ap from another manufacturer + Active Directory - how to authenticate?

If the users are on the domain anyway, why not just push out the cert to them?
If there are in domain it's not problem to push out the certs for them. About half of computers are not in domain (shitty Windows Home Premium) and I don't want to configure them.
by m3a2r1
Wed Dec 16, 2015 6:09 pm
Forum: Wireless Networking
Topic: Mikrotik router as dhcp + ap from another manufacturer + Active Directory - how to authenticate?
Replies: 8
Views: 990

Re: Mikrotik router as dhcp + ap from another manufacturer + Active Directory - how to authenticate?

Can I authenticate wireless clients with AD without installing server certificate on each computer? Only with username/password.
by m3a2r1
Tue Dec 15, 2015 5:40 pm
Forum: Wireless Networking
Topic: Mikrotik router as dhcp + ap from another manufacturer + Active Directory - how to authenticate?
Replies: 8
Views: 990

Mikrotik router as dhcp + ap from another manufacturer + Active Directory - how to authenticate?

I'm using Mikrotik as router and dhcp server for LAN clients and Unifi APs. There is an AD server so I want to authenticate wifi clients with Windows credentials, not WPA key. I've set up radius on mt (wireless, ppp & login checked), dhcp with option "use radius", and on Windows: Secure Wireless Con...
by m3a2r1
Thu Dec 10, 2015 9:12 am
Forum: Beginner Basics
Topic: Routerboard and MS EAP-MSCHAP v2
Replies: 3
Views: 1432

Re: Routerboard and MS EAP-MSCHAP v2

Radius on routerboard, vpn authentication by radius. Windows 2012 R2 domain, acting as radius client. I need Windows to authenticate by domain credentials. Connection is created by CMAK so it's not possible to change parameters after installing. I've created 2 versions of connection: one with MS-CHA...
by m3a2r1
Wed Dec 09, 2015 7:48 pm
Forum: Beginner Basics
Topic: Routerboard and MS EAP-MSCHAP v2
Replies: 3
Views: 1432

Routerboard and MS EAP-MSCHAP v2

Can routerboard authenticate pptp client with eap-mschap v2? I need to use it with Windows 2012 R2 and client need to be authenticated with his windows credentials. It works with mschap v2 (windows login and password is typed manually bu user) but if I create connection with eap-mschap v2 I've got 6...
by m3a2r1
Sun Apr 26, 2015 11:34 am
Forum: General
Topic: Tool: Realtime per IP traffic monitor for home/office
Replies: 290
Views: 311326

Re: Tool: Realtime per IP traffic monitor for home/office

I've fixed it. Install note in readme text shows how to create ssh user but there's no info that I have to create password for that user :)
by m3a2r1
Sun Apr 19, 2015 11:16 am
Forum: General
Topic: Tool: Realtime per IP traffic monitor for home/office
Replies: 290
Views: 311326

Re: Tool: Realtime per IP traffic monitor for home/office

I've got the same problem. It works great but doesn't show hostnames. I'm using DHCP on my MT. I've tested on 2 MT's with the same effect.
by m3a2r1
Fri Oct 31, 2014 10:37 pm
Forum: General
Topic: Two mikrotiks and EOIP tunnel in bridge
Replies: 16
Views: 2808

Re: Two mikrotiks and EOIP tunnel in bridge

I've found what was the reason of problem. On bridge of router 2 was set proxy-arp instead of arp enabled.
by m3a2r1
Fri Oct 31, 2014 10:57 am
Forum: General
Topic: Two mikrotiks and EOIP tunnel in bridge
Replies: 16
Views: 2808

Re: Two mikrotiks and EOIP tunnel in bridge

I've noticed today that traceroute from 10.1.1.1 to 10.1.1.41 is going by 10.1.1.101, then returns to 10.1.1.1 .
It is very very strange.
by m3a2r1
Thu Oct 30, 2014 11:35 pm
Forum: General
Topic: Two mikrotiks and EOIP tunnel in bridge
Replies: 16
Views: 2808

Re: Two mikrotiks and EOIP tunnel in bridge

Tunnel is still up, I only disable/enable it in bridge. Nothing changes in routing table, default route for PC in LAN1 is 10.1.1.1.

My default route for MT is WAN interface. So why it can routes any traffic by eoip tunnel (in bridge? It seems not possible but it's true.
by m3a2r1
Thu Oct 30, 2014 9:29 pm
Forum: General
Topic: Two mikrotiks and EOIP tunnel in bridge
Replies: 16
Views: 2808

Re: Two mikrotiks and EOIP tunnel in bridge

Yes, exactly. Address and default gateway is provided by own dhcp server. Only routing trace is changing dynamically (I'm testing windows tracert to 8.8.8.8 ). When eoip is disabled in bridge, first hop is router private ip 10.1.1.1 , when I enable eoip in bridge, first hop changes to 10.1.1.101 (re...
by m3a2r1
Thu Oct 30, 2014 6:56 pm
Forum: General
Topic: Two mikrotiks and EOIP tunnel in bridge
Replies: 16
Views: 2808

Re: Two mikrotiks and EOIP tunnel in bridge

"Add default route" on PPtP client (which is on router2) could cause such situation but in LAN2. I'm still talking about issues in LAN1 where is PPtP server located. So that's not it. (however that options is disabled).
by m3a2r1
Thu Oct 30, 2014 10:47 am
Forum: General
Topic: Two mikrotiks and EOIP tunnel in bridge
Replies: 16
Views: 2808

Re: Two mikrotiks and EOIP tunnel in bridge

Ok, I've been isolated dhcp traffic in eoip tunnel - both LANs get address from own dhcp but issue with routing still exists. Routing from LAN1 is going by 10.1.1.101 until I disable eoip tunnel in bridge.
by m3a2r1
Wed Oct 29, 2014 5:56 pm
Forum: General
Topic: Two mikrotiks and EOIP tunnel in bridge
Replies: 16
Views: 2808

Re: Two mikrotiks and EOIP tunnel in bridge

You'd have to set up some firewall rules to block DHCP and enable IP firewall on your bridge.
But this is not the answer for my question - I would like to know what is wrong that I've got ip assigned by proper dhcp and it's not working good, blocking dhcp traffic will not resolve my problem.
by m3a2r1
Wed Oct 29, 2014 5:44 pm
Forum: General
Topic: Two mikrotiks and EOIP tunnel in bridge
Replies: 16
Views: 2808

Re: Two mikrotiks and EOIP tunnel in bridge

As I wrote, I want broadcast traffic, I want to use LAN Messenger in both (and probably next ones) networks.
by m3a2r1
Wed Oct 29, 2014 3:19 pm
Forum: General
Topic: Two mikrotiks and EOIP tunnel in bridge
Replies: 16
Views: 2808

Two mikrotiks and EOIP tunnel in bridge

I've got such situation: Router 1: LAN1 10.1.1.0/24 with dhcp server public IP PPTP server EOIP with router 2: local ip 10.1.1.1 , remote ip 10.1.1.101 Router 2: LAN2 192.168.2.0/24 with dhcp server behind NAT PPTP client to router 1 EOIP with router 1: local ip 10.1.1.101, remote ip 10.1.1.1 Scenar...
by m3a2r1
Tue Apr 08, 2014 6:14 pm
Forum: Beginner Basics
Topic: LAN & Wireless DHCP and filtering by mac
Replies: 1
Views: 656

LAN & Wireless DHCP and filtering by mac

Hello everybody, I would like to configure scenario like that: On MT I've got DHCP server with one pool for trusted macs and one another with untrusted (I mean untrusted are users which know wpa key but aren't my employees). So the trusted mac should get address from one pool and untrusted from seco...
by m3a2r1
Thu Apr 03, 2014 5:08 pm
Forum: General
Topic: Traffic isolation with VLANs
Replies: 6
Views: 1732

Re: Traffic isolation with VLANs

If you want the VLANs isolated at layer 3 you need to use forwarding filters in IP Firewall.
So that means that VLANs are not isolated and are visible to each other with default configuration?