MikroTik

wwj

After upgrading to 7.13, I encountered the same OSPF issue. Even though the interface was shut down, the routing entries still existed, and the same entry was added multiple times in the routing table and marked as DAo+(ecmp). My total number of routing table entries was only 700, and over time, th...

wwj

See also this:
viewtopic.php?t=197289

Thanks So Much!

wwj

In all of your attempts, everytime what is after the = is everytime one string: "", nil, nill, nul, null, unset, with or without "".

Easy:
Code: Select all
/ip firewall nat print where !src-address
or:
Code: Select all
/ip firewall nat print where src-address=[:nothing]

Thanks So Much！

wwj

/ip f n add chain=srcnat action=src-nat src-address=172.16.0.5 dst-address=192.168.0.5 to-address=10.1.1.5 (entry 1) /ip f n add chain=srcnat action=src-nat dst-address=192.168.0.6 to-address=10.1.1.6 (entry 2) /ip f n add chain=srcnat action=src-nat dst-address=192.168.0.7 to-address=10.1.1.7 (entr...

wwj

After upgrading to 7.13, I encountered the same OSPF issue. Even though the interface was shut down, the routing entries still existed, and the same entry was added multiple times in the routing table and marked as DAo+(ecmp). My total number of routing table entries was only 700, and over time, the...

wwj

test found, use address-list just can do the Accurate matching if add the list like: /ip a a add list=mylist address=10.1.238.128/26 /ip a a add list=mylist address=10.1.240.0/24 /ip a a add list=mylist address=10.1.243.0/24 /ospf filter rule/ chain=ospf-in rule="if (dst in mylist && ds...

wwj

v7.12 ospf learn from neibor DIo 192.168.100.0/27 100.64.128.1%ether2 110 DIo 172.17.6.0/26 100.64.128.1%ether2 110 DIo 10.1.236.0/24 100.64.128.1%ether2 110 DIo 10.1.238.0/25 100.64.128.1%ether2 110 DIo 10.1.238.128/26 100.64.128.1%ether2 110 DIo 10.1.239.128/25 100.64.128.1%ether2 110 DIo 10.1.240...

wwj

As a beginner, I often need some help, but when searching forums, I often cannot find the answers I need (racking my brains to change various keywords). The knowledge in forums or on the internet is too fragmented and time-consuming, and the examples provided in official documents are too basic and ...

wwj

1、All usage scenarios of the move command (The solution is at the end) 1.1、move A to top 1.2、move A to bottom 1.3、move A before B 1.4、move A behind B 1.5、move A up one step 1.6、move A down one step 2、testing environment (/ip f m)，all the entries set only comment(1-5) 2.1、add entries： :for i from=1 ...

wwj

take a look at this Version 6 will only receive critical and security fixes. There are no plans to add general behavior adjustments or new features to it. https://forum.mikrotik.com/viewtopic.php?t=196411#p1008972 ths for your prompt ，Now the focus should shift to v7 （v7.10 has already retrieved BF...

wwj

v6.49.8 [admin@R3] /routing ospf lsa> :put [get [find where id in 10.0.0.64/26] id] nothing displayed , other parameters is the same (area\type\originator\sequence\age\body) （really have one lsa project id=10.0.0.100） but in v7.9 , it was working well [admin@R6] /routing/ospf/lsa> pr de where id in...

wwj

1. Thank you for your wonderful discussion and help 2. /ip settings max highbor entries=65536, which is very useful as I was not aware of this parameter before 3. This behavior of scanning IP addresses on a large scale may not be an attack, but rather the working mechanism of certain software, such ...

wwj

my ccr1072 conn to switch ，and created 100 vlanif ,ip-address like 192.168.0.1/24,192.168.1.1/24,192.168.2.1/24,192.168.3.1/24………………192.168.100.1/24 so ,it have 256*100=25600IPs , Actually, there aren't so many hosts, vlans are just dividing for management purposes A few days ago, I was attacked by ...

wwj

Are the routers all acting as routers in one connected setup or at different locations and connected by internet? It seems your needs only need firewall rules at ROS1 if all connected, and for the latter just use wireguard or zerotier. The router only acts as a bypass to modify some packet paramete...

wwj

There is no bug, a destination must be resolvable in the main table too. It's like, originally I wanted to eat a hamburger, all I needed to do was pay the salesperson and he gave me a hamburger; But the current situation is that when you enter the store, someone will ask you, 'Are you here to buy s...

wwj

in v6 you can't. ROSv7 allows to set ext metric in routing filters.

I'll try ROSV7 ， Thank you very much.

wwj

in ospf network , Two ASBRs (ROS1 ROS2) each add the same static route (6.6.6.6/32) to their own internet outlet; I want ros1 to be the master and ros2 to be the slave; I don't know how to do it, so I guess and try: all the test , i set the ospf redistribute-static to astype1 and astype2 respectivel...

wwj

Policy-Route-Bug? Policy-Route-BUG.jpg In this topology ROS1>/ip add address=13.0.0.1/24 interface=vlan3013 ROS1>/ip add address=12.0.0.1/24 interface=vlan3012 ROS2>/ip add address=12.0.0.2/24 interface=vlan3012 ROS2>/ip add address=20.0.0.1/24 interface=vlan3020 （gateway for pc 20.0.0.2） ROS3>/ip a...

wwj

>>>These servers have only ATA/AHCI/RAID Mode available<<< The operating system is not meant to run everywhere, and no new disk types are supported, the MikroTik target is not to run directly on ANY x86. Use ESXi or similar for CHR version. >>>So If you have any solution please suggest me<<< Use ES...

wwj

i try install routeros 6.48.3 to the dell r910 server i burn the iso to a dvd but when i boot the server from dvd ,it cant find the harddriver in the bios, ata setting just can set "off" and "ATA Mode" i know routeros just can install to a IDE mode harddriver ,so if that mains, i...

wwj

Thank you, teachers I learned a lot more 1、 Fuzzy query use “~” 2、address in x.x.x.x/x or x.x.x.x in address or x.x.x.x/x in address , all can works well 3、“^23” means the "begin with 23" 4、"10.1.1.1" "2.10.5.2" "3.101.1.2" 4.1 if use “10.” can match "10....

wwj

/sys ssh address=192.168.0.1 user=test command="/ip f a add list=test address=10.1.1.1" (user: test on the another routeros have been set no password) use this command , one routeros can ctrl another routeros the problem: this command just worked in the CLI if in " /sys script " ...

wwj

Use the in keyword for subnet matching.

E.g.
Code: Select all
/ip route print where 172.17.0.0/16 in dst-address

thanks，but it's not my mind

I have found the answer
/ip rou pr where dst-address ~ "172.17."
this char "~" is the key , (same as "include" )

wwj

in other system,have the command like

show ip routing-table | include 172.17.

how to do this in routeros

wwj

for example [admin@wwj] /ip route> pr where static Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit # DST-ADDRESS PREF-SRC GATEWAY DISTANCE 0 ADS 0.0.0.0/0 pppoe-out1-a 1 1 A S 12.193.16.4/32 pppo...

wwj

And it's a pity, because ipset (which is probably used internally) does support lists of lists, together with other useful lists types (I would very much like to have its hash:ip,port list). It's really a pity that there is a list group function in other brands of products. It's very convenient to ...

wwj

There are no lists of lists.

In other brands of products, routers or firewalls, many have the function of list group, which is very convenient to use

wwj

/ip f add add list=mylist1 address=172.16.3.5 /ip f add add list=mylist1 address=172.16.3.65 /ip f add add list=mylist1 address=172.16.3.22 /ip f add add list=mylist2 address=172.17.2.225 /ip f add add list=mylist2 address=172.17.2.21 /ip f add add list=mylist3 address=172.20.0.56 /ip f add add list...

wwj

the dude snmp connect to a switch ,if the interface of switch have a high speed ，for example the 10Gbps SFP+ , the dude realtime rate will display a error values on the switch display the interface rate: Current system time: 2020-12-08 09:15:43 Last 300 seconds input rate 6971407512 bits/sec, 736975...

wwj

1. Direct link route lost bug Description: After the interface is configured with an IP address, a direct connection route will be automatically generated in the routing table. However, under unknown circumstances, the direct connection route will be lost, resulting in the inability to communicate w...

wwj

A scalable solution with load distribution is always better than replacing one all-in-one-box by another single one with more horsepower. The highest step to cross is the one between "one" and "more than one"; whether "more than one" is actually two or twenty doesn't m...

wwj

Bandwidth enforcement is CPU intensive, so you'll have to pour in more CPU. There is no way to optimize the current setup without affecting its behaviour (pcq per each individual user simply must create as many virtual queues as there are users). And yes, it will require a reconfiguration of the to...

wwj

Still unresolved

wwj

I can confirm that many Android VPN-s end like that. This is very common errors. Rememer that now is very important fix when users connect vpn from the same NAT. I only encounter the connection problem between routers, other clients such as Android or windows have not encountered ,it is not about n...

wwj

I have never seen that, and I have quite some L2TP setups. Although always over IPsec. But I don't think that should affect this. I have several L2TP clients that operate over 4G sticks that get a new IP address every day or every 8 hours, and of course at that time they lose the connection. But th...

wwj

My LAN have 2000 users， wifi + wired The WAN have 4Gbps My router is CCR1036-8G-2S+ , LAN and WAN all use the 10G SFP+ port to 10Gswitch when i do the Simple configuration lan-ip\wan-ip\dhcp\nat\default-route,the network worked well, high bandwidth and low delay，when the online users at 1500 and ban...

wwj

solved

must use the bridge

bridge ports add the ether

on bridge vlans add the vlan

and set the vlan taget on the bridge

and set the vlan untaget on which ether port ,or taget on which ether port

wwj

if the server in trouble, it always make the l2tp-client of itself error, when it's l2tp-client try to connect to other server ,will log: 15:45:36 l2tp,ppp,info l2tp-to-a5: terminating... - session closed 15:45:36 l2tp,ppp,info l2tp-to-a5: disconnected 15:45:36 l2tp,ppp,info l2tp-to-a5: initializing...

wwj

when the L2TP and CLIENT is working well （ MT device routeboard、 x86、 CCR、CHR ） In many cases, for example: 1、server or client network Abnormal disconnection 2、server or client reboot 3、server enalbe -> disable -> enalbe that will make the client can‘t connect to the server anymore。 log like client：...

wwj

unset

/ip firewall nat unset [find action=masquerade] out-interface

WoW~~ I really didn't expect such a command to exist.

Thank you very much.

wwj

help！ In CLI mode how to set one parameter value to default for exemple /ip f m add chain=src-nat out-interface=ether1 action=masq but now i dont want the "out-interface=ether1" ,if in winbox i can click the button of "set to default" to cancel this parameter , but in CLI how to ...

wwj

if you create a bridge and set bridge port like bridge1-wlan1 bridge1-eher2-master you should change the ip interface from ether2 to bridge1 , if you dont do that , the network will be stop i try it in rb952 , you must change the interface=bridge1 and why your routerboard still work ,ok i dont know

wwj

oh my....... you are wrong from the beginning... your vpn address pool cant use 192.168.2.x -x why you use 2.x.......any others like 192.168.3.x you wont get so many questions in ros vpn address cant use arp to find the lan address , its the cut mode ，so you just can use the routing mode so the lan ...

wwj

maybe port1 & port2 in the same group

master and slave or have the same master port

wwj

rb750g - switch - port show this name switch vlan-mode vlan-header default-vlan-ID ether1 switch1 disabled leave as is 0 ether2 switch1 disabled leave as is 0 ether3 switch1 disabled leave as is 0 ether4 switch1 disabled leave as is 0 ether5 switch1 disabled leave as is 0 and i set ether3 (conn to A...

wwj

rb750g - switch - port show this name switch vlan-mode vlan-header default-vlan-ID ether1 switch1 disabled leave as is 0 ether2 switch1 disabled leave as is 0 ether3 switch1 disabled leave as is 0 ether4 switch1 disabled leave as is 0 ether5 switch1 disabled leave as is 0 and i set ether3 (conn to A...

wwj

I do the wifi , 8AP 1AC 1AC+6AP---SWITCH------TRUNK----RB750Gr3---2AP I want vlan2 to do the management-vlan (for AP and AC) so I set the switch's ports (which conn with AP&AC) mode trunk and pvid 2 ,and , AC can find the AP ,this is no problem but the ap (conn -to rb750g) can't be found, becaus...

wwj

you need another roteros , 250+250 , one is the master ,on it do PCC and take half packets to the secend ros

if you have a VM server (ESXi ,Ctrix, Hyper-V, and so on ), it will be simple

wwj

i guess your ether-NIC is 1000M
and you use the pppoe-client
and your account is 2Mbps
and the account is no read-only

and so~~~~~ you need 500s interface with different MAC-address to run the pppoe-client , that 500*2=1000M

and PCC

just a joke

wwj

PPTP MTU/MRU = 1500 - 56 ( 20 IP_HEADER + 20 TCP_HEADER + 12 GRE_HEADER + 4 PPP_HEADER ) = 1444 B

this right?

but in routerOS the pptp-server/client set default mtu/mru 1460/1460 , how to understand ? or in routerOS the mtu 1460 include what?

wwj

a: MTU !!!

wwj

I get it

I use a backup file import to the ros which has the different version with the backup

so if you want take the option from one ros to another , and they have different version , use backup->restore may make you in trouble

wwj

1m/1m 2m/2m 512k/512k 5s

try to delete the last char "s"

the brust-time default-unit is like second ,so you give a Integer number should be ok

wwj

VPN借线网页打不开.JPG R1 R2 R3 each have a isp link to internet ，and each have a default-route to internet，and config the src-nat for all lan ip to internet R1 R2 R3 together is a Independent part ，the LAN-Network just for R1 R2 R3 connect-use R1 - R3 and R2 - R3 each have a pptp-vpn tunnel R1 R2 R3 confi...

wwj

1、ros do the pptp-server 2、some client（maybe ros、windows、liunx …）conn to pptp-server 3、the client make Abnormal disconnection （like Unplug the cable） 4、in the server ，the pptp connection will be there forever.................. 5、if the user profile only-one=yes ，the next time he will con‘t loggin th...

Search found 55 matches