MikroTik

jarosoup

I've been using a RB1200 for about 9 months now in production running 5.16 and it has been reliable for us. It did reboot itself once via the watchdog for a kernel panic after about 3 months but recovered gracefully. I've got several NATed networks, VLANs, multiple DHCP servers, SNMP, several static...

jarosoup

You should be able to add the vlan id's on the Mikrotik interface: /interface vlan add vlan-id=50 interface=ether2 name=ether2-vlan50 /interface vlan add vlan-id=55 interface=ether2 name=ether2-vlan55 And then set the vlan interface mode to trunk and the port on your Cisco to 1UP, 50T, 55T. You will...

jarosoup

Thanks for pointing this out cellfinity. Tested with an iPhone on IOS7 and the only difference we see is that the login page pops up automatically once connected (we specifically disabled this by bypassing the success page in the walled garden for older devices). It's not preventing the login from w...

jarosoup

This is an issue relating to how an iToy (iPhone, iPad, etc) determine if there is Internet service behind a captive portal, which allows the device to automatically popup a web browser when you connect to the wireless network (where as a laptop, you have to manually open a browser and try to surf t...

jarosoup

I have 6 CCR-1036 to monitor an should create 222 sensors to get 6 values that I need. It is not useful/rational for me to create so much sensors. So plese MikroTik, make an extra OID for the total CPU usage!!! Best Regards Ivan +1 Running into the same thing with CCR and needing 36 OIDs to poll th...

jarosoup

I'm answering my own question here. I'm not sure if upgrading triggered this as I never tested the ROS version that shipped with the router, I just configured it from the console and immediately upgraded it. Anyway, after trying 5.17, 5.24 and 5.26, SSH would not work until ran /ip ssh regenerate-ho...

jarosoup

Just bought a couple of 1100AHx2 routers and very disappointed that I too am running into this SSH issue. Tried both 5.26 and 5.24 and SSH is not working. Telnet and winbox are fine. Is there anyone out there that has working SSH on an RB1100? with a version newer than 5.17?

jarosoup

Hello! I have a RouterBoard 1100 which was recently upgraded from 5.25 to 6.2. Since then the computers from various internal subnets can't see each other. I've attached the config file. Any help would be appreciated. Thanks, cereno Check to see if "IP -> Settings -> IP Forward" is enabled.

jarosoup

You'll need to do this on any gigabit port you are monitoring.

How's the reliability of your CCR been for you with that amount of bandwidth? Would appreciate any feedback you have (good or bad). I'm afraid to put mine in production :/

jarosoup

This is likely an issue with your snmp poller and not related to ROS or CCR - you need to be using 64-bit counters at those rates. Take a look at ifHCInOctets (.1.3.6.1.2.1.31.1.1.1.6) and ifHCOutOctets (.1.3.6.1.2.1.31.1.1.1.10)

jarosoup

Have you tried using an SFP module that is not Cisco/Cisco-compatible (ie a generic module)? I have tested with a generic SFP on a CCR and not had any issues. Might also be worth trying to disable CDP on the port on the Cisco switch and make sure that if the port is in err-disable state to reset it ...

jarosoup

Yes, I've noticed some odd high-pitched sounds on our new 1036 that occur right before the fan starts to spin up (after being off and cool for awhile) and during reboots. Hard to explain, but steps/ticks with a high frequency then it ramps up in sound and the fan kicks in. Once the unit has been run...

jarosoup

I have seen this in the past on a RB1000 running 3.30. It would happen after using torch - not always, but more often than not. Not sure if this is the same issue you are seeing though...

jarosoup

Thanks I'll try that. I'm not skilled in electronics so I'm little woried that this capacitor will explode a second after connecting to the power supply :-) Is this as simple as connecting + of the capacitor to the + wire and the same with - ? Yes, + to + wire and - to - wire on the DC side of the ...

jarosoup

What might help is to splice in a capacitor on the DC side of the power supply (spliced in-line onto the DC wires of the cable itself). If you are worried about voiding the warranty of your power supplies (understandable), you can buy short male-female 2.1/2.5mm cable adapters and splice in a cap on...

jarosoup

*) added support for hardware watchdog on RB1000 & RB800;

Does this mean versions 3.x and 4.x do not have support for the hardware watchdog on the RB1000?

jarosoup

I think I've figured out how to get around this problem. To see all traffic on an interface, check the protocol and port checkboxes and select "any-ip" for the protocol and "any" for the port. This does not max out the CPU either. Tested on a RB1000 with 3.30.

jarosoup

I've seen this as well on version 3.x using 450, 450G, and 1000. The only way we can make traffic show up is to check the protocol box and select the protocol type (tcp, udp, etc). This didn't used to be a requirement (?).

jarosoup

So, I'm running into this problem again where hotspot users are getting logged out due to a lost lease. This has been a problem on and off for some time now. At one point, in the 2.9 version it was mostly resolved. Here's an old post on the same topic: http://forum.mikrotik.com/viewtopic.php?f=6&...

jarosoup

Did anyone ever come up with a solution to this problem? I'm running into the same issue.

Thanks

jarosoup

NAB, thank you for posting this script. I had to make one modification to it as I was getting the following error: PHP Notice: Undefined variable: receiveddone in routeros_api.class.php on line 322 I had to add an else statement so that the var was valid: // If we get a !done, make a note of it. if ...

jarosoup

My problem ended up being an issue with a license mismatch - a license for a Routerboard was installed on an x86 router. Had to reboot router then paste in a new license.

jarosoup

My problem ended up being an issue with a license mismatch - a license for a Routerboard was installed on an x86 router. Had to reboot router then paste in a new license.

jarosoup

Are there any know fixes for this? Having the same problem on 3.30

jarosoup

I am having the exact same problem. Fresh build with version 3.30 on an Intel Pentium M based system with a brand new HDD. I'm also getting denied access via ftp (only the default admin account is present) and get a file operation error when trying to make a backup. I discovered this after trying to...

jarosoup

Have you tried playing with the ack timings at all?

jarosoup

They certainly didn't skimp on hardware. After searching for prices on this thing, it appears that these can be had for a reasonable price when compaired to a 1u rack server and already have more "out of the box" features (CF and the 6 10/100 ports mainly). I don't know much on the LCD sid...

jarosoup

Very cool...thanks for sharing this

Any chance you can post the output from "/system resource print" and maybe IRQ and IO info?

jarosoup

I have always used import/export to do backups and restores as backup/restore has always been problematic. Export simply generates configuration commands that can be pasted directly back into the terminal. You may want to edit the export file so it only contains configuration options you want (like ...

jarosoup

1) Sounds like your DNS is broken or your upstream provider is. The hotspot is very stable and does not crash like this.

2) Clients will see this if they leave their web browser on the login page for too long without logging in. Opening up a new browser usually fixes this.

jarosoup

As an alternative to using a script, you could change the ports that ftp, telnet, and ssh use under /ip service.

jarosoup

Any updates on this? I would be curious to know if there are plans to fully support 5.4GHz in the US as it requires dfs w/ radar detection as well as transmit power control.

jarosoup

mstead, I never did get any feedback about these settings. In general, 1 and 2 I leave alone as if these need to be changed, something else is wrong and should be corrected. I turn on calibration for all radios now - it makes sense to use this. Proper power at the radio, reducing/avoiding interferen...

jarosoup

MikroTik does not support diversity, so only one antenna per radio.

Do what works, not what your friend has

jarosoup

Just in case someone runs into this problem later..version 2.9.44 fixes the radius count-only problem from my previous post. Thanks for fixing this guys

jarosoup

I'm a little confused with b/g mode and b-only mode when using a width of 5 or 10MHz. There are only 2 options for 5 and 10MHz widths, 2ghz-5mhz and 2ghz-10mhz. Using either of these appears to be b/g mode as they use the a/g rates either default or defined. How can one use the SR9 in b-only mode wi...

jarosoup

I needed to update this thread as the solution provided by Eugene does not work on the newest versions of Mikrotik. The follow code has worked well when graphing different hostspot users based on if they authenticated via RADIUS or not: /ip hotspot active print from=[/ip hotspot active find radius=y...

jarosoup

. . . I have about 10 more of these atleast that don't show current ack either, all with various versions of RouterOS from 2.9.3x to 2.9.4x... SMA If you set the ack-timeout value to something besides dynamic, the reg stats won't show ack or distance on any of the clients or the AP. Not sure if thi...

jarosoup

This might be your flash card - wait at least 3 full minutes to see if it will boot. A lot of the new CF cards have some sort of DMA issue which causes them to hang for 2-3 minutes. Worth a shot anyway as I know MT works on the net4521 as we use one all of the time for demos.

jarosoup

Just send an email to support stating what you need. Make sure you create an account on the main website as you need to buy your keys directly from MT to do this (with the extended frequency). At least this is how it used to work.

jarosoup

...
We NEVER, EVER install one with less than a -75 signal, stronger than that if the area is noisy.
...

We too have found that at least -75dB or better signal is key for stable bandwidth and latency.

jarosoup

Do the XR3 radios support channel widths smaller than 5MHz (like 3.5MHz or 1.75MHz)?

jarosoup

You need either a source-nat or masquerade firewall rule to do what you are trying to do - the internal address needs to nat/masq to an external address. Since you are using dhcp-client, you'd be best off using a masquerade rule with the source address as your internal IP subnet.

jarosoup

Let's just hope there are a few kind souls who are willing to share the MUM info with people who can't attend. You know, some of us are too busy spending money on and deploying Mikrotik to get out of town...

jarosoup

If you have more than one public (WAN) IP it seems Mirkotik picks the "highest number" one - at least after a reboot. Not sure if this is always true though. Have you tried using Torch on both the public and private interfaces to trace a given connection? Note that you have to uncheck the ...

jarosoup

Thanks for posting these links...in particular the OpenCalea link.

I know there's another thread on this but I hope all who don't attend the next MUM aren't left out on what, if anything, Mikrotik is working on for a solution.

jarosoup

What 2.4GHz card are you using? What antenna? How much and what type (size), if any, cabling between the radio and antenna?

jarosoup

Taloot, you are probably overdriving your clients. You have posted many times in the past about similar issues and seem to run into a lot of problems because you are using too much antenna gain or too much power. Try a lower gain antenna and drop your power down some. The XR2 radios work very well f...

jarosoup

Are the Zcom 900MHz cards fully compatible with MikroTik?

jarosoup

I think the one setting you are missing is the "wds-default-bridge" parameter on each of the wlan interfaces - set it to the name of the bridge interface ("bridge1" by default). Go back to the config using static WDS, manually defining these interfaces/wds-address, and adding the...

jarosoup

We are seeing this problem also. With 2 separate APs, each with a single SR2 in ap-bridge mode with static WDS, if a distant client connects to either AP, the WDS link starts flapping and will bounce up and down for hours. A reboot will typically fix this for awhile, but sometimes this happens every...

jarosoup

Okay, I've found a way around not being able to see ICMP traffic. If you uncheck the "port" checkbox, ICMP will then show up. Under 2.8.28, ICMP traffic would show a port number of 0 (as do some tunnels) - perhaps this is a bug as Torch can no longer deal with a port number of 0? It would ...

jarosoup

Anyone else having problems with torch in recent versions not showing ICMP traffic?

jarosoup

Can't say I have...interesting that they are releasing these. Do people really need this much power?!

Looks like the receiver specs are identical to the SR2/SR5 but you get more power and a ground. Hmmm.

jarosoup

Well, first off you should read the firewall and bridging manuals. Then, add you rules in the /interface bridge firewall section with the desired mac addresses to allow. Note I only suggested this as it sounds like what you are after...but in the long run, this isn't a very good solution and will be...

jarosoup

You can do MAC filtering on the bridge via the bridge firewall. Just add in the src-mac-addresses you want to allow as well as other traffic you might need to allow, followed by a drop all rule. You will probably have to tune this some before everything will work right.

jarosoup

While the trial user feature of the Hotspot has been very useful, we've found that the reset time for trial users is problematic as it's based on the time the user is active (Trial Uptime Reset). A lot of users seem to be expecting their trial time to reset at midnight, but only find that if they tr...

jarosoup

...Note that there are no longer mangle rules, and all of the hotspot related firewall rules are dynamic - they will disappear if you disable the hotspot.

jarosoup

The hotspot in 2.9 is quite different than 2.8. Don't expect everything (firewall rules mainly) to look the same :) First, start over (reset your router). Then, make sure your hotspot interface is enabled, and assign an IP address to it and make sure the WAN interface is configured properly. Don't c...

jarosoup

This is all built-in already. All you need to do is create a new user profile under Hotspot->Users->Profile with the bandwidth limitations you need, then select this profile from the "Trial User Profile" dropdown menu of the Hotspot Server Profile you are using for the hotspot.

jarosoup

Looks like maybe a builtin firewall is blocking part of the DHCP handshake.

jarosoup

You need to port forward to your devices...trying searching then read the firewall manual as this has been discussed many times.

jarosoup

We have determined that on a Geode 266MHz platform as a Hotspot router, you can get about 80-90 active hotspot users before the CPU hits 100%. This assumes no P2P traffic, no more that 2MB of traffic, and at least 64MB of RAM. You should be able to get slightly more on a RB532. With higher bandwidth...

jarosoup

I don't think you can run Hotspot and Web-Proxy at the same time.

jarosoup

You need to update to at least 2.9.25.

sergejs, does this Intel problem (I blame them, not Mikrotik for this stupid "feature") exist on Mikrotik versions 2.8 ?

jarosoup

You are best off leaving the dns-name blank - if it is invalid, it'll break your hotspot.

jarosoup

Does your Hotspot router have valid DNS configured? Does it have an Internet connection? The hotspot won't function properly if DNS can't be resolved.

jarosoup

Try the OIDs from the wireless registration table.

> /interface wireless registration print oid

jarosoup

samsoft08, your biggest limitation will be how many wireless clients (both end-users and other access points) will be connected (associated wirelessly) to your first MT-PC. If you only have a few access points and a few clients on that particular access point but maybe 50 on the whole network, you r...

jarosoup

You have to change the packet encapsulation and disable proprietary extensions - there's a blurb about it in the wireless manual if you need more details.

jarosoup

You really should try using the search...the fix has been mentioned many times.

jarosoup

If you are talking about your winbox session, it can't tolerate a bad connection and will drop you quick if you have an unreliable network connection to it (ie, connecting wirelessly with a poor signal).

jarosoup

You could be generating too much noise if you have too many APs close together - this will kill bandwidth and still reflect decent signal. Also, keep in mind that every hop you add will reduce your bandwidth by almost half. If you are using b/g mode, try swithing to b-only - we have seen over and ov...

jarosoup

It's not necessary to split the WDS & AP between 2.4 & 5 G. You could simply use Virtual AP on an interface which is also configured to run WDS as the 'backbone'. So the 'backbone' WDS portion can be bridged with hidden SSID & WEP key, and the virtual AP can be run as hotspot, PPPoE or ...

jarosoup

Are there plans for full VLAN support in version 3?

jarosoup

Have you tried tweaking the BIOS of any of these boards? Try backing off the memory timings and chipset settings (depending on what is available)...this might help.

jarosoup

Does the performance of the links degrade when this happens (latency, bandwidth)? It's odd as your transmit rates aren't changing that much...maybe it's just an issue with the drivers reading the card wrong?

jarosoup

off topic - is the changelog good this time? Yes! This is the kind of detail I think a lot of people would appreciate, including myself. Thanks for listening :) Looking forward to trying Beta3. *) wireless - added station-pseudobridge modes to do MAC NAT when bridging over station mode link; I'm gl...

jarosoup

If you want to use your 2.4GHz radios only for client connections, there is no need for WDS on them. Just set it as an ap-bridge and put it in the same bridge your 5GHz backhaul radio is in. This is what the MT image you posted is setup to do.

jarosoup

Is the MT AP running in b/g mode? If so, try with b-only mode and see if things change. We have seen some very strange issues and bad pings with CM9 radios running in b/g mode.

jarosoup

Have you bothered reading the specs for these? Take a look at both of them, they are very different. You get what you pay for...

jarosoup

Upgrade the firmware on your wrap...

jarosoup

When I said forget about WDS, what I meant is that you seemed to be confused and stuck on just *what* WDS is and what it does. An access point that uses WDS is still and access point. WDS just adds extra fuctionality. Your recent posts seem to indicate that you feel a WDS network is completely diffe...

jarosoup

wlan1 has to be station-wds mode and your Cisco must have WDS configured if you want it to be a bridge.

jarosoup

Can we have a lottery if he/she doesn't claim the prize?

jarosoup

What is wrong with your current setup? What doesn't it do that you want it to do?

jarosoup

Since you want to serve clients at the location where your Mikrotik gateway (your PC) is, you might be better off using the PC just as a router/firewall/gateway/dhcp-server/etc, and install a separate access point (RB532) coming straight off of the LAN port of your PC. If you want to support 40+ cli...

jarosoup

Check the Docs and forum for the "export" command. Note that you might want to edit this text once saved to a text doc as it contains default settings that you may not need, plus it'll be easier to read.

jarosoup

Routerboard532 for APs along with CM9 cards for radios have never failed us - great combo that always seems to work. As for how to configure it, since you have list no details on what you are trying to achieve, all I can say is read the manual. Buy the boards, and then setup your network in a "...

jarosoup

We've had this happen on wrap.2c boards. Upon a power cycle, they can get a errors on disk, requiring the disk repair - this is when they fail to reboot. Some flash cards do this more than others (Lexar, PQI, PNY have all lost our trust). Never seen this problem on Soekris or Routerboard.

jarosoup

Where is the hardware (miniPCI or PCMCIA radios)? I haven't seen any of these for sale anywhere...

BTW, it's certainly possible to do 20Mb now with Mikrotik and 802.11a/g radios.

jarosoup

Note that the dictionary attacks on SSH and FTP ports are bots running on comprimised machines. The combinations used are dictionary words and names (both usernames and passwords). If you have strong passwords, which you should anyway, it's very unlikely that these attacks will ever get through. If ...

jarosoup

One packet dropped every 15 minutes is nothing to worry about. Are you using periodic calibration on the radios?

jarosoup

You are going to interfere with yourself some if you do it this way. Two radios running on the same channel inside the same routerboard will probably cause more interference than the sectors, but between both you are going to increase your noise by a fair amount and possibly hinder your range. You'd...

jarosoup

For 3.5GHz in the US, you will need to obtain a license, most likely "experimental only", from the FCC. Be preparred to provide the exact address and coordinates for your POP location, desired radius, desired spectrum, intended uses, and possibly the gear you plan to use. An experimental l...

jarosoup

We still swear by the the CM9 as they seem to be the least problematic (for us)...for both 2.4GHz and 5GHz although sometimes a Senao 200mW card performs better for range with 802.11b in low noise areas. A lot of people overlook using quality pigtails - this can make a huge difference, especially wi...

jarosoup

Why aren't you using the MT DHCP? Try with that and see what happens.

On second thought, since you aren't using MT's DHCP, create a valid address pool and set your hotspot to that - this is part of the universal client which might help.

jarosoup

What is the signal you are seeing on the CPE side? How far away is the CPE, and what gain antenna are you using on it?

As for the bridged CPE, this can only be done when using WDS and the CPE in station-wds mode. Search around a little for this if you need examples as it has been discussed a lot.

jarosoup

< bump >

wildbill442, any word on your luck with WDS? Just curious as we are looking to try a few of these and would like to use WDS. Bad card or something else?

Thanks

jarosoup

There's no way that link will work. If it were a case of clipping the fresnel zone some for a short distance you'd be okay, but not that much obstruction. Trees are a little different than mountains when it comes to NLOS

jarosoup

Under the Hotspot server settings, set your Address Pool to none and see if that helps.

jarosoup

Your software needs to know that the signal strength in dB is a negative integer.

jarosoup

How gracefully a client hops from one AP to another can also depend on the hardware of the client. I had an old Prism 2.5 based PCMCIA card in my laptop that took much longer roam between APs than my newer Atheros based wireless card. Sometimes it can take a complete signal loss for a client to deci...

jarosoup

This might work, though 20 miles across water is asking a lot. One thing you should consider is going with horizontal polarity antennas as you will probably have better luck - they are known to work better over water than vertical. You'll be paying more for antennas but it might be worth it. You sti...

jarosoup

I setted RB112 to 200Mhz by adding 1khz resistor to R7 position and jumper on JP7. Works fine

Nice, thanks for sharing

jarosoup

Very nice to hear this. What channel widths are you using?

jarosoup

They do with 2.8 but not sure about 2.9.

jarosoup

Your public address assigned to ether1 has the wrong subnet mask. add address=81.73.132.120/ 32 network=81.73.132.0 broadcast=81.73.132.255 \ interface=ether1 comment="" disabled=no What subnet is assigned to your block of IPs? If it is not a /24 then you might want to delete the address a...

jarosoup

For this to work, you need to add a route statement on Router 2 for your client with a gateway of the inside Router 2 address and a destination /32 of your intended client IP: /ip route add destination=87.198.198.201/ 32 gateway=10.14.5.190 Since you've got a hop in the middle, you might need to try...

jarosoup

The 802.11n standard isn't going to be ready for some time now (2008?). The delay sucks, but they are doing it for the right reasons.

See here: http://news.zdnet.co.uk/communications/ ... 962,00.htm

jarosoup

Radiator works great under windows...it's quite a bit cheaper than VOPRadius too.

http://www.open.com.au/radiator/

jarosoup

I've noticed the double slashes for some time now...I don't think that's the issue. Anyways, no need to get nasty about it - be happy everything is working again

jarosoup

duh...changlog link was right in front of me

It probably doesn't matter, but I agree that not have a CF image is unfortunate. This made batching out a bunch of APs pretty quick....bummer

jarosoup

Where is the change log?

jarosoup

It could be an IRQ issue too. You might want to try to disable devices you don't need from the BIOS - extra COM ports, USB, etc. Some BIOS menus allow you to specify the IRQ for your video card.

jarosoup

Yep. I haven't actually tested to see if this is still a problem, but will try out a fresh AP. I'm afraid to disable any radios in the field because of this. Mentioned it months ago but it was assumed that my config was wrong. It seems to be an issue when a radio is bridged and in ap-bridge mode. Ed...

jarosoup

I thought it was just my laptop (winXP)...I have to click on everything twice to get it to come up.

jarosoup

Yep, I've seen this too..but with CM9 cards as ap-bridges included in a bridge interface.

jarosoup

I've had problems connecting to Mikrotik FTP using Filezilla client in passive mode...active mode works fine though.

jarosoup

:?: Okay, I'll take a stab at this... So, you want each of those 3 APs to connect wirelessly to your Mikrotik router which contains 3 Atheros radios? If this is the case, you could set the mode for each of the 3 radios in the Mikrotik to station and route the links. Or, you could try station-wds and...

jarosoup

Where these guys running any Linux servers behind this connection?

jarosoup

While I haven't tried one of these cards yet, you might want to try setting the antenna-mode=ant-a to antenna-mode=ant-b on both devices.

jarosoup

I haven't used PPPoE much so perhaps there is another way around this. I suggested Proxy-Arp as it sounds like the public address scope for the WAN port is the same as the scope that he want's to allocate on the LAN side for PPP users (where they are terminating on the same router). Since you can't ...

jarosoup

Nice

As long as the equivalent of the McRib isn't somehow implemented on MacRouterOS, we'll continue to be happy

jarosoup

If your signals are at or near -90dB you will very likely see ping problems as you are near the threshold of connectivity. I'm not sure why the Prism would work better other than the Atheros based card being more sensitive and seeing more noise and probably bouncing around on transmit rates. Can you...

jarosoup

You also need to enable proxy-arp on your interfaces.

jarosoup

Consider the following addresses (substitute your own): Your assigned serial interface IP: 172.16.1.9/30 Your assigned default gateway: 172.16.1.8 Your public allocated IP block: 10.1.1.1/27 (10.1.1.1 - 10.1.1.30 usable) A private internal block for NAT (optional): 192.168.1.1/24 Your interfaces: SB...

jarosoup

Thanks much for the info 8) Did you have to configure the card from the command line, or were you able to do this from winbox? Last one of these I setup was on 2.8.28 and had to be done from the command line... As for routing your IPs, just put the serial IP (the /30) on the T1 card, and your public...

jarosoup

if you enter your antenna gain, it will lower the power accordingly (we support TPC, not ATPC but it is almost the same thing, and it does comply with regulations) Are there plans to comply with the FCC regulations regarding this same spectrum for the US? 5.2GHz and the 5.4-5.7GHz bands will requir...

jarosoup

Montana, I would be interested to hear what model number of that new SBE card you are using is...it would be a beautiful thing if these new cards work with 2.9. Make sure you have the synchronous package installed.

mikrotik REALLY needs to update their drivers for the new sangoma cards!

Agreed!

jarosoup

I'd try swapping out the lightning arrestor as these can't always be trusted after taking a hit, even if they appear to be working. Not sure how or why this could cause you problems, but it would be the first thing I'd replace... Edit: Are your signals the same at both the AP and CPE before the hit?

jarosoup

FWIW, this was an Atheros driver that was exploited. I hope that Mikrotik looks into this as it's possible on Windows, Mac, and Linux...not good

This really sparked some interesting conversations yesterday tho

jarosoup

You'll have to extract noise-floor and ccq with scripting....for now anyway.

jarosoup

We aren't having any problems with SNMP for wireless interfaces on 2.9.27. As mentioned, your OID may be different as the index may have changed.

jarosoup

I would assume that your connection limit is hanging up all of your clients...if you disable this, do things start working again? Might want to double check that this rule is setup properly.

jarosoup

I think you need to post a little more information about your setup. Are you using webproxy? What kind of firewall have you setup? Using torch and/or the traffic sniffer, you should be able to determine where your traffic is hanging up. Also, what type of Internet connection is this hooked up to (T1...

jarosoup

Add some log rules, like one right before your drop rule, to determine what is going to get dropped.

jarosoup

Reset your config and try it with default power settings on your radio (ie, don't change anything). I've also read that reducing the transmit power to 23dB helps. You might want to search around for this particular Senao radio as many have had issues with them.

jarosoup

There's a "Hotspot Fix" package on the main download page - I think this is what they are trying to say

It's still bothering me that we aren't having this problem...

jarosoup

Is the address that shows up on the status page in the dhcp lease table (is it someone else's lease, or an IP that hasn't been offered yet)? Strange.

Under the hotspot profile you are using, do you have the Hotspot IP defined there (it works without one)?

jarosoup

It's always been like this. If it causes you problems, don't use it. Use idle-timeout instead.

jarosoup

We have never seen this issue you are describing on our hotspots (have been using mt hotspot since 2.7). Are you using the standard status.html file? Can you post the line that contains the IP address output? Perhaps you need to "refresh" this file by loading a default one of a new 2.9 ins...

jarosoup

Those are all of the old 2.9 beta releases...before 2.9.1

jarosoup

Interesting. We aren't having hardly any issues with 2.9.27 and hotspot. We are running into the problem when someone has lost their lease, but is still logged in, and then can't login again due to only allowing 1 session per user...it doesn't happen often, but does happen. Other than that, this has...

jarosoup

At one time, Rate-Limit only worked for PPP sessions...has this changed? We've been using the following for bandwidth allocation with hotspot users via radius without issue:

Ascend-Data-Rate (Upload)
Ascend-Xmit-Rate (Download)

Give these a try

jarosoup

The OIDs listed in the registration table contain the MAC address of the clients (you have to convert to hex). So they should never change unless you swap out the radio card of the client you are monitoring from the reg table. We've never had one disappear on us with 2.8 or 2.9.

jarosoup

You would bridge the 2 cards, and they could have the same ssid, but only if you use static wds as if one is in station mode and the other in ap-bridge mode, they would associate to each other. You could use acess lists and stp to get around the loop, but a more "sane" solution would be to...

jarosoup

I can't offer a solution for scripting, but this type of data is what SNMP is for. Check out MRTG or Cacti - you can graph signal information over time which would be much easier to read than log outputs IMO.

jarosoup

As mentioned before, try a different channel. 2.4 (18 dbi mode) Is this the omni gain? If so, as mentioned, if the elevation of the 2 links is different, this may be your problem (flat signal). You have to wonder if the recievers in the radios are fried if you tested these links so close together wi...

jarosoup

Windows doesn't always report accurate wireless connections...infact, you should never base a connection on this. Get Netstumbler or some other similar utility and check your signal with this.

jarosoup

It's probably the Senao radios you are using. If you would have done any searching at all, you would have noticed they seem to be very hit and miss with people. As for the new extensions, again, searching around and reading various posts recently you will see that there is some talk about it. In a n...

jarosoup

Greetings :) I haven't had a chance to load up a Mikrotik AP with 50 clients yet...so can't really comment on this much, but seems like it should be fine and I think others have come close to this..comments anyone? This would get you there if your clients are evenly spread around your tower (to bala...

jarosoup

You might be able to get around your problem by disabling onboard audio, parallel port, extra com ports/usb, and anything else that needs IRQs from the BIOS.

jarosoup

Even with 4 separate APs (4x 90* sectors - highly recommended over 4 radios in one RB500) with perfect conditions and optionally nStream, I don't think you'll be able to achieve 500 clients. You might want to consider breaking up your network and adding some micro-POPs off your main tower.

jarosoup

Okay, notcing a new log entry on one of these networks that we upgraded today: 15:42:16 hotspot,info,debug joeblow (192.168.2.164): logged out: host removed: overrided by static entry Just curious as to what conditions trigger this? I've only seen a few today like this, vs maybe a 100 logouts or mor...

jarosoup

I wanted to update this thread as I've recently upgraded (from 2.9.26) to 2.9.27 on a few of our hotspot routers. From the changelog: What's new in 2.9.27: . . *) fixed hotspot to handle lost leases in a more graceful way; . . Well, this indeed seem to have fixed this issue...thanks Mikrotik, you gu...

jarosoup

@MikroTik: Perhaps MikroTik would want to take a look at this code to decide if to include it in some future version? (GPL) Because it's a fact that we can explain, WHY this doesn't work. But as Marco (and others) have said, many cheeeeaapo wireless clients do provide at least partial work-arounds,...

jarosoup

Did you ever try testing out other channels? What do ping tests and bandiwdth tests look like at 2AM? What does the registration table and the reg stat look like early in the morning? I still think your problem is RF related. Based on your registration table, some of the link's signal strengths, and...

jarosoup

tx rate times are times since last use of that tx rate i guess.

I think this is it...makes sense after looking at a few APs. Thanks

How close are these CPEs to each other? As in, are all these in the same neighborhood?

jarosoup

From the 2 clients: tx-ccq=36% rx-ccq=55% tx-ccq=35% rx-ccq=54% While not horrible, these should be a little higher for a solid connection. What type and gain are the antennas you are using on the CPE side? There seems to be a weakness on the CPE side as there is quite a difference between the clie...

jarosoup

I don't think this would be a good idea. Would you want to be responsible for someone else getting exploited because you weren't allowing them to get critical updates from Microsoft? Why not tell them to set their computers to prompt before downloading and installing new updates?

jarosoup

Hmmm. Can you post the output from "/interface wireless reg print stat"? Maybe just include 2 or 3 of the problematic clients from this output as all of them will be too much. Also, I'm not sure if you've mentioned this, but have you tried other channels? Your ping output you posted shows ...

jarosoup

Do you have all of your ack-times set to dynamic (they should be if your clients are at different distances)? I can't easily find the frequency you are running...is it 5GHz or 2.4GHz (a or g mode?)? Also, what antennas are you using?

jarosoup

I don't think bridging has anything to do with your problem. We use WDS for a lot of networks, and they typically work well if interference is low, we have good signal, we use good pigtails and antennas, and do bandwidth control to reduce flooding the APs. Here's a ping from a gateway to an AP 3 WDS...

jarosoup

sten, thanks for the correction....learn something new everyday

The only other thing I see is that on your AP, you don't have your WLAN set as a port on your bridge...not sure if this is causing your problem though or is even required, but we typically have our wlan in the bridge.

jarosoup

Your station A doesn't have wds-mode or wds-default-bridge set.

jarosoup

What version did you upgrade from?

jarosoup

You're welcome

jarosoup

Nope, this is for Nstream only.

jarosoup

Your basic-rates should not be changed...set it back to 6Mb. Have you used torch and looked at the firewall connections to see what's going on on your network? Sounds like you are either overloaded with traffic, or you've got signal (interference or hardware) problems. Other things to try are settin...

jarosoup

I updated one of our RB532a running 2.9.17 by uploading the individual 2.9.27 packages and everything worked fine for me. This is a dual-radio AP...will report back if we notice any problems with it.

jarosoup

Hello all. My recent quest to resolve some problems with clients getting logged out of a MT Hotspot when connected to a MT AP (in b mode only)has brought me to research a few of the wireless parameters available in Mikrotik: 1) disconnect-timeout (time; default: 3s) - only above this value the clien...

jarosoup

I would guess that there are currently both options as it is a new feature and they wanted to leave the old settings available in the event that there are issues with the new setting. Since it is new and hasn't been tested much, it's nice to have the old setting to revert back to. Now, if this isn't...

jarosoup

Since you've changed a few thing before this happened, I think some of your changes have broken your hotspot. Typically the only time a hotspot will break is if you change around your interfaces, mess with IP addresses, firewall rules, or broken DNS. I don't think it's possible to break just the red...

jarosoup

I would think for gig-e, you'd want a Pentium based board or a healthy VIA based board. There are a lot of new VIA boards out there, but some have problems when saturating the PCI bus. We've never run into this with ethernet cards, but have also never tried gig-e with the thin-routers. I think there...

jarosoup

Actually, these do exist (some will hold up to 4 motherboards). Lemme see if I can find the linky...or if someone else knows who sells these? Edit: Here they are: http://www.casetronic.com/Products/Rackmount/1U-Rackmount/1U-Rackmount.asp - check out the Travla or Hawk series. There's another company...

jarosoup

Yes, hard to troubleshoot indeed :? Here's some new info about my problem. I've just discovered that if I leave a winbox session connected to this router, and keep a terminal window open inside winbox, this problem goes away. If I then close winbox, reopen it and don't open a terminal window, it com...

jarosoup

While not a rackmount, the thin-routers that wisp-router sells work quite well for ethernet only applications and the price is right. You'd have to buy a dual-port gig-e card but there is room for one PCI card. Portwell.com has got some nice rackmount computers that are probably just what you need, ...

jarosoup

Sounds like a DNS problem. Double check that your DNS is functioning properly. Also, try setting dns-name="hotspot1.____.com" to blank.

jarosoup

I wanted to revisit this post as I am still noticing this problem on a different router now. As for the router I originally was posting about, the problem magically went away after a number of reboots and months of running. I've got another router with a very similar config that is starting to do th...

jarosoup

Alternatively, you can set the ssh, telnet, and www ports to something different than default in /ip service. As mentioned, you could end up blocking yourself. As a side note, alot of these ssh scans originate from compromised linux servers and you may only ever see them try to login one day. So, yo...

jarosoup

Could just be some nasty interference too. Have you tried other channels?

jarosoup

the way i see it is that no one wants to attempt to answer a difficult question. LOL

Or that you haven't searched on the forum. You can do this with proxy arp though I haven't tried it on 2.9 yet.

jarosoup

I think your radio cards are causing you problems. I've seen a lot of posts with people having problems when using the new Senao radios...

jarosoup

Thanks for sharing this Eric

I'm still looking to do traffic shaping on a transparent bridge "the right way" so this should be useful.

no need to create separate up and down queues.

I thought this was required on a bridged traffic shaper?

jarosoup

You could always just disable the Bandwidth Test Server while you aren't using it

Not sure if there are other ways to login to the bw server tho.

jarosoup

Welcome to the Internet. Try searching around as this has been discussed many times. Google also knows about this

jarosoup

If he is, it's probably a default gateway problem.

jarosoup

We have been needing this feature for a few years now. Come on Mikrotik, can't you put your Dude developers on this for just a week?

jarosoup

You need to set the "IP Pool" setting under both the hotspot and the users profiles to none. This should fix your problem.

Edit: You beat me to it

jarosoup

What about setting static ARP entries for your customers? If I had customers intentionally "playing around" like this on my network like this, they'd be gone.

jarosoup

Thanks for posting this info NZLamb and changeip

I'll give this a try and see what happens. Hope it goes okay as these routerboards are not easily accessable! I agree on the ramsinks...I wonder what the temp threshold is on these at 330MHz.

jarosoup

Right now MikroTik RouterOs e-mail client doesn't support SMTP authentication.

Are there plans to implement this in the future? We've never used the email in Mikrotik because of the lack of this feature

jarosoup

Try to enable periodic-calibration as I think the default == disabled.

jarosoup

Giepie, I think you missed the question. 2.8 does not work on a RouterBoard532. You can't downgrade from 2.9 to 2.8 on one of these boards. rastod, Try upgrading to a newer version of 2.9 (like the current one). They have fixed some of the problems with Prism on the later versions. Can't confirm tha...

jarosoup

add chain=dstnat in-interface=ether1 dst-address=000.000.000.000 protocol=tcp \ dst-port=8080 action=dst-nat to-addresses=10.20.40.254 to-ports=8080 \ comment="" disabled=no add chain=dstnat in-interface=ether1 dst-address=000.000.000.000 protocol=tcp \ dst-port=3223 action=dst-nat to-add...

jarosoup

No, the dst-address you are using in your firewall rules. Try both your dst-nat and walled garden rules *without* a dst-address of all zeros. I believe if you leave the dst-address blank, it implies all zeros (0.0.0.0/0). Just try the walled garden with only a source address=your internal one and th...

jarosoup

I hate to bump this, but I'd really like to see if anyone at Mikrotik or users here have any input on this ? Please? Glad I'm not the only one that finds this to be a problem...

jarosoup

You need to add the IP address of the internal device you are dst-natting to to the walled garden. Not sure if you can define both the IP and port, as I've run into problems with specifying a port (although this was on some older versions). The problem is, your traffic is redirecting properly from t...

jarosoup

Okay, that would explain the lack of output. Sorry, I'm not too up to par on scripting yet

Anyway, your suggestion works great. Appending count-only works as well - which is exactly what I needed. Thanks a bunch for the help Eugene

Search found 596 matches