MikroTik

OnixJonix

Thanks all!
I deside to go with MT devices in my LAN network, but on gateway it seems i will go with Palo Alto.

OnixJonix

Thanks boys again....we all know CISCO is one way to go... (but not mine...) but this is not idea of topic- more focus on MT! Do you have large scale network running on MT? What i need to consider going with MT? But as i read... 1. Not realy good support and documentation (except forum of course) 2....

OnixJonix

Very good discussions! Thanks all, but i hope we keep going... and give me more what i should consider going with MT. Most of all i knew but, still what i take from this: 1.MT is capable of everything 2.Not so easy setup 3.Support is struggling 4.Need additional vendor product on gateway for DPI and...

OnixJonix

why so many IT companies are not even advising to think about MK I don't know why you think that, maybe you had bad experience with a specific company that is very stuck in the past. Just think about the fact, that MikroTik is one of the largest companies in Latvia and is exporting the high end mod...

OnixJonix

First start with the requirements. What does the SLA look like? Who is going to maintain the solution? Installation? Budget? Choosing hardware is like one of the latest steps do perform. I assume you are referring to industry standards!? Yes i mean industry standarts! Without details - My main ques...

OnixJonix

What's a standart?

"Indystry standarts" -In this case i mean the mainstream high end devices!

OnixJonix

Hello! Please help with your opinion... I love MK and have used it in many places, but all projects was small scale! Now i have chance to plan city network and slowly build it. (Main office, ~20 different branch departments, shoolls, etc) No talks about budget at present. Companies who want take par...

OnixJonix

Can't they just route you that new subnet via the old address on a single interface?..

Didnt thought about that! I will ask in mondey... this can be an option...
Thanks!

OnixJonix

Hi! Need some help/suggestion!! I have some legacy IP pool with one IP address, but now we grow and need some extra IP! My provider can give me some extra IP, but from another IP range! On old IP (ether2) we have many VPN so it will be hard to change now, so i want to leave it - and keep using it! O...

OnixJonix

For the Dude notifications SYSLOG TYPE please add BSD sylog possibility like in ROS logging, for option to use Syslog Facility and Syslog Serverity!
Thanks!

OnixJonix

Something like TORCH on firewall rule!
It would be great if i can select firewall rule and click on torch - and see what traffic is triggering on that rule!

OnixJonix

Big problem...
Updated Mys CCR (to 6,43rc27) an now stucked outside! All is running but cant connect - wrong username or password??? A bit of PANIC!!!

------------------
Sorry! Had two winbox on my pc!! Just need new winbox! Sorry!

OnixJonix

For anti slipping we use construction tape which - is used for concrate floor perimetere for elastic barrier.

OnixJonix

Hi!
Installation on chimny ~50m hight! We have monted SXT (x3), Mant (x1), DynaDish (x3). We welded special brackets, becouse previous version what we monted on aluminium pipe, was very unstable and was moving in the wind! This is very strong bracket no moving at all!!

OnixJonix

Hello!
Im confused! For other purpose checked TORCH tool and saw interesting traffic with no SRC or DST IP address and ports - but pretty heavy traffic!! Could somebody can explain??

torch_traffic.PNG

OnixJonix

Resolved with SNMP With SNMP walk get OID with my current channel running! Creat the function (named: WifiChannel ) and put in appearance ( WiFi_Freq: [WiFiChannel()] . So now i know what frequency my AP is running! Function WifiFChannel: oid("iso.org.dod.internet.private.enterprises.mikrotik.m...

OnixJonix

Sadly no answer there!! Cant see the possibility to split output!!

OnixJonix

Hi! Want to show in label info of wireless link, but dont want all of it! It is possible to show only some entries?? For example want to show only channel and overall-tx-ccq! [ros_command(":put [/interface wireless monitor numbers=wlan1 once]")] status: running-ap channel: 5600/20/ac/DP wi...

OnixJonix

Demn!! So stupid... now it is so obvious!! Thanks man!! In the map view add device comments and some notification mark that shows that comments are added, what you can see when you move mouse over - like comments in MS excel for example!! Sometimes it is necessary to comment some configuration if yo...

OnixJonix

In the map view add device comments and some notification mark that shows that comments are added, what you can see when you move mouse over - like comments in MS excel for example!! Sometimes it is nessessary to comment some configuration if you noticed some problems or give some comment about conf...

OnixJonix

Make Address List from DHCP lease table!!
For example - select multiple LEASE entries and put them in address list (then you can use for firewall)!! Something like in wirelless - you can add entries from registration table to access list!!
Thansk!

OnixJonix

Also Different Appearance labels for different type of devices!!

OnixJonix

No certificates at all!! Maybe thats the problem?? Another guess- CAPs with duplicated MAC addresses. Do you happen to use backup/restore to clone configuration of CAP devices? Have ~50Caps - in Capsman Radio list shows all, and in the list no dublicated macs!!! This was my first gues, but seems th...

OnixJonix

caps,error removing stale connection [E4:XX:8C:D4:11:99/18/b823,Run,[E4:XX:8C:D4:11:99]] because of ident conflict with [E4:XX:8C:D4:11:99/18/e84d,Join,[E4:XX:8C:D4:11:99]] You might be using the same certificate on multiple CAPs. Take this as an educated guess, not a definitive answer. No certific...

OnixJonix

Please come up with CAPS logs explanation!!!! Stuck with capsman problems - see problems in log files, but not sure what it mean an what direction look for!! for example: caps,error removing stale connection [E4:XX:8C:D4:11:99/18/b823,Run,[E4:XX:8C:D4:11:99]] because of ident conflict with [E4:XX:8C...

OnixJonix

Same with me! Cant find problem! My caps are dissconnecting and reconnecting!!
Cant find log description!! Mikrotik team what the log mean??? What causes that???

OnixJonix

I have ~50Caps in wide area! I have problem - my clients are disconecting for ~10 seconds and then connected back, but clients connection is broken!! Read a lot of topics who suggested -all caps with Static ip -try to make all caps work in best channell Still problem!! I notice my log - marked with ...

OnixJonix

1. (Winbox) In CapsMan REGISTRATION TABLE add column with client IP and Active Host Name like in dhcp server lease section!!

2. (Winbox) In DHCP Lease section when pressed right mouse button on client add Torch and Ping option!!

OnixJonix

Realy noone is monitoring your WiFi?? Any Ideas? I tried all listed services - noone is accurate for caps!!

OnixJonix

Hello! I have a lot CAP deployed in my infrastructure, all work fine (Thanks Mikrotik for great solution)!! Now i want to add them to monitoring system! The problem is that i monitor via DUDE for example PING, but there are many cases where ping responds, device works fine but CAP isnt working for s...

OnixJonix

Look at Profile!! Which service is using resources! There is no way that your CCR struck on 10-15Mbps! Impossible! It can handle lot more!! Try newest version! Seems like a bug or hardware problem to me! Make fillter in firewall - limit connections to one IP! Search for - prevent DDOS in this forum ...

OnixJonix

Mikrotik can do the job! Order for all your devices vectors!! The Dude map will looked great!

OnixJonix

CRS125 also will bee bootable in dual boot?? RouterOS and SWos??

OnixJonix

Vector graphic for dude - all Mikroti Devices???

OnixJonix

Same problem on CCR-1036 RouterOS 6.37.rc13!!!! Someone have found problem?!?!??! Traffic cant catch on firewall!! Dont show in Tourch!!! Most packets are damaged! I found that the IP is from Cameroon and some connection with Online Money MTM... i was thinking- discovered the problem - mobile phone ...

OnixJonix

Hi!
i have readed the manual about both of them! Cant understand the output! What is good what is bad! Maybe someone can explaine what to look for! if im looking for clearest channel?!!
For example output: (hisotry)

spectrumhistory.PNG

Scan:

scan.PNG

OnixJonix

Hi! Have built a Capsman controller and added 30 CAPS all is great! The problem is with update - the option in winbox- UPGRADE in Capsman dont work! There is some secret or it doesnt work (yet)?
I run 3.7,,, on Capsman and 3.5.... on CAPS?! Caps ar not all the same model!
Some ideas?? some script?

OnixJonix

No problem at all I using on two places 260GSP powering DynDish it is working for I while. Of course on 260GSP is connected more device on frist one 2xBaseBox and LHG5 on second plus two more 911ac it is workiign no rpoblem at all after firmware 1.16. If you buy 260GSP update to 1.16 or new version...

OnixJonix

Oh! What have i looked up!! Realy its 1A so it means with 24v - i can power up 24Watts! So it should go smooth! Still someone tried?

OnixJonix

Hi! My goal is using RB260GSP switch and using its built in POE-out ports to run DynaDish5! Question is - it will work? By specification i can read that DynaDish5 need 16W, the RB260GSP on each port provides only 500mA! RB260GSP is capable work with voltage 8-30V so by calculations with standard 24v...

OnixJonix

Do the routers 1 and 2 have ethernet switch chips in them? It looks like you're using routers 1 and 2 more as switches than as routers, so perhaps you should build the vlans in the switches directly - it would give more performance. I built some multi-vlan access point Mikrotiks once (back before t...

OnixJonix

Well, you could let two ports on Router1 be switched ports - e.g. set ether2 master=ether1, and then connect the trunks to ether1 and ether2 This way, traffic from Main -> Router2 will just switch through Router1 at wire speed, and none of the VLAN stuff will be interfered with. You'll need to remo...

OnixJonix

Do the routers 1 and 2 have ethernet switch chips in them? It looks like you're using routers 1 and 2 more as switches than as routers, so perhaps you should build the vlans in the switches directly - it would give more performance. I built some multi-vlan access point Mikrotiks once (back before t...

OnixJonix

Your configuration looks good, to understand the problem, can you post your configuration of the 3 routers? Another question, the trunk port and access ports is working fine at Router 1? 1. If i connect ROUTER2 to MAIN router directly then everything is working fine! 2. Access ports work fine on Ro...

OnixJonix

Hi! Problem with VLAN in bridging mode! Cant passthrue vlan to next router! Example: main router - router1 - router 2 Problem - with router2 - cant give out access ports and passthrue both vlans to next router! Mikrotik_to_mikrotik_VLANS.png my router 2 configuration i think is also OK! Maybe someon...

OnixJonix

Real problem! ~40% off my traffic is the packets from 129.0.0.88 and i cant block them! The packets is incorrect or out of order!
Please help me!
And how it is possible - then firewall cant detect and block IP?!??!?!

OnixJonix

Mistic! I have using mikrotik for a long time, and i think i know how to block IP, but this is stange! I capture packets from PACKET SNIFFER ir my router and find out some strange IP what i want to block! I block ip by firewall - did on INPUT, did on Forward! Put the rule on top of all! Nothing on m...

OnixJonix

Be aware of lot of CPU usage! Simple queues not necessary if you use right Queue tree rules! Its not the right method anymore to limit user by Mbps! Better is to QoS with mangle and queue tree rules to use traffic in right dirrection, but if bandwidth is open - let them use! my opinion!

OnixJonix

huntah - all work just fine! Thanks man! Port you want make a HYBRID- for example port 2 with UNtagged VLAN ID 88, and Tagged VLAN 200 and VLAN 300 /interface ethernet switch port set 2 default-vlan-id=88 vlan-header=always-strip vlan-mode=secure /interface ethernet switch vlan add independent-learn...

OnixJonix

I asked this question, because in one of MUM presentation (page 34) there is sad that on these switches cant make HYBRID ports, but i cant see it in documentation... so i hope someone make it clear!
link to presentation:
http://mum.mikrotik.com/presentations/I ... nowski.pdf

OnixJonix

Can i make Hybrid port on RB750 with port SWITCHING? I need connect RB to UNIFI AP.
I need to make 3 different SSID with different VLANS and one manegment network without VLAN! So bassicly i need that my ether2 have - VLAN-200, Vlan300 - as tagged and Vlan400 as unntaged

OnixJonix

I have one mistake in sheme!
So the problem as i see is Hybrid port! I need from router 1 to AP - where there is 4 SSID each with different VLAN, but managment network is UNTTAGED! So if i understand correct this is HYBRID port and this switch cant do it?

OnixJonix

Sorry, but dont work this way!
As i understand if i want ACCESS port i make on PORT - AlwaysStrip? And thats all? Or there is some other trick?

OnixJonix

Please sombody?? Why there are no documentation! If it is fully managed switch then please solve this simple task!

OnixJonix

In the manual (http://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features#Port_Switching) there is shown only example of incoming one tagged traffic then leaving only unntaged! I can't figure out how to forward tagged vlans? For example (see attached image) 750switching_problem.jpg Dont want to make ...

OnixJonix

Webproxy works only on HTTP - Youtube for example ir HTTPS! Encrypted traffic cant be filtered with webproxy! You can try to find L7 filter! can try mangle the packets and when the connection reaches some limit - for example 8MB then you can assume that is some streaming! Of course it can be also so...

OnixJonix

Maybe you could use an access rule with the web proxy which is transparently applied only for your "certain group of users" however you decide to identify them?

http://wiki.mikrotik.com/wiki/Manual:IP/Proxy

Proxy cant take care or SSL, so all HTTPS pages cant filter with proxy!

OnixJonix

Great! It worked thanks for reply!

OnixJonix

Hi!
Stuck in maybe simple problem! How to connect two routers with different WAN, simple need to use the same domain (DNS and AD server)! Look at sheme below! Thanks!

2routers.png

OnixJonix

Hi! I need to use Link aggregation (Bouding) between 1100AHX2 and three CRS125! So i need links between: 1100AHx2-3,4port to CRS(1)-1,2port 1100AHx2-5,6port to CRS(2)-1,2port 1100AHx2-7,8port to CRS(3)-1,2port In CRS switch options i have alos TRUNK so what is the best choise and the main difference...

OnixJonix

Try on vpn internal interface set proxy-arp! Without it arp dont work so cant get ip to ping between interfaces!

OnixJonix

But if i have more than one Bounding interface where i need to run same Vlans? Can i then add both boundings to bridge? Or what? Thanks!

OnixJonix

Make firewall rulle from pptp subnet to print server! Make in both ways - to printserver and from printserver!

OnixJonix

I want to divide jobs! Next week i recieve 2peaces of 1100AHx2 so i have recourse! But my aim is to divide jobs - one for wifi, second for wired! Becouse my wifi infrastructure have completly diffeent queues and access to my intranet recourses!

OnixJonix

Im confused! I need to extend my network and want use two mikrotik routers, becouse for one device is too many work (load -80-100%) - i want that my wifi control (radius, traffic shaping, firewall) works on other router, but rest of my network works with wired client! Suggest the methods that i can ...

OnixJonix

I'm sure that's just the wrong URL. DHCP has nothing to do with that

Try here: http://www.mikrotik.com/docs/ros/2.9/ip ... ent#7.53.7.

Best regards,
Christian Meis

Thanks, but seems i need to gether more information, befor i can understand this freaky manual!!

OnixJonix

You can setup transparent-proxy to redirect all HTTP requests to the router proxy,
http://www.mikrotik.com/docs/ros/2.9/ip/dhcp

For what purpose is DHCP in mean with this transparent-proxy??? Or you made mistake with url????

OnixJonix

Hello!!
Have a big problem- i block URL (IP) but user change Proxy server in Browser options and by-pass my block!! I can't block all Proxy, becouse they are too many?? There is someone who can help me with that?
Thanks!!!

Search found 68 matches