MikroTik

zakynthoswifi

Set up a vpn between them

zakynthoswifi

Super !!! Thank you very much
Is working like a charm!

zakynthoswifi

sindy plese confirm me that you mean to change my rules from inputo to prerouting...

Thanks

zakynthoswifi

Load Balancer config /ip firewall filter add action=accept chain=forward in-interface=pppoe1 protocol=ipsec-esp add action=accept chain=input connection-nat-state=dstnat connection-state=established,related in-interface-list=WAN add action=accept chain=forward connection-nat-state=dstnat connection...

zakynthoswifi

Hello Sindy thanks for reply! My apologies i forgot to say that i have 2 routers involved in this scenario. 1 St MT is acting as loadbalancing 2 nd MT is acting as a PPPoE server Hotspot SSTP Server And l2tp Server i have NAT in both routers enabled The mobile phone is trying to connect via mobile d...

zakynthoswifi

Hello friends, I've trying almost about 7 months to solve a problem... I use PCC loadbalancing with classifier set to both addresses and ports but this blocks my l2tp vpn connection on my phone, but i can pass sstp and connect with other MT devices. Is there any solution without change anything on m...

zakynthoswifi

Hello,
I can't connect to your btest server...
it says connecting and after 12 seconds disconnected...

zakynthoswifi

You have to configure one SSTP server in your cloud CHR (or you can buy one routerboard and configure it to your home as SSTP server) with static ip address or ddns service, then you can simply create on each mikrotik site one sstp client pointing to your sstp server and boom! just configure static ...

zakynthoswifi

Try to change your mtu values.
For this type of clients personally I don't connect them via pppoe but with static ip address given via my radius server to limit each one of them and for expiration purposes.

zakynthoswifi

maybe with proxy you can do that...

zakynthoswifi

Hm...
If i catched this correct... all you need to do is add a static route on mikrotik for R1 network.

/ip route
add check-gateway=ping distance=1 dst-address=192.168.1.0/24 gateway=192.168.2.1

Remember to configure firewall of edgerouter to accept connections from wan interface

zakynthoswifi

Chris you're right I removed the "LAN MASQUERADE" rule and everything worked ! The lan address-list was specifying all of my lan subnets, without this i couldn't access any of my other lan subbnets i.e. from 192.168.88.0/22 to 10.100.10.0/24 was unreachable. I dont know what changed now bu...

zakynthoswifi

/ip firewall nat add action=masquerade chain=srcnat out-interface=ether0 add action=masquerade chain=srcnat out-interface=ether1 add action=masquerade chain=srcnat out-interface="VLAN WAN CONN 3" add action=masquerade chain=srcnat comment="Lan Masquerade" src-address-list=lan I ...

zakynthoswifi

Yes my masquerade is very loose I know that...
I’ll post an export later this day. Thank you

zakynthoswifi

Hello , I’m using librenms for snmp and syslogging of my devices. As always 😕 I’m experiencing a strange problem . Let me write my topology... My core router up is 10.100.10.1 One of my client’s up is 10.100.10.6 And all of my clients are connected via pppoe When I enable on my client’s side remote ...

zakynthoswifi

Hello,
after some research i can see some suspicious DNS entries, are they normal?

mtkdns.jpg

zakynthoswifi

OK!
Does anyone knows a box that can do the job?

zakynthoswifi

Hello, Is possible to conver onboard serial port to alarm input and have email notification? I'd like to have alarm supervision for door open, water flood, fire alarm,AC power outage,Low battery etc on my remote cabinets. I'm running a wisp service but without luck on remote supervision of my cabine...

zakynthoswifi

contact support, system failure, please send supout file to mikrotik support.
Have you done that already?

Yes I’ve done it already

zakynthoswifi

Router: CCR1009 Problems: PPPoE server running on router, after 7 days uptime start's to loose clients (disconnection messages and full breakdown) OSPF from full to down and after 5 minutes it come's back to full. SNMP over Librenms Sensor under limit for FAN rpm's (it goes to 0 from7500 rpm) I saw ...

zakynthoswifi

im getting this /ip dhcp-server network print Flags: D - dynamic # ADDRESS GATEWAY DNS-SERVER WINS-SERVER DO.. 0 ;;; defconf 10.10.3.0/24 10.10.3.1 1 ;;; hotspot network 10.10.4.0/24 10.10.4.1 note:the subnet 10.10.4.0 is the hotspot Ok under this menu add the missing dns-server value with 10.10.4....

zakynthoswifi

please open terminal and type

/ip dhcp-server network print

and give us the output here

zakynthoswifi

Hello,
Does anyone has a success story for superchannel on most country restricted channels?
I'd like to try 5.4 GHz but is not working ... I'm setting everything correct but no luck.
My station is sxt lite5 and my test country is bermuda

zakynthoswifi

No,
under the section i told you only.
DNS under hotspot is to give to your hotspot a unique dns domain name (landing.myfasths.gr)

zakynthoswifi

Under ip>dhcp server>networks did you specified dns servers?
For me that was the problem for some devices

zakynthoswifi

It seems you have default route over vpn. Disable it and you will be fine

zakynthoswifi

disable fasttrack

zakynthoswifi

Did you set up NAT correctly?

zakynthoswifi

Although am not sure, inside your dhcp server network add under DNS your hotspot address 192.168.87.1 so your client gets a DNS... Bingo! Zacharia you are right, If you don't specify DNS on your dhcp server you wont be able to open hotspot landing page automaticaly, in most devices will open but so...

zakynthoswifi

The problem is that unms (locks) your first wan ip address and then when your wan ip changes you need to remove the rsa key from each ubiquiti device and make reconnect. I advice you to make a vpn tunnel from your vps to your mikrotik router, after that you need to change on every ubiquiti device in...

zakynthoswifi

try to masquerade all your lan ip addresses.
did you have configured your routes correctly?

zakynthoswifi

+1 Please remove torrent support, is the only reason to turn back on cisco routers...

zakynthoswifi

try removing dns name of your hotspot.

zakynthoswifi

please attach your wireless config here and answer all of my questions above in order to help you

zakynthoswifi

give me an example of configuration with mantbox19s ac without loss of packages with new Normis protocols please. Since I have 20 mhz free there are many interferences. You said (i think) that you are deployed an ptp link, so WHY you are using mantbox 19 ? Is a sector antenna that covers 120 deg. p...

zakynthoswifi

Please DO NOT use pptp. Is very unsafe protocol. Personally I was getting a very big ammount of fake connections per day from random attackers.
Instead use SSTP!

zakynthoswifi

please post a photo of your sfp

zakynthoswifi

My WISP network. (under construction cable managers filled patch panel)

IMG_2718.jpg

zakynthoswifi

No the problem is still there

zakynthoswifi

Hello
I don’t know where to write my problem .
Please arrange a fix for tapatalk MySQL error .
Is not tapatalk’s fault

zakynthoswifi

Hello, today here in zakynthos we had an power outage and after that one of my customers routerboard gets this error. if the port is damaged by a thunder is this a normal error or something else is happening? I was getting this error again in the past but with a reboot os pord disabling and re-enabl...

zakynthoswifi

try to disable your firewall drop rules and keep an eye on it it must be fine...

zakynthoswifi

I'm a WISP in Zakynthos island
www.zakynthoswifi.net

zakynthoswifi

when i disable user-manager from packages the radius started counting bad replys from my other (new) radius not timeouts as was before disable the user manager

zakynthoswifi

Hi Merry Xmas,
I can suggest you the RB3011 or RB1100AHx4. Both of them are powerfull enough for your job!

zakynthoswifi

Hello and merry chrismas I have a RB1100AHx2 with radius manager and loadbalancing over 4 wan. The problem is that now i have another radius manager (not usermanager but dma) to another network connected via vpn (i have set the route and other parameter on the vpn client side rb1100ahx2) and after a...

zakynthoswifi

I have CSS326-24G-2S+RM with Switch os , I also have a L5 licence for Ros can i netinstall ros on this switch?

zakynthoswifi

upload here your config to help you

zakynthoswifi

I read in the specs that the total current flow is 2.8A@24V and 1.4A@48-57V. This limit is because the included power supply can't provide more amps, or is hardware limit? If i Connect an 10Amp 24v power supply, will this make the total current limit value higher? I want to connect 4 PoE devices tha...

zakynthoswifi

Hi, i'm running a speedtest on loopback address and the resoult is this ccr1009 speedtest.png Is this resoult correct? also if i run a speedtest from a rb3011 with fiber uplink connected directly to ccr over 1G sfp i'm getting 459,32 Mbps max (one direction) if i setect both directions then i get 30...

zakynthoswifi

Hi,
Is possible for this PoE switch to work with 12v? I don't mind if the connected poe equipment is powered with 12v

zakynthoswifi

Hello,
Anyone who has the same problem? I can't mass-upgrade RoS from dude...

zakynthoswifi

check the dma radius manager www.dmasoftlab.com

zakynthoswifi

Hi tom,
I'm getting after a speedtest on your server several incoming attempts from port scans from your ip. please check your router... currently I have blocked your ip. Thanks for this server

zakynthoswifi

Hello, recently i've conected one remote location of my wisp company with my core network via l2tp. The problem is that when vpn is connected everything blocks, my network became transparent on both ends i can see all of the devices, of the remote location on my core location from winbox neighbours,...

zakynthoswifi

is there any plan on when the problem will be solved ?

zakynthoswifi

Good morning I have radius manager with dynamic bandwidth allocation per pppoe user but is not working... I’ve attached a picture of the problem... https://www.dropbox.com/s/rt1lu7n6rn4sqrk/33428427_10204331068073425_3085700089667125248_n.jpg?dl=0 https://www.dropbox.com/s/rt1lu7n6rn4sqrk/33428427_1...

zakynthoswifi

Ok please use my code and change the WAN1 name with your pppoe client name e.g. pppoe-out1 .
It should work ...

zakynthoswifi

can you write how your MT has internet? pppoe,dhcp,static ip?

zakynthoswifi

Hello, By default MikroTik has Firewall enabled that block's all traffic initiated from wan side except dst-natted rules. Please try this port forward rule: /ip firewall nat add action=dst-nat chain=dstnat comment=port forward dst-port=8888 in-interface=WAN1 protocol=tcp to-addresses=10.155.15.2 to-...

zakynthoswifi

| SOLVED |

zakynthoswifi

After you have removed the default, you should add a route to the subnet where your RADIUS server is, via the PPTP VPN.

I'm trying to add route but no luck... can you help me?

zakynthoswifi

#UPDATE#
I can ping the radius server only if I specify the vpn interface under ping tool /ping 192.168.90.119 interface=VPN

zakynthoswifi

What is your VPN solution and how is it configured? Try to remove any "set default route to this VPN" option. my vpn is pptp if i remove add default route i can ping the gateway of vpn server but no the dma radius manager (192.168.90.119) it returns timeout, the same happens if i try to p...

zakynthoswifi

This is my network topology. I have a simple pptp vpn

zakynthoswifi

Hello, I'm looking for a solution to authenticate hotspot users via a DMA radius. I don't have static IP so i need a "tunnel", I can't make my ip static due to provider limits... so I configured a vpn but i want only the traffic for radius to pass through this tunnel the normal traffic pas...

zakynthoswifi

Sorry I wrote in wrong section , may a moderator could move the thread?

zakynthoswifi

Hello
Do you know a way to block the bio connect cloud service into my network? It consumes a lot of bandwidth

zakynthoswifi

Please make the 10sec keep alive timeout from pppoe unselectable

zakynthoswifi

Hello , I have a serious problem with my mikrotik and a nanobridge ubiquiti antenna. One day my nano br refuse to give ip and it wasn't responding to ping requests. When i change ssid it worked for 2 days and right now nothing. The most strange thing is that if i connect my eth from antenna directly...

zakynthoswifi

Hello , I have a serious problem with my mikrotik and a nanobridge ubiquiti antenna. One day my nano br refuse to give ip and it wasn't responding to ping requests. When i change ssid it worked for 2 days and right now nothing. The most strange thing is that if i connect my eth from antenna directly...

zakynthoswifi

Hello!, After a lot of tries i wanth your help on how to configure the dma to send emails with external smtp. if you can help me writing some commands and their definition e.g. ('smtp_relay', 'localhost'); here you will write your smtp server ip... (just example) my settings are the following: smtp...

zakynthoswifi

Look ,
My RB2011 is my main router with local ip 192.168.88.1/22.
I want to connect the red router with the main brown router but the red router is connected via pppoe to the middle router!!! Please help me!

zakynthoswifi

witch of these three methods is the correct to use? please be more specific

zakynthoswifi

Hello ,
I want to find a suitable protocol to connect directly the brown router with the red router because i use radiusmanager and each router must have it's unique ip.

zakynthoswifi

Good morning from zakynthos!

Is there any script that updates my dynamic ip on opendns ?

zakynthoswifi

The link isn't working

zakynthoswifi

wds is enabled on bullet but is not enabled on sxt and i don't know how to enable it! Can you help me?

zakynthoswifi

no the problem is with mikrotik sxt.How to do transparent bridge?

zakynthoswifi

mikrotik hotspot see the mac address of sxt and not the mac of the client's mobile or laptop
my network topology is:
1Mikrotik router 2011=>ubiquity airgrid m2 (ap)=>airgrid m2 (station)=>bullet2 (ap)=> [MIKROTIK SXT LITTE 2 (station)
please help me

zakynthoswifi

Hello i want your help i have a rb 2011 uias-in for hotspot and main gateway and i have 567 costumers but when 254 users are in the pool hasn't any free adresses to give to the 255'costumer and the 255 costumer can't surf to the net My configuration Ip address:192.168.88.1 Dhcp pool :192.168.88.7~19...

Search found 81 matches