MikroTik

kiaunel

Any chance that in the app you can insert an option to manually disable relay server? My case is that I have local address on mikrotik but all traffic is redirected from modem. No, I can not setup modem in bridge mode. So for me any connection goes to my public ip will arrive on mikrotik. I think I ...

kiaunel

Finally a "stable" release with udp vpn client working....

kiaunel

I know what do you mean , unfortunately I can not switch ... some devices that i have to monitor are not able to install wireguard....

kiaunel

RC5 broke it again, reverter to RC4

kiaunel

Openvpn client in udp mode is finally working again. Even if there is no entry in changelog about this

kiaunel

In 7.12RC4, for me it is working again, even there is nothing in changelog about this. Hap AC3

kiaunel

After the upgrade to v7.10 (stable). The ovpn client will no longer emerge into the the ip/address table. Also there will be a missing entry in the routing table, i.e. there is no gateway. Due to this, the router is no longer able to exchange ip packets between the network and the ovpn client. same...

kiaunel

Yes, i have the same problems with openvpn.
I am stuck at 7.7, last version where openvpn was working

kiaunel

Started again with disconnects after one hour and 10 minutes... so no improvement so far.
Only solution now to go back to 7.7

kiaunel

Just updated to 7.10 beta rc5 and openvpn clients seems to be stable, no disconnect after 20 min uptime.
I will monitor it and update with results

kiaunel

MikroTik guys, PLEASE release version 7.10 (or 7.9.1) as soon as possible with fixes to above problems. I have all of my OpenVPN links down due to it's instability in version 7.9. Same here. I have a ticket ( https://help.mikrotik.com/servicedesk/servicedesk/customer/portal/1/SUP-115831 ) send to m...

kiaunel

Hello all. On hap ac3 i had kernel error every several hours. Downgraded to 7.7 and everyting is fine now

kiaunel

I am using ROS 7.1.2. Same was with 7.1.1.
I have 4 cables connected, the light came on when i plug the cables, this is not the problem, only traffic activity is not show on the blinking, they blink very slow and not in real connection with the trafic amount.

kiaunel

Hello. I noticed that on my hap ac3 lan leds do not act like on old hap ac2 where i can see the difference between port/activity. they are blinking very slow and seems not related to interface activity. Here is my config. /system leds set 0 disabled=no interface=ether1 leds=led1 type=interface-activ...

kiaunel

Thanks for suggestion. I will try

kiaunel

Ok, thank you for your answers. So no point to dig anymore. I was not aware that is not possible on this switch.
Thanks again

kiaunel

Hello. I try for a few days to activate Hw offload on bridge ports without any success. I post the config here, mentioning that I am using ROS 7.1.1 I have no ideea where i am wrong, becouse i know that STP must be off and then HW offload should become on. If anyone have a clue , please let me know ...

kiaunel

Look on system.. Packages if you have ppp enabled of it is at all there.

Sent from my BLA-L29 using Tapatalk

kiaunel

First of all do not post your public address,
second : try export instead of screen capture,
third: use incoming interface instead of ip address

kiaunel

Post your dst nat rule

/ip firewall nat add action=dst-nat chain=dstnat dst-port=9000 in-interface=ether1 protocol=tcp to-addresses=172.16.0.233 to-ports=9000

You can see here you can use incoming interface instead of destination ip

kiaunel

This usualy is done with htaccess in your web server configuration, directly on webserver

kiaunel

Reduce keepallive timeout and alocate ip from pppoe-pool

kiaunel

It is not clear, for me, what you want.
The purpose of hotspot is to catch connections generated in your lan and forward them to a hotspot login page to force users authentificate themselfs. Why would you do that from wan?

kiaunel

Setup VPN as ethernet mode and it will work. I use ehernet to discover mikrotik devices and works just fine. No doubt on ubiquity will work too

Sent from my BLA-L29 using Tapatalk

kiaunel

Tue Mar 12 22:22:39 2019 Set TAP-Windows TUN subnet mode network/local/netmask = 172.16.6.0/172.16.6.10/255.255.255.0 [SUCCEEDED] Tue Mar 12 22:22:39 2019 Notified TAP-Windows driver to set a DHCP IP/netmask of 172.16.6.10/255.255.255.0 on interface {319F348A-FC54-493B-A954-D9B0308654D6} [DHCP-serv...

kiaunel

Post your client connection log

kiaunel

Add this in your vpn client config if you are using windows :

route-method exe
redirect-gateway

kiaunel

Think like this :
How can routeros imagine how many packets will receive in future?
If it will receive 100 it will have to drop 10
If it will receive 10 it will have to drop 1
if it will receive 1000 it will have to drop 100
How can some os or you predict this?

kiaunel

It is very simple. Your topology is totally wrong. To some wireless clients to get access to the hotspot interface you had to assing uplink ether port on the hotspot device. So hotspot pool is everywhere in your network So , first Move the two cables from the switch to lan ports of Mikrotik Hotspot ...

kiaunel

Hotspot +UserManager is all that you need, depending of your are where users will connect you will need one or more accesspoints

Sent from my BLA-L29 using Tapatalk

kiaunel

And then check of you have proper dns and default route setting on mikrotik

Sent from my BLA-L29 using Tapatalk

kiaunel

I used usermanager+hotspot for this. This worked very good in my house

kiaunel

Mikrotik open VPN server does not support udp and lzo. Change the config to tcp and remove lzo line

Sent from my BLA-L29 using Tapatalk

kiaunel

try this:
http://mikrotik-academy.com/tutorials/i ... -mod-egal/

kiaunel

Are you using routed mode or bridged? Only in bridge mode you can access windows shares.

kiaunel

You are dropping source-port not dst-port. Also, make sure you are not using fasttrack. This may ignore your drop rules.

kiaunel

Routeros use 192.168.88.1 as default ip but you can change it with 192.168.0.1 as your ubnt. But keep in mind if ap witch connect with sxt is not mikrotik you will not be able to use as a bridge.

kiaunel

Go to System-- Packages--Check for updates.

kiaunel

http://wiki.mikrotik.com/wiki/Advanced_ ... _Scripting

kiaunel

There is something both are missing. I can replicate your problems, in a test lab, only if pppoe interface is not connected. I don`t have the time and mod to setup a pppoe server now but please be sure your pppoe interface is still conected.

kiaunel

Ok. First good step. Now in ip -- firewall on nat tab change masquerade rule out interface to match out-interface pppoe-out1. Second. add dns server in ip -- dhcp-server in network tab after gateway input dns server 8.8.8.8. This will assing dns server to dhcp clients. Then in filter rules change de...

kiaunel

Ok, you mess up thing. Lets take one by one. 1. change 192.168.1.20/32 from ether1 to 192.168.1.25/24, then you can access ubnt if needit. 2. Now, as ubnt is bridge there is not an dhcp server on it. I still can not understand how do you connect to internet. If you was using ppoe then configure your...

kiaunel

on first look i can not see something wrong in your config. To access ubnt assing to eth1 an ip 192.168.1.25 and you will be able to connect to ubnt. Post your ip and routes here i p route print ip address print Make sure your computer is configured proprely. Post an tracereoute response to 8.8.8.8 ...

kiaunel

post your mikrotik config. Use export hide-sensitive command.

kiaunel

Post your config here. Use export commnad:

export hide-sensitive

kiaunel

If the ap is not Mikrotik you will not use station bridge becouse it il not work. Station bridge is only for mikrotik ap. You will have to use station mode with your groove setup as a router. No bridging is posible in this situation. To avoid double nat you can use static route on first router if it...

kiaunel

Use ap bridge mode on sxt2

Sent from my Lenovo K50a40 using Tapatalk

kiaunel

With snmp you can do it. The OID is :

interface wireless print oid
client-count=.1.3.6.1.4.1.14988.1.1.1.3.1.6.9

You can monitor it with cacti or dude.

kiaunel

I doubt it will work. but you can try this : like you said... ether1 with isp ether2 to stb , ether1,2 in bridge-isp, then depend how you connect add a dhcp client or pppoe connection to bridge isp. Again, i doubt it will work becouse i think your isp use tagged vlans. If not working like this you w...

kiaunel

I don`t know what configuration is using your isp but you can create a bridge, let`s say bridge-isp with two ports, , let`s say ether 2 and ether 3 added to the bridge interface. Port 2 will be isp cable and port 3 will be STB wan cable . Then ether 1 set as wan connected to lan port of STB and ethe...

kiaunel

I don`t know what features has the router but setting it as bridge will make it transparent, also will disable any services running on it, it will act as a switch between mikrotik and your isp.

kiaunel

Setup your isp router as a bridge. Then, the simple way is to enter quick config on mikrotik and setup your pppoe connection there. This way all your firewall rules will adapt to pppoe interface and not to ether1 , leaving your router exposed to the internet. The other way is to set up pppoe connect...

kiaunel

You`re welcome.

kiaunel

Make sure you deny DNS requests from outside. In filter rules make an input deny rule for TCP/UDP on port 53

Sent from my Lenovo K50a40 using Tapatalk

kiaunel

Remove the bridge... You don't need it in this setup, create a dhcp server on wlan1 with specific subnet, make sure your clients on wifi get proper ip configuration, masquerade those subnets , make filter rules in forward for wifi subnet to forward only to ether1 and you will be fine. Sent from my L...

kiaunel

Use wireless-cm2 instead of wireless-fp and You will have both wireless cards. În ac cards there is no power settings thats why your tab is empty.

Sent from my Lenovo K50a40 using Tapatalk

kiaunel

Fitst of all -48 is a little to high signal. Try to set antena gain if you have it 0 to 2-4-6-8-10 on both devices until you get around -55 -60 signal. On these signals I get most stable links. Second if your scan tool does not see interference does not mean there isn't. Try to change channels until...

kiaunel

Your problem seems to be this: Apr/02/2016 12:36:56 pppoe,debug vlan6: terminating sessions: interface state changed Somehow your vlan interface goes up and down? Is it assigned to a bridge with dinamic interfaces? May i ask why is pppoe-client assigned to a vlan an not an interface? Post your confi...

kiaunel

Here is a point to start. Adapt it to your needs.
http://forum.mikrotik.com/viewtopic.php ... 44#p530748

kiaunel

1. Set "default-forwarding=no" on your wireless interface... 2. Set arp=reply-only on the interface your customers are connecting to. 3. Set add-arp=yes for the DHCP-Server. With these three settings, your router will ignore any client who had not obtained an IP address from the DHCP server.

kiaunel

Start looking at logs
Enable dubug pppoe connection logs :

/system logging add topics=pppoe
/system logging add topics=dhcp

then post here some logs regarding disconection.
Also an export config will help to anybody guide you to a solution:

export hide-sensitive

kiaunel

How is your wireless network? Open or encrypted? Who is cloning macs? You can use pppoe , this will force your users to connect with an username and a password and cloning macs will be pointless. Mikrotik has nothing to do with your problem.

Sent from my Lenovo K50a40 using Tapatalk

kiaunel

Glad You made it.

Sent from my Lenovo K50a40 using Tapatalk

kiaunel

What does path cost and root path cost mean? Or should I even worry about those in the bridge section?

It is used to set best path on redundand links. Leave it as it is.

kiaunel

Same situation with RouterBOARD 952Ui-5ac2nD

Sent from my Lenovo K50a40 using Tapatalk

kiaunel

You have to create two vlans, lets say vlan 11 192.168.11.0/24 and vlan 10 for 10.11.10.0/24, Lets say port 24 will be connected to the other mikrotik Remove master interface for it, set it to none. /interface vlan add interface=ether24 name=vlan11 vlan-id=11 add interface=ether24 name=vlan10 vlan-i...

kiaunel

You should first ensure that you have successfully connect to ISP on ipv6 level. Maybe they can support you on this. Then you should work on routing your subnet. Maybe they have a dhcp server on ipv6 and you could use dhcp client on ipv6 to get your config. Also I don't think you use correct address...

kiaunel

Maybe you should use wallen garden feature and not ip list.

kiaunel

Why use socond router??? Isp give you one ip block routed to your ip. It is simple routing. Assing your wan ip to interface connected to isp and first ip from lan block to lan master interface or bridge if you have one. No need for nat if there are public ips. If they arent you have to nat. If you w...

kiaunel

You have to use 2604:2000:0:8::f:yy3/127 on your isp connected interface and 2600:6000:fxxx::1/64 on lan inter toface. Add default route to isp interface.That /127 is not the best but you will have to live with it. /ipv6 address add address=2604:2000:0:8::f:yy3/127 advertise=no disabled=no eui-64=no...

kiaunel

Switch CPU is better.

Sent from my Lenovo K50a40 using Tapatalk

kiaunel

Bridge use router cpu, slaves use switch cpu for more performance , this is the difference.

Sent from my Lenovo K50a40 using Tapatalk

kiaunel

Yeah, I've missed last part, sorry.

Sent from my Lenovo K50a40 using Tapatalk

kiaunel

Hi , 1-Unplug your second router !! 2-first you have to setup you first router , if your first router has internet ( you can test it by ping 8.8.8.8 from Tools/Ping) then setup DHCP on first router and be sure it's working,since your modem , first router and first router's hosts are in a same subne...

kiaunel

Yes. Solution 2 i gave to you

Sent from my Lenovo K50a40 using Tapatalk

kiaunel

You have two options. 1. Make a setup like You described but is the worst situation. I can not know where you are loosing internet conectivity without you describing what did you do . you can use the quick setup feature configure both routers. But in this setup you will have double nat and possible ...

kiaunel

Maybe

/tool fetch url="http://www.example.com/" mode=http

will help you

kiaunel

Does your 433 have an ac radio card? If not you can not "see" or discover ac access points.

kiaunel

What wireless package are you using? If you are on wireless-fp change it to wireless-cm2. On mine i have wlan2 only with cm2

kiaunel

If your Soho switch is not vlan capable you can not use trunk port.You have to connect cable to 5.0/24 directly to mikrotik to isolate that network. Post your firewall rules in forward and your routes, becouse in this config your cameras should connect to dvr by routing. To isolate .5.0/24 network y...

kiaunel

How did u nat camera port?

Sent from my Lenovo K50a40 using Tapatalk

kiaunel

If you are not connecting with cable în ether2 change your lan ip and dhcp server on bridge

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

From the manual : Buttons and Jumpers RouterBOOT reset button (RESET, front panel) has three functions: • Hold this button during boot time until LED light starts flashing, release the button to reset RouterOS configuration (total 5 seconds) • Keep holding for 5 more seconds, LED turns solid, releas...

kiaunel

Yes, i said 0.1 not 0.100

kiaunel

Post your config

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

You have to keep your Eoip tunnel or make in bridge if Ap is not mikrotik.

kiaunel

Add an address on interface connected to alarm system.

ip address add address=192.168.0.1/24 interface=lan network=192.168.0.0

kiaunel

Yes, after you set up proxy make a test by adding ip/port manualy to browser then redirect all your web traffic on proxy to make it transparent. If you realy need it? Only you can have the answer. Depends on what kind of traffic your clients do and what speed is your connection.

kiaunel

Are you using station mode on clients? Use station bridge or station wds instead

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Enable "Cache on disk" option under ip -- webproxy.
Make sure your flash drive or sdcard is proprerly detected under files sections as /disk.

kiaunel

How do you set up hap? use winbox and paste here export command from terminal.

kiaunel

I think tv is looking for dlna server only in his subnet so you can not put them in two bridges. As itmethod already said put them in one bridge and other devices in another bridge if this setup suits you.

kiaunel

The limitation is per radio. There with more clients connected to radio will increase the time to transmit / retransmit data especially for clients with lower signal. So no, using a x86 device will not help. You will have to install several access points. I can not imagine any radio , not only from ...

kiaunel

You're welcome.

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Try netinstall, but I doubt if it is brand new is not working.

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Anytime

kiaunel

Hello! Scenario: Until recently I used two different Bridges: 1 bridge_WLAN & 1 bridge_local. The Problem is, that i can't connect from my TV to my NAS, which are in different Bridges. I tried to put the WLAN & LAN into 1 bridge and hurray, it works! The "problem" is, that I want ...

kiaunel

And for 10 bucks you can get gigabit version
http://routerboard.com/RBSXTG-5HPnD-SAr2

kiaunel

Using 5ghz band may have less interference in your area. If there are neighbours with routers near you they will be most likely in 2,4 ghz band. So in this situation your transport link will perform better in 5ghz band. you can use 2,4 with omnitik for your local coverage. Also 5hpnd have better spe...

kiaunel

http://routerboard.com/RBSXT5HPnDr2

kiaunel

I would use sxt 5hnd if you will not need more than 100 Mb or use one on 5ghz with gigabit land if you need more. Then use one of the omnitik for local coverage. Keep in mind that your friend will not be able to connect directly with their laptops or smartphone to omnitik. They have to use each one ...

kiaunel

Nothing against HE, but if ISP offers working native IPv6, I'd prefer to use that. You can say that this is not working, but it must be just some misunderstanding. It's a little strange that support would not know how is their config supposed to work, but I'm sure they will eventually find some emp...

kiaunel

Remove bridge-gateway becouse you don`t need more than one port for wan. Then set up a rulle for nat : ip firewall nat add action=masquerade chain=srcnat src-address=lan_subnet/24 This is the very basic to get started Asuming that you have a dhcp-server working proprely on bridge-lan and a dhcp-clie...

kiaunel

Use he.net. it works good for me.

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

If you realy want ipv6 to work subscribe to he.net. It will be a tunnel but it work great for me.

kiaunel

If you ping the cloud host the ip resolves with that from your wan interface? There are situations when cloud does not update address after it changes but it can be forced to update.

kiaunel

There is no tool (from what i know) like SARG for linux squid. The only tool who can help you is torch. But there are only connections/ips.

kiaunel

Windows clients may do not respond on icmp request due to firewall.
From what you post it should work... Post your config here. Use export command.

kiaunel

What kind of ipv6 address is your modem geting? maybe it is link local ipv6. If it like fe80:: the means your modem is ipv6 ready but your isp did not actualy use ipv6.

kiaunel

You have to get another ip to ether1 witch will route your /64 subnet. In my case I have a tunnel ( my ISP don't offer ipv6) with 2001:470:xxxx::1 on my tunnel side and 2001:470:yyyy::1/64 assigned to my lab interface. So my clients get IPS from 2001:470:yyyy::1/64 and everything works like it shoul...

kiaunel

It is behind mikrotik

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Keep in mind that if you use fasttrack connection it may baypass your queques.
In my config this one is simple and works.

/queue simple
add max-limit=3M/0 name=para target=10.10.9.3/32

kiaunel

This...without NAT Masquerade rule on your private subnet, you wont be able to go on internet... I don't know why but without NAT masquerade I have internet connection in the private subnet, that is annoying meand i don't know how to fix it. /ip firewall nat add action=masquerade chain=srcnat comme...

kiaunel

Use a firewall rule like this:
ip firewall nat add action=dst-nat chain=dstnat dst-port=8080 in-interface=ether1 protocol=tcp to-addresses=device lan ip to-ports=8080

kiaunel

Post your firewall rules here.
In terminal :

ip firewall nat export

kiaunel

You have to create two dhcp-server, one for local and one for private, assigned to separate bridges, two ip pools one for each dhcp server, then restrict your masqurade rule to only specific subnet allowed to internet.

kiaunel

Hi! I'm using RB850Gx2 (powerpc) with 6.34.2 installed. There is no any specific configuration, just DHCP, some NAT rules for port forwarding and some reserved IP addresses by MAC address. What I want is allow use WAN IP addresses in LAN. For example - one NAS drive with IP address 10.0.0.39, I can...

kiaunel

Weird indeed but loosing connectivity after link is established sounds like loop but may be something else

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Are you making a loop? With wlan1 on second sxt? Why are you using wlan1 anyway? Make sure wlan1 is not connecting to anything. Without seeing configs this was my first gues.

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Wait a minute... What IP get the switch? Is it public? If so I think you can not get second public IP from your isp.

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

You can try to plug your laptop or computer to modem to see if you get an ip.

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Look , i`ve pasted your config in a test device and it worked. I mean the eth6 got an ip [admin@MikroTik] > export # feb/21/2016 18:40:36 by RouterOS 6.34.1 # software id = # /interface bridge add admin-mac=E4:8D:8C:22:DD:F5 auto-mac=no name=bridge-local /interface ethernet set [ find default-name=e...

kiaunel

[admin@MikroTik] > ip address print Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK INTERFACE 0 ;;; default configuration 192.168.88.1/24 192.168.88.0 bridge-local 1 192.168.88.3/24 192.168.88.0 ether6-gateway [admin@MikroTik] > interface ethernet print Flags: X - disabled, R - runn...

kiaunel

If you add static IP to ether 6 it works?
ip add address=192.168.0.5/24 interface=ether6
Adapt your IP address and try to ping modem IP address. Hope i has not made any syntax error course I'm writing from my phone and don't have a mikrotik in front on me

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

in ether print
See the number of the interface
in ether mon number

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Did u check the Ethernet link on 6?

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

He has in config dhcp-client on ether6

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Check your cable if your modem light is still red i would take a look at interface status. From winbox go to interfaces and on status tab check your interface link. Maybe auto negociation has failed. Check the rate status.

kiaunel

None of your devices will use dhcp server so you can remove it.

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

The wireless mode you need id station-bridge and a bridge with wlan1 and master-interface of lan ports.If the dhcp-client is assigned to wlan interfave and not getting an ip it means your hap is not connected. Check this in wireless -- wlan1 -- status tab. There you should see if it is connected. If...

kiaunel

so you need to reach 192.168.3.0 subnet from 192.168.9.0

ip route add dst-address=192.168.3.0/24 gateway=pptp-out1

kiaunel

If I run pptp with the "add default gw" option then yes all traffic is routed via pptp

Is what you wanted, right?

kiaunel

What did u do and not work?

kiaunel

Make your firewall rules with interfaces blocking... Like that... IP firewall filter add chain=forward in-interface vlanx out-interface=vlany action=drop I wrote the rule from mind as i'm on phone now so hope I have not make any sintax error. Adapt that rule to your config and you should be fine. Se...

kiaunel

No. How do you want to send internet? Make a scheme of your network.

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Then make sure interfaces are not bridged, or have none in the master port settings, ad ips to interfaces, if you need dhcp on them create dhcp servers assigned to every interfaces, then create rules in firewall to block traffic between interfaces. No need for vlan from what you said. Vlan only need...

kiaunel

I think you need Hairpin NAT :http://wiki.mikrotik.com/wiki/Hairpin_NAT
You need to nat your inside packets
/ip firewall nat
add chain=srcnat src-address=172.16.239.0/24 \
dst-address=172.16.239.7 protocol=tcp dst-port=80 \
out-interface=LAN action=masquerade

kiaunel

When you connect to your client do you get default route? there must be an option like "route all traffic to vpn server". Check that it is active. Also did not understant what is realy your pptp subnet. is 9.0/24 or 3.0/24? Anyway... Both subnets must be in masquerade assuming one is your ...

kiaunel

Add vlan to master interface or to the bridge, depending of your config. You did not explained in detail what do you want

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

In this situation only option 1 is for you. But, there is a way also, : configure a vpn server on mikrotik, give vpn client an address space diferent from your users and allow only that subnet to view graphs. Thanks. I have changed the port number from ip--> services. Now i have to view the graphs ...

kiaunel

In this situation only option 1 is for you.
But, there is a way also, : configure a vpn server on mikrotik, give vpn client an address space diferent from your users and allow only that subnet to view graphs.

kiaunel

There are two options.
1. change www server port in ip--> services , from winbox
2. drop from firewall access subnet to ip of mikrotik on port 80 but allow your ip

kiaunel

Make sure ports are not included in any bridge and dhcp servers are allocated to the right port

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

I think you block traffic in forward chain. When you access router in winbox the packets are in input chain, they are destinated for the router itself. Others, for others devices are passing the router , this means forward. This is for ip. About mac access i don`t know if you can realy block... mayb...

kiaunel

Is your map in station mode on wireless tab? Then change to station bridge.

kiaunel

Or, to avoid double nat make ADSL bridge, connect with mikrotik directly to internet and if you want guests in separate network make an virtual ap with an separate dhcp server and firewall to avoid guest subnet to talk with your subnet.

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

All depends of what do u need. More bandwidth... Go to ac. If not 951g or 2011 series arevery powerful device for home use.

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Second device you can make it bridge so the only dhcp server will be on first, and you will have the same subnet in your LAN . Also set up same ssid with same encription on both but different channels, for roaming clients.

kiaunel

There are two independent switches in 2011 so it is not possible to enslave ether 6-10 to ether2. Didn`t know that, sorry. So i gues there is a switch for 10/100/1000 ports and one for 10/100. Anyway the setup is still the same i think. Wlan1 bridged with one master ports remains for the routed par...

kiaunel

This was a very basic config so you can start . a- you can forget about it it was from a test ... don`t input that line b- pool1 is the ip range dhcp-server will assign to clients, dhcp1 is the server itself. c- yes you should... like i said this was a very basic config to make things work as u want...

kiaunel

The easiest way is to set up mikrotik as a simple router at the begining . Then you will have a bridge between ether2 and wlan1. Ports from ether3-10 will be with master interface ether2. Remove ether2 from bridge so the routing will be from ether1 to wlan1 and other ports like 2-10 will act as a sw...

kiaunel

Ok, this is the config for you" /interface wireless set [ find default-name=wlan1 ] disabled=no mode=ap-bridge wireless-protocol=802.11 /interface bridge add admin-mac=00:11:22:33:44:55 auto-mac=no name=bridge1 /ip pool add name=dhcp ranges=192.168.88.3-192.168.88.30 add name=dhcp_pool1 ranges=...

kiaunel

It has nothing to do with mac on wan interface it is configurable on any ther by ip and default route. On what settings is rebooting or not allow you to access it? Keep in mind there are situations when deleting bridges or move ip from one interface to other when the device will not be accesible by ...

kiaunel

Ok it`s very easy. In the ip tab on address double click on 192.168.88.1 and put on interface bridge1 or whatever your bridge name is . Like you said *IP address 192.168.88.1/24 is set on LAN port instead of lan port use bridge . Same thing in ip---dhcpd server -- double click on server1 and change ...

kiaunel

I'm on phone now and can not make an elaborate post. Later I will.

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

input as 30M don`t think will work.... instead use 30000

kiaunel

Ok, now i think i understand. your wan port is ether1. Remove ether2 from bridge and for make ether2 wan move dhcp-client on ether2 that way you will get default route on ether2 and you need to make nat settings considering your out-interface will ne ether2. But, this wil be a router after router se...

kiaunel

One led can only take one activity.... if you want to assing other activity to led1 delete default one and create other

kiaunel

Sounds like you have a loop in your network

kiaunel

Yes, I know, but there is no Led1, Led2.... in LEDs

Not every routerboard have access to configure all leds. some have leds 1-5 + user led like mine 433 and others like 750 or hap lite has access only to user led

kiaunel

In winbox go to system -> LEDs. You can setup them there

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

please be more specific... why is not working? syntax? or do not block your traffic? Make sure you inserted rule before forward accept all
for logging
sys logging add topics=wireless action=memory

kiaunel

never made an setup like this but i think in first situation ether1 ans wlan are in trunk and traffic will be tagged and in second wil be an access port and traffic wil be untagged. Hope i`m not wrong. My setup is like this... Vlan 100 and 200 added to ether2 and ether 3 slave to ether2. This are tw...

kiaunel

ZeroByte is right you don`t need bridge or vlan0 on ether2. Just use ether2. Now for the trunk port in the other end is trunk configured?

kiaunel

Move firewall rule to ccr02 becouse your clients request are not passing to your wan but from your clients lan to wan of ccr02 and to dns server

kiaunel

you`re welcome... anytime.

kiaunel

First of all is your map router or bridge? If it is router is normal to connect only from eher1 with default setup. Second... If u bridge wlan and ether 2 your map is a simple access point and ignore ether1. Now.... If only one device can connect this way change wireless mode on ubnt. I bet is stati...

kiaunel

What did u do?

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Why don't connect cameras after mikrotik? That way it will be much easier If you can not do this remove dstnat from ADSL router and make sure land and wireless on DSL are bridged because you should have replys from camera on ping and move dstnat rules on Microtik. When you try to reach camera from o...

kiaunel

Where is located the other router( non mikrotik)? Make a simple network diagram so I can understand your setup I mean how cameras reach mikrotik? I see you have 192.168.5.0/24 on eth1 eth1 is not wan port? ppoe is not connected to eth1? can u ping camera ip from mikrotik? Sent from my Lenovo K50-t5 ...

kiaunel

) is a tplink afterall....

kiaunel

No idea but if you can connect with cable try to log wireless and dhcp maybe you will see what is happening.

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

What problems?

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

No it will not block internet connection. It will only block request coming from wireless interface to modem who want to connect to modem IP on port 80 witch is the management interface of the modem

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Yes you will access camera like this http://mikrotik.host:cameraport

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

OK then block incoming connection from wlan to modem IP DST port 80 adapt this rule for you ip firewall filter add chain=forward protocol=tcp dst-port=80 dst-address=xxx.xxx.xxx.xxx in-interface=wlan1 out-interface=ether1-gateway action=drop you can use on dst-address=!youripaddress to block all sub...

kiaunel

There is a x86 version to install on pc
http://www.mikrotik.com/download

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Yes, U model have support for usb storage

kiaunel

station can not work in bridge mode.
try station bridge or station wds

kiaunel

this time i already can connect to inet from my mikrotik So you can ping from microtik to internet right? my question is how i can connect to inet from my modem adsl....?? help pls I don`t understant what means from "modem adsl"? Don`t u try connect to internet from a computer connected t...

kiaunel

to use noip.com you have to use a custom script. Better use buildin dyndns : [admin@Gateway] > ip cloud set ddns-enabled=yes [admin@Gateway] > ip cloud print ddns-enabled: yes update-time: yes public-address: 89.137.xx.xx dns-name: 268xxxxxxxxxx.sn.mynetname.net status: updated [admin@Gateway] > It ...

kiaunel

And disable dhcp server on tplink so it will be a wireless switch

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Was realy hard to understant what do you want to do. Why do you have on ether1 ether4 and wlan1 an ip from the same subnet as your modem. What is 5.0/24 netmask anyway.... modem subnet? if so 5.1 is not your modem ip? how do you connect to modem? dhcp? static ip? I think you should start over and co...

kiaunel

sys leds add type=interface-activity interface=wlan1 leds=user-led And the user led will blink when thereis wireless traffic on wlan1 You can set many options instead of interface-activity [admin@Gateway] > sys leds add type= Type ::= ap-cap | flash-access | interface-activity | interface-receive | ...

kiaunel

chain=dstnat action=dst-nat to-addresses=10.10.2.105 to-ports=8800 protocol=tcp in-interface=wan dst-port=8800 log=no log-prefix=""
Also make sure camera have internet access, i mean to set gateway on camera... this is a common mistake, not to set gateway on ip camera

kiaunel

Oh, my bad. Then forget about trunk and set access port coonected to ap with vlan 200 . And on ap there is nothing to do.

kiaunel

Why don't you make modem in bridge and have the ISP connection on mikrotik? Or how the clients can access the DSL? It has not a password? You can d add a drop forward rule with source hotspot subnet destination gateway proto TCP dstport 80 if 80 is the port of web management interface of DSL. Sent f...

kiaunel

The moon has nothing to do with your network. Just try the solution czolo gave to you. To better understand it when you set antenna gain ros thinks you have a more powerful antenna and decrease the power on the wireless chip to maintain country regulations. But you will have the same antenna and wit...

kiaunel

In winbox click on settings and remove passwords

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

You can not make the guest subnet reach internet without srcnat or masquerade. The setup will be like this : 1. Create two vlans on router assigned to the interface connected to ap This will be a trunk port.. For example vlan 100 will be your vlan and vlan 200 will be guest vlan.Make a dhcp server f...

kiaunel

Virtual ap can have different ssid from main. I don't know if roaming works between 2.4 and 5

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Set on ether2 master interface ether1

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

I just tried... Worked.... somehow
But ETH interfaces were switched... I mean plunged cable in ether1 but in ros the link came up to ether3 I think because the two wireless interfaces from 433 are missing in 750g.
Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Hello,
I think I already know the answer but if I try to export the whole config from a 433ah to a 750g it will work?

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Why do you want to use netinstall? The router is not booting?

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Yes

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Like as @Zerobyte said... As long the cookie is valid user get no login screen. Tested in my config also. Make sure cookie validity time is set equal to user authorization time.

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Post your config here

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

+1

Sent from my Lenovo K50-t5 using Tapatalk

kiaunel

Try to limit connections or packets. For sure you can see a difference between a normal client and those who sharing. This will not stop them to share but for sure will make them problems :) . Some years ago I was changing the TTL to 1 and luckily they did not know to increment it again . Sent from ...

Search found 228 matches