Community discussions

Search found 196 matches

by MikroTikFan
Mon Dec 31, 2018 2:22 am
Forum: Wireless Networking
Topic: Does Mikrotik LTE supports IPV6?
Replies: 4
Views: 655

Re: Does Mikrotik LTE supports IPV6?

yes, i have both devices (ltap mini, wap lte kit) in operation running 6.43 with dual stack on lte interface. Thank you. I understud that your cellular operator supports ipv6/ipv4 dualstack, you can config your dedicated APN for ipv6 and type of ipv... and finaly you can get ipv6 address for this d...
by MikroTikFan
Thu Dec 27, 2018 7:17 pm
Forum: Wireless Networking
Topic: Does Mikrotik LTE supports IPV6?
Replies: 4
Views: 655

Does Mikrotik LTE supports IPV6?

Hi, I just looking for LTE modem which supports natively IPV6 from cellular or IPV6/IPV4 by setting LTE APN. In Poland only Orange celular operator supports IPV6 if you will chose APN:internetipv6 and netwirking IPV6. Mikrotik has many LTE devices which should be configured. - LtAP mini LTE kit - wA...
by MikroTikFan
Sat Nov 03, 2018 7:27 pm
Forum: Virtualization
Topic: Where in US host Virtual RouterOS [SOLVED]
Replies: 7
Views: 1565

Re: Where in US host Virtual RouterOS [SOLVED]

I don't remember name of this cloud provider (not so big like AWS), but it was one with offer 5 USD per month.
by MikroTikFan
Sat Nov 03, 2018 10:12 am
Forum: Virtualization
Topic: Where in US host Virtual RouterOS [SOLVED]
Replies: 7
Views: 1565

Re: Where in US host Virtual RouterOS [SOLVED]

AWS costs is around 10 EUR per month. Is there any other cheaper Cloud service dedicated or supported for RouterOS?
by MikroTikFan
Fri Nov 02, 2018 10:13 am
Forum: Virtualization
Topic: Where in US host Virtual RouterOS [SOLVED]
Replies: 7
Views: 1565

Where in US host Virtual RouterOS [SOLVED]

Hi,

I'm looking for advise where in US is the best place to host virtual RourerOS.
I mean also prices and default instalation of RouterOS.

Please share your experience.
Thanks!
by MikroTikFan
Tue Apr 24, 2018 7:47 pm
Forum: General
Topic: Feature Req: IKEv2 server and client
Replies: 291
Views: 80762

Re: Feature Req: IKEv2 server and client

@MikroTikFan What are you waiting? IKE2 was backported to v6 long time ago. Thanks’, I thought that this should be in the same place together with other VPN services. I will try to follow instructions https://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Road_Warrior_setup_Ikev2_RSA_auth Hopefully I will ...
by MikroTikFan
Sat Apr 21, 2018 11:28 pm
Forum: General
Topic: Let's encrypt and Mikrotik
Replies: 11
Views: 7709

Re: Let's encrypt and Mikrotik

+1

Please add this feature.
by MikroTikFan
Sat Apr 21, 2018 10:09 pm
Forum: General
Topic: Feature Req: IKEv2 server and client
Replies: 291
Views: 80762

Re: Feature Req: IKEv2 server and client

As it was mentioned earlier in this topic ROS v7. by mrz » Thu Oct 16, 2014 11:23 am my grandpa hopes to see ROS7 before he died when can we test ROS7 with ikev2 server Interesting, but now is close to two years later, I hope that your Grandpa is still in great condition ;-) , because we are still ...
by MikroTikFan
Tue Apr 17, 2018 5:19 pm
Forum: Wireless Networking
Topic: Google Mini - device network isolation
Replies: 3
Views: 807

Re: Google Mini - device network isolation

client to client forwarding enabled?
How to enable this feature in Mikrotik?
by MikroTikFan
Sun Apr 15, 2018 10:26 pm
Forum: Beginner Basics
Topic: Openvpn does not work on the iphone.
Replies: 9
Views: 4286

Re: Openvpn does not work on the iphone.

Openvpn on ios can work too. But only with the certificates that were generated using the utility easyrsa. Staff means mikrotik do not get it. But if you import third-party certificates then certificate revocation does not work. Can anyone tell me with which keys to generate a certificate on the ro...
by MikroTikFan
Sun Apr 15, 2018 9:43 pm
Forum: General
Topic: CloudFlare DNS over TLS
Replies: 41
Views: 18417

Re: CloudFlare DNS over TLS

Hi,

Is there any chance that somebody from Mikrotik Team will comment this post/request ?

...
by MikroTikFan
Sat Apr 14, 2018 11:13 pm
Forum: Wireless Networking
Topic: Can mAP tunnel openvpn from wireless to wireless?
Replies: 1
Views: 344

Can mAP tunnel openvpn from wireless to wireless?

I would like to tunnel connection and establish openvpn to my mikrotik router using only wifi. 1. establish connection to the internet comming from public wifi "publicwifi" 2. connect as a openvpn client to my router in different place 3. genetate from mAP secure wifi network "privatewifi" comming f...
by MikroTikFan
Sun Apr 08, 2018 6:25 pm
Forum: General
Topic: CloudFlare DNS over TLS
Replies: 41
Views: 18417

Re: CloudFlare DNS over TLS

Will be implemented in ROS v7 :D

This is hope or you know something more ?

I just wondering which solution became more popular :
- DNS over HTTPS
- DNS over TLS
?
by MikroTikFan
Thu Apr 05, 2018 12:18 am
Forum: Beginner Basics
Topic: Openvpn does not work on the iphone.
Replies: 9
Views: 4286

Re: Openvpn does not work on the iphone.

Hi, I tried to find solution for the same problem Mikrotik OpenVPN with iPhone. I can't find out how to fix problem - PKCS5 - Requested encryption or digest alg not available [ERR] I found only one post on MikroTik forum. I'm trying to connect to the vpn from my iPhone, but I still can't get working...
by MikroTikFan
Mon Apr 02, 2018 7:22 pm
Forum: General
Topic: Using Splunk to analyse MikroTik logs
Replies: 98
Views: 16790

Re: Using Splunk to analyse MikroTik logs

Thanks! Yes, "Mikrotik" vs. "MikroTik" - works, with following : - MikroTik DNS Live usage - MikroTik DNS request - MikroTik Firewall but is not working with following: - MikroTik Volt/Temperature - MikroTik Live attack - I have to add name to rule "FW_Drop_all_from_WAN" - MikroTik Web Proxy - but c...
by MikroTikFan
Mon Apr 02, 2018 6:29 pm
Forum: General
Topic: Using Splunk to analyse MikroTik logs
Replies: 98
Views: 16790

Re: Using Splunk to analyse MikroTik logs

Sure, that's all is working.
I see this data in splunk stream and I can browse them.

The problem is that on Mikrotik Application there is nothing.
Same problem like before : "No results found."
by MikroTikFan
Mon Apr 02, 2018 3:31 pm
Forum: General
Topic: Using Splunk to analyse MikroTik logs
Replies: 98
Views: 16790

Re: Using Splunk to analyse MikroTik logs

@Jotne I like your solution and examples in Splunk . I think that I followed your instruction, but I still have in Mikrotik App "No results found." Can you please help me to find what I'm doing wrong ? Thanks in advance. Sure I will do. Setup where the logging should go: System->Logging->Action->rem...
by MikroTikFan
Mon Apr 02, 2018 2:30 pm
Forum: General
Topic: CloudFlare DNS over TLS
Replies: 41
Views: 18417

CloudFlare DNS over TLS

Hi, Last days CloudFlare has annouced new DNS service. This includes also secured DNS - DNS over HTTPS - DNS over TLS https://developers.cloudflare.com/1.1.1.1/dns-over-https/request-structure/ Please advice me if secured DNS can be implemented in Mikrotik. I know that other DNS technology DNSCrypt ...
by MikroTikFan
Tue Mar 13, 2018 6:45 pm
Forum: General
Topic: Slingshot Malware on Mikrotik Routers
Replies: 2
Views: 1605

Slingshot Malware on Mikrotik Routers

Hi, Few days ago Kaspersky Lab have discovered that on Mikrotik routers somebody has included in Winbox malicious components. The code spies on PCs through a multi-layer attack that targets MikroTik routers. It first replaces a library file with a malicious version that downloads other malicious com...
by MikroTikFan
Wed Mar 07, 2018 11:48 pm
Forum: Wireless Networking
Topic: Google Mini - device network isolation
Replies: 3
Views: 807

Google Mini - device network isolation

Hi, I have Mikrotik access point - wAP ac (RBwAPG-5HacT2HnD-BE) and I'm trying to connect 2xGoogle Mini and 2xChromecast. Right now I'm having problems to configure this and google suport says that devices in my network are isolated. My hotspots are configured as a "bridge", but same results are whe...
by MikroTikFan
Fri Jan 19, 2018 12:32 am
Forum: Wireless Networking
Topic: wAP DHCP problem with virtual wireless interface
Replies: 1
Views: 309

wAP DHCP problem with virtual wireless interface

My problem is to get from DHCP address in virtual wireless interface. I have Mikrotik wAP AC access point in mode: WISP AP Main DHCP server is router Mikrotik RB3011 From main wireless interfaces i-wifi1 and i-wifi2 I'm getting addresses and DHCP is working fine. From v-wifi (virtual interface) I ca...
by MikroTikFan
Sun Jan 14, 2018 10:10 pm
Forum: Beginner Basics
Topic: DHCP problem in access point virtual wireless interface
Replies: 0
Views: 308

DHCP problem in access point virtual wireless interface

My problem is to get from DHCP address in virtual wireless interface. I have Mikrotik wAP AC access point in mode: WISP AP Main DHCP server is router Mikrotik RB3011 From main wireless interfaces i-wifi1 and i-wifi2 I'm getting addresses and DHCP is working fine. From v-wifi (virtual interface) I ca...
by MikroTikFan
Mon Jun 12, 2017 12:23 am
Forum: General
Topic: SSH-2.0-ROSSSH? in my Mikrotik LOG
Replies: 12
Views: 3175

Re: SSH-2.0-ROSSSH? in my Mikrotik LOG

Right, after switching off Debug it's gone !

Thanks

Question is why this is included in DEBUG log mode ?
by MikroTikFan
Sat May 13, 2017 11:57 pm
Forum: Wireless Networking
Topic: RouterBoard hAP AC Slow wireless performance.
Replies: 35
Views: 10802

Re: RouterBoard hAP AC Slow wireless performance.

This area looks clear. Just one house and to next house 500 m.
Looking to wifi monitor I see that this is not causing this problem.
by MikroTikFan
Sat May 13, 2017 5:59 pm
Forum: General
Topic: Feature Req: IKEv2 server and client
Replies: 291
Views: 80762

Re: Feature Req: IKEv2 server and client

+1 IKEv2

All Cloud Services like Google Cloud, AWS, AZURE need this type to connect VPN
by MikroTikFan
Sat May 06, 2017 12:43 am
Forum: Wireless Networking
Topic: RouterBoard hAP AC Slow wireless performance.
Replies: 35
Views: 10802

Re: RouterBoard hAP AC Slow wireless performance.

Apple tech spec for all 2015 Macbook Air shows

https://www.apple.com/macbook-air/features/

1300 Mbps !

Chipset : Broadcom BCM43xx
by MikroTikFan
Sat May 06, 2017 12:30 am
Forum: Wireless Networking
Topic: RouterBoard hAP AC Slow wireless performance.
Replies: 35
Views: 10802

Re: RouterBoard hAP AC Slow wireless performance.

I know where to check my MacOS device wifi spec, but I don't see over there this dual or triple wording.
by MikroTikFan
Sat May 06, 2017 12:22 am
Forum: Wireless Networking
Topic: RouterBoard hAP AC Slow wireless performance.
Replies: 35
Views: 10802

Re: RouterBoard hAP AC Slow wireless performance.

That is interesting. Friend of mine has same model same time and got 1200-1300 connection from Netgear 5G Router. I just wondering where can I find this information in mac about WiFi card dual/triple ? Other issue is channel, @IntrusDave got this connection but using channel 100 on Mikrotik. I'm get...
by MikroTikFan
Fri May 05, 2017 11:08 pm
Forum: General
Topic: SSH-2.0-ROSSSH? in my Mikrotik LOG
Replies: 12
Views: 3175

Re: SSH-2.0-ROSSSH? in my Mikrotik LOG

What can I do to find out this problem?
by MikroTikFan
Fri May 05, 2017 10:26 pm
Forum: Wireless Networking
Topic: RouterBoard hAP AC Slow wireless performance.
Replies: 35
Views: 10802

Re: RouterBoard hAP AC Slow wireless performance.

Still only 867 Mb.

How to fix setup up to 1200-1300Mb ?

@IntrusDave how to get Channel 100 on Mikrotik wAP ac ?
by MikroTikFan
Fri May 05, 2017 1:07 pm
Forum: Wireless Networking
Topic: RouterBoard hAP AC Slow wireless performance.
Replies: 35
Views: 10802

Re: RouterBoard hAP AC Slow wireless performance.

Please help me how to configure my wAP ac (RBwAPG-5HacT2HnD-BE) to run this same 1300 Mb (MAcBook) speed like in mentoned by IntrusDave? Is this country Switzerland. 5240/20-eeeC/ac/P(20dBm)??? The default config for the wireless should be pretty good. The only thing I changed on my hAP AC is lockin...
by MikroTikFan
Thu May 04, 2017 9:23 pm
Forum: General
Topic: SSH-2.0-ROSSSH? in my Mikrotik LOG
Replies: 12
Views: 3175

Re: SSH-2.0-ROSSSH? in my Mikrotik LOG

May 4 20:16:51 192.168.3.250 May 4 20:16:51 Router Host-Name = "Router" May 4 20:16:51 192.168.3.250 May 4 20:16:51 Router Client-Id = 01-XX-XX-XX-XX-XX-95 May 4 20:16:51 192.168.3.250 May 4 20:16:51 Router received Router Advertisement on interface=ether1-gateway May 4 20:16:51 192.168.3.250 May 4...
by MikroTikFan
Wed May 03, 2017 11:12 pm
Forum: General
Topic: SSH-2.0-ROSSSH? in my Mikrotik LOG
Replies: 12
Views: 3175

Re: SSH-2.0-ROSSSH? in my Mikrotik LOG

/system logging print Flags: X - disabled, I - invalid, * - default # TOPICS ACTION PREFIX 0 * info remote 1 * error remote 2 * warning remote 3 * critical remote 4 ovpn remote 5 route remote 6 firewall remote 7 certificate remote 8 debug remote
by MikroTikFan
Wed May 03, 2017 9:52 pm
Forum: General
Topic: SSH-2.0-ROSSSH? in my Mikrotik LOG
Replies: 12
Views: 3175

Re: SSH-2.0-ROSSSH? in my Mikrotik LOG

I see over there in rows with the title "Router SSH-2.0-ROSSSH?". May 3 20:40:54 192.168.3.250 May 3 20:40:54 Router Msg-Type = discover May 3 20:40:54 192.168.3.250 May 3 20:40:54 Router Parameter-List = Subnet-Mask,Classless-Route,Router,Static-Route,Domain-Server,NTP-Server,CAPWAP-Server,Vendor-S...
by MikroTikFan
Wed May 03, 2017 8:56 pm
Forum: General
Topic: Blocking same MAC address to get IP from DHCP
Replies: 5
Views: 1364

Re: Blocking same MAC address to get IP from DHCP

Thank's for hint. I wondering if there is any solution to block new DHCP lease by same MAC address listed in DHCP Lease list. How can I blocked DHCP pool in firewall from takind double MAC address? Otherwise Blocking all in firewall means manual work each time. Can just block MAC duplication in DHCP ?
by MikroTikFan
Wed May 03, 2017 8:09 pm
Forum: General
Topic: Blocking same MAC address to get IP from DHCP
Replies: 5
Views: 1364

Blocking same MAC address to get IP from DHCP

Please help me how to solve the problem getting access by device to the internet. I have implemented on Mikrotik DHCP server and fixed IP per device. But when I neet to block device on the DHCP Server Leases (for example for kids) and disabling this device same device gets new dynamic IP. This is th...
by MikroTikFan
Sun Apr 30, 2017 1:10 am
Forum: Wireless Networking
Topic: How to reduce signal strength
Replies: 9
Views: 39955

Re: How to reduce signal strength

I would like ask also for correct antena gain parameters and power for RBwAPG-5HacT2HnD-BE.
by MikroTikFan
Sat Apr 29, 2017 1:04 pm
Forum: General
Topic: SSH-2.0-ROSSSH? in my Mikrotik LOG
Replies: 12
Views: 3175

Re: SSH-2.0-ROSSSH? in my Mikrotik LOG

Thank's for explanation. I have most current version (6.39 now).

If this not concern to those who have current firmware - so why this message is in my router log ?
by MikroTikFan
Fri Apr 28, 2017 10:44 pm
Forum: General
Topic: SSH-2.0-ROSSSH? in my Mikrotik LOG
Replies: 12
Views: 3175

SSH-2.0-ROSSSH? in my Mikrotik LOG

Hi,

I just wondering why I have in my router LOG still records

including name of Mikrotik router and "SSH-2.0-ROSSSH?"

This looks like something bad ...

https://www.exploit-db.com/exploits/28056/
by MikroTikFan
Mon Mar 20, 2017 1:25 am
Forum: General
Topic: Feature request - DNSCrypt support...
Replies: 157
Views: 45757

Re: Feature request - DNSCrypt support...

+1 for DNSCrypt - again, again and again ...

Mikrotik developers how long we should wait ?

Customer feedback is this days something important for You ?
by MikroTikFan
Sat Mar 04, 2017 9:22 pm
Forum: General
Topic: Router is constantly asking about domain www.mikrotik.com
Replies: 7
Views: 614

Re: Router is constantly asking about domain www.mikrotik.com

Yes I'm using DUDE.

I wondering why I need this DUDE DNS ?
I have changed Dude configuration

Dude -> Probes -> DNS and change it from http://www.mikrotik.com to my local DNS on mikrotik router ip.

Is this right ?
Maybe should I delete this record ?
by MikroTikFan
Sat Mar 04, 2017 2:33 am
Forum: General
Topic: Router is constantly asking about domain www.mikrotik.com
Replies: 7
Views: 614

Re: Router is constantly asking about domain www.mikrotik.com

 /system clock> print
                  time: 01:32:39
                  date: mar/04/2017
  time-zone-autodetect: no
        time-zone-name: Europe/Warsaw
            gmt-offset: +01:00
            dst-active: no

... and still is doing that, what is responsible for this traffic ?
by MikroTikFan
Fri Mar 03, 2017 9:15 pm
Forum: General
Topic: Router is constantly asking about domain www.mikrotik.com
Replies: 7
Views: 614

Re: Router is constantly asking about domain www.mikrotik.com

/ip cloud /ip cloud> print ddns-enabled: no update-time: yes status: updated After changing update-time to no ip cloud set update-time=no /ip cloud> print ddns-enabled: no update-time: no status: updated I see in DNS logs traffic to http://www.mikrotik.com Mar 3 20:36:10 192.XXX.YY.ZZZ Mar 3 20:36:...
by MikroTikFan
Fri Mar 03, 2017 6:03 am
Forum: General
Topic: Router is constantly asking about domain www.mikrotik.com
Replies: 7
Views: 614

Router is constantly asking about domain www.mikrotik.com

Please help me to explore why Mikrotik router is constntly asking DNS about www.mikrotik.com domain ?

From DNS logs I see that this traffic is generating by router constantly:
MT-DNS: local query: #84709 www.mikrotik.com. A 
How to stop this proces ?
by MikroTikFan
Sun Feb 19, 2017 8:10 pm
Forum: General
Topic: Mikrotik supports OpenVPN GCM AES?
Replies: 0
Views: 399

Mikrotik supports OpenVPN GCM AES?

Please let me know if Mikrotik already supports latest OpenVPN 2.3.3 modes with GCM ?
  • TLS-DHE-RSA-WITH-AES-256-GCM-SHA384
    TLS-DHE-RSA-WITH-AES-128-GCM-SHA256
by MikroTikFan
Sun Jan 29, 2017 6:25 pm
Forum: General
Topic: VLAN configuration Mikrotik Router+Switch TP+Switch Ubnt
Replies: 3
Views: 1983

Re: VLAN configuration Mikrotik Router+Switch TP+Switch Ubnt

I need other biger switches, one is PoE and other is 24-port localised in other part of building.
In this configuration I need to setup cross devices VLAN networks.
by MikroTikFan
Wed Jan 25, 2017 9:31 pm
Forum: General
Topic: VLAN configuration Mikrotik Router+Switch TP+Switch Ubnt
Replies: 3
Views: 1983

VLAN configuration Mikrotik Router+Switch TP+Switch Ubnt

Please help me to configure VLAN and connect two Switches with Mikrotik: - Router RB3011 - EdgeSwitch PoE 16 port - TP Link 24 port (managed switches) In this forum I can find informations how to configure VLAN in one Mikrotik device. I don't know how to configure VLAN in this case Miktorik + two sw...
by MikroTikFan
Tue Dec 27, 2016 11:53 pm
Forum: Wireless Networking
Topic: two wAP ac and roaming
Replies: 0
Views: 493

two wAP ac and roaming

I would like ask if there is an option to use two wAP ac and having roaming between them.
I found feature called "Nstreme Dual" http://wiki.mikrotik.com/wiki/Manual:In ... treme_Dual,
but I'm not sure exactly ???
by MikroTikFan
Sat Dec 10, 2016 2:17 pm
Forum: RouterBOARD hardware
Topic: RB3011UiAS - possible to connect SSD ?
Replies: 11
Views: 2148

Re: RB3011UiAS - possible to connect SSD ?

I have send e-mail to Mikrotik Support (support@mikrotik.com) and share with community about this USB 3.0 issue. Unfortunately I haven't received any official reply from Mikrotik and either on this forum from Mikrotik employees. Please anyone from Mikrotik who is on this forum to make any statement....
by MikroTikFan
Sat Dec 03, 2016 11:02 am
Forum: RouterBOARD hardware
Topic: RB3011UiAS - possible to connect SSD ?
Replies: 11
Views: 2148

Re: RB3011UiAS - possible to connect SSD ?

The problem is that this very nice USB is not detected in RB3011 and I don't know why ?
by MikroTikFan
Sat Dec 03, 2016 12:29 am
Forum: RouterBOARD hardware
Topic: RB3011UiAS - possible to connect SSD ?
Replies: 11
Views: 2148

Re: RB3011UiAS - possible to connect SSD ?

I decided to use just USB via USB 3.0. Unfortunately one of the best USB SANDISK ULTRA FIT 32GB USB 3.0 (https://www.sandisk.com/home/usb-flash/ultra-fit-usb) is not working with RB3011. Both router and USB drive has USB 3.0 port and should work. I tried to format this drive using exfat and fat32 an...
by MikroTikFan
Fri Dec 02, 2016 9:43 am
Forum: General
Topic: SanDisk ULTRA FIT 32GB + RB3011 can't be detected
Replies: 0
Views: 348

SanDisk ULTRA FIT 32GB + RB3011 can't be detected

Please help me how to run SANDISK ULTRA FIT 32GB USB 3.0 (https://www.sandisk.com/home/usb-flash/ultra-fit-usb) with RB3011. Both router and USB drive has USB 3.0 port and should work. I tried to format this drive using exfat and fat32 and is still not recognized in disks. Before I have inserted thi...
by MikroTikFan
Thu Dec 01, 2016 11:26 pm
Forum: General
Topic: Tool: Realtime per IP traffic monitor for home/office
Replies: 289
Views: 305302

Re: Tool: Realtime per IP traffic monitor for home/office

I have found - WWW service has different port ;-) SnifferService.ini [Settings] #Required settings are uncommented #Defaults are shown #Capture packets from this network (ignore internal traffic) #Comma-separated values are accepted. Specify a mask for each network even if they are the same. Network...
by MikroTikFan
Thu Dec 01, 2016 11:03 pm
Forum: Wireless Networking
Topic: How to configure RB3011 + wAP ac
Replies: 6
Views: 3216

Re: How to configure RB3011 + wAP ac

This speed is needed when I would like to work on some movies 10-20 GB.
Transfer this movie to Mac and back to network drive.

I still wondering what is max bandwidth limit of my wAP ac and how to setup this correctly ?
by MikroTikFan
Thu Dec 01, 2016 8:07 pm
Forum: Wireless Networking
Topic: How to configure RB3011 + wAP ac
Replies: 6
Views: 3216

Re: How to configure RB3011 + wAP ac

I have MacBook Air which supports 1.3 Bbps AC. "802.11ac network using an 80MHz-wide channel can deliver even higher throughput: 433 mbps over a single spatial stream, 867 Mbps over two, and a staggering 1.3 Gbps over three spatial streams " Mikrotik access point is connected directly to my TP Link ...
by MikroTikFan
Thu Dec 01, 2016 9:33 am
Forum: General
Topic: Tool: Realtime per IP traffic monitor for home/office
Replies: 289
Views: 305302

Re: Tool: Realtime per IP traffic monitor for home/office

Hi Try to change your router IP. ip address you have is used as broadcast. Thank you this is broadcast , It mean 192.168.0.255 this is my understand correct or not , because I use 192.168.0.0/24 You are right! If you use mask 24 (255.255.255.0) you can use the 192.168.0.254 as your router adress. I...
by MikroTikFan
Tue Nov 29, 2016 10:08 pm
Forum: Beginner Basics
Topic: IPV6 firewall rules
Replies: 3
Views: 2203

Re: IPV6 firewall rules

Thank's for advise. I have few devices behind which have own ipv6 address. For this ipv6 addresses I need to limit connections on ports. For example limit ports to one of my ipv6 device 2001:....:aaaa 111,139,161,445,548,587 /ipv6 firewall filter add action=accept chain=input comment="Allow establis...
by MikroTikFan
Tue Nov 29, 2016 11:35 am
Forum: Beginner Basics
Topic: IPV6 firewall rules
Replies: 3
Views: 2203

IPV6 firewall rules

Please help me to find what I'm doing wrong with ipv6 firewall configuration. After nmap scanning ipv6 address I have still open some ports like : 111,139,161,445,548,587 In my firewall filter rules I have drop for this port but this is not working and after nmap scanning I dont see on this 0) rule ...
by MikroTikFan
Sat Nov 26, 2016 1:04 pm
Forum: General
Topic: Disabling traffic from googleusercontent.com
Replies: 0
Views: 375

Disabling traffic from googleusercontent.com

Google constantly is establishing connection to my router from address list https://db-ip.com/all/104.196.185 I'm trying to drop this connections using /ip firewall filter add chain=input action=drop connection-state=established,new protocol=tcp src-address=104.196.185.0/25 in-interface=pppoe-out lo...
by MikroTikFan
Sat Nov 26, 2016 11:08 am
Forum: Beginner Basics
Topic: Mikrotik + AdBlock Plus
Replies: 20
Views: 24800

Re: Mikrotik + AdBlock Plus

Did you increase size of DNS cache? Default 2MB is nowhere near enough for what you want to achieve. If you did not do that, most probably you see no hits because your DNS cache is not working at all. If you did increase the cache size, another firewall rule is interfering with your rule - in this ...
by MikroTikFan
Thu Nov 24, 2016 1:40 pm
Forum: Beginner Basics
Topic: Mikrotik + AdBlock Plus
Replies: 20
Views: 24800

Re: Mikrotik + AdBlock Plus

You might want to look at the size of your DNS cache. I have not done napkin math to tell you the exact cache size required for almost 150k entries, but I guess you could increase it to 200MB for starters, and if it's still full try increasing it even more. There is enough memory available on the b...
by MikroTikFan
Thu Nov 24, 2016 12:10 pm
Forum: RouterBOARD hardware
Topic: RB3011UiAS - possible to connect SSD ?
Replies: 11
Views: 2148

Re: RB3011UiAS - possible to connect SSD ?

What kind of data can I store in additional UDB3.0 memory drive:
- proxy data?
- lists for dns adblock and ddos firewall blocking?
- other?

Can I get your feed back how you are using this additional drives ?

I just want get idea how big this drive should be ?

32G, 64G, ora 128 G?
by MikroTikFan
Wed Nov 23, 2016 11:35 pm
Forum: Beginner Basics
Topic: Mikrotik + AdBlock Plus
Replies: 20
Views: 24800

Re: Mikrotik + AdBlock Plus

I have been implemented whole stuff like is described in GitHub https://github.com/aziraphale/routeros-dns-adblock I'm using RB3011 and I have 140 k records of static DNS. /ip dns print servers: 8.8.8.8 dynamic-servers: allow-remote-requests: yes max-udp-packet-size: 4096 query-server-timeout: 2s qu...
by MikroTikFan
Mon Nov 21, 2016 11:13 am
Forum: RouterBOARD hardware
Topic: RB3011UiAS - possible to connect SSD ?
Replies: 11
Views: 2148

Re: RB3011UiAS - possible to connect SSD ?

Fine, is there any USB drive limitations 32 Gb will be fine ?
Which file system is prefered ?
by MikroTikFan
Sun Nov 20, 2016 5:49 pm
Forum: RouterBOARD hardware
Topic: RB3011UiAS - possible to connect SSD ?
Replies: 11
Views: 2148

RB3011UiAS - possible to connect SSD ?

RB 3011UiAS has Qualcomm Authors Internet Processor. This processor is prefixed IPQ. APQ8064 (Snapdragon 600) and has SATA3 connectivity.

http://images.anandtech.com/doci/7526/I ... 1479656169

I just wondering if there is any chance to connect using SATA3 SSD drive ?
by MikroTikFan
Tue Nov 15, 2016 12:06 am
Forum: General
Topic: Domains in logs and Firewall connections
Replies: 10
Views: 1419

Re: Domains in logs and Firewall connections

Can I use Dude for main network traffic monitoring by domain names ?
by MikroTikFan
Fri Nov 11, 2016 10:44 pm
Forum: General
Topic: Domains in logs and Firewall connections
Replies: 10
Views: 1419

Re: Domains in logs and Firewall connections

Why this is not possible to get domain names. Other routers like DD-WRT or Openwrt can do this.
And Tomato Shibby. A list of the last 50(?) web sites visited, with timestamp and LAN IP address. Stunningly useful.
How to implement Tomato Shibby on Mikrotik ?
by MikroTikFan
Wed Nov 02, 2016 5:51 pm
Forum: General
Topic: Domains in logs and Firewall connections
Replies: 10
Views: 1419

Re: Domains in logs and Firewall connections

Thanks for this hints. Could you please explain in more details how to implement this. I have also Ubuntu server and maybe there is any solution how to automatically monitor all traffic by Ubuntu software. Important is to resolve all ip connection to domains, Preferred on-line monitoring solution Ad...
by MikroTikFan
Tue Nov 01, 2016 11:17 pm
Forum: Wireless Networking
Topic: How to configure RB3011 + wAP ac
Replies: 6
Views: 3216

How to configure RB3011 + wAP ac

Please help me to configure wireless access point wAP-ac (RBwAPG-5HacT2HnD-BE) with router RB3011 (RB3011UiAS-RM) to have fastest possible AC connection. Right now I'm using this access point in mode WISP AP and as wireless: *Band: A/N/AC *Channel with: 20/40/80 eeeC *Mode: Bridge This configuration...
by MikroTikFan
Sun Oct 09, 2016 3:15 am
Forum: General
Topic: PoE 5 ports Switch by Mikrotik
Replies: 0
Views: 299

PoE 5 ports Switch by Mikrotik

Hi, I need to build wireless 50m bridge and I hope that I will be able do this just using wAP ac? Next point is to connect in this remote localisation 2 pcs. X 3M cameras. That all might be enabled just using PoE supply, butI don't know if Miktotik is offering any switch with more than 3 PoE out ? H...
by MikroTikFan
Sat Sep 24, 2016 9:15 pm
Forum: General
Topic: Domains in logs and Firewall connections
Replies: 10
Views: 1419

Re: Domains in logs and Firewall connections

Why this is not possible to get domain names. Other routers like DD-WRT or Openwrt can do this.
by MikroTikFan
Sat Sep 24, 2016 3:15 pm
Forum: General
Topic: Domains in logs and Firewall connections
Replies: 10
Views: 1419

Domains in logs and Firewall connections

Hi,

I would like to have better control on my online traffic and I'm wondering how to see on-line current traffic.
In firewall we have online connections but only as a IP address.

Is this possible to convert them and see somehow domain list connections ?
by MikroTikFan
Fri Jul 29, 2016 1:18 am
Forum: Beginner Basics
Topic: Hoiw to limit access to webfig /graphs
Replies: 6
Views: 1872

Re: Hoiw to limit access to webfig /graphs

Thanks for all advice's. 
I know that I can give different port to whole webfig and different for winbox app.

To be sure if I understand right webfig separation - is this possible to separate webfig access from webfig access/graphs on different ports ?
by MikroTikFan
Mon Jul 11, 2016 10:43 am
Forum: Beginner Basics
Topic: Hoiw to limit access to webfig /graphs
Replies: 6
Views: 1872

Hoiw to limit access to webfig /graphs

I need a help how to limit access to my graphs shared through webfig service
When I share access to my router before login I can see my graphics stats.
Is there any way to limit this information after login or switch off ?
by MikroTikFan
Mon May 16, 2016 5:43 pm
Forum: General
Topic: Hairpin NAT configuration
Replies: 26
Views: 5274

Re: Hairpin NAT configuration

Can you please add info which is right order ?
by MikroTikFan
Mon May 16, 2016 3:23 pm
Forum: General
Topic: Hairpin NAT configuration
Replies: 26
Views: 5274

Re: Hairpin NAT configuration

I just wondering if in my case the only one solution is to use local DNS services ?
This situation should be quite popular if someone is providing web services.
How do you react if user will use externall dns, for example google
Yes I'm blocking google dns and most other dns services.
by MikroTikFan
Sun May 15, 2016 10:11 pm
Forum: General
Topic: Hairpin NAT configuration
Replies: 26
Views: 5274

Re: Hairpin NAT configuration

Different because of using DNS services for using different area restricted services for some web pages ;-)
by MikroTikFan
Sun May 15, 2016 9:14 pm
Forum: General
Topic: Hairpin NAT configuration
Replies: 26
Views: 5274

Re: Hairpin NAT configuration

Can I configure not only DNS local records in ip dns static but also different dns for different URL ?
by MikroTikFan
Sun May 15, 2016 7:50 pm
Forum: General
Topic: Hairpin NAT configuration
Replies: 26
Views: 5274

Re: Hairpin NAT configuration

The problem is that this config doesn't work and I can't open this web page from internal network. I'm not sure what you mean to allow packets from bridge-local to bridge-local in forward chain chain=forward action=accept in-interface=bridge-local out-interface=bridge-local log=no log-prefix="" This...
by MikroTikFan
Sun May 15, 2016 5:37 pm
Forum: General
Topic: Hairpin NAT configuration
Replies: 26
Views: 5274

Re: Hairpin NAT configuration

The last rule is obviously wrong: - dst-address=192.168.20.100.0/24 doesn't really need an explanation :) - it can't have out-interface=pppoe-out1 if it's supposed to do hairpin NAT, the correct interface would be bridge-local But if your WAN address is really 192.168.111.111, i.e. non-public one, ...
by MikroTikFan
Sun May 15, 2016 3:46 pm
Forum: General
Topic: Hairpin NAT configuration
Replies: 26
Views: 5274

Hairpin NAT configuration

net1.png Please help me to find reason why my router do not goes to external domains locally. chain=srcnat action=masquerade out-interface=pppoe-out log=no log-prefix="" chain=dstnat action=dst-nat to-addresses=192.168.100.210 protocol=tcp dst-address=192.168.111.111 dst-port=80 log=no log-prefix="...
by MikroTikFan
Sat May 07, 2016 9:52 pm
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

All ipv6 test are showing that all is fine ;-) I have changed MTU for he 6to4 tunnel for 1280, L2 MTU for this interface has value 65535 and this valu I can't change. Source interface PPPoE has, Max MTU - 1480, Max MRU - 1480, MRRU - 1480. I tried other lower values but this looks not so sensitive f...
by MikroTikFan
Fri May 06, 2016 10:09 pm
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

I have changed MTU for PPPoE and HE same value 1480 and the result is the same as before. Still most web pages are working properly on IPV6 protocol. I found just by accident that mikrotik.com, forum.mikrotik.com and netflix.com are not working as a web page and are answering for ping as IPV6 addres...
by MikroTikFan
Fri May 06, 2016 8:48 pm
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

If pings work but not HTTP, then you probably have an MTU problem. Try pinging with a full-mtu-sized packet and the DF flag set. If that also fails, then it's MTU. My PPPoE MTU is 1500 and HE interface MTU is the same 1500. How to do this check? BTW: many other web pages are working correct - like ...
by MikroTikFan
Fri May 06, 2016 8:05 pm
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

I allow ICMP on my router's input chain - icmpv6 is much more critical to IPv6 than ICMP is to v4. For instance, the "arp" function (now called ND - neighbor discovery) uses icmpv6 to do its job, so you must at the very least accept ND requests or else nobody's going to be able to transmit data to ...
by MikroTikFan
Thu May 05, 2016 9:28 pm
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

My nd config is below /ipv6 nd export # may/05/2016 20:49:37 by RouterOS 6.35.1 # software id = AEFK-U9CX # /ipv6 nd set [ find default=yes ] advertise-dns=yes other-configuration=yes ra-lifetime=10m /ipv6 nd prefix add autonomous=no interface=bridge-local on-link=no preferred-lifetime=5m prefix=::/...
by MikroTikFan
Thu May 05, 2016 12:19 pm
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

May I ask for any recomendation why mikrotik.com ipv6 site is not working ? Same thing is with the ipv6 site netflix.com Strange thing is that those sites are pinging ipv6 address properly. /ipv6 firewall address-list add address=2001:470:X0:YYY::/64 list=home /ipv6 firewall filter add chain=input c...
by MikroTikFan
Fri Apr 29, 2016 2:18 pm
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

did you set gateway to be interface ether1-gateway? Yes and now changed to 2001:470:X0:YYY::1 XX@CoreRouter] > ipv6 route print Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, o - ospf, b - bgp, U - unreachable # DST-ADDRESS GATEWAY DISTANCE 0 A S ::/0 2001:470:X0:YY...
by MikroTikFan
Fri Apr 29, 2016 8:25 am
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

I have changed this two interfaces 0 G 2001:470:X 0 :YYY::2/64 1 G 2001:470:X 1 :YYY::1/64 XX@CoreRouter] /ipv6 address print Flags: X - disabled, I - invalid, D - dynamic, G - global, L - link-local # ADDRESS FROM-POOL INTERFACE ADVERTISE 0 G 2001:470:X0:YYY::2/64 he no 1 G 2001:470:X1:YYY::1/64 br...
by MikroTikFan
Thu Apr 28, 2016 10:02 pm
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

Your 'default route' should use interface = he, not interface = ether1 gateway. That's the static route: 2000::/3 Thanks for this advise, I have change it XX@CoreRouter] /ipv6 route print Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, o - ospf, b - bgp, U - unreacha...
by MikroTikFan
Thu Apr 28, 2016 7:03 pm
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

That is fine ;-) I have received IPV6 address :D Now there is next problem - I don't see IPV6 external network thru 6to4 HE tunnel. I'm trying to ping 2620:0:1cfe:face:b00c::3 but without connection :( I just wondering if my routing for this IPV6 HE connection is correct ? ... XX@CoreRouter] /ipv6 r...
by MikroTikFan
Thu Apr 28, 2016 5:38 pm
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

I have changed that XX@CoreRouter] /ipv6 nd print Flags: X - disabled, I - invalid, * - default 0 * interface=all ra-interval=3m20s-10m ra-delay=3s mtu=unspecified reachable-time=unspecified retransmit-interval=unspecified ra-lifetime=10m hop-limit=unspecified advertise-mac-address=yes advertise-dns...
by MikroTikFan
Thu Apr 28, 2016 4:20 pm
Forum: Announcements
Topic: v6.35.1 [current] is released!
Replies: 84
Views: 20785

Re: v6.35.1 [current] is released!

I have RB2011UiAS and when I'm testing my connection 100MB I see that CPU is used 80-95% I'm using PPPoE connection to my provider. Because of this I have to change my config to not exceed 100% of CPU. Otherwise I can't fully use my speed. I'm just supposed that this is only on this last version v 6...
by MikroTikFan
Thu Apr 28, 2016 3:52 pm
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

I have assigned ether1-gateway to ipv6-2001:XXX:X0:XXX::1/64. 1 G 2001:XXX:X0:XXX::1/64 ether1-gateway yes You suggest to change it to bridge ? Can you be so kind and put to update mikrotik code what to update ? Thanks in advance !
by MikroTikFan
Thu Apr 28, 2016 11:30 am
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

Please help me to find the reason why I'm not getting ipv6 address from Windows 10 system. I have IPV6 from HE and everything looks fine but I still do not receive ipv6 My ND configuration: XX@CoreRouter] /ipv6 nd print Flags: X - disabled, I - invalid, * - default 0 * interface=all ra-interval=3m20...
by MikroTikFan
Sun Feb 21, 2016 12:02 pm
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

Thanks for clarifying me how it works. Before I will remove dhcp.v6 server please confirm that rest of my devices like android phones, iPads either will not use this ? As I understand my dhcp.v6 server is not a reason why I'm not getting ipv6 addresses but I'm not sure if this concerns all types of ...
by MikroTikFan
Sat Feb 20, 2016 3:04 pm
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

After that all hints, changing configuration somehow I just lost my ipv6 address in my LAN clients :? Now I have only ipv4 and local-link without ipv6 :( I have checked all and really I don't know what to change again. I'm trying to find what can cause stopping to share from Mikrotik ipv6 address? M...
by MikroTikFan
Sat Feb 20, 2016 1:53 am
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

Windows since Vista work fine with DHCPv6. It's just DNS in RA that Microsoft decided to boycott. But unless you're building pure IPv6-only network, it should not be a problem, because even DNS server with IPv4 address can answer queries about IPv6 records. In my case unfortunately without setting ...
by MikroTikFan
Fri Feb 19, 2016 10:51 pm
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

automatic DNS - for Windows - you can't with only a Mikrotik router. Mikrotik's only way to assign DNS information is in the RA packets - so Mikrotik expects the SLAAC clients to use this information to configure their dns automatically as well. If you have an Apple device, you'll notice that these...
by MikroTikFan
Thu Feb 18, 2016 8:45 am
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

Right! my HE IPV6 data: IPv6 Tunnel Endpoints Server IPv6 Address:2001:XXX:X0:XXX::1/64 Client IPv6 Address:2001:XXX:X0:XXX::2/64 Routed IPv6 Prefixes Routed /64:2001:XXX:X1:XXX::/64 I changed my addresses in IPV6 /ipv6 address print Flags: X - disabled, I - invalid, D - dynamic, G - global, L - lin...
by MikroTikFan
Thu Feb 18, 2016 12:07 am
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

The "XXX:XX:XXX" in 2001:XXX:XX:XXX::1 is not exactly the same as "XXX:XX:XXX" in 2001:XXX:XX:XXX::2, right? This XXX:XX:XXX in "XXX:XX:XXX" in 2001:XXX:XX:XXX::1 is exactly the same as "XXX:XX:XXX" in 2001:XXX:XX:XXX::2 /ipv6 address> print Flags: X - disabled, I - invalid, D - dynamic, G - global...
by MikroTikFan
Thu Feb 18, 2016 12:03 am
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

(...)
by MikroTikFan
Thu Feb 18, 2016 12:03 am
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

Traceroute checked. All firewall lines disabled. I see only one hoop to my link-local gateway : fe80::4e5e:cff:fe43:8996%18 /ipv6 route print Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, o - ospf, b - bgp, U - unreachable # DST-ADDRESS GATEWAY DISTANCE 0 A S ::/0 2...
by MikroTikFan
Wed Feb 17, 2016 10:51 pm
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

IPV6 address received :D 6to4 tunnel enabled and running. ...but only one problem is that I don't have connection to IPV6 sites Strange is that in my IPV6 address list I added only two lines (0,1), but after reboot I have got additional (3,4,5) Flags: X - disabled, I - invalid, D - dynamic, G - glob...
by MikroTikFan
Wed Feb 17, 2016 8:39 pm
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

How to configure correctly DHCP6 in my case for IPV6 from HE 6to4 tunnel ?
Right now I think that something is wrong with my Mikrotik DHCP6 server configuration.
by MikroTikFan
Mon Feb 15, 2016 9:27 pm
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

I followed your instruction. I think that my problem is that despite the enabled DHCP6 server my computer doesn't get ipv6 address. Binding # ADDRESS DUID SERVER STATUS 0 2001:XXX:XX:XXX::/64 0xffffff server_dhcpipv6 waiting DHCP # NAME INTERFACE ADDRESS-POOL PREFERENCE LEASE-TIME 0 server_dhcpipv6 ...
by MikroTikFan
Sat Feb 13, 2016 9:19 pm
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

Re: IPV6 internal configuration

Thanks - that is almost done, but I don't have in protocol - ipv6. When I tried to put ipv6 is in red, when 41 is accepted, but dont see any ipv6 comment. /ip firewall filter add chain=input comment="IPv6 tunnel (protocol 41)" in-interface=\ ether1-gateway protocol=ipv6 src-address=a.b.c.d I just wo...
by MikroTikFan
Sat Feb 13, 2016 2:15 pm
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 9140

IPV6 internal configuration

I have HE 6to4 tunnel. My whole LAN is connected to Mikrotik through TP-Link managed switch. My switch supports IPV6 and I have link-local address config fe80::fa1a:67ff:fe48:61ab. From tunnel broker I have different address 64 class : 2001.********** How to setup my whole network to assign for some...
by MikroTikFan
Fri Jan 08, 2016 9:26 pm
Forum: General
Topic: L2TP VPN problem to connect from Windows 7
Replies: 11
Views: 2984

Re: L2TP VPN problem to connect from Windows 7

Could I ask for help ;-)
Thanks in advance !
by MikroTikFan
Thu Jan 07, 2016 1:20 pm
Forum: General
Topic: L2TP VPN problem to connect from Windows 7
Replies: 11
Views: 2984

Re: L2TP VPN problem to connect from Windows 7

I think that in my case Windows 7, 8.1, 10 VPN client is not problem. I tried also to connect L2TP, PP2P from LAN and this is working fine, after I will switch client station to external network ie. 3G/4G I'm having problem ;-( Something is wrong in Mikrotik Firewall. I don't know what I have to cha...
by MikroTikFan
Thu Jan 07, 2016 12:37 am
Forum: General
Topic: Feature request - DNSCrypt support...
Replies: 157
Views: 45757

Re: Feature request - DNSCrypt support...

Please consider that DSNCrypt can use a lot of resolvers in different part of the World without establishing payed commercial VPN. https://github.com/jedisct1/dnscrypt-proxy/blob/master/dnscrypt-resolvers.csv Please keep in mind also that for some solutions with big traffic you don't need to use VPN...
by MikroTikFan
Tue Jan 05, 2016 6:14 pm
Forum: General
Topic: L2TP VPN problem to connect from Windows 7
Replies: 11
Views: 2984

Re: L2TP VPN problem to connect from Windows 7

I thing that I'm step ahead and don't have problems with firewal any more. Still I can't establish pptp connection ;-( 17:09:38 pptp,info VPN pptp: TCP connection established from 37.47. 37.37 17:09:38 pptp,info TCP connection established from 37.47.37.37 17:09:38 pptp,debug,packet VPN pptp: rcvd St...
by MikroTikFan
Sat Jan 02, 2016 2:03 pm
Forum: General
Topic: L2TP VPN problem to connect from Windows 7
Replies: 11
Views: 2984

Re: L2TP VPN problem to connect from Windows 7

Can I ask in New Year anybody for help ;-)

Thanks in advance!
by MikroTikFan
Thu Dec 31, 2015 2:11 am
Forum: General
Topic: L2TP VPN problem to connect from Windows 7
Replies: 11
Views: 2984

Re: L2TP VPN problem to connect from Windows 7

IP-CONN.png After some config changes this L2TP VPN works in my LAN. Because of this I don't have any problems with secrets.;-) Maybe there is problem in IPsec configuration and by default this works from inside of the network and from outside not /ip ipsec policy> print Flags: T - template, X - di...
by MikroTikFan
Wed Dec 30, 2015 11:07 pm
Forum: General
Topic: L2TP VPN problem to connect from Windows 7
Replies: 11
Views: 2984

Re: L2TP VPN problem to connect from Windows 7

I hope than anybody can help me with this problem :D
Thanks in advance !
by MikroTikFan
Wed Dec 30, 2015 12:16 am
Forum: General
Topic: L2TP VPN problem to connect from Windows 7
Replies: 11
Views: 2984

Re: L2TP VPN problem to connect from Windows 7

I found small error in config and now I can establish l2tp vpn from inside of network. Probably something is wrong in firewall config. For this von I have : ;;; OpenVPN chain=input action=accept protocol=tcp in-interface=ether1-gateway dst-port=1460 log=no log-prefix="" chain=input action=accept pro...
by MikroTikFan
Tue Dec 29, 2015 11:56 pm
Forum: General
Topic: NAT WebFig access
Replies: 4
Views: 1020

Re: NAT WebFig access

Thank's, I got your point ;-)

Now is working ;-)
by MikroTikFan
Tue Dec 29, 2015 10:40 pm
Forum: General
Topic: Routerboard 2011UiAS firmware upgrade
Replies: 4
Views: 2399

Re: Routerboard 2011UiAS firmware upgrade

So after upgrade command this will download and upgrade firmware ? After run this comand is firmware upgraded. Then is needed restart router for perform upgrade. Where I can find difference between current firmware : 3.18, and new 3.24 ? Do you see a post one before you? Right ;-) but for my 2011Ui...
by MikroTikFan
Tue Dec 29, 2015 10:35 pm
Forum: General
Topic: NAT WebFig access
Replies: 4
Views: 1020

Re: NAT WebFig access

I have done your suggestions and changed webfig port from services to just 443. I have checked from LAN and all works fine on port 443. I have disabled NAT rule and add new one in firewall input filter: ;;; WinFig chain=input action=accept protocol=tcp in-interface=ether1-gateway dst-port=2443 log=y...
by MikroTikFan
Tue Dec 29, 2015 9:40 pm
Forum: General
Topic: NAT WebFig access
Replies: 4
Views: 1020

NAT WebFig access

I tried to get access to my WebFig on port 2443. ;;; Router HTTPS chain=dstnat action=dst-nat to-addresses=192.168.10.101 to-ports=2443 protocol=tcp dst-port=2443 log=yes log-prefix="WebFig" but this is not working 20:37:18 firewall,info WebFig dstnat: in:ether1-gateway out:(none), src-mac 00:d0:cb:...
by MikroTikFan
Tue Dec 29, 2015 9:33 pm
Forum: General
Topic: Routerboard 2011UiAS firmware upgrade
Replies: 4
Views: 2399

Re: Routerboard 2011UiAS firmware upgrade

So after upgrade command this will download and upgrade firmware ?
Where I can find difference between current firmware : 3.18, and new 3.24 ?
by MikroTikFan
Tue Dec 29, 2015 8:45 pm
Forum: General
Topic: Routerboard 2011UiAS firmware upgrade
Replies: 4
Views: 2399

Routerboard 2011UiAS firmware upgrade

Please advise me what is the difference between

Current firmware : 3.18
Upgrade firmware : 3.24

Should I download somewhere new firmware and put somewhere ? or this is automated proces ?

Should I upgrade my routerboard 2011UiAS?
by MikroTikFan
Tue Dec 29, 2015 8:25 pm
Forum: General
Topic: L2TP VPN problem to connect from Windows 7
Replies: 11
Views: 2984

L2TP VPN problem to connect from Windows 7

Please help me to find a reason why my VPN L2TP connection is not running. Because I have problem from outside my network to connect first I tried to connect I decided to run first from my LAN. Mikrotik 192.168.29.254 Win7: 192.168.29.180 Firewall ;;; OpenVPN chain=input action=accept protocol=tcp d...
by MikroTikFan
Tue Dec 22, 2015 9:27 pm
Forum: General
Topic: Feature request: OpenVPN compression LZO and UDP
Replies: 200
Views: 93521

Re: Feature request: OpenVPN compression LZO and UDP

Mikrotik Support - can you share witch this community date when Mikrotik Team is going to launch RouterOS v7 ?
by MikroTikFan
Sat Dec 19, 2015 12:44 am
Forum: General
Topic: How to route traffic to VPN thru other linux machine
Replies: 2
Views: 514

Re: How to route traffic to VPN thru other linux machine

Sorry, this line I have captured when this was disabled.

If this is enabled still my traffic is not routed.
by MikroTikFan
Fri Dec 18, 2015 6:44 pm
Forum: General
Topic: OpenVPN restrict acces list
Replies: 2
Views: 592

Re: OpenVPN restrict acces list

Anyone can help me ?

Thank's in advance ;-)
by MikroTikFan
Fri Dec 18, 2015 6:38 pm
Forum: General
Topic: How to route traffic to VPN thru other linux machine
Replies: 2
Views: 514

How to route traffic to VPN thru other linux machine

Because currently on Mikrotik is impossible to establish UDP openvpn connection I have build solution based on RasPi+Mikrotik (main router). My RasPi has Debian and already established UDP openvpn connection. RasPi has ip:192.168.100.105 and connect to remote VPN connection172.16.199.99. I tried to ...
by MikroTikFan
Sun Dec 13, 2015 1:32 pm
Forum: General
Topic: Feature request: OpenVPN compression LZO and UDP
Replies: 200
Views: 93521

Re: Feature request: OpenVPN compression LZO and UDP

Mikrotik support answer (just now):
Thank you for the suggestion. We are already working on UDP OpenVPN in RouterOS v7

May I ask Mikrotik Support when this will be launched to production and announced to all Mikrotik community?
by MikroTikFan
Wed Nov 25, 2015 10:07 pm
Forum: General
Topic: OpenVPN restrict acces list
Replies: 2
Views: 592

OpenVPN restrict acces list

Despite the many constraints I succeed and establish openvpn connection ;-)
Now I just wondering how can I restrict access to recources (IP, port, MAC)

1) OpenVPN as a client, restriction by client side

2) OpenVPN as a server, restriction by server side
by MikroTikFan
Wed Nov 25, 2015 9:00 pm
Forum: General
Topic: Feature request: OpenVPN compression LZO and UDP
Replies: 200
Views: 93521

Re: Feature request: OpenVPN compression LZO and UDP

+1 -- UDP
+1 -- LZO

Why Mikrotik stuff is not going to answer or make this happened since so many years ???

Customers votes are not important ???????????????????????????????????????
by MikroTikFan
Wed Nov 25, 2015 2:26 pm
Forum: General
Topic: RB3011UiAS-RM + GPON?
Replies: 1
Views: 625

RB3011UiAS-RM + GPON?

Please anyone from Mikrotik team can confirm if GPON module can work tohether with new RB3011UiAS-RM ?

GPON
http://routerboard.com/SFPONU

+

RB3011UiAS-RM
http://routerboard.com/RB3011UiAS-RM
by MikroTikFan
Wed Nov 25, 2015 12:22 am
Forum: General
Topic: OpenVPN connection with certificates authorisation
Replies: 12
Views: 4579

Re: OpenVPN connection with certificates authorisation

UDP mode is currently unsupported in both openvpn roles client (server other router) and server on Mikrotik ;-(

Why this is so popular in other routers and UDP port is simply faster !
by MikroTikFan
Tue Nov 24, 2015 8:56 pm
Forum: Virtualization
Topic: Metarouter images
Replies: 365
Views: 243457

Re: Metarouter images

I need to setup OpenVPN UDP connection to OpenWRT router.
Afrer last fix to SSL bugs probably I need last version of openwrt.

Please help me and provide last openwrt image for RB2011UiAS


Thank's in advance!
by MikroTikFan
Tue Nov 24, 2015 2:03 pm
Forum: General
Topic: OpenVPN connection with certificates authorisation
Replies: 12
Views: 4579

Re: OpenVPN connection with certificates authorisation

Frequent Visitor explained I think you missed the point that unless and until MikroTik implements it, a MikroTik router (as OpenVPN server) accepts only tcp protocol for openVPN connection. that Mikrotik implements this, so I understand that using 1) Mikrotik OpenVPN server I can't use UDP but othe...
by MikroTikFan
Tue Nov 24, 2015 1:58 pm
Forum: General
Topic: OpenVPN connection with certificates authorisation
Replies: 12
Views: 4579

Re: OpenVPN connection with certificates authorisation

Solution based on MetaRouter (OpenWRT) is not efficient and quite complicated. I'm owner of Mikrotik router and Mikrotik OS not OpenWRT. I just expect from Mikrotik to support market standards solutions like OpenVPN UDP and TCP. I need to connect to OpenVPN 1194 (UDP) which is a standard solution an...
by MikroTikFan
Tue Nov 24, 2015 7:22 am
Forum: General
Topic: OpenVPN connection with certificates authorisation
Replies: 12
Views: 4579

Re: OpenVPN connection with certificates authorisation

proto tcp-client
but I need UDP, so how can I run ovpn client with udp-proto?
by MikroTikFan
Mon Nov 23, 2015 11:43 pm
Forum: General
Topic: OpenVPN connection with certificates authorisation
Replies: 12
Views: 4579

Re: OpenVPN connection with certificates authorisation

I think that I just found reason in post

http://forum.mikrotik.com/viewtopic.php?f=1&t=77898

about problems to use UDP with OpenVPN (1194)

Is there any way to connect as OpenVPN client to UDP 1194 port ?

Default protocol for OpenVPN is 1194 (UDP) and this is not working ?
by MikroTikFan
Mon Nov 23, 2015 11:40 pm
Forum: General
Topic: IGMP Snooping
Replies: 137
Views: 59915

Re: IGMP Snooping

Why Mikrotik stuff is not hearing customers voice ???
How long this should take since 2012-1015, Mikrotik wasted 3 years !


In the same time most of other companies have implemented this feature even in low-end routers/switches !
by MikroTikFan
Mon Nov 23, 2015 11:34 pm
Forum: General
Topic: Feature request: OpenVPN compression LZO and UDP
Replies: 200
Views: 93521

Re: Feature request: OpenVPN compression LZO and UDP

+1 for UDP

Why Mikrotik stuff is not taking into consideration customers votes ???
This times this is unique business strategy ...
by MikroTikFan
Mon Nov 23, 2015 1:01 pm
Forum: General
Topic: OpenVPN connection with certificates authorisation
Replies: 12
Views: 4579

Re: OpenVPN connection with certificates authorisation

I have checked informations from OpenVPN server logs. Unfortunately in OpenVPN server logs I don't see any connections tyres from my client. On the other hand from OpenVPN Client side I see that each connection is ended - disconnected Please look at my log (attachment) and help me why Mikrotik is no...
by MikroTikFan
Sun Nov 22, 2015 12:07 am
Forum: General
Topic: OpenVPN connection with certificates authorisation
Replies: 12
Views: 4579

Re: OpenVPN connection with certificates authorisation

Thanks, this is very important, especially user=CN <common name of client cert> Now go to PPP/Profiles and create a new profile named openvpn-client. Set as follows... Use IPv6: no Use MPLS: no Use Compression: no Use VJ Compression: no Use Encryption: yes All other fields can be left empty or at th...
by MikroTikFan
Sat Nov 21, 2015 3:18 pm
Forum: General
Topic: OpenVPN connection with certificates authorisation
Replies: 12
Views: 4579

OpenVPN connection with certificates authorisation

Hello, Please help me to configure my OpneVPN connection to OpenVPN Server. I have generated from server my certs: ca.crt my.crt my.key I have found some instructions how to configure ovpn client, but most of them have user name and passwords. My authorization is based on certificates. Please help m...
by MikroTikFan
Thu Nov 12, 2015 6:48 pm
Forum: Wireless Networking
Topic: Product recommendation for outdoor 300m Point-to-Point
Replies: 10
Views: 1305

Re: Product recommendation for outdoor 300m Point-to-Point

Thanks for so much information.
I have to check all this stuff.

I just wondering how fast this connection could be if I will use QRT 5 ac ?
Anyone can share with me information's from real life ?
by MikroTikFan
Tue Nov 10, 2015 1:32 pm
Forum: Wireless Networking
Topic: Product recommendation for outdoor 300m Point-to-Point
Replies: 10
Views: 1305

Re: Product recommendation for outdoor 300m Point-to-Point

Why I can get only 150/150 Mbps ...on the other hand I see https://www.youtube.com/watch?v=MWhD2z59ORo ~300/300Mbps ;-)

As I understand 5Ghz "Nstreme Dual" can double this transfer ?
by MikroTikFan
Mon Nov 09, 2015 1:04 pm
Forum: Wireless Networking
Topic: Product recommendation for outdoor 300m Point-to-Point
Replies: 10
Views: 1305

Re: Product recommendation for outdoor 300m Point-to-Point

What range of speed can I get using Mikrotik hardware ?
by MikroTikFan
Mon Nov 09, 2015 12:56 pm
Forum: General
Topic: Feature request - DNSCrypt support...
Replies: 157
Views: 45757

Re: Feature request - DNSCrypt support...

+1 for DNSCrypt.

When ?
by MikroTikFan
Mon Nov 09, 2015 12:56 am
Forum: Wireless Networking
Topic: Product recommendation for outdoor 300m Point-to-Point
Replies: 10
Views: 1305

Product recommendation for outdoor 300m Point-to-Point

Please recommend me hardware for outdoor 300m Point-to-Point connection.
I need connection with speed t least 500/500Mbit.

Important is also low latency because this connection will be used also for media streaming.
Please suggest system wireless device and antenna for this distance and speed.
by MikroTikFan
Mon Nov 02, 2015 3:33 pm
Forum: RouterBOARD hardware
Topic: Switch with POE
Replies: 8
Views: 1724

Switch with POE

I'm trying to find gigabit Mikrotik Switch with 8 - 16 port, but I don't see any...
by MikroTikFan
Mon Nov 02, 2015 2:59 pm
Forum: RouterBOARD hardware
Topic: Hardware for fastest wireless 500 m connection
Replies: 2
Views: 589

Hardware for fastest wireless 500 m connection

Please recommend Mikrotik hardware to have stable wireless connection low ping and high speed (500/500 MBps).
Distance is around 500 m, outside temperature in Winter might be -20 -30 C.
by MikroTikFan
Wed Sep 23, 2015 12:46 am
Forum: Wireless Networking
Topic: When cAP with double band with ac
Replies: 2
Views: 728

When cAP with double band with ac

Anybody knows if Mikrotik is going to launch new cAP/wAP with double band and AC networks.
If YES - When ?
by MikroTikFan
Tue Mar 24, 2015 8:28 pm
Forum: General
Topic: Incoming traffic forwarding on 443 port
Replies: 17
Views: 16810

Re: Incoming traffic forwarding on 443 port

Sob Yor solution works great ! Thanks for help ! Good catch, sob. Adding the 4th rule to "catch the pinhole early" is needed. I didn't think about that case. Honestly, I always hate to find such an installation with double nat. Get the public IP on your own router, or else have static interior route...
by MikroTikFan
Mon Mar 23, 2015 7:40 pm
Forum: General
Topic: Incoming traffic forwarding on 443 port
Replies: 17
Views: 16810

Re: Incoming traffic forwarding on 443 port

Thank's for your solution. this works same /ip firewall nat add action=masquerade chain=srcnat out-interface=WAN add action=dst-nat chain=dstnat dst-address=192.168.1.101 dst-port=443 protocol=tcp to-addresses=192.168.2.2 add action=masquerade chain=srcnat dst-address=192.168.2.0/24 out-interface=LA...
by MikroTikFan
Mon Mar 23, 2015 6:11 pm
Forum: General
Topic: Incoming traffic forwarding on 443 port
Replies: 17
Views: 16810

Re: Incoming traffic forwarding on 443 port

router-wan(internet source)=192.168.1.101 router-lan=192.168.2.254 ssl-device(forward ssl to)=192.168.2.2 The solution works but that depends from where I'm checking the whole solution. 1. OUTSIDE LAN - INTERNET When I'm trying to check from outside to domain mydomain.com (195.123.33.44) and configu...
by MikroTikFan
Sun Mar 22, 2015 4:12 pm
Forum: General
Topic: Incoming traffic forwarding on 443 port
Replies: 17
Views: 16810

Re: Incoming traffic forwarding on 443 port

after that additional parameters forwarding from outside to 443 is not working ;-(
by MikroTikFan
Sun Mar 22, 2015 12:59 pm
Forum: General
Topic: Incoming traffic forwarding on 443 port
Replies: 17
Views: 16810

Incoming traffic forwarding on 443 port

Hello, please help me to setup incoming forwarding rule for 443 ports. I have to froward incoming traffic on port 443 (SSL - browser) to other device than my router. router-wan(internet source)=192.168.40.1 router-lan=192.168.50.1 ssl-device(forward ssl to)=192.168.50.2 I tried to make it by my selv...
by MikroTikFan
Sat Feb 14, 2015 6:08 pm
Forum: General
Topic: IGMP Snooping
Replies: 137
Views: 59915

Re: IGMP Snooping

+1 IGMP Snooping, so for Mikrotik developers wheeeeeen ?
by MikroTikFan
Tue Dec 09, 2014 10:42 pm
Forum: General
Topic: How to redirect traffic from googledns to other dns provider
Replies: 6
Views: 1425

Re: How to redirect traffic from googledns to other dns prov

/ip firewall nat add chain=dstnat protocol=udp src-address=192.168.10.40 dst-address=8.8.8.8 dst-port=53 action=dst-nat
to-addresses=69.42.56.54 to-port=53

???
by MikroTikFan
Tue Dec 09, 2014 7:39 am
Forum: General
Topic: How to redirect traffic from googledns to other dns provider
Replies: 6
Views: 1425

Re: How to redirect traffic from googledns to other dns prov

correct? /ip firewall nat add chain=dstnat protocol=udp src-address=192.168.10.40 dst-address=8.8.8.8 src-port=53 action=dst-nat to-addresses=69.42.56.54 to-port=53 to make same as: iptables -I PREROUTING -t nat -p udp -d 8.8.8.8 --dport 53 -j DNAT --to-destination 69.42.56.54 only for LAN IP-192.16...
by MikroTikFan
Tue Dec 09, 2014 12:29 am
Forum: General
Topic: How to redirect traffic from googledns to other dns provider
Replies: 6
Views: 1425

How to redirect traffic from googledns to other dns provider

Please help me to implement following iptables instruction which redirect LAN traffic from google dns to other dns provider (69.42.56.54). iptables -I PREROUTING -t nat -p udp -d 8.8.4.4 --dport 53 -j DNAT --to-destination 69.42.56.54 iptables -I PREROUTING -t nat -p udp -d 8.8.8.8 --dport 53 -j DNA...
by MikroTikFan
Mon Nov 03, 2014 4:54 pm
Forum: General
Topic: Mixed IPV6/IPV4 network and he.net
Replies: 2
Views: 729

Re: Mixed IPV6/IPV4 network and he.net

Thanks for explanation. I have account in HE.net and I know that there is a script provided by HE, but doesn't work ;-( I will follow this guide (http://wiki.mikrotik.com/wiki/Manual:My_First_IPv6_Network), I hope this will work. I need access from LAN to outside my network IPV6 and IPV4 access, and...
by MikroTikFan
Mon Nov 03, 2014 2:04 pm
Forum: General
Topic: Mixed IPV6/IPV4 network and he.net
Replies: 2
Views: 729

Mixed IPV6/IPV4 network and he.net

I just wondering where can I found guide how to configure in Mikrotik hybrid LAN network of ipv4 and ipv6 clients.
Solution based on Hurricane Electric WAN.
by MikroTikFan
Fri Oct 24, 2014 1:34 am
Forum: General
Topic: SMTP SSL - Port forwarding
Replies: 12
Views: 7271

Re: SMTP SSL - Port forwarding

Yeeeeeeeeeeeeeeeees You are The Best ! http://wiki.mikrotik.com/wiki/Hairpin_NAT works in this case. I have also small other problem. I have forwarded port 443 from WAN to LAN (192.168.22.88) and this connection works properly from outside ;-) One important inconvenience is when I will browse other ...
by MikroTikFan
Fri Oct 24, 2014 1:09 am
Forum: General
Topic: SMTP SSL - Port forwarding
Replies: 12
Views: 7271

Re: SMTP SSL - Port forwarding

All of this ports (995, 465, 993, 25) I have forwarded and this works from outside my network f.e. from 3G connection. But when I tried to connect via Outlook(Windows) or Thunderbird(Ubuntu) from laptops located in my LAN mail clients don't have access to mail server and I can't send or receive any ...
by MikroTikFan
Fri Oct 24, 2014 12:18 am
Forum: General
Topic: SMTP SSL - Port forwarding
Replies: 12
Views: 7271

Re: SMTP SSL - Port forwarding

I did run the connections from outside my home thru 3G connections, and mail server works properly. The problem is when I tried to send email being connected to my LAN. My current configuration is : 1. My external address: 213.222.33.44 (fake) 2. Then after my edge fiber router: 192.168.11.1 3. Then...
by MikroTikFan
Thu Oct 23, 2014 8:31 pm
Forum: General
Topic: SMTP SSL - Port forwarding
Replies: 12
Views: 7271

Re: SMTP SSL - Port forwarding

ether1 is WAN interface.
by MikroTikFan
Thu Oct 23, 2014 7:42 am
Forum: General
Topic: SMTP SSL - Port forwarding
Replies: 12
Views: 7271

Re: SMTP SSL - Port forwarding

Outgoing messages from my mail server in LAN IP 192.168.22.2
Regarding port 25 I have also same forwarding rule in mikrotik for this port and same for others (POP3SSL-995, IMAPSSL-993).
I have also forward/accept rule for 465 and 25 port.

Mail server stil from 192.168.22.2 cant send out e-mails.
by MikroTikFan
Thu Oct 23, 2014 1:21 am
Forum: General
Topic: SMTP SSL - Port forwarding
Replies: 12
Views: 7271

SMTP SSL - Port forwarding

I have problem to setup my firewall. I need to configure my local mail system. Queue message: connect to mail.domainX.com[213.222.33.44]:465 Connection time out ip firewall nat add chain=dstnat protocol=tcp dst-port=465 action=dst-nat to-addresses=192.168.22.2 to-ports=465 where: 213.222.33.44 - is ...
by MikroTikFan
Thu Oct 16, 2014 8:23 pm
Forum: General
Topic: Dude 6.20
Replies: 12
Views: 2154

Re: Dude 6.20

Accepted ;-(
Dude forgotten ..
by MikroTikFan
Wed Oct 15, 2014 12:14 am
Forum: General
Topic: Dude 6.20
Replies: 12
Views: 2154

Re: Dude 6.20

Right, this is possible but why this is not working automatically ?
Workaround you proposed ;-( ,
but I'm asking for support and advice ;-)
by MikroTikFan
Mon Oct 13, 2014 1:21 pm
Forum: General
Topic: Dude 6.20
Replies: 12
Views: 2154

Re: Dude 6.20

Mikrotik Router is added, scanning process finish properly but without any results.
by MikroTikFan
Mon Oct 13, 2014 11:44 am
Forum: General
Topic: Dude 6.20
Replies: 12
Views: 2154

Re: Dude 6.20

I'm glad that this problem occurs not only for me. The problem is that after scanning my network I getting only my Mikrotik router address. I have additionally more than 20 devices (switches, routers, NAS, any other devices but scanning did not recognise ...) I don't wana add manually that all stuff...
by MikroTikFan
Sun Oct 12, 2014 6:32 pm
Forum: General
Topic: Dude 6.20
Replies: 12
Views: 2154

Re: Dude 6.20

Thx, but My Windows Dude did not recognise my network.
Only router but I don't see any of devices connected to the network.
by MikroTikFan
Sun Oct 12, 2014 5:28 pm
Forum: General
Topic: Dude 6.20
Replies: 12
Views: 2154

Dude 6.20

How to install dude on MikroTik MT RB2011UiAS-RM?
Current npk package do not include dude.

How can I install dude npk package to run Dude and connect to the router?
by MikroTikFan
Fri Oct 03, 2014 7:56 pm
Forum: Beginner Basics
Topic: How to set HTTPS for WebFig
Replies: 9
Views: 22903

Re: How to set HTTPS for WebFig

I Did that all steps but didn't disable 80 port. After that all I just tried to go to https:/192.168.1.1 (router) but I got Kod błędu: ERR_SSL_VERSION_OR_CIPHER_MISMATCH What key usage must be set? I have set on: -digital signature -key encipherment -ctrl sign -data encipherment -key cert. sign -tls...
by MikroTikFan
Sat Sep 27, 2014 11:48 pm
Forum: General
Topic: How to login to default hotspot
Replies: 9
Views: 11434

Re: How to login to default hotspot

By setting first hot spot (this is first) I didn't set up user and password ;-( After apply this settings of this first hot spot I just got login page to hotspot, and I don't know user/pass Is there any default user/pass ? So is there any chance to login without resetting whole config from the route...
by MikroTikFan
Sat Sep 27, 2014 10:45 pm
Forum: General
Topic: How to login to default hotspot
Replies: 9
Views: 11434

How to login to default hotspot

Please help me how to login to hotspot. By my mistake I have add new bridged hotspot without setting new user and password. I can't login to Webfig because hotspot ask me for user and password. My webfig login and password don't work with hotspot. What can I do not to reset my whole router and lose ...
by MikroTikFan
Wed Sep 24, 2014 6:58 pm
Forum: General
Topic: Webfig access from WAN
Replies: 0
Views: 591

Webfig access from WAN

Please help me how to configure WWW https (webfig) access to management console from my WAN (eth1) interface.
I have access from my lan but from my external ip address I can't login to webfig
by MikroTikFan
Sat Sep 20, 2014 11:25 pm
Forum: General
Topic: How to setup DHCP to use different DNS for different MAC
Replies: 3
Views: 3653

Re: How to setup DHCP to use different DNS for different MAC

Thank's for help.

Probably I have done something wrong because after your procedure (after COPY and OK) I got the message " Couldn't add New DHCP Lease - already have static lease for this clieny (6)"

I don't know what to do next, and why this happened ?
by MikroTikFan
Sat Sep 20, 2014 9:02 pm
Forum: General
Topic: How to setup DHCP to use different DNS for different MAC
Replies: 3
Views: 3653

How to setup DHCP to use different DNS for different MAC

I'm beginner in Mikrotik and I need a help how to setup DHCP server to lease two different DNS (normal Google and Unotelly-USA-DNS) depending on devices (by MAC address). Please help me to setup (better in WinBox). I tried to find this solution in forum but found only one post http://forum.mikrotik....
by MikroTikFan
Sat Sep 20, 2014 1:30 pm
Forum: General
Topic: FTTH Network configuration advice
Replies: 13
Views: 3542

Re: FTTH Network configuration advice

BTW anyone can help me how to configure DHCP to use different DNS for different devices (by MAC address) ?
by MikroTikFan
Thu Sep 18, 2014 12:13 pm
Forum: General
Topic: FTTH Network configuration advice
Replies: 13
Views: 3542

Re: FTTH Network configuration advice

Yes, I know that I can use VPN, but in my opinion DNS is better: - don't have any limitations to the speed limit, with VPN always you will have slower connection after VPN - some of services like Hulu don't work with many VPN providers - DNS service for this case do not charge so much router CPU - i...
by MikroTikFan
Thu Sep 18, 2014 8:16 am
Forum: General
Topic: FTTH Network configuration advice
Replies: 13
Views: 3542

Re: FTTH Network configuration advice

I'm using two Roku devices (Roku 2 and Roku 3) with unotelly.com DNS service.
That is the reason why I need to have more sophisticated router.
I have to configure DHCP service for different MAC different DNS provided by DHCP.
by MikroTikFan
Wed Sep 17, 2014 7:19 pm
Forum: General
Topic: FTTH Network configuration advice
Replies: 13
Views: 3542

Re: FTTH Network configuration advice

Now the connection is 50 Mbps and I don't think that I will need more than 100/100 Mbps in next 12-24 months ;-)
This all is for home users, streaming internet TV (Netflix, etc) and standard web browsing.
by MikroTikFan
Tue Sep 16, 2014 12:26 am
Forum: General
Topic: FTTH Network configuration advice
Replies: 13
Views: 3542

Re: FTTH Network configuration advice

FTTH router means DASAN endpoint FTTH router.
Sorry, I can't run it as a bridge ;-(
by MikroTikFan
Sat Sep 13, 2014 3:16 pm
Forum: General
Topic: FTTH Network configuration advice
Replies: 13
Views: 3542

Re: FTTH Network configuration advice

I'm going to run HE ipv6 tunnel, OpenVPN server, some HTTPS and HTTP services. If you have also some concerns to use double NAT I will use option B, but please help me to clarify some questions: 1. gateway will be this FTTH router and can I use RB2011UiAS-RM in this case same class network in both r...
by MikroTikFan
Sat Sep 13, 2014 12:28 am
Forum: General
Topic: FTTH Network configuration advice
Replies: 13
Views: 3542

FTTH Network configuration advice

Please give me some advice regarding my home network architecture. I have nice FTTH fiber connection, but my provider gave me router with NAT ;-( This router has some basic configuration possibilities: DMZ, port forwarding, DHCP, etc. One of 4 LAN ports is for internet, second for TV and next for fu...
by MikroTikFan
Mon Sep 08, 2014 6:34 pm
Forum: Wireless Networking
Topic: AP - wall or ceiling mounted
Replies: 3
Views: 1034

Re: AP - wall or ceiling mounted

I just found post http://forum.mikrotik.com/viewtopic.php?f=3&t=88019

and there is described this sample device

https://apps.fcc.gov/eas/GetApplication ... id=2300408

That is what you mean ?
by MikroTikFan
Mon Sep 08, 2014 12:27 am
Forum: Wireless Networking
Topic: AP - wall or ceiling mounted
Replies: 3
Views: 1034

AP - wall or ceiling mounted

Anyone can tell if Mikrotik is going to produce or have in near planes wall or ceiling mounted Access Points like Ubiquiti ? (f.e. http://www.ubnt.com/unifi/unifi-ap-ac/ )
by MikroTikFan
Sun Sep 07, 2014 8:02 pm
Forum: Wireless Networking
Topic: WISP solution for RB2011UiAS-RM
Replies: 9
Views: 1625

Re: WISP solution for RB2011UiAS-RM

Number of WiFi clients is up to 5-10 (Tablets, Phones, TV), but same time work usually 3-5 devices. Distance is not so long, just standard home environment up to 10-15 m and thru one or two walls (first and second floor). My network center is in one corner of the home so is difficult to have full ra...
by MikroTikFan
Sat Sep 06, 2014 11:56 pm
Forum: Wireless Networking
Topic: WISP solution for RB2011UiAS-RM
Replies: 9
Views: 1625

Re: WISP solution for RB2011UiAS-RM

Sorry for this exact frequency requirements. This is not so important.
Coverage and maximum transfer is in this case most important.
by MikroTikFan
Sat Sep 06, 2014 9:36 pm
Forum: Wireless Networking
Topic: WISP solution for RB2011UiAS-RM
Replies: 9
Views: 1625

Re: WISP solution for RB2011UiAS-RM

Ok, right. I will describe my needs. I would like have same class network in my wired network and my wireless. Might be dual band WiFi (2,5 and 5 GHz), LAN connection based from my LAN sockets, maybe is possible to have something similar f.e. http://www.cyberbajt.pl/download/ubiquiti/airgateway/airG...
by MikroTikFan
Sat Sep 06, 2014 10:04 am
Forum: Wireless Networking
Topic: WISP solution for RB2011UiAS-RM
Replies: 9
Views: 1625

Re: WISP solution for RB2011UiAS-RM

Can you give me any examples of this AP with N or AC WiFi ?
The best will be without any supply devices and supply them directly from LAN PoE.
by MikroTikFan
Fri Sep 05, 2014 9:49 pm
Forum: Wireless Networking
Topic: WISP solution for RB2011UiAS-RM
Replies: 9
Views: 1625

WISP solution for RB2011UiAS-RM

Please help me to find best WiFi (Mikrotik) solution to extend my RB2011UiAS-RM router dedicated for rack. I have router and switch mounted in rack in one corner of my house. I have wired Gb network but I have to build wireless network managed from RB2011UiAS-RM Wireless menu (WebFig6.7). Which hard...
by MikroTikFan
Fri Sep 05, 2014 1:26 am
Forum: Wireless Networking
Topic: WISP access points for RB2011UiAS-RM
Replies: 0
Views: 481

WISP access points for RB2011UiAS-RM

Can I extend my Mikrotik Router RB2011UiAS-RM witch WISP HotSpots modules plugged in wall like : http://www.cyberbajt.pl/download/ubiquiti/airgateway/airGateway_DS.pdf What can I use from Mikrotik to build in my home full coverage wireless solution. I just don't want buy another routers with radio. ...