MikroTik

shailparmar

Very good question Sir, I am in the same boat. Comfortable enough with bridge vlan filtering but leery of switch chip based filtering.

I wish there was a reference of this quality for that
viewtopic.php?t=143620

Thanks, This is helpful

shailparmar

Hi, I want to learn about the Vlan configuration on router- os "switch " function. There is plenty of material on wiki and YouTube about the Vlan understanding of MIkrotik but I'm not able to figure out how the Vlan configuration works in switch menu. There are different features for crs and any oth...

shailparmar

use IoT based system. I'm using raspberrypi
Screenshot_2019-04-07-10-37-16.jpg

Sent from my C6833 using Tapatalk

Canyou share more information about this setup?

shailparmar

Is the Firewall now consider PPPoE as WAN and will apply the the default firewall rules on this interface?
(in the interface list I see pppoe-out1 and ether1 as WAN)

it will automatically apply the firewall rules to pppoe interface no need to do anything.

shailparmar

with /tool traceroute you can specify a source IP or interface from which the traceroute should originate. Starting a traceroute without that will start the traceroute with as source the IP from the interface where the route towards the external network lives. In your case the interface where your ...

shailparmar

It is likely that your provider is filtering traffic originating from a peering IP

Provider already created a out filter for accepting my prefix.

Did you specify a source IP from inside your prefix?

Didn't understand this.

shailparmar

Hi i am a newbie to bgp . i have established a bgp session with the upstream provider successfully,i am getting bgp routes from the provider. my prefix is also advertised and route for the advertised prefix is added to the routing table in upstream provider router, but my prefix is still unreachable...

shailparmar

You are assigning routing marks to traffic but there appears to be no route between VLANs for the same routing marks. You need to change something so that traffic internal to your network does not get routing marks E.g. something like: /ip firewall mangle add action=mark-routing chain=prerouting ds...

shailparmar

Your configuration is probably incorrect. But you did not include it with your question... So do a /ip route export and /ip firewall mangle export and include the output here. Hii Thank you for your reply , here is export. /ip route add check-gateway=ping comment="Primary ILL to trading" distance=1...

shailparmar

Hii everyone We need your help in a situation . We have two wan and two Vlan Subnets , we are using routing mark for assigning route (WAN1 ➡ VLAN 1)(WAN2 ➡V LAN2 ), everything is working great ,except inter-lan routing (that means VLAN1➡VLAN2 ,VLAN2➡ VLAN1 ) is not working . When doing tracert from ...

shailparmar

Also - FYI ... Using a Captive-Portal Walled-Garden, allows me the ability to disable customer Internet access and auto-redirect customer web traffic to one of my web servers which then shows a page stating something like "Your Internet connection is working - however your account has been temporar...

shailparmar

how do you connect your customers to pppoe_server ? what is your customer cpe ? is mikrotik also ?

Lite5 in router mode with pppoe-client

Sent from my MI MAX using Tapatalk

shailparmar

how do you connect your customers to pppoe_server ? what is your customer cpe ? is mikrotik also ?

Lite5 in router mode with pppoe-client

Sent from my MI MAX using Tapatalk

shailparmar

Arrange remote, PM me on 7000573462

Sent from my MI MAX using Tapatalk

shailparmar

Hi again. I did as you suggested and it doesnt work. I setup the vlan and attached to wan interface I configured the ip address and attached to vlan I added the default gateway to the ip routes and can ping the gateway and public ip address but cannot get internet access. Im lost here. Any help wou...

shailparmar

Hi again. I did as you suggested and it doesnt work. I setup the vlan and attached to wan interface I configured the ip address and attached to vlan I added the default gateway to the ip routes and can ping the gateway and public ip address but cannot get internet access. Im lost here. Any help wou...

shailparmar

I have 1000 user in my lan as PPPoE but there is one user which is having only 4 mbps bandwidth but sometimes the upload bandwidth usage is showing me 90mbps but after changing the IP of that user this issue is resolved but after some days again that same problem is happening . And also when i am t...

shailparmar

This will create problem , I've tried once . Search forum for more information.

Sent from my MI MAX using Tapatalk

shailparmar

Hello friends, need expert advice on my setup. I want to create PPPoE & Hotspot Server with usermanager on the same interface on CCR1009 router. PPPoE clients will be manage via winbox locally but Hotspot Server will be maintained by usermanager. Is it safe to do that setup? There will be two diffe...

shailparmar

thankyou.

do I need to add/change any routes? or will it just work through lan to wan

No need to change route.

Sent from my MI MAX using Tapatalk

shailparmar

Thanksyou Shailpamar

The ip address I assign to the VLAN interface, is that the public IP for the internet service?

Yes , assign public ip address to vlan.

Sent from my MI MAX using Tapatalk

shailparmar

Hi everyone, I have a RB2011 which currently connects to a 10/10 Fibre service NTU. Pretty straight forward configuration. My organisation has purchased a new 50/50 fibre service I have to change the configuration on the router. They have given me the new Public IP, Gateway, Mask, DNS which I can c...

shailparmar

hi everyone im new hear.i would like to get some help on how to port forward on mikrotik router v6.30.4. The router has been fed with a pppoE connection by the isp and i cant access it remotely using internet from another isp. are you on public ip. export your firewall filter configuration. /ip fir...

shailparmar

So right now until the WISP I work for extends coverage to my area, my only rural option is my astounding Verizon phone (35/15 w/ 50ms latency) tethered to a computer onto my network. At home I have the powerbox, 2 RB 450G's (one as my backbone) a mAP, and some ubnt radio's. Anyway, I want my buddy...

shailparmar

Most probably DDOS attack , have you configured firewall

Sent from my MI MAX using Tapatalk

shailparmar

Ever heard of mac learning

Sent from my MI MAX using Tapatalk

shailparmar

I dont have as number but i have 100 mbps google peering connectivity now how can i merge both lines

You can create google ip address list and mark google packets ,and set google peering route to marked packets.

Mail me on :parmarshailendra47@gmail.com

Sent from my MI MAX using Tapatalk

shailparmar

Disable fast track if enable, also check burst settings.

Sent from my MI MAX using Tapatalk

shailparmar

Use static routing

Sent from my MI MAX using Tapatalk

shailparmar

Try changing SSH port in / ip service

Sent from my MI MAX using Tapatalk

shailparmar

Export configuration and post here

Sent from my MI MAX using Tapatalk

shailparmar

Do you have your own AS no. If yes then establish both bgp in core router . Google traffic is automatically forwarded to google routes.

Sent from my MI MAX using Tapatalk

shailparmar

Hello Team Mikrotik, Recently i am purchase new mikrotik RB750R2 for Hotspot Network for more than 10 people at my Shop. Let me know step by step to setup the router, my basic requirement are - 1. All people login to internet with Specify user name & password 2. I want to know everyone's mac ID wit...

shailparmar

Hello all. I have a hotspot but but my users are too many so i need a second adsl line.my problem is that i do not know how to configure my hotspot if it exceed the 10 clients per time to use the second adsl line Adsl 1 isp router: 192.168.1.1 Adsl 2 isp router: 192.168.10.1 Mikrotik isp1 interface...

shailparmar

Can you arrange remote ,I can help.

Sent from my MI MAX using Tapatalk

shailparmar

Can you simplify you map.

Sent from my MI MAX using Tapatalk

shailparmar

Remove this rule

interface=ether1
add action=drop chain=input comment="defconf: drop all from WAN" in-interface=ether1

shailparmar

Here is our link with LHG5

Distance 27KM

Dis.jpg

Signal

Sig.jpg

Btest

btest.jpg

shailparmar

Hi! Im using my CCRs PPPoE to authenticate users and give them access to the network according to the user profiles. we've found that if someone puts in the IP of the CCR and uses that as a gateway on a windows PC, they can access the internet without having to authenticate with the CCR. how can I ...

shailparmar

Use tunnels Or VLAN from router2 to the main router.

shailparmar

no body wants to help?

contact me.

shailparmar

have you try to change wireless mode in wireless receiver side device.

shailparmar

First create three vlans /interface vlan add vlan-id=10 interface=ether2 name=vlan10-admin /interface vlan add vlan-id=20 interface=ether2 name=vlan20-trusted /interface vlan add vlan-id=20 interface=ether2 name=vlan30-public then create bridge for vlans /interface bridge add name=bridge-10 /interfa...

shailparmar

This route for showing router where is 192.168.14.1

/ ip route add  distance=1 dst-address=192.168.14.0/24 gateway=10.10.15.1

and this route for send all internet traffic to default gateway 192.168.14.1

/ ip route add  distance=1 dst-address=0.0.0.0/0     gateway=192.168.14.1

shailparmar

Use snmp and record it centrally in dude or other network management system.

I've tried with these oids in cacti

1.3.6.1.4.1.14988.1.1.3.8.0
1.3.6.1.4.1.14988.1.1.3.4.0
None of them are working

shailparmar

I explained it in All india ISP Whatsapp group few days back.
Are you in that group ?

No i am not, Add me +919009946067 & 8959550040

shailparmar

Hello
We are a small wisp located in rural India. most of our sites are solar power operated .
we want to monitor battery charging & discharging cycle . it would be great if there is a option of System Voltage And Temperature
graph available in resource graphing menu.

shailparmar

The solution to the problem is switching to a routed network.

You will also have more control of the traffic flowing through the network
Thats what we did finally.

it would be helpful if you share topology .

shailparmar

we experienced same problem recently, one of our pop switch unreachable from trunk side .
we isolate switch port by port and find out the problem is looping in one of access port of particular vlan.

shailparmar

you can simply do fail over without scripting, by define gateway route distance.
set primary connection gateway route distance to 0 and back up connection route distance to 1.
if 0 route is unreachable router automatic enable route 1.

shailparmar

we have 3 wan connection ( pppoe-client with same isp gateway ) in a router (RB2011) , we want to use each pppoe-client for give internet access to different sub-net. how to achieve this by policy routing. example what we want to achive "pppoe-out1 ip address 100.68.65.2 gateway 172.31.32.210 ...

shailparmar

Hi experts, i am new to scripts need some help. we have some remote WISP sites installed, powering through solar system,power-box is used to power-up the devices. we want to minimize the power usage to improve backup of system. so we simply decided to power off the sector from 12:AM to 7:AM to reduc...

shailparmar

You should hire an engineer who has lots of experience with this sort of thing. I've seen several people get into this business without the technical expertise in-house. All have failed, and it wasn't for lack of effort or willingness to learn. It's just that by the time they gained enough experien...

shailparmar

This three led problem is hardware problem. and this problem only occurs when sxt hits the ground (mishandling). the only solution is if the device is in warranty send it for replacement or if device is out of warranty than do cpu re-balling. we try this on five of sxt lite 5 4 of them are repaired ...

shailparmar

Can you read the logs after disconnect cycle.may be it shows

pppoe client terminating....disconnected peer is not responding.

this error is also occure in some of our haplite and rb951. solved by upgrading routeros.
also set pppoe-client keep alive time out to 10 or 20 second.

shailparmar

add gateway & DNS server to second router.

shailparmar

First we add ip address to the wan interface

 /ip address add 
 address: your address / subnet 
 interface: your wan interface

Then we add gateway

/ip route add distance=1 gateway=your gateway

shailparmar

This link will help you in basic configuration
http://wiki.mikrotik.com/wiki/Manual:Wireless_AP_Client

shailparmar

These are the rules (31,32) on IP > firewall > Nat doing the NAT for private 192.168.250.0/24 and 10.3.42.0/24 ranges: add action=src-nat chain=srcnat src-address=192.168.250.0/24 to-addresses=\ 112.133.xxx.yyy add action=src-nat chain=srcnat src-address=10.3.42.0/24 to-addresses=\ 112.133.xxx.yyy ...

shailparmar

Removed

shailparmar

Removed

shailparmar

It's done in the same way for all IPs, by programming nat rules. If you mean if there's a mechanism to dynamically create NAT rules, there's not, AFAIK. Not sure if that answers your question. That's why I'm confused there is no Nat rule doing masquerade functions. Sent from my MI 4W using Tapatalk

shailparmar

our isp use mikrotik based BRAS as a pppoe server for give connectivity to clients. most of client have private ip adress & some have public ip address framed by radius server. somehow i manged to get a read only account on isp BRAS for learning purpose. the question appears here, there is no masque...

shailparmar

Also set timeout in pppoe client to 10second.

Sent from my MI 4W using Tapatalk

shailparmar

Try to upgrade routers version.

Sent from my MI 4W using Tapatalk

shailparmar

Our ISP use daloradius with pppoe

Sent from my MI 4W using Tapatalk

shailparmar

We also have bunch of sxt lite 5. If someone could help that would be good.

Sent from my MI 4W using Tapatalk

shailparmar

Create vlans in rb3011 for different isps. And untag vlan in based me switche.

Sent from my MI 4W using Tapatalk

shailparmar

Here is Result

Screenshot_2016-01-28-21-51-16_com.android.browser.png

Screenshot_2016-01-28-21-51-57_com.android.browser.png

shailparmar

Can you post here the network topology? I'm intrested în building one.

Trimis de pe al meu Nexus 5 folosind Tapatalk

shailparmar

[emoji15]

Sent from my MI 4W using Tapatalk

shailparmar

Hi I'm from India
We have 150+ clients.
Every thing is on Mikrotik including BRAS ,Base Station ,AP,BackHaul,CPE and excluding Sector antennas.

Sent from my MI 4W using Tapatalk

shailparmar

But in the current scenario. Only one vlan untagging works.
if ive untag other vlan , first vlan stop working.
i think there is vlan translation needed for ingress or outgress .

shailparmar

i have CRS-8G-4S Switch. configured ether1 as Master and rest port are slave.there is a upcoming tagged(vlan id 204,203,205,423,446)traffic from my isp from ether1. i want to forward this tagged traffic to all rest ports, so i can untag this later.

New Bitmap Image.jpg

shailparmar

Check the fresnel, i have a link that is in the same conditions, but with a capacity of 95/95 Mpbs or 190 Mpbs agreg. (limited by a poe patch panel 10/100Mpbs). The CCQ is about 95% and the signal -57dbm. the antennas are 30DBi dishes, without radome and shields. If u need some help, just call.!!! ...

shailparmar

Never make conclusions according the bandwidth test. It is very cpu intensive so it influences the tested device. So don't run the bandwidth test on the devices which throughput are you willing to test. Here is result from switches behind AP And Client. Screenshot_com.sonelli.juicessh_2015-09-29-11...

shailparmar

Have look on my setting everything is good. But only upload speed is fine download it s too low.

Client Side.

Screenshot_com.sonelli.juicessh_2015-09-29-09-56-51_1443500890185.jpg

Ap side

Screenshot_com.sonelli.juicessh_2015-09-29-09-49-31_1443500584529.jpg

shailparmar

Same issue

shailparmar

Change antenna.

shailparmar

60dbm is enough for 10 mbps connection.
Ithink speed issue is from ISP Side

shailparmar

Which Rb. Model you use.
If Rb have extra ether port than connect the Web server to separate. Interface.
Or simply set static ip for server and put some firewall rule to bypass hot spot. For this ip address.

shailparmar

Basebox5 with airmax 19db sector and 40 sxt lite5 Cpe.Please have a look on noise floor. See attachment.

shailparmar

Can we install router os on a HP Thin Client machine?

shailparmar

Yes it works.
Does anything else need to do.

shailparmar

As you can see. After hard reset it works. And again when restart, two leds blinkins continue in pattern.

shailparmar

I have a sxtlite5.
The unit have a an unidentified issue.
Please check the video.

https://m.youtube.com/watch?v=6ebEtPO56RY

shailparmar

We are starting the same service with 10 or more wan connection from ISP in PPOE mode with 4 mbps each.and share this speed to 200 client with hotspot .please share about which load balancing you used and equipment details. We are LCP(local cable partners) of our isp. so isp gives connectivity with ...

shailparmar

I am starting same setup.up to 10 wan from same ISP of 4 Mbps each and up to 200 active hotspot user.
Can you share which load balancing you used.and also which hardware.

Help needed.

Search found 88 matches