Community discussions

Search found 147 matches

by marting
Fri Sep 13, 2019 2:00 pm
Forum: General
Topic: Schedule for 1st of every month
Replies: 6
Views: 1432

Re: Schedule for 1st of every month

No, output is like this:
[martin@het-ro-a] > :put [ /system clock get date ]               
sep/13/2019
by marting
Thu Sep 12, 2019 1:44 pm
Forum: General
Topic: Schedule for 1st of every month
Replies: 6
Views: 1432

Re: Schedule for 1st of every month

/system scheduler add interval=1d name=disableUserSecrets on-event=":local usersToDisable [:toarray \"martin, thomas\"]\r\ \n:local dayToDisable \"09\"\r\ \n\r\ \n:if ( [ :pick [ /system clock get date ] 4 6 ] = \$dayToDisable ) do={\r\ \n :foreach user in \$usersToDisable do {\r\ \n :log info \"di...
by marting
Fri Jul 26, 2019 12:17 am
Forum: Scripting
Topic: 6.43 change in login process and API libraries?
Replies: 16
Views: 3456

Re: 6.43 change in login process and API libraries?

At client side one call less is necessary to login. The only (extremely unimportant) thing I can say. I love MT products but the release policy is quite silly. There is also no explanation for those decisions like "killing MD5 saves xx% resources on the router" or something like that. Consequence is...
by marting
Thu Jul 25, 2019 6:58 pm
Forum: Scripting
Topic: Object-Oriented Perl API at CPAN
Replies: 16
Views: 2326

Re: Object-Oriented Perl API

Sorry, I missed the fact that the old method has been removed with 6.45. The changes (previously only on GitHub) are now also available with CPAN: https://metacpan.org/pod/MikroTik::API (v1.1.0). It precedencs new method and falls back to the old one. Please test it carefully before production use, ...
by marting
Thu Jul 25, 2019 6:51 pm
Forum: Scripting
Topic: 6.43 change in login process and API libraries?
Replies: 16
Views: 3456

Re: 6.43 change in login process and API libraries?

Is there a fix out for this for PERL? Just upgraded a few devices from 6.44.x to 6.45.1 and now the API fails to log in. I have been using the CPAN installable which says it is version 1.0.5 and is up to date. Sorry, I missed the fact that the old method has been removed with 6.45. The changes (pre...
by marting
Thu Feb 21, 2019 7:38 pm
Forum: Wireless Networking
Topic: cAP ac: center button
Replies: 1
Views: 459

cAP ac: center button

Received my first cAP ac today and realized how large it is in contrast to the cAP lite :-) Really wondered as the sepcs are not sooo different. And I also realized that it has a center button (only clickable with the round enclosure). What's this button for? At first try it seems I can switch off L...
by marting
Thu Feb 14, 2019 11:24 pm
Forum: General
Topic: How to make a RB device blink all of its LEDs? [SOLVED]
Replies: 6
Views: 544

Re: How to make a RB device blink all of its LEDs? [SOLVED]

You could also have a look into the manual :D
by marting
Thu Feb 14, 2019 6:11 pm
Forum: General
Topic: Routing SIP to specific WAN
Replies: 2
Views: 454

Routing SIP to specific WAN

Hi, I have two WAN ports: pppoe-internet and pppoe-voip. All SIP phones connect to a fixed IP, 172.16.10.1; I route these SIP packets with a mangle rule based on dst-address(-list) and routing marks. Works fine. Problem are the RTP packets. Their dst-address is generally unkown. Of course I can do a...
by marting
Thu Feb 15, 2018 1:24 pm
Forum: General
Topic: Ideas/Features for detnet
Replies: 2
Views: 778

Re: Ideas/Features for detnet

I also have three questions/suggestions for this feature: 1. How stable is cloud.mikrotik.com. If this address is unreachable it doesn´t mean there really is no internet. 2. Will it be possible to have another Mikrotik router as check partner in future? 3. Which data is transmitted to cloud.mikrotik...
by marting
Wed Jan 24, 2018 5:08 pm
Forum: General
Topic: Routing traffic over 2 interfaces
Replies: 4
Views: 816

Re: Routing traffic over 2 interfaces

Segment the network into subnets and attach those subnets to the interfaces where they are needed. I guess you won´t need your whole /22 to be within one block.
Additonally I would only assign those addresses and subnets that are actually in use. Will give you more flexibility afterwards.
by marting
Tue Jan 23, 2018 7:30 pm
Forum: SwOS
Topic: Assign IP address to RS260GS by DHCP
Replies: 5
Views: 736

Re: Assign IP address to RS260GS by DHCP

By looking into the lease table of the router that runs the DHCP server. If you are not able to do so why do you want to use DHCP?
Let's start from beginning. Which router, which subnets, any vlans? Your private lan at home? What if you use static IP for your PC? Does your PC get a DHCP lease?
by marting
Tue Jan 23, 2018 4:02 pm
Forum: SwOS
Topic: Assign IP address to RS260GS by DHCP
Replies: 5
Views: 736

Re: Assign IP address to RS260GS by DHCP

First of all you are mixing different things up. RB260GS is not operated by RouterOS but by SwitchOS (not dualload capable as far as I know). SwitchOS can not be managed with winbox but only with the browser. The switch does not need internet access at all because he has nothing that relies on inter...
by marting
Tue Jan 23, 2018 11:24 am
Forum: SwOS
Topic: Assign IP address to RS260GS by DHCP
Replies: 5
Views: 736

Re: Assign IP address to RS260GS by DHCP

I guess you mean the RB260GS.
It is possible since SwitchOS 2.5. Then you can find it under System > General > Address Acquisition. Three options:
* DHCP with fallback
* static
* DHCP only
by marting
Tue Oct 31, 2017 3:58 pm
Forum: General
Topic: Dynamic items unchangeable - why?
Replies: 44
Views: 7428

Re: Dynamic items unchangeable - why?

We changed our systems to CoA and it works flawlessly.
by marting
Wed Oct 18, 2017 2:56 pm
Forum: General
Topic: Bugreport: Split-include buggy for (at least) IKEv2 (6.40.2 current and 6.41rc18)
Replies: 12
Views: 2481

Re: Bugreport: Split-include buggy for (at least) IKEv2 (6.40.2 current and 6.41rc18)

Are there any news on this? Nobody else have this problem?
by marting
Thu Sep 28, 2017 6:34 pm
Forum: General
Topic: Feedback requested: Build some Visio Shapes
Replies: 1
Views: 556

Feedback requested: Build some Visio Shapes

Hi, I started to create some Visio Shapes because the Shapes I did find, were not very satisfying to me. Before I build more, do you think this is the right direction? I build them to snap into the Visio Rackmount Template and added Connectors with the Ports. Visio Rackmount Template is quite small,...
by marting
Fri Sep 22, 2017 10:22 am
Forum: General
Topic: Bugreport [6.40.3]: SMB access to VRRP interface not possible with interface restrictions
Replies: 3
Views: 719

Re: Bugreport [6.40.3]: SMB access to VRRP interface not possible with interface restrictions

As suspected same error (unable to find suitable address) with this configuration: [admin@MikroTik] > /interface export # sep/22/2017 09:23:02 by RouterOS 6.40.3 # software id = IXF3-V908 # # model = 2011UiAS # serial number = 60880564F9AD /interface vrrp add interface=ether10 name=vrrp1 [admin@Mikr...
by marting
Wed Sep 20, 2017 6:31 pm
Forum: General
Topic: Bugreport [6.40.3]: SMB access to VRRP interface not possible with interface restrictions
Replies: 3
Views: 719

Re: Bugreport [6.40.3]: SMB access to VRRP interface not possible with interface restrictions

Sorry, it's only a testing scenario. There is no IP from same subnet on a regular interface on the productive router and the problem is the same.
But I could remove ip from regular interface or switch vrrp ip to /32 next week and repost results then.

Regards Martin
by marting
Wed Sep 20, 2017 10:57 am
Forum: General
Topic: Bugreport [6.40.3]: SMB access to VRRP interface not possible with interface restrictions
Replies: 3
Views: 719

Bugreport [6.40.3]: SMB access to VRRP interface not possible with interface restrictions

Hi, SMB-access is possible to a VRRP interface/ip with SMB interfaces=all. But SMB does not listen to the specified VRRP interfaces if there are interfaces specified. See following test scenario (had the problem with productive router, this is minimized version): [admin@MikroTik] > /interface export...
by marting
Mon Aug 28, 2017 2:29 pm
Forum: General
Topic: Bugreport: Split-include buggy for (at least) IKEv2 (6.40.2 current and 6.41rc18)
Replies: 12
Views: 2481

Re: Bugreport: Split-include buggy for (at least) IKEv2 (6.40.2 current and 6.41rc18)

In my understanding add-vpnconnectionroute is something like route -p add .... "vpn" (have to add each route by hand): https://technet.microsoft.com/en-us/itpro/powershell/windows/vpnclient/add-vpnconnectionroute Wheras the flag SplitTunneling true should cause the routes be added automatically with...
by marting
Fri Aug 25, 2017 5:29 pm
Forum: General
Topic: Bugreport: Split-include buggy for (at least) IKEv2 (6.40.2 current and 6.41rc18)
Replies: 12
Views: 2481

Bugreport: Split-include buggy for (at least) IKEv2 (6.40.2 current and 6.41rc18)

Hi, I want to use gateway defined Split Tunneling for my Windows and Mobile terminals. But it seems to be implemented incomplete and also not Windows-compatible at all. In short words: Windows (latest v10) seems not to receive any subnet/route from the server in a compatible format: No route for vpn...
by marting
Fri Aug 25, 2017 3:07 pm
Forum: General
Topic: IKEv2 with Windows: Required to import user cert to local computer (instead of user cert store)?
Replies: 1
Views: 549

IKEv2 with Windows: Required to import user cert to local computer (instead of user cert store)?

Hi, I tried the "quite" new IKEv2 feature in ROS. I followed this guide https://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Road_Warrior_setup_Ikev2_RSA_auth and it works great if I import the genereated pfx cert to local computers cert store. It does not work (windows claims it cannot find IKE computer ...
by marting
Wed Jul 26, 2017 4:35 pm
Forum: General
Topic: Hot to get Multiple Public IP's on 1 interface?
Replies: 8
Views: 2671

Re: Hot to get Multiple Public IP's on 1 interface?

No. One DHCP lease per MAC. One MAC per Interface. Either abuse VRRP or connect one physical port to the switch for one IP.
Same question with VRRP solution: viewtopic.php?t=93517
by marting
Wed Jul 26, 2017 4:21 pm
Forum: The User Manager
Topic: Allow Usermanager Admin GUI, disallow Routerboard WebGUI
Replies: 0
Views: 1163

Allow Usermanager Admin GUI, disallow Routerboard WebGUI

Hi,
is there a possibility (with RouterOS possibilites only, no separate ReverseProxy and so on) to allow Web Access to Usermanager Admin GUI (http://x.x.x.x/userman) but to disallow regular Admin WebGUI? I don´t want to see the Admin GUI when going to http://x.x.x.x.
Regards
Martin
by marting
Thu Mar 09, 2017 4:01 pm
Forum: RouterBOARD hardware
Topic: Need Help in RB2011 LCD
Replies: 2
Views: 1587

Re: Need Help in RB2011 LCD

Hi Ahmed,
did you find an information about this display? Like Pinout and so on?
Regards
Martin
by marting
Thu Feb 23, 2017 7:45 pm
Forum: SwOS
Topic: CSS326-24G-2S+RM + 802.3ad
Replies: 9
Views: 4685

Re: CSS326-24G-2S+RM + 802.3ad

LACP is in rOS available since v4 I think. I use it for a few years already with some CCR1036-12G-4S and CRS212-1G-10S-1S+IN. See Wiki: http://wiki.mikrotik.com/wiki/Manual:Interface/Bonding#802.3ad I am talking about SwOS. In my opinion this is an essential switch feature, so until implemented I wo...
by marting
Thu Feb 23, 2017 9:56 am
Forum: SwOS
Topic: CSS326-24G-2S+RM + 802.3ad
Replies: 9
Views: 4685

Re: CSS326-24G-2S+RM + 802.3ad

Does this mean there is no 802.3ad at all? No Link Aggregation?
I was very interested in this switch but without LACP? This is a very big disadvantage.

Where can I find documentation about SwOS 2? This seems to cover v1 only: http://wiki.mikrotik.com/wiki/SwOS
by marting
Tue Dec 20, 2016 2:22 pm
Forum: General
Topic: Public-Mikrotik-Bandwidth-Test-Server(s)
Replies: 568
Views: 406897

Re: 3.6 GIG - Public-Mikrotik-Bandwidth-Test-Server

Thank you for providing this server! Although I wonder why ROS does not correctly track their own BTEST UDP/Receive connections. I have same issue with UDP Receving like some other in this thread. I allow ESTABLISHED&RELATED in input and forward chain. But I have to disable my REJECT chains for UDP ...
by marting
Mon Sep 12, 2016 6:37 pm
Forum: Scripting
Topic: Netwatch...
Replies: 5
Views: 1060

Re: Netwatch...

I know distance in DHCP client. But there is no check-gateway. Key of my previous post is type=prohibit for all other interfaces. Different distances for default gateway work great if an interface is completely down (no link). But check-gateway did not have any noticable effect with my last test for...
by marting
Mon Sep 12, 2016 5:45 pm
Forum: Scripting
Topic: Netwatch...
Replies: 5
Views: 1060

Re: Netwatch...

Two default gateways with different distances do not always work as expected and has a few disadvantages: - you have to know the address of the default gateway and it has to be always the same - you have to use check-gateway, this often does not recognize lost connection to gw and will never recogni...
by marting
Wed May 11, 2016 2:02 pm
Forum: General
Topic: Feature Request: Safe Mode for API
Replies: 2
Views: 1221

Feature Request: Safe Mode for API

Hi, it would be great to be able to enable safe mode by API. There are a few old posts concerning this but I did not find a public feature request in the ROS7 section of the forum, so here it is. http://forum.mikrotik.com/viewtopic.php?t=32907 http://forum.mikrotik.com/viewtopic.php?t=60279 Regards ...
by marting
Fri Jan 29, 2016 3:21 pm
Forum: Scripting
Topic: Object-Oriented Perl API at CPAN
Replies: 16
Views: 2326

Re: Object-Oriented Perl API

Hi lavv,
I already merged it, thank you!
Regards
Martin
by marting
Wed Jan 13, 2016 1:38 pm
Forum: Scripting
Topic: Object-Oriented Perl API at CPAN
Replies: 16
Views: 2326

Re: Object-Oriented Perl API

I checked it and without operators, the conditions were seen as AND. Nevertheless, at the moment I have no need to implement advanced operators. I will if I need them or if I have really boredom. But this won´t be in the next weeks. If someone else wants to implement - feel free to do so, I will acc...
by marting
Fri Dec 18, 2015 5:48 pm
Forum: Scripting
Topic: Object-Oriented Perl API at CPAN
Replies: 16
Views: 2326

Re: Object-Oriented Perl API

The query is based on this commit: https://github.com/elcamlost/mikrotik-perl-api/commit/10e5da1fd0ccb4a249ed3047c1d22c97251f666e So it is no complete implementation of all possibilites of query. It is a very simple AND. For example die Dumper( $api->query('/interface/print', {}, { type => 'ether', ...
by marting
Fri Dec 18, 2015 4:41 pm
Forum: Scripting
Topic: Object-Oriented Perl API at CPAN
Replies: 16
Views: 2326

Re: Object-Oriented Perl API

Ah, thank you for information. So do you think something like kheeva wants to do (remove all Firewall rules: /ip/firewall/filter/remove [/ip firewall filter find] ) is possible by API? As find is so useless by API, I would not put much effort in this if there are changes in the implementation requir...
by marting
Fri Dec 18, 2015 1:39 pm
Forum: Scripting
Topic: Object-Oriented Perl API at CPAN
Replies: 16
Views: 2326

Re: Object-Oriented Perl API

Is it possible to run cmd through API like that: /ip/firewall/filter/remove [/ip firewall filter find] ? No, not as far as I know. Not because of limitations in the Perl implementation but the way how the API works. I´m not an expert for this API, but if I look here at how the API works, I cannot i...
by marting
Fri Dec 18, 2015 1:13 pm
Forum: Scripting
Topic: Object-Oriented Perl API at CPAN
Replies: 16
Views: 2326

Re: Object-Oriented Perl API

Version 1.0.2 is available at github and uploaded to cpan. I guess it will be listed in the next hours.
by marting
Fri Dec 18, 2015 11:22 am
Forum: Scripting
Topic: Object-Oriented Perl API at CPAN
Replies: 16
Views: 2326

Re: Object-Oriented Perl API

Hi kheeva,
thank you and sorry. I already implemented the timeout and some type of connection probing (useful for long lasting connections).
I will push it to github and CPAN later this day.
Regards
Martin
by marting
Wed Dec 09, 2015 8:07 pm
Forum: Scripting
Topic: perl API client
Replies: 102
Views: 52174

Re: perl API client

I reworked it to OO and published it at github. See http://forum.mikrotik.com/viewtopic.php?f=9&t=102923 for more details.
by marting
Wed Dec 09, 2015 7:58 pm
Forum: Scripting
Topic: Object-Oriented Perl API at CPAN
Replies: 16
Views: 2326

Object-Oriented Perl API at CPAN

Hi, I reworked the existing perl API implementation from cheesegrits and some other guys (see http://forum.mikrotik.com/viewtopic.php?f=9&t=22744) and ported it to Moose. It will available at CPAN: http://search.cpan.org/~martingo/MikroTik-API/ and the repository is at github: https://github.com/mar...
by marting
Mon Dec 07, 2015 4:02 pm
Forum: Scripting
Topic: perl API client
Replies: 102
Views: 52174

Re: perl API client

Hi camlost,
did you make any progress and are you willing to share it?
I will have to do the same, the current version is nearly unusable in larger projects.
Regards
Martin
by marting
Mon Dec 07, 2015 3:57 pm
Forum: General
Topic: Dynamic items unchangeable - why?
Replies: 44
Views: 7428

Re: Dynamic items unchangeable - why?

Are you sure about this? Did you try latest ROS version?
If this is true, it would be a real issue and you should open a bug report.
by marting
Mon Nov 16, 2015 3:23 pm
Forum: General
Topic: [Solved] CRS: How to remove VLAN-tag on egress for specific port?
Replies: 0
Views: 1242

[Solved] CRS: How to remove VLAN-tag on egress for specific port?

Edit: Seems as the problem was solved by a reboot. Perhaps some meantime learings with a wrong config were in cache. Hi, I have a Cloud Router Switch (CRS212-1G-10S-1S+) where I have some VLAN problems. Perhaps someone could help. SFP1 is inbound connection without VLAN. SFP9 should be VLAN Trunk Po...
by marting
Thu Nov 05, 2015 12:02 pm
Forum: General
Topic: Dynamic items unchangeable - why?
Replies: 44
Views: 7428

Re: Dynamic items unchangeable - why?

No, waiting for the final.
by marting
Wed Nov 04, 2015 11:43 am
Forum: General
Topic: Dynamic items unchangeable - why?
Replies: 44
Views: 7428

Re: Dynamic items unchangeable - why?

Wow, fine. I´m looking forward for this!
by marting
Wed Nov 04, 2015 10:34 am
Forum: General
Topic: Dynamic items unchangeable - why?
Replies: 44
Views: 7428

Re: Dynamic items unchangeable - why?

Radius PPPoE-Server CoA still not supported I guess.

And I think we are repeating. We already talked about all this (version, CoA, alternative solutions) previous in the thread.
by marting
Tue Nov 03, 2015 7:49 pm
Forum: General
Topic: Dynamic items unchangeable - why?
Replies: 44
Views: 7428

Re: Dynamic items unchangeable - why?

Why?
by marting
Tue Nov 03, 2015 1:05 pm
Forum: General
Topic: Dynamic items unchangeable - why?
Replies: 44
Views: 7428

Re: Dynamic items unchangeable - why?

In any version below 6.32.
So in 6.31.x it works.
by marting
Thu Oct 15, 2015 1:40 pm
Forum: General
Topic: Dynamic items unchangeable - why?
Replies: 44
Views: 7428

Re: Dynamic items unchangeable - why?

You have to add static rules for each user and change those. Or downgrade to 6.31.
This "bug" is "fixed" since 6.32
by marting
Wed Sep 09, 2015 12:47 pm
Forum: Announcements
Topic: v6.32.1 released
Replies: 76
Views: 18827

Re: v6.32.1 released

I´m quite sure it will also work with Wine as Winbox does so.
by marting
Wed Sep 09, 2015 12:21 pm
Forum: General
Topic: Dynamic items unchangeable - why?
Replies: 44
Views: 7428

Re: Dynamic items unchangeable - why?

Not important for me whether it was a bug or a feature, it worked for months now :lol:
Now I cannot upgrade any longer until we reworked the whole system. Very annoying.

Do you know if proper coa support is already in work?
by marting
Wed Sep 09, 2015 12:01 pm
Forum: General
Topic: Dynamic items unchangeable - why?
Replies: 44
Views: 7428

Re: Dynamic items unchangeable - why?

But at the moment there is no consistent way to change rate limit for pppoe-users. There would be Radius CoA feature but that is not supported within ROS for PPPoE-Server with Radius. If that would exist I would agree perhaps. With the removal of this possiblity I would have have to create/remove si...
by marting
Wed Sep 09, 2015 11:50 am
Forum: General
Topic: Dynamic items unchangeable - why?
Replies: 44
Views: 7428

Dynamic items unchangeable - why?

Hi, regarding this bugfix http://forum.mikrotik.com/viewtopic.php?p=497871#p497871 I have a question (dynamic simple queues were editable by terminal and are no longer editable with the reason that dynamic items should not be editable): Why is it restricted by rOS whether I can edit a dynamic item? ...
by marting
Wed Sep 09, 2015 11:41 am
Forum: Announcements
Topic: v6.32.1 released
Replies: 76
Views: 18827

Re: v6.32.1 released

Okay, got it. Great. Thanks for this feature.
by marting
Wed Sep 09, 2015 11:24 am
Forum: Announcements
Topic: v6.32.1 released
Replies: 76
Views: 18827

Re: v6.32.1 released

How can I change my device to stay on the stable branch? I use System > Packages > Check for Updates and it shows 6.32.1 Do I have to install stable branches by hand? I think concept of stable and beta/testing branch is fine. But I think it is the wrong way to provide the unstable releases by the co...
by marting
Mon Sep 07, 2015 11:17 am
Forum: Beginner Basics
Topic: mails are not downloading from pop3 mail server
Replies: 9
Views: 984

Re: mails are not downloading from pop3 mail server

You can export to file like I wrote above: export file=export.rsc Your command did not work because you inserted spaces between file= and between =export.rsc This rule is wrong: /ip firewall nat add action=dst-nat chain=dstnat dst-address=118.91.190.195 to-addresses=10.0.0.0/8 You can´t do a dst-nat...
by marting
Thu Sep 03, 2015 11:31 am
Forum: Announcements
Topic: v6.32 released [version temporarily removed]
Replies: 116
Views: 29656

Re:

All dynamic features should be fully controlled by their originating settings.
I would love to do so, but as I mentioned CoA is still not possible.
by marting
Thu Sep 03, 2015 10:53 am
Forum: Beginner Basics
Topic: very very new to mikrotik... please help..
Replies: 5
Views: 581

Re: very very new to mikrotik... please help..

You did not mention a modem till now. What´s this modem? Is it already a kind of router with DHCP server? Do you have to dial up by PPPoE? Tell more on your WAN connection.
by marting
Thu Sep 03, 2015 10:47 am
Forum: Beginner Basics
Topic: Dual Wan Load Balancing (PCC) 1 PPPoe Dynamic IP + 1 Static IP
Replies: 11
Views: 14105

Re: Dual Wan Load Balancing (PCC) 1 PPPoe Dynamic IP + 1 Static IP

My routers ports 2 to 5 are bridged.. All tutorials shows no bridge...
The posted PCC configuration can be adapted to bridge very simple. Change in-interface=LAN to in-interface=your-bridge and so on.
by marting
Thu Sep 03, 2015 10:43 am
Forum: Announcements
Topic: v6.32 released [version temporarily removed]
Replies: 116
Views: 29656

Re: v6.32 released [version temporarily removed]

marting - Now you can not change dynamic queues also through CLI. Dynamic items should not be editable. What???? Why? My whole system relies on this. And it works great, so why do you remove a feature??? It is necessary for me to change rate limit on dynamic pppoe queues as ROS is still not able to...
by marting
Wed Sep 02, 2015 6:39 pm
Forum: Beginner Basics
Topic: very very new to mikrotik... please help..
Replies: 5
Views: 581

Re: very very new to mikrotik... please help..

From what you said, I agree with jarda. Do you need some Dial-Up to an ISP?
by marting
Wed Sep 02, 2015 5:31 pm
Forum: Beginner Basics
Topic: Best way to set up the ports on my router. Switch vs Bridging
Replies: 6
Views: 972

Re: Best way to set up the ports on my router. Switch vs Bridging

Bridge the masterports. If ether2 and ether5 are your master ports, then bridge them. Probably it does not make any difference but the configuration is more transparent.
by marting
Wed Sep 02, 2015 3:17 pm
Forum: Beginner Basics
Topic: Best way to set up the ports on my router. Switch vs Bridging
Replies: 6
Views: 972

Re: Best way to set up the ports on my router. Switch vs Bridging

Which device do you own? Many devices have multiple switch groups, for example a RB2011 has one switch on 1-5 and one on 6-10, so you could use switch feature on the particular group but need an additional bridge that connects the two switch groups together.
by marting
Wed Sep 02, 2015 3:12 pm
Forum: Beginner Basics
Topic: Dual Wan Load Balancing (PCC) 1 PPPoe Dynamic IP + 1 Static IP
Replies: 11
Views: 14105

Re: Dual Wan Load Balancing (PCC) 1 PPPoe Dynamic IP + 1 Static IP

No I meant these lines: / ip address add address=10.111.0.2/24 network=10.111.0.0 broadcast=10.111.0.255 interface=ISP1 add address=10.112.0.2/24 network=10.112.0.0 broadcast=10.112.0.255 interface=ISP2 Go through the Explanation section and read each paragraph and build it step by step. It is reall...
by marting
Wed Sep 02, 2015 2:49 pm
Forum: Beginner Basics
Topic: Dual Wan Load Balancing (PCC) 1 PPPoe Dynamic IP + 1 Static IP
Replies: 11
Views: 14105

Re: Dual Wan Load Balancing (PCC) 1 PPPoe Dynamic IP + 1 Static IP

the article above is talking for 2 dsl lines with dhcp. is not the same for 1 pppoe and 1 dhcp. In fact it is not even talking about DHCP. It only relies on Interfaces. So which point in the article do you think will not work with pppoe interfaces? Of course you don´t have to add the WAN ip address...
by marting
Wed Sep 02, 2015 2:38 pm
Forum: General
Topic: Drop DNS remote requests on WAN
Replies: 3
Views: 1457

Re: Drop DNS remote requests on WAN

Rules with
connection-state=established
and
connection-state=related
by marting
Wed Sep 02, 2015 12:11 pm
Forum: Announcements
Topic: v6.32 released [version temporarily removed]
Replies: 116
Views: 29656

Re: v6.32 released

Click check for updates once more. Latest Version for me still 6.31, see screenshot
by marting
Wed Sep 02, 2015 11:47 am
Forum: Beginner Basics
Topic: Providing a public /29 via dhcp
Replies: 1
Views: 367

Re: Providing a public /29 via dhcp

Provide a DHCP relay on one of your interfaces:
http://wiki.mikrotik.com/wiki/Manual:IP/DHCP_Relay
by marting
Wed Sep 02, 2015 11:44 am
Forum: Beginner Basics
Topic: Dual Wan Load Balancing (PCC) 1 PPPoe Dynamic IP + 1 Static IP
Replies: 11
Views: 14105

Re: Dual Wan Load Balancing (PCC) 1 PPPoe Dynamic IP + 1 Static IP

Without having read your whole scripts, I recommend to follow these instructions:
http://wiki.mikrotik.com/wiki/Manual:PC ... _Balancing
I implemented it this way with good results.
by marting
Wed Sep 02, 2015 11:36 am
Forum: General
Topic: How to block Microsoft via static DNS entry
Replies: 16
Views: 3061

Re: How to block Microsoft via static DNS entry

can u explain the difference of the 2 entries?
=".*\\.
="^
The first one matches to *.microsoft.com for example www.microsoft.com, downloads.microsoft.com, server2.europe.microsoft.com and so on...
The second one matches only to microsoft.com without any subdomain.
by marting
Wed Sep 02, 2015 11:30 am
Forum: General
Topic: Losing mangle entries
Replies: 6
Views: 572

Re: Losing mangle entries

Can you post an example of one of the lost rules?
by marting
Wed Sep 02, 2015 11:29 am
Forum: Announcements
Topic: v6.32 released [version temporarily removed]
Replies: 116
Views: 29656

Re: v6.32 released

Dynamic Queues are still not editable by Winbox and Web but only by terminal and api.
Ticket No of confirmed bug is 2015082766000678 but as you see with the number it is a quite recent ago reported bug, so I guess it will be solved in some future release.
by marting
Wed Sep 02, 2015 11:11 am
Forum: General
Topic: Drop DNS remote requests on WAN
Replies: 3
Views: 1457

Re: Drop DNS remote requests on WAN

Your rule #0 and #1 are in forward chain. This means, it will drop port 53 packets that are meant to go a host behind your router. This rule is correct if you use another host as DNS server. If you use your mikrotik as DNS server (you did not write that, but I assume) you have to move the rule into ...
by marting
Mon Aug 31, 2015 1:47 pm
Forum: Beginner Basics
Topic: How To Block Torrents on Mikrotik 6.27
Replies: 7
Views: 1626

Re: How To Block Torrents on Mikrotik 6.27

/ip firewall filter add chain=forward p2p=bit-torrent action=drop
by marting
Mon Aug 31, 2015 1:43 pm
Forum: Beginner Basics
Topic: Add attacker's MAC to the blacklist automatically
Replies: 5
Views: 794

Re: Add attacker's MAC to the blacklist automatically

Well, it seems you won´t believe what I say, so I think I can´t help you. The mac address I am talking about is not one of yours but the gateway, so probably it is one address of your ISP. You will also see it at IP > ARP. Regardless if you believe or not what I told before, there are no MAC address...
by marting
Mon Aug 31, 2015 12:47 pm
Forum: Beginner Basics
Topic: Add attacker's MAC to the blacklist automatically
Replies: 5
Views: 794

Re: Add attacker's MAC to the blacklist automatically

The mac address you see is probably the mac address of your gateway, so you really should not add it to the blacklist :-)
You can´t work with mac addresses over the internet, IPs are the way to go.
by marting
Mon Aug 31, 2015 11:41 am
Forum: Beginner Basics
Topic: Is this possible ? 3 PPPoE clients 3 ports
Replies: 3
Views: 577

Re: Is this possible ? 3 PPPoE clients 3 ports

I´m not sure if understood correct. at ether 6 you have a pppoe-client to another pppoe-server at ether7-9 you want to run a pppoe-server for hosts to dial in at your Mikrotik? Can each host dial-in at each port? If yes, you need to switch or bridge ether7-9, add a ppoe-server with the bridge or swi...
by marting
Mon Aug 31, 2015 11:32 am
Forum: Beginner Basics
Topic: Send DHCP leases every day
Replies: 22
Views: 3612

Re: Send DHCP leases every day

yes, but I think you can do a little work, too.

Hint:
[me@somewhere] /ip dhcp-server lease> :foreach i in=[find ] do={ :put [get $i status ] } 
waiting
bound
waiting
by marting
Mon Aug 31, 2015 11:26 am
Forum: Beginner Basics
Topic: Dual wan problem
Replies: 3
Views: 449

Re: Dual wan problem

No for the same reason.

The only thing you could do is distributing the connections to specific interfaces. For example all HTTP to ISP1, all Mail to ISP2 and so on.
But if you don´t tell more exactly what you want to do, I can´t help.
by marting
Fri Aug 28, 2015 4:07 pm
Forum: Beginner Basics
Topic: Send DHCP leases every day
Replies: 22
Views: 3612

Re: Send DHCP leases every day

:local firmware [ /system routerboard get current-firmware ]
:local routeros [ /system package get number=0 value-name=version ]
by marting
Thu Aug 27, 2015 4:27 pm
Forum: General
Topic: Any plans on multiple packet marks per packet?
Replies: 2
Views: 355

Any plans on multiple packet marks per packet?

Hi, I know it is not possible to have more than one packet mark per packet (latest mark wins afaik). However this would be very helpful sometimes. So does anyone know if there are plans for implementation? Or will this never be an option because of the close bonds to the Linux Kernel/netmark? Regard...
by marting
Thu Aug 27, 2015 11:32 am
Forum: Beginner Basics
Topic: Dual wan problem
Replies: 3
Views: 449

Re: Dual wan problem

Simple answer: NO :-)

That is not possible because your ISP will not forward foreign IPs and when he would then the reply would go the other ISP.
by marting
Wed Aug 26, 2015 4:47 pm
Forum: General
Topic: Port forwarding - 80
Replies: 5
Views: 2315

Re: Port forwarding - 80

You need a criteria to dnat only access to the webserver. If you can´t use WAN IP because it´s dynamic, you can´t stop thinking but have to find another criteria. Multiple solutions possible: I would prefer relying on the incoming interface: /ip firewall nat chain=dstnat in-interface=ether1-gateway ...
by marting
Wed Aug 26, 2015 2:26 pm
Forum: Beginner Basics
Topic: User monitoring software
Replies: 2
Views: 627

Re: User monitoring software

Hi, NetFlow is the way to go: http://wiki.mikrotik.com/wiki/Manual:IP/Traffic_Flow You need to configure your Mikrotik to send the data to a collector that you have to set up. Like nTop, Flowd and so on. Here´s a list of free NetFlow software: https://de.wikipedia.org/wiki/Netflow#Freie_Software Did...
by marting
Wed Aug 26, 2015 1:36 pm
Forum: General
Topic: 90% of Portuguese connections better than Netflix 4K
Replies: 9
Views: 732

Re: 90% of Portuguese connections better than Netflix 4K

What´s your question? Or how is this related to the General discussion forum of RouterOS?
by marting
Wed Aug 26, 2015 1:33 pm
Forum: Beginner Basics
Topic: Send DHCP leases every day
Replies: 22
Views: 3612

Re: Send DHCP leases every day

Something like this: :local i; :local hostip; :local hostname; :local dhcplist ""; :local leasesall [ :len [ /ip dhcp-server lease find ] ]; :local leaseseoip [ :len [ /ip dhcp-server lease find where server=EOIP ] ]; /ip dhcp-server lease; :foreach i in=[find where server=DHCPSERVER_192 ] do={ :set...
by marting
Wed Aug 26, 2015 1:19 pm
Forum: Beginner Basics
Topic: block rdp on mikrotik
Replies: 7
Views: 2703

Re: block rdp on mikrotik

/ip firewall filter does not apply to bridged ports. The first thing you could try is to enable "Use IP Firewall" under Bridge -> Settings: http://wiki.mikrotik.com/wiki/Manual:Interface/Bridge#Bridge_Settings The other thing is a separate Bridge Firewall: http://wiki.mikrotik.com/wiki/Manual:Interf...
by marting
Wed Aug 26, 2015 12:51 pm
Forum: General
Topic: Multilink PPPoE server
Replies: 3
Views: 1039

Re: Multilink PPPoE server

No. I asked the support in February 2015 and got this reply: > For now RouterOS does not allow to create MLPPP server. > > We can not promise that this option will be implemented in nearest future, but we > are definitely planning to implement it. Most likely, it could happen within > version 7 of R...
by marting
Tue Aug 25, 2015 4:40 pm
Forum: General
Topic: CCR 1036-12G4S Fans dont spin on ROS 6.30 and up
Replies: 7
Views: 837

Re: CCR 1036-12G4S Fans dont spin on ROS 6.30 and up

Mhmmm, strange. As I don´t have this issue, it seems not be a general problem and I would suggest to contact the support with an autosupout.rif attached.
by marting
Tue Aug 25, 2015 4:08 pm
Forum: General
Topic: CCR 1036-12G4S Fans dont spin on ROS 6.30 and up
Replies: 7
Views: 837

Re: CCR 1036-12G4S Fans dont spin on ROS 6.30 and up

Did you also upgrade the Firmware? I´m on 3.27
by marting
Tue Aug 25, 2015 2:07 pm
Forum: Beginner Basics
Topic: block rdp on mikrotik
Replies: 7
Views: 2703

Re: block rdp on mikrotik

I just thougt about it and I guess he tries to block RDP within his private LAN which probably will not work as he expected because his PCs share the same subnet using the switch feature or a bridge or even a separate switch, so Firewall Filtering will never take place. fess: Please describe in deta...
by marting
Tue Aug 25, 2015 1:54 pm
Forum: Beginner Basics
Topic: block rdp on mikrotik
Replies: 7
Views: 2703

Re: block rdp on mikrotik

You can not use protocol=rdp. This is absolutely wrong. Protocol RDP stands for Reliable Data Protocol and has NOTHING to do with the Remote Desktop Protocol that you mean. RemoteDP is based on TCP and uses port 3389 by default. I´m 99.9% sure my rule is correct, so please post an export of your con...
by marting
Tue Aug 25, 2015 12:53 pm
Forum: General
Topic: CCR 1036-12G4S Fans dont spin on ROS 6.30 and up
Replies: 7
Views: 837

Re: CCR 1036-12G4S Fans dont spin on ROS 6.30 and up

Fans of my CCR1036-12G-4S are spinning at 6.30.2 if it is necessary. Perhaps temperature is too low? I´m currently connected to the CCR and is on auto/main Temp is at 40C and CPU at 54C. Sometimes both are at 0RPM, sometimes only the second one is at about 3800RPM, sometimes both are beteween 3700 a...
by marting
Tue Aug 25, 2015 12:23 pm
Forum: Beginner Basics
Topic: mails are not downloading from pop3 mail server
Replies: 9
Views: 984

Re: mails are not downloading from pop3 mail server

Type
/export file=export.rsc
in terminal, then drag&drop the file to your desktop, open it in a text editor and paste it here.

Obviously your POP traffic will go to wrong queue
by marting
Tue Aug 25, 2015 10:56 am
Forum: Beginner Basics
Topic: What determines whether I have an IPv4 or IPv6 address to the outside?
Replies: 4
Views: 450

Re: What determines whether I have an IPv4 or IPv6 address to the outside?

Do both PCs have an IPv6 address?
Linux: ifconfig
Windows command prompt: ipconfig
by marting
Tue Aug 25, 2015 10:51 am
Forum: Beginner Basics
Topic: block rdp on mikrotik
Replies: 7
Views: 2703

Re: block rdp on mikrotik

Multiple issues: First of all input chain is only managing connections to the router not for other equipment. So forward chain is the way to go. 192.168.88.* is not a valid address or netmask. You probably want to use 192.168.88.0/24 dst-port must be numeric, no named protocols like rdp, smtp, ssh a...
by marting
Thu Aug 20, 2015 11:39 am
Forum: General
Topic: Is /system upgrade supposed to work?
Replies: 6
Views: 633

Re: Is /system upgrade supposed to work?

Is there any documentation on this mirror mode? Couldn´t find anything in the wiki or somewhere else so I thought it is still not implemented.
by marting
Thu Aug 20, 2015 11:31 am
Forum: General
Topic: Is /system upgrade supposed to work?
Replies: 6
Views: 633

Re: Is /system upgrade supposed to work?

I guess it is still not implemented for about ten years now 8)
http://forum.mikrotik.com/viewtopic.php?t=7263
by marting
Thu Aug 20, 2015 11:22 am
Forum: Beginner Basics
Topic: Redirect
Replies: 2
Views: 364

Re: Redirect

/ip firewall nat
add chain=dstnat src-address-list=staff dst-address-list=websites_allowed_for_staff protocol=tcp dst-port=80,443 action=accept
add chain=dstnat src-address-list=staff protocol=tcp dst-port=80,443 action=dst-nat to-addresses=1.2.3.4
by marting
Thu Aug 20, 2015 11:13 am
Forum: Beginner Basics
Topic: Backup to SD-Card?
Replies: 3
Views: 855

Re: Backup to SD-Card?

See which path the SD-card has (I only use usb disks):
/disk print
In my case disk1, so export there:
/export file=/disk1/compact.rsc
/export verbose file=/disk1/verbose.rsc
by marting
Thu Aug 20, 2015 10:57 am
Forum: Beginner Basics
Topic: Mikrotik SFP with Procurve
Replies: 4
Views: 873

Re: Mikrotik SFP with Procurve

I think your answer is misleading. ProCurve perhaps only work with their own SFP modules inside the HP switch. It does not matter which SFP module is on the other side (inside the MikroTik) but they must use the same transmission mode. Edit: I think there are also HP compatible SFP modules from othe...
by marting
Thu Aug 20, 2015 10:39 am
Forum: Beginner Basics
Topic: Ignore action for logging
Replies: 4
Views: 664

Re: Ignore action for logging

You could disable the info rule at /system logging. Info is just info and nothing critical. This way you will loose some other info messages (like ether port up/down or rule changed). If you need some of the info message you could add a separate Topic for this (e.g. interface for if up/down). But yo...
by marting
Thu Aug 20, 2015 10:21 am
Forum: Beginner Basics
Topic: Mikrotik SFP with Procurve
Replies: 4
Views: 873

Re: Mikrotik SFP with Procurve

You should have a look to use SFP modules with same properties (Single-/MultiMode, CWDM color and so on).
by marting
Thu Aug 20, 2015 10:17 am
Forum: Beginner Basics
Topic: mails are not downloading from pop3 mail server
Replies: 9
Views: 984

Re: mails are not downloading from pop3 mail server

Without posting your whole configuration I don´t think anyone can help you.
Usually src-nat on a WAN link is trivial and there is no hidden secret to send or receive mails. So I guess your configuration is wrong. Perhaps you don´t allow every necessary outgoing connection.
by marting
Thu Aug 20, 2015 10:05 am
Forum: General
Topic: URL Redirection without Webproxy
Replies: 4
Views: 840

Re: URL Redirection without Webproxy

Of course you can if know the unwanted IPs: /ip firewall nat add action=dst-nat chain=dstnat dst-address-list=RedirectOfUnwanted to-addresses=173.194.112.183 The only restriction is that the webserver under this new IP must not use Hostname based Virtual Hosts, otherwise you will see the perhaps unw...
by marting
Thu Aug 20, 2015 9:15 am
Forum: General
Topic: Trouble with serial connection (always have to change sth. in /system console to establish)
Replies: 1
Views: 278

Re: Trouble with serial connection (always have to change sth. in /system console to establish)

My problem was solved with a simple hint: The connection in fact already was established but the screen was blank and I simply had to press a key :-)
by marting
Thu Aug 20, 2015 9:13 am
Forum: General
Topic: How to mark youtube IPs
Replies: 34
Views: 5306

Re: How to mark youtube IPs

What means "It doesn´t work"?
I say it does. This is a very simple L7 rule, why should it have stopped working?
by marting
Wed Aug 19, 2015 6:19 pm
Forum: General
Topic: SMTP Flooding using internally hosted mail server
Replies: 1
Views: 433

Re: SMTP Flooding using internally hosted mail server

That´s a problem of your internal mail server. It must not work as an OpenRelay . This means it must not accept mails to the rest of the world from unauthenticated users. Here you can check if it meets the minimal security configurations: http://mxtoolbox.com/diagnostic.aspx Anything you will do on ...
by marting
Fri Jul 24, 2015 4:58 pm
Forum: General
Topic: Packet loss during NAT on a CCR1036?
Replies: 0
Views: 314

Packet loss during NAT on a CCR1036?

Hi, I did a capture of a RTP stream on a CCR1036 because there were transmission problems. The main problem is identified as problem of encoder and decoder. But I also noticed some strange packet loss during NAT. I did a dump file by packet sniffer tool and analyzed with Wireshark. NAT rule is like ...
by marting
Mon Jul 13, 2015 6:40 pm
Forum: General
Topic: Partitions: Criteria for failed partition
Replies: 0
Views: 351

Partitions: Criteria for failed partition

Hi, Partitions feature is nice and I would like to use it for deploying new configuration. New Dummy rules in 6.30 caused lots of trouble, so I am looking for a way to safely reconfigure a router at a remote location. The manual is quite inspecific for this feature: http://wiki.mikrotik.com/wiki/Man...
by marting
Mon Jul 13, 2015 4:00 pm
Forum: General
Topic: Feature request: Remove fasttrack dummy rule
Replies: 33
Views: 37973

Re: Feature request: Remove fasttrack dummy rule

Where do these rules come from? I have some RB2011 with these rules and some RB2011 without these rules. All are running 6.30 These rules caused real headache because my configuration script does something like: 1. disable all interfaces 2. clear all firewall rules (filter, nat, mangle) 3. do someth...
by marting
Mon Jul 13, 2015 3:04 pm
Forum: General
Topic: Trouble with serial connection (always have to change sth. in /system console to establish)
Replies: 1
Views: 278

Trouble with serial connection (always have to change sth. in /system console to establish)

Hi, I build a DB9->RJ45 cable attached to Serial/USB COM4. (Pinout: http://www.instructables.com/id/Simple-RJ45-DB9-Cisco-console-cable/ ) It was not possible to connect with putty to serial port with recommended preferences (115200 baud, 8 data bits, 1 stop bit, no parity, no flow control). Then I ...
by marting
Wed Jul 01, 2015 1:56 pm
Forum: General
Topic: src-nat with SIP - does it rely on connections?
Replies: 1
Views: 392

src-nat with SIP - does it rely on connections?

Hi, usually there is a src-nat 192.168.3.0/24 to 3.3.3.3 for our phones and they go into a tunnel. Today the other end of the tunnel crashed (leap second) and the l2tp-tunnel interface was down. So src-nat rule (relying on out-interface) was invalid and NAT did not longer apply. Finally the tunnel c...
by marting
Wed Jul 01, 2015 1:44 pm
Forum: General
Topic: Leap second bug present on TILE devices?
Replies: 49
Views: 10198

Re: Leap second bug present on TILE devices?

Yes, they all crashed: http://forum.mikrotik.com/viewtopic.php?f=3&t=95455 that post is from April? When you scroll down, you will find more recent posts from today. The reason is the same. On 1st of April there was a leap second insertion on some Italian nameservers and today it was worldwide: htt...
by marting
Wed Jun 24, 2015 2:46 pm
Forum: General
Topic: Web Proxy: max-cache-size=unlimited safe on a limited disk?
Replies: 0
Views: 709

Web Proxy: max-cache-size=unlimited safe on a limited disk?

Hi, I attached a small USB stick as proxy cache. Is it safe to keep max-cache-size=unlimited? Let´s assume the stick is only 128MB. Will there be problems if it is full or will the web proxy clear old content? I ask because I have different routers with different sized sticks and don´t want to adapt...
by marting
Tue Jun 23, 2015 9:24 pm
Forum: General
Topic: Use of routing marks in output chain - why does this work?
Replies: 2
Views: 860

Re: Use of routing marks in output chain - why does this work?

Hey, I did not mix up, but I reduced my reading to the upper diagramm :-) In fact the upper diagramm shows that there first is the routing decision and secondly the output chain (green box). But you hit the point . There seems to be a routing adjustment at the end of the output chain (blue box). I m...
by marting
Tue Jun 23, 2015 8:08 pm
Forum: General
Topic: Use of routing marks in output chain - why does this work?
Replies: 2
Views: 860

Use of routing marks in output chain - why does this work?

Hi First of all - it works and I´m happy with this. But I don´t understand why: Mangle sets a routing mark in output chain and my ip route with this routing mark works correct for example this is used there: http://wiki.mikrotik.com/wiki/Manual:PCC#Policy_routing ) But according to this http://wiki....
by marting
Wed Jun 17, 2015 3:02 pm
Forum: Scripting
Topic: PPPoE can accouting only Internet traffic !!!
Replies: 1
Views: 1684

Re: PPPoE can accouting only Internet traffic !!!

make mangle for LAN traffic with address list. make static simplequeue rules with packetmark LAN traffic. when user connect , MT make dinamic simplequeue for this user, because, static simplequeue rules capture LAN traffic, dinamic traffic capture all other, and this is Internet ! Although is a qui...
by marting
Wed Jun 17, 2015 1:21 pm
Forum: General
Topic: [Solved] Gateway routing to etherX vs gateway-ip
Replies: 0
Views: 432

[Solved] Gateway routing to etherX vs gateway-ip

Hi, I have a general question on ip routes: There are three networks with DHCP server. On two networks it is enough to set the etherX as gateway and on one network I have to set the gateway IP as gateway (then 1.2.3.4 reachable etherX appears). There is no obvious difference in DHCP lease I get from...
by marting
Mon Jun 15, 2015 3:17 pm
Forum: Scripting
Topic: whoami (current user)
Replies: 1
Views: 497

whoami (current user)

Hi, I have some kind of initialization script with a common part and a superadmin part (managing users). The superadmin part should only be called if the current user that executes the script has the policy "policy" to do so. How can I get my own username by script? Like whoami on unix based systems...
by marting
Mon Jun 15, 2015 1:17 pm
Forum: General
Topic: Webfig skins (tutorial)
Replies: 100
Views: 93283

Re: Webfig skins (tutorial)

Love webfig, however I would like to see the ability to disable the "disable eable buttons" particuarly in "interfaces" you can click the "D" to disable the interface, would like a read-only or remove option for those buttons, either for individual interfaces or as a whole. I also look for a way to...
by marting
Thu Mar 05, 2015 9:54 am
Forum: General
Topic: Tunnel over a high latency link
Replies: 0
Views: 323

Tunnel over a high latency link

Hi, I need a tunnel over a high latency link (Satellite, ~700ms). Layer 2 would be great. So I tried a L2TP tunnel from one MikroTik to another one (without IPsec). Performance without tunnel is about 20MBit/s and with tunnel it drops to 1-2MBit/s. Sometimes a little better but not good. Is there a ...
by marting
Fri Feb 13, 2015 3:19 pm
Forum: RouterBOARD hardware
Topic: Purpose of ether port with yellow plug symbol?
Replies: 3
Views: 1184

Re: Purpose of ether port with yellow plug symbol?

Well, you´re absolutely right. It´s even in the verbose description of the router:
http://routerboard.com/RB2011UiAS-RM
I guess I only saw: "PoE out No" in the product specification table.
Thank you!
by marting
Fri Feb 13, 2015 2:26 pm
Forum: General
Topic: Prevent accidential disabling of interface
Replies: 3
Views: 714

Prevent accidential disabling of interface

Hi, i have a very important CCR at a remote location. Did a few things to prevent accidential lockout by firewall rules. But I think it can happen very easily to disable the internet uplink by accidential clicking on the D left to the interfaces sfp1. Is there a way to prevent this? Else I will have...
by marting
Fri Feb 13, 2015 1:35 pm
Forum: RouterBOARD hardware
Topic: Purpose of ether port with yellow plug symbol?
Replies: 3
Views: 1184

Purpose of ether port with yellow plug symbol?

Hi, I have some routerBOARD hardware like that: http://img.routerboard.com/mimg/717_l.jpg On ether1 is POE and I understand this is Power-Over-Ethernet IN. But what´s the yellow powerplug symbol on Ether10? And additionally what´s the unlabeled RJ45 port on the backside? Is this for serial console? ...
by marting
Thu Feb 12, 2015 2:25 am
Forum: General
Topic: numerous disconnects on Mikrotik PPTP link while no disconnects on Debian PPTP link
Replies: 1
Views: 569

numerous disconnects on Mikrotik PPTP link while no disconnects on Debian PPTP link

Hi, I migrated from a Debian server firewall/router to a mikrotik. But now I have very often (usually at least one per hour) diconnects and before this I had no disconnects at all (online from 8am to 8pm). Log error message is: "<pptp-XYZ>: terminating... - peer is not responding" Internet connectio...
by marting
Tue Feb 10, 2015 2:16 pm
Forum: General
Topic: Migrate config from a router to a slightly different
Replies: 1
Views: 414

Re: Migrate config from a router to a slightly different

Finally found the problem - the compact export is complete (except users but i guess this is the way designed). But the import failed because I disabeld the guest Samba user a few versions before and this is not longer possible. So the import after reset failed at this point. Had to reset without de...
by marting
Tue Feb 10, 2015 12:59 pm
Forum: General
Topic: Migrate config from a router to a slightly different
Replies: 1
Views: 414

Migrate config from a router to a slightly different

Hi, I want to move from a 2011UiAS-2HnD to a 2011UiAS-RM (both on v6.26). The question is: how to do this? - Backup/Restore: Have read that this is only for exact the same router (not even a router of same type) - Export verbose: Can´t import, tried it by /system reset-configuration keep-users=no no...
by marting
Wed Jan 28, 2015 2:40 pm
Forum: General
Topic: Route selection precedence
Replies: 3
Views: 663

Re: Route selection precedence

Thank you for information, did not find documentation that there is also a priority for the most specific rule. So I think this would be the sequence: 1. Select all applicable routes, from this: 2. choose routes with matching routing-mark (if existing), from this: 3. choose most specific routes, fro...
by marting
Wed Jan 28, 2015 1:35 pm
Forum: General
Topic: Route selection precedence
Replies: 3
Views: 663

Route selection precedence

Hi, I want to be sure that always the correct route is selected without introducing too many distances. From http://wiki.mikrotik.com/wiki/Manual:IP/Route#Route_selection I have learned that routing-mark with applying distance is more prior than applying distance without routing mark. Seems to be ob...
by marting
Thu Jan 22, 2015 5:21 pm
Forum: General
Topic: Dual WAN VPN with failover
Replies: 8
Views: 2330

Re: Dual WAN VPN with failover

But you suggest using SSTP/OVPN as point 1 in your solution. Do I misunderstand?
by marting
Thu Jan 22, 2015 11:51 am
Forum: Scripting
Topic: Netwatch style script
Replies: 16
Views: 8673

Re: Netwatch style script

Did anyone use this this script on a 6.x already?
by marting
Wed Jan 21, 2015 4:03 pm
Forum: General
Topic: Dual WAN VPN with failover
Replies: 8
Views: 2330

Re: Dual WAN VPN with failover

Hi eteranl,
thank you for sharing this solution. As I have read EoIP suffers performance, is there a better alternative? Would this work?
1. SSTP/OVPN to connect each WAN to each pper
2. MPLS/VPLS over VPN tunnel
by marting
Wed Jan 21, 2015 4:00 pm
Forum: General
Topic: Connect 2 Miktrotik through Internet (1x with WAN-Failover)
Replies: 1
Views: 489

Re: Connect 2 Miktrotik through Internet (1x with WAN-Failov

Or would it be better not to bond, establish a single VPN connection through each WAN interface and use this? http://wiki.mikrotik.com/wiki/Advanced_Routing_Failover_without_Scripting http://forum.mikrotik.com/viewtopic.php?f=2&t=45322&p=231651 As far as I understand the only advantage of above solu...
by marting
Wed Jan 21, 2015 3:11 pm
Forum: General
Topic: Connect 2 Miktrotik through Internet (1x with WAN-Failover)
Replies: 1
Views: 489

Connect 2 Miktrotik through Internet (1x with WAN-Failover)

Hi, I have to connect two Mikrotik routers through Internet and I´m getting headache on thinking on how to realize best way :-) IS: Router R1 located in datacenter with a few puplic IP subnets Router R2 located in office with two WAN links (WAN1 leased-line or DSL and WAN2 LTE or SAT as failover). G...
by marting
Fri Jan 09, 2015 12:04 pm
Forum: General
Topic: Dual WAN VPN with failover
Replies: 8
Views: 2330

Re: Dual WAN VPN with failover

Hi,
I need to build a similar setup. Does anybody have a hint?
Regards
Martin
by marting
Tue Dec 02, 2014 12:39 am
Forum: General
Topic: source of unused address list name
Replies: 15
Views: 2392

Re: source of unused address list name

could you reproduce or do you need some more information from me?
by marting
Thu Nov 27, 2014 5:25 pm
Forum: General
Topic: source of unused address list name
Replies: 15
Views: 2392

Re: source of unused address list name

Right, I reproduced it also on 6.22 firmware, so this is not gone with 6.20 And it is no disabled rule but an active rule with an folded/retracted/hidden address list. Just add a test firewall rule, select a DST or SRC adress list. Then click the upwards arrow and the list is not visible any longer....
by marting
Thu Nov 27, 2014 2:10 pm
Forum: General
Topic: source of unused address list name
Replies: 15
Views: 2392

Re: source of unused address list name

Thank you very much, you´re assumption was absolutely right. I was not aware that "hiding" (by clicking the arrow) leave the old value untouched. I checked src/dst adress list for all of my firewall rules and indeed there was one rule with a hidden occurence of my old address list. Thank you very mu...
by marting
Wed Nov 26, 2014 10:52 am
Forum: Beginner Basics
Topic: CCR1036-12G-4S: One subnet on different ports
Replies: 2
Views: 787

Re: CCR1036-12G-4S: One subnet on different ports

So what do you think is the recommended configuration for this setup?
by marting
Wed Nov 26, 2014 10:50 am
Forum: General
Topic: source of unused address list name
Replies: 15
Views: 2392

Re: source of unused address list name

My problem is not solved, too. I just ignore it :-) Because of the hint with the export file I did an export, too. And it is the same for me, the name of the address list occurs two times in the binary backup file but does not occur in the export file. I just realized that I perhaps made an mistake ...
by marting
Wed Nov 26, 2014 10:08 am
Forum: Beginner Basics
Topic: CCR1036-12G-4S often misses graphs since update to 6.22
Replies: 0
Views: 381

CCR1036-12G-4S often misses graphs since update to 6.22

Hi I upgraded a CCR1036-12G-4S from 6.18 to 6.22 and firmware from 3.18 to 3.19. Ususally we had the graphs of sfp1 on a monitoring display. Auto refreshing worked fine. It happened extremly rare that one of the four graphs was not displayed until next auto refresh. But since the upgrade I have to d...
by marting
Thu Nov 13, 2014 2:27 pm
Forum: Beginner Basics
Topic: CCR1036-12G-4S: One subnet on different ports
Replies: 2
Views: 787

CCR1036-12G-4S: One subnet on different ports

Hi, I have a CCR1036-12G-4S with three Hosts for virtual machines directly connected to it (ether4, ether5, ether6). All virtual machines are in subnet 10.142.46.128/25 and machines are regularly moved over the hosts. Because the CCR is missing a switch chip, I use a bridge over these three ports at...
by marting
Mon Aug 25, 2014 8:37 pm
Forum: Beginner Basics
Topic: routed subnet on CCR
Replies: 0
Views: 441

routed subnet on CCR

Hi, I have problems configuring an additional subnet on a CCR to a separate VPN device. Assume I have a subnet A 203.0.113.16/29 on ether2. So I assigned 203.0.113.17/29 adress to the Mikrotik as gateway on ether2. VPN device has 203.0.113.18 with .17 as gateway. Working as expected. Now I need an a...
by marting
Thu Aug 21, 2014 2:27 pm
Forum: General
Topic: source of unused address list name
Replies: 15
Views: 2392

Re: source of unused address list name

No it is not removed by a reboot and it is even there after a restore of backup file. I can find it twice in the unencrypted backup file. The first occurence seems to be list of address lists and the second occurence seems to be a rule that really is there but the adress list is not included. Edit: ...
by marting
Thu Aug 21, 2014 2:11 pm
Forum: General
Topic: source of unused address list name
Replies: 15
Views: 2392

source of unused address list name

Hi, I have created a few address lists and removed or renamed some of them. Now I have one address list that is not used any longer but it still appears in the drop down menus. I did an export in / and I can not find the name of this list in the rsc file. Do you have an idea how to get rid of this o...