MikroTik

vk7zms

Are the EoIP tunnels all bridged together at some point? or are they being used purely at L3?

vk7zms

Dual nstreme can be directly bridged - it won't work with wds

vk7zms

Do you may have a masquerade or src-nat rule to allow Internet traffic out the default gateway that does not have an outgoing interface specified? This could cause the LAN address to be masqueraded outbound on the photo tunnel?

vk7zms

vk7zms

Looking at you network diagram you have Ethernet cables between network2 and the hosts on this network - if so a better solution would be to define a VLAN on the RB1100 LAN bridge interface and on a single port of your second mikrotik. Just add the remaining ports and the VLAN to a bridge and move t...

vk7zms

Any reason you don't just an ip address from each subnet (the default gateway address for network hosts) onto the RB1100 LAN bridge interface. Down side is you will have to static ally assign addresses on one subnet as both subnets are on the same L2 segment.

vk7zms

http://wiki.mikrotik.com/wiki/How_to_ma ... _web_proxy

vk7zms

Ports 9&10 WILL cause performance issues (low throughput and variable latency) used in any configuration - don't use them - other ports work just fine

vk7zms

You don't really have to do anything to "route" the real world block as MT does it by default. Just add the first of your real world block to whichever Ethernet port you are using for the switch master, and use this address as the default gateway for the hosts you have plugged into the swi...

vk7zms

I was assuming you were going to leave all the current load balancing config in place. Can you post your policy based rules to direct outbound traffic. Are the two Cisco routers you speak of inside your network, or at your providers end of your fibre link. Is your ASN advertising to your suppliers f...

vk7zms

Assuming you are filtering out (or not receiving) default route fro your two providers, you can use multiple default routes with different distances - set the lower distance for the preferred outbound source and set check gateway=yes. This way of the preferred gateway for that particular /17 becomes...

vk7zms

45 meters is fine if using 24v PSU

vk7zms

Even funnier they list the SXT "sector" under new product, and then state in the description that it is already available.

vk7zms

Actually would you believe www.routerboard.com.

vk7zms

www.routerboard.com.au

vk7zms

rhauf - yes I understand pointing snmp at the remote tx address - trouble is it only works when that link is active - as soon as the active path changes, it stops.

jklpl - As for EoIP not being efficient - does it really matter? How much snmp data can one possibly need to retrieve from one site?

vk7zms

Use the 751 as a caching DNS server for requests from the 192.x.x.x range and put a static DNS entry for your mail server

vk7zms

We have seven BGP peers to other ISP's and have never had any trouble with interoperability.

vk7zms

How long did you run test for?

vk7zms

Yes - I agree - RB411ah with a single SFP would be awesome

vk7zms

That is odd - did you leave the pin set at the mikrotik OS level as well?

vk7zms

what interfaces are your IP addresses and DHCP-Servers bound to on the RB2011. and what interface is the DHCP-client bound to on the rb751

vk7zms

There is known issue with ports 9&10 on RB1200. It apparently only exhibits issues when running BGP and has apparently been fixed - if I need more than 8 ports, I now use an rb1100ah

vk7zms

In this case the VLANs are members of bridges, so the ip addresses stay on the bridges. The 751 doesn't even need an ip address (except for management purposes) Btw - in your first post you mention you didn't want the two private ip ranges to be able to route to each other. You will need to add fire...

vk7zms

when you say "LH connector" which side of the board are you looking at it from

I believe CH0 on those cards is labelled L6

vk7zms

ok - so ether2 on the RB2011, is already a member of bridge1 that you want the Ethernet ports on the RB751 to be a part of, so you need to do nothing but patch the two together for this part to work. create bridge1 on the RB751 and add all the Ethernet ports to this bridge. Add a vlan with say vlan-...

vk7zms

The guy from my local Sierra supplier was aware of it, so I guess so

vk7zms

The settings I posted were for the mc87xx series. I have never used the 57xx series as we have no EV.DO or narrow band CDMA networks still active. Did you purchase the SIMM in a device or by itself. If it came in a USB stick it will probably auto install in a windows environment and you should be ab...

vk7zms

From the MT command line (select "new terminal" from winbox) you access the modem serial console /system serial-terminal usb2 channel=3 You should now be able to issue modem commands Type at, and you should get "OK" as the response. Now set the pin by entering modem command at+cp...

vk7zms

I don't know why it happens, but sometimes the PIN doesn't get sent to the modem from ROS correctly. ROS appears to store it correctly, just doesn't always send it through to the modem. If you are going to configure prior to dispatch via winbox, could you not do it manually prior to dispatch? I will...

vk7zms

My wife is not certified mad, but she is

Best Forum post yet - lol

vk7zms

It is a router, not a switch, if u need untagged, just add address directly to Ethernet port. An untagged port is just that - not tagged with any VLAN ID. On a switch you typically have any number tagged and or untagged ports on the same VLAN - a router strips off the VLAN tag on the port inbound an...

vk7zms

PIN function normally works well, we use it often. Have had problem setting it on occasion and have had to do it manually from the modem serial console

vk7zms

Well - looks likes your options are limited - perhaps you could convince Microsoft to release a custom version of NetBIOS for you LAN requirements

vk7zms

I haven't had to do this as we don't put gear on towers with broadcast gear on them. One of my friends fixed the 10m problem with fibre - ran mains power up the tower and ran all the mast head equipment from a PoE switch using the ubiquity PoE converters.

vk7zms

You could always try using a fibre link up the tower and keeping the copper network cable as short as possible. If you are using PoE you will of course have to run a desperate power cable

vk7zms

use OSPF or BGP, without bridging any interfaces

vk7zms

If you don't have too many POS terminals, just add a "secret" for each of them with unique address allocations. Each POS terminal nill need to use unique credentials to log in.

vk7zms

are you planning to use real world ip addresses directly on any other hosts in your network, or do you intend to setup a series of src-nat/dst-nat rules for specific ports to specific hosts etc?

vk7zms

add the mac-address of the server you want to bypass the hotspot under ip bindings, and set it to bypassed

vk7zms

When you install the Sierra card, a pop interface should appear on the router, just configure and enable this interface. You will need some specific information from your carrier - most just require the APN to be correct for the service you have purchased. For the sierra cards, set port=usb2, data c...

vk7zms

Just use net watch to monitor the radius server and of it can't reach it, execute a script to disable hotspot server, and another script to enable hotspot when radius is reachable again

vk7zms

Add Ethernet and WLAN to bridge and use same one up range

vk7zms

If you had radio LOS between both sites, and correctly lined up aerials, you should achieve around 27M half duplex using 802.11a and nstreme.

For OFDM transmissions such as 802.11a, radio LOS will need to be at least 0.6 of your first fresnel zone to get good throughput

vk7zms

Even when moving config from RB1100 to RB1100AHx2 this happens - we got around it by manually editing the interface section of the rsc file. I used a normal export, then replaced the Ethernet MAC addresses with those of the new board and manually re-ordered them so they were in the 1100AHx2 order an...

vk7zms

Lots of Sierra cards are supported, but you need to find a supplier that can give you technical information if you want to do the tricky stuff. The MT GUI and CLI allow you at access a very small subset of the Sierra commands. Anything more than that you have to open a serial terminal connection dir...

vk7zms

My apologies - just read your original post again - I clearly did not read it correctly and had assumed the two interfaces were bridged - if you want netbios to pass, both interfaces need to be part of the same L2 network - NetBIOS is designed this way - it won't pass through ANY router.

vk7zms

Can you ping the modem if you plug directly into it with a modem. Do you have same net mask on modem and router

vk7zms

You need to give accurate scenario if you expect useful answer.....

vk7zms

As long as the three DHCP servers are handing out the correct default gateway this will work by default. Do you have any firewall rules in place?

vk7zms

I have seen this problem many times - remove masq rule 2 as posted - you DON'T want masq onto LAN - this is what is stopping you see your workgroup

vk7zms

The problem is in your masquerade rule - you have not specified an outbound interface, so router OS is doing a masquerade between the LAN and WLAN interfaces. This will block SMB. Add an out-interface to masq rule and it should all work.

vk7zms

The manual is the same for all, because the complete OS is loaded onto all boards

vk7zms

I have seen this happen several times when an incorrect power supply was used - reboot under wireless load

vk7zms

You can not do this with Mikrotik as there is no implementation for a centralized controller, hence no hand off from one AP to the next when client is mobile. Mikrotik has some really great wireless solutions, unless you need to do WiFi. Ruckus Wireless AP's back hauled by mikrotik wireless to the r...

vk7zms

In your original post you stated ether 3&4 were on the separate subnet, but it looks like you meant 4&5. VLAN between the two devices is simpler than EoIP solution and will have less overhead than routing traffic through a third subnet. You could also bride WLAN to main subnet and create a v...

vk7zms

If the omnitik is handing out dhcp, there is no way for the client pc to have an IP address prior to SXT WLAN being enabled, therefore nothing in the arp table. Would be easy enough to do if client pc had static address or a second deco server was set up on the SXT

vk7zms

We have had same issue with several of the linksys routers connecting to MT pppoe servers. We found that if chap was enabled on the server profile, the pppoe session would dial in but no traffic would pass - disabling chap forced the linksys to use PAP and they worked fine.

vk7zms

choose a mini pci-e modem that supports the required bands, and then it is really down to the provider you choose - there are many simm's available that will work on a multitude of networks and in almost every country - catch is their roaming data isn't that cheap. I have used a simm from www.roamin...

vk7zms

If your WAN ip is on one port (10.0.0.5/30) and your LAN ip's are on another port - MT will route LAN addresses by default - no need for extra routes. you will have to add a default route (route add dst-address=0.0.0.0/0 gateway=10.0.0.6) to allow your router to access internet via the WAN. NOTE - I...

vk7zms

assuming you are using a bridge to join ether3&4 on the 2011 together, creat a VLAN on ether2 and add it to the same bridge as ether3&4. create the same VLAN on the 751 and add both the VLAN and the WLAN (or virtual AP) to the bridge.

vk7zms

purchase new license online at www.mikrotik.com, paste new license key into system license using winbox

vk7zms

from what you have posted it does not seem possible that your MT router is Queueing LAN traffic as it should NOT be passing through your router - try unplugging the Mikrotik and check LAN transfer speed between machines on LAN.

vk7zms

This is common problem with 493G - we noticed as soon as we started upgrading 493 with 493G (routing masthead 411 and 711 base station units) - problem solved by replacing with RB1100AH.

vk7zms

Win box has always braved that way - I ALWAYS make sure I move winbox to the laptop screen before closing it - that way it doesn't try and open on an extra monitor. I have always considered it an "undocumented feature"

vk7zms

I have seen similar problem on routerboard product but never on x86. I have found it is often caused by a duplex setting mismatch between two devices. Try hard coding the Ethernet port to 100MFD. I have also found routerboard product to require a crossover cable in order to do correct auto negotiate...

vk7zms

Add a bridge to each groove

Add the WLAN and Ethernet ports to the bridge

Set one WLAN to mode station-bridge and the other WLAN to mode bridge.

Add a dhcp client to each bridge

vk7zms

It will route by default - but perhaps the router at the other end does not have a route back to the ip range 192.168.8.0/24 .

If you don't have control of the router at the other end you could add a masquerade rule for the 192.168.8.0/24

vk7zms

IF you only want to use the backup when primary fails, it is very simple. Set the PPPoE connection to accept default route which will have a distance of 0. Then add a static default route to the second connection and specify a distance of say 5. This will use PPPoE connection unless it fails - in wh...

vk7zms

Sounds like it fails POST. Connect a serial cable and reboot. You may need to reload the firmware via serial connection

vk7zms

+1 from me

vk7zms

Is ROS running natively on the x86 or is it running as a VM

vk7zms

Of you drop your BGP hold time down, be sure to set up some sort of prioritisation on BGP traffic. BGP sessions will often disconnect when link is saturated if hold times are set too low

vk7zms

There are some reasonable Cisco resources available online that explain its operation - i suggest you ask your ISP's if the support it first though

vk7zms

If you get really lucky your ISP's may support Bidirectional Forwarding Detection (which Mikrotik has recently added support for)

vk7zms

If you create a bridge on each end and add only the dual-nstreme interfaces to the bridges - you can add the management VLAN to the bridge

vk7zms

Of you ate SURE the serial cable and settings are correct and you are not able to see anything in terminal window, it is probably time for a new board

vk7zms

Good work around - I will give that a try

vk7zms

If you have enough address spaces for static leases, you can set a static lease in radius for say the real world addresses, and let the private addresses come dynamically from the pool - we do this using pppoe, but should work the same on DHCP

vk7zms

There is an issue that we have found where a device will go into "sleep" mode and disconnect from AP. When it wakes and reconnect, RB751 will only connect the device at basic rate

vk7zms

One problem I see is the way you are planing to use the "next pool" - DHCP server simply uses the next pool of it runs out of address' in the first pool.

vk7zms

It absolutely will not work without ch0 used

vk7zms

I disagree. If he needs layer 2 transparency station WDS works better than station pseudobridge.

Correct - never had any success pseudobridge myself - station bridge mode however, is awesome - full L2 transparency - an excellent choice if you are using MT CPE and base station

vk7zms

If the Ethernet ports are all down - you will need to log in with a serial cable - if you can't log in - reboot with serial cable attached and see how far through the boot process you get - it is also possible to reload the firmware via the serial cable

vk7zms

There is nothing in the information to suggest WDS is the issue, however it appears an unnecessary level of complication. I would be removing WDS and replace it with station bridge setup on the client SXT's.

vk7zms

have a look at the BGP path attributes - are the paths from ISP1 all shorter than the paths from ISP2?

vk7zms

routing marks are the way to do it - your masq rule "may" be causing trouble as it will masq everything - even one LAN to the other..

I would try using two rules, one for each LAN, and specify the src-address as the LAN address and dst-address !other LAN address

vk7zms

BAW filter is an electronic type of filter, and the one you posted has such a low attenuation to surrounding frequencies so as to be of dubious benefit a "Physical filter" such as a cavity filter that might give 30-60db attenuation to surrounding frequencies needs a number of physical cavi...

vk7zms

just use netwatch set the host ip to watch as 192.168.1.20 (the station router) set timeout to say 5000 (5 seconds) set up action to turn on ether1 (where the server is plugged into) interface ethernet set 0 disabled=no set down action to turn off ether1 interface ethernet set 0 disabled=yes Assumin...

vk7zms

We use third party to software to monitor via SNMP - try PRTG.

Chech reported voltage against actual battery voltage - it appears no two router boards will give the same result - we check them against a voltmeter and then add a correction factor

vk7zms

EoIP is a great way to bridge L2 across a L3 network

vk7zms

At 2.4ghz - there isn't the space on a mini pic form factor for a physical filter - wavelength cant be miniaturized

vk7zms

Are client on different subnet to server - ie does traffic have to pass through router to get from client to server - if so, please post queue config - perhaps you just need to exclude 192.168.0.0/16 from you queue ?

vk7zms

We have the same problem - an easy fix is to build an EOIP to the router and bridge it to the Ethernet port the ammo based monitor is on - then have the subnet used for monitoring on the other end of the tunnel - as close as possible to your monitoring software

vk7zms

We had the same issue with RB493G (RB493 all work great) - we fixed the issue by replacing them with RB1100 (493G's sitting in office)

vk7zms

first of all - are you able to ping your default gateway 206.75.200.1? just in case the router is trying to use a private ip address that you may have on the router, make sure you specify the src-address in the ping command ping 206.75.200.1 src-address=206.75.200.154 see if you have any other defau...

vk7zms

no - the source address needs to be the address the traffic originates from from, which is inevitably inside your LAN(s). if for instance you open a webpage from a client on one of the LAN's, the router will see the traffic coming from the Ethernet port into the router - hence the source address we ...

vk7zms

ok - think I misunderstood your original request. If I understand you - all interfaces are passing traffic, but you want to stop clients plugged into eth2 from accessing the server on eth1 until the wireless link to the station unit is established? On way you could do this is by using netwatch to mo...

vk7zms

Go for an RB1100 - probably overkill but will not disapoint

vk7zms

I have never tried using any kind of ppp service with the remote and local addresses set to the same ip address - try changing the remote address - I always make the remote address unique for each user in case they login at the same time.

vk7zms

Do you have 192.168.1.30 bound to an Ethernet or bridge interface - looking at your drawing it should be bound to the bridge port that includes eth1 eth2 and wlan AP. it is a bit difficult to sea any other reason why you can't get to the server without the wireless connection running. can you please...

vk7zms

I think the easiest way is with a couple of mangle rules lets assume the following LAN1 is 192.168.1.0/24 LAN2 is 192.168.2.0/24 default gateway of ISP1 is 10.1.0.1 default gateway of ISP2 is 10.2.0.1 you could add a couple of mangle rules to mark the traffic from each LAN chain=prerouting action=ma...

vk7zms

even if you did write a script to do this, I think it would be problematic in that if the load drops below the throughput threshold - the script will activate (as no load = no throughput). on the other hand, when the throughput is suffering due to interference, the latency would climb significantly,...

vk7zms

change your wireless protocol from "unspecified" to anything else on the list (802.11 nstreme Nv2 etc) at the AP end, and change the station units to wireless protocol "any", and they will then follow whatever you set on the AP - try using 802.11 first.

vk7zms

Have you set your default gateway on the RB750 to be via the pptp-client interface? or is it still sending traffic via the WAN interface?

perhaps post pptp-client, ip address and routing config?

vk7zms

try putting in a static route to your work VPN host to force the VPN traffic out one connection only

OR

put in a mangle/routing mark rule and coresponding static route to direct all VPN traffic out a single WAN

vk7zms

What you have posted should do exactly as described. If it is not working I suspect there is possibly some configuration issue with the ptp link. If you are using AP bridge and station bridge, you simply need to create a bridge interface on each routerboard and add both the WLAN and Ethernet interfa...

vk7zms

OK - so you need to be just a little bit more specific :) Do you want LAN1 & LAN2 to both use WAN1 & WAN2? If so is this on a load sharing or fail-over basis? OR, do you want LAN1 to us WAN1 only, and LAN2 to use WAN2 only? What type of WAN connections are you using DHCP-Client, L2TP, PPPoE,...

vk7zms

Murray: When are you going to bundle it up into a RouterOS Metarouter image? :-D I havn't had a great run with Metarouter - Stability for production environment just isn't there yet. Concept is great - Configuring is way easy - just can't stop them locking up every month or so :( So in short - not ...

vk7zms

Solved the problem running an instance of L2tpns on ubuntu

vk7zms

Hi Terry - many thanks for your reply - for us it is a temporary measure and as such will only need to support IPv4 We currently have a Linux machine running l2tpns terminating the L2TP tunnel from the LAC and the inbound PPP connections. Is there a way of setting the L2TP "secret" that is...

vk7zms

Hi Nick - a little off your topic, but I would like to set up an RB1100 as a LNS server. I can set up the L2TP server easy enough, and have set up lots of PPPoE servers for Ethernet based networks. The bit I am missing is how to get the PPPoE server running over the incoming L2TP tunnels. If you hav...

vk7zms

Hi Terry - would love to do this on ROS - any chance you might share a sample config.

philb -have you managed to get it to work as yet?

vk7zms

I can't comment on the Ubnt product as we are a 100% mikrotik house for unlicensed gear.

As for NV2 improvements since 5.8, if they are worth trying, why are they not documented in change log...

vk7zms

In my opinion you are all wasting your time trying to find a fix - we have done extensive field testing and have found the ONLY successful NV2 installations are way out in the country where there is NO other RF - we have concluded that NV2 is extremely susceptible to even the slightest of interferen...

vk7zms

We tested extensively on ROS5.8 and even put some into production - big mistake - it might run for a day or four months - but it will eventually lock up - usually rebooting the MR only would fix the problem - we were only using ROS MRs - no third party OS involved

vk7zms

why not just block the windows share port on the RB750?

vk7zms

even if it was possible - what application would there be for this configuration

vk7zms

As long as both machines exchanging the shared files have the ip address of the interface they are connected to set as thier default gateway you will not have to modify your settings at all. You will have to manually navigate to the share via IP address.

vk7zms

Unfortunately not - MT is a router OS not a webserver

vk7zms

Having used MetaRouter in production, and subsequently had to replace it with physical routers), I am pretty sure there is no production application for a product this unstable. I have trialed it on RB433AH, RB1000 and RB1100. ALL became unstable and would randomly lock up. Removing Metarouter from ...

vk7zms

We are running Metarouter on RB1000 and RB433AH. The 433AH has been unstable since Install on site (metarouter running from day one). It would lock up and become unresponsive and required reboot to fix. Rebooting the metarouter usually fixes it for a few days. We have a watchdog set on the 433AH tha...

vk7zms

it is not a stupid question, and happens often - despite having three card slots, using any more than one at the same time will cause degradation of service on the other. the cards are physically too close together. We have deployed around 600 routerboards running various configurations and done ext...

vk7zms

we often have problem between routerboard product and some switches that causes poor bandwidth between routerboard and switch. Usually the problem can be fixed by manually setting the ethernet port on the routerboard to 100M Full duplex, untick the auto negotiate button, and fit a cross over cable b...

vk7zms

we have RB1100's with the same problem - ports that flap are connected to another RB1100 and to some Grooves

vk7zms

Sounds like perhaps you haven't bridged the WLAN AP to the wired LAN or LAB Bridge - You will need to post more of your configuration.

Is 192.168.88.3 on an ethernet port, bridge or the WLAP AP interface?

vk7zms

Sierra Wireless MC8795V - we have used others (all Sierra cards), but I can't remember the model numbers. MC8795V is a current model.

vk7zms

sure - you can do that - but I thought you were trying to get them all on the one network? What are you actually trying to accomplish?

vk7zms

If you are using the latest version of Mikrotik Winbox Loader - untick the "secure mode" tick box and it will probably let you in.

Otherwise just use an ssh client like putty.exe and learn Mikrotik cli

vk7zms

Are you really using an RB750 as your core router?

How are the users Authenticating to your network and are you currently doing anything to limit traffic to customers?

is web traffic slow for wired and wireless customers?

vk7zms

you could try putting static DNS entries in your RB1000 so that internal PC's resolve a 192.168.x.x address for the servers instead of the real world ip address - that way they won't even pass through the RB1000 - just the switch. This assumes of course, that your are using the RB1000 as a caching D...

vk7zms

The 411AR has no simm slot and the Motorola mini pci card does not appear to have a built in one, so I doubt you could make it work.

Try using an RB411UAHR with mini pci-express - we have used a few on 3G and they work better than the Cisco 3G routers they replaced.

vk7zms

sure - put a 2.4Ghz card and a 5.8Ghz card in your routerboard running in ap-bridge mode.

Add both Wifi interfaces and LAN port(s) to a bridge interface.

traffic on any interface will have connectivity to any other interface

vk7zms

we do it by using a Mikrotik router to terminate the PPPoE session at the customer premises, and then placing static routes on the Customers Mikrotik to bypass the PPPoE session (and hence the PPPoE speed Q).

vk7zms

if the HT extension channel (HT tab of wireless interface in winbox) is disabled it will be 20Mhz channel - if HT extension channel is set to "above" or "below" it will be 40 /interface wireless set 0 ht-extension-channel=disabled should set it to 20Mhz (assuming the R52hn card i...

vk7zms

You need to put your src-nat/masquerade rules on the outgoing interfaces? If your are terminating the PPPoE session on your Mikrotik router then just use a rule like this 1 chain=srcnat action=masquerade src-address=192.168.1.0/24 out-interface=pppoe-out-TPG 2 chain=srcnat action=masquerade src-addr...

vk7zms

In order for PC's on the inside of your network to access the internet through either connection, you will have to do some sort of src-nat on each interface. The simplest type of src-nat for this application is masquerade. If for instance your internal network address was 192.168.0.0/24, you might u...

vk7zms

you stated in your first post that the static default routes were using routing marks gat1 and gat2 but the mangle rules are marking the two groups as "lan" or "pppoe" - they will need to match up with each other to make it work. Do you have a src-nat rule for each group specifyi...

vk7zms

What you have described should work easily. Are you sure it isn't working? Are you seeing traffic hitting both mangle rules?

- can you post your mangle rules and route list?

vk7zms

Are both of your internet connections delivered by PPPoE, and are they per chance from the same ISP, and have the same default gateway?

vk7zms

I'm a definate starter - I vote for Byron Bay

vk7zms

I have checked for packet loss as several of the connections traverse leased fibre runs, but could not see any issues.

One of the routers it is dropping BGP sessions to is in the same rack and plugged into the same switch, so I am confident it is not a packet loss issue

vk7zms

I have just upgraded an x86 machine from 3.23 to 3.30 then 4.11 Now all the BGP peers randomly drop at intervals from a few minutes up to half an hour - the log file simply sayes route bgp error HoldTimer Epired route bpp error RemoteAddress=x.x.x.x All hold timers on this machine and it's pears are...

vk7zms

pptp or Eoip should work well - it sounds like you may be missing a static route somewhere. Can you post VPN and routing configuration?

vk7zms

That mail was answered 3 days ago, check your email filters

Interesting how you can claim to have answered my email 3 days ago, and now you can't find it.......

I will forward another copy of the original to support

vk7zms

Hi all NO 2 : all my network return to RB1000.. am using usermanger... i want to make every access like 433AH router and give the clients ip and getaway different .. every point has another ip another getaway... put all of these at the end return to RB1000 ... can i do this ! again not sure I under...

vk7zms

Hi all NO 1 : I have RB1000 main router... and i have many point RB411A &RB433AH ... i want to see the domain name that i see it in access ! i want to see it in the main router ... can i see my client domain ! If by this you mean - "can you have access to the clients domain back at your RB...

vk7zms

i thought Zone Director was not compatible with mikrotik AP We have RB1000 running Hotspot via ZoneDirector with different SSID's on different VLAN's. But we have the root AP's plugged into the RB1000 directly, with VLAN's on the Ethernet ports of RB1000. All the other AP's mesh with the root AP's ...

vk7zms

That mail was answered 3 days ago, check your email filters

sounds impossible - i received other email from support@mikrotik.com - just nothing in relation to this issue - not even a ticket number. perhaps you would be so good as to post it here?

Bump - still waiting Normis

vk7zms

Why don't you just use the smtp server of your ISP?

vk7zms

That mail was answered 3 days ago, check your email filters

sounds impossible - i received other email from support@mikrotik.com - just nothing in relation to this issue - not even a ticket number. perhaps you would be so good as to post it here?

vk7zms

my bad - added the .au as I typed it in this morning - very tired from working all night rolling back to 3.30 checked sent email - properties below From: "Murray Southwell" <murray@staff.tasmanet.com.au> To: "MikroTik Support [Maris]" <support@mikrotik.com> Cc: "Joel Harris ...

vk7zms

When will you finally email support :) ? Or are you afraid of something ? :) please see copy of email sent to support@mikrotik.com.au 16/2/2010 bellow - still no reply - not even a ticket number. when I send an email to support@mikrotik.com.au with a license key issue, Sergejs replies promptly. Per...

vk7zms

We have many Nstreme links installed, that are run with actual traffic and actual users. We don't have such problems, and nor does the majority of RouterOS users. We have no real support requests at this time. If you have issues, please make a proper support request, with as much details as you can...

vk7zms

Thanks for the reply Scott - but there must be something other than hw-reties that affects link stability in 4.5. A lot of the links were so unstable it was impossible to connect to CPE and make any changes. I had technicians at several of our bigger customers changing settings while I changed the b...

vk7zms

Rolled back a couple of links to 3.30 - now stable and working as normal

in process of rolling back ALL base stations to 3.30

4.5 has many nice features and I look forward to being able to install a stable 4.x version in the near future

vk7zms

yes - had the same problem - but only once out of several hundred upgrades - after upgrade could not reach cpe via ip address or ping it from the base station - wireless re-associated, so just deleted the ip address and re-added it via mac-telnet and it all worked fine again.

vk7zms

Yes - we use Nstreme on all links (or dual nstreme). On our nstreme links we have been running with dynamic size and framer limit 3200

vk7zms

If you have followed the forum threads, as you say, then you will see that all issues were solved with wireless settings reset and hw-retries increase Normis - if you had read my post, you would have seen that i HAVE TRIED THIS. I have problematic links set to hw-retries=15. I have done the "r...

vk7zms

As with MANY previous posts on this and other threads, we are experience widespread and uncontrollable wireless disconnects since upgrading to ROS4.5. We have tried many things to rectify the situation, including resetting the wlan interfaces and reconfiguring etc. In some case increasing hw-retries...

vk7zms

If they all work ok on the ground, I would suggest you problem may be with the cable run up the 24M tower - I assume that the radio unit is mounted at the base of the tower and the aerial at the 24M mark on the tower? If this is correct, what type of feedline (co-ax) are you using?

vk7zms

First I created an EoIP tunnel between the WLAN ip addresses of the two routers. Then at each end, created a bridge interface, and added the EoIP and Ether1 interfaces to the bridge. If however you are using Nstreme Dual, just add the Nstreme2 interface and the Ethernet ports to the bridge interface...

vk7zms

Normis, would you be good enough to post the link in this thread - I was unable to find the post to which you refer.

vk7zms

Any News on MT support for the SR71 series 80211n (AR9160 chipset) mini-pci cards

vk7zms

Is it possible to add a list of prefixes to a filter

for example filter out

192.168.0.0/16
10.0.0.0/8
172.18.0.0/24

vk7zms

JP, That is such an easy work around - thanks for the great idea

vk7zms

May I ask why you are asking about Canopy equipment on the Mikrotik Forums???

May I also suggest you replace all your Canopy gear with Mikrotik gear

vk7zms

Hi, I am running BGP internally on a network and have been trying to figure out how to set a route as priority - I have several situations where I have the same number of hops but I would prefer a particular router to preference one particular route (the faster link path). Is it possible to add some...

vk7zms

Sounds like you may be masquerading your ISP assigned real world IP address onto a private IP range such as 192.168.x.x ??

vk7zms

Excellent - thanks for that - much appreciated

vk7zms

Hi, I am running BGP internally on my network - this works well most of the times, however there are two things I can't work out how to do with "advertise connected" routes enabled, I want to be able to filter out a specific route so it is not advertised at all. This is usually a subnet at...

vk7zms

That worked perfectly - I just tested it using a couple of spare routers here in the office - thanks for the advice - very much appreciated I used the following mangle and simple queue rules ip firewall mangle> 0 chain=prerouting action=mark-connection new-connection-mark=VLAN6-con passthrough=yes i...

vk7zms

Hi all - I have an Nstreme Dual link between two buildings using two RB600's. There is a bridge interface on each router that has the Nstreme Dual and Ether one as ports, so it is a simple bridge at the moment. What I would like to do, is run two VLAN's across the bridge for two different customers....

vk7zms

I Just upraded an X86 box (details below) from 3.13 to 3.16. The machine rebooted fine, but after 10 Minutes CPU usage was still at 100%. As the unit had very little traffic at the time I wasn't able to determine if it was actaully using 100% CPU or winbox was just reporting 100% CPU usage. Downgrad...

vk7zms

Yes - that is the proper way to do it - not always possible though. I have seen this done before - can't remember exactly how it was configured though.

vk7zms

I have a /27 of public IP's assigned to me by my isp xxx.xxx.203.128/27 with xxx.xxx.203.129 being my default gateway. Behind the MT unit with the public IP's I have an extensive wireless network. In order to allocate a /29 network to one particular client, I have created an EoIP tunnel from their C...

vk7zms

Hmm - well I increased the "disconnect timeout" (under advanced in winbox) from 3 seconds to 5 seconds - It fixed the issue, but probably not the cause???

Hope this helps

vk7zms

excellent news. well walled garden is easy - just add hosts by name or ip address and then clients can ccess them without authenticating. Radius - well if you only have one hotspot, its kind of pointless. First build yourself a radius server and then get the hotspot to allow clients to log in based ...

vk7zms

Are you sure it is the hospot function that is not working? If you disable the hotspot and connect to the wireless, do you have internet access from your laptop? Can you trace via IP to an outside address? If yes, can you trace to an outside domain name?

vk7zms

If by "hotspot" you intend to have clients connecting directly from thier laptops, you simply won't. It won't matter how powerful your base station is, the aerial gain of the onboard WiFi aerials in laptops simply will not be able to get back to the base station. Having said that we have h...

vk7zms

Do you have a rate limit set in your hotspot server profile (as aposed to your hotspot user profile). I assume you are manaully adding users (ie not using a radius server for user profiles)?

p.s. if you call me after hours you will hit the call centr and they will page me

vk7zms

10Km NLOS using the WiFi 802.11.a,b or g is not possible

vk7zms

if you have an internal server connected to a hotspot interface, you will need to bind the internal IP address or mac address of the NIC to be bypassed by the hotspot - then your normal rules should work just fine.

vk7zms

I have an RB500 with SR2 card as AP and a dozen or so RB112 with CM9 cards as CPE devices. For some reason one of the CPE's keepd disconnecting and reconnecting. I have included a log extract below. I would very much appreciate any suggestions as to the ause of the problem. Signal strength is ok at ...

vk7zms

Yes, the wireless interface will need to be on a different ip range to that recieved from the modem. Your D-link wireless router is no doubt recievinf a 10.x.x.x/x IP from the modem and masquerading traffic onto the 192.168.x.x/x network that your pc is being given from the d-link box. This is infac...

vk7zms

Easiest wy to determine if it is potentially a wireless problem, is to create a hotspot on a spare ethernet interface, plug your pc into that and see if it directs you to a login page. Did you leave the "Masquerade network" box ticked on the second page of the hotspot wizard? Does your rou...

vk7zms

Ok - Yes I know how much this kit is to buy in Australia, I have around 200 units deployed :) well hotspot works really well, and in its simplest form is really easy to get going. If you have already added a hotspot, delete it and start again..... instead of using the add button, use the "setup...

vk7zms

I guess Im getting what they paid for. I don't know, its like using dos when windows is available. What for? This is 2007, routers should be programmed by the manufacturer. Well if your having trouble with MT OS, how would you manage with a Cisco box - or perhaps they arn't real routers either - be...

vk7zms

I have not used this particular wave guide, but have had very good results from every wave guide aerial I have used - much better than most of the vertically polarised aerials claiming the same gain........

vk7zms

only APC's SmartUPS series and some APC models rebadged as Dell (that I know of).

vk7zms

In the absence of any further information, I am assuming you are only using ether1 to connect to your ADSL modem and wlan1 s a WiFi AP? are you terminating the ADSL connection on your ADSL Modem/Router (ie does the ADSL modem store the username and password for Authentication)? and do NAT? and run a...

vk7zms

Not sure if this will help you, but here is my experience and the fix. setup - RB530 ether1 - PPPoE session to ISP Bridge1 (Wlan1+ether2+ether3) all windows machines connected to ether2,3 or wlan1 could connect to each other via IP address. Connection by host name was only possible between windows m...

vk7zms

In this particular instance no smart switches involved. I did however find the problem. setup was an rb530 with with a PPPoE session (to default gateway) on ether1. Ether 2 & 3 & wlan1 were all bridged. The cause of my grief ended up being an incorrectly configured masquarade rule on ether1....

vk7zms

What exactly do you mean by i've actaully seen it where level 2 netbios traffic does not get passed/broadcasted if the level 3 subnets are not the same. I have the same problem - bridge between ethernet and wireless interface that doesn't pass netbios packets. I only have one L3 subnet - atached to ...

vk7zms

I havn't yet resolved it - MT support told me to turn on RSTP - but it did not fix the problem - I am sure it is nothing to do with the hardware platform, but rather the MT OS. I have tested on x86 systems RB530 RB153 RB230 and RB112, betwewn wired interfaces and wired to wirelesss etc - If you find...

vk7zms

I usually just set up the netwatch feature on the MT box in question so there is no routers inbetween - ie run netwatch on the MT box running on batteries and have the old switch (or print server - lol) plugged in via ethernet.

Having said that - the dude has some really cool features like that

vk7zms

Not realy sure on how many pings it takes - havn't read the manual - lol. Just used the feature. All I can say is I have had very few false alarms - perhaps one a month (I have 11 sites monitored in this way). I have them sending the emails via an sms gateway to my phone. I set it to monitor the hos...

vk7zms

well - I just ping on old swith that plugs directly into the mains - so when the power goes off and the router is running from UPS (or battery bank), you know the sight has lost power. You can use an old switch or print server or anything you have laying around that has an IP address.

vk7zms

I have done this a couple of times - it works well. I use the following script x2 (one for power up and one for power down). then use the netwatch tool to advise whenever the state changes. hope this helps :global datetime ([/system clock get time] . " - " . [:pick[/system clock get date] ...

vk7zms

I don't think anything has been resolved - I have RB153 with three CM9 cards in it runnung 2.9.38 - locks up every week or so and requires a power cycle to getit going again

Search found 227 matches