MikroTik

Azma

try to not perform nat for any destination within directly connected host, so you would change your nat to this

set x out-interface=[wan port]

Azma

thanks for your input guys, i got your point.

Azma

Thanks, i was thingking regexp but just to confirm if i did it wrong.
I am sure that nobody want to use regexp to filter something.
Rules better to be implemented into software, human will never do it perfectly, But there must be a reason why they made it case sensitive.

Azma

Hi,
print function seems to be case sensitive, does anybody know how to print a capitalized comment with case insensitive?
for example a rule with comment "ABCD", then print where comment "abc"?

thanks.

Azma

New /routing/stats/adverts menu, feedback, and suggestions are welcome.

What is adverts? advertisement? i would prefer the name similar with v6, "advertisements".

Azma

had 7.3.1 in production of bgp router ccr1009 for couple of weeks without issue, now upgraded to 7.4. i like the way this v7 of route print that so fast. whatever you guys call it not stable, blabla. i dont wan't to go back v6 lol How is route aggregation working for you? And what about BFD? Do you...

Azma

had 7.3.1 in production of bgp router ccr1009 for couple of weeks without issue, now upgraded to 7.4.
i like the way this v7 of route print that so fast. whatever you guys call it not stable, blabla. i dont wan't to go back v6 lol

Azma

tested on x86, que tree with bridge filter still does not work. SUP-75862.

Azma

The problem is not enough space for upgrade with smips. But after netinstall of v7 beta 3 it looks like there is enough space for upgrade for future 7.0 beta versions. However it currently seems to be impossible to upgrade from 6.46 latest beta to v7 beta 3 on SMIPS due to not enough space. netinst...

Azma

Old RouterOS versions don't (can't) know the newer naming scheme, so upgrade manually please.

hEX, 6.46beta55. i tried manually, but failed..

Azma

Capture.JPG

i got this error too..

Azma

i prefer CCR1036-8G-2S+ for routing purpose and use another routerboard (or maybe existing) for firewall.

Azma

Hi Jordan,
does the interface after brief disconnected and back reconnect with interface name its their name of /ppp secret? and binding interface wasn't running?

Azma

In all cases, user is getting some information about interfaces, which he is not expected to have access to. I know it is "just" an interface name but it can contain info about subscribers/customers. It may expose particular IP available for specific interface etc... It is part of config ...

Azma

Even "ping" and "traceroute" somehow can read interface, we are still able to limit user from doing test by not add "test" policy (policy=ssh,read,!test,.......).

Azma

I agree it requires more effort but you are not the first one who hit this issue. I would be very surprised if you somehow come with argument which would change Mikrotik's mind I know, i hope MikroTik would accept what is my point of view as well as many users before me, at least they say "yes...

Azma

Hi Normis, thanks for your response. But i'm sure there are no disadvantage to implement this. For example. 1. I want give limited access and able to read only over ssh and cant do test, i can do it by set up "policy=read,ssh" <-- doing test should be impossible 2. I want to give read acce...

Azma

HI All, am i only have this issue? under /user group -> policy=ssh,read | we can only read configs but can't do test such as ping, treaceroute, etc it's very clear that we need add "test" policy as well to be able run ping, traceroute, etc but if policy=ssh,test | we can't read any configs...

Azma

please explain ho much bandwidth for each of link?
have you test max for each of link, does it give you appropriate bandwidth?

Azma

all ubnt devices have this problem? or only 1 ubnt device?

Azma

its simple. if your router has some internal routing, put your bw manager between gateway router and isp. no need complicated configs.

Azma

you have to be careful using firewall chain input. if default all denied, every services come to router should be allowed.

Azma

Hello I get mUPS for to install for my home for LHG 5nD with 951Ui-2HnD, it is working fine but I can't get voltage value by "/system health get voltage", also tested on OmniTIK U-5HnD r2 and no voltage value is there any another method to know if my router run on battery or all those pro...

Azma

My similar experience many years ago teached me not to rename the ports. I use comments to mark the ports by their meaning instead and keep the original port names.

Hi jarda,
Yes, agree. the interface name was remains default. ether1, ether2, ether3, ether4 and only commented on ether2 and ether4.

Azma

Hi, I just upgrade my client router hap-lite2 and suddenly the connection lost. oh my god, their office is around 58.4KM away. i wasn't give up, tried to mac telnet and it do the trick, i was able to connect to the terminal. then i could reach the terminal, ports was running (flag R), but the ip was...

Azma

Good results! Was this with traffic? Photo does not show any. Try it with full load. Hi Normis why is not possible connect to mUPS through winbox to ros and manage mUPS ? Hi, the mUPS itself doesn't contains routerOS as you can see on the brochure. so far i know, MikroTik radios flagship are equipp...

Azma

Hi, 1. create static route with mark routing under /ip route. /ip route add gateway="ip wan1" routing-mark=wan1 /ip route add gateway="ip wan2" routing-mark=wan2 2. create rule to implement static route for your desired clients. /ip route rule add interface=vlan10 action=lookup t...

Azma

Hi,
it seems routing issue, please ask your service provider whether your ip /24 block was recognized by their igp.

Azma

Hi,
do you have experience with ip addressing? could you please show your topology with its ip address?

Azma

Hi, i'm completely new in BGP and spent many times to find out in this forum and google but still no luck to found the proper way. lets say my BGP router CHR has 2 transit peering from upstream A and upstream B, each of them gives full routes. from this, my router learns the best path to particular ...

Azma

I couldn't find it when I looked a few weeks back ... Mostly switching to Ros based now... Eg hex poe and eventually the new 8 and 24 port ones Sent from my Pixel XL using Tapatalk HI Efaden, i need the small one due to limited power availability, we are using some batteries to supplying power so n...

Azma

Hi Aholmes, after spent minutes to check voltage OID on my RB750Gr2, i found this OID which this OID could be found with the snmp OID you provided. iso.3.6.1.2.1.1.2.0 = OID: iso.3.6.1.4.1.14988.2 but i wonder if my point of view is correct. i may buy it one. :D last, i hope MikroTik staff could hel...

Azma

Hi Aholmes,

thanks for your help, im glad to hear that has voltage showed. but i wonder does it able to deliver voltage value from SNMP (oid). could you please try snmpwalk?

many thanks..

Azma

Hi,

i wish to buy mikrotik switch https://routerboard.com/RB260GSP but i wonder does this switch has voltage oid? does it have voltage on the system menu?
could anyone help me to check please?

much appreciated.

Azma

Hi All,

i just tried to check self signed ssl using https://cryptoreport.geotrust.com/checker/ for the web service was running on my MikroTik RB750 6.39 and found this vulnerabilities:

RC4: Enabled
Vulnerabilities checked: BEAST

should this vulnerabilities be fixed? i'm waiting for it.

thanks.

Azma

Hi,

i found that your problem even doesn't related with your post title.

High ping between devices
High CPU usage on AP's
Loss of comunicacion to the internet for customers.

please dont bridge them, very bad idea network design you have.

Azma

Hi,

what step you have done? what is the ip network address of branch and headoffice? does each router has route and route back to both network?

Azma

Hi,
you need script to do this. so the basically, the script need to be run scheduled to check whether the queue bytes assigned for client address is passed a amount of bytes of quota.

Azma

Hi,
you could contact me at azmayogi@gmail.com.

thanks.

Azma

Hi,
What the answer supposed to be? If you want example, you can google. If you want answer to solve your needs, you should wrote about your network, topology, ip, etc.

If you dont want these 2 and wanted all finished without doing anything, pay someone or me.

Thanks.

Azma

Hi,
you can give google route for certain destionation then limit your users by ip and keep this rule bottom of first rule.

Azma

Hi, have you try bridging? how VM server could be reached are 2 options, DNAT and bridge.

Azma

oh man.. you have so many issues there, lets discuss one by one. - VPN remote users should able to access the DMZ server example ( Server IP: 192.168.200.200) the key point is routing, servers DMZ should have default route. - User in LAN should able to access Server in DMZ zone the answer is same wi...

Azma

Hi Mercury,

Ofcourse you can. Look at this page http://www.mikrotik.com/download. you can download the RouterOS package based on your system.

May i know what kind of machine do you want to install?

Azma

it is still doesn't working. bytes and packets still not counted.

i will test v5.xx for this case to make sure nothing made wrong on rules, previously it was worked on v5.xx.

Azma

thanks Psamsig for your reply.

i tried to change the marking to connection mark, but no packets and bytes are counted on mark routing rules.
any solution?

thanks.

Azma

Anyone help me please.

Azma

Hello. This is my first post. Nice to meet you all. i'm facing with this strange thing and can't imagine why the following rule doesn't working. basic info: i have public interface. 1. telkom1 2. telkom2 3. telkom3 i have 1 default route rule and 3 route rules with routing mark. Flags: X - disabled,...

Search found 48 matches