MikroTik

hurymak

I have pppoe internet access, one bridge, all works fine one rule in nat /ip firewall nat add action=masquerade chain=srcnat out-interface=pppoe-out1 now i want to take one port from that bridge, for example ethernet3 to NOT be in bridge and not have any address assigned. I would like to make such t...

hurymak

I asked and he allowed

hurymak

Ok, so first just this part:
how to make current dhcp server automatically add different vlan for every new client but only on guests pool?

hurymak

I have mikrotik router in company, normal dhcp pool for workers which need access to local lan and internet is 10.0.0.1-10.0.0.250, (I assign them manually by mac) (lets say its workers pool) but i have also separate pool for guests which are no on static dhcp list, default pool for them is 172.16.0...

hurymak

Ok, i did that.
And routers were visible for each other, i could poing them, create eoip link.
But this eoip link based on local addresses 10.x
was slower than eoip link based on public static ips.

On local copying files from nas was about 18MB/s
on public ips 22MB/s

why?
Anyway still slow.

hurymak

Different locations, about 3km apart, but connected to one ISP building, into one device of provider.
Same traceroute IP addressess are shown.

hurymak

Ok.
SO i can try that but if on those interfaces is active pppoe client connection, can i do this during work so my office wont loose internet?

hurymak

I asked and guy told me that it should work because there is nothing set, no firewall etc. He is also using mikrotik. Maybe he does not know what to do... What should be enabled on his side? If you would be ISP provider, and client would want to do such thing, lets say you are also using mikrotik an...

hurymak

Anyone?

hurymak

Office1: ISP gave pppoe usename password, on sfp, public static IP, xxx.yyy.zzz.111 Office2: Same ISP gave pppoe usename password, on sfp, public static IP, xxx.yyy.zzz.222. Office1 and office 2 are connected to ISPs company, fiber is going into his firm. How to use eoip but using sfp to sfp connect...

hurymak

Thanks.
And how to block dhcp communication?
Using bridge filtr on eoip tunnel drop udp 67-68?

hurymak

And this dhcp Network can be the same in office 1 as in office 2?
For example office 1 192.168.0.0/16
And office 2
192.168.0.0/16?
What if there will be same IP on both sites?
And will one Network be visible to second?

hurymak

Yes, i have dhcp server on this router in office 1.
And i want it that way, that office 2 gets IP from dhcp in office 1.
Through eoip and it works ok. I want it to be one big LAN.

hurymak

I have 2 mikrotik devices. Office1: isp = internet through pppoe, static public ip, lets say xxx.xxx.xxx.111 ip firewall nat src nat masquarade out interface ppoe1 Office 2: same, isp = internet through pppoe static public ip, lets say xxx.xxx.xxx.222 ip firewall nat src nat masquarade out interface...

hurymak

Dhcp server is on main router in one building.
Cable to another building with other routers with wifi.
No separate eth port for guests. Everything is on one bridge in main router, and cable to another and this another has wifi

hurymak

I want to have all eth in one bridge.

hurymak

I want to make it this way:
people on network 192.168.x.x can change manually ip address and have connection,
people on network 172.16.x.x guests - CAN NOT manually change ip address, only have ip assigned by dhcp server.

hurymak

In mikrotik i have one bridge with all eth interfaces. On that bridge is running dhcp server. First default pool for guests 172.16.xxx.xxx when someone connects and i want him to be local and not dynamic user, i manually assign to persons device mac second pool - rang 192.168.x.x (i manually add the...

hurymak

I have 2 mikrotik dvices. both are identical, with wifi 2.4GHz and 5GHz. DEV1: 1.Create Mesh: Mesh1 2.Add ether1, ether2 wlan1 wlan2 to Mesh1 3.On wlan1 set ap bridge ssid: FOR_PEOPLE_ROOM_1 pass xxxxxxxx 4.wlan2 ap bridge ssid: INTERNAL pass yyyyyyyy 5.wland2 wds: dynamic mesh, wds bridge: Mesh1 6....

hurymak

I have one mikrotik as dhcp server, other mikrotik routers are connected with own ip as ap bridge in different rooms, everything works fine, ut sometimes, after long time working those other mikrotik cant access updates. Clients connected to them, pcs, laptops mobile phones can normally access inter...

hurymak

I have pc with whonix which is inside main lan, for example lets say whonix gateway tor ip is 192.168.7.11. (everything is connected to one mikrotik router connected to isp) Now i would like to make some policy based routing on this mikrotik so traffic from 192.168.8.1 will be transferred normally t...

hurymak

change frequency to default and this error will disappear

hurymak

Version 6.43rc14 has been released.

*) routerboard - fixed "protected-routerboot" feature (introduced in v6.42);

what exactly is fixed in protected routerboard?

hurymak

Cloud core router 1009, everything works fine for 2 weeks.
Today suddenly all lan computers (50) can ping but when going to some page, its only loading website, connected but no web content.
Had to reset router and everything works fine.
Why ?
Nothing was changed.

hurymak

I remove the nand, put it on one device like "usb stick" :lol: and read them... Nand do not use encrypted FS, are readable by linux.... On old device without protected routerboot activated is possible to etherboot device and read inside the nand like a shared folders... I'ts impossible to...

hurymak

I would like to be sure, @normis, etc. If i set reformat-hold-button to 91s and reformat-hold-button-max to 92s. boot = nand only, disabled jumper reset. enabled protected routerboard, factory firmware = 3.41 If someone does not know those 90 and 91s numbers, values, is there any possible way (incl...

hurymak

Encrypt nand filesystem, so when some thieve unsolder it, cant read my config.

hurymak

I would like to be sure, @normis, etc. If i set reformat-hold-button to 91s and reformat-hold-button-max to 92s. boot = nand only, disabled jumper reset. enabled protected routerboard, factory firmware = 3.41 If someone does not know those 90 and 91s numbers, values, is there any possible way (incl...

hurymak

I would like to be sure, @normis, etc. If i set reformat-hold-button to 91s and reformat-hold-button-max to 92s. boot = nand only, disabled jumper reset. enabled protected routerboard, factory firmware = 3.41 If someone does not know those 90 and 91s numbers, values, is there any possible way (inclu...

hurymak

So wiki says now: The backup RouterBOOT version can not be older than v3.24 version. A special package is provided to upgrade the backup RouterBOOT (DANGEROUS). Newer devices will have this new backup loader already installed at the factory. Download the package for: MIPSBE platform here SMIPS platf...

hurymak

Ok, the guide is as @rextended post.
Doing anything on routeros 6.41.4 does NOT UPGRADE factory firmware.

So to do it i have to be on 6.40.7 and fw 3.41, now it works fine:
no error message, all is supported:

hurymak

should i try @rextended guide? will it change anything? everything works fine, after pressing reset button shorter than hold time, it does not do anything. But i want also that MAX HOLD button to work as wiki says, and this red error says that it does not apply here. Again: PROTECTED ROUTERBOARD: WO...

hurymak

the wiki manual includes NPK files that upgrade factory bootloader, this will resolve the issue. let me know if you did that or not. 1. upgrade RouterOS 2. upgrade routerboot with "/system routerboard upgrade" 3. upgrade factory bootloader with the NPK in the manual. There are no NPK file...

hurymak

Because you did not read it well enough. Especially the first bullet. The backup RouterBOOT version can not be older than v3.24 version. A special package is provided to upgrade the backup RouterBOOT (DANGEROUS). Newer devices will have this new backup loader already installed at the factory. Downl...

hurymak

Read here: https://wiki.mikrotik.com/wiki/Manual:R ... bootloader

i read it, and when i set reformat hold button max, after pressing apply or set protected to enabled,
it says that hold button max is not supported.
why?

hurymak

@normis
viewtopic.php?f=2&t=133135&p=654367#p654367

hurymak

version: 6.41.4 (stable) build-time: Apr/05/2018 12:23:55 free-memory: 108.7MiB total-memory: 128.0MiB cpu: MIPS 74Kc V4.12 cpu-count: 1 cpu-frequency: 600MHz cpu-load: 30% free-hdd-space: 110.6MiB total-hdd-space: 128.0MiB write-sect-since-reboot: 189 write-sect-total: 983 bad-blocks: 0.4% archite...

hurymak

On cloud core 1009 i can set reformat-hold-button-max 78s go into settings and apply protected routerboard checkbox and no error. But on smaller devices, map lite or metal or RB962UiGS-5HacT2HnT i can not, it says that current routerboard does not allow for hold button max. (all is updateted and mos...

hurymak

I have this lte-a mifi modem, huawei e5785, connected to usb of rb951g-2hnd but it is not seen under lte interfaces.
in /system resources usb print mikrotik sees it as:
HUAWEI_MOBILE
how can i configure it to work?

hurymak

Fixed the manual. You still need to wait a little bit for the release of 3.38.3, plus you will need to also upgrade the backup loader (a dangerous thing in itself), which we will release later this week or the next.

ok i will wait patiently for this amazing feature

thanks.

hurymak

Thanks for the correction, the wiki page has been updated to: As an emergency recovery option, it is possible to reset everything by pressing the button at power-on for longer than reformat-hold-button time. Even if reformat-hold-button time is forgotten, holding the reset button for more than 300s...

hurymak

So this sentences should be removed now? Even if reformat-hold-button time is forgotten, holding the reset button for more than 300s will allow you to perform reformat. When you use the button for a complete reset, following actions are taken:" " https://wiki.mikrotik.com/wiki/Manual:Route...

hurymak

FINALLY! they did it without notifying me :) 5 days ago: https://www.google.pl/search?q=routeros+protected+routerboard&source=lnt&tbs=qdr:w https://wiki.mikrotik.com/wiki/Manual:RouterBOARD_settings#Protected_bootloader reformat-hold-button-max (5s .. 600s; Default: 10m) Increase the securit...

hurymak

How to upgrade routerboard to 3.38.3? I want ot use this new functionality: https://wiki.mikrotik.com/wiki/Manual:RouterBOARD_settings#Protected_bootloader changed few days ago: "reformat-hold-button-max (5s .. 600s; Default: 10m) Increase the security even further by setting the max hold time,...

hurymak

When this option will be implemented? https://forum.mikrotik.com/viewtopic.php?f=19&t=81674&start=150#p562854 No, Secure Routerboot does not protect the hardware at all. It only protects the configuration. Currently true, but we will implement a specific second interval for the reset, so tha...

hurymak

I dont want to block, so no with ACL,
but how can i assign label to mac to see what computers are connected to it?
(not to block, just see label instead of xx:yy:zz:uu:yy).

Also is it possible to see vendor name from MAC automatically?

hurymak

I just want to make that mikrotik will display one static html page immediatelly after connecting user to virtualAP. There is no need to login, to alow it to have internet, only locally hosted on mikrotik page. But there are problems with https etc. Is it possible to have custom DNS on mikrotik, so ...

hurymak

1.Ireally dont understand regex in walled garden.

2.How it knows to allow some https if https url is encrypted? on dst host?

hurymak

It depends ;-) Are you talking about regular clients connecting to your AP or about a PTP/PTMP deployment? For the latter I'd recommend lowering the channel width to the absolute minimum. Make your antennas as directive as possible. RF rear shields prove to be pretty efficient in my experience - us...

hurymak

When working in area, where there is plenty of electromagnetic devices, and much of metallic elements around
what setting can help to improve signal?
at least some...

hurymak

So with hotspot there are problems: even if i have walled garden or *google.* domain, hen someone go to http - it is ok, but when someone go to https from google search or manually - there is chrome error. But what i want to do is not to use paid service or hotspot, i want to replace all pages, or r...

hurymak

When i connect from apple - its ok, captiive poertal or when i add addresses to wallet garden normal safari. But when using android phone - chrome browser - after connecting to hotspot wifi it automatically redirects me to google everytime and only later to login page. How to make it that it will im...

hurymak

Mikrotik rb951G 2hnd.
I set dns to OpenDNS family shield.

When try to go to adult website i see opendns response - that it is blocked.
How to replace this response and display that content is blocked but with custom html, maybe from hotspot directory....dont know..
but not made by OpenDNS company?

hurymak

ok, i had to bridge first . thanks.

hurymak

I would like to change mikrotik starting beeps to morse code:
-.. --- -. - + - --- ..- -.-. .... + .. -

how to do it?

hurymak

Run the Hotspot wizard on the virtualAP interface. Then the users will be forced to open the hotspot login page. You can also force them to be redirected elsewhere, and edit the login page, so that they can't "log in" at all, only browse this one page http://wiki.mikrotik.com/wiki/HotSpot...

hurymak

I need to implement following functionality: mikrotik wifi, normal home connection with password, it works ok. But i have to add virtual wifi, with open guest network (also works ok) but when someone connect to it, all his web page requests will be redirected to http://specified_url.url address. (an...

hurymak

I need to implement followed functionality:
mikrotik wifi, all clients can connect.
All clients can have full access to local network, lan.
But if some client want to access internet, get out of lan, he has to:
be on special acl list, have his mac on it.
How to do it?
thanks.

hurymak

No, Secure Routerboot does not protect the hardware at all. It only protects the configuration. Currently true, but we will implement a specific second interval for the reset, so that it will be impossible to reset, unless you know that it is triggered between the 85th and 90th second :) when this ...

hurymak

Please add some type of device / tracking protection.
That when thief will steal it, it will have some code with ability to track, even after hard reset or with remote code activation,
to work in the way as apple icloud lock - unusable without code.

hurymak

I switch from ubiquiti - some devices display count of NWID errors - mainly when there are some aps on the same channel and ssid, but how can i view nwid errors in mikrotik routeros interface?

hurymak

I want to do security experiment with my mt hardware... Is it possible to make it boot without formating data, that mikrotik will act as PXE client? So i run on my pc tftp server with some linux based os image, RB2011-2Hnd-IN will be connected to eth1 to pc, and without formating data on RB2011-2Hnd...

hurymak

it was in pseudo bridge but its ok cause its only one pc behind.

The problem was coincidental - someone in network set his pc ip address on the same i wanted to get, so AP gave me another. Tried different and all works.

hurymak

So i have wifi network, AP with dhcp server. And i would like to connect pc to map lite http://routerboard.com/RBmAPL-2nD over ethernet - lan. Map lite should work just like antenna, and relay ip addresses from ap. Now it works but does not relay, only when i have static ip on pc it works, but when ...

hurymak

When I originally read about protected RouterBOOT, I understood reformat-hold-button as something that will make it time consuming, for someone who steals the device, to make it operable. If you needed to hold the button for exact time (+- second or two), it would take you awful lot of time before ...

hurymak

Fine. Fine. Now even you know that holding the button for at least 5 minutes does the job. Now it is the time you should make a real test if you don't believe... Who said i dont believe? After pointing out differences between whats is said here and doc, and after reading fixed doc(which now contain...

hurymak

Fine. Fine. Now even you know that holding the button for at least 5 minutes does the job. Now it is the time you should make a real test if you don't believe... Who said i dont believe? After pointing out differences between whats is said here and doc, and after reading fixed doc(which now contain...

hurymak

Why everyone is ignoring this? There is nothing about holding button for longer period... It strictly says device will not be recoverable. It looks like we were right to ignore that. This red text didn't say "if held for any time longer than the set period, device will explode with the force o...

hurymak

Thanks for the correction, the wiki page has been updated to: As an emergency recovery option, it is possible to reset everything by pressing the button at power-on for longer than reformat-hold-button time. Even if reformat-hold-button time is forgotten, holding the reset button for more than 300s...

hurymak

And look at this topic what happened with holding longer: http://forum.mikrotik.com/viewtopic.php?f=2&t=94303&start=50 Did you connec the PC to the Ether1 port of the router ? -RB941-2nD is powered on with pushed RESET button for approx 15s keep holding the button longer, until you see the d...

hurymak

I take that to mean that if you set the "hold-the-button" period to be longer than the default that you'll need to remember to hold it at least that long... So 301 seconds should be enough for a guaranteed "long-enough" period... Not sure if holding it too long doesn't work thou...

hurymak

ummm - the universe doesn't end whenever max seconds goes by - that's just the most it will allow you to set the value to... so you should still be able to hold the button for 301 seconds.... Thanks, but this is still talk about how long to hold the button. But http://wiki.mikrotik.com/wiki/Manual:...

hurymak

Then you will need to hold the button for 5 minutes... Ok, but according to http://wiki.mikrotik.com/wiki/Manual:RouterBOARD_settings reformat-hold-button (5s .. 300s; Default: 20s) MAX=300s, so how can i hold for MORE? You will still be able to reformat these devices by holding reset button more t...

hurymak

You will still be able to reformat these devices by holding reset button more than XYX value. Thanks, but your information is contrary to what http://wiki.mikrotik.com/wiki/Manual:RouterBOARD_settings says: As an emergency recovery option, it is possible to reset everything by pressing the button a...

hurymak

Lets say my company hire it guy, who bought few expensive mikrotik devices. (This is theoretical question, not happened but its possible to happen) He wanted to protect everything and give us password. He connected through rs232 cable and set protected-routerboot and reformat-hold-button to some XYX...

hurymak

Hello, i have http://routerboard.com/RBMetal2SHPn and until yesterday i could easily connect to FON network, fonera. But today someone bought himself another fon router and he set it to same channel as others. So lets simplify: there is few open AP and all are on same channel with same ssid, i need ...

Search found 76 matches