Community discussions

Search found 58 matches

by lyberis1979
Tue May 10, 2016 3:29 pm
Forum: Beginner Basics
Topic: Site to Site VPN IPSec
Replies: 1
Views: 597

Site to Site VPN IPSec

Dear all, nice to be with you again, for an other time i will need your expertise on a troubleshoot. If you can help me with this i will be grateful as always. Im on a stomp, i have a local configuration that involves a fortigate 100D as a front end router and mikrotik CRS226-24G-2S+ as a backend ro...
by lyberis1979
Sun Mar 27, 2016 8:59 pm
Forum: Beginner Basics
Topic: Slow Internet Speed over PPOE WAN
Replies: 9
Views: 3275

Re: Slow Internet Speed over PPOE WAN

did you omit ip firewall filters intentionally, or doesn't your router have any???

I have deleted them i thought it was there fault.
by lyberis1979
Sun Mar 27, 2016 8:43 pm
Forum: Beginner Basics
Topic: Slow Internet Speed over PPOE WAN
Replies: 9
Views: 3275

Re: Slow Internet Speed over PPOE WAN

Which routerboard model? ROS/Firmware version? Do you have DNS enabled ("Allow Remote Requests")? Have you checked if there's upload bandwidth usage when that happens? Do you have firewall rules protecting the router making reference to the PPPoE interface, not the ether its binded to? 1. CRS125-24...
by lyberis1979
Sun Mar 27, 2016 8:22 pm
Forum: Beginner Basics
Topic: Slow Internet Speed over PPOE WAN
Replies: 9
Views: 3275

Slow Internet Speed over PPOE WAN

Dear all i have a quick question, for the past few weeks now my internet speed has been decreased from 50MBps Download and 10MBps upload to 10Mbps download and 5 Upload. I have terminated every web server in the house but still the same thing. Im using a Huawei VDSL modem with PPOE bridge on mikroti...
by lyberis1979
Tue Mar 22, 2016 12:01 pm
Forum: Beginner Basics
Topic: Configuration as a SWITCH CRS226-24G-2S+
Replies: 6
Views: 1157

Re: Configuration as a SWITCH CRS226-24G-2S+

For VLAN config, this is highly dependent upon your environment. Everything will be configured through the /interface ethernet switch menu. To enable a particular VLAN ID on a port: /interface ethernet switch vlan add ports=enter,ports,here vlan-id=xxx learn=yes To make an access port: /interface e...
by lyberis1979
Mon Mar 21, 2016 2:41 pm
Forum: Beginner Basics
Topic: Configuration as a SWITCH CRS226-24G-2S+
Replies: 6
Views: 1157

Re: Configuration as a SWITCH CRS226-24G-2S+

Thats the new configuration. Any tips with the VLAN? And thanks again # mar/21/2016 14:39:15 by RouterOS 6.34.3 # software id = 2RHD-T8TP # /interface ethernet set [ find default-name=ether2 ] master-port=ether1 set [ find default-name=ether3 ] master-port=ether1 set [ find default-name=ether4 ] mas...
by lyberis1979
Mon Mar 21, 2016 1:31 pm
Forum: Beginner Basics
Topic: Configuration as a SWITCH CRS226-24G-2S+
Replies: 6
Views: 1157

Configuration as a SWITCH CRS226-24G-2S+

Dear all, good morning i have a little issue and i will need your opinion on this one "if as always are available". I just bought a CRS226-24G-2S+ and I'm using temporary as main switch connecting 7 switches "24 ports each" on the mikrotik. Nothing special on the configuration any suggestions will b...
by lyberis1979
Thu Jul 23, 2015 2:11 pm
Forum: General
Topic: VDSL half Speed on MikroTik
Replies: 0
Views: 348

VDSL half Speed on MikroTik

Dear all, i just have upgraded my ads line to VDSL and the strange thing is that when I'm using the Router/Modem from my provider the router ZXHN H168N it shows the sync at 49999 and it downloads with that speed, no comes the really strange thing when I'm using the ZXHN H168N as a modem in bridge mo...
by lyberis1979
Mon Jun 29, 2015 12:47 pm
Forum: General
Topic: Boot Loop and Kernel Panic
Replies: 1
Views: 513

Re: Boot Loop and Kernel Panic

Dear all I have a bit of a situation here, I have installed a Open wrt and using it as an asterisk 20 minutes ago I'm getting kernel panics from my mikrotik CRS 109 and reboots all the time. The remaining ram is at 60 MB and CPU is running at 30-60% Any ideas ??? What can I do??? Is there someone t...
by lyberis1979
Sun Jun 28, 2015 3:27 pm
Forum: General
Topic: Boot Loop and Kernel Panic
Replies: 1
Views: 513

Boot Loop and Kernel Panic

Dear all I have a bit of a situation here, I have installed a Open wrt and using it as an asterisk 20 minutes ago I'm getting kernel panics from my mikrotik CRS 109 and reboots all the time. The remaining ram is at 60 MB and CPU is running at 30-60% Any ideas ??? What can I do??? Is there someone to...
by lyberis1979
Sun Jun 28, 2015 1:20 am
Forum: Scripting
Topic: VPN Script
Replies: 3
Views: 1259

Re: VPN Script

Configure a Netwatch with your VPN gateway as the monitored target.

In the down-script, do
/interface disable vpn1
:delay 1s
/interface enable vpn1
(replacing "vpn1" with the actual VPN interface name of course)

Thanks mate for your time, it works great.
by lyberis1979
Sat Jun 27, 2015 10:34 pm
Forum: Scripting
Topic: VPN Script
Replies: 3
Views: 1259

VPN Script

Evening mates

How to make a Script to check my vpn connection and if its down to disable the interface and re-enable it again??


Thanks for your time.
by lyberis1979
Fri Jun 26, 2015 5:51 pm
Forum: Wireless Networking
Topic: UniFi AP-LR <--> Adopting Mikrotik CRS-109
Replies: 2
Views: 910

Re: UniFi AP-LR <--> Adopting Mikrotik CRS-109

Those devices can only be controlled by the App on the PC that you mentioned. MikroTik device can't control or configure them.

Thanks for the quick answer, you saved me a ton of time and effort.

Cheers.
by lyberis1979
Fri Jun 26, 2015 4:21 pm
Forum: Wireless Networking
Topic: UniFi AP-LR <--> Adopting Mikrotik CRS-109
Replies: 2
Views: 910

UniFi AP-LR <--> Adopting Mikrotik CRS-109

Dear all, evening. I'm a little buzz here "dint know if it can actually happen" i have bought a UNIFI AP-LR for my office and i want it to be controlled by my MikroTik CRS-109 and not a controller that will be installed on a pc, just the mikrotik. Can anyone guide me or point me to way to make it wo...
by lyberis1979
Tue Jun 16, 2015 12:52 pm
Forum: General
Topic: How should I manage a VPN over two WAN interfaces ?
Replies: 7
Views: 2703

Re: How should I manage a VPN over two WAN interfaces ?

Have a look at this presentation.

Thanks that was very helpful.
Cheers.
by lyberis1979
Mon Jun 15, 2015 5:40 pm
Forum: Beginner Basics
Topic: Cant port forward after Load Balance
Replies: 12
Views: 2080

Re: Cant port forward after Load Balance

very simple. /ip firewall filter add action=accept chain=forward disabled=no dst-address="wan ip" dst-port=80 protocol=tcp /ip firewall nat add action=dst-nat chain=dstnat dst-port=1234 in-interface="interface name" protocol=tcp to-addresses="server ip" to-ports=80 Thanks mate, i will try and repor...
by lyberis1979
Mon Jun 15, 2015 5:39 pm
Forum: Beginner Basics
Topic: Cant port forward after Load Balance
Replies: 12
Views: 2080

Re: Cant port forward after Load Balance

Why are you setting gateway=WAN2 when route mark is WAN4?


That's because the specified ip address uses wan's 4 public ip address.
by lyberis1979
Sun Jun 14, 2015 9:15 pm
Forum: General
Topic: How should I manage a VPN over two WAN interfaces ?
Replies: 7
Views: 2703

Re: How should I manage a VPN over two WAN interfaces ?

I'd load balance / failover Internet using PCC and routing marks which will also used to route each tunnel accross each WAN.

Then you bridge those two tunnels, and aggregate them by BCP.


Hello, nice solution can you give us an example on this.


cheers.
by lyberis1979
Fri Jun 12, 2015 10:25 am
Forum: Beginner Basics
Topic: Cant port forward after Load Balance
Replies: 12
Views: 2080

Re: Cant port forward after Load Balance

What do you mean? I cant make it work, Am in doing something wrong!!!! Mind buster :) Edit: I have used this one and its working, but i have a 4 seconds delay until it go through. Now im missing the Nat command to make it public via WAN_4 / ip route add check-gateway=ping distance=1 dst-address=192...
by lyberis1979
Thu Jun 11, 2015 4:12 pm
Forum: Beginner Basics
Topic: Cant port forward after Load Balance
Replies: 12
Views: 2080

Re: Cant port forward after Load Balance

Let's suppose you want to port forward 192.168.1.180 port tcp 80 (a web server) through WAN2, you want to make sure responses from the web server always go through WAN2: [...] add action=mark-connection chain=prerouting disabled=no dst-address-type=!local in-interface=Local new-connection-mark=wan2...
by lyberis1979
Thu Jun 11, 2015 9:55 am
Forum: General
Topic: EXTREME CPU USAGE
Replies: 0
Views: 380

EXTREME CPU USAGE

Dear all, i have managed to use the following to combine 7 wans in PPOE, all has gone prety perfect the thing is that the cpu USAGE has gone from 5% to a stucked 100% for the past 10 hours or so. Any ideas. I have used the following setup /interface bridge add name=LOCAL_BRIDGE_SWITCH /interface eth...
by lyberis1979
Thu Jun 11, 2015 1:15 am
Forum: Beginner Basics
Topic: Cant port forward after Load Balance
Replies: 12
Views: 2080

Re: Cant port forward after Load Balance

Let's suppose you want to port forward 192.168.1.180 port tcp 80 (a web server) through WAN2, you want to make sure responses from the web server always go through WAN2: [...] add action=mark-connection chain=prerouting disabled=no dst-address-type=!local in-interface=Local new-connection-mark=wan2...
by lyberis1979
Wed Jun 10, 2015 6:35 pm
Forum: Beginner Basics
Topic: Cant port forward after Load Balance
Replies: 12
Views: 2080

Re: Cant port forward after Load Balance

add a mangle rule marking route so that traffic from that IP/port gets route-marked to the desired WAN.


Can you set an example if possible.


Thanks for taking the time to reply.
by lyberis1979
Wed Jun 10, 2015 5:20 pm
Forum: Beginner Basics
Topic: Cant port forward after Load Balance
Replies: 12
Views: 2080

Cant port forward after Load Balance

Dear All after successfully setup my CRS109 tp Load Balance 4 Wan's i have found my self in a bump. The thing is that im using 4 ddns services together and i want to port forward a specific internal ip to a specific ddns that is bind in to wan but with no success. Im using the following configuratio...
by lyberis1979
Fri May 29, 2015 3:23 pm
Forum: Beginner Basics
Topic: NTP Client Stopped working After 6.26
Replies: 7
Views: 1368

Re: NTP Client Stopped working After 6.26

For a few last versions you can insert DNS name such 2.pl.pool.ntp.org which is resolved to valid associatted IP. It helps to distribute NTP traffic to different servers.
NTPDNS.png

Perfect its UP.


Thanks guys Cheers.
by lyberis1979
Fri May 29, 2015 12:13 pm
Forum: Beginner Basics
Topic: NTP Client Stopped working After 6.26
Replies: 7
Views: 1368

Re: NTP Client Stopped working After 6.26

is it x86 or RouterBoard ?

Try to save config and netinstall.

Routerboard
by lyberis1979
Fri May 29, 2015 11:28 am
Forum: Beginner Basics
Topic: NTP Client Stopped working After 6.26
Replies: 7
Views: 1368

Re: NTP Client Stopped working After 6.26

I have tried both ways the service has started but gives me the wrong date!!!!!! Ok started il give you that :) but the wrong time!!!!! Thats new.....
by lyberis1979
Fri May 29, 2015 10:13 am
Forum: Beginner Basics
Topic: NTP Client Stopped working After 6.26
Replies: 7
Views: 1368

NTP Client Stopped working After 6.26

Top of the morning to you mates, i have a little bit of a glitch here, after 6.26 my NTP Client stopped working. Any ideas on how to get it started
by default 2015-05-29 at 10.13.12.png
by lyberis1979
Fri Apr 24, 2015 4:23 pm
Forum: General
Topic: Different WAN and Public IP adress - RB2011UiAS-2HnD-IN
Replies: 4
Views: 666

Re: Different WAN and Public IP adress - RB2011UiAS-2HnD-IN

Hi, I have been using RB2011UiAS-2HnD-IN (as pppoe client) with my adsl modem in bridge mode for two years. 2 months ago I changed my ISP and there were no problems until yesterday. First I noticed I cannot connect routeros and my home server from my office, I thought internet was down, but when I ...
by lyberis1979
Wed Apr 01, 2015 3:11 pm
Forum: Beginner Basics
Topic: Port Forwading
Replies: 6
Views: 807

Re: Port Forwading

It worked GREAT

Thanks again.


If in can ask an other question, lets say that we have the scenario of multiple IP's from my ISP "Pool" and i want to signed them in different host systems.


Thanks Again for your patience
by lyberis1979
Wed Apr 01, 2015 2:14 pm
Forum: Beginner Basics
Topic: Port Forwading
Replies: 6
Views: 807

Re: Port Forwading

Thank you very much my friend. I will try it and post the results

Cheers
by lyberis1979
Wed Apr 01, 2015 9:58 am
Forum: Beginner Basics
Topic: Port Forwading
Replies: 6
Views: 807

Port Forwading

Dear All Good Morning For the past few days im trying to set my web server to be accessible via internet but with no success, i have tried a numerous o f examples with no success. I know that's to be a one and simple thing "101 of mikrotik" if you have any ideas please. The internal web server is on...
by lyberis1979
Sat Feb 21, 2015 6:09 pm
Forum: Forwarding Protocols
Topic: What BGP setups need to be optimized
Replies: 58
Views: 20943

Re: What BGP setups need to be optimized

Hi Mrz,
Any chance to have support for SNMP BGP4-MIB in 6.x?


Thanks.

+1
by lyberis1979
Sat Feb 07, 2015 3:16 pm
Forum: Beginner Basics
Topic: Web Proxy
Replies: 2
Views: 482

Re:

Don't you think it would be very slow?

I don't mind i just wanna try it :)
by lyberis1979
Sat Feb 07, 2015 11:42 am
Forum: Beginner Basics
Topic: Web Proxy
Replies: 2
Views: 482

Web Proxy

Dear All,

Good day to you,

I was wondering if any one knows how to store web proxy in an external usb???


Thanks in advance mateys.
by lyberis1979
Fri Jan 09, 2015 1:33 pm
Forum: General
Topic: VPN site-to-site IPSec tunnel
Replies: 11
Views: 2324

Re: VPN site-to-site IPSec tunnel

You need the ddns updater script


Sent from my iPhone using Tapatalk
by lyberis1979
Fri Dec 12, 2014 9:59 pm
Forum: Beginner Basics
Topic: PPTP Server Interface
Replies: 2
Views: 2095

Re: PPTP Server Interface


OK thanks, i was looking at some tutorials and the obvious eluded me.
by lyberis1979
Fri Dec 12, 2014 4:40 pm
Forum: Beginner Basics
Topic: PPTP Server Interface
Replies: 2
Views: 2095

PPTP Server Interface

Hello guys i have a quick question, im trying to create a new PPTP Server interface and i cannot find the Option for it, only the PPTP Client one.


Any ideas???

Cheers.
by lyberis1979
Fri Dec 12, 2014 9:45 am
Forum: Beginner Basics
Topic: DHCP error message
Replies: 4
Views: 884

Re: DHCP error message

How is you DHCP and addressing set up? [admin@MikroTik] > ip address print Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK INTERFACE 0 D 192.168.10.17/20 192.168.0.0 WAN_1 PORT 1 1 D 192.168.10.75/20 192.168.0.0 PORT 2 2 192.168.10.1/20 192.168.0.0 PORT 2 I want to use Port 1 as a w...
by lyberis1979
Thu Dec 11, 2014 1:26 pm
Forum: Beginner Basics
Topic: DHCP error message
Replies: 4
Views: 884

DHCP error message

Good morning mates,

I have been stumbled in to an new error for me any ideas!!!!! Im loosing all the time the web interface.
by lyberis1979
Sun Dec 07, 2014 1:27 am
Forum: General
Topic: VPN site-to-site IPSec tunnel
Replies: 11
Views: 2324

Re: VPN site-to-site IPSec tunnel

I would always use IPSEC over PPTP as it is more secure....


Same thing with the IpSEC
by lyberis1979
Sun Dec 07, 2014 1:24 am
Forum: Beginner Basics
Topic: PPTP VPN
Replies: 2
Views: 670

Re: PPTP VPN

Any ideas...!!!
by lyberis1979
Sun Dec 07, 2014 1:23 am
Forum: General
Topic: Bridge WAN
Replies: 1
Views: 677

Re: Bridge WAN

Any thoughts!!!
by lyberis1979
Wed Dec 03, 2014 1:51 am
Forum: General
Topic: VPN site-to-site IPSec tunnel
Replies: 11
Views: 2324

Re: VPN site-to-site IPSec tunnel

Good Morning guys,

Relevant to your discussion I'm having issues with my PPTP connection, do you recommend IpSec tunnelling for LAN to LAN vpn??

Hi!
Do you have setup cilent-to-server by PPTP ?
Yes and every 20 minutes i get a dropdown and a redial after 2 minutes!!!
by lyberis1979
Tue Dec 02, 2014 6:50 pm
Forum: Beginner Basics
Topic: Dynamic IP Address from ISP
Replies: 13
Views: 2240

Re: Dynamic IP Address from ISP

Nice, Well not nice, but is good that you find the reason. They apply the same policy on my country (Perú) some time ago but oonly on residencial services

Can you believe that this would be solved if i get a static IP??
by lyberis1979
Tue Dec 02, 2014 9:39 am
Forum: Beginner Basics
Topic: Unifi Discovery
Replies: 6
Views: 2871

Re: Unifi Discovery

Good Morning,

Im using also UBNT as access point in work and home environment, have you tried to remove the controller and re-installing it. The other thing with UBNT is the adopting o network, try to reset the AP then connect it to your Network through an other Lan port on your MK.


Best regards.
by lyberis1979
Tue Dec 02, 2014 9:35 am
Forum: General
Topic: VPN site-to-site IPSec tunnel
Replies: 11
Views: 2324

Re: VPN site-to-site IPSec tunnel

Good Morning guys,

Relevant to your discussion I'm having issues with my PPTP connection, do you recommend IpSec tunnelling for LAN to LAN vpn??
by lyberis1979
Tue Dec 02, 2014 9:32 am
Forum: Beginner Basics
Topic: Dynamic IP Address from ISP
Replies: 13
Views: 2240

Re: Dynamic IP Address from ISP

This is the same that some ISP are doing on my country. The ISP is giving you the private ip 10.x.x.x/8 this is set up on their servers. On some router their nating several clients to the same public ip in order to not use to many ip. I know it is ugly but this is how they are doing. You only have ...
by lyberis1979
Mon Dec 01, 2014 6:26 pm
Forum: Beginner Basics
Topic: PPTP VPN
Replies: 2
Views: 670

Re: PPTP VPN

Any ideas guys.....


The VPN connection keeps falling in the CRS 109 also cannot hold above 13 minutes.


Cheers.
by lyberis1979
Mon Dec 01, 2014 3:23 pm
Forum: Beginner Basics
Topic: PPTP VPN
Replies: 2
Views: 670

PPTP VPN

Dear all, Good Morning, i have a quick question "as always" any ideas on the following. I have created a LAN to LAN vpn with a mikrotik cars 125 and Draytek 2950 and it never keeps the connection up for more than 30 minutes. Is there any option on the mikrotik that would help keep the connection ali...
by lyberis1979
Fri Nov 28, 2014 5:19 pm
Forum: Beginner Basics
Topic: Dynamic IP Address from ISP
Replies: 13
Views: 2240

Re: Dynamic IP Address from ISP

Think that you will not be able to connect the mikrotik outside your office if you have a private ip, maybe if you ask the isp to give you an port fowarding. But not sure if they would like. About fortinet really don't know about it, but some devices show they public ip no matter you have an privat...
by lyberis1979
Fri Nov 28, 2014 4:27 pm
Forum: Beginner Basics
Topic: Dynamic IP Address from ISP
Replies: 13
Views: 2240

Re: Dynamic IP Address from ISP

Yes it will private to use DDNS because your server or device doesn't use any public ip, this ip is shared by a lot of people. If they ISP can give you and Public IP Pool you can solve this issue, just in case you need public ones. Otherwise they are using 10.x.x.x/8 if you use any 192.168.x.x/16 y...
by lyberis1979
Fri Nov 28, 2014 2:56 pm
Forum: General
Topic: Bridge WAN
Replies: 1
Views: 677

Bridge WAN

Dear all, I'm trying to connect 23 WAN's to a MikroTik crs CRS125-24G-1S-2HnD-IN, all of the connection are ADSL lines and the modems are in bridge mode. The main purpose of this to load balance the network traffic between the users and not steam all traffic through my LMDS that I'm using for VOICE ...
by lyberis1979
Fri Nov 28, 2014 2:44 pm
Forum: RouterBOARD hardware
Topic: Point to Point Connection
Replies: 0
Views: 443

Point to Point Connection

Dear all, I'm planning to do connect the main office with the branch office "Point to Point" with is 10 / 15 KLM away, what is the best equipment that mikrotik offers for that task. The base network usage is 50 / 70 Mbyte per second. Between the 2 offices theres no visual obstacles. I will be more t...
by lyberis1979
Fri Nov 28, 2014 11:59 am
Forum: Beginner Basics
Topic: Dynamic IP Address from ISP
Replies: 13
Views: 2240

Re: Dynamic IP Address from ISP

This is the same that some ISP are doing on my country. The ISP is giving you the private ip 10.x.x.x/8 this is set up on their servers. On some router their nating several clients to the same public ip in order to not use to many ip. I know it is ugly but this is how they are doing. You only have ...
by lyberis1979
Wed Nov 26, 2014 10:12 am
Forum: Beginner Basics
Topic: Dynamic IP Address from ISP
Replies: 13
Views: 2240

Re: Dynamic IP Address from ISP

That's easy - you're behind your ISP's NAT. Good morning, How that possible!!!!! When you are having the same terminal for processing the IP address!!! Its not like it dial two times!!! That would be great ;). Being behind a NAT as my experience says you get only only one IP routed in a different N...
by lyberis1979
Wed Nov 26, 2014 10:06 am
Forum: Beginner Basics
Topic: Dynamic IP Address from ISP
Replies: 13
Views: 2240

Re: Dynamic IP Address from ISP

Hmmm this is interesting and I am not sure but curious if someone else chimes in. My thought is that your modem is not truely in bridge mode since you are pulling a 10. private subnet for your WAN? Could be totally fine depending on how your ISP is doing their address hand outs. Good morning, Have ...
by lyberis1979
Mon Nov 24, 2014 12:22 am
Forum: Beginner Basics
Topic: Dynamic IP Address from ISP
Replies: 13
Views: 2240

Dynamic IP Address from ISP

Dear all, Im new to the world of router boards my first one is a CRS125-24G-1S-2HnD-IN Cloud Router Switch. So bear with me in this one, i have a ZTE Router and i have set it in bridge mode // no dhcp etc. In the mikrotik i have plug it in the poe 1st port and in the quick settings panel i have set ...