MikroTik

spavkov

here is the solution: you must put a rule in IP>FIREWALL>FORWARD to forbid all packets going from WLAN interface to WLAN interface excluding the router ip... for exmple if your hotspot wireless network is 10.5.50.* then rule would be (if yor MT router is on 10.5.50.1): src-address=!10.5.50.1/32 in-i...

spavkov

I Have the same problem... each users is added to ACCESS LIST and has default-forwarding set to NO and still i can access their computers via pure microsoft file sharing... i go to MY NETWORK PLACES and SEARCH NETWORK COMPUTERS and i can find other users and then enter their shared folders... any id...

spavkov

is there a way to make VPN server/network on mikrotik???
on same prism wireless interface where the hotspot is running???

spavkov

I have this kind of situation: I have one Omni antenna and one prism wireless card with hotspot running on wireless interface... Hotspot has many users ( > 70) so i switched interface>wireless>DEFAULT FORWARDING to OFF so users cannot communicate between each other. They can only 'talk' to the route...

spavkov

odlicno, probacu i to...

Hvala na pomoci!

spavkov

Tnx

ili HVALA !!!!

poz
Slobo

spavkov

Hi! I have one ISP and they gave me one public ip and default gateway... but now i have one more ISP for test only... how can i use both of them??? in this situation i will have 2 public ip's and 2 dafault gateways... i have 70 wireless hotspot users on 10.5.50.0/24 prism interface and this network ...

spavkov

have a look at this thread :

http://www.mikrotik.com/forum/viewtopic.php?p=8695#8695

i think it will helpo you... read carefully...

spavkov

yes i think this is the best we can do... i tried this and it looks its working... and we raised our link speed also... :) tnx again to all people that helped in this thread... Specially to YOU BILL !!!! tnx a million times !!!! tnx for sharing your knowledge and tnx for having the patience :) Thumb...

spavkov

Tnx for the helping words man... now its little more clear to me... (i know im boring but this problem is really bugging me...) i still cannot solve my problem... it remains.... :( this is my last attempt: i have some customers that pay PER TRAFFIC and i have some of them that pay PER MONTH (this us...

spavkov

tried, its the same... with this kind of settings they still have priority over users without connection limit and they get guaranteed speed....

i dont know what else i can do...

spavkov

Hi I did this like you said, but these users then get guaranteed bandwidth !!! if traffic is high then all other users that dont have speed limit cannot use the web and these 'limitd' users have 'smooth' speed of 8kb/s... something is wrong here i tell you... i been testing this for days and i get t...

spavkov

Is there a way to give unguaranteed bandwidth to users...

for example to give to one user (ip) a unguaranteed bandwidth of 64kbps ???

if traffic is high then his speed would fall under 64kbps, but if traffic is low his speed would be maximum 64kbps...

any clues.????

spavkov

I have a lot of users (>60) and i would like to give to some of them (some ip's or some MAC's) unguaranteed bandwidth flat rate for example 64k... but it is important to say that i want that this users get max 64kbps if its possible, but if traffic is high then they will share bandwidth with other u...

spavkov

Then you should only set your WLAN1 interface property called DEFAULT FORWARDING to NO and property DEFAULT AUTHENTIFICATION to YES this way, when a new client comes into your public wlan he can authenticate and get ip address, but he cannot 'talk' to other clients because DEFAULT FORWARDING is off....

spavkov

If you want to block all communications between your hotspot users do the following : 1. disable the DEFAULT FORWARD on your wlan1 interface 2. go to wireless tables > ACCESS LIST and add in the list all your client's mac addresses and for each entry disable option calleed FORWARDING... thats all, i...

spavkov

Hi! first of all thank you for your reply... im am aware of the possibility of queue trees, but i dont understand how can i make that users dont have guarantied bandwidth but only LIMITED bandwidth to some value... for example 64kbps... is it the LIMIT AT or MAX LIMIT option ??? and is it possible t...

spavkov

HI all! i have a lot of hotspot users and limited internet bandwith...(only 256kbps) i gave to some of my users 64kbps flat by limiting their Tx Bit Rate in ip>hotspot>profiles menu... this works fine until all of my 'flat' users try to surf at same time... and if my other hotspot users try to surf ...

spavkov

normis , thank you !!!

your clue solved my problem 100%....
i guess my knowledge of mikrotik is still not so advanced...
but with help of this forum, i learn every day...

THANK YOU A MILLION TIMES !!!

Slobo

spavkov

Hi all! i have a small problem that i would like to solve... i have two interfaces... one wireless prism interface with hotspot set up on 10.5.50.1 and other interface is ethernet NIC with 192.168.1.0 network... mikrotik has a 192.168.1.1 address for that second ethernet interface... and i have a ft...

spavkov

hey jarosoup !!!

Thumbs up man!!!

your clue solved my emule problem !!!

tanx a million times !!!!

.

spavkov

Now i put destination nat firewall rule to NAT all incoming traffic to TCP port 4662 to one ip address (for example 10.5.50.39) and then its all working fine... it looks like this in destination NAT firewall rule : dst-address=:4662 protocol=tcp action=nat to-dst-address=10.5.50.39 to-dst-port=4662 ...

spavkov

Hi Does anybody has some expirience with setting up mikrotik firewall so that users behind MIKROTIK can use EMULE program ...??? it seems that my users always get LOW ID when they log on some EMULE servers... and their ul/dl speed is not fast as it could be (only2-8 kb/s) I opened the ports that are...

spavkov

hmm...

tnx for advice people....

maybe i will disable default forwarding after all...

tnx again for your help guys.....

Respect!

spavkov

Hi! Thanks guys for your replies, i tried all that but windows file sharing still works... Because i have hotspot and enabled address login method my users can log in to hotspot, but also they can skip the login procedure and communicate between themselfs freeely because default forwarding is ON... ...

spavkov

Hi! IS there a way to forbid ONLY the widows file sharing between my users. This need to be done to users that are logged in into hotspot, and also to users that are not logged in... how this could be done??? maybe firewall > forward chain???? one thing: i DO NOT want to turn off DEFAULT FORWARDING....

spavkov

Tnx alot guys, your answers were helpfull !!!

spavkov

Hi Recently i noticed some strange connections inside of my router... when i go to ip>firewall>connections i can see something like this: Flags: U - unreplied, A - assured # SRC-ADDRESS DST-ADDRESS PR.. TCP-STATE TIMEOUT 0 U 10.5.50.1:3987 10.5.50.45:1060 tcp established 10h15m24s 1 A 10.5.50.4:4021...

spavkov

Im not 100% sure that i understand what is your problem but maybe you should check out this link if it solves some of your problems:

http://www.gpsinformation.org/hotspot/m ... irect.html

Greets

spavkov

GREAT !!!!

now its working.... i only needed to open port 3987 !!!

Tnx alot to everybody that posted replyes and specially to user JAROSOUP !!!

Thumbs up man!!!

spavkov

[slobo@Kula1] ip firewall rule output> print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; account traffic from hotspot servlet to hotspot clients
src-address=:80 out-interface=wlan1 protocol=tcp action=jump jump-target=hotspot

??? any ideas... im clueless...

spavkov

in log it looks like this... nov/12/2004 15:27:01 input->ACCEPT, in:web, out:(local), src-mac 00:e0:5c:46:08:15, prot TCP (ACK,PSH), 80.74.168.131:49525->x.x.x.x:8081, len 80 nov/12/2004 15:27:02 input->ACCEPT, in:web, out:(local), src-mac 00:e0:5c:46:08:15, prot TCP (ACK), 80.74.168.131:49525->x.x....

spavkov

here are my input chain firewall rules: x.x.x.x is my public adress of ruter 192.168.1.2 is my local web server 10.5.50.1 is my hotspot gateway [slobo@Kula1] ip firewall rule input> print Flags: X - disabled, I - invalid, D - dynamic 0 ;;; winbox from web #1 dst-address=x.x.x.x/32:8081 protocol=tcp ...

spavkov

its all like you said but it still does not work... i must tell you that im running wireless hotspot on this router... and my firewall input rules are just like mikrotik-howto's manual says: /ip firewall rule input add protocol=tcp connection-state=established \ comment="Allow established TCP c...

spavkov

Hi! Can anyone tell me how i need to configure mikrotik firewall so that i can use winbox to access it over internet ??? i use 2.8.17 mikortik ! i opened ports 8081 and 3986 but when i try to connect to router xxx.xxx.xxx.xxx:8081 , the winbox displays message ''downloading plugins from xxx.xxx.xxx....

spavkov

It look that this disconnecting problem happens with clients that have signal of around -60 dbm...

that is what i can figure out...

spavkov

Thank you for prompt repy.

I will send support file with detailed description of problem at 15h when i get home...

Greets
Slobo

spavkov

I have strange problem... Im running hotspot with universal client and enabled-address method and have 13 (!!!) users.... i also use pheenet 1watt amplifier and 15db omni antenna.... some of my clients that have good signal strenght are loosing connection in intervals of 5-10 minutes... Client lose ...

spavkov

I had the same problem.

I solved it like this:
WHen users gets his 'temp' address, then he should start browser and in URL he must enter address of your hotspot server.
In my configuration its 10.5.50.1

when you try to open this 'page' you should get login screen in browser...

i hope it helps..

Search found 39 matches

users of hotspot comunicating while DefaultForwarding=OFF??

2 ISP-s (gateways,IPs) for one Mikrotik routed network ???

how to give unguaranteed bandwidth to some users ????

need help with hotspot profile TX and RX Bit Rate limiting !

Tnx!

Why users that connect to ftp have same 192.168.1.1 address?

mikrotik hotspot users having problem with EMULE!!!

hot to forbid Windows file sharing in wireless ???

strange connections on my MT router !!! please look at this!

How to access the Mikrotik with winbox from internet side?

Thank you

Clients loosing connections in iregular intervals on 2.8.17

try this