MikroTik

hgonzale

Yes Mr. You are totally right. I have in another customers the paid no-ip...... like in my office But others doesn't want to pay it .... then. we have this And yes, you are right. Thank you Hello. This is a nightmare... WOW... many customers complaining. Many are in GC-NAT (not real IP address) and ...

hgonzale

Thank for being in my "side".... Hello. This is a nightmare... WOW... many customers complaining. Many are in GC-NAT (not real IP address) and then I can't log on even knowing the real ip. Nightmare.. Routers in remote, isolated area, even in another countries..... SHIT I'm sorry but I cou...

hgonzale

Hello. This is a nightmare... WOW... many customers complaining. Many are in GC-NAT (not real IP address) and then I can't log on even knowing the real ip. Nightmare.. Routers in remote, isolated area, even in another countries..... SHIT

hgonzale

do you like mine?
432 days
65 TB download
almost 18 TB uploaded

Is just a RB2011.
Many L2TP-IPsec VPN and big queues....

hgonzale

Hello my friend. If both "routers" are "inside" network (not public IP) and you can't redirect ports, is IMPOSSIBLE" for reaching each other. Both are inside and is not possible to communicate directly both. The only "way" is finding somebody with a public IP allow...

hgonzale

Do you have the routes?

In A you need to create a router with info about what is under B, and in B you need to create a router what is under A

hgonzale

Hello, maybe is because I don't understand everything, but since the latest version 6.44, now I have a: Entry unreacheable in all the routers and the L2TP/IPsec is not working anymore. When somebody try to connect, I got: no auth method defined for peer. Of course, if I edit peer1 and change: local ...

hgonzale

Hello my friend. I am going to be many days at my friend place... How is your week this next week?

hgonzale

Did you try using mac address?

hgonzale

1.- First. check if you can reach the mikrotik, for checking is the DMZ is working well.

hgonzale

Is not a failure, Mikrotik is a kind of router where YOU HAVE total control.
In other ways, normal router=windows, mikrotik=linux

If you do: rm -f / you will DELETE everything.. no trash can.... just you know what to do..

hgonzale

I have also the same like you, but maybe smaller. The 2011 for desktop with full load (the average is about 80%), many IPsec VPNs running, 300 Mbps bandwidth,, shared with about 10 apartments, and is inside this with door and closed in the back https://www.ikea.com/es/es/productos/muebles-almacenaje...

hgonzale

I am doing the same like you.
I have two, and it depends of my luggage allowance and the destination (poor wireless there (coverage) or other things)
I have an old 751 and a new mini AP (very small).

hgonzale

Does he need the hotspot?
Or for him is enough direct connection?

hgonzale

The spanish is not a problem my friend. If you are going to help me, I will speak even Russian for you..... If I am receiving something, I need to make you easy as possible... Second, nice to know you can help me a little bit. You will get a recompense.. Tell me when you think you will have a little...

hgonzale

Ohhh sindy... Really you explain very well and you are teaching me a lot.... You will receive a present... of course!!!!! I am so gratefully with you. In other words... I was playing today a little bit at my friend's house and I didn't have luck, but was some minutes only playing I need to ask somet...

hgonzale

Tell us any info about it, and is helpfully to post your config...

hgonzale

Make NAT for the VPn's...

hgonzale

Super my friend. YES. In the main router I don't have 2 bridge, because the "friends networks" is directly in the VLAN interface. The DHCP server and the IP (192.168.12.x) is running directly in VLAN-300-eth9. Of course, in the RB493 (I the wireless is for me, and the eth ports are for fri...

hgonzale

Hello all my friends... First, I hope you are going to have a nice happy new year. Second, yesterday I was until 4 am reading and understanding and I think in my house I did well (you will review it now). I learn about: Add service Tag.. I was thinking is ADD the TAg, and not, is ALLOW the VLAN insi...

hgonzale

Thank you a lot to everyone. I will make changes and try to learn a little bit more in these "holidays".
I will keep you updated!
A big hug

hgonzale

Hello Sindy. Good day for you. Now I am here trying to help my friend. I did the cnfiguration in the switch but not luck. Even, I am connecting the VoIP phone (tag 21) directly on the switch (port 7) and not luck. Playing now with options!!!! But really, I don´t understand very well. I will take a M...

hgonzale

Hello my friend, me continuing with learning VLANs and saying THANK YOU too all my friends teaching me (you included) What is my idea/config, and this post is for correcting me, because is working, I think with little troubles (duplicated packets and sometime the dhcp giving wrong ip address). What ...

hgonzale

My friend sindy. I did another question some time ago, with a lan in my "house" and vlan and I am having troubles also, because I don't known well about it.
Can you send me a private and I will re open the post with the correct question.

Thank you!

hgonzale

Ohhhhhh thank you my friend for correcting me.
I will try the next week everything you say.

Thank you a lot!

hgonzale

Hello friend. I am back here and I solve something but still I am not able to get the VLAN in the other side I am sure the problem is me, because I don´t know exactly how to configure and handle the VLANs and the TAG. But first..... 1.- In the main ¨office¨ I need to create a new bridge and put VLAN...

hgonzale

I have some VPN between some routers. The routers have available some different encryption levels because some road warriors/clients has different support but I want to join some routers together and use in this situation aes-256-gcm, but if I have other options available... they use "always cb...

hgonzale

Yes, thank you. Even after I tried to delete some and it say I can't delete a post if there are new..
sorry

hgonzale

Yes my friend. Thank you for everything. I didn't finish, because no time. Really really I didn't connected the phone in the other place, but I discover a lot of.!
You are part of this!!!! Really.

hgonzale

Also you need to redirect the protocol ipsec-esp, is not only UDP and TCP... also you need to redirect THIS protocol

hgonzale

Hello friends.. I am at home I discovered the mikrotik is not the problem, is some package that is disabling the ETH in the switch, because I connected a mikrotik ETH5 with VLAN21 and DHCP client on that VLAN interface and I got IP from the VoIP network, is something on the configuration and this sw...

hgonzale

The last post from HERe jaja. If I plug a normal computer also the the ¨extrange¨ ports, the computer also works. The ports is not getting disabled.

What could make (security/etc) a port for getting disabled when plugging a mikrotik router.... wow...

hgonzale

I did a crossover wire and the port was disabled also. This is not the problem then.... Resume.. If a connect a Granstream phone with VLAN 21, priority 0, I got the IP from the voIP network on ¨Voip ports¨ from the switch (really, hybrid ports) But if I plug the mikrotik in the same port, it flash f...

hgonzale

I got. Is the VLAN 21. I entered in the PBX system I got a lot of info and now I configured I standar VoIP phone and getting the IP address for the voIP Movistar network: 172.24.196.0/24. Off course, I am not able to register the extension because even I know the SIP server values and login, I don´t...

hgonzale

I think I have this

http://support.huawei.com/enterprise/en ... oa-packets

I will try to clone the mac address

hgonzale

Now I am having another trouble. When I connect a mikrotik to any TAGGED port on the switch. The ETH port is getting disabled.
And after is not working anymore.
I need to restart the switch.
The switch is a huawei s5720-12tp-pwr

hgonzale

Hello mkx...
I am here, are you online? jajaja
I got the VLAN21 just for DHCP (I think so), there is a DHCP server running from the ISP on VLAN21..... but I have some more capture problems jajaja

hgonzale

Super super. Sorry... Is late my friend.. I will do/try tomorrow, I hope you will have good news, and EVERYBODY will know the VLAN for VoIP in Movistar Spain for "enterprise"...

Before doing everything, I will try Id=6 jajajaja

hgonzale

But, how can I sniff the packets on eth4 from eth3? Use /tool sniffer , set it to sniff off ether3 interface and save full packet contents. Afterwards fetch file to a PC and analyze it using wireshark. Tomorrow, you are welcome to connect to my computer. A virtual coffee I will send to you jajajaja

hgonzale

Super. I will download the software, but I thought the sniffer in mikrotik is not capturing this because in the manual says: Packet sniffer is a tool that can capture and analyze packets that are going to, leaving or going through the router (except the traffic that passes only through the switch ch...

hgonzale

I am in Spain. Where are you?
Do you have some pictures?

hgonzale

Tomorrow I will go to my friend's house.
I have a mini MK and a 751.
The only big question is...

I will put eth2 = switch in VoIP ports (hybrid)
eth3 = voip phone
eth4 = my computer

HW off....

But, how can I sniff the packets on eth4 from eth3?

Thank youuuuuuuu

hgonzale

Yes. Don't complicate with VLANS in this situation for example. eth2 and eth3 + wlan1 in BRIDGE-A with IP 192.168.50.x/24 and one DHCP server eth4 + virtual-wlan1 in BRIDGE-B with IP 192.168.60.x/24 and one DHCP server also even, you can give bandwidth to each bridge, PCQ queues and "play"...

hgonzale

Super, super. I will try to sniff the packets. Thank you a lot!!!! In Spain you have a room jajajajaja.... only tell me jajaja My assumption is that VoIP is carried over tagged VLAN from ISP's switch ... I'm pretty sure that phone number used for incoming calls is tied to phone's MAC address (or som...

hgonzale

And ONE stupid question. Because I don't understand anything about VLAN... Is possible for example for connect a device using VLAN (in its configuracion) pass across witch without taking out the VLAN ID in the TCP/IP heaader? Why is my "stupid question". Because if the phone has de ID=XXXX...

hgonzale

1.- I am not using really a router. The mikrotik switch in the eth7 is for connection to the ISP switch, and the ubiquiti to eth8. And eth3 is also for the "same switch" but in port for "data" 2.- I am using VLAN maybe because I am not expert in VLANs... I just "want" t...

hgonzale

In this week, I don't know what day, I will go to my friend house and I will try it.

I will use a mini mikrotik 3 port. I will put 2 ports in the same bridge with HW offload and using the sniffer from the same device, is this enough?

hgonzale

Yes my friend. I will try to find the ID of the VLAN

I know about my signature, how can I put the image for the signature?

Thank youuuuuu

hgonzale

Noo, I think is for me.... but, what do you want to do with this config?

hgonzale

Thank you my friend for your interest. But... for whats is this? Sorry if I don't understand Since the ISP cannot guarantee what devices may or may not be able to do (feature set), then I would suggest its a hard coded VLAN number (as mkx suggested). If so then for for the setup I would use the foll...

hgonzale

Yes Mr. I will try it maybe the next week. I hope is not auto sense.... just VLAN pre configured in the phone.

hgonzale

Thank you Mr. Is the way... you are right, they are hybrid ports. The menu in the phone is very very small (it has an admin access with 16 digits password jajajaja). and yes, I need to discover the ID. And I will try the next week to do the sniffer. Thank you for the HW offload. I didn't know it. Su...

hgonzale

Exactly I didn't know but thinking the ISP switch has "not different" between the "voip ports" and the normal ports, just the "voip ports" have a VLAN allowed.. then, when I connect this port to the MK Switch TWO times in the same bridge, I am getting the loop. GRRRRR H...

hgonzale

First, I will answer something and after I will explain what did I discover today 1.- The first 8 ports in the ISP switch are allowed to use VoIP. If I connect the ISP pre-configured phones to others ports, it doesn't work. It must be only in the first 8 ports. But I discovered if I connect a comput...

hgonzale

My friend. If I do this (I am trying now) I got a big one loop and in the logs, before the disconnection I got:

ethe3: bridge port received packet with own address as source (cc:2d:e0:2f:07:61), probably a loop

I think the switch from the ISP has the same mac address in different ports

hgonzale

Thank you, maybe I will try today. but a question
Does it means I will have only ONE bridge?
Not two bridges?

hgonzale

Thank you my friend for your answer. In the example is only with ONE bridge. I need to bridges, coming from different ETH... JOIN in a single ETH (I think 2 VLANS) and after in the another equipment, SEPARATE it. I will disable RSTP.... but, I don;t understand something from the example.. /interface...

hgonzale

I have a little trouble and I will explain first. The ISP at my friend location installed a Switch with 12 ports. 6 ports are only for VoIP (this own PBX) and the other 6 are for normal data. My friend has a little far away room (200 mts) we linked using Ubiquiti Nano.... but the Voip is not working...

hgonzale

I think the IP is coming from your ISP. They are doing NAT for many users and not giving a real IP to each one connection

hgonzale

connect successfully? at what speed the link?

hgonzale

ohhhh. and did you try another 100 Mbps equipment in the same port?

hgonzale

Has you tried another cable?

hgonzale

Super!!!!!!!!

hgonzale

No, still waiting a solution... Changing something and still the problem

hgonzale

RB4011 for you!

hgonzale

Mayeb the best for you is use a VPN service providing you a canonical name or fixed ip.

hgonzale

My friend, do you still need the VPN server with port forward?

hgonzale

I am having the same issues, hundreds everyday. Here my info, if somebody could help me..... thank you /interface ethernet set [ find default-name=ether1 ] comment="WAN Port FTTH" loop-protect=on name=ether1-gateway set [ find default-name=ether2 ] comment=Homero name=ether2-master-local s...

hgonzale

It depends my friend, but yes.... for and "power house" like mine.... I have 10 used, now I am using a RB493 extra like AP and Switch but my 10 ports are FULL right know, and the CPU average is getting high with everyday more VPN (L2tp + IPsec) users and the internet speed is getting highe...

hgonzale

Yes. Thank you my friend. And the FULL reloaded is the 4011, but I was "waiting" some little cheaper (between 2011 and 4011) jajaja
But if this is the answer.. PERFECT...
Waiting in Europe for try it.

hgonzale

Now, you are "selling/creating" very nice and new equipment like RB3011, hEX etc etc But the RB2011 still doesn't have a replacement. For example the RB has 10 ports, one model with very good wifi (2.4.... but wifi) and option for -non- rack mount. Are you planning to create a office/home ...

hgonzale

This progrma also show you interferences, not just WIFI... it show anything in 2.4 Ghz. Of course, you won't know what is.. but it will show "noise".
Dont you have a "normal" pc? jajaja

hgonzale

Ok. I understand you alsoi. Did you try Insidder for doing a good spectrum scan? sure, I know, I understand very well and I know it's not your fault! :-) Unfortunately, with a blocked router, we can not do anything, I can only buy an ac2 and set it up with your advice. two more things: channel 9 is ...

hgonzale

I understand your problem my friend, but understand also US and Mikrotik. If you can't change anything in the router and your have "wrong" (really is not wrong, maybe is not suitable for you) options... we can't do anything.... For you now maybe the best channel is channel 9 o 10... (but a...

hgonzale

The situation is RIGHT NOW. THe inferences could be a new microwave from a neighbor , a new wireless network.... is not a constant in the time, and maybe at 3 am you will have a super connection. You don't need access to the router for making a spectrum analysis, donwload InSidder and make a spectru...

hgonzale

Yes, but the interferences are NOT a "router" issue. Remember, in 2.4 Ghz thare are: Microwave oven, bluetooth device, PS3, Ps4 controls, all the OTHER WIFI surrounding, wireless phone (for fixed lines), video sender, etc etc ALll of those device makes interference in the WIFI, all are in ...

hgonzale

If you have issue with your speed using wire, this is not your problem, is ISP.....

hgonzale

Ohhh you have a DOT (decimals)... 1.106 ms means 1 seg and 106 ms jajajajaja NOT 1106 ms.... And with wire? Give me a frequency scan please... I'm sorry, those are the values during the issue with the fixed channel with incompatibility problems (few minutes connected then the connection dropped): 64...

hgonzale

My friend, please, setup the Wireless in the channel with lower noise. Fixed channel. Second, I think is impossible for measure a ping of 6.000.000 ms. It means you were waiting the "answer" for 6.000 sec = 1.66 HOURS. Is about 1:40 hours... There is not equipment for a ICMP timeout so big...

hgonzale

Disable IP Fasttrack/IP Fast PAth en IP Settings

hgonzale

Sindy.. if you tried it. perfecto..... And yes, you are focused on helping him with the wireless, and my, in the WAN (good team). Then... it will handle the 1 Gpps... and now, finish the topic with the wireless jejeje And for the last question, I don't think it will be a problem, it will work with t...

hgonzale

Ummm a LOT.... maybe this router is "small" for that. But I prefer an answer from somebody from mikrotik. Is this router cabale of getting 1 Gps using PPPoE with fastpath? the isp says 1000/300 and, granted, 300/200 I'm not yet at home so I can not tell more ... I live most of the time alo...

hgonzale

You are right... but I didn't want to explain so much,... the problem is the ONT from the ISP has the authentication in ONT, and you need to "hack" the original ONT, serials, etc etc etc and create a firmware for the mikrotik ont or something like that. Is not just plug the fiber and getti...

hgonzale

My friend. THIS IS WORKING perfectly
I didn't know it. WOWWWWWWWWWWWWWWWWWWW
THANK YOUUUUUUUUUUUUUUUUUUUUUUUUU
many routers for changing it right now jajajaja

hgonzale

OHHHHHHHHHHHHHHHHHH WOWWWWWWWWW Supper explainin!!!!!!!

That is the best answer!!!!

I didn't know how to do it..... amazing my friend

I will try later, but this is super

And yes, I always have only ONE CONNECTION.

hgonzale

But know for you is IMPORTANT you uplink/downlink REAL speed, because WE (all together) need to measure which one kind of CPU do you need for handling it. For example, look in this forum: movistar spain ppooe and you will find a lot of issues reaching 300 Mbps with certain equipment, because the enc...

hgonzale

I don't understanb, sorry give a name to the l2tp server? each connection to "me" has a name like: l2tp-username is already, but when the VPN client disconnect, the "name" disappear.... and disappear from all the references, but now I am doing like the first answer, using IP........

hgonzale

Ok. I understand and sorry for my bad english, is not my native language.... And "normally" (he doesn't say in that country is and the ISP) the ONT are only bridging, and in "many" times, the PPPoE is always in the router side, two or three times I saw the ONT doing like a router...

hgonzale

Maybe I am not understanding

He said:

FTTH - ONT - Router

and he HAS already the FTTH and the ONT..

He is going to buy the mikrotik and connect to the ONT he has already

hgonzale

He need the ONT my friend.
He can't connect the fiber to the router, and even, with a fiber module, he doesn't have the auth factor in the ONT.

hgonzale

Good. Then you need a PPPoE auth. Is a recourse usage protocol. Tell me, is really 1 Gbps up/down It could be "difficult" for getting this speed with a PPPoE encapsulation with THIS hardware. And after you learn how to work with RouterOS.. you will be do all in the router, even the VPN you...

hgonzale

ummmmmm interesting!!!!!!!
And yes. It makes sense!
I will try Mr...

hgonzale

Another question... how is you internet connection?

FTTH/VDSL/Cable?

Will you need an ONT before?

Will you do the authentication with PPPoE? This feature is a CPU usage, if you need to encapsulate the packages...

Or are you directly obtaining the IP address from the ISP bridge?

hgonzale

Many answers for many questions...but first, in resume.. OF COURSE mikrotik is a super option for router, maybe the best... but remember this... A normal router from the ISP is the following devices.. GPON (in FTTH)/MODEM (in ADSL/VDSL) + Bridge + Router + Switch + AP Mikrotik don't do/make directly...

hgonzale

I have some mikrotiks in differents countries and I have "mark routing" to some IP for going to that IP using that route. The problem is... I have a mark routing with the "vpn internface" but when the vpn is down, the vpn name dissapear, and all the relations are loose, when the ...

hgonzale

The cloud was created for DDNS resolution, and time sincro is a "secondary" service, but is not a NTP client/server

Use NTP client with a NTP server n1 or n2...

hgonzale

And whats is the maximum speed needed? One wire is possible for 2 links repated at 100 Mbps

hgonzale

Just an idea....
Is not possible for running another wire?
With two wires... no "hard" config....

hgonzale

IS not secure the winbox conection.

Please, activate VPN (l2tp + ipsec), connect to the VPN and after, to the winbox (not opened in the wan)

hgonzale

I have the follow configuration 1 RB2011 with eth9 with TWO VLANS 100 and 300 1 RB433 with eth1 linked to the RB2011-eth9 and the same two VLANS 100 and 300. but I am getting hundreds of this: 12:49:09 interface,warning vlan-100-eth9: bridge port received packet with own address as source address (0...

hgonzale

Please contact me, we have VPN for people like you... That live in "special countries" and I can help you..

hgonzale

I have a situation like you. Even, if they are in the same bridge and same "physical" networks, they have separated subnet, then for reaching each other the need to pass trough the "router". Simple add 2 rules for each network blocking the nat add action=drop chain=forward dst-ad...

hgonzale

I am almost sure that is NOT at problem, is a non-knowledge about VLAN in my side... I will explain my situation Vlan100 = VIP/private Vlan300 = others Network private: 192.168.10.0/24 Network public: 192.168.12.0/24 1.- Main mikrotik router 2011 with 2 VLANs. 100 and 300 id. VLAN-100 IP = 192.168.1...

hgonzale

1.- You can use a wide subnet. For example: 192.168.x.x/16 give you 64K of address. You can play with the subnet. 2.- In DHCP server poor you have an option called: NEXT POOL. When a pool address is empty, it will continue to the next one. But the option 1 in the correct in this case. A big one pool...

hgonzale

All mines are other mikrotiks..

I have a dialup pptp to my server without encryption but is not in the list.
They are only dial in, I need to extract the dial out, but I don't know to do

hgonzale

In my house now: (receiving) Flags: R - radius 0 name="casavzla" service=l2tp caller-id="186.xx.xx.xx" address=192.168.16.11 uptime=3d14h33m3s encoding="cbc(aes) + hmac(sha256)" session-id=0x81002F85 limit-bytes-in=0 limit-bytes-out=0 1 name="mayjo" service=l2...

hgonzale

Yes. It happens to me also, but know I didn't care about the disconnection because "now" it could happens to my links, but someday I will need a continuous link

hgonzale

Yeah, it doesn't matter the version.
It happens to me sometimes with some "routers".
Did you check if the IP is changing in one side. Maybe the problem (i didn't check it) is the IP changing from the ISP...

hgonzale

winbox works perfectly in linux with wine. Years using it.....

hgonzale

Ahhh ok ok. Thank you!
I have a 751 for backup, I will install it there then, and I will try to practice something!

hgonzale

RC? GA?

hgonzale

Why did you downgrade?
Second... Install the lastest, and the wireless must be included (i think so)

hgonzale

Hello. I am understanding now the VLAN concept and I think I understand it, but I have "problems" (becuase I don't know how to do it) and I will explain what I want, and maybe you can say me some tricks. First... Equipment and what is in each one RB2011 eth 1 = WAN eth 2 = master for 3, 4 ...

hgonzale

You question is "so big" my friend. What do you want to do? For what? It doesn't matter if is in a Warehouse, home,, office, company, if for what, and what do you want to do? Servers... trafficc, speed, domain, dhcp, dns, VPN's with other placers, or if you have "employees" outsi...

hgonzale

A friend replied you something very important, and I repeat A wireless communication is the same that TWO people talking Is we are separated for 200 meters, and in one side I have a loudspeaker, you in the other side, maybe you can listen me, but if you talk normally..... (a phone, tablet, without h...

hgonzale

Make a ping FROM the mikrotik, check the logs and try alto to ping your modem/router from the ISP. Is the modem in bridge mode? Could it be saturation? Have you tried capping the bandwidth just below your max speed to see if it will keep it alive? Thanks jspool I'll try that. BartoszP - Sorry I forg...

hgonzale

I have in my network two Mikrotik. A RB493 like switch and AP, and a RB2011 like Router+switch+Backup AP I realized in the 2011 I am able to see the traffic in each one switch port. I'd created 2 master (port 2 and 6). 3, 4 and 5 are slave of 2, and 7, 8 ,9 10 are slave of 6. And after a bridge betw...

hgonzale

Mikrotik are not simple routers STEP-STEP, they are complete system for network router/security and you need to know very WELL about TCP/IP and about RouterOS.

Is you want a CLICK CLICK router, Mikrotik is not for you!!!!

hgonzale

Partially my friend. One single download CAN'T be at 16 Mbps, because routes and protocols are involved. Of course, if you have 3 downloads or MORE, you can reach 16. But a single connection is not possible. OF course, if you can install equipment in the ISP side and in your side, you can get 16 Mbp...

hgonzale

you are not having a problem. Is normal In a 802.11g/a network with a link of 54 Mbps the MAX USABLE data rate is about 25 Mbps The real throughput for 54 Mbps is close to 25 Mbps.... The rest of data is protocol and other data In a 72 Mbps link is a little bit bigger Then, are coming protocols with...

hgonzale

I found the post..... searching and searching jeje

Read it please

https://community.ubnt.com/t5/UniFi-Wir ... d-p/277575

And because your Unifi won't have internet (they are not logged on), they will disable itself.!!!!!!

hgonzale

Super. And also, please disable the option in the Unifi Controller about cheking internet, because the Unifi AP won't have internet (its IP is not logged on), and It will be disable by himself because is without internet (stupid option like everything in the Unifi software) Disable this check and th...

hgonzale

Jajaja I am not paranoid with the CIA.. and even.. in personal, I am pro USA jajajaja (sorry for others) But my paranoid is with Venezuelan government and for the security of the journalist I am helping!!!!! And Venezuela government is helped by G2... sorry for talking about politicians jeje Thank y...

hgonzale

Ok, I will investigate myself, but in resume, aren't we able to use sha256?

I am providing free VPN for friends and journals in my country (Venezuela) for their own security, and I want to help them with the security...

hgonzale

phase1? Could you explain me a little bit!!!!

Thank you

hgonzale

not, mikrotik -- mikrotik

hgonzale

Yes but you are using SHA1 (insecure now) and the original post and me, we are having troubles using sha256

hgonzale

WINS server?
Setup in the IP option the wins server to your windows server

hgonzale

Simple, don't assign and IP address to ETH1..

hgonzale

One mistake

1.- You are going to be a DHCP client in ETH1... Don't configure an IP address on that interface

hgonzale

Of course, not problem
We have L4 licences at 29,99Eur/35US$ each one at today exchange rate.

Paypal payments accepted.

hgonzale

Whis this scripts that runs every X seconds # Use DNS Entrys and add Address to the Firewall Address-list # :foreach i in=[/ip dns cache all find where (name~"whatsapp") && (type="A") ] do={ :local tmpAddress [/ip dns cache get $i address]; delay delay-time=10ms # prevent...

hgonzale

Ig you are using Telefonica in Spain you have 2 options for getting the Internet valid IP address in the mikrotik 1.- Request Telefonica for the ONT only. You will take away the router (is a $#%#$%#$%) and you will have the ONT only working like media converter. You need to make pppoe client in the ...

hgonzale

We are able to provide you the licenses. Contact us in private

hgonzale

mukes, in your situation, you aren't connected ever. just ... connecting, but you never gets.... connected.

hgonzale

In general.... use your router like "two" routers. Eth1 = Wan 1 Eth2 (master), Eth3, Eth4 (for example) in Bridge = ISP1 Eth5 = Wan2 Eth6 (master), eth7, eth8 (for example) in Bridge = ISP2 Then, make 2 masquerade. With origin ISP1/eth2 outgoing to Eth1 and ISP2/eth5 outgoing to Eth5 Creat...

hgonzale

Try l2tp/ipsec in the router (even, is more secure) and you will be able to do in the iphone/ipad.

I have l2tp/ipsec and my ipad runs perfectly

hgonzale

Impossible. Is not a mikrotik issue, is a logical issue. How could you (the router) determine what is the correct destination between two packages?

hgonzale

Hello friend. I am using in some router (2011, 951, 751, etc) L2TP/IPsec (client/server).And sometimes, when the routers has many days working, the IPsec "service" stop working. I can't check the configuration (in winbox nothing appear) and in terminal, the commands hangs (no results) for ...

hgonzale

if you didn't explicit redirected the port from outside ton ONE IP inside, you won't have SMB traffic in the router form outside to inside.

If you virus/problem is inside, the routers is NOTHING there...

hgonzale

Hello my friend.
Where are you from?
I am creating a non-profit VPN server only for helping people in certain " countries", maybe like yours.
If you qualify for my VPN-server you can get an affordable bandwidth using l2tp-ipsec service

Write me in private..

hgonzale

Yes my friend. With this you can control de download of updates from Microsoft. This is not the problem. The updates are only "one time" by by update. The problem is the computr "sharing" all time the updates with other people. In a placer with for example "100 GB allowance ...

hgonzale

Very good my friend. Congratulations again. I've downloaded it today and is working well.

Suggestion. Add thousand separator " , or . doesn't matter if is american or decimal, but is easy for reading the bytes counts, memory, space, etc etc

hgonzale

Yes, please do it. Remember, the sum of limit-at of everything never could be greater than your guarantee bandwidth. Because the system will give ALWAYS the "limit-at" to each queue. And also, setup some importart queue/mangles to PCQ queue. Check this http://wiki.mikrotik.com/wiki/Manual:...

hgonzale

For you VoIP packets, setup limit_at, is the CIR.. minimum guarantee for this.
For example, 128k, it will be always HAS it... at least

hgonzale

For my an iPad is a big iPhone.

Only my recommendation y smaller letters, for more info in the screen.

hgonzale

Yes, is a great idea for microsoft, but very bad for us, the networks admins

hgonzale

Yes, for them is a solution, for us is a problem.

hgonzale

I have the same problem in many of my networks, and many are VSAT with limited bandwidth by month, and in one or two days, the runs off the allowance. I can check and switch off every computer under my control, but many times, the people brings their own computer and kill the bandwidth and allowance...

hgonzale

Amazing. Congratulations!!!!
Thank you!!!
Working in iPad with ios 8.2

hgonzale

Hello friend. I have a RB2011 with 2 WANs (eth1 = Vsat and eth10 = 3G/4G). The "default" and main gateway is the eth10, the masquerade for everybody is in this WAN. If I want some device going across the eth1, I do in the mangle a mark routing and setup it. Is good when I want to setup an ...

hgonzale

Maybe this is a estrange question, and I will try to explain better as possible my friends. Now, since today I have two WAN links WAN 1 = Tooway sat unlimited (uk IP) WAN 2 = 4G Movistar spain unlimited (spain IP) with restrictions: No VPN, No VoIP and some others. Then, I wan to USE both in the sa...

hgonzale

Ok. I tried the three option possibles, and is not working. The client is a MIKROTIK 2011, it is connecting to three other VPN using the SAME configuration. I created another VPN server (for other location) based on my other Mikrotik working, is a "copy" of the other which are working. I e...

hgonzale

Not, there is not double NAT.
what is the differecen between port-strict and without?

hgonzale

I know IP Pool for VPN must be in VPN, but still, is not a IP problem, is just is NOT connecting......

hgonzale

Where was the problem?

hgonzale

did you try a nmap/port scan to the router?

Do you have a outgoing firewall in the pc?

Had you tried other computer?

hgonzale

ACEEPT port 22 TCP in the interface desired and put the rule before the DROPS/REJECTS

Also, in IP, SERVICES enable SSH service

hgonzale

Add first the IP address of the NVR with netmask /32. If is a simple queue, is ready..

hgonzale

Read the example here in the forum, is a very good option. Read the post. Take a Lite router and practice yourself. And for european people, here the book.... http://www.amazon.es/gp/product/B005OY0JJY/ref=as_li_qf_sp_asin_il_tl?ie=UTF8&camp=3626&creative=24790&creativeASIN=B005OY0JJY&am...

hgonzale

Had you allowed the port 22 in the firewall, just before the ALL DROP rules?

hgonzale

Create a VPN between the Administrative NETWORK and the COMPUTER.

hgonzale

I have two locations, 1 with FTTH and other with VSAT. I want to make a L2TP VPN with IpSec between both. The dialout is the VSAT with a RB2011, it has 3 other L2TP client connection working perfectly. In the FTTP there is a 751, and the IpSEC and L2TP configuration is a copy of other (where the 201...

hgonzale

When you connect to USB 3g/4g modem, many time itis detected like LTE1 device. You need the setup the dhcp client in THIS new interface and make the NAT to this interfaces. Other times, the modem is a PPP "serial0" device, you need to setup a PPP client. Go to PPP, add a PPP Client and com...

hgonzale

I've been using the following script in many routers for sending email when its reboot: :while ( [/system ntp client get status]!="synchronized" ) do={ :delay 10s } :delay 10s /log info "time updated; uptime: $[/system resource get uptime]" :local es "$[/system identity get ...

hgonzale

Super. I know where setup it my friend.
Have a nice sunday my friend and thank you again

hgonzale

Ohhhhhhhhhh wow, so nice. Thank you a lot...... INcredible my friend, thank you. I understand now. However, I need to setup always something there, is a "mandatory" option in the winvox. If I setup DEFAULT o DEFAULT-SMALL, doesn't it matters? I don't have anything the the total limit, any ...

hgonzale

In simple queue, we can add to a SQ the queue type for download and for upload, for example we can add PCQ Down and PCQ UP for each one. But I don't understand what is the TOTAL QUEUE TYPE. If I set each in the corresponding PCQ down and UP, what will I set in the total queue type? Thank you, and ex...

hgonzale

I am asking about getting IP in the Router from the Bridge/modem, if your MK is getting the IP, not your clients

hgonzale

Pukkita, I need to add many sites (using names), then I want to add to the address list without IP (because, at the creaton moment, I don't know the IP), and using scripts it will determine the time in that moment. Then, I need to have in the first moment, hundreds of address list with the same ip. ...

hgonzale

Reviving this post hahahaha...
I have a similar situation from you my friend.

VSAT at 20 Mbp,s unlimited traffic, about 10 customer, with maximum 3 Mbps each one.

But, sometimes, the congestion give me about 2 or 3 Mbps..

How did you handle your request?

Thank you

hgonzale

Ohhh I will update my RB751 for testing and I will try.... Thank you.

hgonzale

I have some install with Tooway (Satellite internet) and RB 75x, 95x and 2011 in my house. Always everything is working great..... But.... you know, when you are using a shared service like satellite internet, the maximum speed is in papers, but depends of many factors, like network congestion, if y...

hgonzale

Thak you normis, but I have a question and my example... I have internet satellite and sometimes is down..... rain, problems, etc etc. For that moments, I want to use my cell phone 3g/4g like an AP, and I wnt my mikrotik 2011 to set like client for that network (cell phonme-mk) and continue using my...

hgonzale

You can also create a new bridge for the virtual AP (just the virtual AP in the bridge) and masquerade the network to your gateway and voila.....

You need to setup a DHCP server for the new bridge and assign ips, etc etc

hgonzale

After the automatically reboots, are you getting the IP from the DHCP?
This is a not normal issue, we need to know first what is happening and at 99% the, the problem is not in the mikrotik...

hgonzale

After weeks reading and doing sniffer in my on network and using win10 client, I have a nice list of address and IP for avoiding the Windows 10 Telemetry. I got a list of IP, with this, no problem, a address list and ready... But I have some domains-names and I want to use the following procedure: h...

hgonzale

Hello, maybe you are using Tooway or Hylas. Both are UK based companies, they have many reseller in Europe. Tooway assign Ip from few countries. They bought some IP from some countries and assign to everyone. I am in Spain but my IP is from UK (I am happy, I can watch UK programs ans subscribe to UK...

hgonzale

How much and what king?

I think Ka-Sat has a beam for middle east, and Hylas also....

hgonzale

Of course my friend. for example, I have a configuration like this (resume) Queue tree For all customer Max download youtube: 5 Mbps download Web: 10 Mbps Max download PCQ p2p 256k max download PCQ other not matching previously 5 Mbps And after I have simple queue for each one, with different times ...

hgonzale

You can seup different ISP for upload, controlling like round robin, or by service, or by IP, but if you don't controll both sides, you won't be able to get the sum of the UPs speeds. If you have 2 Mbps UP in one, and 5 Mbps up in other, you won't be able to have ONE upload at 7 Mbps. For that you n...

hgonzale

Exactly. The proxy provides control and cache for local "customers".
you friend needs is an encrypted VPN (L2TP+IpSec) to use the internet across your ISP.

hgonzale

Thank you my friend, but I have another queue for the WAN and it is for the UPLOAD, all traffic going out, but I have other in eth2-master for the traffic coming in.

hgonzale

We got the answer freemannnn jajaja Thank you a everyone.... Cloud = new marketing term for everything. hahaha but the cloud exist from ALWAYS... the emails always had been "cloud".. ok ok... if you had your own fixed ip and run the sendmail in your computer for your domain is not in the c...

hgonzale

Thank you Normis for your answer. But still I am stupid :) The router ( cloud router) is in your network. If my server are in Amazon EC2, what makes the difference in the routers? :) I dont imagine anything without routers, but it is my question. What is the difference apart the naming between a nor...

hgonzale

Ahhhhhhhhhhhhhhhh I understand.....
If FOR.... not TO BE a CLoud router....

Just, is like "enterprise", SOHO...... I understand now.

Thank you a lot....

hgonzale

Maybe I didn't found the correct answer in internet, but, what is a "CLOUD ROUTER" from Mikrotik? Because, for me, I understand a CLOUD service is some software/service/application/infrastructure that is in internet, and not in your building/organization. The email always had been CLOUD, b...

hgonzale

Remember, in a Wifi configuration, they are TWO persons (AP and client) talking each other. You are NOT doing anything if you put POWER in one side. When the other side answer you, if it is very low (cell phone) it doesn't have enough power to reach you. Creating do wireless services, you need to in...

hgonzale

I know is impossible to have two configuration (AP and Station) working together, but I use my router 75 as AP with virtual AP and 25% like Station and routing the internet for certain IP across the WLAN1 (Station). I realise I can't have the configuration for AP disable and the client enable, or AP...

hgonzale

From the computers, whats is happening if you do a nslookup searching anything?

What do you get?

If you switch off/on just the DNS in the mikrotik, does it solve the problem?

hgonzale

Hello friend, before I upgrade to a 2011, I had a 75x or 95x, it has just one switch port and one master interface for the land in resume, avoiding many lines, I had something like that: add comment="Download-total Ether" max-limit=20480k name=total-download-ether parent=ether2-master-loca...

hgonzale

I had a similar situation like yours with 75x and 95x routers. I dont know why, sometimes the link between two equipment (hardware link) start to changing and faultily. The last time was about two months ago between a Hudge 9650 Vsat modem and the 951 G router. The link must be at 100 Mbps but the r...

hgonzale

Hello, first, excuse for my ignorance. I will try to explain. I always use MK 75x, 95x where they have only ONE master interface for LAN in the switch. When I am creating Queue tree is very easy, because the first parent is ETH2-master.... and after comes all the rules for incoming with the correct ...

hgonzale

Could you contact me in private, for a remote assistance session?

hgonzale

Without a big analysis... I can see... The WAN is downloading at about (Rx) 12 Mbps, and the Bridge Local & Eth2 master are sending ~ 12 Mbps. This is the "same" for for download in the computer. = 1.9MBps Now, a stupid question.... What is your IP configuration for the PC? First, why ...

hgonzale

If you computer show you 10 Mbps download... you can see..... In simple queues... download is download..... 10 Mbps download, for the ip, group ip or something and upload is upload for that... in queue tree.. you need to specify the interfaces... WAN for outgoing.... or ppp or whatever.... and wirel...

hgonzale

For explaining.. Think you are a router.

Upload. All traffic going out from you, maybe in lan or in wan

Download. All traffic coming to you....

hgonzale

Thank to everyone, but... How can I get a FULL list for the Microsoft download servers and keep updated? and remember, now the updates could be gotten from other users. I think, still, the way is using layer7..... But I am not an expert and I am asking hahahah I disabled always in every place the DN...

hgonzale

Yes, I know it, but the computer are not always the same, and think... if a familiar is coming to a house for stay the weekend.... A friend... somebody.... I can´t be asking everyday to all my friends... Is there a new computer? is a cousin, sister in law, etc etc coming to your house today? jajajaj...

hgonzale

Hello my friend. Thank you for your answer. I will explain. They don´t pay me for traffic, I am not an ISP, but some examples... I have a friend, she has SAT internet with 25 GB /month, I installed for her the Mikrotik, and AP with Ubiquiti PicoStation, and and ATA for VoIP. I filtered the p2p in th...

Search found 272 matches