MikroTik

TomosRider

For this setup, you need "smart" switch, or simply put, switch that can separate VLANs.
When you get one, you can then assign VLANS on ports.

TomosRider

I must add, i have this working by adding DNS for clients that is Domain DNS on other side of a tunnel.

TomosRider

Thanks mkx!

TomosRider

DHCP Client on Bridge is unnecessary IMO...

TomosRider

anav, thank you. You provide so much for this forum, and we all love you for that. Your answers are unique and wholesome. Yes, i know something about networking and i am familiar with mtik devices. Im trying to understand flow and what would be IN and what OUT interface in my case and i think we are...

TomosRider

Hello friends! I am creating firewall rules for our client and i have some doubts and i hope you guys can help me. I allowed all protocols and ports that i need. Added explicit DROP rule to drop everything else on the end. To make internet work from our clients side, i had to allow LAN segment on fo...

TomosRider

Upgraded some more HEX routers...so far, so good.

TomosRider

Good news! We have been using MT devices across our network for a long time and planning to do so in the future. Implementing one solution that will help to update and backup configurations would be great. Also, integrated netinstall feature(if possible) would solve so many unnecessary on site trave...

TomosRider

I didnt find any issues with this version. Great job guys!

TomosRider

Hello guys, i have been around mikrotik devices and seen a lot of stuff, tested and pushed in production. We are using all that this awesome brand has to offer. This year i decided to let my inner artist go wild and created a small frame for our good ol wrap board...its old, dirty and still working!...

TomosRider

Antient bug....i resolved it with provided ssh regenerate command. ROS v6.49.2 on multiple boards.

TomosRider

Here are my two cents, sorry if i revive an old discussion. I have Mikrotik all across my company. Wireless solutions, critical services, hotspot solutions, you name it. We use a wide range of MT products, from Dyna Dishes for our links to 1100AH series of routers. I just love these pieces of techno...

TomosRider

If this topic is still active, i would add my solution. I added accept NAT rule before masquerade rule, with src of local subnet and dst remote local subnet. I updated both of my routers to newest ROS and in ipsec profiles, de-checked NAT traversal option. Rebooted both routers. I was able to ping a...

TomosRider

Hello guys!
I noticed this problem today. Found malicious script under system/scripts.Remove it.
Upgrade ROS did'nt helped.
Change your passwords, block port 2008, turn off ip/socks!!!

TomosRider

Try to set ping gateways, so when one fails, other link is hot backup.

TomosRider

Poor connection?

TomosRider

6.35.4-------->6.40.5 with ease.

TomosRider

1100AHx4 for Home? Seems a bit...heavy, eh? *Marty McFly refference*

TomosRider

Wow, ranting about affordable routers? Nice...

TomosRider

My 2 cents... For some reason, i found that UBNT devices do a better job at bridging. So that makes it for me, 2 ubnt devices for link, Mtik Routers at the endpoints.

TomosRider

check-gateway ping is a solution.

TomosRider

Follow what @Jarda said and youll be fine...

TomosRider

Hello guys.
Maybe helpful hint: Can WInbox have a bar where you can see actual version of ROS of router you manage?

TomosRider

Listen to Pukkita, he's an old school network cat and knows stuff.
Second, i suggest Dyna Dish as reliable and quality solution for covering such distance. I have couple of links that performs smooth for almost six months now.Never had any problems.
Cheers!

TomosRider

I dont know are you asking real questions here or this is joke.
SMTP and POP3 are protocols for transfering mail that you set in your mail client, it has nothing to do with MikroTik.

TomosRider

First, you should bring a Cisco router as a sacrifice to Netwerkus, the great and allmighty god that resides deep inside the caves of layer7. Once you have summoned him, loudly say:copper cables are crap!
and you should gain his trust. With his help, you should pull this off in no time.

TomosRider

Little suggestion:It would be nice to see ROS version from list panel in Winbox. When you add your routers list and then when you open Winbox, you can just see version and decide where to update ROS etc.

TomosRider

Just do it...

TomosRider

Hello there. We have all been there. For me, the best thing for understanding the basics of networking was reading books for CCNA certiffication, watching CBT videos, doing labs on GNS3 and YT. Todd Lammle is my favorite, cuz i started from scratch, with very little previous experience. Grasp the co...

TomosRider

Dont mess with sys architecture, guys...

Mipsbe, tile, ppc...read before you download and worst of all, implement in production...

TomosRider

http://wiki.mikrotik.com/wiki/Vlans_on_ ... nvironment

Try with this.

TomosRider

What you mean by you cant set BW on interfaces more than 10MBps? What speed your network is?
In Winbox, on every interface, you should get menu where you can change the values for BW. Do you have admin privileges on device?
Mtik default setting for auto negotiate is on, so check that too.

TomosRider

Maybe it shouldnt have relation to this, but i had this kind of problem once and updating ROS was solution, after all that i've tried.

TomosRider

Well, give me more info of your setup. As i understand, you need to connect Groove as client to...which AP? Do you use same eqipment or is it mixed vendors? What kind of setup do you need? Basically, all you need to do with Groove is to set the quick set to station bridge, it should work fine, if we...

TomosRider

add bridge=bridge-local disabled=yes interface="ETH 3 - Public LAN"

TomosRider

Hard mode: Try using the packet sniffer on the router to find how whatsapp communicates and then block it with the firewall. I haven't used the packet sniffer on RouterOS, but looking at it quickly, I would set whatsapp up on a control device and then filter the packet sniffer on the interface you'...

TomosRider

Pukkita explained very well. 100+ from me!

TomosRider

Nice post! It will help folks who are choosing adequate equipment for their links. One question regarding Dyna Dishes..arent they License 3 devices? Can they act as AP? Or i can just switch conf to PTP server/client? Any routerboard that has level 3 can be used in PtP. Just set radio to bridge func...

TomosRider

First, never use release candidate(RC versions of ROS) in your production.
Second, disable firewall rules and then check.I suggest you to erase current config(backup first, ofc) and to configure your device from scratch.
If you still get this problem with new config, its time to netinstall.

TomosRider

You answered yourself. You can add port range 5560-5588, for example.

TomosRider

Nice post!
It will help folks who are choosing adequate equipment for their links.
One question regarding Dyna Dishes..arent they License 3 devices? Can they act as AP? Or i can just switch conf to PTP server/client?

TomosRider

This...without NAT Masquerade rule on your private subnet, you wont be able to go on internet...

TomosRider

I have the same prob, mate.

TomosRider

Sorry to dig this thread up, but i have this issue bugging me for some time. On several Mtiks, all RB1200 and couple of 1100AHx2's, this is happening. Links have this RX overflow increasing. Not much of a problem, but im trying to figure it out. What is the solution for this? I will try rx control o...

TomosRider

For all people who blames MT for failing updates....test this update first on your testing gear, not on the production. Common sense, but still...

TomosRider

For a user who doesnt get involved too much with Mikrotik, its not that simple, probably you've missed something in your config. Anyway, glad that you solved the problem.

TomosRider

Simply add bridge interface, add to its interfaces your wlan and eth interface that will connect to your computer and that should be it.
Remove any DHCP server settings if there are any.

TomosRider

Test various frequencies, that is in allowed range, offc. Did you tried using NV2 wireless protocol?

TomosRider

Can you recreate queues?Delete or disable the old ones and then try. There should be no problem with the queue feature.

TomosRider

What version of ROS is running on device? Try with ROS update.

TomosRider

Nanostation is not a good solution on that distance, in my oppinion. Try to change your devices with something more reliable on that distance, like GrooveA 52HPn. Check if Groove can do what you need and go for it.

TomosRider

There should be no problem using your routerboard with this version of ROS. Try it.

TomosRider

Dont complicate things. Simply add 2layer switch to ether2 on your router and then attach both of your computers to switch. Problem solved.

TomosRider

Give that man his God damn blood earned karma points!!!

TomosRider

Nice...

TomosRider

ZeroByte strikes again...

He explained everything you should know and apply to your setup. I can only add, bridge mode to your AP...

TomosRider

Grooves should be OK, it has enough CPU power and memory available.
Im using Groove as AP on one of our hotspots and it handles about 50 clients.

TomosRider

Well...is it working?

TomosRider

Look at DUDE, but try to get version 4.03Beta. From Dude you can easily monitor your environment.

TomosRider

Have you configured some additional Firewall rules?
Whats in log?
Try to downgrade to 6.33 or 6.28, this versions works for me just fine, 6.33.3 showed some bugs.
Also, check if your clients have good signal strenghts and CCQ on your APs.

TomosRider

What about Winbox? Its a pretty powerfull managing tool.

TomosRider

Hello.
Im not the expert about the LB topic, but i assume you need to play with mangle rules here.

TomosRider

Hello.
What is the problem exactly? Do you have access to your router? Can you ping your device? Did you leave common services/ports enabled? Telnet?SSH?

TomosRider

Hello. This is a common bug that i had once, too.
First, try to disable Windows firewall. Delete your cloud instance, restart GNS3 and then create cloud instance again. This worked for me. Cheers!

TomosRider

What about NAT bypass? Is that solution worked?

TomosRider

Nat rule configured?

TomosRider

C'mon guys, stop complaining about not developing Dude for all existing platforms! Be a little more greatfull that this briliant and most of all FREE tool is back. I know that is is not hard to install somekind of free virtualization tool, install mikrotik and use free license, and finally install ...

TomosRider

Hello Soap.
Give more info on your config. Did you set your NAT/Firewall rules correctly?

TomosRider

Try to add it through DNS menu.IP\DNS. Avoid quick set as much as you can.

TomosRider

Be sure that netinstall software is same version as your ROS.

TomosRider

Sorry for delay. I hope you managed to resolve your problem.
Only solution to this problem, as far as i know, is performing netinstall and upgrade to the latest ROS to ensure that you have the most stable platform. Had couple of routerboards with this problem.

TomosRider

Have you properly set your default gateways? Can you ping them? DNS setting? Check firewall rules, maybe you got some rule that prohibits traffic.

TomosRider

Directional antennas are a must if you want to improve your signal strenght.
That said, check your CCQ, the higher it gets, the better. Upgrade ROS to the latest stable version.

TomosRider

Yes, create a new rule with action accept on those ports.

TomosRider

Hello guys. I have been through thick and thin searching forum and web but i didnt find answer, at least, i didnt find what i was looking for. What i am trying to achieve: i have a 2950 switch which is trunking already VLANs from another site. I want to make trunk to my rb750 and i want to make 2 po...

TomosRider

It would be nice if you rewarded their time with some karma points..just sayin'.

TomosRider

Well, every time you connect your pc, you get opened browser with login page, customized with my company logo.
Unfortunately, i cant pass you the script cause i dont have permissions to share company properties.

TomosRider

Hah, i dont see any reason to react like this, but ok..it reflects your frustration. Im not going to tell you about my qualifications, would probably get you even more frustrated. I dont see this conversation going in positive way, im sorry that my post offended you. All best at your future projects...

TomosRider

Reading the rfc will enlight you in the way you cant imagine...

If you are want to connect sites using VPN, l2tp with ipsec is just fine.
GRE is used to encapsulate all kinds of other protocols.

TomosRider

Why has no one responded???? I just cant understand? This is the strangest forum I have ever been part of, it takes 24 hrs to get a topic/question on the site and then nothing? Does any one know of a better place to get more instant responses? I have sat patiently waiting by my computer for now the...

TomosRider

Caluamba, i can give you mikrotik wiki page, its full of good examples and explanations. http://wiki.mikrotik.com/wiki/Manual:TOC There is no shortcut, but i think if you have basic understanding of TCP/IP, you should do just fine. Remember to experiment in safe mode if you are working from remote s...

TomosRider

Try to find MAC of router by using winbox on neighbor router. Ip/Neighbors and try if you can mac telnet your router. That is the case if you can see your router from there, offcourse.

TomosRider

Switch from bridged to routed network.

TomosRider

Well, i have hotspot and customized login script and it starts default browser automatically after connecting CPE's to AP.

TomosRider

Netinstall is only solution.
https://www.gowifi.co.nz/userguides/per ... nstall.pdf

TomosRider

As far as i understand, you need to setup 4 interfaces, except if you are using IPS or IDS, but there is no need for external HW firewall because you can setup your mikrotik to act as a statefull firewall. For example, you can assign eth1 to act as WAN(your internet gateway), add second ip scope for...

TomosRider

Can you ping NAS from your computer? Did you checked your firewall hits?

TomosRider

Strange...i have disable button and it works like a charm...ROS ver 6.27 on RB1200...

TomosRider

Hello. For first question, you need to setup hotspot server on your eth1 interface. You will need to setup dhcp on that interface too, but i assume you already did that. From my perspective, you dont need bridge. You can add custom html login page, you have a lot of examples on the web. You can also...

TomosRider

Hi Caluamba.
Can you give us more info?
For what purposes you need setup? Are you going to have some wireless networks? Do you need to use firewall? Is this your core router? How big is your network? Do you have need for dynamic or static routing?

TomosRider

You can disable or leave the services on, its up to you as netadmin. However, for reduced security risk, if you leave certain services on, you can add address or segment from which you can access your router, so lets say that you minimalized the risk of attack.

TomosRider

Let us try to clarify: Your WAN port is ETH1 on Mtik? Check for log on mikrotik, it should have some info about link problems if they occur. Post them here. Use Winbox for managing your Mikrotik devices, more convenient, easy to use and user friendly GUI. Set hotspot server with network segment that...

TomosRider

No problem mate, im glad i can help. Make sure you cover every lab on end of every chapter, it will help you grasp the basics under your belt. Now, offtopic, but i need some clarification:How much is worth of MTCNA? I have my CCNA's on routing and security, i thought about getting Mtik cert tracks, ...

TomosRider

Hello.
Try reading Todd Lammle book about CCNA, it really covers everything you need to pass almost every networking CERT.

TomosRider

Connect it to port 1. Reset. Try to ping default ip 192.168.88.1.
If this is not helping, try to netinstall the device.

TomosRider

If your licence allows, upgrade your ROS to latest version.

TomosRider

Nice work guys!

TomosRider

What about this-
add address=192.168.88.1/24 comment="default configuration" interf
network=192.168.88.0
What interface is assigned with this ip?

TomosRider

Check your firewall rules in input chain.

TomosRider

My advice...change your ISP. You pay for it, right? Why would you bother to make up your own scripts for doing other man's job? If he cant solve this,i suggest you to skip this ISP.

TomosRider

after upgrading my RB450G to 6.30 UM shows following error frequently

A synchronization error has occurred. Click "Ok" to re-synchronize

Please help

Which ROS you had before upgrade?

TomosRider

Why bother? Normis has given you easiest and quickest solution possible. Since you are new to ROS, i suggest you to do it normis-style...

TomosRider

Im with you Jarda.

TomosRider

I can't drive my car. What is the problem?.... You should provide much more info. None can answer such question.

Lol'd so hard...thank you Jarda!

TomosRider

I understand the volume of this work and i can appreciate all the effort Mtik staff is putting to get this thing done. I offer myself to help in any way possible.

TomosRider

Since the architectures are different, im affraid that configuring your new CCR from scratch is the only option, but hey, its not a bad thing. I always preffer configuring my routers from beggining, you get that little experience of syntax typing. You can try uploading backup from your 2011, but im ...

TomosRider

Any news about this?

TomosRider

I have custom html in folder named hotspot. Before copying it into file folder in mtik i erase everything from files folder and then copy my folder. Never had any problem.

TomosRider

There is nothing wrong with your firewall setup, its pretty straightforward. Go to tools\profile and from there you can check what is going on with firewall CPU usage.

TomosRider

Well, you can always try. My opinion is that this wont work. Anyway, try it and tell us your results.

TomosRider

Using VLANs in this case is one way to achieve your goal, but that unmanaged switch is questionable. Can you skip that switch in your config?

TomosRider

Can you post your setup? If its all configured properly, it should be ok.

TomosRider

Turn it off, just in case, i had similar problem.

TomosRider

Maybe its not the case, but do you have some popups that are blocked when you do this?

TomosRider

Add default route 0.0.0.0/0 to that gateway of yours.

TomosRider

Search for hairpin NAT examples...

TomosRider

@Infused
I roll 6.28 release on 90% of our company routers and its by far most stable version, but to be honest, i didnt had problems with 6.27 either.

TomosRider

Ofc, you can add whole subnet if you want.

TomosRider

I think that 50 stations per AP is reasonable amount.

TomosRider

Hello. I will share my view on this topic. First, you need to get straight on what is that you want. From my perspective, getting your CCNA's on routing&switching and security would be great starting point. MIkrotik offer MTCNA and you should check this too. You have several great authors out th...

TomosRider

This config is easy to solve with Cisco using VTP. Im curious about solving this issue on Mtik.

TomosRider

Simple question...when using winbox, are you connecting through LAN interface?

TomosRider

In address you put your subnet that you want to cover, in this case 192.168.2.1/24, Network is 192.168.2.0 and whtever interface you want to assign that address.

TomosRider

Thaaaaannnk you Steve!
Its always pleasure to read all your articles about Mikrotik.

TomosRider

http://wiki.mikrotik.com/wiki/Manual:Netinstall

You have example here....

TomosRider

Place TP Link IP in IP/Addresses and assign him that .2 segment. No need for adding static routes, Mikrotik will automatically add route to your tp link.

TomosRider

Do you use SSH/telnet often on that router?
If you use winbox to administer your devices, simple disable SSH/telnet in services....

TomosRider

Let me get this straight. You want to connect 2 routers physically, for example, for lab purposes? If thats the case, just assign IP's in same subnet for 2 interfaces that routers are connected to. Mikrotik will do the rest, youll have dynamically assignet route and you'll be able to reach your netw...

TomosRider

Yes, i agree and i follow the same logic. The more you know about locking yourself to outer world, the safer you get. Simple as that.

TomosRider

Tnx bro.

TomosRider

Following the guru here, i can add one thing:you are never 100 percent secure. Security patches, educating yourself about possible threats over network, but most of all...common sense.

TomosRider

Tnx for reply mate!
I just wondering in which way this go. I understand the whole port forwarding thing, but i just want to understand the direction of data flow in this case. DST NAT-outside to inside ports,Firewall chains-inside to that specific ports(80 and 443) in my case. Am i right?

TomosRider

Hello. From my perspective, you should put first adresses or lists that you want to allow, then drop everything else.

TomosRider

Guys, this was killing me to understand properly so help me to avoid jumping from the bridge....:) One of my coleagues asked me to "just open ports" on our mtik 750....in firewall. I did it with this: /ip firewall filter add action=accept chain=forward src-address=192.168.10.0/24 protocol=...

TomosRider

Try with 6.27, i found it stable as unicorn population in Scotland. Just kidding, its good release.

TomosRider

Loosing of static dhcp leases is still present. I can solve it with netinstall, but question is, why it isn't solved with newer releases....

TomosRider

Not trolling eh?

TomosRider

So basically, fasttrack is skip the firewall and run like a pegasus for packets?

TomosRider

@Mteeker
+1000000000!!!!
I agree with you. One more thing, it would be nice to have a some kind of learning guides through MTCNA, MTCRE etc....but its not the topic here.

TomosRider

As Pukkita said, do all that and on router enable DHCP server on that interface that you are connecting your switch.
Add address pool that you want and it should be done.

TomosRider

What switch do you have? If its unmanaged L2 switch, you cant.
Your router can be DHCP server and assign IP's from its address pool that you create for it on specific interface.

TomosRider

Use the Dude. Its classic.

TomosRider

Well...im not sure is it really possible so ill just shoot the question. I have about 15 Mtiks and i have ftp access enabled on them, using it to retrieve backup and export files weekly. My question is, can i create some kind of script which will change password on every Mtik in internetwork, withou...

TomosRider

Check/create appropriate firewall/nat rules.

TomosRider

Check your interfaces on Mtik. Are they showing 1Gb or 100Mb's?

TomosRider

Question is too unspecified, but let me try...
If you want to go full Mtik, and want best value for your money, i would recommend RB433AH's with suitable antennas.
You will also need cards for 433's, ubiquiti has good models, check their site.
Read forum topics.

TomosRider

The more details you provide, bigger the picture of solution...man, i sound like Confucius and that stuff...

TomosRider

I think that guy is just trolling.....

TomosRider

TomosRider

Hi.
You can add your config prints here, so people can help you out.

TomosRider

You can do what Jarda said or you can just simply add network address under ip/services/winbox. After that, only address/address range will have access to router.

TomosRider

None of these. You need TILE packages.

TomosRider

Portable command guides are more than welcome....
Can we expect some kind of case studies in which we can lab and test various types of configurations?

TomosRider

Niiice! RB750 with more CPU power....that was bottleneck of old 750's...

TomosRider

Please fix issue with loosing static DHCP leases after reboot.....

TomosRider

After upgrade, same thing...also, cant create backup anymore. When i try to create backup file, i get message:critical error creating backup file:could not read all configuration files.
RB is 1200, running smoothly for months. Mtik staff, have any idea how to solve this problem?

TomosRider

Just following what pukkita said, route AD is the key. Router will choose route with smaller AD and if it becomes unavailable, it will go on second route.

TomosRider

One thing that happened yesterday, but i saw earlier posts about this....after power loss, Mtik lost all static DHCP leases....running ROS 6.27, will do update to .28.....any ideas why is this happening? No bad blocks....

TomosRider

If you administer your network, you should know that log is your best frend. More info, easier troubleshoot.
Clear log? I cant see how this would be a good thing. About "cleaner" view of debug outputs in log, you can simply filter this by enabling/disabling logging information.

TomosRider

Nice topic!

TomosRider

RB1100AHx2 is PPC architecture.

TomosRider

I didnt read your first post cause im writing this as i type another config, but you can do it by allowing just this 2 subnets and drop everything else in ip/firewall tab.

TomosRider

No it cant handle that. It has 400 mhz CPU and in my opinion, its way too weak. I have couple of 750s and they struggle between 20-25 megs, no added firewall/nat rules, just plain tcp bw test... 1100 is different story.

TomosRider

http://www.firewall.cx/networking-topic ... modes.html
Here you have nice explanation and some examples of ipsec modes.

TomosRider

Check your firewall rules. You may need to configure some firewall/nat rules...give more info. Where is that 192 segment?

TomosRider

Not sure i understand, but if you want to ommit logs on your router, you can achieve this by disabling some outputs in system/logging/rules.

TomosRider

Hello Ocavid. Can you ping your gateway from 172.16 segment?
Add default route. 0.0.0.0/0 with gateway of your 192 segment and it should be fine.

TomosRider

From you screens, seems so. Best solution, test it. Try to start some torrent client from PC behind router and if it works, you failed. SImple as that.

TomosRider

Just following what Tod said, at that time, 433AH was best buy. Reliable, strong, and mixed with powerfull cards and dish, you could achieve stable long distance links. I really didnt look for netmetal and now im reading its specs...it looks pretty damn good for that money. One thing that concerns m...

TomosRider

Using GRE, you are sending packets over VPN, your network dont need any kind of translation. For IPSEC its important to see true IP's so it can encrypt it and establish tunnel between peers. IP address destined for IPSEC tunnel matched with ACL, for example.

TomosRider

This should be VLAN related topic.

TomosRider

Let me share my situation. We have link which is 24 km. From hardware there is 2x RB433AH's and 2x30Dbi dishes. I had little problems with strange disconnects, you can see it in my topic here. Little tuning and useful advices and link is stable now. I can get about 30-40 Mbps. At the moment, the bes...

TomosRider

Testing this release on couple of 750's...so far, so good...

TomosRider

This topic is great example of learning stuff through troubleshooting steps. Bookmarked!

TomosRider

Hi MikroLix. From what i understand, yes, you must take course with certified trainer. Mikrotik doesnt have self-paced learning program or other methods to earn your certification. In Serbia, there is a 3 day courseware and after that you take online test for, example, MTCNA. For now, it's the only ...

TomosRider

I am currently on ROS 6.28 RC20. I am having an issue when upgrading to ROS 6.28 that my connectivity totally breaks. Let me describe the issue I am having. Currently I am using a CCR1036-8G-2S+ with a bonded link using 2 1 Gbps ports using LACP to my switch. Over the bonded link, I have 3 VLANs, V...

TomosRider

AAAAAAAANYWAY....to conclude this, combine both, virtual and real world, read mikrotik wiki about concepts, search this forum for topics that interest you the most, practice and you will be fine.

TomosRider

ZeroByte-true guru of this forum....:) My thoughts on this topic are, you can always go for real gear cause i find it best practice. 2-3 RB750's are insanely cheap and affordable, you can practice all kinds of scenarios and most of all, you will gain that experience that you need in this moment. Ofc...

TomosRider

ICMP type 3/ code 3 means destination unreachable. Since you have user logged from that address, i suppose that this is ok.

TomosRider

Simple...no.

TomosRider

Who said anything about upgrading actual in-production SSTP servers? Pull a router out of stock and configure it as a temporary/test SSTP server. If you have no spare RouterBoards sitting around, fire up a copy of x86 RouterOS on a spare PC, or heck, even as a VM inside of VMware or something. Ther...

TomosRider

Well, yes, but im always on hurry so i skipped checking log..

TomosRider

I had cases where i copy .npk files and then after reboot, device simply wont upgrade.Copy again in files dir and then copy to packages directorium...worked for me once. First mark old npk's for uninstall, ofc

TomosRider

Hello.
From which i understand, you search for a way users can skip the login process in hotspot? If thats the case, you can achieve this using ip binding feature.

TomosRider

Forward chain. Input is for protection of router itself.

TomosRider

Steen, did you try Netinstall or just copying .npk files?
For me, 6.27 is a good release. I have it running on couple of routerboards and on those never had kernel panics, sudden reboots or resets. Everything that i have set on earlier releases (5.x) working like a charm. Big plus from me!

TomosRider

Little flash update on this topic:after upgrading ROS to 6.27 and little tuning and listening to some of suggestions from you guys, link seems to be more stable than before. Zero loss of connection and clear log...awesome! Tnx again guys!

TomosRider

Just want to say, great work guys....salute to MIkrotik staff!

TomosRider

SImple power outage and BOOM! Bad blocks, corrupted files etc.

TomosRider

Jurgen gave you all the info you need. There is no stupid questions, we are all here to help.

TomosRider

No info on release date of .28?

TomosRider

Tnx Tod!
I will certainly update ROS and than test it.

TomosRider

All you need to know you get from this message.
In other words, peers didnt established secure channel.
Can you give us more info on your ipsec setup?

TomosRider

Why to use vlans if everything has to pass everywhere?

.

Very good point!

TomosRider

Well...no. This states that you have configured dhcp server for that subnet. It gives out ip's for every arp request if you run hotspot service on your router, for instance. You can add addres ranges for your specific needs, for example, your range from 10-254 if you need first 8 addresses to be res...

TomosRider

Tnx guys!! Will try this tomorrow morning...

TomosRider

@n21roadie-i dont know exact model names but i know that they were the best possible solution atm...colegues did the research and purchasing part. @zerobyte-what can i do to tune this? I tried HW retries and TDMA setting, but i still have this disconects and that message in log.....tnx for hint anyw...

TomosRider

Maybe i skipped something, but...did you try HW reset?

TomosRider

Just check your firewall/nat....

TomosRider

Sorry for lack of info.
I have AR92xx Atheros cards, LOS is clear, TX/RX signal is -54/-53 Dbm, CCQ 89%

Search found 212 matches